Delphi下深入Windows核心编程_windows_delphi_其他

<html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta charset="utf-8"> <meta name="generator" content="pdf2htmlEX"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <link rel="stylesheet" href="https://static.pudn.com/base/css/base.min.css"> <link rel="stylesheet" href="https://static.pudn.com/base/css/fancy.min.css"> <link rel="stylesheet" href="https://static.pudn.com/prod/directory_preview_static/6260e0a7daa0590bf7b8cadb/raw.css"> <script src="https://static.pudn.com/base/js/compatibility.min.js"></script> <script src="https://static.pudn.com/base/js/pdf2htmlEX.min.js"></script> <script> try{ pdf2htmlEX.defaultViewer = new pdf2htmlEX.Viewer({}); }catch(e){} </script> <title></title> </head> <body> <div id="sidebar" style="display: none"> <div id="outline"> </div> </div> <div id="pf1" class="pf w0 h0" data-page-no="1"><div class="pc pc1 w0 h0"><img class="bi x0 y0 w1 h1" alt="" src="https://static.pudn.com/prod/directory_preview_static/6260e0a7daa0590bf7b8cadb/bg1.jpg"></div><div class="pi" data-data='{"ctm":[0.930727,0.000000,0.000000,0.930727,0.000000,0.000000]}'></div></div> </body> </html>

<div id="pf2" class="pf w2 h2" data-page-no="2"><div class="pc pc2 w2 h2"><img class="bi x0 y0 w3 h3" alt="" src="https://static.pudn.com/prod/directory_preview_static/6260e0a7daa0590bf7b8cadb/bg2.jpg"><div class="t m0 x1 h4 y1 ff1 fs0 fc0 sc0 ls0 ws0"><span class="fc1 sc0"> </span></div><div class="t m0 x2 h4 y2 ff1 fs0 fc0 sc0 ls0 ws0"><span class="fc1 sc0"> </span></div><div class="t m0 x3 h5 y3 ff1 fs1 fc0 sc0 ls1 ws0"><span class="fc1 sc0">III</span></div><div class="t m0 x4 h4 y4 ff1 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x4 h4 y5 ff1 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x4 h4 y6 ff1 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x4 h4 y7 ff1 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x5 h6 y8 ff2 fs0 fc0 sc0 ls0 ws0">“开发专家”是电子工业出版社计算机研发部长期以来精心培育的计算机科<span class="_ _0"></span>学技术类</div><div class="t m0 x4 h6 y9 ff2 fs0 fc0 sc0 ls0 ws0">本版图书品牌。这个品牌是由多个专题系列组<span class="_ _0"></span>成的横向大系列，涵盖了计算<span class="_ _0"></span>机技术的各个</div><div class="t m0 x4 h6 ya ff2 fs0 fc0 sc0 ls0 ws0">方面，特别是一直受到极大关注的程序开发类<span class="_ _0"></span>系列，例如《开发专家之数据<span class="_ _0"></span>库》<span class="_ _1"></span>、<span class="_ _1"></span>《开发专</div><div class="t m0 x4 h4 yb ff2 fs0 fc0 sc0 ls0 ws0">家之网络编程》<span class="_ _1"></span>、<span class="_ _2"></span>《开发专家之<span class="_ _3"> </span><span class="ff1">Delphi</span><span class="ls2">》及《开发专家<span class="_ _4"></span>之<span class="_ _5"> </span></span><span class="ff1 ws1">Sun ONE</span>》<span class="_ _0"></span>等。这些专题系<span class="_ _0"></span>列基于</div><div class="t m0 x4 h6 yc ff2 fs0 fc0 sc0 ls0 ws0">各自的角度，从纵向上包含了该专题的所有内<span class="_ _0"></span>容。因此，整个“开发专家”<span class="_ _0"></span>的品牌架构纵</div><div class="t m0 x4 h4 yd ff2 fs0 fc0 sc0 ls0 ws0">横交错，囊括了<span class="_ _0"></span>应用范围最广的<span class="_ _0"></span>计算机技术，<span class="_ _0"></span>海纳百川而又极<span class="_ _0"></span>具可扩展性。<span class="_ _0"></span><span class="ff1"> </span></div><div class="t m0 x5 h6 ye ff2 fs0 fc0 sc0 ls0 ws0">“开发专家”的作者队伍主要依托于“飞思科技<span class="_ _0"></span>产品研发中心”<span class="_ _2"></span>。<span class="_ _1"></span>“飞思科技产品研发</div><div class="t m0 x4 h6 yf ff2 fs0 fc0 sc0 ls0 ws0">中心”是由专业的策划人员、权威的技术专家<span class="_ _0"></span>和资深的作者队伍共同构成的<span class="_ _0"></span>。在图书的出</div><div class="t m0 x4 h6 y10 ff2 fs0 fc0 sc0 ls0 ws0">版上，形成了以研发为基础、以出版为中心、<span class="_ _0"></span>以服务为支持的专业化出版框<span class="_ _0"></span>架和流程。通</div><div class="t m0 x4 h6 y11 ff2 fs0 fc0 sc0 ls0 ws0">过深入的市场调查和技术跟踪，在综合了技术<span class="_ _0"></span>需求和读者焦点等因素的基础<span class="_ _0"></span>上，形成各系</div><div class="t m0 x4 h6 y12 ff2 fs0 fc0 sc0 ls0 ws0">列丛书的写作重点和大纲，然后聘请业界的有<span class="_ _0"></span>丰富实践经验及理论素养的资<span class="_ _0"></span>深专家及学者</div><div class="t m0 x4 h6 y13 ff2 fs0 fc0 sc0 ls0 ws0">进行写作。