|
|
_pack_ = 8
|
|
|
_fields_ = [('NtTib', <class 'winappdbg.win32.peb_teb.NT_TIB'>... |
|
|
ActivationContextStackPointer = <Field type=c_void_p, ofs=424,...
|
|
|
ActiveFrame = <Field type=c_void_p, ofs=4148, size=4>
|
|
|
ActiveRpcHandle = <Field type=c_void_p, ofs=40, size=4>
|
|
|
ActivityId = <Field type=GUID, ofs=4036, size=16>
|
|
|
BStoreLimit = <Field type=c_void_p, ofs=4120, size=4>
|
|
|
ClientId = <Field type=CLIENT_ID, ofs=32, size=8>
|
|
|
CountOfOwnedCriticalSections = <Field type=c_ulong, ofs=56, si...
|
|
|
CrossTebFlags = <Field type=c_ushort, ofs=4172, size=2>
|
|
|
CsrClientThread = <Field type=c_void_p, ofs=60, size=4>
|
|
|
CurrentIdealProcessor = <Field type=PROCESSOR_NUMBER, ofs=4072...
|
|
|
CurrentLocale = <Field type=c_ulong, ofs=196, size=4>
|
|
|
CurrentTransactionHandle = <Field type=c_void_p, ofs=4144, siz...
|
|
|
DbgSsReserved = <Field type=c_void_p_Array_2, ofs=3980, size=8>
|
|
|
DeallocationBStore = <Field type=c_void_p, ofs=4116, size=4>
|
|
|
DeallocationStack = <Field type=c_void_p, ofs=3704, size=4>
|
|
|
EnvironmentPointer = <Field type=c_void_p, ofs=28, size=4>
|
|
|
EtwLocalData = <Field type=c_void_p, ofs=4056, size=4>
|
|
|
EtwTraceData = <Field type=c_void_p, ofs=4060, size=4>
|
|
|
ExceptionCode = <Field type=c_long, ofs=420, size=4>
|
|
|
FlsData = <Field type=c_void_p, ofs=4152, size=4>
|
|
|
FpSoftwareStatusRegister = <Field type=c_ulong, ofs=200, size=4>
|
|
|
GdiBatchCount = <Field type=c_ulong, ofs=4068, size=4>
|
|
|
GdiCachedProcessHandle = <Field type=c_void_p, ofs=1712, size=4>
|
|
|
GdiClientPID = <Field type=c_ulong, ofs=1716, size=4>
|
|
|
GdiClientTID = <Field type=c_ulong, ofs=1720, size=4>
|
|
|
GdiTebBatch = <Field type=GDI_TEB_BATCH, ofs=456, size=1248>
|
|
|
GdiThreadLocalInfo = <Field type=c_void_p, ofs=1724, size=4>
|
|
|
GuaranteedStackBytes = <Field type=c_ulong, ofs=4084, size=4>
|
|
|
HardErrorMode = <Field type=c_ulong, ofs=3988, size=4>
|
|
|
HeapVirtualAffinity = <Field type=c_ulong, ofs=4140, size=4>
|
|
|
IdealProcessor = <Field type=c_ubyte, ofs=4083, size=1>
|
|
|
IdealProcessorValue = <Field type=c_ulong, ofs=4076, size=4>
|
|
|
Instrumentation = <Field type=c_void_p_Array_11, ofs=3992, siz...
