�gӭ���R�ЈD�W(w��ng) Ո(q��ng) | ע��(c��)

���] �������WINDOWS����ϵ�y(t��ng) (��7��)(��2)

�����磺�����]늳���������r(sh��)�g��2024-02-01
�_(k��i)���� 16�_(k��i) �(y��)��(sh��)�� 723
�� �D �r(ji��):¥141.9(7.1��) ���r(ji��)  ¥199.8 ��䛺�ɿ�����(hu��)�T�r(ji��)
����ُ(g��u)��܇(ch��) �ղ�
�_(k��i)���٣� ȫ��(ch��ng)���]
?�½������س���
���(l��i)���Ǖ�(sh��)����>

�������WINDOWS����ϵ�y(t��ng) (��7��)(��2) ���(qu��n)��Ϣ

�������WINDOWS����ϵ�y(t��ng) (��7��)(��2) ����(sh��)��ɫ

1. ��(j��ng)���������°��¾����F(xi��n)����Windows��(n��i)��ԭ���(qu��n)��ָ����

2. ΢ܛ��(zhu��n)������(j��ng)��D��(sh��)���ߡ�����ϵ�y(t��ng)�;W(w��ng)�j(lu��)��ȫ�I(l��ng)��?q��)����?li��n)�nj�(xi��)����

3. ���g(sh��)��(n��i)���£�ᘌ�(du��) Windows 10 �� Windows Server��2022��2019 �� 2016��ȫ����¡�

4. ����(sh��)�m�Ͻ�(j��ng)�(y��n)�S���ij���T���ܘ�(g��u)����ܛ���|(zh��)�������܌�(zhu��n)�ҡ���ȫ�ĘI(y��)�ˆT��֧�֌�(zhu��n)�I(y��)�ˆT���Լ�Windows �߼�(j��)�Ñ�(h��)��x��

�������WINDOWS����ϵ�y(t��ng) (��7��)(��2) ��(n��i)�ݺ�(ji��n)��

����(sh��)������Windows���ĽM���О鷽ʽ�ġ���(n��i)��ԭ��������Ҫ��(n��i)�ݰ�������(w��)�O(sh��)���(q��)��(d��ng)����͑�(y��ng)�ó����ϵ�y(t��ng)�C(j��)�ƣ�ALPC����(du��)���������ͬ����WNF��WoW64 ��̎������(zh��)��ģ�ͣ����׌�Ӳ���ܘ�(g��u)������̎�����ֶκ͂�(c��)�ŵ�©������ Windows ̓�M�����g(sh��)����������̓�M���İ�ȫ����η�������ϵ�y(t��ng)©�������Լ�����ϵ�y(t��ng)���M(j��n)�й��������ú��\������(sh��)�F(xi��n)�ĵ׌әC(j��)�Ƽ�(x��)��(ji��)��������������ļ�ϵ�y(t��ng)�(q��)��(d��ng)������ν������ṩ��(du��)�ļ���Ŀ䛺ʹűP(p��n)�Ŀɿ�֧�ֵȡ�

