Wait3 Win32 call, 905

WaitForMultipeObjects Win32 call, 905, 915, 938

WaitOnAddress Win32 call, 939

Waitpid system call, 54, 726, 727, 728

Waitqueue, 740

Wake lock, Android, 804–805

WakeAllConditionVariable Win32 call, 939

WakeByAddressAll Win32 call, 939

WakeByAddressSingle Win32 call, 939

WakeConditionVariable Win32 call, 939

Wakeup waiting bit, 128

Wandering tree problem, 297

WANs (see Wide Area Network)

War dialer, 640

Watchdog timer, 393

WDF (see Windows Driver Foundation)

WDK (see Windows Driver Kit)

WDM (see Windows Driver Model)

Weak password, 638–640

Web app, 420

Web browser, 588

Web page, 588

What should be optimized?, 1071–1072

Why are operating systems slow?, 1071

Why is system design hard?, 1043–1045

Wide area network, 581

Widget, X, 405

Wild card, 717

Wildcard, 623

WIMP (see Windows, icons menus pointing)

Win32, 874, 881, 887–891

Win32 call

• AcquireSRWLockExclusive, 939

• AcquireSRWLockShared, 939

• AddAccessAllowedAce, 1023

• AddAccessDeniedAce, 1023

• Close, 982, 985

• CopyFile, 889

• Create, 985

• CreateEvent, 921, 922

• CreateFile, 889, 922, 924, 1022

• CreateFileMapping, 962

• CreateProcess, 90, 883, 884, 888, 941, 942, 1022

• CreateSemaphore, 917, 938

• DeleteAce, 1023

• Down, 938, 945

• DuplicateHandle, 938

• EnterCriticalSection, 939

• ExitProcess, 91

• ExitWindowsEx, 1014

• FlushFileBuffer, 979

• GetTokenInformation, 1020

• InitializeACL, 1023

• InitializeSecurityDescriptor, 1022

• InitiateSystemShutdown, 1014

• InitOnceExecuteOnce, 939

• ioCallDriver, 984

• IoCallDriver, 985

• IoCompleteRequest, 984, 997, 998

• IopParseDevice, 924

• LeaveCriticalSection, 939

• LookUpAccountSid, 1022

• MapViewOfFile, 1009

• ObCreateObjecttype, 924

• ObOpenObjectByName, 923

• Open, 982

• OpenSemaphore, 917

• OpenXXX, 1023

• PsCreateSiloContext, 1012

• PsGetSiloContext, 1012

• PulseEvent, 938

• QueueUserAPC, 903–904

• Read, 982, 985

• ReadFile, 997

• ReleaseMutex, 938

• ReleaseSemaphore, 938

• ResetEvent, 938

• SetEvent, 938, 944

• SetInformationJobObject, 1012, 1013

• SetPriorityClass, 945

• SetProcessinformation, 949

• SetSecurityDescriptorDacl, 1023

• SetThreadContext, 904

• Setthreadinformation, 949

• SetThreadPriority, 945

• SleepConditionVariableCS, 939

• SleepConditionVariableSRW, 939

• SmPageEvict, 975

• SmPageRead, 974

• SmPageWrite, 973, 974

• TerminateProcess, 91

• Up, 938

• ValidDataLength, 979

• VirtualAlloc, 963, 1009

• VirtuAlloc, 975

• Wait3, 905

• WaitForMultipeObjects, 938

• WaitForMultipleObject, 905

• WaitForMultipleObjects, 915

• WaitForSingleObject, 938

• WaitOnAddress, 939

• WakeAllConditionVariable, 939

• WakeByAddressAll, 939

• WakeByAddressSingle, 939

• WakeConditionVariable, 939

• Write, 982

Win32 memory-management system calls, 961–962

Window, 409

Window manager, 405

Windows, 1, 871–1036

• booting, 910–914

• history, 871–880

• icons menus pointing, 430

• kernel, 894

• NT, 874

• programming, 880–894

Windows 3.0, 873

Windows 7, 877

Windows 8, 877–878

Windows 8.1, 878

Windows 10, 3, 878–879

Windows 11, 3, 871–1036

• history, 879

Windows 95, 3, 873

Windows 98, 873

Windows 2000, 3, 17, 875

Windows access token, windows security, 1020

Windows access violation, 964

Windows address space layout randomization, 1028

Windows affinitized thread, 930

Windows antimalware, 1034–1045

Windows API call, 60–63

• NtAllocateVirtualMemory, 885

• NtCancelIoFile, 984

• NtClose, 918, 920

• NtCreateFile, 885, 922, 923, 982, 984

• NtCreateProcess, 884, 885, 936, 943

• NtCreateThread, 885, 936

• NtCreateUserProcess, 936, 941, 942

• NtDeviceIoControlFile, 984

• NtDuplicateObject, 885

• NtFlushBuffersFile, 984

• NtFsControlFile, 984, 1000

• NtLockFile, 984

• NtMapViewOfSection, 885

• NtNotifyChangeDirectoryFile, 983, 999

• NtQueryDirectoryFile, 982

• NtQueryInformationFile, 983

• NtQueryVolumeInformationFile, 982

• NtReadFile, 920, 982

• NtReadVirtualMemory, 885

• NtResumeThread, 936, 943

• NtSetInformationFile, 983

• NtSetVolumeInformationFile, 983

• NtUnLockFile, 984

• NtWriteFile, 920, 982

• NtWriteVirtualMemory, 885

Windows application silo, 1012

Windows application-launch prefetching, 965

Windows arbitrary code guard, 1030

