x64x86arm64ia64mips / ntdllntoskrnl

_TEB

← no build number 2 builds latest →

incomplete only the Native API and process/thread environment structures two MIPS binaries were compiled with (_TEB, _PEB, _KPCR, RTL, object/file/registry information classes, image headers): no kernel objects

struct _TEB {
void* EnvironmentPointer;/* 0x1c 4 */
void* ActiveRpcHandle;/* 0x28 4 */
void* ThreadLocalStoragePointer;/* 0x2c 4 */
unsigned long LastErrorValue;/* 0x34 4 */
unsigned char LastErrorString[128];/* 0x38 128 */
/* ── cacheline 2 boundary (128 bytes) ── */
unsigned long CountOfOwnedCriticalSections;/* 0xb8 4 */
void* Sparea;/* 0xbc 4 */
/* ── cacheline 3 boundary (192 bytes) ── */
void* Spareb;/* 0xc0 4 */
unsigned long CurrentLocale;/* 0xc4 4 */
unsigned long FpSoftwareStatusRegister;/* 0xc8 4 */
void* SystemReserved1[55];/* 0xcc 220 */
/* ── cacheline 6 boundary (384 bytes) ── */
void* Win32ThreadInfo;/* 0x1a8 4 */
void* SystemReserved2[337];/* 0x1ac 1348 */
/* ── cacheline 27 boundary (1728 bytes) ── */
void* CsrQlpcStack;/* 0x6f0 4 */
unsigned long GdiClientPID;/* 0x6f4 4 */
unsigned long GdiClientTID;/* 0x6f8 4 */
void* GdiThreadLocalInfo;/* 0x6fc 4 */
/* ── cacheline 28 boundary (1792 bytes) ── */
void* User32Reserved0;/* 0x700 4 */
void* User32Reserved1;/* 0x704 4 */
void* UserReserved[315];/* 0x708 1260 */
/* ── cacheline 47 boundary (3008 bytes) ── */
unsigned long LastStatusValue;/* 0xbf4 4 */
/* ── cacheline 48 boundary (3072 bytes) ── */
unsigned short StaticUnicodeBuffer[261];/* 0xc00 522 */
/* 2 bytes padding */
/* ── cacheline 56 boundary (3584 bytes) ── */
void* DeallocationStack;/* 0xe0c 4 */
void* TlsSlots[64];/* 0xe10 256 */
/* ── cacheline 60 boundary (3840 bytes) ── */
void* Vdm;/* 0xf18 4 */
void* ReservedForNtRpc;/* 0xf1c 4 */
};
/* source: Windows NT 3.1 beta DDK, MIPS/CDPLAYER.EXE and MIPS/DISKPERF.EXE inline CodeView 4 (NB08) type records; build 404.1 per the DDK's version.h */
size 3872 (0xf20)31 members1 hole (2 bytes)padding 061 cachelines
Used in (1)