search

YuriSizuku / win-MemoryModule

A flexible PE loader, loading module in memory. Most of the functions can be inline, compatible for shellcode.
MIT License
172 stars 66 forks source link

printf("%p\n", GetProcAddress(LoadLibraryA("kernel32.dll"), "readfile")); #8

Closed icyfox168168 closed 2 years ago

icyfox168168 commented 2 years ago

Serious problem, normally get 0, but can get the address

icyfox168168 commented 2 years ago

Can't you reproduce this problem? It is inconsistent with the return value of the function GetProcAddress. It should be a bug in the function character judgment.

YuriSizuku commented 2 years ago

I can not reproduce this. I think it is not a problem. Beacuse windows apis are case sensitive. Although module file is not. You should be careful about that, use as this

printf("%p\n", winpe_memGetProcAddress(LoadLibraryA("kernel32.dll"), "ReadFile"));