<span class="_ _6"></span>同时，<span class="_ _6"></span>策划工作全程介入<span class="_ _0"></span>写作进程，<span class="_ _6"></span>严格控制写作<span class="_ _0"></span>质量，<span class="_ _6"></span>用最专业的技术背<span class="_ _0"></span>景、</div><div class="t m0 x4 h6 y14 ff2 fs0 fc0 sc0 ls0 ws0">最深刻的理论基础、最具代表性的案例、最能<span class="_ _0"></span>为专业读者接受的形式，为读<span class="_ _0"></span>者提供品质最</div><div class="t m0 x4 h4 y15 ff2 fs0 fc0 sc0 ls0 ws0">佳的图书产品，<span class="_ _0"></span>体现了出版者和<span class="_ _0"></span>著作者的完美<span class="_ _0"></span>结合。<span class="ff1"> </span></div><div class="t m0 x5 h6 y16 ff2 fs0 fc0 sc0 ls0 ws0">多年来，计算机研发部始终把创造社会效益摆在首位，秉承一切为国内计算<span class="_ _0"></span>机技术专</div><div class="t m0 x4 h4 y17 ff2 fs0 fc0 sc0 ls0 ws0">业读者服务的精<span class="_ _0"></span>神，<span class="_ _6"></span>为推动国内<span class="_ _3"> </span><span class="ff1 ls3">IT<span class="_ _5"> </span></span>业发展、<span class="_ _6"></span>为体现国内技术的<span class="_ _0"></span>原创水平，<span class="_ _6"></span>穷尽所有<span class="_ _0"></span>的创意</div><div class="t m0 x4 h4 y18 ff2 fs0 fc0 sc0 ls0 ws0">与努力，将出版<span class="_ _0"></span>者的命运与读者<span class="_ _0"></span>的支持紧紧地<span class="_ _0"></span>连在了一起。<span class="ff1"> </span></div><div class="t m0 x5 h6 y19 ff2 fs0 fc0 sc0 ls0 ws0">在此，我们临出版行业之残酷竞争而不惧，异军突起，这与我们扎实的工作<span class="_ _0"></span>和广大读</div><div class="t m0 x4 h6 y1a ff2 fs0 fc0 sc0 ls0 ws0">者的支持是分不开的。为使我们的脚步更坚实<span class="_ _0"></span>、使我们的队伍永葆活力和创<span class="_ _0"></span>造力，我们期</div><div class="t m0 x4 h4 y1b ff2 fs0 fc0 sc0 ls0 ws0">待着您能为我们<span class="_ _0"></span>的前进贡献出您<span class="_ _0"></span>的意见和建议<span class="_ _0"></span>。同时，我们也<span class="_ _0"></span>在期盼着您的<span class="_ _0"></span>加入。<span class="ff1"> </span></div><div class="t m0 x5 h4 y1c ff2 fs0 fc0 sc0 ls0 ws0">我们的联系方式<span class="_ _0"></span>如下：<span class="ff1"> </span></div><div class="t m0 x5 h4 y1d ff2 fs0 fc0 sc0 ls0 ws0">咨询电话：<span class="_ _2"></span>（<span class="ff1">010</span>）<span class="ff1 ws2">6813454<span class="_ _0"></span>5 68131648 </span></div><div class="t m0 x5 h4 y1e ff2 fs0 fc0 sc0 ls0 ws0">答疑邮件：<span class="ff1 ls4">s<span class="_ _0"></span>upport@fecit.com<span class="_ _0"></span>.cn </span></div><div class="t m0 x5 h4 y1f ff2 fs0 fc0 sc0 ls0 ws0">飞思在线：<span class="ff1 ls5 ws3">http://www<span class="_ _7"></span>.fecit.com.cn http<span class="_ _4"></span>://www<span class="_ _7"></span>.fecit.n<span class="_ _4"></span>et </span></div><div class="t m0 x5 h4 y20 ff2 fs0 fc0 sc0 ls0 ws0">答疑网址：<span class="ff1 ls6">http://www<span class="_ _7"></span>.fecit.com.cn/question.htm<span class="_ _0"></span> </span></div><div class="t m0 x5 h4 y21 ff2 fs0 fc0 sc0 ls0 ws0">通用网址：计算<span class="_ _0"></span>机图书、飞思、<span class="_ _0"></span>飞思教育、飞<span class="_ _0"></span>思科技、<span class="ff1 ls7">FEC<span class="_ _4"></span>IT<span class="_ _4"></span> </span></div><div class="t m0 x4 h4 y22 ff1 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x5 h7 y23 ff1 fs2 fc0 sc0 ls8 ws0"> <span class="_ _4"></span> <span class="_ _4"></span> <span class="_ _4"></span> <span class="ff3 ls0">电子工业出版社计算机研<span class="_ _0"></span>发部<span class="ff1 fs0"> </span></span></div><div class="t m0 x6 h8 y24 ff2 fs3 fc0 sc0 ls0 ws0">出版说明<span class="ff1"> </span></div></div><div class="pi" data-data='{"ctm":[0.930727,0.000000,0.000000,0.930727,0.000000,0.000000]}'></div></div>

<div id="pf3" class="pf w2 h2" data-page-no="3"><div class="pc pc3 w2 h2"><img class="bi x0 y0 w3 h3" alt="" src="https://static.pudn.com/prod/directory_preview_static/6260e0a7daa0590bf7b8cadb/bg3.jpg"><div class="t m1 x7 h5 y25 ff4 fs1 fc0 sc0 ls0 ws0">内<span class="ff5"> <span class="_"> </span></span>容<span class="ff5"> <span class="_"> </span></span>简<span class="ff5"> <span class="_"> </span></span>介<span class="ff5"> </span></div><div class="t m1 x2 h5 y26 ff6 fs1 fc0 sc0 ls0 ws0">本书是一本介绍<span class="_ _8"> </span><span class="ff5 ls9">W<span class="_ _0"></span>indow<span class="_ _0"></span>s<span class="_ _8"> </span><span class="ff6 ls0">核心技术及高级技巧的专著。