Windows asynchronous procedure call, 903–904

Windows asynchronout procedure call, 901–903

Windows auto-expand pushlock, 940

Windows autoboost, 949

Windows back-patch, 1033

Windows background prefetch, 966

Windows balance set manager, 969

Windows bandwidth reservation, 982

Windows base binary, 1033

Windows base layer, 1014

Windows base priority, 945

Windows boot manager, 912

Windows cache manager, 908

Windows cache-aware pushlock, 940

Windows canary, 1027

Windows canonical address, 955

Windows class driver, windows910

Windows code integrity guard, 1030

Windows commit charge, 959

Windows commit limit, 958

Windows compare&swap, 897

Windows condition variable, 939

Windows configuration manager, 908

Windows connected standby, 1002

Windows container, 1011

Windows containing security damage, 1031–1032

Windows context record, 944

Windows control flow guard, 1028

Windows copy-on-write, 960

Windows credential guard, 1025

Windows critical section, 939

Windows current priority, 945

Windows data execution prevention, 1027

Windows debugporthandle, 885

Windows defender, 1035

Windows defense-in-depth, 1031

Windows deferred procedure call, 901–903

Windows device driver, 910

Windows device stack, 910, 987–989

Windows direct map, 1009

Windows dispatcher object, 904–905

Windows driver foundation, 985

Windows driver kit, 984

Windows driver model, 984

Windows dynamic disk, 980

Windows dynamic fair-share scheduling, 950

Windows elevation, 1024

Windows event, 938

Windows exceptporthandle, 885

Windows executive, 894

Windows executive layer, 905–909

Windows exploitations, 1027–1031

Windows extended flow guard, 1029

Windows fastmutex, 940

Windows fiber, 931

Windows file compression, 998–999

Windows file mapping, 889

Windows file system, 989–1000

Windows file system structure, 991–994

Windows filter driver, 910, 987

Windows forward patch, 1033

Windows gadget, 1028

Windows group policy, windows security, 1020

Windows guarded stack, 1027

Windows handle, windows object, 917–919

Windows hard fault, 964

Windows hardware-enforced stack protection, 1030

Windows hello, 1020

Windows hiberboot, 1001

Windows hibernation, 1001

Windows host container, 1013

Windows hotpatch address table, 1033

Windows hotpatching, 1033

Windows huge page, 956

Windows hyperguard, 1031

Windows hypervisor, 1004

Windows hypervisor-enforced code integrity, 1030

Windows input/output, 979–989

Windows input/output request packet, 986–987

Windows impersonation, 1021

Windows insider program, 879

Windows integrity level, 1022

Windows interprocess communication, 937

Windows interrupt service routine, 901

Windows invalid page, 958

Windows jitting, 952

Windows job, 931

Windows job object, 1011

Windows kernel, 894

Windows kernel layer, 900–901

Windows kernel-mode driver framework, 985

Windows large page, 956

Windows layers, 881

Windows least-recently used algorithm,, 967

Windows limiting toctou, windows1032

Windows mailslot, 937

Windows mapped page writer thread, 971

Windows master file table, 991, 994–998

Windows Me, 873

Windows memory compression, 973–976

Windows memory descriptor list, 986

Windows memory management, 955–979

Windows memory manager, 907

Windows memory partition, 976

Windows memory pressure, 969

Windows minimal process, 943

Windows modified page writer thread, 969, 971

Windows mutant, 905

Windows namespace redirection, 952

Windows namespace virtualization, 1011

Windows new technology, 874

Windows notification facility, 909

Windows notification facility, 909

Windows notification service, 1002

Windows NT, 17

Windows NT file system, 989–1000

Windows object handle, 917–919

Windows object manager implementation, 914–926

Windows object namespace, 919–922

Windows object type, 923–926

Windows on Windows, 950–955

Windows page combining, 972–973

Windows page fault clustering, 959

Windows page frame number database, 969–970

Windows page list, 977

Windows page replacement algorithm, 968–969

Windows page table, 967–969

Windows page-fault handling, 963–966

Windows pagefile, 958–960, 977

Windows pagefile reservation, 959

Windows pagefile-backed section, 960

Windows parse, 919

Windows patch, 1033

