您的位置:首页 > 其它

Processes and Threads on Wiindows NT

2010-05-20 09:27 405 查看
Processes and Threads on Wiindows NT
 Every Windows process is represented by an executive process block (EPROCESS) in
kernel-mode
 EPROCESS points to a number of related data structures; for example, each process has
one or more threads represented by executive thread blocks (ETHREAD)
 EPROCESS points to a process environment block (PEB) in process address space
 ETHREAD points to a thread environment block (TEB) in process address space
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签: