author | Oleksandr Gavenko <gavenkoa@gmail.com> |
Thu, 25 Feb 2010 10:31:48 +0200 | |
changeset 317 | c9d11ccc0953 |
parent 288 | c34bdce72894 |
child 338 | e70d9e6f07f6 |
permissions | -rw-r--r-- |
155
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
1 |
-*- mode: outline -*- |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
2 |
|
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
3 |
* Dependency Walker. |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
4 |
|
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
5 |
Dependency Walker is a free utility that scans any 32-bit or 64-bit Windows |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
6 |
module (exe, dll, ocx, sys, etc.) and builds a hierarchical tree diagram of |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
7 |
all dependent modules. For each module found, it lists all the functions that |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
8 |
are exported by that module, and which of those functions are actually being |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
9 |
called by other modules. Another view displays the minimum set of required |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
10 |
files, along with detailed information about each file including a full path |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
11 |
to the file, base address, version numbers, machine type, debug information, |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
12 |
and more. |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
13 |
|
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
14 |
See |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
15 |
|
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
16 |
http://www.dependencywalker.com/ |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
17 |
|
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
18 |
* Sysinternals. |
e475cd4f789a
Merged with conversion from CR/LF to LF.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
143
diff
changeset
|
19 |
|
189
a433d6009641
Move info from windows-devel.txt to process-managment.txt and stat.txt.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
155
diff
changeset
|
20 |
TODO |
288 | 21 |
|
22 |
* Running at startup. |
|
23 |
||
24 |
HKCU\Software\Microsoft\Windows\CurrentVersion\Run |
|
25 |
Launches a program automatically when a particular user logs |
|
26 |
in. This key is used when you always want to launch a program |
|
27 |
when a particular user is using a system. |
|
28 |
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce |
|
29 |
Launches a program the next time the user logs in and removes |
|
30 |
its value entry from the registry. This key is typically used |
|
31 |
by installation programs. |
|
32 |
HKLM\Software\Microsoft\Windows\CurrentVersion\Run |
|
33 |
Launches a program automatically at system startup. This key |
|
34 |
is used when you always want to launch a program on a |
|
35 |
particular system. |
|
36 |
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce |
|
37 |
Launches a program the next time the system starts and removes |
|
38 |
its value entry from the registry. This key is typically used |
|
39 |
by installation programs. |
|
40 |
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices |
|
41 |
Launches a service (a standard NT service or a background |
|
42 |
process) automatically at startup. An example of a service is |
|
43 |
a Web server such as Microsoft Internet Information Server. |
|
44 |
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce |
|
45 |
Launches a service (a standard NT service or a background |
|
46 |
process) the next time the system is started, then removes its |
|
47 |
value entry from the registry. |
|
48 |
||
49 |
Values to registry on Windows XP can be added by: |
|
50 |
||
51 |
cmd> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v run.bat /t REG_SZ /d "path\to\run.bat" |
|
52 |
cmd> reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Run <-- see what done |