|
|
_pack_ = 8
|
|
|
_fields_ = [('NtTib', <class 'winappdbg.win32.peb_teb.NT_TIB'>... |
|
|
ActivationContextStackPointer = <Field type=c_void_p, ofs=424,...
|
|
|
ActiveFrame = <Field type=c_void_p, ofs=4004, size=4>
|
|
|
ActiveRpcHandle = <Field type=c_void_p, ofs=40, size=4>
|
|
|
BooleanSpare = <Field type=c_ubyte_Array_3, ofs=4009, size=3>
|
|
|
ClientId = <Field type=CLIENT_ID, ofs=32, size=8>
|
|
|
CountOfOwnedCriticalSections = <Field type=c_ulong, ofs=56, si...
|
|
|
CsrClientThread = <Field type=c_void_p, ofs=60, size=4>
|
|
|
CurrentLocale = <Field type=c_ulong, ofs=196, size=4>
|
|
|
CurrentTransactionHandle = <Field type=c_void_p, ofs=4000, siz...
|
|
|
DbgSsReserved = <Field type=c_void_p_Array_2, ofs=3860, size=8>
|
|
|
DeallocationStack = <Field type=c_void_p, ofs=3584, size=4>
|
|
|
EnvironmentPointer = <Field type=c_void_p, ofs=28, size=4>
|
|
|
ExceptionCode = <Field type=c_long, ofs=420, size=4>
|
|
|
FpSoftwareStatusRegister = <Field type=c_ulong, ofs=200, size=4>
|
|
|
FreeStackOnTermination = <Field type=c_ubyte, ofs=3945, size=1>
|
|
|
GdiBatchCount = <Field type=c_ulong, ofs=3940, size=4>
|
|
|
GdiCachedProcessHandle = <Field type=c_void_p, ofs=1712, size=4>
|
|
|
GdiClientPID = <Field type=c_ulong, ofs=1716, size=4>
|
|
|
GdiClientTID = <Field type=c_ulong, ofs=1720, size=4>
|
|
|
GdiTebBatch = <Field type=GDI_TEB_BATCH, ofs=456, size=1248>
|
|
|
GdiThreadLocalInfo = <Field type=c_void_p, ofs=1724, size=4>
|
|
|
HardErrorsAreDisabled = <Field type=c_ulong, ofs=3868, size=4>
|
|
|
HasFiberData = <Field type=c_ubyte, ofs=3946, size=1>
|
|
|
HeapVirtualAffinity = <Field type=c_ulong, ofs=3996, size=4>
|
|
|
IdealProcessor = <Field type=c_ubyte, ofs=3947, size=1>
|
|
|
ImpersonationLocale = <Field type=c_ulong, ofs=3980, size=4>
|
|
|
InDbgPrint = <Field type=c_ubyte, ofs=3944, size=1>
|
|
|
Instrumentation = <Field type=c_void_p_Array_16, ofs=3872, siz...
|
|
|
IsImpersonating = <Field type=c_ulong, ofs=3984, size=4>
|
|
|
LastErrorValue = <Field type=c_ulong, ofs=52, size=4>
|
|
|
LastStatusValue = <Field type=c_long, ofs=3048, size=4>
|
|
|
NlsCache = <Field type=c_void_p, ofs=3988, size=4>
|
|
|
NtTib = <Field type=NT_TIB, ofs=0, size=28>
|
|
|
ProcessEnvironmentBlock = <Field type=c_void_p, ofs=48, size=4>
|
|
|
RealClientId = <Field type=CLIENT_ID, ofs=1704, size=8>
|
|
|
ReservedForNtRpc = <Field type=c_void_p, ofs=3856, size=4>
|
|
|
ReservedForOle = <Field type=c_void_p, ofs=3956, size=4>
|
|
|
ReservedForPerf = <Field type=c_void_p, ofs=3952, size=4>
|
|
|
SafeThunkCall = <Field type=c_ubyte, ofs=4008, size=1>
|
|
|
Spare3 = <Field type=c_ulong, ofs=3948, size=4>
|
|
|
SpareBytes1 = <Field type=c_ubyte_Array_24, ofs=428, size=24>
|
|
|
StaticUnicodeBuffer = <Field type=c_wchar_Array_261, ofs=3060,...
|
|
|
StaticUnicodeString = <Field type=UNICODE_STRING, ofs=3052, si...
|
|
|
SystemReserved1 = <Field type=c_void_p_Array_54, ofs=204, size...
|
|
|
ThreadLocalStoragePointer = <Field type=c_void_p, ofs=44, size=4>
|
|
|
TlsExpansionSlots = <Field type=c_void_p, ofs=3976, size=4>
|
|
|
TlsLinks = <Field type=LIST_ENTRY, ofs=3844, size=8>
|
|
|
TlsSlots = <Field type=c_void_p_Array_64, ofs=3588, size=256>
|
|
|
TxFsContext = <Field type=c_ulong, ofs=452, size=4>
|
|
|
User32Reserved = <Field type=c_ulong_Array_26, ofs=68, size=104>
|
|
|
UserReserved = <Field type=c_ulong_Array_5, ofs=172, size=20>
|
|
|
Vdm = <Field type=c_void_p, ofs=3852, size=4>
|
|
|
WOW32Reserved = <Field type=c_void_p, ofs=192, size=4>
|
|
|
WaitingOnLoaderLock = <Field type=c_ulong, ofs=3960, size=4>
|
|
|
Win32ClientInfo = <Field type=c_ulong_Array_62, ofs=1728, size...
|
|
|
Win32ThreadInfo = <Field type=c_void_p, ofs=64, size=4>
|
|
|
WinSockData = <Field type=c_void_p, ofs=3936, size=4>
|
|
|
Wx86Thread = <Field type=Wx86ThreadState, ofs=3964, size=12>
|
|
|
glContext = <Field type=c_void_p, ofs=3044, size=4>
|
|
|
glCurrentRC = <Field type=c_void_p, ofs=3040, size=4>
|
|
|
glDispatchTable = <Field type=c_void_p_Array_233, ofs=1976, si...
|
|
|
glReserved1 = <Field type=c_ulong_Array_29, ofs=2908, size=116>
|
|
|
glReserved2 = <Field type=c_void_p, ofs=3024, size=4>
|
|
|
glSection = <Field type=c_void_p, ofs=3032, size=4>
|
|
|
glSectionInfo = <Field type=c_void_p, ofs=3028, size=4>
|
|
|
glTable = <Field type=c_void_p, ofs=3036, size=4>
|
|
|
pShimData = <Field type=c_void_p, ofs=3992, size=4>
|