�������WINDOWS����ϵ�y(t��ng) (��7��)(��2) Ŀ�

Ŀ�



��8�� ϵ�y(t��ng)�C(j��)�� �e(cu��)�`��δ���x��(sh��)����

8.1̎������(zh��)��ģ�� �e(cu��)�`��δ���x��(sh��)����

8.1.1�� �e(cu��)�`����x��(sh��)����

8.1.2�΄�(w��)��B(t��i)�� �e(cu��)�`��δ���x��(sh��)����

8.2Ӳ����(c��)�ŵ�©�� �e(cu��)�`��δ���x��(sh��)����

8.2.1�y���(zh��)�� �e(cu��)�`����x��(sh��)����

8.2.2 CPU��֧�A(y��)�y(c��)�� �e(cu��)�`��δ���x��(sh��)����

8.2.3 CPU���� �e(cu��)�`����x��(sh��)����

8.2.4 ��(c��)�ŵ����� �e(cu��)�`��δ���x��(sh��)����

8.3 Windows�еĂ�(c��)�ŵ������ʩ �e(cu��)�`��δ���x��(sh��)����

8.3.1 KVAӰ�� �e(cu��)�`��δ���x��(sh��)����

8.3.2 Ӳ���g�ӷ�֧���ƣ�IBRS��IBPB��STIBP��SSBD�� �e(cu��)�`��δ���x��(sh��)����

8.3.3 Retpoline�͌�(d��o)�냞(y��u)�� �e(cu��)�`��δ���x��(sh��)����

8.3.4 STIBP�䌦(du��) �e(cu��)�`��δ���x��(sh��)����

8.4 ����ְl(f��) �e(cu��)�`��δ���x��(sh��)����

8.4.1�Д�ְl(f��) �e(cu��)�`��δ���x��(sh��)����

8.4.2���ھ����Д�ͻ�����Ϣ��̖(h��o)���Д� �e(cu��)�`��δ���x��(sh��)����

8.4.3Ӌ(j��)�r(sh��)��̎�� �e(cu��)�`��δ���x��(sh��)����

8.4.4ϵ�y(t��ng)�������� �e(cu��)�`��δ���x��(sh��)����

8.4.5 �����ְl(f��) �e(cu��)�`��δ���x��(sh��)����

8.4.6ϵ�y(t��ng)����(w��)̎�� �e(cu��)�`��δ���x��(sh��)����

8.5 WoW64��Windows-on-Windows�� �e(cu��)�`����x��(sh��)����

8.5.1 WoW64���� �e(cu��)�`����x��(sh��)����

8.5.2�ļ�ϵ�y(t��ng)�ض��� �e(cu��)�`��δ���x��(sh��)����

8.5.3ע��(c��)���ض��� �e(cu��)�`��δ���x��(sh��)����

8.5.4AMD64ƽ�_(t��i)�ϵ�x86ģ�M �e(cu��)�`��δ���x��(sh��)����

8.5.5 ARM �e(cu��)�`����x��(sh��)����

8.5.6��(n��i)��ģ�� �e(cu��)�`��δ���x��(sh��)����

8.5.7 ARM64ƽ�_(t��i)�ϵ�ARM32ģ�M �e(cu��)�`��δ���x��(sh��)����

8.5.8 ARM64ƽ�_(t��i)�ϵ�x86ģ�M �e(cu��)�`��δ���x��(sh��)����

8.6��(du��)������� �e(cu��)�`����x��(sh��)����

8.6.1��(zh��)���w��(du��)�� �e(cu��)�`����x��(sh��)����

8.6.2��(du��)��Y(ji��)��(g��u) �e(cu��)�`����x��(sh��)����

8.7ͬ�� �e(cu��)�`��δ���x��(sh��)����

8.7.1��IRQLͬ�� �e(cu��)�`��δ���x��(sh��)����

8.7.2��IRQLͬ�� �e(cu��)�`��δ���x��(sh��)����

8.8 �߼�(j��)�����^(gu��)���{(di��o)�� �e(cu��)�`��δ���x��(sh��)����

8.8.1�B��ģ�� �e(cu��)�`��δ���x��(sh��)����

8.8.2��Ϣģ�� �e(cu��)�`��δ���x��(sh��)����

8.8.3�������� �e(cu��)�`����x��(sh��)����

8.8.4ҕ�D���^(q��)��͹�(ji��) �e(cu��)�`��δ���x��(sh��)����

8.8.5���� �e(cu��)�`����x��(sh��)����

8.8.6 Blob��������YԴ �e(cu��)�`��δ���x��(sh��)����

8.8.7 ����Ă��f �e(cu��)�`��δ���x��(sh��)����

8.8.8 ��ȫ�� �e(cu��)�`��δ���x��(sh��)����

8.8.9 ���� �e(cu��)�`����x��(sh��)����

8.8.10�Դ���� �e(cu��)�`��δ���x��(sh��)����

8.8.11 ALPCֱ���¼����� �e(cu��)�`��δ���x��(sh��)����

8.8.12 �{(di��o)ԇ�͸�ۙ �e(cu��)�`��δ���x��(sh��)����

8.9 Windows֪ͨ�O(sh��)ʩ �e(cu��)�`��δ���x��(sh��)����

8.9.1 WNF���� �e(cu��)�`����x��(sh��)����

8.9.2 WNF�Ñ�(h��) �e(cu��)�`��δ���x��(sh��)����

8.9.3 WNF��B(t��i)���Q(ch��ng)�ʹ惦(ch��) �e(cu��)�`��δ���x��(sh��)����

8.9.4 WNF�¼��ۺ� �e(cu��)�`��δ���x��(sh��)����

8.10�Ñ�(h��)ģʽ�{(di��o)ԇ �e(cu��)�`��δ���x��(sh��)����

8.10.1��(n��i)��֧�� �e(cu��)�`��δ���x��(sh��)����

8.10.2 ԭ��֧�� �e(cu��)�`��δ���x��(sh��)����

8.10.3 Windows��ϵ�y(t��ng)֧�� �e(cu��)�`��δ���x��(sh��)����

8.4����đ�(y��ng)�ó��� �e(cu��)�`��δ���x��(sh��)����

8.4.1 UWP��(y��ng)�ó��� �e(cu��)�`��δ���x��(sh��)����

8.4.2 Centennial��(y��ng)�ó��� �e(cu��)�`��δ���x��(sh��)����

8.4.3 ���C(j��)���(d��ng)������ �e(cu��)�`����x��(sh��)����

8.4.4 ��B(t��i)�惦(ch��)��(k��) �e(cu��)�`��δ���x��(sh��)����

8.4.5 ��ه(l��i)�(xi��ng)С�ʹ惦(ch��)��(k��) �e(cu��)�`��δ���x��(sh��)����

8.4.6 ���_(t��i)�΄�(w��)�ʹ������A(ch��)�ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

8.4.7�����(y��ng)�ó���İ��b�͆���(d��ng) �e(cu��)�`��δ���x��(sh��)����

8.4.8 ��������� �e(cu��)�`����x��(sh��)����

8.4.9 �����ע��(c��) �e(cu��)�`��δ���x��(sh��)����

8.5���Y(ji��) �e(cu��)�`����x��(sh��)����

��9�£�̓�M�����g(sh��) �e(cu��)�`��δ���x��(sh��)����

9.1 Windows̓�M�C(j��)�O(ji��n)�س��� �e(cu��)�`��δ���x��(sh��)����

9.1.1�օ^(q��)���M(j��n)�̺;��� �e(cu��)�`��δ���x��(sh��)����

9.1.2̓�M�C(j��)�O(ji��n)�س���Ć���(d��ng) �e(cu��)�`��δ���x��(sh��)����

9.1.3̓�M�C(j��)�O(ji��n)�س����(n��i)������� �e(cu��)�`��δ���x��(sh��)����

9.1.4 Hyper-V�{(di��o)���� �e(cu��)�`����x��(sh��)����

9.1.5 ̓�M���{(di��o)�ú�̓�M�C(j��)�O(ji��n)�س���TLFS �e(cu��)�`��δ���x��(sh��)����

