{"title":"swapgs\u547d\u4ee4","description":"x64\u3067\u8ffd\u52a0\u3055\u308c\u305f\u547d\u4ee4\u306e\u3072\u3068\u3064\u306bswapgs\uff08Swap GS Base Register)\u304c\u3042\u308b\u3002\u3053\u306e\u547d\u4ee4\u306f\u3001 \u73fe\u5728\u306e GS \u30d9\u30fc\u30b9\u30ec\u30b8\u30b9\u30bf\u5024\u3092\u3001MSR \u30a2\u30c9\u30ec\u30b9 C0000102H\uff08MSR_KERNELGSbase\uff09\u306b\u683c\u7d0d\u3055\u308c\u305f\u5024\u3068\u4ea4\u63db\u3059\u308b\u3002 \u2015\u2015\u30a4\u30f3\u30c6\u30eb\u00ae \u30a8\u30af\u30b9\u30c6\u30f3\u30c7\u30c3\u30c9\u30fb\u30e1\u30e2\u30ea 64 \u30c6\u30af\u30ce\u30ed\u30b8\u30fb\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30fb\u30c7\u30d9\u30ed\u30c3\u30d1\u30fc\u30ba\u30fb\u30ac\u30a4\u30c9 \u7b2c 2\u5dfb\uff08\u5168 2\u5dfb\uff09 \u7279\u6a29\u547d\u4ee4\u3067\u3001Windows\u30ab\u30fc\u30cd\u30eb\u306b\u304a\u3044\u3066\u3082\u3088\u304f\u5229\u7528\u3055\u308c\u3066\u3044\u308b\u3002\u3057\u304b\u3057\u3001\u306a\u305c\u3053\u3093\u306a\u30c1\u30fc\u30d7\u306a\u547d\u4ee4\u304c\u65b0\u8a2d\u3055\u308c\u305f\u304b\u7591\u554f\u306b\u601d\u3063\u305f\u306e\u3067\u8abf\u3079\u3066\u307f\u308b\u3068\u3001\u3069\u3046\u3084\u3089\u3001x86\u306esysenter\u306b\u76f8\u5f53\u3059\u308bx64\u306esyscall\u547d\u4ee4\u304cRSP\u306e\u5024\u3092\u66f4\u65b0\u3057\u306a\u3044\u305f\u2026","url":"https://egggarden.hatenadiary.org/entry/20090924/1253811579","author_url":"https://blog.hatena.ne.jp/egggarden/","width":"100%","image_url":null,"provider_url":"https://hatena.blog","published":"2009-09-24 01:59:39","height":"190","blog_url":"https://egggarden.hatenadiary.org/","author_name":"egggarden","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fegggarden.hatenadiary.org%2Fentry%2F20090924%2F1253811579\" title=\"swapgs\u547d\u4ee4 - \u3084\u3084\u6e29\u3081\u7d0d\u8c46\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","provider_name":"Hatena Blog","version":"1.0","categories":["ASM","x64"],"blog_title":"\u3084\u3084\u6e29\u3081\u7d0d\u8c46","type":"rich"}