command: THREAD
usage: THREAD [.|hTCB]
display thread list.
ex:
THREAD
THREAD . ;indicate current thread
THREAD c1547690
output:
:thread Ring0TCB ID Context Ring3TCB ThreadID Process TaskDB PDB SZ Owner c1574d40 7f c1574b60 81641d88 fffb069b 81641b68 1BEE 1BE7 32 *Trw2k c152cbb0 2a c152ca60 8162a678 fffdbd6b 8160fee0 2CAE 2C7F 16 *WINOLDAP c1547690 21 c1548cc0 81623a94 fffd2187 8162383c 307E 3077 16 *RUNDLL c15245b0 8 c1431fc0 8160b2b4 ffffa9a7 81709204 00C7 00D7 32 KERNEL32 c14167d0 2 c29202b0 1 c1431fc0 817092dc ffef89cf 81709204 00C7 00D7 32 VM 1 c65202b0 2b VM 2 :thread c1547690 Ring0TCB ID Context Ring3TCB ThreadID Process TaskDB PDB SZ Owner c1547690 21 c1548cc0 81623a94 fffd2187 8162383c 307E 3077 16 *RUNDLL Thread Flag = 00511401 00000001 ???? 00000400 THFLAG_THREAD_BLOCKED 00001000 ???? 00010000 THFLAG_OEM 00100000 ???? 00400000 ???? ClientPtr = C5BF3F70 TDBX = C1548DD0