从系统内核编程出发，使用大量的例子帮助</span></span></div><div class="t m1 x4 h9 y27 ff6 fs1 fc0 sc0 ls0 ws0">读者理解这些编程技术，<span class="_ _7"></span>讲述了线程同步及隐藏、<span class="_ _7"></span>系统钩子深入分析、<span class="_ _7"></span>读写物理磁盘的关键技术、<span class="_ _0"></span>读写物</div><div class="t m1 x4 h5 y28 ff6 fs1 fc0 sc0 ls0 ws0">理内存和其他进程内存的核心技术、<span class="_ _7"></span><span class="ff5 ls9 ws4">W<span class="_ _0"></span>indows<span class="_ _0"></span> 9x<span class="_"> </span><span class="ff6 ls0 ws0">下调用<span class="_ _3"> </span></span><span class="ws0">16<span class="_"> </span><span class="ff6 ls0">位实模式和保护模式代码的核心技术、<span class="_ _7"></span>直接读</span></span></span></div><div class="t m1 x4 h5 y29 ff6 fs1 fc0 sc0 ls0 ws0">写端口技术、<span class="_ _0"></span>可执行文件加壳的技巧、<span class="_ _7"></span><span class="ff5 lsa">PE<span class="_"> </span><span class="ff6 ls0">结构分析、<span class="_ _7"></span><span class="ff5 lsb">Ring0<span class="_"> </span><span class="ff6 ls0">的实现、<span class="_ _0"></span><span class="ff5 ls9 ws5">W<span class="_ _7"></span>indows A<span class="_ _0"></span>PI<span class="_ _3"> </span><span class="ff6 ls0 ws0">截取技术、<span class="_ _0"></span>屏幕取词技</span></span></span></span></span></span></div><div class="t m1 x4 h5 y2a ff6 fs1 fc0 sc0 ls0 ws0">术等方面的内容。<span class="_ _9"></span>全书对热点源代码进行了深入剖析和讲解，<span class="_ _9"></span>同时本书汇聚了作者利用<span class="_ _3"> </span><span class="ff5 lsc">Soft-ICE<span class="_"> </span></span>跟踪调试</div><div class="t m1 x4 h5 y2b ff6 fs1 fc0 sc0 ls0 ws0">经验，作者多年的编程心得和技巧一览无遗。随书附送的光盘提供了书中涉及的程序源代码。<span class="ff5"> </span></div><div class="t m1 x2 h5 y2c ff6 fs1 fc0 sc0 ls0 ws0">本书可对<span class="_ _3"> </span><span class="ff5 ls9">Window<span class="_ _0"></span>s<span class="_"> </span><span class="ff6 ls0">核心编程感兴趣者提供帮助，亦可供广大编程人员及各大专院校师生参考。<span class="ff5"> </span></span></span></div><div class="t m1 x2 h5 y2d ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x2 h5 y2e ff6 fs1 fc0 sc0 ls0 ws0">未经许可，不得以任何方式复制或抄袭本书的部分或全部内容。<span class="ff5"> </span></div><div class="t m1 x2 h5 y2f ff6 fs1 fc0 sc0 ls0 ws0">版权所有，侵权必究。<span class="ff5"> </span></div><div class="t m1 x4 h5 y30 ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x2 h5 y31 ff4 fs1 fc0 sc0 lsd ws0">图书在版编目（CIP）数据<span class="ff5 ls0"> </span></div><div class="t m1 x2 h5 y32 ff5 fs1 fc0 sc0 lse ws0">Delphi<span class="_"> </span><span class="ff6 ls0">下深入<span class="_ _3"> </span></span><span class="ls9">W<span class="_ _7"></span>indow<span class="_ _0"></span>s<span class="_"> </span><span class="ff6 ls0">核心编程／飞思科技产品研发中心编著．—北京：电子工业出版社，</span>2003.<span class="_ _0"></span>1 </span></div><div class="t m1 x2 h5 y33 ff6 fs1 fc0 sc0 ls0 ws0">（开发专家之<span class="_ _3"> </span><span class="ff5 lse">Delphi</span>）<span class="ff5"> </span></div><div class="t m1 x2 h5 y34 ff5 fs1 fc0 sc0 lsf ws6">ISBN 7-<span class="_ _0"></span>5053-8<span class="_ _0"></span>402-3 </div><div class="t m1 x2 h5 y35 ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x2 h5 y36 ff6 fs1 fc0 sc0 ls0 ws0">Ⅰ<span class="ff5 ls10 ws7">.D... </span>Ⅱ<span class="ff5">.</span>飞<span class="ff5 ls10 ws7">... </span>Ⅲ<span class="ff5">.</span>①软件工具－程序设计②窗口软件，<span class="ff5 ls9">W<span class="_ _0"></span>indow<span class="_ _0"></span>s<span class="ff6 ls0">－程序设计</span><span class="ls11"> <span class="ff6 ls0">Ⅳ<span class="ff5">.</span>①</span><span class="ls12">TP311.56<span class="ff6 ls0">②<span class="ff5"> </span></span></span></span></span></div><div class="t m1 x2 h5 y37 ff5 fs1 fc0 sc0 ls9 ws0">TP316.<span class="_ _0"></span>7 </div><div class="t m1 x2 h5 y38 ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x2 h5 y39 ff6 fs1 fc0 sc0 ls0 ws0">中国版本图书馆<span class="_ _3"> </span><span class="ff5 lsb">CIP<span class="_"> </span></span>数据核字（<span class="ff5 ls9">2002</span>）第<span class="_ _a"> </span><span class="ff5 ls9">105039<span class="_ _a"> </span></span>号<span class="ff5"> </span></div><div class="t m1 x4 h5 y3a ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x4 h5 y3b ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x4 h5 y3c ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x4 