Threads & TEB Structure

TODO: Clean this up when get a chance

Thread Initialization

Creating Remote Thread

LdrInitializeThunk

All user mode threads begin their execution in the LdrInitializeThunk function. More information here:

A catalog of NTDLL kernel mode to user mode callbacks, part 6: LdrInitializeThunkNynaeve

Thread Local Storage (TLS)

Thread Local Storage - Win32 appsMicrosoftLearn