inline_ntcurrentteb.h File Reference

Go to the source code of this file.

Functions
FORCEINLINE struct _TEB *	NtCurrentTeb (VOID)

Function Documentation

NtCurrentTeb()

FORCEINLINE struct _TEB * NtCurrentTeb

(

VOID

)

Definition at line 8 of file inline_ntcurrentteb.h.

{
#if defined(_M_IX86)
    return (struct _TEB *)__readfsdword(0x18);
#elif defined(_M_AMD64)
    return (struct _TEB *)__readgsqword(FIELD_OFFSET(NT_TIB, Self));
#elif defined(_M_ARM)
    // return (struct _TEB *)KeGetPcr()->Used_Self;
    return (struct _TEB *)(ULONG_PTR)_MoveFromCoprocessor(CP15_TPIDRURW);
#elif defined (_M_ARM64)
    return (struct _TEB *)__readx18qword(FIELD_OFFSET(NT_TIB, Self));
// #elif defined(_M_PPC)
//     return (struct _TEB *)_read_teb_dword(0x18);
#else
#error Unsupported architecture
#endif
}