Windows patch binary, 1033

Windows patchguard, 1031

Windows physical memory management, 969–971

Windows plug-and-play manager, 980

Windows pointer authentication, 1030

Windows power management, 1000–1003

Windows power manager, 1000

Windows prefetch, 965

Windows prepaging, 965

Windows priority boost, 948

Windows priority floor, 948

Windows priority inversion, 948

Windows process environment block, 929

Windows process manager, 907

Windows processes, 929–955

Windows prochandle, 885

Windows protected process, 936, 1025

Windows pushlock, 940

Windows qos class, 949

Windows quality-of-service class, 949

Windows read-ahead, 979

Windows recovery environment, 914

Windows registry, 891–894

Windows reserved page, 958

Windows resilient file system, 989

Windows resource tracking, 977

Windows restricted token, 931

Windows return flow guard, 1029

Windows return-oriented programming, 1028

Windows safe-mode, 914

Windows sandbox, 1016

Windows scheduling, 944–950

Windows scheduling group, 950

Windows SDK, 882

Windows sectionhandle, 885

Windows secure kernel, 897

Windows security, 1018–1035

Windows security descriptor, 1021

Windows security mitigation, 1025–1026

Windows security reference monitor, 908

Windows self-map, 941

Windows semaphore, 938

Windows server container, 1011, 1013

Windows server silo, 1012

Windows shadow stack, 1029

Windows shim, 943

Windows side-by-side library, 927

Windows silo, 1011

Windows socket, 937

Windows soft fault, 958, 964

Windows software development kit, 882

Windows standby list, 959

Windows standby mode, 1001

Windows storage pool, 980

Windows storage spaces, 980

Windows store eviction thread, 975

Windows store manager, 973

Windows structure, 894–929

Windows subsystem, 880, 883–884, 926–929

Windows superfetch, 966

Windows synchronization, 938–940

Windows system access control list, 1022

Windows system partition, 976

Windows system process, 934, 977

Windows system store, 975

Windows system structure, 894–929

Windows system thread, 977

Windows terminal server, 950

Windows thin provisioning, 981

Windows thread, 929–955, 933–934

Windows thread environment block, 930

Windows thread local storage, 930

Windows thread pool, 932–933

Windows thread scheduling, 944–950

Windows threads, 929–955

Windows thunk layer, 951

Windows translation lookaside buffer, 962

Windows turbo thunk, 951

Windows update, 1032

Windows user account control, 1024

Windows user shared data, 930

Windows user-mode driver framework, 985

Windows validdatalength, 978

Windows virtual address allocation, 958

Windows virtual address descriptor, 962

Windows virtual disk, 980

Windows virtual hard disk, 1014

Windows virtual pagefile, 974

Windows virtual trust level, 1017

Windows virtualization, 1003–1035

Windows virtualization-based security, 897

Windows Vista, 3, 876–877

Windows volume shadow copy, 981

Windows virtualization-based security, 1017–1018

Windows vulnerabilities, 1026–1027, 1026–1031

Windows working set in-swap, 965–966

Windows working set out-swap, 966

Windows workload isolation, 976

Windows wow64 abstraction layer, 951

Windows write-behind, 979

Windows XP, 3, 875–876

Windows xtacache, 952

Windows zeropage, 948

Windows zeropage thread, 972

Windows-on-Windows, 889

Wintel, 509

Wireless communication, power management, 427

Wirth, Niklaus, 1042

Wmb system call, 740

Wndproc, 412

WNF (see Windows Notification Facility)

WNS (see Windows Notification Service)

Worker thread, 100

Working directory, 43, 275, 767

Working set, 214

Working set in-swap, Windows, 965–966

Working set model, 215

Working set out-swap, Windows, 966

Working set page replacement algorithm, 214–218

Workload isolation, Windows, 976

World switch, 489

Worm, 607

Wormhole routing, 561

Worst fit memory management algorithm, 191

WOW (see Windows-on-Windows)

Wow64 abstraction layer, Windows, 951

Wozniak, Steve, 614

Wrapper, 110

Write system call, 54, 269, 593, 619, 746, 757, 758, 760, 772, 775, 782, 788, 793, 1048

Write Win32 call, 982

Write-behind, Windows, 979

Write-through cache, 317, 371

WSA (see Windows Subsystem for Android)

WSclock page replacement algorithm, 218–220

WSL (see Windows Subsystem for Linux)