https://www.hacktech.cn/tags/%E4%BA%8C%E8%BF%9B%E5%88%B6/ Recent content in 二进制 on Akkuman 的技术博客 Hugo -- 0.155.3 zh-cn Sun, 04 Feb 2018 17:22:00 +0000 https://www.hacktech.cn/post/2018/02/windows-process-kernel-object-handle-table/ Sun, 04 Feb 2018 17:22:00 +0000 https://www.hacktech.cn/post/2018/02/windows-process-kernel-object-handle-table/ <p>当一个进程被初始化时,系统要为它分配一个句柄表。该句柄表只用于内核对象 ,不用于用户对象或GDI对象。</p> <p><img loading="lazy" src="https://raw.githubusercontent.com/akkuman/pic/master/img/c0264382gy1foaobsqowpj20nz05c0t3.jpg"></p> https://www.hacktech.cn/post/2017/09/windows-32-asm-note-basic/ Thu, 14 Sep 2017 22:09:28 +0000 https://www.hacktech.cn/post/2017/09/windows-32-asm-note-basic/ <h2 id="内存模式">内存模式</h2> <div class="highlight"><div style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"> <table style="border-spacing:0;padding:0;margin:0;border:0;"><tr><td style="vertical-align:top;padding:0;margin:0;border:0;"> <pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1 </span><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">2 </span><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">3 </span></code></pre></td> <td style="vertical-align:top;padding:0;margin:0;border:0;;width:100%"> <pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-fallback" data-lang="fallback"><span style="display:flex;"><span> .386 </span></span><span style="display:flex;"><span> .model flat,stdcall ;子程序调用模式，win32中只能用stdcall，因为win32api调用使用的这个 </span></span><span style="display:flex;"><span> option casemap:none ;定义了程序中变量和子程序名是否对大小写敏感，win32api名称区分大小写，所以只需要记住这个定式 </span></span></code></pre></td></tr></table> </div> </div>