Function KeQueryRuntimeThread 

pub unsafe fn KeQueryRuntimeThread(thread: PKTHREAD, usertime: *mut u32) -> u32