Re: Re[2]: [ntdll] load all dll sections no matter what attributes say

[Kuba Ober]

> I have found a dll that have one section marked as
> IMAGE_SCN_CNT_UNINITIALIZED_DATA. But dll_init entry is jumping right to
> the beginning of this section. Which results in immediate segfault.
>
> So native mast be loading this section or this program wouldn't ever run.

As an alternative explanation, couldn't the native have loaded it on demand?

Cheers, Kuba Ober