process

More documents

Recommendations

Info

22 Use of ALPC ports Client address space Client process Connection port Message queue Kernel address space Server address space Server process Handle Handle Client view of section Client communication port Server communication port Handle Server view of section Shared section
23 Wow64 Allows execution of Win32 binaries on 64-bit Windows Wow64 intercepts system calls from the 32-bit application Converts 32-bit data structure into 64-bit aligned structures Issues the native 64-bit system call Returns any data from the 64-bit system call IsWow64Process() function can tell if a 32-bit process is running under Wow64 Performance On x64, instructions executed by hardware On IA64, instructions have to be emulated New Intel IA-32 EL (Execution Layer) does binary translation of Itanium to x86 to improve performance Downloadable now – bundled with Server 2003 SP1
Page 1 and 2: Core System Mechanisms and Windows
Page 3 and 4: 3 Object Manager (I) Executive comp
Page 5 and 6: 5 Executive Objects vs. Kernel Obje
Page 7 and 8: 7 Executive Objects (contd.) Object
Page 9 and 10: 9 Object Header Field Handle count
Page 11 and 12: 11 Object Methods Method Open Close
Page 13 and 14: 13 Handles and Security Process han
Page 15 and 16: 15 Handle and Reference Count handl
Page 17 and 18: 17 Interesting Object Directories i
Page 19 and 20: 19 System Worker Threads Created at
Page 21: 21 Port Objects ALPC exports port o
Page 25 and 26: 25 Wow64 File Locations Location of
Page 27 and 28: 27 Example: Cmd.exe on 64-bit Syste
Page 29 and 30: 29 Windows API - Overview APIs to W
Page 31 and 32: 31 Windows API Principles System re
Page 33 and 34: 33 Windows API Naming Conventions P
Page 35 and 36: 35 Differences from UNIX HANDLEs ar
Page 37 and 38: 37 Example Application Sequential f
Page 39 and 40: 39 Basic cp file copy program. UNIX
Page 41 and 42: 41 Basic cp file copy program. C li
Page 43 and 44: 43 Basic cp file copy program. Wind
Page 45 and 46: 45 Further Reading Mark E. Russinov
Page 47 and 48: Lab: 2013-9-23 Handles & ALPC
Page 49: ALPC Port Objects Use Winobj.exe to

process

Create successful ePaper yourself

Delete template?

Save as template?