

  .................................................................................... XXVII
 .......................................................................................... XXI
      - .................................................. xxi
   ,    ........................................................ xxii
       ........................................... xxii
      16- Windows ......................... xxii
    -  Windows 95 ............................... xxii
     ........................................................................ xxii
    - ................................................ xxiii
    STRICT ............................................................................. xxiii
     .......................................................................... xxiii
       ? ......................................................... xxiii
     ,     ............... xxiv
   Unicode ........................................................................................ xxiv
    - ................................................................ xxv
   CD-ROM-,    ................................................ xxv

   1
   WIN32 API     ..... 1
   Win32 API:  ..................................................................................... 1
   Win32s ....................................................................................................2
   Windows NT .............................................................................................2
   Windows 95 .............................................................................................4
   Windows  .............................................................................................4
   Win32 API:  ..................................................................... 5


VI  _____________________________ Windows  


   2
     ...................................................................................7
       ............................................................................... 7
       ...................................................... 8
    ............................................................................................ 8
       .......................................................... 10
      ................................................................... 10
      ................................................................... 11
         ........... 12
      .....................................................12
     ..................................................................... 16
      ................................................. 1 8

   3
    ........................................................................................ 23
     W^n32-poee ............................................................. 24
      ...................................................... 26
       ................................. 28
      ............................................................ 29
     ................................................................... 30
     ......................................................................... 33
         ............................................... 33
      .......................................................... 34
    Create/process ............................................................................ 3 6
    IpszApplicaHonName  IpszCommanclLine ......................... 36
    IpsaProcess, IpsaThread  fInherifHandles .......................... 37
    fdwCreate ....................................................................... 39
    IpvEnv'ironment ................................................................. 41
    IpszCurDir ....................................................................... 41
    IpsiSt'artlnfo ...................................................................... 41
    IppiProclnfo ..................................................................... 45
     ............................................................................. 46
    Ex'itProcess ......................................................................... 46
    TerminafeProcess ................................................................ 47
        .................................................. 47
        ........................................ 47
     ................................................................................ 48
       ....................................... 50


 VII


   4
    .............................................................................................51
        ............................................................ 51
          .................................................... 52
       ................................................................... 54
     .................................................................................... 55
    CONTEXT ....................................................................... 55
      ............................................................ 55
    Create Thread ............................................................................. 57
    Ipsa ................................................................................ 5 8
     cbSfack ........................................................................... 5 8
    IpStarfAddr  IpvThreadParm ........................................... 59
    fdwCrecite ....................................................................... 59
    IplDThread ....................................................................... 60
     ................................................................................. 60
    ExifThread ......................................................................... 61
    Term mate Th read ................................................................. 61
      ............................................................... 61
        ........................................... 61
       ................................................................................... 62
        .......................... 65
       Win32 ........................................ 66
       .......................................... 68
       ................................... 69
       ................................................. 72
       ........................................................................ 72
   ,      ......................................... 76
     ,     ...... 80

   5
      WIN32 .............................................. 81
      ........................................................ 81
    Windows 95      ........ 82
    Windows NT      ........ 84
       ............................................................ 86
       ...................................................... 86
     .................................................................................. 87
          ......................... 89


VIII _____________________________Windows  


     .................................................................................... 90
        ........................................... 91
       ............................................. 92
     ......................................................................................... 92
      .................................................................... 95
       Windows 95 ........................ 99

   6
      ........................105
     ......................................................................... 1 05
   - Syslnfo ............................................................ 106
      ....................................................................112
   - VMStat ............................................................113
       .................................... 1 17
    VMQuery ........................................................................ 118
   - VMMap .......................................................... 127

   7
     
     ......................................................................... 135
        ................................. 135
       ...................................... 137
       
     ................................................................................ 138
          ............................ 138
         .............................. 140
          ................. 141
   - VMAIIoc:    ........... 142
      ................................................................ 151
       RAM ................................................... 152
       ................................................. 153
     .......................................................................................... 156
      Windows 95 ............................................................ 159
           ............... 160