h5 y3d ff5 fs1 fc0 sc0 ls0 ws0"> </div><div class="t m1 x4 h5 y3e ff6 fs1 fc0 sc0 ls0 ws0">责任编辑：王树伟<span class="ff5 ls11"> </span>王<span class="ff5 ls13"> </span>蒙<span class="ff5"> </span></div><div class="t m1 x4 h5 y3f ff6 fs1 fc0 sc0 ls0 ws0">印<span class="ff5 ls11"> </span>刷：<span class="ff5 ls11"> </span></div><div class="t m1 x4 h5 y40 ff6 fs1 fc0 sc0 ls0 ws0">出版发行：电子工业出版社<span class="ff5 ls14 ws8"> http://w<span class="_ _0"></span>ww<span class="_ _7"></span>.phei.com<span class="_ _0"></span>.cn </span></div><div class="t m1 x4 h5 y41 ff5 fs1 fc0 sc0 ls11 ws0"> <span class="_ _0"></span> <span class="ff6 ls0">北京海淀区万寿路<span class="_ _a"> </span></span><span class="ls9">173<span class="_"> </span><span class="ff6 ls0">信箱</span><span class="ls13"> <span class="ff6 ls0">邮编：</span><span class="ls12">1000<span class="_ _4"></span>36 </span></span></span></div><div class="t m1 x4 h9 y42 ff6 fs1 fc0 sc0 ls0 ws0">经</div><div class="t m1 x8 h5 y43 ff5 fs1 fc0 sc0 ls11 ws0"> <span class="ff6 ls0">销：各地新华书店<span class="ff5"> </span></span></div><div class="t m1 x4 h5 y44 ff6 fs1 fc0 sc0 ls0 ws0">开<span class="ff5 ls11"> </span>本：<span class="ff5 ls12">787</span>×<span class="ff5 ls9 ws9">1092 <span class="_ _0"></span>1/16<span class="_ _0"></span> <span class="ff6 ls0 ws0">印张：</span><span class="wsa">33.5 <span class="ff6 ls0 ws0">字数：</span> 857.<span class="_ _0"></span>6<span class="_ _3"> </span><span class="ff6 ls15 ws0">千字<span class="ff5 ls11"> </span><span class="ls0">附光盘<span class="_ _a"> </span><span class="ff5">1<span class="_ _3"> </span></span>张<span class="ff5"> </span></span></span></span></span></div><div class="t m1 x4 h5 y45 ff6 fs1 fc0 sc0 ls0 ws0">版<span class="ff5 ls11"> </span>次：<span class="ff5 ls12">2003<span class="_"> </span></span>年<span class="_ _3"> </span><span class="ff5">1<span class="_"> </span></span>月第<span class="_ _3"> </span><span class="ff5">1<span class="_"> </span></span>版<span class="ff5 ls12 wsb"> 2003<span class="_ _3"> </span></span>年<span class="_ _3"> </span><span class="ff5">1<span class="_"> </span></span>月第<span class="_ _3"> </span><span class="ff5">1<span class="_"> </span></span>次印刷<span class="ff5"> </span></div><div class="t m1 x4 h5 y46 ff6 fs1 fc0 sc0 ls0 ws0">印<span class="ff5 ls11"> </span>数：<span class="ff5 ls13"> </span>册<span class="ff5 ls16"> <span class="_ _b"> </span> <span class="_ _b"> </span></span>定价：<span class="ff5 ls11"> <span class="_ _0"></span> <span class="ff6 ls0">元（含光盘）<span class="ff5"> </span></span></span></div><div class="t m1 x4 h5 y47 ff5 fs1 fc0 sc0 ls11 ws0"> <span class="ff6 ls0">凡购买电子工业出版社的图书，<span class="_ _6"></span>如有缺损问题，<span class="_ _0"></span>请向购买书店调换。<span class="_ _7"></span>若书店售缺，<span class="_ _7"></span>请与本社发行部联</span></div><div class="t m1 x4 h9 y48 ff6 fs1 fc0 sc0 ls0 ws0">系。联系电话：<span class="_ _c"></span><span class="ls9">（010）682<span class="_ _0"></span>79077 </span></div></div><div class="pi" data-data='{"ctm":[0.930727,0.000000,0.000000,0.930727,0.000000,0.000000]}'></div></div>

<div id="pf4" class="pf w2 h2" data-page-no="4"><div class="pc pc4 w2 h2"><img class="bi x0 y0 w3 h3" alt="" src="https://static.pudn.com/prod/directory_preview_static/6260e0a7daa0590bf7b8cadb/bg4.jpg"><div class="t m0 x1 h4 y1 ff7 fs0 fc0 sc0 ls0 ws0"><span class="fc1 sc0"> </span></div><div class="t m0 x2 h4 y2 ff7 fs0 fc0 sc0 ls0 ws0"><span class="fc1 sc0"> </span></div><div class="t m0 x9 h5 y3 ff7 fs1 fc0 sc0 ls0 ws0"><span class="fc1 sc0">V</span></div><div class="t m0 x4 h4 y49 ff7 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x4 h4 y4a ff7 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x4 h4 y4b ff7 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x5 h6 y4c ff8 fs0 fc0 sc0 ls0 ws0">近些年计算机软件的发展很快，从工具软件到管理软件都有很成熟的产品。<span class="_ _0"></span>软件系统</div><div class="t m0 x4 h6 y4d ff8 fs0 fc0 sc0 ls0 ws0">的开发不但需要<span class="_ _0"></span>扎实的软件基础<span class="_ _0"></span>知识及团队合<span class="_ _0"></span>作精神，还需要<span class="_ _0"></span>对<span class="_ _d"> </span>Windows<span class="_ _d"> </span>系<span class="_ _0"></span>统这个黑匣子</div><div class="t m0 x4 h6 y4e ff8 fs0 fc0 sc0 ls0 ws0">有一定的了解，以编写出高性能的、高技术含<span class="_ _0"></span>量的代码来。