If we don't want any user using a native advapi32.dll no matter what the circumstances, shouldn't the default override for advapi32 be *advapi32=b (no matter whether it's in a config file or the registry or whatever)? If the user is not using a config file, where are the default overrides stored btw?
Correct. There is a hardcoded list somewhere in the source. I forget where, I discovered it once. See if you can find it, and when you do, patch it to force advapi32 to be builtin.
thanks -mike