Windows sysinternals

90 Part II Usage Guide
FIGURE 3-37 The Threads tab of the Properties dialog box.
By default, the list is sorted by CPU time in descending order. Click on any column header to
change the sort order. Columns can be resized but cannot be reordered.
Selecting a row in the list box displays more detail about that thread in the lower area of the
Threads tab: when the thread started; how much CPU time it has consumed in kernel mode
and in user mode; how many context switches and CPU cycles it has consumed; its base
priority and dynamic priority; and on Windows Vista and newer, its I/O priority, memory
priority, and ideal processor. Clicking the Permissions button displays the security descriptor
for the thread—that is, who can perform which actions on the thread. Although this interface
allows you to modify permissions on the thread, actually making changes is not advised and
will usually lead to unpredictable results.
For the System Idle Process, the list box enumerates processors rather than threads. The
processor number is shown instead of the Thread ID, and the CPU time represents the percentage
of time the CPU spent idle during the refresh interval. When you select one of the
processors in the list, the Kernel Time shown below the list box reports the total amount of
idle time for that CPU.
Clicking the Module button displays a standard file properties dialog box for the EXE or DLL
name in the selected row.
The Stack button displays the call stack for the selected thread, as shown in Figure 3-38. The
start address is the bottom-most item in the stack, and the current location of the thread is
at the top. The Copy button in the Stack dialog box copies the currently selected symbolic
name in the stack to the clipboard. You can select multiple rows in the standard ways, such
as holding Shift and pressing the down arrow key. (For more information, see the “Call Stacks
and Symbols” section of Chapter 2,.)
www.it-ebooks.info