JJhou said, and things have to be digest itself. He insists on blog !!! Review and make a note on the content of "Inside Windows 2000" a few days ago:
In general, there is no content in the first chapter, it is some concepts. However, some still don't know, the season is selected: On most systems, Windows 2000 uses half of the 4G virtual space to use the process of the application (2G virtual address space, from X00000000 to X7FFFFF), then another The operating system uses (high 2g, from X80000000 to XFFFFFFF) at the highest abstraction level, a Win2K process consists of these things: 1. A private virtual address space (collection of virtual memory addresses, for process use); 2 A executable program (defined initial code and data, the image is in the virtual address space of the process); 3. System resource handle list, such as semaphore, communication port, file, etc. (all threads available within the process) ; 4. A secure context Access token to identify users, security groups, and permissions in the process; 5. Process ID, unique identification (also called Client ID); 6. At least one execution thread.
One thread has some basic components: 1. A group can represent the content of the CPU register of the CPU state; 2. 2 stacks, a thread is used to perform a core state (kernel mode), one is used to perform a user state (user mode) 3. TLS (Thread-local storage) A private storage area, is used by subsystems, runtime libraries, and DLLs; 4. Thread ID (also called Client ID ---- but will not conflict with process, because they are not In the same namespace)