   IX


   8
   /    ...................................163
      -  DLL- ............................................ 163
       DLL   
      ...................................................165
    ,    .................................................. 167
    1.  ,   ................................................. 1 67
    2.  ,   .................................................. 167
    3.  ,   ................................................. 167
    4.      ........................................ 1 68
        ....................................... 168
    1.       ..................... 169
    2.      ......................... 170
    3.     
     .................................................................173
    4.     
     .................................................................. 175
    5  6.       .......... 176
      .......................................................177
       ................................................... 179
   - FileRev ............................................................ 1 80
     ,    .............................. 1 87
         Win32 ........ 189
        
     ............................................................... 191
   ,    
       ......................................................... 193
   - MMFShare ...................................................... 194
        ................................ 199

   9
    ..................................................................................................201
   \/32- .......................................................................................... 202
      ........................................................... 202
      \32- ......................................... 203
    Win32-Ky4H ................................................................... 205
    Win32-Ky4H ............................................................... 208


   _____________________________Windows  


        C++ ....................................... 208
       ............................................... 21 1
      16- Windows ................... 213

 10
     .................................................217
        ............................................... 21 7
   ,    ............................................................ 217
     ............................................................................... 21 8
    ..................................................................................... 220
    ................................................................................. 221
   - CritSecs ........................................................... 226
        .............................................. 237
   - ........................................................................ 240
   - Mutexes .......................................................... 244
    ...................................................................................252
   -  ............................................... 253
    ....................................................................................... 273
   -    ........................................ 274
      SWMRG ............................... 276
      Bucket .................................................. 280
   - DocStats .......................................................... 296
     .................................................................... 303
      ......................................................... 308
    Sleep .............................................................................. 3 08
     / ............................................... 309
    WaifForlnpufldle ............................................................... 309
    MsgWaifForMulfipleObjecfs ............................................... 310
    WaitForDebugEvenf .......................................................... 310
    SigncilObjectAndWaif ....................................................... 31 1
    ///7/:/- ....................................................... 312

 11
        .......315
    .................................................................................. 315
       ........................................... 31 6
        ............................................... 31 8
       Win32 .................................... 31 8
         ........................ 320


  XI


      .............................................................. 321
     .................................................................... 325
       ......................................................... 329
   - CopyData ........................................................ 331
     ......................................................................... 335
      ............................................... 336
      ................................................................... 339
        ............................................................ 340
      .......................................................... 342
   - LISLab ............................................................. 344

 12
      ........359
    DLL ........................................................................................ 359
    DLL     ................ 361
    / ......................................................................... 366
   DLL_PROCESS_ATTACH .................................................................. 367
   DLL_PROCESS_DETACH .................................................................. 368
   DLL_THREAD_ATTACH .................................................................... 369
   DLL_THREAD_DETACH .................................................................... 371
       DllMain .................................... 372
    DllMain     ................................ 374
        DLL ................................................... 375
        DLL .................................................... 377
     DLL ................................................................. 382
    DLL     
    ( Visual C++) .................................................................... 383
      
      DLL ........................................................................ 384
     -  DLL- .......................................................... 384
   - ModUse .......................................................... 387
   - Multlnst ........................................................... 392

 13
      ..............................................395
       .................................................. 396
        ................... 398
   - TLSDyn ............................................................ 399
       ..................................................... 406
   - TLSStat ............................................................ 407


XII _____________________________Windows  


 14
     ...............................................................415
       Win32 .................................................... 416
         ........................................ 417
       ................................................ 41 8
   - Disklnfo ........................................................... 421
      ........................................................................ 428
      .................................................... 428
      .............................................................. 429
      ................................................. 429
      Windows .................................... 430
       ..................................................... 430
   , ,     ........... 431
    ................................................................................ 431
    ...................................................................................... 432
    ............................................................................... 43 3
    ........................................................................... 434
     ....................................................................................... 435
   - DirWalk .......................................................... 439
         ..................................... 446
   - FileChng .......................................................... 450
       ...................................................... 461
      ............................................................. 461
     ...................................................................... 461
     ............................................................................... 462
      ................................................................ 463
      ................................................................. 465

