A
amit
Hello friends
Here is the entry of address mapping:
77E90000 Image 720896 5 ERWC C:\WINNT\system32\KERNEL32.dll
also:
77F80000 Image 483328 5 ERWC C:\WINNT\System32\ntdll.dll
I thought they should be in the kernle addres space which is higher
than 0x80000000.
Why they are like this?
Thanks
Here is the entry of address mapping:
77E90000 Image 720896 5 ERWC C:\WINNT\system32\KERNEL32.dll
also:
77F80000 Image 483328 5 ERWC C:\WINNT\System32\ntdll.dll
I thought they should be in the kernle addres space which is higher
than 0x80000000.
Why they are like this?
Thanks