[nasm\print hello

nasm -f win32 hello.asm

------


C:\work>link hello.obj msvcrt.lib
Microsoft (R) Incremental Linker Version 6.00.8168
Copyright (C) Microsoft Corp 1992-1998. All rights reserved.


C:\work>hello
Hello, World

C:\work>

stack

entry point

dumpbin /headers \Windows\bfsvc

Dump of file \Windows\bfsvc.exe

PE signature found

File Type: EXECUTABLE IMAGE

FILE HEADER VALUES
             14C machine (x86)
               4 number of sections
        4A5BBFB3 time date stamp Tue Jul 14 01:13:55 2009
               0 file pointer to symbol table
               0 number of symbols
              E0 size of optional header
             102 characteristics
                   Executable
                   32 bit word machine

OPTIONAL HEADER VALUES
             10B magic # (PE32)
            9.00 linker version
            DE00 size of code
            2000 size of initialized data
               0 size of uninitialized data
            4149 entry point (01004149)
            1000 base of code
            F000 base of data
         1000000 image base (01000000 to 01011FFF)
            1000 section alignment
             200 file alignment

VA = Imagebase + RVA

va is virtual address
rva is relative virtual address

git 소스코드 다운

git clone git://project.git

gcc -fno-dwarf2-cfi-asm

remove .cfi

gcc -S -masm=intel test.c

intel syntax

python module install

download module source code

python setup.py build
python setup.py install

activeperl perl -e

>perl -e "print 'AAA'"

make object file from gcc asembly

as - o foo.o foo.s