Function ParseThreadEntry

Source/Client/NM_Engine/IPssScanner.cpp:402–454

}

void ParseThreadEntry(HPSS SnapshotHandle)
{
	HPSSWALK WalkMarkerHandle;
	PSS_THREAD_ENTRY ThreadEntry;

	//
	// Walk the snapshot: threads.
	//
	auto rc = g_winapiApiTable->PssWalkMarkerCreate(NULL, &WalkMarkerHandle);
	if (rc != ERROR_SUCCESS)
	{
		wprintf(L"PssWalkMarkerCreate failed: Win32 error %u (%s).\n",
			rc, LookupDictionary(rc, Win32ErrorCodes));
	}

	rc = g_winapiApiTable->PssWalkSnapshot(SnapshotHandle, PSS_WALK_THREADS, WalkMarkerHandle, &ThreadEntry, sizeof(PSS_THREAD_ENTRY));

	wprintf(L"PSS_THREAD_ENTRY walk:\n");

	DWORD i = 0;
	while (rc == ERROR_SUCCESS)
	{
		++i;

		wprintf(L"  %2u) Thread ID: %4u (%4x)  suspend: %u  teb: %p  w32sa: %p  pc: %p  %s\n"
			L"      priority %d (%s)    base priority %d (%s)\n",
			i,
			(ULONG)ThreadEntry.ThreadId,
			(ULONG)ThreadEntry.ThreadId,
			ThreadEntry.SuspendCount,
			ThreadEntry.TebBaseAddress,
			ThreadEntry.Win32StartAddress,
			(ThreadEntry.ContextRecord ? CONTEXT_TO_PROGRAM_COUNTER(ThreadEntry.ContextRecord) : 0xDEADBEEF),
			((ThreadEntry.Flags & PSS_THREAD_FLAGS_TERMINATED) ? 1 : 0),
			ThreadEntry.Priority,
			LookupDictionary(ThreadEntry.Priority, PriorityValueDictionary),
			ThreadEntry.BasePriority,
			LookupDictionary(ThreadEntry.BasePriority, PriorityValueDictionary));

		rc = g_winapiApiTable->PssWalkSnapshot(SnapshotHandle, PSS_WALK_THREADS, WalkMarkerHandle, &ThreadEntry, sizeof(PSS_THREAD_ENTRY));
	}

	if (rc == ERROR_NO_MORE_ITEMS) {
		wprintf(L"  Reached end of thread stream.\n\n");

	}
	else if (rc != ERROR_SUCCESS) {
		wprintf(L"PssQuerySnapshot/PSS_WALK_THREADS failed: Win32 error %u (%s).\n\n",
			rc, LookupDictionary(rc, Win32ErrorCodes));
	}

	g_winapiApiTable->PssWalkMarkerFree(WalkMarkerHandle);
}

static void QuerySnapshot(HPSS SnapshotHandle)
{