the vbox version used for adobe golive 5 doesn't seem to use getprocaddress (or it can hide it!).
How can we defend from Wei Jun Li now?

can you make it available for me to test it with revirgin (which doesn't use getprocaddress )
I don't want to fill their form, mail me directly

I think it's an error, this target uses vbox430 actual dlls...

probably i made some mistakes, but i can't find a good eip (no jmp [some reg], only a call 401000) and the golive.exe imports itself like dll, and the program that drive the applications seems to be the "scl.dll", in few words, i don't know how to dump it. Can you help me in some way?