|
|
_pack_ = 8
|
|
|
_fields_ = [('NtTib', <class 'winappdbg.win32.peb_teb.NT_TIB'>... |
|
|
ActivationContextStackPointer = <Field type=c_void_p, ofs=424,...
|
|
|
ActiveFrame = <Field type=c_void_p, ofs=4024, size=4>
|
|
|
ActiveRpcHandle = <Field type=c_void_p, ofs=40, size=4>
|
|
|
ActivityId = <Field type=GUID, ofs=3920, size=16>
|
|
|
ClientId = <Field type=CLIENT_ID, ofs=32, size=8>
|
|
|
CountOfOwnedCriticalSections = <Field type=c_ulong, ofs=56, si...
|
|
|
CrossTebFlags = <Field type=c_ushort, ofs=4048, size=2>
|
|
|
CsrClientThread = <Field type=c_void_p, ofs=60, size=4>
|
|
|
CurrentIdealProcessor = <Field type=PROCESSOR_NUMBER, ofs=3956...
|
|
|
CurrentLocale = <Field type=c_ulong, ofs=196, size=4>
|
|
|
CurrentTransactionHandle = <Field type=c_void_p, ofs=4020, siz...
|
|
|
DbgSsReserved = <Field type=c_void_p_Array_2, ofs=3872, size=8>
|
|
|
DeallocationStack = <Field type=c_void_p, ofs=3596, size=4>
|
|
|
EnvironmentPointer = <Field type=c_void_p, ofs=28, size=4>
|
|
|
EtwLocalData = <Field type=c_void_p, ofs=3940, size=4>
|
|
|
EtwTraceData = <Field type=c_void_p, ofs=3944, size=4>
|
|
|
ExceptionCode = <Field type=c_long, ofs=420, size=4>
|
|
|
FlsData = <Field type=c_void_p, ofs=4028, size=4>
|
|
|
FpSoftwareStatusRegister = <Field type=c_ulong, ofs=200, size=4>
|
|
|
GdiBatchCount = <Field type=c_ulong, ofs=3952, size=4>
|
|
|
GdiCachedProcessHandle = <Field type=c_void_p, ofs=1724, size=4>
|
|
|
GdiClientPID = <Field type=c_ulong, ofs=1728, size=4>
|
|
|
GdiClientTID = <Field type=c_ulong, ofs=1732, size=4>
|
|
|
GdiTebBatch = <Field type=GDI_TEB_BATCH, ofs=468, size=1248>
|
|
|
GdiThreadLocalInfo = <Field type=c_void_p, ofs=1736, size=4>
|
|
|
GuaranteedStackBytes = <Field type=c_ulong, ofs=3968, size=4>
|
|
|
HardErrorMode = <Field type=c_ulong, ofs=3880, size=4>
|
|
|
HeapVirtualAffinity = <Field type=c_ulong, ofs=4016, size=4>
|
|
|
IdealProcessor = <Field type=c_ubyte, ofs=3967, size=1>
|
|
|
IdealProcessorValue = <Field type=c_ulong, ofs=3960, size=4>
|
|
|
Instrumentation = <Field type=c_void_p_Array_9, ofs=3884, size...
