this book is also about how the Linux kernel works and how to adapt its workings...

中断服务开发类库 　-interrupted service development library

高级指纹分析算法源代码 开发环境：VisualBasic-Advanced fingerprint analysis algorithm source code development environment: VisualBasic

内存映射文件例子 -The example of memory mapping file

Win9x回收站增强程序，可以恢复dos下被删除的文件 -The enhanced app for win9x recycle station, it can recorve the deleted file in dos

这篇文档是在Windows NT操作系统下隐藏对象、文件、服务、进程等的技术。这种方法是基于Windows API函数的挂钩。 这篇文章中所描述的技术都是从我写rootkit的研究成果，所以它能写rootkit更有效果并且更简单。这里也同样包括了我的实践。 在这篇文档中隐藏对象意味着改变某些用来命名这些对象的系统函数，使它们将忽略这些对象的名字。这样一来我们改动的那些函数的返回值表示这些对象根本就不存在。 最基本的方法(除去少数不同的)是我们用原始的参数调用原始的函数，然后我们改变它们的输出。 在这篇文章里将描述隐藏文件、进程、注册表键和键值、系统服务和驱动、分配的内存还有句柄。-This document is in the Windows NT operating system hidden objects, documents, services, process technology. This method is based on the Windows API function link. This article describes techniques are, I wrote rootkit from the results of research, so it was rootkit more effective and more simple. Here, too, including my practice. In this document hidden object means certain changes to these objects naming system functions so that they will ignore these objects by name. So we change those functions return values, said these objects simply do not exist. The most basic method (excluding a few different) is that we should call the original parameters of the original function, and then we change their

这是一个展示windos字体的好例子。我们可以看看

进程查看程序-Process viewer

本程序包是某某理工开发的，做2维电阻率极化率的正反演工作，主要用于科研学习，可以做二极，三极，对称四级，偶极-偶极数据的正反演，用有限差分法，做正演，可以加载地形条件，效果比较好。

memory management is performed explicitly by programmers using the so-called "auto release pools".

在windows上符号连接,非常 好用,VISTA中有类似实现-The symbolic links in the windows, very easy to use, VISTA realize there are similar