9.1.6 �r�� �e(cu��)�`����x��(sh��)����

9.1.7 �C���Д��������SynIC�� �e(cu��)�`��δ���x��(sh��)����

9.1.8 Windows̓�M�C(j��)�O(ji��n)�س���ƽ�_(t��i)API��EXO�օ^(q��) �e(cu��)�`��δ���x��(sh��)����

9.1.9 Ƕ��̓�M�� �e(cu��)�`��δ���x��(sh��)����

9.1.10 ARM64�ϵ�Windows̓�M�C(j��)�O(ji��n)�س��� �e(cu��)�`��δ���x��(sh��)����

9.2̓�M���� �e(cu��)�`��δ���x��(sh��)����

9.2.1̓�M�C(j��)����������(w��)�͹����M(j��n)�� �e(cu��)�`��δ���x��(sh��)����

9.2.2 VID�(q��)��(d��ng)�����̓�M������(n��i)������� �e(cu��)�`��δ���x��(sh��)����

9.2.3̓�M�C(j��)���Q�� �e(cu��)�`��δ���x��(sh��)����

9.2.4 VMBus �e(cu��)�`����x��(sh��)����

9.2.5̓�MӲ��֧�� �e(cu��)�`��δ���x��(sh��)����

9.2.6 VA֧�ֵ�̓�M�C(j��) �e(cu��)�`��δ���x��(sh��)����

9.3����̓�M���İ�ȫ�ԣ�VBS�� �e(cu��)�`��δ���x��(sh��)����

9.3.1̓�M���μ�(j��)�e��VTL����̓�M��ȫģʽ��VSM�� �e(cu��)�`��δ���x��(sh��)����

9.3.2 VSM�ṩ�ķ���(w��)����Ҫ�� �e(cu��)�`��δ���x��(sh��)����

9.4��ȫ��(n��i)�� �e(cu��)�`��δ���x��(sh��)����

9.4.1̓�M�Д� �e(cu��)�`��δ���x��(sh��)����

9.4.2��ȫ�r�� �e(cu��)�`��δ���x��(sh��)����

9.4.3 VSMϵ�y(t��ng)�{(di��o)�� �e(cu��)�`��δ���x��(sh��)����

9.4.4 ��ȫ���̺��{(di��o)�� �e(cu��)�`��δ���x��(sh��)����

9.4.5 ̓�M�C(j��)�O(ji��n)�س���?q��)�ʩ�Ĵ��a������ �e(cu��)�`��δ���x��(sh��)����

9.4.6 UEFI�\(y��n)�Еr(sh��)̓�M�� �e(cu��)�`��δ���x��(sh��)����

9.4.7 VSM����(d��ng) �e(cu��)�`����x��(sh��)����

9.4.8 ��ȫ��(n��i)�˃�(n��i)������� �e(cu��)�`��δ���x��(sh��)����

9.4.9 �����a(b��) �e(cu��)�`����x��(sh��)����

9.5 ���x�Ñ�(h��)ģʽ �e(cu��)�`��δ���x��(sh��)����

9.5.1Trustlet�Ą�(chu��ng)�� �e(cu��)�`��δ���x��(sh��)����

9.5.2��ȫ�O(sh��)�� �e(cu��)�`��δ���x��(sh��)����

9.5.3����VBS�ĸ�^(q��) �e(cu��)�`��δ���x��(sh��)����

9.5.4 ϵ�y(t��ng)���o(h��)�\(y��n)�Еr(sh��)�J(r��n)�C �e(cu��)�`��δ���x��(sh��)����

