Windows Kernel Internals II Processes, Threads, Vi…….ppt

下载文档 降价啦

5
0
约1.2万字
约 38页
2017-03-31 发布于广东
举报
版权申诉
保障服务

Windows Kernel Internals II Processes, Threads, Vi…….ppt

1、本文档共38页，可阅读全部内容。
2、有哪些信誉好的足球投注网站（book118）网站文档一经付费（服务费），不意味着购买了该文档的版权，仅供个人/单位学习、研究之用，不得用于商业用途，未经授权，严禁复制、发行、汇编、翻译或者网络传播等，侵权必究。
3、本站所有内容均由合作方或网友上传，本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺！文档内容仅供研究参考，付费前请自行鉴别。如您付费，意味着您自己接受本站规则且自行承担风险，本站不退款、不进行额外附加服务；查看《如何避免下载的几个坑》。如果您已付费下载过本站文档，您可以点击这里二次下载。
4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等，请点击“版权申诉”（推荐），也可以打举报电话：400-050-0827(电话支持时间：9:00-18:30)。

? Microsoft Corporation 2004 Windows Kernel Internals IIProcesses, Threads, VirtualMemoryUniversity of Tokyo – July 2004* Dave Probert, Ph.D. Advanced Operating Systems Group Windows Core Operating Systems Division Microsoft Corporation Process Container for an address space and threads Associated User-mode Process Environment Block (PEB) Primary Access Token Quota, Debug port, Handle Table etc Unique process ID Queued to the Job, global process list and Session list MM structures like the WorkingSet, VAD tree, AWE etc Thread Fundamental schedulable entity in the system Represented by ETHREAD that includes a KTHREAD Queued to the process (both E and K thread) IRP list Impersonation Access Token Unique thread ID Associated User-mode Thread Environment Block (TEB) User-mode stack Kernel-mode stack Processor Control Block (in KTHREAD) for cpu state when not running Job Container for multiple processes Queued to global job list, processes and jobs in the job set Security token filters and job token Completion ports Counters, limits etc Process/Thread structure KPROCESS fields DISPATCHER_HEADER Header ULPTR DirectoryTableBase[2] KGDTENTRY LdtDescriptor KIDTENTRY Int21Descriptor USHORT IopmOffset UCHAR Iopl volatile KAFFINITY ActiveProcessors ULONG KernelTime ULONG UserTime LIST_ENTRY ReadyListHead SINGLE_LIST_ENTRY SwapListEntry LIST_ENTRY ThreadListHead KSPIN_LOCK ProcessLock KAFFINITY Affinity USHORT StackCount SCHAR BasePriority SCHAR ThreadQuantum BOOLEAN AutoAlignment UCHAR State BOOLEAN DisableBoost UCHAR PowerState BOOLEAN DisableQuantum UCHAR IdealNode EPROCESS fields KPROCESS Pcb EX_PUSH_LOCK ProcessLock LARGE_INTEGER CreateTime LARGE_INTEGER ExitTime EX_RUNDOWN_REF RundownProtect HANDLE UniqueProcessId LIST_ENTRY ActiveProcessLinks Quota Felds SIZE_T PeakVirtualSize SIZE_T VirtualSize LIST_ENTRY SessionProcessLinks PVOID DebugPort PVOID ExceptionPort PHANDLE_TABLE ObjectTable EX_FAST_REF Token PFN_NUMBER WorkingSetPage KGUARDED_MUTEX AddressCreationLock KSP