Min version | 8 Pre RTM | 8 Pre RTM | 8 | 10 Pre RTM | 10 Pre RTM | 10 Pre RTM | 10 | |||
---|---|---|---|---|---|---|---|---|---|---|
Max version | 8.1 Update 1 | 10 TH2 | ||||||||
Architecture | x86 | x64 | x86 | x64 | x64 | x86 | x64 | x86 | x64 | |
x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | ||||||||
0x0000 | struct _NT_TIB32 NtTib | 0x0000 | ||||||||
0x001C | unsigned long EnvironmentPointer | 0x001C | ||||||||
0x0020 | struct _CLIENT_ID32 ClientId | 0x0020 | ||||||||
0x0028 | unsigned long ActiveRpcHandle | 0x0028 | ||||||||
0x002C | unsigned long ThreadLocalStoragePointer | 0x002C | ||||||||
0x0030 | unsigned long ProcessEnvironmentBlock | 0x0030 | ||||||||
0x0034 | unsigned long LastErrorValue | 0x0034 | ||||||||
0x0038 | unsigned long CountOfOwnedCriticalSections | 0x0038 | ||||||||
0x003C | unsigned long CsrClientThread | 0x003C | ||||||||
0x0040 | unsigned long Win32ThreadInfo | 0x0040 | ||||||||
0x0044 | unsigned long[26] User32Reserved | 0x0044 | ||||||||
0x00AC | unsigned long[5] UserReserved | 0x00AC | ||||||||
0x00C0 | unsigned long WOW32Reserved | 0x00C0 | ||||||||
0x00C4 | unsigned long CurrentLocale | 0x00C4 | ||||||||
0x00C8 | unsigned long FpSoftwareStatusRegister | 0x00C8 | ||||||||
0x00CC | unsigned long[54] SystemReserved1 | unsigned long[16] ReservedForDebuggerInstrumentation | 0x00CC | |||||||
0x010C | unsigned long[38] SystemReserved1 | 0x010C | ||||||||
0x01A4 | long ExceptionCode | 0x01A4 | ||||||||
0x01A8 | unsigned long ActivationContextStackPointer | 0x01A8 | ||||||||
0x01AC | uint8_t[36] SpareBytes | unsigned long InstrumentationCallbackSp | 0x01AC | |||||||
0x01B0 | unsigned long InstrumentationCallbackPreviousPc | 0x01B0 | ||||||||
0x01B4 | unsigned long InstrumentationCallbackPreviousSp | 0x01B4 | ||||||||
0x01B8 | uint8_t InstrumentationCallbackDisabled | 0x01B8 | ||||||||
0x01B9 | uint8_t[23] SpareBytes | 0x01B9 | ||||||||
0x01D0 | unsigned long TxFsContext | 0x01D0 | ||||||||
0x01D4 | struct _GDI_TEB_BATCH32 GdiTebBatch | 0x01D4 | ||||||||
0x06B4 | struct _CLIENT_ID32 RealClientId | 0x06B4 | ||||||||
0x06BC | unsigned long GdiCachedProcessHandle | 0x06BC | ||||||||
0x06C0 | unsigned long GdiClientPID | 0x06C0 | ||||||||
0x06C4 | unsigned long GdiClientTID | 0x06C4 | ||||||||
0x06C8 | unsigned long GdiThreadLocalInfo | 0x06C8 | ||||||||
0x06CC | unsigned long[62] Win32ClientInfo | 0x06CC | ||||||||
0x07C4 | unsigned long[233] glDispatchTable | 0x07C4 | ||||||||
0x0B68 | unsigned long[29] glReserved1 | 0x0B68 | ||||||||
0x0BDC | unsigned long glReserved2 | 0x0BDC | ||||||||
0x0BE0 | unsigned long glSectionInfo | 0x0BE0 | ||||||||
0x0BE4 | unsigned long glSection | 0x0BE4 | ||||||||
0x0BE8 | unsigned long glTable | 0x0BE8 | ||||||||
0x0BEC | unsigned long glCurrentRC | 0x0BEC | ||||||||
0x0BF0 | unsigned long glContext | 0x0BF0 | ||||||||
0x0BF4 | unsigned long LastStatusValue | 0x0BF4 | ||||||||
0x0BF8 | struct _STRING32 StaticUnicodeString | 0x0BF8 | ||||||||
0x0C00 | wchar_t[261] StaticUnicodeBuffer | 0x0C00 | ||||||||
0x0E0C | unsigned long DeallocationStack | 0x0E0C | ||||||||
0x0E10 | unsigned long[64] TlsSlots | 0x0E10 | ||||||||
0x0F10 | struct LIST_ENTRY32 TlsLinks | 0x0F10 | ||||||||
0x0F18 | unsigned long Vdm | 0x0F18 | ||||||||
0x0F1C | unsigned long ReservedForNtRpc | 0x0F1C | ||||||||
0x0F20 | unsigned long[2] DbgSsReserved | 0x0F20 | ||||||||
0x0F28 | unsigned long HardErrorMode | 0x0F28 | ||||||||
0x0F2C | unsigned long[9] Instrumentation | 0x0F2C | ||||||||
0x0F50 | struct _GUID ActivityId | 0x0F50 | ||||||||
0x0F60 | unsigned long SubProcessTag | 0x0F60 | ||||||||
