Windows Internals Part 1 6th.pdf 清晰版

Windows

®

Internals,SixthEdition,

Part1

MarkE.Russinovich

DavidA.Solomon

AlexIonescu

Copyright©2012

Allrightsreserved.Nopartofthecontentsofthisbookmaybereproducedortransmittedinanyformorby

http://www.microsoft.com/about/legal/en/us/IntellectualProperty/Trademarks/EN-US.aspxaretrademarksof

theMicrosoftgroupofcompanies.Allothermarksarepropertyoftheirrespectiveowners.

Theexamplecompanies,organizations,products,domainnames,emailaddresses,logos,people,places,and

eventsdepictedhereinarefictitious.Noassociationwithanyrealcompany,organization,product,domain

name,emailaddress,logo,person,place,oreventisintendedorshouldbeinferred.

Thisbookexpressestheauthor’sviewsandopinions.Theinformationcontainedinthisbookisprovided

withoutanyexpress,statutory,orimpliedwarranties.Neithertheauthors,MicrosoftCorporation,norits

resellers,ordistributorswillbeheldliableforanydamagescausedorallegedtobecausedeitherdirectlyor

indirectlybythisbook.

AcquisitionsEditor:DevonMusgrave

Cover:TwistCreative•Seattle

MicrosoftPress

Toourparents,whoguidedandinspiredustofollowourdreams

Introduction

WindowsInternals,SixthEditionisintendedforadvancedcomputerprofessionals

(bothdevelopersandsystemadministrators)whowanttounderstandhowthecore

componentsoftheMicrosoftWindows7andWindowsServer2008R2operating

systemsworkinternally.Withthisknowledge,developerscanbettercomprehend

therationalebehinddesignchoiceswhenbuildingapplicationsspecifictothe

Windowsplatform.Suchknowledgecanalsohelpdevelopersdebugcomplex

problems.Systemadministratorscanbenefitfromthisinformationaswell,because

understandinghowtheoperatingsystemworks“underthecovers”facilitates

partsallowsustopublishthefirstpartearlier.

Thisbook,Part1,beginswithtwochaptersthatdefinekeyconcepts,introducethe

toolsusedinthebook,anddescribetheoverallsystemarchitectureand

components.Thenexttwochapterspresentkeyunderlyingsystemand

managementmechanisms.Part1wrapsupbycoveringthreecorecomponentsof

theoperatingsystem:processes,threads,andjobs;security;andnetworking.

Part2,whichwillbeavailableseparatelyinfall2012,coverstheremainingcore

subsystems:I/O,storage,memorymanagement,thecachemanager,andfile

systems.Part2concludeswithadescriptionofthestartupandshutdownprocesses

andadescriptionofcrash-dumpanalysis.

(MicrosoftPress,1992),writtenbyHelenCuster(priortotheinitialreleaseof

4.0andhadagreatlyincreasedleveloftechnicaldepth.

InsideWindows2000,ThirdEdition(MicrosoftPress,2000)wasauthoredby

DavidSolomonandMarkRussinovich.Itaddedmanynewtopics,suchasstartup

andshutdown,serviceinternals,registryinternals,file-systemdrivers,and

networking.ItalsocoveredkernelchangesinWindows2000,suchastheWindows

DriverModel(WDM),PlugandPlay,powermanagement,WindowsManagement

Instrumentation(WMI),encryption,thejobobject,andTerminalServices.

WindowsInternals,FourthEditionwastheWindowsXPandWindowsServer

2003updateandaddedmorecontentfocusedonhelpingITprofessionalsmake

useoftheirknowledgeofWindowsinternals,suchasusingkeytoolsfrom