STRUCTURE : _ETHREAD

typedef struct _ETHREAD 
{
      _KTHREAD Tcb;
      _LARGE_INTEGER CreateTime;
      _LARGE_INTEGER ExitTime;
      _LIST_ENTRY KeyedWaitChain;
      LONG ExitStatus;
      VOID * OfsChain;
      _LIST_ENTRY PostBlockList;
      VOID * ForwardLinkShadow;
      VOID * StartAddress;
      _TERMINATION_PORT * TerminationPort;
      _ETHREAD * ReaperLink;
      VOID * KeyedWaitValue;
      VOID * Win32StartParameter;
      ULONGLONG ActiveTimerListLock;
      _LIST_ENTRY ActiveTimerListHead;
      _CLIENT_ID Cid;
      _KSEMAPHORE KeyedWaitSemaphore;
      _KSEMAPHORE AlpcWaitSemaphore;
      _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
      _LIST_ENTRY IrpList;
      ULONGLONG TopLevelIrp;
      _DEVICE_OBJECT * DeviceToVerify;
      _PSP_RATE_APC * RateControlApc;
      VOID * Win32StartAddress;
      VOID * SparePtr0;
      _LIST_ENTRY ThreadListEntry;
      _EX_RUNDOWN_REF RundownProtect;
      _EX_PUSH_LOCK ThreadLock;
      ULONG ReadClusterSize;
      volatile LONG MmLockOrdering;
      ULONG CrossThreadFlags;
      ULONG Terminated:1;
      ULONG ThreadInserted:1;
      ULONG HideFromDebugger:1;
      ULONG ActiveImpersonationInfo:1;
      ULONG SystemThread:1;
      ULONG HardErrorsAreDisabled:1;
      ULONG BreakOnTermination:1;
      ULONG SkipCreationMsg:1;
      ULONG SkipTerminationMsg:1;
      ULONG CopyTokenOnOpen:1;
      ULONG ThreadIoPriority:3;
      ULONG ThreadPagePriority:3;
      ULONG RundownFail:1;
      ULONG SameThreadPassiveFlags;
      ULONG ActiveExWorker:1;
      ULONG ExWorkerCanWaitUser:1;
      ULONG MemoryMaker:1;
      ULONG ClonedThread:1;
      ULONG KeyedEventInUse:1;
      ULONG RateApcState:2;
      ULONG SelfTerminate:1;
      ULONG SameThreadApcFlags;
      UCHAR Spare:1;
      volatile UCHAR StartAddressInvalid:1;
      UCHAR EtwPageFaultCalloutActive:1;
      UCHAR OwnsProcessWorkingSetExclusive:1;
      UCHAR OwnsProcessWorkingSetShared:1;
      UCHAR OwnsSystemWorkingSetExclusive:1;
      UCHAR OwnsSystemWorkingSetShared:1;
      UCHAR OwnsSessionWorkingSetExclusive:1;
      UCHAR OwnsSessionWorkingSetShared:1;
      UCHAR OwnsProcessAddressSpaceExclusive:1;
      UCHAR OwnsProcessAddressSpaceShared:1;
      UCHAR SuppressSymbolLoad:1;
      UCHAR Prefetching:1;
      UCHAR OwnsDynamicMemoryShared:1;
      UCHAR OwnsChangeControlAreaExclusive:1;
      UCHAR OwnsChangeControlAreaShared:1;
      UCHAR Spare1:8;
      UCHAR PriorityRegionActive;
      UCHAR CacheManagerActive;
      UCHAR DisablePageFaultClustering;
      UCHAR ActiveFaultCount;
      ULONGLONG AlpcMessageId;
      VOID * AlpcMessage;
      ULONG AlpcReceiveAttributeSet;
      _LIST_ENTRY AlpcWaitListEntry;
      ULONG CacheManagerCount;
};