WinDbg: Find thread id after CreateThread call

bu kernel32!CreateThread “r $t0= poi(@esp+0n24);gu;r $t1 = poi(@$t0)”

 

Result at $t1

Advertisements