 15
   : / ..................................................467
       .............................................................. 468
    CreafeFile:  ................................................... 469
      ............................................................................ 474
      ........................................ 474
      ................................................................. 476
        ................................. 476
    / ........................................................................ 479
        .................................... 479
    /  ...................................................................... 479


 XIII


          .................... 481
          ........................ 485
    / .......................................................................486
   - AlertIO ............................................................ 489
     / ........................................................... 498
       / ............................. 506
   - lOCmpPrt ........................................................ 507
    ,     / ............................... 51 6
       / .................................... 516

 16
      .......................517
     ...................................................................... 51 8
       ......................... 51 8
   - SEHTerm ......................................................... 530
       ...................................................... 536
         ........ 537
   EXCEPTION_EXECUTE_HANDLER .................................................... 538
   EXCEPTION_CONTINUE_EXECUTION ............................................. 539
   EXCEPTION_CONTINUE_SEARCH ................................................... 541
     ................................................................... 542
      ................................................... 545
         .................................... 547
    GefExcepfionlnformafion .................................................... 551
   - SEHExcpt ......................................................... 554
   - SEHSum .......................................................... 561
     ..................................................................... 566
   - SEHSoft ........................................................... 568
     ........................................................ 576
        ...................... 576
        .............................. 578
      UnhandledExceptionFilter ................................ 580
    Windows NT:  
      .............................................................................. 5 80

   17
   UNICODE .........................................................................................581
     ................................................................................. 581
   -     ......................................... 581


XIV __._________..__________________Windows  


   Unicode:    .............................................. 582
    Unicode? ..................................................................................583
        Unicode ................................ 583
   Windows NT  Unicode ................................................................. 583
   Windows 95  Unicode .................................................................. 584
   Unicode     ............................................. 584
    ,   Win32  Unicode ........................... 589
   Unicode-  ANSI-  Win32 ................................................. 589
   ,    ANSI,  Unicode ......................... 591
      Win32 ......................................................... 591
    ....................................................................................... 593
     ........................................................................... 593
      Unicode  ANSI   ........................ 594
   Windows NT:     .................................... 597

 18
       .........................................599
         ............................................ 600
    DLL    ............................................... 601
    DLL    ........................................................ 603
           .......... 604
    DLL     ........................................ 615
     DLL ...................................................................... 616
   Win32^yHKUHH,     ...................................... 616
    CrecifeRemofeThread ......................................................... 61 7
    GefThreadContexf  SefThreadConfexf ................................ 61 8
    VirfualQueryEx  VirfualProfectEx ....................................... 621
    VirfualAllocEx  VirfualFreeEx ............................................ 622
    ReadProcessMemory  WrifeProcessMemory ....................... 622
   ,  DLL      ..... 622
    0:      ...................... 623
    1:     ............................. 624
    2: AllocProcessMemory  Create Thread ................................ 625
     ProcMem ............................................................. 629
    Injectiib ........................................................................... 632
     InjectUb ............................................................... 640
   - TInjLib ............................................................. 640
      IMGWALK.DLL ................... 643
    .......................................................................................... 646


 XV


   
    ........................................................................................647
   - Counter ........................................................... 650

   
     ...........................................657
       .................................................. 658
        ......................................... 661
   API- ......................................................................................... 662

   
     ....................................................................663
     CMNHDR.H ............................................................ 663
     4 .................................................................. 663
    Windows ........................................................................... 664
    STRICT ............................................................................. 664
       ......................... 664
   Unicode ........................................................................................ 664
    chDIMOF ......................................................................... 665
    chBEGINTHREADEX ........................................................... 665
    chASSERT  chVERIFY ...................................................... 666
    chHANDLE_DLGMSG ........................................................ 666
     ............................................................................... 666
    chlNITSTRUCT ................................................................... 666
    chSETDLGICONS .............................................................. 666
    chWARNIFUNICODEUNDERWIN95 .................................... 666
     Pragma Message ..................................... 667
     .............................................................. 667
    ,        ....... 672

  ........................................................673