Delve inside Windows architecture and internals—and see how core components work behind the scenes. Led by three renowned internals experts, this classic guide is fully updated for Windows 7 and Windows Server 2008 R2—and now presents its coverage in two volumes.
As always, you get critical insider perspectives on how Windows operates. And through hands-on experiments, you’ll experience its internal behavior firsthand—knowledge you can apply to improve application design, debugging, system performance, and support.
In Part 2, you’ll examine:
- Core subsystems for I/O, storage, memory management, cache manager, and file systems
- Startup and shutdown processes
- Crash-dump analysis, including troubleshooting tools and techniques
Windows Internals
®
6 SIXTH EDITION
Part 2
Mark Russinovich David A. Solomon Alex Ionescu
PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright © 2012 by David Solomon and Mark Russinovich All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher. Library of Congress Control Number: 2012933511 ISBN: 978-0-7356-6587-3 Printed and bound in the United States of America. First Printing Microsoft Press books are available through booksellers and distributors worldwide. If you need support related to this book, email Microsoft Press Book Support at
[email protected] Please tell us what you think of this book at http://www.microsoft.com/learning/booksurvey. Microsoft and the trademarks listed at http://www.microsoft.com/about/legal/en/us/IntellectualProperty/ Trademarks/EN-US.aspx are trademarks of the Microsoft group of companies. All other marks are property of their respective owners. The example companies, organizations, products, domain names, email addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organization, product, domain name, email address, logo, person, place, or event is intended or should be inferred. This book expresses the authors’ views and opinions. The information contained in this book is provided without any express, statutory, or implied warranties. Neither the authors, Microsoft Corporation, nor its resellers, or distributors will be held liable for any damages caused or alleged to be caused either directly or indirectly by this book. Acquisitions Editor: Devon Musgrave Developmental Editor: Devon Musgrave Project Editor: Carol Dillingham Editorial Production: Curtis Philips Technical Reviewer: Christophe Nasarre; Technical Review services provided by Content Master, a member of CM Group, Ltd. Copyeditor: John Pierce Indexer: Jan Wright Cover: Twist Creative • Seattle
To our parents, who guided and inspired us to follow our dreams
Contents at a Glance Windows Internals, Sixth Edition, Part 1 CHAPTER 1
Concepts and Tools
CHAPTER 2
System Architecture
CHAPTER 3
System Mechanisms
CHAPTER 4
Management Mechanisms
CHAPTER 5
Processes, Threads, and Jobs
CHAPTER 6
Security
CHAPTER 7
Networking
(available separately)
Windows Internals, Sixth Edition, Part 2 CHAPTER 8
I/O System
CHAPTER 9
Storage Management
125
1
CHAPTER 10
Memory Management
187
CHAPTER 11
Cache Manager
355
CHAPTER 12
File Systems
391