🚀 go-pugleaf

Hi,

"Mariusz Grecki" <grecki@dmcs.p.lodz.pl> wrote:
>Hello all,
>
>It is a shame, but I can not import a function from
>kernel32.dll by index. Using the name it is possible
>but by index GetProcAddress fails returning NULL.
>What I am doing wrong?
>

It is really problem.
See my old answer about it:
http://216.101.185.148/scripts/isapi.dll/article?id=1A5ED5FD&article=3187234

Vladimir.

"Mariusz Grecki" <grecki@dmcs.p.lodz.pl> wrote in message
news:3e8165eb@newsgroups.borland.com...

> Using the name it is possible but by index
> GetProcAddress fails returning NULL.
> What I am doing wrong?

You should be using MAKEINTRESOURECE, not LPSTR.  By using LPSTR, you're
passing the wrong value to GetProcAddress(), whereas MAKEINTRESOURECE
ensures the value is formatted correctly:

    BeepB = GetProcAddress(hlk32, MAKEINTRESOURCE(10));


Gambit

Hi,

"Remy Lebeau \(TeamB\)" <gambit47@yahoo.com> wrote:
>
>"Mariusz Grecki" <grecki@dmcs.p.lodz.pl> wrote in message
>news:3e8165eb@newsgroups.borland.com...
>
>> Using the name it is possible but by index
>> GetProcAddress fails returning NULL.
>> What I am doing wrong?
>
>You should be using MAKEINTRESOURECE, not LPSTR.  By using LPSTR, you're
>passing the wrong value to GetProcAddress(), whereas MAKEINTRESOURECE
>ensures the value is formatted correctly:
>
>    BeepB = GetProcAddress(hlk32, MAKEINTRESOURCE(10));

It is not exactly.
Off course you absolutely correct as a Perfect Programmer.
It is not good to use types that do not correctly coorrespond 
to meaning content of variable. And I agree with you in 
this case.
But practically both line give us the same.
It is possible to see it by debugger or CPU window.

The real problem it what I write in the reffer page in 
my another message: Microsoft did it specially to disable 
debugging kernel. That is funny.

Vladimir.

I can't enter in my ref.
So I put it here:

..
When I read these messages I remember old Matt Pietrek's book
"Windows95 System Programming Secrets" . 

..
And he tells that GetProcAddress is key function for Win95 because it works
with dll. The changes that was done for security:
1) There are no possibility to call GetProcAddress by ordinal for some
non-documented API function for KERNEL32.
2) There are no possibility to call GetProcAddress for functions from
system dll (>2GB boundary) in the debug mode (Ring3 restriction).
But Matt Pietrek say that it is funny because any good programmer can
write your own version of GetProcAddress if he know format of PE-module.
..

Vladimir. 

Thanks for informations,

I spend huge amount of time only to gain knowledge
that M$ does not give the full information in MSDN!
Now I understand the problem and can find solution
by analysis of the PE format of kernel32.dll or other way.
However I wonder how it is made by internals of
Delphi compiler/linker, because I have Delphi program
(rawwrite - written by John Newbigin ) that declares
------------------------
function  LoadLibrary16;         external kernel32 index 35;
procedure FreeLibrary16;         external kernel32 index 36;
function  GetProcAddress16;      external kernel32 index 37;
-----------------------
and that imports are done "automagicaly"!
I was trying to import those functions in BC++ Builder -
you know with what results.......
At this moment I have an idea to make a dll in Delphi
(using "automagic" importing mechanism) and to use this
dll from C++ program - I expect it will be easier than to
analyse the PE of kernel32 (I know, it is not to complex,
but .....)

Many thanks

Mariusz Grecki

Hi Mariusz,

"Mariusz Grecki" <grecki@dmcs.p.lodz.pl> wrote:

>However I wonder how it is made by internals of
>Delphi compiler/linker, because I have Delphi program
>(rawwrite - written by John Newbigin ) that declares
>------------------------
>function  LoadLibrary16;         external kernel32 index 35;
>procedure FreeLibrary16;         external kernel32 index 36;
>function  GetProcAddress16;      external kernel32 index 37;
>-----------------------
>and that imports are done "automagicaly"!

I do not know how Delphi do it.
May be Delphi "know" that kernel32 it is a "naughty boy" and 
use own way of mapping these function in virtual space of 
process.
I tryed to work with PE format and you can see my code in 
codecentral:
FindFunction seach functions in dlls on HDD (source)
http://codecentral.borland.com/codecentral/ccweb.exe/listing?id=18081
I prepare small article for BDN by they did not publish it.
May be my uggly English or another problems.

There are a lot Matt Pietrek articles in MSJ/MSDN that you 
can find in online.
Best Regards,
Vladimir.

Mariusz Grecki wrote:
> It is a shame, but I can not import a function from
> kernel32.dll by index. Using the name it is possible
> but by index GetProcAddress fails returning NULL.
> What I am doing wrong?
> 
> Example:
> =================================
> HINSTANCE hlk32;
> FARPROC LoadLibrary16;
> FARPROC FreeLibrary16;
> FARPROC GetProcAddress16;
> FARPROC BeepA, BeepB;
> 
> .............
>    hlk32=LoadLibrary("kernel32");
> 
>    BeepB=GetProcAddress(hlk32, (LPSTR)10);
>    BeepA=GetProcAddress(hlk32, "Beep");
> ...........
>    FreeLibrary(hlk32);
> ================================
> BeepA is OK.
> BeepB is NULL!
> 
> Any comments?

The ordinal for Beep is 13 in my KERNEL32.DLL. I was able to get the 
following code to work as expected (both BeepA and BeepB had the same 
value):

void __fastcall TForm1::Button1Click(TObject *Sender)
{
     typedef BOOL (WINAPI * BeepProc)(DWORD, DWORD);
     HINSTANCE hlk32;
     BeepProc BeepA, BeepB;

     hlk32=LoadLibrary("kernel32");

     BeepB=(BeepProc)GetProcAddress(hlk32, MAKEINTRESOURCE(13));
     BeepA=(BeepProc)GetProcAddress(hlk32, "Beep");

     BeepB(100, 100);
     BeepA(200, 100);

     FreeLibrary(hlk32);
}