Thread_TypeGroup1 class

This class is the event type class for thread start and end events.

The following syntax is simplified from MOF code.

Syntax

[EventType{1, 2, 3, 4}, EventTypeName{"Start", "End", "DCStart", "DCEnd"}]
class Thread_TypeGroup1 : Thread
{
  uint32 ProcessId;
  uint32 TThreadId;
  uint32 StackBase;
  uint32 StackLimit;
  uint32 UserStackBase;
  uint32 UserStackLimit;
  uint32 Affinity;
  uint32 Win32StartAddr;
  uint32 TebBase;
  uint32 SubProcessTag;
  uint8  BasePriority;
  uint8  PagePriority;
  uint8  IoPriority;
  uint8  ThreadFlags;
};

Members

The Thread_TypeGroup1 class has these types of members:

• Properties

Properties

The Thread_TypeGroup1 class has these properties.

Affinity

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(7), Pointer

The set of processors on which the thread is allowed to run.

BasePriority

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(11)

The scheduler priority of the thread (see the SetThreadPriority function).

IoPriority

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(13)

An IO priority hint for scheduling IOs generated by the thread.

PagePriority

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(12)

A memory page priority hint for memory pages accessed by the thread.

ProcessId

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(1), Format("x")

Process identifier of the thread involved in the event.

StackBase

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(3), Pointer

Base address of the thread's stack.

StackLimit

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(4), Pointer

Limit of the thread's stack.

SubProcessTag

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(10), Format("x")

Identifies the service if the thread is owned by a service; otherwise, zero.

TebBase

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(9), Pointer

Thread environment block base address.

ThreadFlags

Data type: uint8

Access type: Read-only

Qualifiers: WmiDataId(14)

Not used.

TThreadId

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(2), Format("x")

Thread identifier of the thread involved in the event.

UserStackBase

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(5), Pointer

Base address of the thread's user-mode stack.

UserStackLimit

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(6), Pointer

Limit of the thread's user-mode stack.

Win32StartAddr

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(8), Pointer

Starting address of the function to be executed by this thread.

Remarks

The DCStart and DCEnd event types enumerate the threads that are currently running at the time the kernel session starts and ends, respectively.

Requirements

See also

Thread