9.6 ���Y(ji��) �e(cu��)�`����x��(sh��)����

�� 10�£��������\��͸�ۙ �e(cu��)�`��δ���x��(sh��)����

10.1ע��(c��)�� �e(cu��)�`��δ���x��(sh��)����

10.1.1�鿴�͸���ע��(c��)�� �e(cu��)�`��δ���x��(sh��)����

10.1.2 ע��(c��)����ʹ�� �e(cu��)�`��δ���x��(sh��)����

10.1.3 ע��(c��)�픵(sh��)��(j��)�(l��i)�� �e(cu��)�`��δ���x��(sh��)����

10.1.4 ע��(c��)����߉݋�Y(ji��)��(g��u) �e(cu��)�`��δ���x��(sh��)����

10.1.5 ��(y��ng)�ó������Æ�Ԫ �e(cu��)�`��δ���x��(sh��)����

10.1.6 �„�(w��)��ע��(c��)����TxR�� �e(cu��)�`��δ���x��(sh��)����

10.1.7 �O(ji��n)��ע��(c��)�����(d��ng) �e(cu��)�`��δ���x��(sh��)����

10.1.8 Process Monitor��(n��i)��ԭ�� �e(cu��)�`��δ���x��(sh��)����

10.1.9 ע��(c��)���ă�(n��i)��ԭ�� �e(cu��)�`��δ���x��(sh��)����

10.1.10 ���Æ�Ԫ�ؽM �e(cu��)�`��δ���x��(sh��)����

10.1.11 ע��(c��)�����������g�Ͳ��� �e(cu��)�`��δ���x��(sh��)����

10.1.12 ��(w��n)���惦(ch��) �e(cu��)�`��δ���x��(sh��)����

10.1.13 ע��(c��)���^(gu��)�V �e(cu��)�`��δ���x��(sh��)����

10.1.14 ע��(c��)��̓�M�� �e(cu��)�`��δ���x��(sh��)����

10.1.15 ע��(c��)�탞(y��u)�� �e(cu��)�`��δ���x��(sh��)����

10.2 Windows����(w��) �e(cu��)�`����x��(sh��)����

10.2.1����(w��)��(y��ng)�ó��� �e(cu��)�`��δ���x��(sh��)����

10.2.2 ����(w��)�~��(h��) �e(cu��)�`����x��(sh��)����

10.2.3 ����(w��)���ƹ�������SCM�� �e(cu��)�`��δ���x��(sh��)����

10.2.4����(w��)���Ƴ��� �e(cu��)�`��δ���x��(sh��)����

10.2.5�Ԇ���(d��ng)����(w��)�Ć���(d��ng) �e(cu��)�`��δ���x��(sh��)����

10.2.6���t���Ԇ���(d��ng)����(w��) �e(cu��)�`��δ���x��(sh��)����

10.2.7�|�l(f��)����(d��ng)�ķ���(w��) �e(cu��)�`��δ���x��(sh��)����

10.2.8����(d��ng)�e(cu��)�` �e(cu��)�`����x��(sh��)����

10.2.9���܆���(d��ng)��*��һ�ε����_���� �e(cu��)�`��δ���x��(sh��)����

10.2.10����(w��)���� �e(cu��)�`����x��(sh��)����

10.2.11����(w��)�P(gu��n)�] �e(cu��)�`����x��(sh��)����

10.2.12��������(w��)�M(j��n)�� �e(cu��)�`����x��(sh��)����

10.2.13����(w��)��(bi��o)�� �e(cu��)�`����x��(sh��)����

10.2.14�Ñ�(h��)����(w��) �e(cu��)�`��δ���x��(sh��)����

10.2.15����ķ���(w��) �e(cu��)�`��δ���x��(sh��)����

10.2.16�ܱ��o(h��)����(w��) �e(cu��)�`��δ���x��(sh��)����

10.3�΄�(w��)Ӌ(j��)����UBPM �e(cu��)�`��δ���x��(sh��)����

10.3.1�΄�(w��)Ӌ(j��)������ �e(cu��)�`��δ���x��(sh��)����

10.3.2�y(t��ng)һ���_(t��i)�M(j��n)�̹�������UBPM�� �e(cu��)�`��δ���x��(sh��)����

10.3.3�΄�(w��)Ӌ(j��)������COM�ӿ� �e(cu��)�`��δ���x��(sh��)����

10.4 Windows ����Ҏ(gu��)�� �e(cu��)�`��δ���x��(sh��)����

10.4.1 WMI�ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

10.4.2WMI�ṩ���� �e(cu��)�`��δ���x��(sh��)����

10.4.3ͨ����Ϣģ�ͺ͹��팦(du��)���ʽ�Z(y��)�� �e(cu��)�`��δ���x��(sh��)����

10.4.4�(l��i)�P(gu��n)“(li��n) �e(cu��)�`��δ���x��(sh��)����

10.4.5WMI�Č�(sh��)�F(xi��n) �e(cu��)�`��δ���x��(sh��)����

10.4.6WMI�İ�ȫ�� �e(cu��)�`��δ���x��(sh��)����

10.5 Windows�¼���ۙ��ETW�� �e(cu��)�`��δ���x��(sh��)����

10.5.1ETW��ʼ�� �e(cu��)�`��δ���x��(sh��)����

10.5.2 ETW��(hu��)Ԓ �e(cu��)�`��δ���x��(sh��)����

10.5.3 ETW�ṩ���� �e(cu��)�`��δ���x��(sh��)����

10.5.4�ṩ�¼� �e(cu��)�`��δ���x��(sh��)����

10.5.5 ETWӛ������� �e(cu��)�`��δ���x��(sh��)����

10.5.6�¼������M(f��i) �e(cu��)�`��δ���x��(sh��)����

10.5.7 ϵ�y(t��ng)ӛ��� �e(cu��)�`��δ���x��(sh��)����

10.5.8 ETW�İ�ȫ�� �e(cu��)�`��δ���x��(sh��)����

10.6��(d��ng)�B(t��i)��ۙ��DTrace�� �e(cu��)�`��δ���x��(sh��)����

10.6.1��(n��i)���ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

