Timeline for ImpRec invalid NtdllDefWindowProc_A seem valid
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 16, 2015 at 14:38 | comment | added | Jason Geffner |
Two ways to tell in this case: 1. The imports listed in your screenshot above are sorted alphabetically. If you look at the exports from user32.dll, you'll see DefWindowProcA is alphabetically between exports DeleteMenu and DefMDIChildProcA. 2. The function name NtdllDefWindowProc_A sounds like it might be a hook or forwarded-function for DefWindowProcA.
|
|
| Nov 16, 2015 at 11:16 | comment | added | Smiled_One | Its work! Thanks :-) How did you know to what name it should be change? command sense with experience? Or do you have a way that I will be able to use to? | |
| Nov 16, 2015 at 11:14 | vote | accept | Smiled_One | ||
| Nov 11, 2015 at 13:11 | history | answered | Jason Geffner | CC BY-SA 3.0 |