ETHREAD

Description

INCOMPLETE SECTION OR ARTICLE

This section/article is being written and is therefore not complete.
Thank you for your comprehension.

Structure

typedef struct _ETHREAD
{
    KTHREAD Tcb;
    LARGE_INTEGER CreateTime;
    union
    {
         LARGE_INTEGER ExitTime;
         LIST_ENTRY KeyedWaitChain;
    };
    union
    {
         LONG ExitStatus;
         PVOID OfsChain;
    };
    union
    {
         LIST_ENTRY PostBlockList;
         struct
         {
              PVOID ForwardLinkShadow;
              PVOID StartAddress;
         };
    };
    union
    {
         PTERMINATION_PORT TerminationPort;
         PETHREAD ReaperLink;
         PVOID KeyedWaitValue;
         PVOID Win32StartParameter;
    };
    ULONG ActiveTimerListLock;
    LIST_ENTRY ActiveTimerListHead;
    CLIENT_ID Cid;
    union
    {
         KSEMAPHORE KeyedWaitSemaphore;
         KSEMAPHORE AlpcWaitSemaphore;
    };
    PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
    LIST_ENTRY IrpList;
    ULONG TopLevelIrp;
    PDEVICE_OBJECT DeviceToVerify;
    _PSP_RATE_APC * RateControlApc;
    PVOID Win32StartAddress;
    PVOID SparePtr0;
    LIST_ENTRY ThreadListEntry;
    EX_RUNDOWN_REF RundownProtect;
    EX_PUSH_LOCK ThreadLock;
    ULONG ReadClusterSize;
    LONG MmLockOrdering;
    ULONG CrossThreadFlags;
    ULONG Terminated: 1;
    ULONG ThreadInserted: 1;
    ULONG HideFromDebugger: 1;
    ULONG ActiveImpersonationInfo: 1;
    ULONG SystemThread: 1;
    ULONG HardErrorsAreDisabled: 1;
    ULONG BreakOnTermination: 1;
    ULONG SkipCreationMsg: 1;
    ULONG SkipTerminationMsg: 1;
    ULONG CopyTokenOnOpen: 1;
    ULONG ThreadIoPriority: 3;
    ULONG ThreadPagePriority: 3;
    ULONG RundownFail: 1;
    ULONG SameThreadPassiveFlags;
    ULONG ActiveExWorker: 1;
    ULONG ExWorkerCanWaitUser: 1;
    ULONG MemoryMaker: 1;
    ULONG ClonedThread: 1;
    ULONG KeyedEventInUse: 1;
    ULONG RateApcState: 2;
    ULONG SelfTerminate: 1;
    ULONG SameThreadApcFlags;
    ULONG Spare: 1;
    ULONG StartAddressInvalid: 1;
    ULONG EtwPageFaultCalloutActive: 1;
    ULONG OwnsProcessWorkingSetExclusive: 1;
    ULONG OwnsProcessWorkingSetShared: 1;
    ULONG OwnsSystemWorkingSetExclusive: 1;
    ULONG OwnsSystemWorkingSetShared: 1;
    ULONG OwnsSessionWorkingSetExclusive: 1;
    ULONG OwnsSessionWorkingSetShared: 1;
    ULONG OwnsProcessAddressSpaceExclusive: 1;
    ULONG OwnsProcessAddressSpaceShared: 1;
    ULONG SuppressSymbolLoad: 1;
    ULONG Prefetching: 1;
    ULONG OwnsDynamicMemoryShared: 1;
    ULONG OwnsChangeControlAreaExclusive: 1;
    ULONG OwnsChangeControlAreaShared: 1;
    ULONG PriorityRegionActive: 4;
    UCHAR CacheManagerActive;
    UCHAR DisablePageFaultClustering;
    UCHAR ActiveFaultCount;
    ULONG AlpcMessageId;
    union
    {
         PVOID AlpcMessage;
         ULONG AlpcReceiveAttributeSet;
    };
    LIST_ENTRY AlpcWaitListEntry;
    ULONG CacheManagerCount;
} ETHREAD, *PETHREAD;