You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi, I've successfully loaded ntdll.dll, kernel32.dll, advapi32.dll. However I've failed to load both user32.dll and ole32.dll (all x64).
I'd like to ask whether or not is known limitation.
When user32 is initialized, ntdll!RtlInitializeNtUserPfn is called to set the callback function pointer. This routine will check whether it has been set before setting the function pointer. Since user32.dll has been imported by default, repeated calls to initialization will fail and DllMain will return FALSE.
ole32 uses delayed import, but loading delayed import is currently not implemented.
Activity
bb107 commentedon May 31, 2021
When user32 is initialized, ntdll!RtlInitializeNtUserPfn is called to set the callback function pointer. This routine will check whether it has been set before setting the function pointer. Since user32.dll has been imported by default, repeated calls to initialization will fail and DllMain will return FALSE.
ole32 uses delayed import, but loading delayed import is currently not implemented.
kscieslinski commentedon May 31, 2021
Great, thanks for explanation!