Before hearing someone else's interview question is to ask the system to create the process of the specific process is what, the first thought is CreateProcess, but for the specific process is not very clear, today tidy up.From the operating system's perspective,To create a process
mireservesystemptes to apply for system PTE, and then call mireservealignedsystemptes. After the system Pte is retained (the page size is obtained from the allocated size), we must also call michargecommitmentcantexpand, then the operations on the PFN database are involved.
Mireservealignedsystemptes is used to retain system PTE, which is actually the
Windows 10 official version process record and experience, windows official versionWindows 10 official version upgrade process record and experience
[Multi-chart Warning] 50 images, about 4.6 MBSystem Overview:
Pre-installed Windows 8.1 Chinese Version
The Users folder on dr
above mentioned mmnonpagedpoolfreelisthead, the system must call mireservesystemptes to apply for system PTE, and then call mireservealignedsystemptes. After the system Pte is retained (the page size is obtained from the allocated size), we must also call michargecommitmentcantexpand, then the operations on the PFN database are involved.Mireservealignedsystempte
that exist simultaneously. *, viruses, etc. are also often loaded through this process, so that its process name and program name are different.
②explorer.exe: Resource Manager, our common desktop, taskbar, etc. is managed by it.
③winlogon.exe: Management user Login, is in the system loading, the role is to ensure that users can log on to the
Svchost.exe is a very important process in the Windows operating system based on ntversions. Many viruses and Trojans reside in the system and are closely related to this process. Therefore, it is necessary to have a deep understanding of this
stores the ID of the created thread returned by the function. there are similar methods to exit a thread and exit a process. It is best to return the result by a function. You can also call the exitthead function in the thread. Terminate another thread in the current thread and use the terminatethread function. When this function causes a thread to exit, it will notify all DLL loaded by this thread. In this way, the DLL can end the work. unlike oth
to the memory size, and some are as large as the memory size, some say that the memory size is twice, ER =. =
3) 'logical partition', 'start', 'ext4. mount point '/' and allocate 20 GB space.
4) 'logical partition', 'start', 'ext4. mount point '/home', all space remaining.
4. Select your '/boot' partition in the 'disk of the booter' below. Be sure to do this. Otherwise, the windows boot program may be damaged after ubuntu is uninstalled.
5. then inst
status Word PSW value, user stack pointer value
Process scheduling information: Process status, process priority, additional information for process scheduling
Additional Information: program and data pointers, process synchronization and communication mechanism
H67 H77 Z77 and other mainboards.
3. Integrated with Baidu music 9.1, storm video 5.5, Fuxin PDF Reader 5.1, pressure 5.0, sogou smart edition 2.0, and QQ6.4
4. system installation can be completed without supervision. More installation tasks can be easily handled
5. Integrate the latest version of IT sky driver
6. The integrated software meets the requirements and preferences of the vast majority of computer companies and computer cities. It is appl
passed to ExitProcess or terminateprocess.4) The status of the process kernel object becomes the status of the notification received (for a detailed description of the delivery notification, see chapter 9th). Other threads in the system can hang until the process terminates.5) The usage count of the process kernel obj
process), including the process number, the termination status of the process (normal or abnormal, what the exception is abnormal), and the total amount of CPU used by the process.
2. About fork () and exec ()
Fork is the process of generating a subprocess, and the stack sp
Sometimes the Tomcat port is occupied, the process ID needs to be detected and the process is killed.1. Find the process ID that occupies the port (Windows and Linux as 8005 can also be quoted)6904 is the process ID that occupies the port. In order to verify that the re-quer
Author: Chen Xi
Date: 12:28:30
Environment: [win7 flagship SP1; Intel I3 x86, support 64-bit; vs2010; wrk-v1.2; Virtual PC 2007 Windows 2003 Server SP1 Standard Edition image; windbg 6.11.0001.404 (x86)]
Reprinted please indicate the source
Q: In windows, I call the CreateProcess API to create a process. What does it do internally?
A: Generally, the operating
and locate errors.The svchost.exe group is identified by the following registry values.
HKEY_LOCAL_MACHINE/software/Microsoft/Windows NT/CurrentVersion/svchostEach value under this key represents an independent svchost group, and when you are watching the active process, it is displayed as a separateExample. Each key value is of the reg_multi_sz type and includes services running in the svchost group. Each
ctfmon.exe, see "Can I delete the ctfmon.exe file ?" .
When I delete Chinese characters from Office XP and select users to enter the feature, ctfmon.exe is still loaded. What else do I need to do to prevent it from running?Unlike the token function that can be input by users in Chinese, ctfmon.exe is a system component that cannot be detached. For more information about disabling ctfmon.exe, see "Can I delete the ctfmon.exe file ?" .How many
About the svchost process in windows (a little older), The svchost Process
This is a blog about svchost written N years ago. Although it is not well written, it is the first technical blog I wrote. Let's publish it as the first blog.
**************************************** ***********
About svchost process in
control and locate errors.
The svchost.exe group is identified by the following registry values.HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ svchostEach value under this key represents an independent svchost group, and when you are watching the active process, it is displayed as a separate example. Each key value is of the reg_multi_sz type and includes services running in the
The first time I wrote a Windows service in C # in the last few days, the content of the implementation is relatively simple. is to start the remoting connection, but debugging relative to the first write Windws service for me, more annoying. No experience, and there is no way to set breakpoints like debugging other Windows programs, and you cannot see the running proce
performance indicators, we are concerned about the performance of a system, it is not possible to pay attention to so many indicators, some objects to the actual application system has little impact. But for a Windows operating system, key objects such as CPUs, Memmory, disk, and network are essential for performance
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.