Windows internal structuresimportant kernel structures eprocess executive process block kprocess kernel process block ethread executive thread block access sids peb process environment block vad virtual address descriptor handle table creationtime count nanosecond intervals since january