|
|
_pack_ = 4
|
|
|
_fields_ = [('NtTib', <class 'winappdbg.win32.peb_teb.NT_TIB'>... |
|
|
ActivationContextStackPointer = <Field type=c_void_p, ofs=428,...
|
|
|
ActiveRpcHandle = <Field type=c_void_p, ofs=40, size=4>
|
|
|
ActivityId = <Field type=GUID, ofs=4032, size=16>
|
|
|
ClientId = <Field type=CLIENT_ID, ofs=32, size=8>
|
|
|
CountOfOwnedCriticalSections = <Field type=c_ulong, ofs=56, si...
|
|
|
CsrClientThread = <Field type=c_void_p, ofs=60, size=4>
|
|
|
CurrentLocale = <Field type=c_ulong, ofs=196, size=4>
|
|
|
DbgSsReserved = <Field type=c_void_p_Array_2, ofs=3984, size=8>
|
|
|
DeallocationStack = <Field type=c_void_p, ofs=3708, size=4>
|
|
|
EnvironmentPointer = <Field type=c_void_p, ofs=28, size=4>
|
|
|
EtwLocalData = <Field type=c_void_p, ofs=4052, size=4>
|
|
|
EtwTraceData = <Field type=c_void_p, ofs=4056, size=4>
|
|
|
ExceptionCode = <Field type=c_ulong, ofs=424, size=4>
|
|
|
FpSoftwareStatusRegister = <Field type=c_ulong, ofs=200, size=4>
|
|
|
GdiBatchCount = <Field type=c_ulong, ofs=4064, size=4>
|
|
|
GdiCachedProcessHandle = <Field type=c_void_p, ofs=1836, size=4>
|
|
|
GdiClientPID = <Field type=c_ulong, ofs=1840, size=4>
|
|
|
GdiClientTID = <Field type=c_ulong, ofs=1844, size=4>
|
|
|
GdiTebBatch = <Field type=GDI_TEB_BATCH, ofs=580, size=1248>
|
|
|
GdiThreadLocalInfo = <Field type=c_void_p, ofs=1848, size=4>
|
|
|
GuaranteedStackBytes = <Field type=c_ulong, ofs=4072, size=4>
|
|
|
HardErrorDisabled = <Field type=c_ulong, ofs=3992, size=4>
|
|
|
IdealProcessor = <Field type=c_ubyte, ofs=4071, size=1>
|
|
|
Instrumentation = <Field type=c_void_p_Array_9, ofs=3996, size...
|
|
|
LastErrorValue = <Field type=c_ulong, ofs=52, size=4>
|
|
|
LastStatusValue = <Field type=c_long, ofs=3172, size=4>
|
|
|
NtTib = <Field type=NT_TIB, ofs=0, size=28>
|
|
|
ProcessEnvironmentBlock = <Field type=c_void_p, ofs=48, size=4>
|
|
|
RealClientId = <Field type=CLIENT_ID, ofs=1828, size=8>
|
|
|
ReservedForNtRpc = <Field type=c_void_p, ofs=3980, size=4>
|
|
|
ReservedForOle = <Field type=c_void_p, ofs=4080, size=4>
|
|
|
ReservedForPerf = <Field type=c_void_p, ofs=4076, size=4>
|
|
|
Spare1 = <Field type=c_void_p, ofs=420, size=4>
|
|
|
SpareBool0 = <Field type=c_ubyte, ofs=4068, size=1>
|
|
|
SpareBool1 = <Field type=c_ubyte, ofs=4069, size=1>
|
|
|
SpareBool2 = <Field type=c_ubyte, ofs=4070, size=1>
|
|
|
SpareBytes1 = <Field type=c_ulong_Array_36, ofs=432, size=144>
|
|
|
StackCommit = <Field type=c_void_p, ofs=4088, size=4>
|
|
|
StackCommitMax = <Field type=c_void_p, ofs=4092, size=4>
|
|
|
StackReserved = <Field type=c_void_p, ofs=4096, size=4>
|
|
|
StaticUnicodeBuffer = <Field type=c_wchar_Array_261, ofs=3184,...
|
|
|
StaticUnicodeString = <Field type=UNICODE_STRING, ofs=3176, si...
|
|
|
SubProcessTag = <Field type=c_void_p, ofs=4048, size=4>
|
|
|
SystemReserved1 = <Field type=c_void_p_Array_54, ofs=204, size...
|
|
|
ThreadLocalStoragePointer = <Field type=c_void_p, ofs=44, size=4>
|
|
|
TlsLinks = <Field type=LIST_ENTRY, ofs=3968, size=8>
|
|
|
TlsSlots = <Field type=c_void_p_Array_64, ofs=3712, size=256>
|
|
|
TxFsContext = <Field type=c_ulong, ofs=576, size=4>
|
|
|
User32Reserved = <Field type=c_ulong_Array_26, ofs=68, size=104>
|
|
|
UserReserved = <Field type=c_ulong_Array_5, ofs=172, size=20>
|
|
|
Vdm = <Field type=c_void_p, ofs=3976, size=4>
|
|
|
WOW32Reserved = <Field type=c_void_p, ofs=192, size=4>
|
|
|
WaitingOnLoaderLock = <Field type=c_ulong, ofs=4084, size=4>
|
|
|
Win32ClientInfo = <Field type=c_void_p_Array_62, ofs=1852, siz...
|
|
|
Win32ThreadInfo = <Field type=c_void_p, ofs=64, size=4>
|
|
|
WinSockData = <Field type=c_void_p, ofs=4060, size=4>
|
|
|
glContext = <Field type=c_void_p, ofs=3168, size=4>
|
|
|
glCurrentRC = <Field type=c_void_p, ofs=3164, size=4>
|
|
|
glDispatchTable = <Field type=c_void_p_Array_233, ofs=2100, si...
|
|
|
glReserved1 = <Field type=c_ulong_Array_29, ofs=3032, size=116>
|
|
|
glReserved2 = <Field type=c_void_p, ofs=3148, size=4>
|
|
|
glSection = <Field type=c_void_p, ofs=3156, size=4>
|
|
|
glSectionInfo = <Field type=c_void_p, ofs=3152, size=4>
|
|
|
glTable = <Field type=c_void_p, ofs=3160, size=4>
|
