Results 1 to 3 of 3

Thread: DakienDX --> Patching SHELL32.dll ???

  1. #1

    DakienDX --> Patching SHELL32.dll ???

    Hiya Dakien,

    Your allusion to kernel patching in another post peaked my curiosity...

    I've patched SHELL32.dll, the AutoRun.Inf part, so the AutoRun function is completely disabled, Windows doesn't even try to open the file, so the drive doesn't spin up to high speed when I open the explorer, but don't access the CD.
    If you could provide some details for this particular patch, I'd be most grateful From the sound of it, it looks like you may have found a way to fix one of my "pet peeves" with Win2k. Ever since I installed Win2k, I noticed that it had this annoying habit of freezing up "My Computer" or "Explorer" for 10-30 seconds whenever I insert a CD. I presumed this was related to the autorun functionality and attempted to modify a couple of keys in the registry for both disabling autorun and supressing the autoinsert notification message. It never really fixed the problem and I never dug any deeper into this annoyance. If your patch addresses this problem, I'd love to get some details so maybe I can fix it once and for all.

    Thanks,
    Clandestiny

  2. #2
    Snatch
    Guest
    A lot of times what you find when disassembling shell32 and applying symbols is that there is a registry key to disable so no patch is necessary. This is always of course the preferable way I mean thats what the registry is for . There are the few settings that are undisableable without a patch but not many.

    Snatch
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    DakienDX
    Guest
    Hello Clandestiny !

    The patch is for Win98. I quickly checked a SHELL32.DLL from Win2K, but I couldn't find it in there.

    You could fire up SoftICE and set a try to break on GetFileAttributesW. In Win98 I had PathIsUNCServerA and PathIsUNCSeverShareA before the call. I've checked the "W" variants, but I couldn't find any import looking for file attributes near.

    If you find something like this, you should be in a call. Trace out of the call and Nop out the call as well as the following jump.

    Sorry, but I can't tell any more at the moment since I've no Win2k to check it, so this is just a guess how it could work on Win2k.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Patching symbian exe
    By treby in forum The Newbie Forum
    Replies: 28
    Last Post: February 1st, 2008, 14:30
  2. Patching with IDA Pro
    By Palish in forum Tools of Our Trade (TOT) Messageboard
    Replies: 8
    Last Post: April 19th, 2006, 15:04
  3. .Net Patching
    By peterg70 in forum The Newbie Forum
    Replies: 7
    Last Post: August 30th, 2005, 08:59
  4. Patching .NET opcodes
    By Mr_BlacK in forum The Newbie Forum
    Replies: 23
    Last Post: April 2nd, 2004, 11:36
  5. Process Patching
    By evn in forum The Newbie Forum
    Replies: 2
    Last Post: January 22nd, 2004, 14:16

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •