Jump to content

Recommended Posts

Posted

Yesterday someone asked if you could run runonce like runonceex, my reply was no, because there was no Functions in the dll.

However that got me thinking. In my system32 folder i have svcpack.dll. If i hex this file, it has the exact format of svcpack.inf. Also hexing it i find this:

C.a.t.a.l.o.g.S.u.b.D.i.r...D.a.t.a.....D.o.s.P.a.t.h.......$.w.i.n.n.t.$...i.n.f...S.V.C.P.A.C.K...I.N.F...P.r.o.d.u.c.t.C.a.t.a.l.o.g.s.T.o.I.n.s.t.a.l.l

To me, this is what the dll tells me through a hex editor:

1 - It looks for $winnt$.inf

2 - In $winnt$.inf it looks for the path in DosPath=, this will tell the file where the source files are.

3 - From this pack svcpack.dll looks for svcpack.inf

4 - From svcpack.inf, it looks for the required parameters

When i look at svcpack.dll's dependancies i see it has one Function: SvcPackCallBackRoutine. I'm guessing that setup runs this routine, which starts the svcpack.inf processing.

The question becomes is there anyway to process svcpack.inf without running setup? From this information i would assume all you need to do is edit DosPath= to the path with your svcpack.inf, then run rundll32 svcpack.dll SvcPackCallBackRoutine.

But this doesn't work. My intuition tells me this is possible and im missing something stupid. Does anyone know what im missing?

-gosh


Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...