typedef struct _KTHREAD                          // 80 elements, 0x1C8 bytes (sizeof)
          {
/*0x000*/     struct _DISPATCHER_HEADER Header;            // 8 elements, 0x10 bytes (sizeof)
/*0x010*/     struct _LIST_ENTRY MutantListHead;           // 2 elements, 0x8 bytes (sizeof)
/*0x018*/     VOID*        InitialStack;
/*0x01C*/     VOID*        StackLimit;
/*0x020*/     VOID*        KernelStack;
/*0x024*/     ULONG32      ThreadLock;
/*0x028*/     ULONG32      ContextSwitches;
/*0x02C*/     UINT8        State;
/*0x02D*/     UINT8        NpxState;
/*0x02E*/     UINT8        WaitIrql;
/*0x02F*/     CHAR         WaitMode;
/*0x030*/     VOID*        Teb;
/*0x034*/     struct _KAPC_STATE ApcState;                 // 5 elements, 0x18 bytes (sizeof)
/*0x04C*/     ULONG32      ApcQueueLock;
/*0x050*/     LONG32       WaitStatus;
/*0x054*/     struct _KWAIT_BLOCK* WaitBlockList;
/*0x058*/     UINT8        Alertable;
/*0x059*/     UINT8        WaitNext;
/*0x05A*/     UINT8        WaitReason;
/*0x05B*/     CHAR         Priority;
/*0x05C*/     UINT8        EnableStackSwap;
/*0x05D*/     UINT8        SwapBusy;
/*0x05E*/     UINT8        Alerted[2];
              union                                        // 2 elements, 0x8 bytes (sizeof)
              {
/*0x060*/         struct _LIST_ENTRY WaitListEntry;        // 2 elements, 0x8 bytes (sizeof)
/*0x060*/         struct _SINGLE_LIST_ENTRY SwapListEntry; // 1 elements, 0x4 bytes (sizeof)
              };
/*0x068*/     struct _KQUEUE* Queue;
/*0x06C*/     ULONG32      WaitTime;
              union                                        // 2 elements, 0x8 bytes (sizeof)
              {
                  struct                                   // 2 elements, 0x8 bytes (sizeof)
                  {
/*0x070*/             INT16        KernelApcDisable;
/*0x072*/             INT16        SpecialApcDisable;
/*0x074*/             UINT8        _PADDING0_[0x4];
                  };
/*0x070*/         ULONG32      CombinedApcDisable;
              };
/*0x078*/     struct _KTIMER Timer;                        // 5 elements, 0x28 bytes (sizeof)
/*0x0A0*/     struct _KWAIT_BLOCK WaitBlock[4];
/*0x100*/     struct _LIST_ENTRY QueueListEntry;           // 2 elements, 0x8 bytes (sizeof)
/*0x108*/     UINT8        ApcStateIndex;
/*0x109*/     UINT8        ApcQueueable;
/*0x10A*/     UINT8        Preempted;
/*0x10B*/     UINT8        ProcessReadyQueue;
/*0x10C*/     UINT8        KernelStackResident;
/*0x10D*/     CHAR         Saturation;
/*0x10E*/     UINT8        IdealProcessor;
/*0x10F*/     UINT8        NextProcessor;
/*0x110*/     CHAR         BasePriority;
/*0x111*/     UINT8        Spare4;
/*0x112*/     CHAR         PriorityDecrement;
/*0x113*/     CHAR         Quantum;
/*0x114*/     UINT8        SystemAffinityActive;
/*0x115*/     CHAR         PreviousMode;
/*0x116*/     UINT8        ResourceIndex;
/*0x117*/     UINT8        DisableBoost;
/*0x118*/     ULONG32      UserAffinity;
/*0x11C*/     struct _KPROCESS* Process;
/*0x120*/     ULONG32      Affinity;
/*0x124*/     VOID*        ServiceTable;
/*0x128*/     struct _KAPC_STATE* ApcStatePointer[2];
/*0x130*/     struct _KAPC_STATE SavedApcState;            // 5 elements, 0x18 bytes (sizeof)
/*0x148*/     VOID*        CallbackStack;
/*0x14C*/     VOID*        Win32Thread;
/*0x150*/     struct _KTRAP_FRAME* TrapFrame;
/*0x154*/     ULONG32      KernelTime;
/*0x158*/     ULONG32      UserTime;
/*0x15C*/     VOID*        StackBase;
/*0x160*/     struct _KAPC SuspendApc;                     // 14 elements, 0x30 bytes (sizeof)
/*0x190*/     struct _KSEMAPHORE SuspendSemaphore;         // 2 elements, 0x14 bytes (sizeof)
/*0x1A4*/     VOID*        TlsArray;
/*0x1A8*/     VOID*        LegoData;
/*0x1AC*/     struct _LIST_ENTRY ThreadListEntry;          // 2 elements, 0x8 bytes (sizeof)
/*0x1B4*/     UINT8        LargeStack;
/*0x1B5*/     UINT8        PowerState;
/*0x1B6*/     UINT8        NpxIrql;
/*0x1B7*/     UINT8        Spare5;
/*0x1B8*/     UINT8        AutoAlignment;
/*0x1B9*/     UINT8        Iopl;
/*0x1BA*/     CHAR         FreezeCount;
/*0x1BB*/     CHAR         SuspendCount;
/*0x1BC*/     UINT8        Spare0[1];
/*0x1BD*/     UINT8        UserIdealProcessor;
/*0x1BE*/     UINT8        DeferredProcessor;
/*0x1BF*/     UINT8        AdjustReason;
/*0x1C0*/     CHAR         AdjustIncrement;
/*0x1C1*/     UINT8        Spare2[3];
/*0x1C4*/     UINT8        _PADDING1_[0x4];
          }KTHREAD, *PKTHREAD;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.