|
|
_pack_ = 8
|
|
|
_fields_ = [('NtTib', <class 'winappdbg.win32.peb_teb.NT_TIB'>... |
|
|
ActivationContextStackPointer = <Field type=c_void_p, ofs=424,...
|
|
|
ActiveFrame = <Field type=c_void_p, ofs=4388, size=4>
|
|
|
ActiveRpcHandle = <Field type=c_void_p, ofs=40, size=4>
|
|
|
ActivityId = <Field type=GUID, ofs=4284, size=16>
|
|
|
BStoreLimit = <Field type=c_void_p, ofs=4360, size=4>
|
|
|
ClientId = <Field type=CLIENT_ID, ofs=32, size=8>
|
|
|
CountOfOwnedCriticalSections = <Field type=c_ulong, ofs=56, si...
|
|
|
CrossTebFlags = <Field type=c_ushort, ofs=4412, size=2>
|
|
|
CsrClientThread = <Field type=c_void_p, ofs=60, size=4>
|
|
|
CurrentLocale = <Field type=c_ulong, ofs=196, size=4>
|
|
|
CurrentTransactionHandle = <Field type=c_void_p, ofs=4384, siz...
|
|
|
DbgSsReserved = <Field type=c_void_p_Array_2, ofs=4228, size=8>
|
|
|
DeallocationBStore = <Field type=c_void_p, ofs=4356, size=4>
|
|
|
DeallocationStack = <Field type=c_void_p, ofs=3952, size=4>
|
|
|
EnvironmentPointer = <Field type=c_void_p, ofs=28, size=4>
|
|
|
EtwLocalData = <Field type=c_void_p, ofs=4304, size=4>
|
|
|
EtwTraceData = <Field type=c_void_p, ofs=4308, size=4>
|
|
|
ExceptionCode = <Field type=c_long, ofs=420, size=4>
|
|
|
FlsData = <Field type=c_void_p, ofs=4392, size=4>
|
|
|
FpSoftwareStatusRegister = <Field type=c_ulong, ofs=200, size=4>
|
|
|
GdiBatchCount = <Field type=c_ulong, ofs=4316, size=4>
|
|
|
GdiCachedProcessHandle = <Field type=c_void_p, ofs=1712, size=4>
|
|
|
GdiClientPID = <Field type=c_ulong, ofs=1716, size=4>
|
|
|
GdiClientTID = <Field type=c_ulong, ofs=1720, size=4>
|
|
|
GdiTebBatch = <Field type=GDI_TEB_BATCH, ofs=456, size=1248>
|
|
|
GdiThreadLocalInfo = <Field type=c_void_p, ofs=1724, size=4>
|
|
|
GuaranteedStackBytes = <Field type=c_ulong, ofs=4324, size=4>
|
|
|
HardErrorMode = <Field type=c_ulong, ofs=4236, size=4>
|
|
|
HeapVirtualAffinity = <Field type=c_ulong, ofs=4380, size=4>
|
|
|
IdealProcessor = <Field type=c_ubyte, ofs=4323, size=1>
|
|
|
ImpersonationLocale = <Field type=c_ulong, ofs=4364, size=4>
|
|
|
Instrumentation = <Field type=c_void_p_Array_11, ofs=4240, siz...
