API tools faq
paste
Advertisement
Guest User

PEB32

a guest
Oct 21st, 2010
575
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.72 KB | None | 0 0
raw download clone embed print report
  1. 0:000> dt ntdll32!_peb -r
  2. +0x000 InheritedAddressSpace : UChar
  3. +0x001 ReadImageFileExecOptions : UChar
  4. +0x002 BeingDebugged : UChar
  5. +0x003 BitField : UChar
  6. +0x003 ImageUsesLargePages : Pos 0, 1 Bit
  7. +0x003 IsProtectedProcess : Pos 1, 1 Bit
  8. +0x003 IsLegacyProcess : Pos 2, 1 Bit
  9. +0x003 IsImageDynamicallyRelocated : Pos 3, 1 Bit
  10. +0x003 SkipPatchingUser32Forwarders : Pos 4, 1 Bit
  11. +0x003 SpareBits : Pos 5, 3 Bits
  12. +0x004 Mutant : Ptr32 Void
  13. +0x008 ImageBaseAddress : Ptr32 Void
  14. +0x00c Ldr : Ptr32 _PEB_LDR_DATA
  15. +0x000 Length : Uint4B
  16. +0x004 Initialized : UChar
  17. +0x008 SsHandle : Ptr32 Void
  18. +0x00c InLoadOrderModuleList : _LIST_ENTRY
  19. +0x000 Flink : Ptr32 _LIST_ENTRY
  20. +0x004 Blink : Ptr32 _LIST_ENTRY
  21. +0x014 InMemoryOrderModuleList : _LIST_ENTRY
  22. +0x000 Flink : Ptr32 _LIST_ENTRY
  23. +0x004 Blink : Ptr32 _LIST_ENTRY
  24. +0x01c InInitializationOrderModuleList : _LIST_ENTRY
  25. +0x000 Flink : Ptr32 _LIST_ENTRY
  26. +0x004 Blink : Ptr32 _LIST_ENTRY
  27. +0x024 EntryInProgress : Ptr32 Void
  28. +0x028 ShutdownInProgress : UChar
  29. +0x02c ShutdownThreadId : Ptr32 Void
  30. +0x010 ProcessParameters : Ptr32 _RTL_USER_PROCESS_PARAMETERS
  31. +0x000 MaximumLength : Uint4B
  32. +0x004 Length : Uint4B
  33. +0x008 Flags : Uint4B
  34. +0x00c DebugFlags : Uint4B
  35. +0x010 ConsoleHandle : Ptr32 Void
  36. +0x014 ConsoleFlags : Uint4B
  37. +0x018 StandardInput : Ptr32 Void
  38. +0x01c StandardOutput : Ptr32 Void
  39. +0x020 StandardError : Ptr32 Void
  40. +0x024 CurrentDirectory : _CURDIR
  41. +0x000 DosPath : _UNICODE_STRING
  42. +0x008 Handle : Ptr32 Void
  43. +0x030 DllPath : _UNICODE_STRING
  44. +0x000 Length : Uint2B
  45. +0x002 MaximumLength : Uint2B
  46. +0x004 Buffer : Ptr32 Uint2B
  47. +0x038 ImagePathName : _UNICODE_STRING
  48. +0x000 Length : Uint2B
  49. +0x002 MaximumLength : Uint2B
  50. +0x004 Buffer : Ptr32 Uint2B
  51. +0x040 CommandLine : _UNICODE_STRING
  52. +0x000 Length : Uint2B
  53. +0x002 MaximumLength : Uint2B
  54. +0x004 Buffer : Ptr32 Uint2B
  55. +0x048 Environment : Ptr32 Void
  56. +0x04c StartingX : Uint4B
  57. +0x050 StartingY : Uint4B
  58. +0x054 CountX : Uint4B
  59. +0x058 CountY : Uint4B
  60. +0x05c CountCharsX : Uint4B
  61. +0x060 CountCharsY : Uint4B
  62. +0x064 FillAttribute : Uint4B
  63. +0x068 WindowFlags : Uint4B
  64. +0x06c ShowWindowFlags : Uint4B
  65. +0x070 WindowTitle : _UNICODE_STRING
  66. +0x000 Length : Uint2B
  67. +0x002 MaximumLength : Uint2B
  68. +0x004 Buffer : Ptr32 Uint2B
  69. +0x078 DesktopInfo : _UNICODE_STRING
  70. +0x000 Length : Uint2B
  71. +0x002 MaximumLength : Uint2B
  72. +0x004 Buffer : Ptr32 Uint2B
  73. +0x080 ShellInfo : _UNICODE_STRING
  74. +0x000 Length : Uint2B
  75. +0x002 MaximumLength : Uint2B
  76. +0x004 Buffer : Ptr32 Uint2B
  77. +0x088 RuntimeData : _UNICODE_STRING
  78. +0x000 Length : Uint2B
  79. +0x002 MaximumLength : Uint2B
  80. +0x004 Buffer : Ptr32 Uint2B
  81. +0x090 CurrentDirectores : [32] _RTL_DRIVE_LETTER_CURDIR
  82. +0x000 Flags : Uint2B
  83. +0x002 Length : Uint2B
  84. +0x004 TimeStamp : Uint4B
  85. +0x008 DosPath : _STRING
  86. +0x290 EnvironmentSize : Uint4B
  87. +0x294 EnvironmentVersion : Uint4B
  88. +0x014 SubSystemData : Ptr32 Void
  89. +0x018 ProcessHeap : Ptr32 Void
  90. +0x01c FastPebLock : Ptr32 _RTL_CRITICAL_SECTION
  91. +0x000 DebugInfo : Ptr32 _RTL_CRITICAL_SECTION_DEBUG
  92. +0x000 Type : Uint2B
  93. +0x002 CreatorBackTraceIndex : Uint2B
  94. +0x004 CriticalSection : Ptr32 _RTL_CRITICAL_SECTION
  95. +0x008 ProcessLocksList : _LIST_ENTRY
  96. +0x010 EntryCount : Uint4B
  97. +0x014 ContentionCount : Uint4B
  98. +0x018 Flags : Uint4B
  99. +0x01c CreatorBackTraceIndexHigh : Uint2B
  100. +0x01e SpareUSHORT : Uint2B
  101. +0x004 LockCount : Int4B
  102. +0x008 RecursionCount : Int4B
  103. +0x00c OwningThread : Ptr32 Void
  104. +0x010 LockSemaphore : Ptr32 Void
  105. +0x014 SpinCount : Uint4B
  106. +0x020 AtlThunkSListPtr : Ptr32 Void
  107. +0x024 IFEOKey : Ptr32 Void
  108. +0x028 CrossProcessFlags : Uint4B
  109. +0x028 ProcessInJob : Pos 0, 1 Bit
  110. +0x028 ProcessInitializing : Pos 1, 1 Bit
  111. +0x028 ProcessUsingVEH : Pos 2, 1 Bit
  112. +0x028 ProcessUsingVCH : Pos 3, 1 Bit
  113. +0x028 ProcessUsingFTH : Pos 4, 1 Bit
  114. +0x028 ReservedBits0 : Pos 5, 27 Bits
  115. +0x02c KernelCallbackTable : Ptr32 Void
  116. +0x02c UserSharedInfoPtr : Ptr32 Void
  117. +0x030 SystemReserved : [1] Uint4B
  118. +0x034 AtlThunkSListPtr32 : Uint4B
  119. +0x038 ApiSetMap : Ptr32 Void
  120. +0x03c TlsExpansionCounter : Uint4B
  121. +0x040 TlsBitmap : Ptr32 Void
  122. +0x044 TlsBitmapBits : [2] Uint4B
  123. +0x04c ReadOnlySharedMemoryBase : Ptr32 Void
  124. +0x050 HotpatchInformation : Ptr32 Void
  125. +0x054 ReadOnlyStaticServerData : Ptr32 Ptr32 Void
  126. +0x058 AnsiCodePageData : Ptr32 Void
  127. +0x05c OemCodePageData : Ptr32 Void
  128. +0x060 UnicodeCaseTableData : Ptr32 Void
  129. +0x064 NumberOfProcessors : Uint4B
  130. +0x068 NtGlobalFlag : Uint4B
  131. +0x070 CriticalSectionTimeout : _LARGE_INTEGER
  132. +0x000 LowPart : Uint4B
  133. +0x004 HighPart : Int4B
  134. +0x000 u : <unnamed-tag>
  135. +0x000 LowPart : Uint4B
  136. +0x004 HighPart : Int4B
  137. +0x000 QuadPart : Int8B
  138. +0x078 HeapSegmentReserve : Uint4B
  139. +0x07c HeapSegmentCommit : Uint4B
  140. +0x080 HeapDeCommitTotalFreeThreshold : Uint4B
  141. +0x084 HeapDeCommitFreeBlockThreshold : Uint4B
  142. +0x088 NumberOfHeaps : Uint4B
  143. +0x08c MaximumNumberOfHeaps : Uint4B
  144. +0x090 ProcessHeaps : Ptr32 Ptr32 Void
  145. +0x094 GdiSharedHandleTable : Ptr32 Void
  146. +0x098 ProcessStarterHelper : Ptr32 Void
  147. +0x09c GdiDCAttributeList : Uint4B
  148. +0x0a0 LoaderLock : Ptr32 _RTL_CRITICAL_SECTION
  149. +0x000 DebugInfo : Ptr32 _RTL_CRITICAL_SECTION_DEBUG
