PSS_THREAD_ENTRY structure (processsnapshot.h)

Holds thread information returned by PssWalkSnapshotPssWalkSnapshot.

Syntax

typedef struct {
  DWORD            ExitStatus;
  void             *TebBaseAddress;
  DWORD            ProcessId;
  DWORD            ThreadId;
  ULONG_PTR        AffinityMask;
  int              Priority;
  int              BasePriority;
  void             *LastSyscallFirstArgument;
  WORD             LastSyscallNumber;
  FILETIME         CreateTime;
  FILETIME         ExitTime;
  FILETIME         KernelTime;
  FILETIME         UserTime;
  void             *Win32StartAddress;
  FILETIME         CaptureTime;
  PSS_THREAD_FLAGS Flags;
  WORD             SuspendCount;
  WORD             SizeOfContextRecord;
  PCONTEXT         ContextRecord;
} PSS_THREAD_ENTRY;

Members

ExitStatus

The exit code of the process. If the process has not exited, this is set to STILL_ACTIVE (259).

TebBaseAddress

The address of the thread environment block (TEB). Reserved for use by the operating system.

ProcessId

The process ID.

ThreadId

The thread ID.

AffinityMask

The affinity mask of the process.

Priority

The thread’s dynamic priority level.

BasePriority

The base priority level of the process.

LastSyscallFirstArgument

Reserved for use by the operating system.

LastSyscallNumber

Reserved for use by the operating system.

CreateTime

The time the thread was created. For more information, see FILETIME.

ExitTime

If the thread exited, the time of the exit. For more information, see FILETIME.

KernelTime

The amount of time the thread spent executing in kernel mode. For more information, see FILETIME.

UserTime

The amount of time the thread spent executing in user mode. For more information, see FILETIME.

Win32StartAddress

A pointer to the thread procedure for thread.

CaptureTime

The capture time of this thread. For more information, see FILETIME.

Flags

Flags about the thread. For more information, see PSS_THREAD_FLAGS.

SuspendCount

The count of times the thread suspended.

SizeOfContextRecord

The size of ContextRecord, in bytes.

ContextRecord

A pointer to the context record if thread context information was captured. The pointer is valid for the lifetime of the walk marker passed to PssWalkSnapshot.

Remarks

PssWalkSnapshot returns a PSS_THREAD_ENTRY structure when the PSS_WALK_INFORMATION_CLASS member that the caller provides it is PSS_WALK_THREADS.

Requirements

See also

Process Snapshotting