0x0F64 | unsigned long EtwLocalData | unsigned long PerflibData | 0x0F64 | |||||||
0x0F68 | unsigned long EtwTraceData | 0x0F68 | ||||||||
0x0F6C | unsigned long WinSockData | 0x0F6C | ||||||||
0x0F70 | unsigned long GdiBatchCount | 0x0F70 | ||||||||
0x0F74 | struct _PROCESSOR_NUMBER CurrentIdealProcessor | 0x0F74 | ||||||||
0x0F74 | unsigned long IdealProcessorValue | 0x0F74 | ||||||||
0x0F74 | uint8_t ReservedPad0 | 0x0F74 | ||||||||
0x0F75 | uint8_t ReservedPad1 | 0x0F75 | ||||||||
0x0F76 | uint8_t ReservedPad2 | 0x0F76 | ||||||||
0x0F77 | uint8_t IdealProcessor | 0x0F77 | ||||||||
0x0F78 | unsigned long GuaranteedStackBytes | 0x0F78 | ||||||||
0x0F7C | unsigned long ReservedForPerf | 0x0F7C | ||||||||
0x0F80 | unsigned long ReservedForOle | 0x0F80 | ||||||||
0x0F84 | unsigned long WaitingOnLoaderLock | 0x0F84 | ||||||||
0x0F88 | unsigned long SavedPriorityState | 0x0F88 | ||||||||
0x0F8C | unsigned long ReservedForCodeCoverage | 0x0F8C | ||||||||
0x0F90 | unsigned long ThreadPoolData | 0x0F90 | ||||||||
0x0F94 | unsigned long TlsExpansionSlots | 0x0F94 | ||||||||
0x0F98 | unsigned long MuiGeneration | 0x0F98 | ||||||||
0x0F9C | unsigned long IsImpersonating | 0x0F9C | ||||||||
0x0FA0 | unsigned long NlsCache | 0x0FA0 | ||||||||
0x0FA4 | unsigned long pShimData | 0x0FA4 | ||||||||
0x0FA8 | uint16_t HeapVirtualAffinity | 0x0FA8 | ||||||||
0x0FAA | uint16_t LowFragHeapDataSlot | 0x0FAA | ||||||||
0x0FAC | unsigned long CurrentTransactionHandle | 0x0FAC | ||||||||
0x0FB0 | unsigned long ActiveFrame | 0x0FB0 | ||||||||
0x0FB4 | unsigned long FlsData | 0x0FB4 | ||||||||
0x0FB8 | unsigned long PreferredLanguages | 0x0FB8 | ||||||||
0x0FBC | unsigned long UserPrefLanguages | 0x0FBC | ||||||||
0x0FC0 | unsigned long MergedPrefLanguages | 0x0FC0 | ||||||||
0x0FC4 | unsigned long MuiImpersonation | 0x0FC4 | ||||||||
0x0FC8 | volatile uint16_t CrossTebFlags | 0x0FC8 | ||||||||
0x0FC8:0x00 | uint16_t SpareCrossTebBits | 0x0FC8:0x00 | ||||||||
0x0FCA | uint16_t SameTebFlags | 0x0FCA | ||||||||
0x0FCA:0x00 | uint16_t SafeThunkCall | 0x0FCA:0x00 | ||||||||
0x0FCA:0x01 | uint16_t InDebugPrint | 0x0FCA:0x01 | ||||||||
0x0FCA:0x02 | uint16_t HasFiberData | 0x0FCA:0x02 | ||||||||
0x0FCA:0x03 | uint16_t SkipThreadAttach | 0x0FCA:0x03 | ||||||||
0x0FCA:0x04 | uint16_t WerInShipAssertCode | 0x0FCA:0x04 | ||||||||
0x0FCA:0x05 | uint16_t RanProcessInit | 0x0FCA:0x05 | ||||||||
0x0FCA:0x06 | uint16_t ClonedThread | 0x0FCA:0x06 | ||||||||
0x0FCA:0x07 | uint16_t SuppressDebugMsg | 0x0FCA:0x07 | ||||||||
0x0FCA:0x08 | uint16_t DisableUserStackWalk | 0x0FCA:0x08 | ||||||||
0x0FCA:0x09 | uint16_t RtlExceptionAttached | 0x0FCA:0x09 | ||||||||
0x0FCA:0x0A | uint16_t InitialThread | 0x0FCA:0x0A | ||||||||
0x0FCA:0x0B | uint16_t SessionAware | 0x0FCA:0x0B | ||||||||
0x0FCA:0x0C | uint16_t DisabledStackCheck | uint16_t SpareSameTebBits | uint16_t LoadOwner | 0x0FCA:0x0C | ||||||
0x0FCA:0x0D | uint16_t SpareSameTebBits | uint16_t LoaderWorker | 0x0FCA:0x0D | |||||||
0x0FCA:0x0E | uint16_t SpareSameTebBits | 0x0FCA:0x0E | ||||||||
0x0FCC | unsigned long TxnScopeEnterCallback | 0x0FCC | ||||||||
0x0FD0 | unsigned long TxnScopeExitCallback | 0x0FD0 | ||||||||
0x0FD4 | unsigned long TxnScopeContext | 0x0FD4 | ||||||||
0x0FD8 | unsigned long LockCount | 0x0FD8 | ||||||||
0x0FDC | unsigned long SpareUlong0 | long WowTebOffset | 0x0FDC | |||||||
0x0FE0 | unsigned long ResourceRetValue | 0x0FE0 | ||||||||
0x0FE4 | unsigned long ReservedForWdf | 0x0FE4 | ||||||||
0x0FE8 | uint64_t ReservedForCrt | 0x0FE8 | ||||||||
0x0FF0 | struct _GUID EffectiveContainerId | 0x0FF0 |