typedef struct _TEB                                          // 66 elements, 0xFB8 bytes (sizeof)
          {
/*0x000*/     struct _NT_TIB NtTib;                                    // 8 elements, 0x1C bytes (sizeof)
/*0x01C*/     VOID*        EnvironmentPointer;
/*0x020*/     struct _CLIENT_ID ClientId;                              // 2 elements, 0x8 bytes (sizeof)
/*0x028*/     VOID*        ActiveRpcHandle;
/*0x02C*/     VOID*        ThreadLocalStoragePointer;
/*0x030*/     struct _PEB* ProcessEnvironmentBlock;
/*0x034*/     ULONG32      LastErrorValue;
/*0x038*/     ULONG32      CountOfOwnedCriticalSections;
/*0x03C*/     VOID*        CsrClientThread;
/*0x040*/     VOID*        Win32ThreadInfo;
/*0x044*/     ULONG32      User32Reserved[26];
/*0x0AC*/     ULONG32      UserReserved[5];
/*0x0C0*/     VOID*        WOW32Reserved;
/*0x0C4*/     ULONG32      CurrentLocale;
/*0x0C8*/     ULONG32      FpSoftwareStatusRegister;
/*0x0CC*/     VOID*        SystemReserved1[54];
/*0x1A4*/     LONG32       ExceptionCode;
/*0x1A8*/     struct _ACTIVATION_CONTEXT_STACK ActivationContextStack; // 4 elements, 0x14 bytes (sizeof)
/*0x1BC*/     UINT8        SpareBytes1[24];
/*0x1D4*/     struct _GDI_TEB_BATCH GdiTebBatch;                       // 3 elements, 0x4E0 bytes (sizeof)
/*0x6B4*/     struct _CLIENT_ID RealClientId;                          // 2 elements, 0x8 bytes (sizeof)
/*0x6BC*/     VOID*        GdiCachedProcessHandle;
/*0x6C0*/     ULONG32      GdiClientPID;
/*0x6C4*/     ULONG32      GdiClientTID;
/*0x6C8*/     VOID*        GdiThreadLocalInfo;
/*0x6CC*/     ULONG32      Win32ClientInfo[62];
/*0x7C4*/     VOID*        glDispatchTable[233];
/*0xB68*/     ULONG32      glReserved1[29];
/*0xBDC*/     VOID*        glReserved2;
/*0xBE0*/     VOID*        glSectionInfo;
/*0xBE4*/     VOID*        glSection;
/*0xBE8*/     VOID*        glTable;
/*0xBEC*/     VOID*        glCurrentRC;
/*0xBF0*/     VOID*        glContext;
/*0xBF4*/     ULONG32      LastStatusValue;
/*0xBF8*/     struct _UNICODE_STRING StaticUnicodeString;              // 3 elements, 0x8 bytes (sizeof)
/*0xC00*/     UINT16       StaticUnicodeBuffer[261];
/*0xE0A*/     UINT8        _PADDING0_[0x2];
/*0xE0C*/     VOID*        DeallocationStack;
/*0xE10*/     VOID*        TlsSlots[64];
/*0xF10*/     struct _LIST_ENTRY TlsLinks;                             // 2 elements, 0x8 bytes (sizeof)
/*0xF18*/     VOID*        Vdm;
/*0xF1C*/     VOID*        ReservedForNtRpc;
/*0xF20*/     VOID*        DbgSsReserved[2];
/*0xF28*/     ULONG32      HardErrorsAreDisabled;
/*0xF2C*/     VOID*        Instrumentation[16];
/*0xF6C*/     VOID*        WinSockData;
/*0xF70*/     ULONG32      GdiBatchCount;
/*0xF74*/     UINT8        InDbgPrint;
/*0xF75*/     UINT8        FreeStackOnTermination;
/*0xF76*/     UINT8        HasFiberData;
/*0xF77*/     UINT8        IdealProcessor;
/*0xF78*/     ULONG32      Spare3;
/*0xF7C*/     VOID*        ReservedForPerf;
/*0xF80*/     VOID*        ReservedForOle;
/*0xF84*/     ULONG32      WaitingOnLoaderLock;
/*0xF88*/     struct _Wx86ThreadState Wx86Thread;                      // 4 elements, 0xC bytes (sizeof)
/*0xF94*/     VOID**       TlsExpansionSlots;
/*0xF98*/     ULONG32      ImpersonationLocale;
/*0xF9C*/     ULONG32      IsImpersonating;
/*0xFA0*/     VOID*        NlsCache;
/*0xFA4*/     VOID*        pShimData;
/*0xFA8*/     ULONG32      HeapVirtualAffinity;
/*0xFAC*/     VOID*        CurrentTransactionHandle;
/*0xFB0*/     struct _TEB_ACTIVE_FRAME* ActiveFrame;
/*0xFB4*/     UINT8        SafeThunkCall;
/*0xFB5*/     UINT8        BooleanSpare[3];
          }TEB, *PTEB;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.