Windows thread

A thread is said to impersonate, if it assumes a different security context than the process it belongs to.

It should be noted that all threads of a process share the same handle table. Thus, when an impersonating thread opens an object that other threads with their differing security contexts could not open, the other threads still have access to the opened object.

Each thread is assigned a locale which initially is the system default locale (LOCALE_SYSTEM_DEFAULT, whose value ix 0x0800 ).

A thread's locale can be changed with the WinAPI function SetThreadLocale.

See also System.Globalization.RegionInfo::CurrentRegion.

A thread's entry point is called by BaseThreadInitThunk whose prototype appears to be

void __fastcall BaseThreadInitThunk(
   ULONG Unknown,
   PVOID StartAddress,
   PVOID ThreadParameter
);

TODO: http://www.nynaeve.net/Code/LdrInitializeThunk.c and http://www.nynaeve.net/?p=205

spyxx.exe

System.Threading.Thread

Threads are kernel objects.

The Interlocked… WinAPI functions provide a simple mechanism to synchronzie access to data that is shared by multiple threads.