自己实现GetProcAddress

DWORD MyGetProcAddress(  
					   HMODULE hModule,    // handle to DLL module  
					   LPCSTR lpProcName   // function name  
					   )  
{  

	int i=0;  
	PIMAGE_DOS_HEADER pImageDosHeader = NULL;  
	PIMAGE_NT_HEADERS pImageNtHeader = NULL;  
	PIMAGE_EXPORT_DIRECTORY pImageExportDirectory = NULL;  

	pImageDosHeader=(PIMAGE_DOS_HEADER)hModule;  
	pImageNtHeader=(PIMAGE_NT_HEADERS)((DWORD)hModule+pImageDosHeader->e_lfanew);  
	pImageExportDirectory=(PIMAGE_EXPORT_DIRECTORY)((DWORD)hModule+pImageNtHeader->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress);  

	DWORD *pAddressOfFunction = (DWORD*)(pImageExportDirectory->AddressOfFunctions + (DWORD)hModule);  
	DWORD *pAddressOfNames = (DWORD*)(pImageExportDirectory->AddressOfNames + (DWORD)hModule);  
	DWORD dwNumberOfNames = (DWORD)(pImageExportDirectory->NumberOfNames);  
	DWORD dwBase = (DWORD)(pImageExportDirectory->Base);  

	WORD *pAddressOfNameOrdinals = (WORD*)(pImageExportDirectory->AddressOfNameOrdinals + (DWORD)hModule);  

	// 函数名称 or 函数序号   
	DWORD dwName = (DWORD)lpProcName;  
	if ((dwName & 0xFFFF0000) == 0)  
	{  
		goto Ordinal;  
	}  
	for (i=0; i<(int)dwNumberOfNames; i++)  
	{  
		char *strFunction = (char *)(pAddressOfNames[i] + (DWORD)hModule);  
		if (lstrcmp(lpProcName, strFunction) == 0)  
		{  
			return (pAddressOfFunction[pAddressOfNameOrdinals[i]] + (DWORD)hModule);  
		}  
	}  
	return 0;  

	// 以序号的方式查函数地址  
Ordinal:  
	if (dwName < dwBase || dwName > dwBase + pImageExportDirectory->NumberOfFunctions - 1)  
	{  
		return 0;  
	}  
	return (pAddressOfFunction[dwName - dwBase] + (DWORD)hModule);  
}  

void main()
{
	// 函数名
	DWORD dw1 = MyGetProcAddress(LoadLibrary("user32.dll"), "MessageBoxA"); 
	DWORD dw2 = (DWORD)GetProcAddress(LoadLibrary("user32.dll"), "MessageBoxA");  

	// 序号
	DWORD dw3 = MyGetProcAddress(LoadLibrary("user32.dll"), (LPCSTR)0x110);  
	DWORD dw4 = (DWORD)GetProcAddress(LoadLibrary("user32.dll"), (LPCSTR)0x110); 
}