Re: NQAR2 ?? Attention MIC

new topic     » goto parent     » topic index » view thread      » older message » newer message

> > 000000: 67 64 69 33 32 2E 64 6C 6C 00 00 00 00 00 00 00   
>gdi32.dll.......
> > 000010: 03 00 00 00 01 00 00 00 2D 00 00 00 3C 00 00 00   
>........-...<...
> > 000020: 4A 00 00 00 00 00 00 00 00 00 04 34 04 47 65 74   
>J..........4.Get
> > 000030: 53 74 6F 63 6B 4F 62 6A 65 63 74 00 53 74 72 65   
>StockObject.Stre
> > 000040: 74 63 68 44 49 42 69 74 73 00 53 77 61 70 42 75   
>tchDIBits.SwapBu
> > 000050: 66 66 65 72 73 00 00 00 00 00 00 00 00 00 00 00   
>ffers...........
> > 000060:

>   The size in bytes of the arguments doesn't match up or
>   I don't understand the the format.
>
>   GetStockObject arguments requires int (4 bytes) not 3C hex (60 bytes) ??
>
>   I'am very confused.
>   Please help me clear up my thinking.
>

The argument size for GetStockObject is stored at offset 2A. The "*n" in the 
format description means there are n of those, not just one.

new topic     » goto parent     » topic index » view thread      » older message » newer message

Search



Quick Links

User menu

Not signed in.

Misc Menu