HistoricalPerspective
Foreword
Acknowledgments
Introduction
CHAPTERONE
ConceptsandTools1
FoundationConeeptaandTerma
Win32API
Services,Functions,andRoutines
Processes,Threads,andJobs
VirtualMemory
KernelModevs.UserMode
ObjectsandHandles
Security
Registry
Unicode
DiggingIntoWindowe2000Internals
ToolsontheCompanionCD
PerformanceTool
Windows2000SupportTools
Windows2000ResourceKits
KernelDebuggingTools
PlatformSoftwareDevelopmentKit(SDK)
DeviceDriverKit(DDK)
SystemsInternalsTools
CHAPTERTWO
SystemArchitecture
RequirementsandDesignGoals
OperatingSystemModel
PortabilitySymmetrioMultiprocessing
Scalability
ArchitectureOverview
Windowe2000ProductPackaging
CheckedBuild
Multiprocessor-SpecificSystemFiles
KeySyetemComponenta
EnvironmentSubsystemsandSubsystemDLLs
Ntdll.dll
Executive
Kernel
HardwareAbstractionLayer
DeviceDrivers
PeeringintoUndocumentedInterfaces
SystemProcesses
CHAPTERHTREE
SystemMechanisms
TrapDiapatehing
InterruptDispatching
ExceptionDispatching
SystemServiceDispatching
ObjectManager
ExecutiveObjects
ObjectStructure
Synchronization
KernelSynchronization
ExecutiveSynchronization
SyetemWorkerThreads
Windows2000GlobalFlags
LoealProcedureCalls(LPCs)
CHAPTERFOUR
StartupandShutdown
BootProeees
Preboot
TheBootSectorandNtldr
InitializingtheKernelandExecutiveSubsystems
Smss,Csrss,andWinlogon
SafeMode
DriverLoadinginSafeMode
Safe-Mode-AwareUserPrograms
BootLogginginSafeMode
RecoveryConsole
Shutdown
SystemCraehee
WhyDoesWindows2000Crash?
TheBlueScreen
CrashDumpFiles
CHAPIERFIVE
ManagementMechanisms215
TheRegistry
RegistryDataTypes
RegistryLogicalStructure
RegistryInternals
Services
ServiceApplications
ServiceAccounts
TheServiceControlManager
ServiceStartup
StartupErrors
AcceptingtheBootandLastKnow
ServiceFailures
ServiceShutdown
SharedServiceProcesses
ServiceControlPrograms
WindowsManagementInstrumentation
WMIArchitecture
Providers
TheCommonInformationModelandtheManagedObject
FormatLanguage
TheWMINamespace
ClassAssociation
WMIImplementation
WMISecurity
CHAPTERSIX
Processes,Threads,andJobs
ProceesInternals
DataStructures
KernelVariables
PerformanceCounter!
RelevantFunotions
RelevantTools
FlowofCteatePloeess
Stage1:OpeningtheImagetoBeExecuted
Stage2:CreatingtheWindows2000ExecutiveProcessObject
Stage3:CreatingtheInitialThreadandItsStackandContext
Stage4:NotifyingtheWin32SubsystemAboutthe
NewProcess
Stage5:StartingExecutionoftheInitialThread
Stage6:PerformingProcessInitializationinthe
ContextoftheNewProcess
ThreadInternals
DataStructures
KernelVariables
PerformanceCounters
RelevantFunctions
RelevantTools
FlovrofCleateThread
ThreadScheduling
OverviewofWindows2000Scheduling
PriorityLevels
Win32SchedulingAPls
RelevantTools
Real-TimePriorities
InterruptLevelsvs.PriorityLevels
ThreadStates
Quantum
SchedulingDataStructures
SchedulingScenarios
ContextSwitching
IdleThread
PriorityBoosts
JobOblects
CHAPIERSEVEH
MemoryManagementa7a
MemoryManagerComponents
ConfiguringtheMemoryManager
ExaminingMemoryUsage
ServicestheI
· · · · · · (
收起)