Discussion:
Why is ReplaceFileW exported with two different names?
(too old to reply)
Richard Russell
2010-10-13 16:08:19 UTC
Permalink
KERNEL32.DLL exports ReplaceFile (ordinal 699), ReplaceFileA (ordinal
700) and ReplaceFileW (ordinal 701). When you look at the entry point
addresses, you find that ReplaceFile (ordinal 699) and ReplaceFileW
(ordinal 701) are the same function!

Why? I've never seen this situation before.

Richard.
http://www.rtrussell.co.uk/
Kerem Gümrükcü
2010-10-13 16:13:17 UTC
Permalink
Hi Russel,

what version is the file and OS,...


regards

Kerem
Richard Russell
2010-10-13 17:29:28 UTC
Permalink
Post by Kerem Gümrükcü
what version is the file and OS,...
The OS is Windows XP, Build 2600, Service Pack 3.

KERNEL32.DLL is 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)

Richard.
http://www.rtrussell.co.uk/
Kerem Gümrükcü
2010-10-13 18:25:19 UTC
Permalink
Thats true! Except the export name, everything is identical, due to the fact
that they have the same address. I personally think that this is a
compatibility
thing with some Windows internal applications,...

regards

Kerem

Loading...