The address of the thread's TEB. If the owner is a SysWow64 process, return the TEB32. :type: :class:`int`
(self)
| 891 | |
| 892 | @property |
| 893 | def teb_base(self): |
| 894 | """The address of the thread's TEB. If the owner is a SysWow64 process, return the TEB32. |
| 895 | |
| 896 | :type: :class:`int` |
| 897 | """ |
| 898 | main_teb_addr = self._get_principal_teb_addr() |
| 899 | if not self.owner.is_wow_64: |
| 900 | return main_teb_addr |
| 901 | # import pdb; pdb.set_trace() |
| 902 | # TEB32 is pointed at the begining of the TEB64 |
| 903 | return self.owner.read_dword(main_teb_addr) |
| 904 | |
| 905 | |
| 906 |
nothing calls this directly
no test coverage detected