|
-
May 19th, 2009, 01:10 AM
#1
i got something interesting in Windows DLLs
hello guys:
tht scenario, it's interesting and somehow weird,yesterday i copied OS's dll 'gdi32.dll' to c:\ from c:\windows\system32\,and i ran loadlibrary/getprocaddress things in a MFC dialogbox-based application, i'm sure tht i've locatted the function 'CreateCompatibleDC' from 'c:\gdi32.dll' correctly; then i invoked tht function,my app shown me a collapse of memory error,i can't understand tht, Ain't those OS dlls supposed to be available anytime anywhere?
-
May 19th, 2009, 05:36 AM
#2
Re: i got something interesting in Windows DLLs
Did you call it with correct arguments? And BTW, why would you do something like that?
-
May 19th, 2009, 02:04 PM
#3
Re: i got something interesting in Windows DLLs
several of the system DLL's simply won't work if you copy them to anothe rlocation or force them to be loaded in a different location in memory.
If you already have a GDI32, then force-load another GDI32 by copying the DLL to another location and calling loadlibrary... Doesn't surprise me at all it ends up crashing or not working.
-
May 19th, 2009, 06:57 PM
#4
Re: i got something interesting in Windows DLLs
 Originally Posted by Entrant_phil
hello guys:
tht scenario, it's interesting and somehow weird,yesterday i copied OS's dll 'gdi32.dll' to c:\ from c:\windows\system32\,
Hopefully you run this malware only on your own system and not screw up someone elses.
Regards,
Paul McKenzie
-
May 19th, 2009, 10:10 PM
#5
Re: i got something interesting in Windows DLLs
so i guess msft had something in OS DLLs as principle for security's sake, and yep i'd have this awesome procedure only running on my own system lol. thank you guys for replies;
have a nice day
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
Click Here to Expand Forum to Full Width
|