> If we don't want any user using a native advapi32.dll no matter what > the circumstances, shouldn't the default override for advapi32 be > *advapi32=b (no matter whether it's in a config file or the registry > or whatever)? If the user is not using a config file, where are the > default overrides stored btw?
Correct. There is a hardcoded list somewhere in the source. I forget where, I discovered it once. See if you can find it, and when you do, patch it to force advapi32 to be builtin. thanks -mike