如果仅凭对开发<span class="_ _0"></span>语言的掌握，</div><div class="t m0 x4 h6 y4f ff8 fs0 fc0 sc0 ls0 ws0">不求甚解，不深入系统内核去分析、挖掘，就不会有<span class="_"> </span>Soft <span class="_ _0"></span>ICE（系统反编译调试工具）<span class="_ _2"></span>、</div><div class="t m0 x4 h6 y50 ff8 fs0 fc0 sc0 ls0 ws0">PartitionMagic<span class="_ _0"></span>（魔术化分区工<span class="_ _0"></span>具）<span class="_ _2"></span>、Norton Utilities（<span class="_ _0"></span>诺顿磁盘工具<span class="_ _0"></span>）等著名的软件<span class="_ _0"></span>。</div><div class="t m0 x4 h6 y51 ff8 fs0 fc0 sc0 ls0 ws0">可是对于一些核心技术，大多数程序员还是知<span class="_ _0"></span>之甚少。本书介绍的技术大部<span class="_ _0"></span>分是作者及网</div><div class="t m0 x4 h6 y52 ff8 fs0 fc0 sc0 ls0 ws0">友多年编程的积累和总结。把这些代码汇集在<span class="_ _0"></span>一起出版，希望能对读者有一<span class="_ _0"></span>定的帮助或启</div><div class="t m0 x4 h6 y53 ff8 fs0 fc0 sc0 ls0 ws0">发。 </div><div class="t m0 x5 h6 y54 ff8 fs0 fc0 sc0 ls0 ws0">本书讲述了线程同步及隐藏、系统钩子深入分析、读写物理磁盘的关键技术<span class="_ _0"></span>、读写物</div><div class="t m0 x4 h6 y55 ff8 fs0 fc0 sc0 ls0 ws0">理内存和其他进<span class="_ _0"></span>程内存的核心技<span class="_ _0"></span>术、Windows <span class="_ _0"></span>9x<span class="_ _8"> </span>下调用<span class="_ _8"> </span>16<span class="_ _8"> </span>位实模<span class="_ _0"></span>式和保护模式代<span class="_ _0"></span>码的核</div><div class="t m0 x4 h6 y56 ff8 fs0 fc0 sc0 ls0 ws0">心技术、<span class="_ _e"></span><span class="ls2">直接读写端口<span class="_ _4"></span>技术、<span class="_ _f"></span>可执行文件加<span class="_ _4"></span>壳的技巧<span class="_ _4"></span>、<span class="_ _f"></span><span class="ls0">PE<span class="_ _3"> </span>结构分析、<span class="_ _e"></span>Ring0<span class="_ _3"> </span>的实现、<span class="_ _e"></span><span class="ls2">Wi<span class="_ _4"></span>ndows </span></span></span></div><div class="t m0 x4 h6 y57 ff8 fs0 fc0 sc0 ls0 ws0">API<span class="_ _5"> </span>截取技<span class="_ _0"></span>术、屏幕取词<span class="_ _0"></span>技术等方面的内<span class="_ _0"></span>容。 </div><div class="t m0 x5 h6 y58 ff8 fs0 fc0 sc0 ls0 ws0">其中的屏幕取词<span class="_ _0"></span>技术是网络上许<span class="_ _0"></span>多<span class="_ _5"> </span>BBS<span class="_ _d"> </span>的热<span class="_ _0"></span>点话题，遗憾<span class="_ _0"></span>的是<span class="_ _5"> </span>BBS<span class="_ _d"> </span>上<span class="_ _0"></span>涉及到关键技<span class="_ _0"></span>术</div><div class="t m0 x4 h6 y59 ff8 fs0 fc0 sc0 ls0 ws0">时都含糊其词<span class="_ _0"></span>。<span class="_ _6"></span>本书将介<span class="_ _0"></span>绍一个完整的屏<span class="_ _0"></span>幕取词程序<span class="_ _6"></span>（<span class="_ _0"></span>包括<span class="_ _3"> </span>16<span class="_ _5"> </span>位的<span class="_ _5"> </span>Thunk<span class="_ _3"> </span>关键技术，<span class="_ _10"></span>适用</div><div class="t m0 x4 h6 y5a ff8 fs0 fc0 sc0 ls0 ws0">于<span class="_ _5"> </span>Windows<span class="_ _0"></span> 9x/NT/2000）<span class="_ _2"></span>。 </div><div class="t m0 x5 h6 y5b ff8 fs0 fc0 sc0 ls0 ws0">CIH<span class="_"> </span>病毒曾经一度让全球的人们谈虎色变，这也是<span class="_ _0"></span>前几年的热门话题。CIH<span class="_"> </span>病毒利用</div><div class="t m0 x4 h6 y5c ff8 fs0 fc0 sc0 ls0 ws0">Windows 9x<span class="_ _d"> </span>下保护<span class="_ _0"></span>模式编程的一<span class="_ _0"></span>个技巧（漏洞<span class="_ _0"></span>）<span class="_ _1"></span>，从<span class="_ _d"> </span>Ring3<span class="_ _d"> </span>跳到<span class="_ _d"> </span>Ring0<span class="_ _d"> </span>执行<span class="_ _0"></span>一些系统服务</div><div class="t m0 x4 h6 y5d ff8 fs0 fc0 sc0 ls2 ws0">函数，<span class="_ _6"></span>做了一些<span class="_ _10"></span>“<span class="_ _4"></span>见不得人<span class="_ _4"></span>”<span class="_ _10"></span>的<span class="_ _4"></span>操作：<span class="_ _10"></span>用垃<span class="_ _4"></span>圾数据覆<span class="_ _4"></span>盖硬盘扇区、<span class="_ _6"></span>读写破坏<span class="_ _5"> </span>BI<span class="_ _4"></span>OS<span class="_ _5"> </span>芯片。