Moved wineserver's buffer & buffer_size at the end of TEB so that IE

include/thread.h

@@ -38,8 +38,8 @@ typedef struct _TEB
     DWORD        exit_code;      /*  38 Termination status */
     WORD         teb_sel;        /*  3c Selector to TEB */
     WORD         emu_sel;        /*  3e 80387 emulator selector */
-    void        *buffer;         /*  40 Buffer shared with server */
-    int          buffer_size;    /*  44 Size of server buffer */
+    DWORD        unknown1;       /*  40 seems to be used by IE */
+    DWORD        unknown2;       /*  44 */
     void       (*startup)(void); /*  48 Thread startup routine */
     int          thread_errno;   /*  4c Per-thread errno (was: ring0_thread) */
     int          thread_h_errno; /*  50 Per-thread h_errno (was: ptr to tdbx structure) */
@@ -71,6 +71,8 @@ typedef struct _TEB
     /* The following are Wine-specific fields */
     struct _TEB *next;           /* Global thread list */
     DWORD        cleanup;        /* Cleanup service handle */
+    void        *buffer;         /* Buffer shared with server */
+    int          buffer_size;    /* Size of server buffer */
 } TEB;
 
 /* Thread exception flags */