Jump to content

New replacer method ?


Recommended Posts

Posted

Hi all :hello:

I'm searching to run a batch (or a program) which execute just beforce GUI mode of windows ("boot execute") same as checkdisk, or avast or partition magic ... I have tried with a classic batch but it doesn't work ...

The regkey to define is

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager]
"BootExecute"= ...

If anyone has a solutioe come on ! This method will allow to replace some dll with just one reboot ... :thumbup


Posted (edited)

Well, I do have an answer, but you're likely not going to be happy with it - with that said:

There are some limitations as to what can actually run in the "BootExecute" environmtnet:

1. Only applications can be run - not .cmd or .bat files, or any other type of file; only .exe applications.

2. The application must be a "native" application, meaning that it is linked with "-subsystem:native". No C run-time, no C++ lib, etc. Only applications that make calls into ntdll.dll.

3. The application MUST be built via the Windows DDK (Driver Development Kit) - with no exceptions. If it wasn't built in the DDK environment, it won't run properly in the "BootExecute" environment.

If you want some more help regarding ntdll.dll, the "Native" NT API, and the "BootExecute" environment, read information found in the Windows DDK. Google might pop up some hits too, but the DDK has a pretty exhaustive resource for the "BootExecute" environment and, more importantly, the Native NT API. I believe the sysinternals site has some information regarding ntdll and the Native NT API as well, or at least it did the last I checked a few years back.

Edited by cluberti

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...