1. Windows Under the Hood
Chapter 13

2. Registry
The registry is a large data base that records information about the system
The registry is made up of several files called hives
Accessing the Registry
Regedt32.exe

3. Registry Registry Components HKEY_CLASSES_ROOT HKEY_CURRENT_USER
Defines the standard class objects used by Windows
HKEY_CURRENT_USER
Holds the personalized settings for the current user
HKEY_USERS
Holds the personalized settings for all of the users that have logged in
HKEY_LOCAL_MACHINE
Contains all the data for a system’s non-user-specific configurations
HKEY_CURRENT_CONFIG
Contains configuration data for items currently being used

4. Registry Talkin’ Registry Manual Registry Edits
HKCR, HKCU, HKU, HKLM, HKCC
String, binary, DWORD, QWORD
Manual Registry Edits
Always save a copy of the registry before editing.
Command Line Registry Editing Tools
reg
Full editor
Regsrv32
Can only be used to add DLLs

5. The Boot Process The Windows XP Boot Process
The Windows Vista/7 Boot Process
BIOS scans for a MBR
MBR code scans the partition table for bootable partition then boots the boot sector
The boot sector code loads bootmgr
Bootmgr reads the boot configuration data file and displays available OSs to user
Bootmgr starts winload.exe
Winload.exe load the hardware abstraction layer, the system registry, and the drivers for a boot devices
Ntoskrnl.exe then loads all of the Windows processes

6. Processes and Services and Threads, Oh My!
Task Manager
Applications
Processes
Right click a process entry
Services
Performance
Networking and Users
Tasklist and taskkill commands

7. Processes and Services and Threads, Oh My!
Performance Console
Perfmon.msc
Objects and Counters
System monitor
Performance logs and alerts
Performance Tools in Windows Vista and Windows 7
Reliability and Performance Monitor

8. Tools for Programmers Component Services Data Sources
Enable programmers to share data objects between applications
Data Sources
Open Database Connectivity (ODBC)