Win2k "Secret Weapon" Global Flag Editor

The Global (or Full) Flag Editor is a utility for CW2KP provided by Sppuort Tools, which was mentioned in the previous article on finding memory holes. So, what is the meaning of the so-called "Flag" & rdquo;? We can roughly understand it as "settings to the operating system environment". This global flag editing can be used by the administrator to modify the system settings, as well as for system diagnostics. This can also be seen from the use characteristics and uses of the tool. This tool can also be used with other tools as a precursor to other tools. For example, using a tool to find memory holes requires first starting the flag editor. Another feature is that this tool must be restarted after loading to use it, which is significantly different from other tools. The tool also has a version in each of the two environments. Regardless of the version, there are many items to choose from. The project corresponds to the specific key values ​​in the registry, and the selection operation for these items is actually the modification of the registry key. The modification of the key value will make the system internal. Some functions are turned on or off, and the program uses this to diagnose or troubleshoot the system. The following describes the flag editor for the GUI interface version used in CW2KP.

1. Introduction to GUI version

If you have already installed "Support Tools", open the program and use: "Start->Programs->Support Tools->Tools-> Global Flags Editor", The figure is the dialog box that appears after opening the program. The colored rectangle or ellipse box on the dialog box is added for convenience.

Figure:

In the Destination tab, you can make three choices:

1. System Registry

2. Kernel Mode < Br>

3, icon file (image file) three options are single-selection, only one can be selected at a time. The first item is the modification of the registry. Of course, these modifications are very limited, and are mainly set around the diagnosis system failure. In the same time, the registry modification we made for optimizing the system is not the same thing; the modification of the registry needs to be re-established. It will take effect after you start your computer. The second option is to enable kernel mode. Select the third item to modify the icon. Specify the name of the icon file in the image file name edit field. Also, specify the application represented by the icon in the Command Line edit bar, much like the familiar icon change operation. Regardless of which item you choose, you can use the “Launch” button to initiate the setup.

The following items are available for selection. All the options have a complete English description alongside the check box of the dialog box. These instructions are basically the same as the second column in Table 1. Correspondingly, the Chinese meaning can refer to the corresponding part of the third column in Table 1. The leftmost column in Table 1 is an abbreviation for the English description, which is also the corresponding parameter in the command line version. It should be noted that some of the items listed in Table 1 do not have a corresponding selection box available in the dialog box, that is, these switches can only be used in the command line version. All of these are listed in blue in the table. Similarly, some of the selection boxes already in the dialog box can not find the corresponding description in the table, which means that the item can only run under the GUI version. The supplements of this category are listed below in Table 1. The meaning of the terms in the table or in the off-balance sheet is not within the scope of this article. You should refer to the relevant information when you need to know. And welcome to correct the mistakes and even the mistakes.

The selection box is divided into five groups. The second and third groups can be basically classified into one category, so I divide the five groups into four categories, each of which is separated by a rectangular box of one color. The blue rectangle contains a total of 3 items, which are all options related to debugging, and the meaning is obvious; the pink box contains 10 items, most of which are related to memory management; the green rectangle is also related to program debugging. The option is that the associated content is different from the first one; the items in the red rectangle are more complex and belong to multiple aspects; but in general, all the options are set around the diagnostic debug.

The items in the ellipse box are the number of layers selected for tracking capture. The default is 16 layers, you can change to other values.

The rectangle at the bottom right is the choice of a specific memory pool tag in kernel mode. You can select text or hexadecimal numbers. The content can be filled in the given edit box. Then specify one of the two test modes.

After completing the above options, click Apply or Ok.

Regardless of the version of the global flag editor, you must have a true understanding of the commands, parameters, and switches. Blind use can cause program conflicts or fail when you restart your computer.

2. Introduction to the command line version

The command line version and the GUI version are basically one-to-one correspondence. It is also composed of parameters and switches.

Syntax of the command line: