Secrets of the Application Compatilibity Database (SDB)

By CodeExplorer
February 21, 2011 in Reverse Engineering Articles

Share

Recommended Posts

Posted February 21, 2011 (edited)

Secrets of the Application Compatilibity Database (SDB)
/>http://forum.sysinternals.com/topic18127_post91540.html

SO calls shim.dll whil loading process:

ntdll!LdrpInitializeProcess+0x1064:

7c9216b1 e829330000 call ntdll!LdrpLoadShimEngine (7c9249df)

ntdll!_LdrpInitialize+0x17e:

7c921634 e883040000 call ntdll!LdrpInitializeProcess (7c921abc)

Edited February 21, 2011 by CodeRipper

You need to be a member in order to leave a comment

Sign up for a new account in our community. It's easy!

Already have an account? Sign in here.

Sign In Now

Share

×

×