Learning Summary (2005-2-22)
Author: kendiv (fcczj@263.net)
Last Update:
Tuesday, February 22, 2005
I finally translated the fourth chapter of "undocument Windows 2000 Secrets", some tired. The fourth chapter of this book is very good. The memory management mechanism under the X86 architecture is introduced, and the implementation of Windows 2000 is also explained, and the content is more detailed. It is recommended that each Windows NT platform developers take a look at this chapter and two sample programs provided in this chapter: W2k_mem.exe and w2k_spy.sys are also very classic.
While explaining these two programs, the author took us "play" over the Windows 2000 memory management mechanism. It is highly recommended to read the friends of this chapter, take a closer look at these two sect programs, at least in your own development environment, recompilate these two programs, the code is very valuable, whether it is writing style or performance, The author's deep work. It is worth learning.
In this chapter, almost all of the C language definitions related to memory management related to memory management (such as GDT, LDT, and IDT, PTE, PDE, etc.) are given, and the design of these structures is also very clever, and the bit fields in C are used. Bit-field. If we want to develop programs involving Windows NT memory management details, these structures can be used directly.
Personally, for most developments, the most concerned is that memory management, I believe that you will touch the core of Windows 2000 memory management, you will have a higher understanding of the memory problems encountered in the development. . Will not start with inexplicable memory leaks, at least we know how to analyze.
It is recommended to support the fifth chapter of "Windows 95 System Programming Secrets", this book's memory management is starting from the development level, analyzing down, but due to the era, the content is for Windows 95, and "undocumented The fourth chapter of Windows 2000 Secret is just added to this. And the personal feeling of "Windows 95 System Programming Secret" When explaining the memory-related function, such as Heapxxxx, Localxxx, and Virtualxxx series functions, more items than "Windows Core Programming". It is a supplement to the memory function in "Windows Core Programming".
