If you explain what you are trying to do, we might be able to offer better advice.
Modern cameras (including a810) copy DryOS kernel code to RAM. It looks like the actual malloc function is still in ROM, but the underlying functions are in RAM, so you could modify them quite easily using the same approach as the task hook used in recent cameras (e.g. sx160, elph130)