  150. +0x000 Type : Uint2B
  151. +0x002 CreatorBackTraceIndex : Uint2B
  152. +0x004 CriticalSection : Ptr32 _RTL_CRITICAL_SECTION
  153. +0x008 ProcessLocksList : _LIST_ENTRY
  154. +0x010 EntryCount : Uint4B
  155. +0x014 ContentionCount : Uint4B
  156. +0x018 Flags : Uint4B
  157. +0x01c CreatorBackTraceIndexHigh : Uint2B
  158. +0x01e SpareUSHORT : Uint2B
  159. +0x004 LockCount : Int4B
  160. +0x008 RecursionCount : Int4B
  161. +0x00c OwningThread : Ptr32 Void
  162. +0x010 LockSemaphore : Ptr32 Void
  163. +0x014 SpinCount : Uint4B
  164. +0x0a4 OSMajorVersion : Uint4B
  165. +0x0a8 OSMinorVersion : Uint4B
  166. +0x0ac OSBuildNumber : Uint2B
  167. +0x0ae OSCSDVersion : Uint2B
  168. +0x0b0 OSPlatformId : Uint4B
  169. +0x0b4 ImageSubsystem : Uint4B
  170. +0x0b8 ImageSubsystemMajorVersion : Uint4B
  171. +0x0bc ImageSubsystemMinorVersion : Uint4B
  172. +0x0c0 ActiveProcessAffinityMask : Uint4B
  173. +0x0c4 GdiHandleBuffer : [34] Uint4B
  174. +0x14c PostProcessInitRoutine : Ptr32 void
  175. +0x150 TlsExpansionBitmap : Ptr32 Void
  176. +0x154 TlsExpansionBitmapBits : [32] Uint4B
  177. +0x1d4 SessionId : Uint4B
  178. +0x1d8 AppCompatFlags : _ULARGE_INTEGER
  179. +0x000 LowPart : Uint4B
  180. +0x004 HighPart : Uint4B
  181. +0x000 u : <unnamed-tag>
  182. +0x000 LowPart : Uint4B
  183. +0x004 HighPart : Uint4B
  184. +0x000 QuadPart : Uint8B
  185. +0x1e0 AppCompatFlagsUser : _ULARGE_INTEGER
  186. +0x000 LowPart : Uint4B
  187. +0x004 HighPart : Uint4B
  188. +0x000 u : <unnamed-tag>
  189. +0x000 LowPart : Uint4B
  190. +0x004 HighPart : Uint4B
  191. +0x000 QuadPart : Uint8B
  192. +0x1e8 pShimData : Ptr32 Void
  193. +0x1ec AppCompatInfo : Ptr32 Void
  194. +0x1f0 CSDVersion : _UNICODE_STRING
  195. +0x000 Length : Uint2B
  196. +0x002 MaximumLength : Uint2B
  197. +0x004 Buffer : Ptr32 Uint2B
  198. +0x1f8 ActivationContextData : Ptr32 _ACTIVATION_CONTEXT_DATA
  199. +0x1fc ProcessAssemblyStorageMap : Ptr32 _ASSEMBLY_STORAGE_MAP
  200. +0x200 SystemDefaultActivationContextData : Ptr32 _ACTIVATION_CONTEXT_DATA
  201. +0x204 SystemAssemblyStorageMap : Ptr32 _ASSEMBLY_STORAGE_MAP
  202. +0x208 MinimumStackCommit : Uint4B
  203. +0x20c FlsCallback : Ptr32 _FLS_CALLBACK_INFO
  204. +0x210 FlsListHead : _LIST_ENTRY
  205. +0x000 Flink : Ptr32 _LIST_ENTRY
  206. +0x000 Flink : Ptr32 _LIST_ENTRY
  207. +0x004 Blink : Ptr32 _LIST_ENTRY
  208. +0x004 Blink : Ptr32 _LIST_ENTRY
  209. +0x000 Flink : Ptr32 _LIST_ENTRY
  210. +0x004 Blink : Ptr32 _LIST_ENTRY
  211. +0x218 FlsBitmap : Ptr32 Void
  212. +0x21c FlsBitmapBits : [4] Uint4B
  213. +0x22c FlsHighIndex : Uint4B
  214. +0x230 WerRegistrationData : Ptr32 Void
  215. +0x234 WerShipAssertPtr : Ptr32 Void
  216. +0x238 pContextData : Ptr32 Void
  217. +0x23c pImageHeaderHash : Ptr32 Void
  218. +0x240 TracingFlags : Uint4B
  219. +0x240 HeapTracingEnabled : Pos 0, 1 Bit
  220. +0x240 CritSecTracingEnabled : Pos 1, 1 Bit
  221. +0x240 SpareTracingBits : Pos 2, 30 Bits
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!