Windows Dev Center

EN
Il contenuto non è disponibile nella lingua di destinazione, ma solo in inglese.

Win32_ThreadStartTrace class

The Win32_ThreadStartTrace event WMI class indicates that a new thread has started.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties. Properties and methods are in alphabetic order, not MOF order.

Syntax

[AMENDMENT]
class Win32_ThreadStartTrace : Win32_ThreadTrace
{
  uint32 ProcessID;
  uint32 ThreadID;
  uint64 StackBase;
  uint64 StackLimit;
  uint64 StartAddr;
  uint64 UserStackBase;
  uint64 UserStackLimit;
  uint32 WaitMode;
  uint64 Win32StartAddr;
};

Members

The Win32_ThreadStartTrace class has these types of members:

Properties

The Win32_ThreadStartTrace class has these properties.

ProcessID
Data type: uint32
Access type: Read-only

Process identifier of the thread involved in the event.

This property is inherited from Win32_ThreadTrace.

StackBase
Data type: uint64
Access type: Read-only

Base address of the thread's stack.

For more information about using uint64 values in scripts, see Scripting in WMI.

StackLimit
Data type: uint64
Access type: Read-only

Limit of the thread's stack.

For more information about using uint64 values in scripts, see Scripting in WMI.

StartAddr
Data type: uint64
Access type: Read-only

Memory address at which the trace starts.

For more information about using uint64 values in scripts, see Scripting in WMI.

ThreadID
Data type: uint32
Access type: Read-only

Thread identifier of the thread involved in the event.

This property is inherited from Win32_ThreadTrace.

UserStackBase
Data type: uint64
Access type: Read-only

Base address of the thread's user-mode stack.

For more information about using uint64 values in scripts, see Scripting in WMI.

UserStackLimit
Data type: uint64
Access type: Read-only

Limit of the thread's user-mode stack.

For more information about using uint64 values in scripts, see Scripting in WMI.

WaitMode
Data type: uint32
Access type: Read-only

Processor mode in which the wait is to occur.

ValueMeaning
0

Kernel

1

User

 

Win32StartAddr
Data type: uint64
Access type: Read-only

Starting address of the function to be executed by this thread.

For more information about using uint64 values in scripts, see Scripting in WMI.

Remarks

The Win32_ThreadStartTrace class is derived from Win32_ThreadTrace.

Requirements

Minimum supported client

Windows Vista

Minimum supported server

Windows Server 2003

Namespace

Root\CIMV2

MOF

Krnlprov.mof

DLL

Krnlprov.dll

See also

Win32_ThreadTrace
Operating System Classes

 

 

Mostra:
© 2015 Microsoft