|
From: Danny B. <dan...@sc...> - 2009-12-09 15:24:46
|
On Wed, 2009-12-09 at 15:01 +0000, Dave Korn wrote: > Also, what's going on there with the VMA/LMA for .data? It can't possibly > really be supposed to be 32 meg below the base address that the DLL gets > loaded at! Considering that these are "system DLLs", I am not sure whether what we're seeing is so wrong. I would expect coredll.dll to point into kernel memory and therefore not all rules for normal dlls to apply. Danny -- Danny Backx ; danny.backx - at - scarlet.be ; http://danny.backx.info |