updating memory links

This commit is contained in:
Amanda Rousseau
2017-03-13 15:57:59 -07:00
parent 4979ea8766
commit e8b52c44b4

View File

@@ -19,7 +19,7 @@ Typical windows programs are in the Portable Executable (PE) Format. Its port
In this workshop we will be focusing on user-mode applications.
### User-mode vs. Kernel Mode [1][1] ###
### User-mode vs. Kernel Mode [[1]][1] ###
- In user-mode, an application starts a user-mode process which comes with its own private virtual address space and handle table
@@ -50,7 +50,7 @@ Here is a hexcode dump of a PE header we will be working with.
## Memory Layout ##
- **Stack** - region of memory is added or removed using “last-in-firs-out” [[2]][2]
- **Stack** - region of memory is added or removed using “last-in-first-out” (LIFO) procedure [[2]][2]
- **Heap** - region for dynamic memory allocation [[3]][3]
- **Program Image** - The PE executable code placed into memory
- **DLLs** - Loaded DLL images that are referenced by the PE