10.6.2 DTrace�(l��i)�͎�(k��) �e(cu��)�`��δ���x��(sh��)����

10.7Windows�e(cu��)�`��(b��o)�棨WER�� �e(cu��)�`��δ���x��(sh��)����

10.7.1�Ñ�(h��)��(y��ng)�ó������ �e(cu��)�`��δ���x��(sh��)����

10.7.2��(n��i)��ģʽ��ϵ�y(t��ng)������ �e(cu��)�`��δ���x��(sh��)����

10.7.3�M(j��n)�̒���z�y(c��) �e(cu��)�`��δ���x��(sh��)����

10.8ȫ�֘�(bi��o)ӛ �e(cu��)�`��δ���x��(sh��)����

10.9��(n��i)�����a �e(cu��)�`����x��(sh��)����

10.9.1���a�����ʼ�� �e(cu��)�`��δ���x��(sh��)����

10.9.2 ���a��(sh��)��(j��)��(k��) �e(cu��)�`����x��(sh��)����

10.9.3�(q��)��(d��ng)�������a �e(cu��)�`����x��(sh��)����

10.9.4�O(sh��)�����a �e(cu��)�`����x��(sh��)����

10.10�Y(ji��)Փ �e(cu��)�`��δ���x��(sh��)����

�� 11�£�������ļ�ϵ�y(t��ng) �e(cu��)�`��δ���x��(sh��)����

11.1�g(sh��)�Z(y��) �e(cu��)�`����x��(sh��)����

11.2�������������Ҫ���� �e(cu��)�`��δ���x��(sh��)����

11.2.1��һ���л�ϵ�y(t��ng)���� �e(cu��)�`��δ���x��(sh��)����

11.2.2��(n��i)������� �e(cu��)�`����x��(sh��)����

11.2.3�����һ���� �e(cu��)�`��δ���x��(sh��)����

11.2.4̓�M�K���� �e(cu��)�`��δ���x��(sh��)����

11.2.5�������ľ��� �e(cu��)�`��δ���x��(sh��)����

11.2.6�ɻ֏�(f��)�ļ�ϵ�y(t��ng)֧�� �e(cu��)�`��δ���x��(sh��)����

11.2.7 NTFS MFT������������(qi��ng) �e(cu��)�`����x��(sh��)����

11.2.8��(n��i)��օ^(q��)֧�� �e(cu��)�`��δ���x��(sh��)����

11.3����̓�M��(n��i)����� �e(cu��)�`��δ���x��(sh��)����

11.4�����С �e(cu��)�`��δ���x��(sh��)����

11.4.1����̓�M��С �e(cu��)�`��δ���x��(sh��)����

11.4.2���湤������С �e(cu��)�`��δ���x��(sh��)����

11.4.3�����������С �e(cu��)�`��δ���x��(sh��)����

11.5���攵(sh��)��(j��)�Y(ji��)��(g��u) �e(cu��)�`��δ���x��(sh��)����

11.5.1ϵ�y(t��ng)��(j��)���攵(sh��)��(j��)�Y(ji��)��(g��u) �e(cu��)�`��δ���x��(sh��)����

11.5.2ÿ�ļ����攵(sh��)��(j��)�Y(ji��)��(g��u) �e(cu��)�`��δ���x��(sh��)����

11.6�ļ�ϵ�y(t��ng)�ӿ� �e(cu��)�`��δ���x��(sh��)����

11.6.1��/�ľ����(f��)�� �e(cu��)�`��δ���x��(sh��)����

11.6.2ͨ�^(gu��)ӳ��͹̶��ӿ��M(j��n)�о��� �e(cu��)�`��δ���x��(sh��)����

11.6.3ͨ�^(gu��)ֱ�Ӄ�(n��i)���L��(w��n)�ӿ��M(j��n)�о��� �e(cu��)�`��δ���x��(sh��)����

11.7����I(m��i)/O �e(cu��)�`����x��(sh��)����

11.8�A(y��)�xȡ���Ӻ�(xi��)�� �e(cu��)�`��δ���x��(sh��)����

11.8.1�����A(y��)�xȡ �e(cu��)�`��δ���x��(sh��)����

11.8.2�A(y��)�xȡ������(qi��ng) �e(cu��)�`��δ���x��(sh��)����

11.8.3�،�(xi��)����Ͷ��Ԍ�(xi��)�� �e(cu��)�`��δ���x��(sh��)����

11.8.4��ij��(g��)�ļ����ö��Ԍ�(xi��)�� �e(cu��)�`��δ���x��(sh��)����

11.8.5��(qi��ng)�ƾ���ֱ�ӌ�(xi��)��űP(p��n) �e(cu��)�`��δ���x��(sh��)����

11.8.6ˢ��ӳ����ļ� �e(cu��)�`��δ���x��(sh��)����

11.8.7��(xi��)������ �e(cu��)�`����x��(sh��)����

11.8.8ϵ�y(t��ng)���� �e(cu��)�`��δ���x��(sh��)����

11.8.9���M(j��n)�ĺ�(xi��)��͵̓�(y��u)�ȼ�(j��)���Ԍ�(xi��)�� �e(cu��)�`��δ���x��(sh��)����

11.8.10��(d��ng)�B(t��i)��(n��i)�� �e(cu��)�`����x��(sh��)����

11.8.11����������ĴűP(p��n)I/Oӛ�~ �e(cu��)�`��δ���x��(sh��)����

11.9�ļ�ϵ�y(t��ng) �e(cu��)�`��δ���x��(sh��)����

11.9.1Windows�ļ�ϵ�y(t��ng)��ʽ �e(cu��)�`��δ���x��(sh��)����

11.9.2 CDFS �e(cu��)�`����x��(sh��)����

11.9.3 UDF �e(cu��)�`����x��(sh��)����

11.9.4 FAT12��FAT16��FAT32 �e(cu��)�`����x��(sh��)����

11.9.5 exFAT �e(cu��)�`����x��(sh��)����

11.9.6 NTFS �e(cu��)�`����x��(sh��)����

11.9.7 ReFS �e(cu��)�`����x��(sh��)����

11.9.8�ļ�ϵ�y(t��ng)�(q��)��(d��ng)����ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

