8.5 Tracing the Windows Stack

The StackTraceFirst function fills a STACKTRACEENTRY structure with
information about the first stack frame for an inactive task. This information
includes the stack-frame module handle, segment number, register contents, frame type, and so on.

You use StackTraceFirst to begin a stack trace of an inactive task. The StackTraceNext function continues the stack trace by filling a STACKTRACEENTRY structure with information about the task's next stack frame.

The StackTraceCSIPFirst function fills a STACKTRACEENTRY structure with information about a stack frame whose SS:BP and CS:IP values are known. You should use StackTraceCSIPFirst, rather than StackTraceFirst, to begin a stack trace of an active task.