_TEB32

Metadatacopy
struct _TEB32 {
    struct _NT_TIB32 NtTib;/* 0x0  28 */
    unsigned long EnvironmentPointer;/* 0x1c  4 */
    struct _CLIENT_ID32 ClientId;/* 0x20  8 */
    unsigned long ActiveRpcHandle;/* 0x28  4 */
    unsigned long ThreadLocalStoragePointer;/* 0x2c  4 */
    unsigned long ProcessEnvironmentBlock;/* 0x30  4 */
    unsigned long LastErrorValue;/* 0x34  4 */
    unsigned long CountOfOwnedCriticalSections;/* 0x38  4 */
    unsigned long CsrClientThread;/* 0x3c  4 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    unsigned long Win32ThreadInfo;/* 0x40  4 */
    unsigned long User32Reserved[26];/* 0x44  104 */
    /* ── cacheline 2 boundary (128 bytes) ── */
    unsigned long UserReserved[5];/* 0xac  20 */
    /* ── cacheline 3 boundary (192 bytes) ── */
    unsigned long WOW32Reserved;/* 0xc0  4 */
    unsigned long CurrentLocale;/* 0xc4  4 */
    unsigned long FpSoftwareStatusRegister;/* 0xc8  4 */
    unsigned long ReservedForDebuggerInstrumentation[16];/* 0xcc  64 */
    /* ── cacheline 4 boundary (256 bytes) ── */
    unsigned long SystemReserved1[21];/* 0x10c  84 */
    /* ── cacheline 5 boundary (320 bytes) ── */
    unsigned long HeapFlsData;/* 0x160  4 */
    unsigned long RngState[4];/* 0x164  16 */
    char PlaceholderCompatibilityMode;/* 0x174  1 */
    unsigned char PlaceholderHydrationAlwaysExplicit;/* 0x175  1 */
    char PlaceholderReserved[10];/* 0x176  10 */
    /* ── cacheline 6 boundary (384 bytes) ── */
    unsigned long ProxiedProcessId;/* 0x180  4 */
    struct _ACTIVATION_CONTEXT_STACK32 _ActivationStack;/* 0x184  24 */
    unsigned char WorkingOnBehalfTicket[8];/* 0x19c  8 */
    long ExceptionCode;/* 0x1a4  4 */
    unsigned long ActivationContextStackPointer;/* 0x1a8  4 */
    unsigned long InstrumentationCallbackSp;/* 0x1ac  4 */
    unsigned long InstrumentationCallbackPreviousPc;/* 0x1b0  4 */
    unsigned long InstrumentationCallbackPreviousSp;/* 0x1b4  4 */
    unsigned char InstrumentationCallbackDisabled;/* 0x1b8  1 */
    unsigned char SpareBytes[23];/* 0x1b9  23 */
    /* ── cacheline 7 boundary (448 bytes) ── */
    unsigned long TxFsContext;/* 0x1d0  4 */
    struct _GDI_TEB_BATCH32 GdiTebBatch;/* 0x1d4  1248 */
    /* ── cacheline 26 boundary (1664 bytes) ── */
    struct _CLIENT_ID32 RealClientId;/* 0x6b4  8 */
    unsigned long GdiCachedProcessHandle;/* 0x6bc  4 */
    /* ── cacheline 27 boundary (1728 bytes) ── */
    unsigned long GdiClientPID;/* 0x6c0  4 */
    unsigned long GdiClientTID;/* 0x6c4  4 */
    unsigned long GdiThreadLocalInfo;/* 0x6c8  4 */
    unsigned long Win32ClientInfo[62];/* 0x6cc  248 */
    /* ── cacheline 31 boundary (1984 bytes) ── */
    unsigned long glDispatchTable[233];/* 0x7c4  932 */
    /* ── cacheline 45 boundary (2880 bytes) ── */
    unsigned long glReserved1[29];/* 0xb68  116 */
    /* ── cacheline 47 boundary (3008 bytes) ── */
    unsigned long glReserved2;/* 0xbdc  4 */
    unsigned long glSectionInfo;/* 0xbe0  4 */
    unsigned long glSection;/* 0xbe4  4 */
    unsigned long glTable;/* 0xbe8  4 */
    unsigned long glCurrentRC;/* 0xbec  4 */
    unsigned long glContext;/* 0xbf0  4 */
    unsigned long LastStatusValue;/* 0xbf4  4 */
    struct _STRING32 StaticUnicodeString;/* 0xbf8  8 */
    /* ── cacheline 48 boundary (3072 bytes) ── */
    wchar_t StaticUnicodeBuffer[261];/* 0xc00  522 */
    /* 2 bytes padding */
    /* ── cacheline 56 boundary (3584 bytes) ── */
    unsigned long DeallocationStack;/* 0xe0c  4 */
    unsigned long TlsSlots[64];/* 0xe10  256 */
    /* ── cacheline 60 boundary (3840 bytes) ── */
    struct LIST_ENTRY32 TlsLinks;/* 0xf10  8 */
    unsigned long Vdm;/* 0xf18  4 */
    unsigned long ReservedForNtRpc;/* 0xf1c  4 */
    unsigned long DbgSsReserved[2];/* 0xf20  8 */
    unsigned long HardErrorMode;/* 0xf28  4 */
    unsigned long Instrumentation[9];/* 0xf2c  36 */
    /* ── cacheline 61 boundary (3904 bytes) ── */
    struct _GUID ActivityId;/* 0xf50  16 */
