Windows® Internals, Sixth Edition, Part 2

XX.509 version 3 certificates, Encrypting File Data, Encrypting File Datax2apicpolicy element, The BIOS Boot Sector and Bootmgrx64 systems, MBR-Style Partitioning, Introduction to the Memory Manager, x64 Virtual Addressing Limitations–Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space Management, Physical Address Extension (PAE), IA64 Virtual Address Translation, Page Files, Page Priority, 32-Bit Client Effective Memory Limits, Working Set Management, Code Overwrite and System Code Write Protectionaddress translation, IA64 Virtual Address Translationdevice memory support, 32-Bit Client Effective Memory Limitslimitations, x64 Virtual Addressing Limitations–Dynamic System Virtual Address Space Management, Dynamic System Virtual Address Space ManagementMBR, MBR-Style PartitioningPAE, Physical Address Extension (PAE)page file size, Page Filesprioritized standby lists, Page Priorityprocess virtual address space, Introduction to the Memory Managersystem code write protection, Code Overwrite and System Code Write Protectionworking set limits, Working Set Managementx86 systems, MBR-Style Partitioning, x86 System Address Space Layout, x86 Session Space, x86 Virtual Address Translation, x86 Virtual Address Translation, Page Directories, Translation Look-Aside Buffer, Physical Address Extension (PAE)–Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Page Files, Page List Dynamics, Working Set Management, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, Code Overwrite and System Code Write Protectionaddress translation, x86 Virtual Address Translation, x86 Virtual Address Translation, Translation Look-Aside Bufferlayouts and session space, x86 Session SpaceMBR, MBR-Style PartitioningPAE systems, Physical Address Extension (PAE)–Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE), Physical Address Extension (PAE)page files, Page Filespage tables, Page Directoriesreal mode, The BIOS Boot Sector and Bootmgr–The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgr, The BIOS Boot Sector and Bootmgrsession space, x86 System Address Space Layoutsystem code write protection, Code Overwrite and System Code Write Protectionviewing page allocations, Page List Dynamicsworking set limits, Working Set ManagementXOR operation, RAID-5 VolumesXSAVE instruction, The BIOS Boot Sector and BootmgrXSAVE Policy Resource Driver (Hwpolicy.sys), The BIOS Boot Sector and Bootmgrxsaveaddfeature0-7 element, The BIOS Boot Sector and Bootmgrxsavedisable element, The BIOS Boot Sector and Bootmgrxsavepolicy element, The BIOS Boot Sector and Bootmgrxsaveprocessorsmask element, The BIOS Boot Sector and Bootmgrxsaveremovefeature element, The BIOS Boot Sector and Bootmgr

Zzero page lists, Examining Memory Usage, Page List Dynamics, Page List Dynamics, Page List Dynamics, Page List Dynamics, Modified Page Writer, Tracing and Logging, Robust Performancezero page threads, Memory Manager Components, Page List Dynamics, Initializing the Kernel and Executive Subsystemszero-filled pages, Shared Memory and Mapped Files, Page Fault Handlingzero-length buffers, KMDF I/O Modelzero-size memory allocations, Driver Verifierzeroed pages, Memory Manager Components, Large and Small Pages, PFN Data StructuresZeroed PFN state, Page Frame Number Database, Page Frame Number Database, Page List DynamicsZw functions, Shared Memory and Mapped Files

About the Authors

Mark Russinovich is a Technical Fellow in the Windows Azure™ group at Microsoft. He is coauthor of Windows SysInternals Administrator’s Reference, co-creator of the Sysinternals tools available from Microsoft TechNet, and coauthor of the Windows Internals book series.

David A. Solomon is coauthor of the Windows Internals book series and has taught his Windows internals class to thousands of developers and IT professionals worldwide, including Microsoft staff. He is a regular speaker at Microsoft conferences, including TechNet and PDC.

Alex Ionescu is a chief software architect and consultant expert in low-level system software, kernel development, security training, and reverse engineering. He teaches Windows internals course with David Solomon, and is active in the security research community.

Windows® Internals, Sixth Edition, Part 2

Mark E. Russinovich

David A. Solomon

Alex Ionescu

EditorDevon Musgrave

Copyright © 2012 David Solomon and Mark Russinovich

Microsoft Press books are available through booksellers and distributors worldwide. If you need support related to this book, email Microsoft Press Book Support at [email protected]. Please tell us what you think of this book at http://www.microsoft.com/learning/booksurvey.