Package winappdbg :: Package win32 :: Module peb_teb :: Class PEB
[hide private]
[frames] | no frames]

Class PEB

source code


Instance Methods [hide private]

Inherited from _ctypes.Structure: __init__, __new__

Inherited from unreachable._CData: __ctypes_from_outparam__, __hash__, __reduce__, __setstate__

Inherited from object: __delattr__, __format__, __getattribute__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  _pack_ = 8
  _fields_ = [('InheritedAddressSpace', <class 'ctypes.c_ubyte'>...
  ActivationContextData = <Field type=c_void_p, ofs=504, size=4>
  AnsiCodePageData = <Field type=c_void_p, ofs=88, size=4>
  AppCompatFlags = <Field type=c_ulonglong, ofs=472, size=8>
  AppCompatFlagsUser = <Field type=c_ulonglong, ofs=480, size=8>
  AppCompatInfo = <Field type=c_void_p, ofs=492, size=4>
  AtlThunkSListPtr32 = <Field type=c_ulong, ofs=52, size=4>
  BeingDebugged = <Field type=c_ubyte, ofs=2, size=1>
  CSDVersion = <Field type=UNICODE_STRING, ofs=496, size=8>
  CriticalSectionTimeout = <Field type=c_longlong, ofs=112, size=8>
  EnvironmentUpdateCount = <Field type=c_ulong, ofs=40, size=4>
  FastPebLock = <Field type=c_void_p, ofs=28, size=4>
  FastPebLockRoutine = <Field type=c_void_p, ofs=32, size=4>
  FastPebUnlockRoutine = <Field type=c_void_p, ofs=36, size=4>
  FreeList = <Field type=c_void_p, ofs=56, size=4>
  GdiDCAttributeList = <Field type=c_ulong, ofs=156, size=4>
  GdiHandleBuffer = <Field type=c_ulong_Array_34, ofs=196, size=...
  GdiSharedHandleTable = <Field type=c_void_p, ofs=148, size=4>
  HeapDeCommitFreeBlockThreshold = <Field type=c_ulong, ofs=132,...
  HeapDeCommitTotalFreeThreshold = <Field type=c_ulong, ofs=128,...
  HeapSegmentCommit = <Field type=c_ulong, ofs=124, size=4>
  HeapSegmentReserve = <Field type=c_ulong, ofs=120, size=4>
  ImageBaseAddress = <Field type=c_void_p, ofs=8, size=4>
  ImageProcessAffinityMask = <Field type=c_ulong, ofs=192, size=4>
  ImageSubsystem = <Field type=c_ulong, ofs=180, size=4>
  ImageSubsystemMajorVersion = <Field type=c_ulong, ofs=184, siz...
  ImageSubsystemMinorVersion = <Field type=c_ulong, ofs=188, siz...
  InheritedAddressSpace = <Field type=c_ubyte, ofs=0, size=1>
  KernelCallbackTable = <Field type=c_void_p, ofs=44, size=4>
  Ldr = <Field type=c_void_p, ofs=12, size=4>
  LoaderLock = <Field type=c_void_p, ofs=160, size=4>
  MaximumNumberOfHeaps = <Field type=c_ulong, ofs=140, size=4>
  MinimumStackCommit = <Field type=c_ulong, ofs=520, size=4>
  Mutant = <Field type=c_void_p, ofs=4, size=4>
  NtGlobalFlag = <Field type=c_ulong, ofs=104, size=4>
  NumberOfHeaps = <Field type=c_ulong, ofs=136, size=4>
  NumberOfProcessors = <Field type=c_ulong, ofs=100, size=4>
  OSBuildNumber = <Field type=c_ushort, ofs=172, size=2>
  OSCSDVersion = <Field type=c_ushort, ofs=174, size=2>
  OSMajorVersion = <Field type=c_ulong, ofs=164, size=4>
  OSMinorVersion = <Field type=c_ulong, ofs=168, size=4>
  OSPlatformId = <Field type=c_ulong, ofs=176, size=4>
  OemCodePageData = <Field type=c_void_p, ofs=92, size=4>
  PostProcessInitRoutine = <Field type=c_void_p, ofs=332, size=4>
  ProcessAssemblyStorageMap = <Field type=c_void_p, ofs=508, siz...
  ProcessHeap = <Field type=c_void_p, ofs=24, size=4>
  ProcessHeaps = <Field type=c_void_p, ofs=144, size=4>
  ProcessParameters = <Field type=c_void_p, ofs=16, size=4>
  ProcessStarterHelper = <Field type=c_void_p, ofs=152, size=4>
  ReadImageFileExecOptions = <Field type=c_ubyte, ofs=1, size=1>
  ReadOnlySharedMemoryBase = <Field type=c_void_p, ofs=76, size=4>
  ReadOnlySharedMemoryHeap = <Field type=c_void_p, ofs=80, size=4>
  ReadOnlyStaticServerData = <Field type=c_void_p, ofs=84, size=4>
  SessionId = <Field type=c_ulong, ofs=468, size=4>
  SpareBool = <Field type=c_ubyte, ofs=3, size=1>
  SubSystemData = <Field type=c_void_p, ofs=20, size=4>
  SystemAssemblyStorageMap = <Field type=c_void_p, ofs=516, size=4>
  SystemDefaultActivationContextData = <Field type=c_void_p, ofs...
  SystemReserved = <Field type=c_ulong, ofs=48, size=4>
  TlsBitmap = <Field type=c_void_p, ofs=64, size=4>
  TlsBitmapBits = <Field type=c_ulong_Array_2, ofs=68, size=8>
  TlsExpansionBitmap = <Field type=c_void_p, ofs=336, size=4>
  TlsExpansionBitmapBits = <Field type=c_ulong_Array_32, ofs=340...
  TlsExpansionCounter = <Field type=c_ulong, ofs=60, size=4>
  UnicodeCaseTableData = <Field type=c_void_p, ofs=96, size=4>
  pShimData = <Field type=c_void_p, ofs=488, size=4>
Properties [hide private]

Inherited from unreachable._CData: _b_base_, _b_needsfree_

Inherited from unreachable._CData (private): _objects

Inherited from object: __class__

Class Variable Details [hide private]

_fields_

Value:
[('InheritedAddressSpace', <class 'ctypes.c_ubyte'>),
 ('ReadImageFileExecOptions', <class 'ctypes.c_ubyte'>),
 ('BeingDebugged', <class 'ctypes.c_ubyte'>),
 ('SpareBool', <class 'ctypes.c_ubyte'>),
 ('Mutant', <class 'ctypes.c_void_p'>),
 ('ImageBaseAddress', <class 'ctypes.c_void_p'>),
 ('Ldr', <class 'ctypes.c_void_p'>),
 ('ProcessParameters', <class 'ctypes.c_void_p'>),
...

GdiHandleBuffer

Value:
<Field type=c_ulong_Array_34, ofs=196, size=136>

HeapDeCommitFreeBlockThreshold

Value:
<Field type=c_ulong, ofs=132, size=4>

HeapDeCommitTotalFreeThreshold

Value:
<Field type=c_ulong, ofs=128, size=4>

ImageSubsystemMajorVersion

Value:
<Field type=c_ulong, ofs=184, size=4>

ImageSubsystemMinorVersion

Value:
<Field type=c_ulong, ofs=188, size=4>

ProcessAssemblyStorageMap

Value:
<Field type=c_void_p, ofs=508, size=4>

SystemDefaultActivationContextData

Value:
<Field type=c_void_p, ofs=512, size=4>

TlsExpansionBitmapBits

Value:
<Field type=c_ulong_Array_32, ofs=340, size=128>