11.9.9����FSD �e(cu��)�`����x��(sh��)����

11.9.10�h(yu��n)��FSD �e(cu��)�`����x��(sh��)����

11.9.11�ļ�ϵ�y(t��ng)���� �e(cu��)�`��δ���x��(sh��)����

11.9.12�@ʽ�ļ�I/O �e(cu��)�`��δ���x��(sh��)����

11.9.13��(n��i)������������޸ĺ���ӳ���(y��)��(xi��)���� �e(cu��)�`��δ���x��(sh��)����

11.9.14����������Ķ��Ԍ�(xi��)���� �e(cu��)�`��δ���x��(sh��)����

11.9.15������������A(y��)�xȡ���� �e(cu��)�`��δ���x��(sh��)����

11.9.16��(n��i)����������(y��)���e(cu��)�`̎������ �e(cu��)�`��δ���x��(sh��)����

11.9.17�ļ�ϵ�y(t��ng)�^(gu��)�V���(q��)��(d��ng)�����΢�^(gu��)�V�� �e(cu��)�`��δ���x��(sh��)����

11.9.18�^(gu��)�V�����ܵ����]���� �e(cu��)�`��δ���x��(sh��)����

11.9.19�����ط����c(di��n)���О� �e(cu��)�`��δ���x��(sh��)����

11.9.20 Process Monitor �e(cu��)�`����x��(sh��)����

11.10 NT�ļ�ϵ�y(t��ng)��NTFS�� �e(cu��)�`��δ���x��(sh��)����

11.10.1�߶��ļ�ϵ�y(t��ng)��Ҫ�� �e(cu��)�`��δ���x��(sh��)����

11.10.2�ɻ֏�(f��)�� �e(cu��)�`��δ���x��(sh��)����

11.10.3��ȫ�� �e(cu��)�`��δ���x��(sh��)����

11.10.4��(sh��)��(j��)��������e(cu��) �e(cu��)�`����x��(sh��)����

11.10.5NTFS�ĸ߼�(j��)���� �e(cu��)�`��δ���x��(sh��)����

11.10.6����(g��)��(sh��)��(j��)�� �e(cu��)�`����x��(sh��)����

11.10.7����Unicode�����Q(ch��ng) �e(cu��)�`����x��(sh��)����

11.10.8ͨ�������O(sh��)ʩ �e(cu��)�`��δ���x��(sh��)����

11.10.9��(d��ng)�B(t��i)�Ĵ���ӳ�� �e(cu��)�`��δ���x��(sh��)����

11.10.10Ӳ朽� �e(cu��)�`��δ���x��(sh��)����

11.10.11��̖(h��o)��ܛ��朽Ӻͽ��� �e(cu��)�`��δ���x��(sh��)����

11.10.12���s��ϡ���ļ� �e(cu��)�`��δ���x��(sh��)����

11.10.13׃����־ӛ� �e(cu��)�`��δ���x��(sh��)����

11.10.14ÿ�Ñ�(h��)�����~ �e(cu��)�`��δ���x��(sh��)����

11.10.15朽Ӹ�ۙ �e(cu��)�`��δ���x��(sh��)����

11.10.16���� �e(cu��)�`����x��(sh��)����

11.10.17 POSIX�L(f��ng)��Ąh���Z(y��)�x �e(cu��)�`��δ���x��(sh��)����

11.10.18 ��Ƭ���� �e(cu��)�`��δ���x��(sh��)����

11.10.19��(d��ng)�B(t��i)�օ^(q��) �e(cu��)�`��δ���x��(sh��)����

11.10.20 NTFS��(du��)�֌Ӿ���֧�� �e(cu��)�`��δ���x��(sh��)����

11.11 NTFS�ļ�ϵ�y(t��ng)�(q��)��(d��ng)���� �e(cu��)�`��δ���x��(sh��)����

11.12 NTFS�ĴűP(p��n)�Y(ji��)��(g��u) �e(cu��)�`��δ���x��(sh��)����

11.12.1�� �e(cu��)�`����x��(sh��)����

11.12.2�� �e(cu��)�`����x��(sh��)����

11.12.3���ļ��� �e(cu��)�`��δ���x��(sh��)����

11.12.4�ļ�ӛ䛾�̖(h��o) �e(cu��)�`��δ���x��(sh��)����

11.12.5�ļ�ӛ� �e(cu��)�`��δ���x��(sh��)����

11.12.6�ļ��� �e(cu��)�`��δ���x��(sh��)����

11.12.7���� �e(cu��)�`����x��(sh��)����

11.12.8���v�ͷdz��v���� �e(cu��)�`��δ���x��(sh��)����

11.12.9��(sh��)��(j��)���s��ϡ���ļ� �e(cu��)�`��δ���x��(sh��)����

11.12.10���sϡ�蔵(sh��)��(j��) �e(cu��)�`��δ���x��(sh��)����

11.12.11��ϡ�蔵(sh��)��(j��)�ĉ��s �e(cu��)�`��δ���x��(sh��)����

11.12.12ϡ���ļ� �e(cu��)�`��δ���x��(sh��)����

11.12.13׃����־�ļ� �e(cu��)�`��δ���x��(sh��)����

11.12.14���� �e(cu��)�`����x��(sh��)����

11.12.15��(du��)��ID �e(cu��)�`����x��(sh��)����

11.12.16���~��ۙ �e(cu��)�`��δ���x��(sh��)����

11.12.17�C�ϰ�ȫ�� �e(cu��)�`��δ���x��(sh��)����

11.12.18�ط����c(di��n) �e(cu��)�`��δ���x��(sh��)����

11.12.19�惦(ch��)������NTFS�A(y��)�� �e(cu��)�`��δ���x��(sh��)����

11.12.20�„�(w��)֧�� �e(cu��)�`��δ���x��(sh��)����

11.12.21���x �e(cu��)�`����x��(sh��)����

11.12.22�„�(w��)��API �e(cu��)�`��δ���x��(sh��)����

11.12.23�űP(p��n)�ϵČ�(sh��)�F(xi��n) �e(cu��)�`��δ���x��(sh��)����

11.12.24��־ӛ䛵Č�(sh��)�F(xi��n) �e(cu��)�`��δ���x��(sh��)����

11.13NTFS�֏�(f��)֧�� �e(cu��)�`��δ���x��(sh��)����

11.13.1�O(sh��)Ӌ(j��) �e(cu��)�`��δ���x��(sh��)����

11.13.2Ԫ��(sh��)��(j��)��־ӛ� �e(cu��)�`��δ���x��(sh��)����

11.13.3��־�ļ�����(w��) �e(cu��)�`��δ���x��(sh��)����

11.13.4��־ӛ��(l��i)�� �e(cu��)�`��δ���x��(sh��)����

11.13.5�֏�(f��) �e(cu��)�`��δ���x��(sh��)����

11.13.6�������� �e(cu��)�`����x��(sh��)����

11.13.7�������� �e(cu��)�`����x��(sh��)����

11.13.8���N(xi��o)���� �e(cu��)�`����x��(sh��)����

11.13.9NTFS�Ĵػ֏�(f��) �e(cu��)�`��δ���x��(sh��)����

11.13.10������ �e(cu��)�`����x��(sh��)����

11.13.11“(li��n)�C(j��)�űP(p��n)�z��Ϳ����ޏ�(f��) �e(cu��)�`��δ���x��(sh��)����

11.14�����ļ�ϵ�y(t��ng) �e(cu��)�`��δ���x��(sh��)����

11.14.1�״μ����ļ� �e(cu��)�`��δ���x��(sh��)����

11.14.2�����^(gu��)�� �e(cu��)�`����x��(sh��)����

11.14.3��ݼ��ܵ��ļ� �e(cu��)�`��δ���x��(sh��)����

11.14.4��(f��)�Ƽ��ܵ��ļ� �e(cu��)�`��δ���x��(sh��)����

11.14.5BitLocker����ж�d �e(cu��)�`��δ���x��(sh��)����

11.14.6“(li��n)�C(j��)����֧�� �e(cu��)�`��δ���x��(sh��)����

11.15ֱ���L��(w��n)��DAX���űP(p��n) �e(cu��)�`��δ���x��(sh��)����

11.15.1DAX�(q��)��(d��ng)����ģ�� �e(cu��)�`��δ���x��(sh��)����

11.15.2DAX�� �e(cu��)�`����x��(sh��)����

11.15.3DAX���Ͼ����δ�����I/O �e(cu��)�`��δ���x��(sh��)����

11.15.4�Ɉ�(zh��)��ӳ���ӳ�� �e(cu��)�`��δ���x��(sh��)����

11.15.5�K�� �e(cu��)�`����x��(sh��)����

11.15.6�ļ�ϵ�y(t��ng)�^(gu��)�V���(q��)��(d��ng)�����DAX �e(cu��)�`��δ���x��(sh��)����

