THREAD_LAST_SYSCALL_INFORMATION - NtDoc

#ifndef _NTPSAPI_H

/**
 * The THREAD_LAST_SYSCALL_INFORMATION structure contains information about the last system call made by a thread.
 */
typedef struct _THREAD_LAST_SYSCALL_INFORMATION
{
    PVOID FirstArgument;        // Pointer to the first argument of the last system call.
    USHORT SystemCallNumber;    // The system call number of the last system call made by the thread.
    ULONG64 WaitTime;           // The time spent waiting for the system call to complete, in milliseconds.
} THREAD_LAST_SYSCALL_INFORMATION, *PTHREAD_LAST_SYSCALL_INFORMATION;

#endif
View code on GitHub