Re: Data in a 32 bit code section
- From: "rhyde@xxxxxxxxxx" <rhyde@xxxxxxxxxx>
- Date: 30 May 2007 10:33:31 -0700
On May 30, 9:02 am, HandyMan <luke77...@xxxxxxxxx> wrote:
Two questions.
Thanks.
Can Win32 apps have and use data in the code section ?
Thanks.
Yes, define the data as public and you can access it from other Apps
(e.g., C or assembly).
Question 2
Tracers interpret programs, rather than passing them straight to DOS
for
execution, some programs may exhibit slightly different behaviour
when
analysed than when executed. This is unfortunately unavoidable.
When a new file is loaded, the PC interrupt vector table
is copied into memory. All subsequent reads and writes to the first
1024 bytes
of RAM (vector table) are then redirected to the TRACER copy of the
interrupt
vector table. This allows programs to think they have changed an
interrupt
vector, but at the same time retains security by not changing the real
vector.
Anyone used one of these in a cmd window in XP ?
Do they still work.
No. Interrupts are handled in a considerably different manner in
protected mode.
hLater,
Randy Hyde
.
- Follow-Ups:
- Re: Data in a 32 bit code section
- From: Betov
- Re: Data in a 32 bit code section
- References:
- Data in a 32 bit code section
- From: HandyMan
- Data in a 32 bit code section
- Prev by Date: Nasm 0.99.01 available
- Next by Date: Re: Data in a 32 bit code section
- Previous by thread: Data in a 32 bit code section
- Next by thread: Re: Data in a 32 bit code section
- Index(es):
Relevant Pages
|