11.15.7ˢ��DAXģʽ��I/O �e(cu��)�`��δ���x��(sh��)����

11.15.8���ͺ;����(y��)��֧�� �e(cu��)�`��δ���x��(sh��)����

11.15.9̓�MPM�űP(p��n)�ʹ惦(ch��)���g֧�� �e(cu��)�`��δ���x��(sh��)����

11.16��(f��)ԭ�ļ�ϵ�y(t��ng)��ReFS�� �e(cu��)�`��δ���x��(sh��)����

11.16.1 Minstore�ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

11.16.2 B ��(sh��)���������� �e(cu��)�`����x��(sh��)����

11.16.3������ �e(cu��)�`����x��(sh��)����

11.16.4�(y��)�� �e(cu��)�`����x��(sh��)����

11.16.5Minstore I/O �e(cu��)�`����x��(sh��)����

11.16.6ReFS�ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

11.16.7 ReFS�ڴűP(p��n)�ϵĽY(ji��)��(g��u) �e(cu��)�`��δ���x��(sh��)����

11.16.8��(du��)��ID �e(cu��)�`����x��(sh��)����

11.16.9��ȫ�Ժ�׃����־ �e(cu��)�`��δ���x��(sh��)����

11.17 ReFS�߼�(j��)���� �e(cu��)�`��δ���x��(sh��)����

11.17.1�ļ��K����������֧�֣���ϡ��VDL �e(cu��)�`��δ���x��(sh��)����

11.17.2 ReFSֱ��(xi��) �e(cu��)�`��δ���x��(sh��)����

11.17.3 ReFS�֏�(f��)֧�� �e(cu��)�`��δ���x��(sh��)����

11.17.4й©�z�y(c��) �e(cu��)�`��δ���x��(sh��)����

11.17.5�B��ʽ��ӛ䛣�SMR���� �e(cu��)�`��δ���x��(sh��)����

11.17.6 ReFS��(du��)�֌Ӿ���SMR��֧�� �e(cu��)�`��δ���x��(sh��)����

11.17.7��������(sh��) �e(cu��)�`����x��(sh��)����

11.17.8���s�ͻ��� �e(cu��)�`��δ���x��(sh��)����

11.18�惦(ch��)���g �e(cu��)�`��δ���x��(sh��)����

11.18.1�惦(ch��)���g�ă�(n��i)���ܘ�(g��u) �e(cu��)�`��δ���x��(sh��)����

11.18.2�惦(ch��)���g�ṩ�ķ���(w��) �e(cu��)�`��δ���x��(sh��)����

11.19���Y(ji��) �e(cu��)�`����x��(sh��)����

�� 12�� ����(d��ng)���P(gu��n)�C(j��) �e(cu��)�`����x��(sh��)����

12.1����(d��o)�^(gu��)�� �e(cu��)�`����x��(sh��)����

12.1.1UEFI����(d��o) �e(cu��)�`����x��(sh��)����

12.1.2BIOS����(d��o)�^(gu��)�� �e(cu��)�`����x��(sh��)����

12.1.3��ȫ����(d��ng) �e(cu��)�`��δ���x��(sh��)����

12.1.4Windows����(d��ng)������ �e(cu��)�`����x��(sh��)����

12.1.5����(d��ng)�ˆ� �e(cu��)�`��δ���x��(sh��)����

12.1.6�\(y��n)�І���(d��ng)��(y��ng)�ó��� �e(cu��)�`��δ���x��(sh��)����

12.1.7�y(c��)������(d��ng) �e(cu��)�`����x��(sh��)����

12.1.8�����Έ�(zh��)�� �e(cu��)�`��δ���x��(sh��)����

12.1.9Windows����ϵ�y(t��ng)���d�� �e(cu��)�`��δ���x��(sh��)����

12.1.10��iSCSI����(d��ng) �e(cu��)�`����x��(sh��)����

12.1.11̓�M�C(j��)�O(ji��n)�س�����d�� �e(cu��)�`��δ���x��(sh��)����

12.1.12VSM����(d��ng)���� �e(cu��)�`����x��(sh��)����

12.1.13��ȫ�\(y��n)�� �e(cu��)�`��δ���x��(sh��)����

12.1.14��ʼ����(n��i)���c��(zh��)���w��ϵ�y(t��ng) �e(cu��)�`��δ���x��(sh��)����

12.1.15��(n��i)�˳�ʼ���ĵ� һ�A�� �e(cu��)�`��δ���x��(sh��)����

12.1.16Smss��Csrss��Wininit �e(cu��)�`����x��(sh��)����

12.1.17ReadyBoot �e(cu��)�`����x��(sh��)����

12.1.18�Ԅ�(d��ng)����(d��ng)��ӳ�� �e(cu��)�`��δ���x��(sh��)����

12.1.19�P(gu��n)�C(j��) �e(cu��)�`����x��(sh��)����

12.1.20���ߺͿ��ن���(d��ng) �e(cu��)�`��δ���x��(sh��)����

12.1.21Windows�֏�(f��)�h(hu��n)����WinRE�� �e(cu��)�`��δ���x��(sh��)����

12.1.22��ȫģʽ �e(cu��)�`��δ���x��(sh��)����

12.1.23��ȫģʽ�¼��d���(q��)��(d��ng)���� �e(cu��)�`��δ���x��(sh��)����

12.1.24�ɸ�֪��ȫģʽ���Ñ�(h��)���� �e(cu��)�`��δ���x��(sh��)����

12.1.25����(d��ng)��B(t��i)�ļ� �e(cu��)�`��δ���x��(sh��)����

12.2�Y(ji��)Փ �e(cu��)�`��δ���x��(sh��)����



չ�_(k��i)ȫ��

�������WINDOWS����ϵ�y(t��ng) (��7��)(��2) ���ߺ�(ji��n)��

�����·���оS��Andrea Allievi����һ��ϵ�y(t��ng)��(j��)�_(k��i)�l(f��)�ߺͰ�ȫ�о����̎������г��^(gu��)15��ďĘI(y��)��(j��ng)�(y��n)������2010������m-�ȿɿ���W(xu��)��University of Milano-Bicocca�����I(y��)�����@��Ӌ(j��)��C(j��)�ƌW(xu��)�W(xu��)ʿ�W(xu��)λ���ڮ��I(y��)Փ���������_(k��i)�l(f��)��һ�N�ܹ�������Windows 7��(n��i)�˱��o(h��)�C(j��)�ƣ�PatchGuard���(q��)��(d��ng)����(qi��ng)�ƺ�������64λ������(d��o)ӛ䛣�MBR��Bootkit�������߀��һ�����򹤳̎�����(zhu��n)���ڏă�(n��i)�˼�(j��)���a���Ñ�(h��)ģʽ���a�IJ���ϵ�y(t��ng)��(n��i)��ԭ��������ȫ���׿�UEFI Bootkit�������о�Ŀ���_(k��i)�l(f��)������2012�ꌦ(du��)�⹫�����ij�ʼ�������_(k��i)�l(f��)�^(gu��)��N���@�^(gu��)PatchGuard�C(j��)�Ƶļ��g(sh��)����׫��(xi��)�˴����о�Փ�ĺ�������ͬ�r(sh��)��߀�_(k��i)�l(f��)�˶�������Ƴ�����ܛ���������߼�(j��)���m(x��)���{��ϵ�y(t��ng)���ߺ�ܛ������š�I(y��)��������������š�ڶ��Ӌ(j��)��C(j��)��ȫ��˾�������������TgSoft��Saferbytes���F(xi��n)�ѱ�MalwareBytes��ُ(g��u)���Լ�˼�����µ�Talos��ȫ�F(tu��n)�(du��)���������2016�����΢ܛ����΢ܛ���{���(b��o)���ģ�MSTIC����(d��n)�ΰ�ȫ�о����̎�����2018��1������������_(k��i)ʼ��΢ܛ��(n��i)�˰�ȫ���ĈF(tu��n)�(du��)��(d��n)���Y�����ϵ�y(t��ng)��(n��i)�˹��̎�����Ҫؓ(f��)؟