|
|
|
IsImpersonating = <Field type=c_ulong, ofs=4004, size=4>
|
|
|
LastErrorValue = <Field type=c_ulong, ofs=52, size=4>
|
|
|
LastStatusValue = <Field type=c_long, ofs=3060, size=4>
|
|
|
LockCount = <Field type=c_ulong, ofs=4064, size=4>
|
|
|
MergedPrefLanguages = <Field type=c_void_p, ofs=4040, size=4>
|
|
|
MuiGeneration = <Field type=c_ulong, ofs=4000, size=4>
|
|
|
MuiImpersonation = <Field type=c_ulong, ofs=4044, size=4>
|
|
|
NlsCache = <Field type=c_void_p, ofs=4008, size=4>
|
|
|
NtTib = <Field type=NT_TIB, ofs=0, size=28>
|
|
|
PreferredLanguages = <Field type=c_void_p, ofs=4032, size=4>
|
|
|
ProcessEnvironmentBlock = <Field type=c_void_p, ofs=48, size=4>
|
|
|
RealClientId = <Field type=CLIENT_ID, ofs=1716, size=8>
|
|
|
ReservedForNtRpc = <Field type=c_void_p, ofs=3868, size=4>
|
|
|
ReservedForOle = <Field type=c_void_p, ofs=3976, size=4>
|
|
|
ReservedForPerf = <Field type=c_void_p, ofs=3972, size=4>
|
|
|
ReservedPad0 = <Field type=c_ubyte, ofs=3964, size=1>
|
|
|
ReservedPad1 = <Field type=c_ubyte, ofs=3965, size=1>
|
|
|
ReservedPad2 = <Field type=c_ubyte, ofs=3966, size=1>
|
|
|
ResourceRetValue = <Field type=c_void_p, ofs=4072, size=4>
|
|
|
SameTebFlags = <Field type=c_ushort, ofs=4050, size=2>
|
|
|
SavedPriorityState = <Field type=c_void_p, ofs=3984, size=4>
|
|
|
SoftPatchPtr1 = <Field type=c_void_p, ofs=3988, size=4>
|
|
|
SpareBytes = <Field type=c_ubyte_Array_36, ofs=428, size=36>
|
|
|
SpareUlong0 = <Field type=c_ulong, ofs=4068, size=4>
|
|
|
StaticUnicodeBuffer = <Field type=c_wchar_Array_261, ofs=3072,...
|
|
|
StaticUnicodeString = <Field type=UNICODE_STRING, ofs=3064, si...
|
|
|
SubProcessTag = <Field type=c_void_p, ofs=3936, size=4>
|
|
|
SystemReserved1 = <Field type=c_void_p_Array_54, ofs=204, size...
|
|
|
ThreadLocalStoragePointer = <Field type=c_void_p, ofs=44, size=4>
|
|
|
ThreadPoolData = <Field type=c_void_p, ofs=3992, size=4>
|
|
|
TlsExpansionSlots = <Field type=c_void_p, ofs=3996, size=4>
|
|
|
TlsLinks = <Field type=LIST_ENTRY, ofs=3856, size=8>
|
|
|
TlsSlots = <Field type=c_void_p_Array_64, ofs=3600, size=256>
|
|
|
TxFsContext = <Field type=c_ulong, ofs=464, size=4>
|
|
|
TxnScopeContext = <Field type=c_void_p, ofs=4060, size=4>
|
|
|
TxnScopeEnterCallback = <Field type=c_void_p, ofs=4052, size=4>
|
|
|
TxnScopeExitCallback = <Field type=c_void_p, ofs=4056, size=4>
|
|
|
User32Reserved = <Field type=c_ulong_Array_26, ofs=68, size=104>
|
|
|
UserPrefLanguages = <Field type=c_void_p, ofs=4036, size=4>
|
|
|
UserReserved = <Field type=c_ulong_Array_5, ofs=172, size=20>
|
|
|
Vdm = <Field type=c_void_p, ofs=3864, size=4>
|
|
|
WOW32Reserved = <Field type=c_void_p, ofs=192, size=4>
|
|
|
WaitingOnLoaderLock = <Field type=c_ulong, ofs=3980, size=4>
|
|
|
Win32ClientInfo = <Field type=c_ulong_Array_62, ofs=1740, size...
|
|
|
Win32ThreadInfo = <Field type=c_void_p, ofs=64, size=4>
|
|
|
WinSockData = <Field type=c_void_p, ofs=3948, size=4>
|
|
|
glContext = <Field type=c_void_p, ofs=3056, size=4>
|
|
|
glCurrentRC = <Field type=c_void_p, ofs=3052, size=4>
|
|
|
glDispatchTable = <Field type=c_void_p_Array_233, ofs=1988, si...
|
|
|
glReserved1 = <Field type=c_ulong_Array_29, ofs=2920, size=116>
|
|
|
glReserved2 = <Field type=c_void_p, ofs=3036, size=4>
|
|
|
glSection = <Field type=c_void_p, ofs=3044, size=4>
|
|
|
glSectionInfo = <Field type=c_void_p, ofs=3040, size=4>
|
|
|
glTable = <Field type=c_void_p, ofs=3048, size=4>
|
|
|
pShimData = <Field type=c_void_p, ofs=4012, size=4>
|
