Document all the structure members up to SessionId in the PEB.
This commit is contained in:
parent
37180dd6d5
commit
a62dec8b25
|
@ -145,22 +145,61 @@ typedef struct _PEB_LDR_DATA
|
|||
*/
|
||||
typedef struct _PEB
|
||||
{
|
||||
BYTE Reserved1[2]; /* 00 */
|
||||
BYTE BeingDebugged; /* 02 */
|
||||
BYTE Reserved2[5]; /* 03 */
|
||||
HMODULE ImageBaseAddress; /* 08 */
|
||||
PPEB_LDR_DATA LdrData; /* 0c */
|
||||
RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 10 */
|
||||
PVOID __pad_14; /* 14 */
|
||||
HANDLE ProcessHeap; /* 18 */
|
||||
BYTE __pad_1c[36]; /* 1c */
|
||||
PRTL_BITMAP TlsBitmap; /* 40 */
|
||||
ULONG TlsBitmapBits[2]; /* 44 */
|
||||
BYTE __pad_4c[24]; /* 4c */
|
||||
ULONG NumberOfProcessors; /* 64 */
|
||||
BYTE __pad_68[128]; /* 68 */
|
||||
PVOID Reserved3[59]; /* e8 */
|
||||
ULONG SessionId; /* 1d4 */
|
||||
BOOLEAN InheritedAddressSpace; /* 00 */
|
||||
BOOLEAN ReadImageFileExecOptions; /* 01 */
|
||||
BOOLEAN BeingDebugged; /* 02 */
|
||||
BOOLEAN SpareBool; /* 03 */
|
||||
HANDLE Mutant; /* 04 */
|
||||
HMODULE ImageBaseAddress; /* 08 */
|
||||
PPEB_LDR_DATA LdrData; /* 0c */
|
||||
RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 10 */
|
||||
PVOID SubSystemData; /* 14 */
|
||||
HANDLE ProcessHeap; /* 18 */
|
||||
PRTL_CRITICAL_SECTION FastPebLock; /* 1c */
|
||||
PVOID /*PPEBLOCKROUTINE*/ FastPebLockRoutine; /* 20 */
|
||||
PVOID /*PPEBLOCKROUTINE*/ FastPebUnlockRoutine; /* 24 */
|
||||
ULONG EnvironmentUpdateCount; /* 28 */
|
||||
PVOID KernelCallbackTable; /* 2c */
|
||||
PVOID EventLogSection; /* 30 */
|
||||
PVOID EventLog; /* 34 */
|
||||
PVOID /*PPEB_FREE_BLOCK*/ FreeList; /* 38 */
|
||||
ULONG TlsExpansionCounter; /* 3c */
|
||||
PRTL_BITMAP TlsBitmap; /* 40 */
|
||||
ULONG TlsBitmapBits[2]; /* 44 */
|
||||
PVOID ReadOnlySharedMemoryBase; /* 4c */
|
||||
PVOID ReadOnlySharedMemoryHeap; /* 50 */
|
||||
PVOID *ReadOnlyStaticServerData; /* 54 */
|
||||
PVOID AnsiCodePageData; /* 58 */
|
||||
PVOID OemCodePageData; /* 5c */
|
||||
PVOID UnicodeCaseTableData; /* 60 */
|
||||
ULONG NumberOfProcessors; /* 64 */
|
||||
ULONG NtGlobalFlag; /* 68 */
|
||||
BYTE Spare2[4]; /* 6c */
|
||||
LARGE_INTEGER CriticalSectionTimeout; /* 70 */
|
||||
ULONG HeapSegmentReserve; /* 78 */
|
||||
ULONG HeapSegmentCommit; /* 7c */
|
||||
ULONG HeapDeCommitTotalFreeThreshold; /* 80 */
|
||||
ULONG HeapDeCommitFreeBlockThreshold; /* 84 */
|
||||
ULONG NumberOfHeaps; /* 88 */
|
||||
ULONG MaximumNumberOfHeaps; /* 8c */
|
||||
PVOID *ProcessHeaps; /* 90 */
|
||||
PVOID GdiSharedHandleTable; /* 94 */
|
||||
PVOID ProcessStarterHelper; /* 98 */
|
||||
PVOID GdiDCAttributeList; /* 9c */
|
||||
PVOID LoaderLock; /* a0 */
|
||||
ULONG OSMajorVersion; /* a4 */
|
||||
ULONG OSMinorVersion; /* a8 */
|
||||
ULONG OSBuildNumber; /* ac */
|
||||
ULONG OSPlatformId; /* b0 */
|
||||
ULONG ImageSubSystem; /* b4 */
|
||||
ULONG ImageSubSystemMajorVersion; /* b8 */
|
||||
ULONG ImageSubSystemMinorVersion; /* bc */
|
||||
ULONG ImageProcessAffinityMask; /* c0 */
|
||||
ULONG GdiHandleBuffer[34]; /* c4 */
|
||||
ULONG PostProcessInitRoutine; /* 14c */
|
||||
ULONG TlsExpansionBitmap; /* 150 */
|
||||
ULONG TlsExpansionBitmapBits[32]; /* 154 */
|
||||
ULONG SessionId; /* 1d4 */
|
||||
} PEB, *PPEB;
|
||||
|
||||
|
||||
|
|
Loading…
Reference in New Issue