You are the IT professional who work in an International company named Wiikigo. You are experienced in troubleshooting operating systems and applications that are not working correctly, identifying code defects and so on. You have enough knowledge on windows internals and you provide technical support for the company. There is a computer named C02 in the company.

Windows Vista has been installed in C02. Sometimes the computer performs slowly. At the time that the computer has a slow performance, you notice that 90 percent of the CPU is used by the System process. You identify the high CPU usage is caused by the System process thread. The thread has the start address ntkrnlpa.exe|ExpWorkerThread. You have to find out which functions the thread calls and how much CPU time each function uses. Which tool should you choose to use?

A.
Pstat should be used.

B.
Tlist should be used.

C.
Qslice should be used.

D.
Kernrate should be used.