
The reason for searching for the new base address I know is because I got this error after adding function:
I was able to get Memory.dmp by running nt4 on an old real computer but I couldn't find the real base Address. I tried entering the base address ollyDumpEX specified for me but it didn't work :
but the error changed :
kernel32 can not relocate address, so if i move it to the working address , it goes BSoD , at first , kernel32 use critial base address, so it goes BSoD suddenly. at next kernel32 use bad base address so it tried to move address , but kernel32 does not allow relocate address , so it shows such BSoD.
I think the range of the addresses not to use for Kernel32.dll.
Dealing with NT4 is difficult and it is not as easy to handle with it unlike 2000 and XP. But I am really surprised how junior600 in MSFN finds the real base Address .
He was saying he's working on CFFexplorer like I do !