|
|
|
IsImpersonating = <Field type=c_ulong, ofs=4368, size=4>
|
|
|
LastErrorValue = <Field type=c_ulong, ofs=52, size=4>
|
|
|
LastStatusValue = <Field type=c_long, ofs=3416, size=4>
|
|
|
LastSwitchTime = <Field type=c_ulonglong, ofs=4440, size=8>
|
|
|
LockCount = <Field type=c_ulong, ofs=4428, size=4>
|
|
|
MergedPrefLanguages = <Field type=c_void_p, ofs=4404, size=4>
|
|
|
MuiImpersonation = <Field type=c_ulong, ofs=4408, size=4>
|
|
|
NlsCache = <Field type=c_void_p, ofs=4372, size=4>
|
|
|
NtTib = <Field type=NT_TIB, ofs=0, size=28>
|
|
|
PreferredLanguages = <Field type=c_void_p, ofs=4396, size=4>
|
|
|
ProcessEnvironmentBlock = <Field type=c_void_p, ofs=48, size=4>
|
|
|
ProcessRundown = <Field type=c_ulong, ofs=4432, size=4>
|
|
|
RealClientId = <Field type=CLIENT_ID, ofs=1704, size=8>
|
|
|
ReservedForNtRpc = <Field type=c_void_p, ofs=4224, size=4>
|
|
|
ReservedForOle = <Field type=c_void_p, ofs=4332, size=4>
|
|
|
ReservedForPerf = <Field type=c_void_p, ofs=4328, size=4>
|
|
|
SameTebFlags = <Field type=c_ushort, ofs=4414, size=2>
|
|
|
SavedPriorityState = <Field type=c_void_p, ofs=4340, size=4>
|
|
|
SoftPatchPtr1 = <Field type=c_void_p, ofs=4344, size=4>
|
|
|
SpareBool0 = <Field type=c_ubyte, ofs=4320, size=1>
|
|
|
SpareBool1 = <Field type=c_ubyte, ofs=4321, size=1>
|
|
|
SpareBool2 = <Field type=c_ubyte, ofs=4322, size=1>
|
|
|
SpareBytes1 = <Field type=c_ubyte_Array_24, ofs=428, size=24>
|
|
|
StaticUnicodeBuffer = <Field type=c_wchar_Array_261, ofs=3428,...
|
|
|
StaticUnicodeString = <Field type=UNICODE_STRING, ofs=3420, si...
|
|
|
SubProcessTag = <Field type=c_void_p, ofs=4300, size=4>
|
|
|
SystemReserved1 = <Field type=c_void_p_Array_54, ofs=204, size...
|
|
|
ThreadLocalStoragePointer = <Field type=c_void_p, ofs=44, size=4>
|
|
|
ThreadPoolData = <Field type=c_void_p, ofs=4348, size=4>
|
|
|
TlsExpansionSlots = <Field type=c_void_p, ofs=4352, size=4>
|
|
|
TlsLinks = <Field type=LIST_ENTRY, ofs=4212, size=8>
|
|
|
TlsSlots = <Field type=c_void_p_Array_64, ofs=3956, size=256>
|
|
|
TotalSwitchOutTime = <Field type=c_ulonglong, ofs=4448, size=8>
|
|
|
TxFsContext = <Field type=c_ulong, ofs=452, size=4>
|
|
|
TxnScopeContext = <Field type=c_void_p, ofs=4424, size=4>
|
|
|
TxnScopeEnterCallback = <Field type=c_void_p, ofs=4416, size=4>
|
|
|
TxnScopeExitCallback = <Field type=c_void_p, ofs=4420, size=4>
|
|
|
User32Reserved = <Field type=c_ulong_Array_26, ofs=68, size=104>
|
|
|
UserPrefLanguages = <Field type=c_void_p, ofs=4400, size=4>
|
|
|
UserReserved = <Field type=c_ulong_Array_5, ofs=172, size=20>
|
|
|
Vdm = <Field type=c_void_p, ofs=4220, size=4>
|
|
|
WOW32Reserved = <Field type=c_void_p, ofs=192, size=4>
|
|
|
WaitReasonBitMap = <Field type=c_longlong, ofs=4456, size=8>
|
|
|
WaitingOnLoaderLock = <Field type=c_ulong, ofs=4336, size=4>
|
|
|
Win32ClientInfo = <Field type=c_ulonglong_Array_62, ofs=1728, ...
|
|
|
Win32ThreadInfo = <Field type=c_void_p, ofs=64, size=4>
|
|
|
WinSockData = <Field type=c_void_p, ofs=4312, size=4>
|
|
|
glContext = <Field type=c_void_p, ofs=3412, size=4>
|
|
|
glCurrentRC = <Field type=c_void_p, ofs=3408, size=4>
|
|
|
glDispatchTable = <Field type=c_void_p_Array_233, ofs=2224, si...
|
|
|
glReserved1 = <Field type=c_ulonglong_Array_29, ofs=3160, size...
|
|
|
glReserved2 = <Field type=c_void_p, ofs=3392, size=4>
|
|
|
glSection = <Field type=c_void_p, ofs=3400, size=4>
|
|
|
glSectionInfo = <Field type=c_void_p, ofs=3396, size=4>
|
|
|
glTable = <Field type=c_void_p, ofs=3404, size=4>
|
|
|
pShimData = <Field type=c_void_p, ofs=4376, size=4>
|
