#1135 Need two more DLL preloads in stub WinMain (2.50)

[Stephen Wassell]

Version 2.50 has LoadSystemLibrary calls in the stub WinMain function (Source/exehead/Main.c:109), preloading some DLLs to avoid the DLL search path vulnerability. However there are two more that need to be preloaded to avoid the issue on unpatched Win7sp1. Adding the following lines before LoadSystemLibrary("UXTHEME") fixes it in our testing:

LoadSystemLibrary("PROFAPI");
LoadSystemLibrary("DWMAPI");

[Anders]

How did you find this issue? Did you use fake dlls? RequestExecutionLevel admin or user? I'm unable to reproduce the issue with profapi.dll.