<span class="_ _6"></span>CIH</div><div class="t m0 x4 h6 y5e ff8 fs0 fc0 sc0 ls0 ws0">病毒源代码中有<span class="_ _0"></span>许多值得学习的<span class="_ _0"></span>地方，<span class="_ _7"></span>本书中的<span class="_ _3"> </span>Windows <span class="_ _f"></span><span class="ls2">9x<span class="_ _5"> </span>下的物理<span class="_ _4"></span>磁盘读写技<span class="_ _4"></span>术、<span class="_ _0"></span>时间</span></div><div class="t m0 x4 h6 y5f ff8 fs0 fc0 sc0 ls0 ws0">变速器等就使用了这种技术。玩过网络游戏的<span class="_ _0"></span>人都应该听说过时间变速器，<span class="_ _0"></span>这种变速器运</div><div class="t m0 x4 h6 y60 ff8 fs0 fc0 sc0 ls0 ws0">行在<span class="_"> </span>Ring0，与操作系统同一特权级，使用特殊的<span class="_ _0"></span>指令改变计算机的时钟周期，骗过操作</div><div class="t m0 x4 h6 y61 ff8 fs0 fc0 sc0 ls0 ws0">系统，造成计时器（时间）高速“前进”的假<span class="_ _0"></span>象，许多网络游戏就是用这样<span class="_ _0"></span>的变速器来作</div><div class="t m0 x4 h6 y62 ff8 fs0 fc0 sc0 ls0 ws0">弊的。 </div><div class="t m0 x5 h6 y63 ff8 fs0 fc0 sc0 ls0 ws0">在<span class="_ _5"> </span>DOS<span class="_ _5"> </span>下实现过汇编高级<span class="_ _0"></span>编程的人一定会<span class="_ _0"></span>对<span class="_ _5"> </span>EXE<span class="_ _5"> </span>文件很熟悉，可是<span class="_ _3"> </span>Microsoft<span class="_ _5"> </span>的产品</div><div class="t m0 x4 h6 y64 ff8 fs0 fc0 sc0 ls0 ws0">未来将脱离<span class="_ _d"> </span>DOS，不<span class="_ _0"></span>再提供对<span class="_ _d"> </span>DOS<span class="_ _d"> </span>的支持。W<span class="_ _0"></span>in32<span class="_ _d"> </span>提供新的可执行<span class="_ _0"></span>文件格式<span class="_ _d"> </span>PE，本<span class="_ _0"></span>书将详</div><div class="t m0 x4 h6 y65 ff8 fs0 fc0 sc0 ls0 ws0">细地说明<span class="_ _3"> </span>PE<span class="_ _5"> </span>的结构，并<span class="_ _0"></span>在<span class="_ _5"> </span>PE<span class="_ _3"> </span>文件结构的基础上<span class="_ _0"></span>实现截取<span class="_ _3"> </span>API、屏幕取词等<span class="_ _0"></span>技术。 </div><div class="t m0 x5 h6 y66 ff8 fs0 fc0 sc0 ls0 ws0">全书分为<span class="_ _3"> </span>10<span class="_ _5"> </span>章，内容简<span class="_ _0"></span>介如下： </div><div class="t m0 x5 h6 y67 ff8 fs0 fc0 sc0 ls17 ws0">第1章D<span class="_ _e"></span>L<span class="_ _e"></span>L与<span class="_ _e"></span>数<span class="_ _e"></span>据<span class="_ _e"></span>共<span class="_ _f"></span>享<span class="_ _e"></span>，<span class="_ _e"></span>在<span class="ls0">Win32<span class="_ _5"> </span>中通过<span class="_ _0"></span>使用内存映像文<span class="_ _0"></span>件、全局原子<span class="_ _0"></span>等实现多进程</span></div><div class="t m0 x4 h6 y68 ff8 fs0 fc0 sc0 ls0 ws0">共享数据，这一<span class="_ _0"></span>章是基础，后面<span class="_ _0"></span>的很多章节都<span class="_ _0"></span>使用了本章介绍<span class="_ _0"></span>的数据共享技<span class="_ _0"></span>术。 </div><div class="t m0 x5 h6 y69 ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _8"> </span>2<span class="_ _8"> </span>章钩子原理，介<span class="_ _0"></span>绍了消息（包括<span class="_ _0"></span>键盘、鼠标消<span class="_ _0"></span>息）的截取、钩<span class="_ _0"></span>子的安装、DLL<span class="_ _d"> </span>注</div><div class="t m0 x4 h6 y6a ff8 fs0 fc0 sc0 ls0 ws0">入其他进程的方法等技术。这一章所介绍的内容<span class="_ _0"></span>是后面截取<span class="_"> </span>API、屏幕取词<span class="_ _0"></span>等技术的基础</div><div class="t m0 x4 h6 y6b ff8 fs0 fc0 sc0 ls0 ws0">知识。 </div><div class="t m0 x5 h6 y6c ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _5"> </span>3<span class="_ _d"> </span>章系统<span class="_ _0"></span>内核，让读者<span class="_ _0"></span>对<span class="_ _5"> </span>Windows<span class="_ _d"> </span>内<span class="_ _0"></span>核有了一定<span class="_ _0"></span>的了解，介绍了<span class="_ _0"></span>进程的枚举、线<span class="_ _0"></span>程</div><div class="t m0 x4 h6 y6d ff8 fs0 fc0 sc0 ls0 ws0">的同步、进程深<span class="_ _0"></span>度隐藏的种种方<span class="_ _0"></span>法及技巧、Wi<span class="_ _0"></span>ndows NT/20<span class="_ _0"></span>00<span class="_ _3"> </span>的性能计数器等技术。 </div><div class="t m0 x5 h6 y6e ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _5"> </span>4<span class="_ _3"> </span>章低层操作，介绍内<span class="_ _0"></span>嵌汇编获取<span class="_ _3"> </span>Ring0<span class="_ _5"> </span>特权的<span class="_ _0"></span>技巧、Windows <span class="_ _10"></span>9x/NT/2000<span class="_ _3"> </span>时间变</div><div class="t m0 x4 h6 y6f ff8 fs0 fc0 sc0 ls0 ws0">速器的实现原理<span class="_ _0"></span>、16<span class="_ _3"> </span>位与<span class="_ _5"> </span>32<span class="_ _3"> </span>位代码的核心接口技<span class="_ _0"></span>术等方面的内<span class="_ _0"></span>容。 </div><div class="t m0 x6 h8 y70 ff8 fs3 fc0 sc0 ls0 ws0">前<span class="ff7 ls18"> </span>言<span class="ff7"> </span></div></div><div class="pi" data-data='{"ctm":[0.930727,0.000000,0.000000,0.930727,0.000000,0.000000]}'></div></div>

