PS_ATTRIBUTE_TEB_ADDRESS - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers

#ifndef _NTPSAPI_H
//
// User processes and threads
//
#if (PHNT_MODE != PHNT_MODE_KERNEL)
// begin_rev

#define PS_ATTRIBUTE_TEB_ADDRESS \
    PsAttributeValue(PsAttributeTebAddress, TRUE, FALSE, FALSE)

// end_rev
#endif
#endif
View code on GitHub

NtDoc

This attribute allows the caller to request the TEB address of the new thread to be returned upon its creation.

Parameters

Attribute - PS_ATTRIBUTE_TEB_ADDRESS (numeric value 0x10004).
Size - sizeof(PVOID).
ValuePtr - a pointer to a PTEB variable that receives the TEB address of the new thread.

Applicable to

See also

Edit description on GitHub