(The course is divided into 5 chapters and covers five topics: synchronous and asynchronous IO, thread pools, dynamic link libraries, injecting DLLs, and intercepting APIs. After finishing the study, you can completely ignore the use of many junior Windows programmers, especially the use of many professional tools, such as: dumpbin, debugview, processexplorer, etc., which can make your technical literacy to a higher level.
The course starts from the principle, combined with a large number of coding examples to explain the following specific content:
1. How to deal with synchronous and asynchronous IO in windows, how to perform local and remote debugging through debugview.
2. Four methods of thread pool call: asynchronous call; periodic call; kernel object trigger call; asynchronous IO trigger call.
3. Five methods of thread pool synchronization: Interlocked family functions; key parts; event kernel objects; mutual exclusion; signals.
4. Judgment and customization of thread pool resources.
5. Writing and exporting skills of dynamic link library.
6. Use C/C++ to implicitly call and explicitly call methods.
7. Use the calling skills of C#, VB, Python and other languages.
8. Dll class library industrial design skills.
9. Four methods of injecting DLL: registry method; function forwarding; setting hook method; remote injection method;
10. DLL's local hook, global hook, specified thread hook.
11. Comprehensively use dumpbin, Debugview, ProcessExplorer and other tools to analyze the internal calling relationship of DLL.
12. Interception API principle, import address list (IAT), interception coding skills.
13. Injecting DLL combined with intercepting API instances, crashes and screams! ! !)