Re: NQAR2 ?? Attention MIC
- Posted by "mic _" <stabmaster_ at hotmail.com> Nov 03, 2003
- 610 views
> > 000000: 67 64 69 33 32 2E 64 6C 6C 00 00 00 00 00 00 00 >gdi32.dll....... > > 000010: 03 00 00 00 01 00 00 00 2D 00 00 00 3C 00 00 00 >........-...<... > > 000020: 4A 00 00 00 00 00 00 00 00 00 04 34 04 47 65 74 >J..........4.Get > > 000030: 53 74 6F 63 6B 4F 62 6A 65 63 74 00 53 74 72 65 >StockObject.Stre > > 000040: 74 63 68 44 49 42 69 74 73 00 53 77 61 70 42 75 >tchDIBits.SwapBu > > 000050: 66 66 65 72 73 00 00 00 00 00 00 00 00 00 00 00 >ffers........... > > 000060: > The size in bytes of the arguments doesn't match up or > I don't understand the the format. > > GetStockObject arguments requires int (4 bytes) not 3C hex (60 bytes) ?? > > I'am very confused. > Please help me clear up my thinking. > The argument size for GetStockObject is stored at offset 2A. The "*n" in the format description means there are n of those, not just one.