|
|
|
IsImpersonating = <Field type=c_long, ofs=4128, size=4>
|
|
|
LastErrorValue = <Field type=c_ulong, ofs=52, size=4>
|
|
|
LastStatusValue = <Field type=c_long, ofs=3168, size=4>
|
|
|
LockCount = <Field type=c_ulong, ofs=4188, size=4>
|
|
|
MergedPrefLanguages = <Field type=c_void_p, ofs=4164, size=4>
|
|
|
MuiGeneration = <Field type=c_ulong, ofs=4124, size=4>
|
|
|
MuiImpersonation = <Field type=c_long, ofs=4168, size=4>
|
|
|
NlsCache = <Field type=c_void_p, ofs=4132, size=4>
|
|
|
NtTib = <Field type=NT_TIB, ofs=0, size=28>
|
|
|
PreferredLanguages = <Field type=c_void_p, ofs=4156, size=4>
|
|
|
ProcessEnvironmentBlock = <Field type=c_void_p, ofs=48, size=4>
|
|
|
RealClientId = <Field type=CLIENT_ID, ofs=1704, size=8>
|
|
|
ReservedForNtRpc = <Field type=c_void_p, ofs=3976, size=4>
|
|
|
ReservedForOle = <Field type=c_void_p, ofs=4092, size=4>
|
|
|
ReservedForPerf = <Field type=c_void_p, ofs=4088, size=4>
|
|
|
ReservedPad0 = <Field type=c_ubyte, ofs=4080, size=1>
|
|
|
ReservedPad1 = <Field type=c_ubyte, ofs=4081, size=1>
|
|
|
ReservedPad2 = <Field type=c_ubyte, ofs=4082, size=1>
|
|
|
ResourceRetValue = <Field type=c_void_p, ofs=4196, size=4>
|
|
|
SameTebFlags = <Field type=c_ushort, ofs=4174, size=2>
|
|
|
SavedPriorityState = <Field type=c_void_p, ofs=4100, size=4>
|
|
|
SoftPatchPtr1 = <Field type=c_void_p, ofs=4104, size=4>
|
|
|
SpareBytes = <Field type=c_ubyte_Array_24, ofs=428, size=24>
|
|
|
SpareUlong0 = <Field type=c_ulong, ofs=4192, size=4>
|
|
|
StaticUnicodeBuffer = <Field type=c_wchar_Array_261, ofs=3180,...
|
|
|
StaticUnicodeString = <Field type=UNICODE_STRING, ofs=3172, si...
|
|
|
SubProcessTag = <Field type=c_void_p, ofs=4052, size=4>
|
|
|
SystemReserved1 = <Field type=c_void_p_Array_54, ofs=204, size...
|
|
|
ThreadLocalStoragePointer = <Field type=c_void_p, ofs=44, size=4>
|
|
|
ThreadPoolData = <Field type=c_void_p, ofs=4108, size=4>
|
|
|
TlsExpansionSlots = <Field type=c_void_p, ofs=4112, size=4>
|
|
|
TlsLinks = <Field type=LIST_ENTRY, ofs=3964, size=8>
|
|
|
TlsSlots = <Field type=c_void_p_Array_64, ofs=3708, size=256>
|
|
|
TxFsContext = <Field type=c_ulong, ofs=452, size=4>
|
|
|
TxnScopeContext = <Field type=c_void_p, ofs=4184, size=4>
|
|
|
TxnScopeEnterCallback = <Field type=c_void_p, ofs=4176, size=4>
|
|
|
TxnScopeExitCallback = <Field type=c_void_p, ofs=4180, size=4>
|
|
|
User32Reserved = <Field type=c_ulong_Array_26, ofs=68, size=104>
|
|
|
UserPrefLanguages = <Field type=c_void_p, ofs=4160, size=4>
|
|
|
UserReserved = <Field type=c_ulong_Array_5, ofs=172, size=20>
|
|
|
Vdm = <Field type=c_void_p, ofs=3972, size=4>
|
|
|
WOW32Reserved = <Field type=c_void_p, ofs=192, size=4>
|
|
|
WaitingOnLoaderLock = <Field type=c_ulong, ofs=4096, size=4>
|
|
|
Win32ClientInfo = <Field type=c_ulong_Array_62, ofs=1728, size...
|
|
|
Win32ThreadInfo = <Field type=c_void_p, ofs=64, size=4>
|
|
|
WinSockData = <Field type=c_void_p, ofs=4064, size=4>
|
|
|
glContext = <Field type=c_void_p, ofs=3164, size=4>
|
|
|
glCurrentRC = <Field type=c_void_p, ofs=3160, size=4>
|
|
|
glDispatchTable = <Field type=c_void_p_Array_233, ofs=1976, si...
|
|
|
glReserved1 = <Field type=c_ulonglong_Array_29, ofs=2912, size...
|
|
|
glReserved2 = <Field type=c_void_p, ofs=3144, size=4>
|
|
|
glSection = <Field type=c_void_p, ofs=3152, size=4>
|
|
|
glSectionInfo = <Field type=c_void_p, ofs=3148, size=4>
|
|
|
glTable = <Field type=c_void_p, ofs=3156, size=4>
|
|
|
pShimData = <Field type=c_void_p, ofs=4136, size=4>
|