<div id="pf5" class="pf w2 h2" data-page-no="5"><div class="pc pc5 w2 h2"><img class="bi x0 y0 w3 h3" alt="" src="https://static.pudn.com/prod/directory_preview_static/6260e0a7daa0590bf7b8cadb/bg5.jpg"><div class="t m0 x2 h4 y71 ff7 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x4 h5 y3 ff7 fs1 fc0 sc0 ls19 ws0">VI </div><div class="t m0 x5 h6 y72 ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _5"> </span>5<span class="_ _3"> </span>章磁盘读写，<span class="_ _7"></span>分别提供了<span class="_ _3"> </span>Windows <span class="_ _f"></span>9x/NT/<span class="_ _0"></span>2000<span class="_ _3"> </span>下逻辑扇区和物理扇<span class="_ _0"></span>区的读写，<span class="_ _7"></span>介</div><div class="t m0 x4 h6 y73 ff8 fs0 fc0 sc0 ls0 ws0">绍了磁盘操作中<span class="_ _0"></span>鲜为人知的核心<span class="_ _0"></span>技术。 </div><div class="t m0 x5 h6 y74 ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _5"> </span>6<span class="_ _3"> </span>章回收站和<span class="_ _3"> </span>IE，<span class="_ _7"></span>介绍了回收<span class="_ _0"></span>站的物理存贮<span class="_ _0"></span>结构、<span class="_ _6"></span>监视回收站、<span class="_ _6"></span>IE<span class="_ _5"> </span>缓冲区<span class="_ _0"></span>数据、<span class="_ _7"></span>IE</div><div class="t m0 x4 h6 y75 ff8 fs0 fc0 sc0 ls0 ws0">窗口的监视等方<span class="_ _0"></span>面的内容。 </div><div class="t m0 x5 h6 y76 ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _8"> </span>7<span class="_ _8"> </span>章高级应用，介<span class="_ _0"></span>绍了<span class="_ _8"> </span>DDE、消息<span class="_ _0"></span>机制、剪贴板<span class="_ _0"></span>和目录的监控<span class="_ _0"></span>、程序运行后<span class="_ _0"></span>自动删</div><div class="t m0 x4 h6 y77 ff8 fs0 fc0 sc0 ls0 ws0">除、只运一个实例的多种方法、移动正在使用<span class="_ _0"></span>的文件、类型转换与存储转换<span class="_ _0"></span>、可执行文件</div><div class="t m0 x4 h6 y78 ff8 fs0 fc0 sc0 ls0 ws0">加壳等高级应用<span class="_ _0"></span>技巧。 </div><div class="t m0 x5 h6 y79 ff8 fs0 fc0 sc0 ls1a ws0">第8章P<span class="_ _e"></span>E结<span class="_ _f"></span>构<span class="_ _f"></span>分<span class="_ _e"></span>析<span class="_ _e"></span>，<span class="_ _f"></span>介<span class="_ _e"></span>绍<span class="_ _f"></span>了<span class="ls0">Windows<span class="_ _5"> </span>的<span class="_ _5"> </span>PE<span class="_ _3"> </span>文件结构，并详细分<span class="_ _0"></span>析了其中每部<span class="_ _0"></span>分的含</span></div><div class="t m0 x4 h6 y7a ff8 fs0 fc0 sc0 ls0 ws0">义，这是截取<span class="_ _3"> </span>API<span class="_ _5"> </span>等技术<span class="_ _0"></span>的基础。 </div><div class="t m0 x5 h6 y7b ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _d"> </span>9<span class="_ _d"> </span>章内存管理，<span class="_ _0"></span>介绍了物理内<span class="_ _0"></span>存的存取、进<span class="_ _0"></span>程内存的存取、<span class="_ _0"></span>内存堆的枚举<span class="_ _0"></span>等核心技</div><div class="t m0 x4 h6 y7c ff8 fs0 fc0 sc0 ls0 ws0">术，让读者对内<span class="_ _0"></span>存的结构有更深<span class="_ _0"></span>入的了解。 </div><div class="t m0 x5 h6 y7d ff8 fs0 fc0 sc0 ls0 ws0">第<span class="_ _5"> </span>10<span class="_ _5"> </span>章<span class="_ _5"> </span>API Hoo<span class="_ _0"></span>k<span class="_ _5"> </span>及屏幕取词，<span class="_ _0"></span>介绍了<span class="_ _5"> </span>16<span class="_ _3"> </span>位和<span class="_ _5"> </span>32<span class="_ _5"> </span>位<span class="_ _5"> </span>Windows<span class="_ _0"></span> 9x<span class="_ _5"> </span>的<span class="_ _5"> </span>API Hoo<span class="_ _0"></span>k<span class="_ _5"> </span>技术、</div><div class="t m0 x4 h6 y7e ff8 fs0 fc0 sc0 ls0 ws0">Windows <span class="_ _10"></span>NT/2000<span class="_ _3"> </span>的<span class="_ _5"> </span>API <span class="_ _6"></span>Hook<span class="_ _3"> </span>技术、Windows <span class="_ _10"></span>9x/NT/2000<span class="_ _3"> </span>下的屏幕取词技术<span class="_ _0"></span>（该技术还包</div><div class="t m0 x4 h6 y7f ff8 fs0 fc0 sc0 ls0 ws0">括<span class="_ _5"> </span>16<span class="_ _d"> </span>位的<span class="_ _5"> </span>Thunk<span class="_ _5"> </span>等关键技术）<span class="_ _2"></span>。