    unsigned long SubProcessTag;/* 0xf60  4 */
    unsigned long PerflibData;/* 0xf64  4 */
    unsigned long EtwTraceData;/* 0xf68  4 */
    unsigned long WinSockData;/* 0xf6c  4 */
    unsigned long GdiBatchCount;/* 0xf70  4 */
    union {
        struct _PROCESSOR_NUMBER CurrentIdealProcessor;/* 0xf74  4 */
        unsigned long IdealProcessorValue;/* 0xf74  4 */
        struct {
            unsigned char ReservedPad0;/* 0xf74  1 */
            unsigned char ReservedPad1;/* 0xf75  1 */
            unsigned char ReservedPad2;/* 0xf76  1 */
            unsigned char IdealProcessor;/* 0xf77  1 */
        };/* 0xf74  4 */
    };/* 0xf74  4 */
    unsigned long GuaranteedStackBytes;/* 0xf78  4 */
    unsigned long ReservedForPerf;/* 0xf7c  4 */
    /* ── cacheline 62 boundary (3968 bytes) ── */
    unsigned long ReservedForOle;/* 0xf80  4 */
    unsigned long WaitingOnLoaderLock;/* 0xf84  4 */
    unsigned long SavedPriorityState;/* 0xf88  4 */
    unsigned long ReservedForCodeCoverage;/* 0xf8c  4 */
    unsigned long ThreadPoolData;/* 0xf90  4 */
    unsigned long TlsExpansionSlots;/* 0xf94  4 */
    unsigned long MuiGeneration;/* 0xf98  4 */
    unsigned long IsImpersonating;/* 0xf9c  4 */
    unsigned long NlsCache;/* 0xfa0  4 */
    unsigned long pShimData;/* 0xfa4  4 */
    unsigned long HeapData;/* 0xfa8  4 */
    unsigned long CurrentTransactionHandle;/* 0xfac  4 */
    unsigned long ActiveFrame;/* 0xfb0  4 */
    unsigned long FlsData;/* 0xfb4  4 */
    unsigned long PreferredLanguages;/* 0xfb8  4 */
    unsigned long UserPrefLanguages;/* 0xfbc  4 */
    /* ── cacheline 63 boundary (4032 bytes) ── */
    unsigned long MergedPrefLanguages;/* 0xfc0  4 */
    unsigned long MuiImpersonation;/* 0xfc4  4 */
    union {
        volatile unsigned short CrossTebFlags;/* 0xfc8  2 */
        unsigned short SpareCrossTebBits : 16;/* 0xfc8:0  2 */
    };/* 0xfc8  2 */
    union {
        unsigned short SameTebFlags;/* 0xfca  2 */
        struct {
            unsigned short SafeThunkCall : 1;/* 0xfca:0  2 */
            unsigned short InDebugPrint : 1;/* 0xfca:1  2 */
            unsigned short HasFiberData : 1;/* 0xfca:2  2 */
            unsigned short SkipThreadAttach : 1;/* 0xfca:3  2 */
            unsigned short WerInShipAssertCode : 1;/* 0xfca:4  2 */
            unsigned short RanProcessInit : 1;/* 0xfca:5  2 */
            unsigned short ClonedThread : 1;/* 0xfca:6  2 */
            unsigned short SuppressDebugMsg : 1;/* 0xfca:7  2 */
            unsigned short DisableUserStackWalk : 1;/* 0xfca:8  2 */
            unsigned short RtlExceptionAttached : 1;/* 0xfca:9  2 */
            unsigned short InitialThread : 1;/* 0xfca:10  2 */
            unsigned short SessionAware : 1;/* 0xfca:11  2 */
            unsigned short LoadOwner : 1;/* 0xfca:12  2 */
            unsigned short LoaderWorker : 1;/* 0xfca:13  2 */
            unsigned short SkipLoaderInit : 1;/* 0xfca:14  2 */
            unsigned short SkipFileAPIBrokering : 1;/* 0xfca:15  2 */
        };/* 0xfca  2 */
    };/* 0xfca  2 */
    unsigned long TxnScopeEnterCallback;/* 0xfcc  4 */
    unsigned long TxnScopeExitCallback;/* 0xfd0  4 */
    unsigned long TxnScopeContext;/* 0xfd4  4 */
    unsigned long LockCount;/* 0xfd8  4 */
    long WowTebOffset;/* 0xfdc  4 */
    unsigned long ResourceRetValue;/* 0xfe0  4 */
    unsigned long ReservedForWdf;/* 0xfe4  4 */
    unsigned __int64 ReservedForCrt;/* 0xfe8  8 */
    struct _GUID EffectiveContainerId;/* 0xff0  16 */
    /* ── cacheline 64 boundary (4096 bytes) ── */
    unsigned __int64 LastSleepCounter;/* 0x1000  8 */
    unsigned long SpinCallCount;/* 0x1008  4 */
    /* 4 bytes padding */
    unsigned __int64 ExtendedFeatureDisableMask;/* 0x1010  8 */
    unsigned long SchedulerSharedDataSlot;/* 0x1018  4 */
    unsigned long HeapWalkContext;/* 0x101c  4 */
    struct _GROUP_AFFINITY32 PrimaryGroupAffinity;/* 0x1020  12 */
    unsigned long Rcu[2];/* 0x102c  8 */
};