(z��)��NT�Ͱ�ȫ��(n��i)�ˣ�Secure Kernel���S�o(h��)���_(k��i)�l(f��)�¹��ܣ�����Retpoline�Լ�CPU�A(y��)�y(c��)��(zh��)��©�������ʩ���� �������Ȼ���S�ڰ�ȫ�о���^(q��)�У���ͨ�^(gu��)Microsoft Windows Internals����׫��(xi��)�Ͱl(f��)���˶�ƪ���P(gu��n)Windows��(n��i)���¹��ܵļ��g(sh��)������ͬ�r(sh��)���ڶ���(ch��ng)���g(sh��)���(hu��)����Recon�Լ�΢ܛBlueHat���ϰl(f��)�ԡ����ͨ�^(gu��)Twitter�P(gu��n)ע����@aall86�� ���v��˹·���W��˹��(k��)��Alex Ionescu����CrowdStrike��˾���c(di��n)���̸����ü愓(chu��ng)ʼ��ϯ�ܘ�(g��u)��������һλ���缉(j��)�İ�ȫ�ܘ�(g��u)����Ҳ�ǵ׌�ϵ�y(t��ng)ܛ������(n��i)���_(k��i)�l(f��)����ȫ��Ӗ(x��n)�Լ����򹤳��I(l��ng)����(w��n)��(zhu��n)������ʮ�����(l��i)�����İ�ȫ�о�������Windows��(n��i)�˼������P(gu��n)�M���Ў�ʮ��(g��)�P(gu��n)�I��ȫ©���Լ���N�e(cu��)�`�О���ޏ�(f��)�����ṩ�˾޴������ ���v��˹����(d��n)��ReactOS��һ�N�����_(k��i)ʼ����(xi��)���_(k��i)ԴWindows��¡ϵ�y(t��ng)������ϯ��(n��i)���_(k��i)�l(f��)�����������_(k��i)�l(f��)�˴󲿷ֻ���Windows NT����ϵ�y(t��ng)����Ӌ(j��)��C(j��)�ƌW(xu��)��(zhu��n)�I(y��)�W(xu��)��(x��)���g�����v��˹����ؓ(f��)؟(z��)�_(k��i)�l(f��)iPhone��iPad�Լ�Apple TV���O(p��ng)����˾��ʼ����ƽ�_(t��i)�F(tu��n)�(du��)����iOS��(n��i)��������(d��o)���d���Լ��(q��)��(d��ng)������аl(f��)���������v��˹߀��Winsider Seminars Solutions��˾�Ą�(chu��ng)ʼ�ˣ�ԓ��˾��(zhu��n)���ڵ׌�ϵ�y(t��ng)ܛ�������򹤳������򱊶��C(j��)��(g��u)�ṩ��ȫ��Ӗ(x��n)�� ���v��˹����^(q��)�зdz����S������ȫ���ʮ����(ch��ng)���(d��ng)�аl(f��)�����v����Ҳ��ȫ��M���͂�(g��)���ṩ���P(gu��n)Windows��(n��i)��ԭ������Ӗ(x��n)��֧�ֺ����P(gu��n)�YԴ�������ͨ�^(gu��)Twitter�P(gu��n)ע����@aionescu�����L��(w��n)���IJ��ͣ�www.alex-ionescu.com�Լ�www.windows-internals.com/blog�������·���оS��Andrea Allievi����һ��ϵ�y(t��ng)��(j��)�_(k��i)�l(f��)�ߺͰ�ȫ�о����̎������г��^(gu��)15��ďĘI(y��)��(j��ng)�(y��n)������2010������m-�ȿɿ���W(xu��)��University of Milano-Bicocca�����I(y��)�����@��Ӌ(j��)��C(j��)�ƌW(xu��)�W(xu��)ʿ�W(xu��)λ���ڮ��I(y��)Փ���������_(k��i)�l(f��)��һ�N�ܹ�������Windows 7��(n��i)�˱��o(h��)�C(j��)�ƣ�PatchGuard���(q��)��(d��ng)����(qi��ng)�ƺ�������64λ������(d��o)ӛ䛣�MBR��Bootkit�������߀��һ�����򹤳̎�����(zhu��n)���ڏă�(n��i)�˼�(j��)���a���Ñ�(h��)ģʽ���a�IJ���ϵ�y(t��ng)��(n��i)��ԭ��������ȫ���׿�UEFI Bootkit�������о�Ŀ���_(k��i)�l(f��)������2012�ꌦ(du��)�⹫�����ij�ʼ���ߣ��_(k��i)�l(f��)�^(gu��)��N���@�^(gu��)PatchGuard�C(j��)�Ƶļ��g(sh��)����׫��(xi��)�˴����о�Փ�ĺ����¡�ͬ�r(sh��)��߀�_(k��i)�l(f��)�˶�������Ƴ�����ܛ���������߼�(j��)���m(x��)���{��ϵ�y(t��ng)���ߺ�ܛ������š�I(y��)��������������š�ڶ��Ӌ(j��)��C(j��)��ȫ��˾�������������TgSoft��Saferbytes���F(xi��n)�ѱ�MalwareBytes��ُ(g��u)���Լ�˼�����µ�Talos��ȫ�F(tu��n)�(du��)���������2016�����΢ܛ����΢ܛ���{���(b��o)���ģ�MSTIC����(d��n)�ΰ�ȫ�о����̎�����2018��1���𣬰�����_(k��i)ʼ��΢ܛ��(n��i)�˰�ȫ���ĈF(tu��n)�(du��)��(d��n)���Y�����ϵ�y(t��ng)��(n��i)�˹��̎�����Ҫؓ(f��)؟(z��)��NT�Ͱ�ȫ��(n��i)�ˣ�Secure Kernel���S�o(h��)���_(k��i)�l(f��)�¹��ܣ�����Retpoline�Լ�CPU�A(y��)�y(c��)��(zh��)��©�������ʩ���� �������Ȼ���S�ڰ�ȫ�о���^(q��)������ͨ�^(gu��)Microsoft Windows Internals����׫��(xi��)�Ͱl(f��)���˶�ƪ���P(gu��n)Windows��(n��i)���¹��ܵļ��g(sh��)������ͬ�r(sh��)���ڶ���(ch��ng)���g(sh��)���(hu��)����Recon�Լ�΢ܛBlueHat���ϰl(f��)�������ͨ�^(gu��)Twitter�P(gu��n)ע����@aall86�� ���v��˹·���W��˹��(k��)��Alex Ionescu����CrowdStrike��˾���c(di��n)���̸����ü愓(chu��ng)ʼ��ϯ�ܘ�(g��u)��������һλ���缉(j��)�İ�ȫ�ܘ�(g��u)����Ҳ�ǵ׌�ϵ�y(t��ng)ܛ������(n��i)���_(k��i)�l(f��)����ȫ��Ӗ(x��n)�Լ����򹤳��I(l��ng)����(w��n)��(zhu��n)������ʮ�����(l��i)�����İ�ȫ�о�������Windows��(n��i)�˼������P(gu��n)�M���Ў�ʮ��(g��)�P(gu��n)�I��ȫ©���Լ���N�e(cu��)�`�О���ޏ�(f��)�����ṩ�˾޴������ ���v��˹����(d��n)��ReactOS��һ�N�����_(k��i)ʼ����(xi��)���_(k��i)ԴWindows��¡ϵ�y(t��ng)������ϯ��(n��i)���_(k��i)�l(f��)�����������_(k��i)�l(f��)�˴󲿷ֻ���Windows NT����ϵ�y(t��ng)����Ӌ(j��)��C(j��)�ƌW(xu��)��(zhu��n)�I(y��)�W(xu��)��(x��)���g�����v��˹����ؓ(f��)؟(z��)�_(k��i)�l(f��)iPhone��iPad�Լ�Apple TV���O(p��ng)����˾��ʼ����ƽ�_(t��i)�F(tu��n)�(du��)����iOS��(n��i)�ˡ�����(d��o)���d���Լ��(q��)��(d��ng)������аl(f��)���������v��˹߀��Winsider Seminars & Solutions��˾�Ą�(chu��ng)ʼ����ԓ��˾��(zhu��n)���ڵ׌�ϵ�y(t��ng)ܛ�������򹤳������򱊶��C(j��)��(g��u)�ṩ��ȫ��Ӗ(x��n)�� ���v��˹����^(q��)�зdz����S������ȫ���ʮ����(ch��ng)���(d��ng)�аl(f��)�����v����Ҳ��ȫ��M���͂�(g��)���ṩ���P(gu��n)Windows��(n��i)��ԭ������Ӗ(x��n)��֧�ֺ����P(gu��n)�YԴ�������ͨ�^(gu��)Twitter�P(gu��n)ע����@aionescu�����L��(w��n)���IJ��ͣ�www.alex-ionescu.com�Լ�www.windows-internals.com/blog��

���o(w��)�u(p��ng)Փ����
��(sh��)�����]
����픲�
�ЈD�W(w��ng)
�ھ��ͷ