其中，如果屏<span class="_ _0"></span>幕取词技术加<span class="_ _0"></span>入英文词库就<span class="_ _0"></span>可以实现独自开</div><div class="t m0 x4 h6 y80 ff8 fs0 fc0 sc0 ls0 ws0">发词霸。 </div><div class="t m0 x5 h6 y81 ff8 fs0 fc0 sc0 ls0 ws0">特别说明：<span class="_ _2"></span>在书中所有出现<span class="_ _11"></span>Windows <span class="_ _e"></span>9x<span class="_ _a"> </span>的地<span class="_ _0"></span>方，<span class="_ _1"></span>都适用于<span class="_ _11"></span>Windows <span class="_ _f"></span>Me；<span class="_ _2"></span><span class="ls2">所有<span class="_ _4"></span>出现<span class="_ _a"> </span>Windo<span class="_ _4"></span>ws </span></div><div class="t m0 x4 h6 y82 ff8 fs0 fc0 sc0 ls0 ws0">NT/2000<span class="_ _3"> </span>的地方，都适用于<span class="_ _3"> </span>Windows XP。随<span class="_ _0"></span>书附送的光盘<span class="_ _0"></span>提供了书中涉<span class="_ _0"></span>及的程序源代码<span class="_ _0"></span>。 </div><div class="t m0 x5 h6 y83 ff8 fs0 fc0 sc0 ls0 ws0">本书由飞思科技<span class="_ _0"></span>产品研发中心策<span class="_ _0"></span>划并组织编写<span class="_ _0"></span>，<span class="_ _9"></span>同时参与写作<span class="_ _0"></span>的还有温锦山<span class="_ _0"></span>、<span class="_ _9"></span>唐柱鹏、</div><div class="t m0 x4 h6 y84 ff8 fs0 fc0 sc0 ls0 ws0">刘鉴澄、<span class="_ _6"></span>张恒、<span class="_ _7"></span>赵蕾等人。<span class="_ _7"></span>书中有<span class="_ _0"></span>三个例子由网<span class="_ _0"></span>友陈经韬<span class="_ _7"></span>（http:<span class="_ _0"></span>//www.138s<span class="_ _0"></span>oft.com/）<span class="_ _6"></span>提</div><div class="t m0 x4 h6 y85 ff8 fs0 fc0 sc0 ls0 ws0">供，在此表示感谢。由于时间仓促，书中难免<span class="_ _0"></span>有不足之处，恳请读者批评指<span class="_ _0"></span>出。如果在阅</div><div class="t m0 x4 h6 y86 ff8 fs0 fc0 sc0 ls0 ws0">读本书或使用书<span class="_ _0"></span>中例子的过程中<span class="_ _0"></span>有什么疑问，<span class="_ _0"></span>欢迎与我们联系<span class="_ _0"></span>。 </div><div class="t m0 x5 h6 y87 ff8 fs0 fc0 sc0 ls0 ws0">当然，限于作者<span class="_ _0"></span>水平，加之时间<span class="_ _0"></span>仓促，书中不<span class="_ _0"></span>足之处难免，敬<span class="_ _0"></span>请读者批评指<span class="_ _0"></span>正。 </div><div class="t m0 x5 h6 y88 ff8 fs0 fc0 sc0 ls0 ws0">我们的联系方式<span class="_ _0"></span>： </div><div class="t m0 x5 h6 y89 ff8 fs0 fc0 sc0 ls0 ws0">咨询电话：<span class="_ _2"></span>（010）6813454<span class="_ _0"></span>5 68131648 </div><div class="t m0 x5 h6 y8a ff8 fs0 fc0 sc0 ls0 ws0">答疑邮件：supp<span class="_ _0"></span>ort@fecit<span class="_ _0"></span>.com.cn </div><div class="t m0 x5 h6 y8b ff8 fs0 fc0 sc0 ls0 ws0">飞思在线：http<span class="_ _0"></span>://www.fe<span class="_ _0"></span>cit.com.cn <span class="_ _0"></span>http://ww<span class="_ _0"></span>w.fecit.net </div><div class="t m0 x5 h6 y8c ff8 fs0 fc0 sc0 ls0 ws0">答疑网址：http<span class="_ _0"></span>://www.fe<span class="_ _0"></span>cit.com.cn/que<span class="_ _0"></span>stion.htm<span class="_ _0"></span> </div><div class="t m0 x5 h6 y8d ff8 fs0 fc0 sc0 ls0 ws0">通用网址：计算<span class="_ _0"></span>机图书、飞思、<span class="_ _0"></span>飞思教育、飞<span class="_ _0"></span>思科技、FECIT </div><div class="t m0 x4 h4 y8e ff7 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x5 h7 y8f ff7 fs2 fc0 sc0 ls8 ws0"> <span class="_ _4"></span> <span class="_ _4"></span> <span class="_ _4"></span> <span class="_ _4"></span> <span class="ff9 ls0">飞思科技产品研发中心<span class="ff7"> </span></span></div><div class="t m0 x2 h4 y90 ff7 fs0 fc0 sc0 ls0 ws0"> </div><div class="t m0 x5 h4 y91 ff7 fs0 fc0 sc0 ls0 ws0"> </div></div><div class="pi" data-data='{"ctm":[0.930727,0.000000,0.000000,0.930727,0.000000,0.000000]}'></div></div>