| Min version | 8 Pre RTM | 8 Pre RTM | 10 Pre RTM | 10 Pre RTM |
|---|---|---|---|---|
| Max version | 8.1 Update 1 | 10 TH2 | ||
| x86 offset offset:bitpos | Field Name | |||
| 0x0000 | struct _NT_TIB32 NtTib | |||
| 0x001C | unsigned long EnvironmentPointer | |||
| 0x0020 | struct _CLIENT_ID32 ClientId | |||
| 0x0028 | unsigned long ActiveRpcHandle | |||
| 0x002C | unsigned long ThreadLocalStoragePointer | |||
| 0x0030 | unsigned long ProcessEnvironmentBlock | |||
| 0x0034 | unsigned long LastErrorValue | |||
| 0x0038 | unsigned long CountOfOwnedCriticalSections | |||
| 0x003C | unsigned long CsrClientThread | |||
| 0x0040 | unsigned long Win32ThreadInfo | |||
| 0x0044 | unsigned long[26] User32Reserved | |||
| 0x00AC | unsigned long[5] UserReserved | |||
| 0x00C0 | unsigned long WOW32Reserved | |||
| 0x00C4 | unsigned long CurrentLocale | |||
| 0x00C8 | unsigned long FpSoftwareStatusRegister | |||
| 0x00CC | unsigned long[54] SystemReserved1 | unsigned long[16] ReservedForDebuggerInstrumentation | ||
| 0x010C | unsigned long[38] SystemReserved1 | |||
| 0x01A4 | long ExceptionCode | |||
| 0x01A8 | unsigned long ActivationContextStackPointer | |||
| 0x01AC | uint8_t[36] SpareBytes | unsigned long InstrumentationCallbackSp | ||
| 0x01B0 | unsigned long InstrumentationCallbackPreviousPc | |||
| 0x01B4 | unsigned long InstrumentationCallbackPreviousSp | |||
| 0x01B8 | uint8_t InstrumentationCallbackDisabled | |||
| 0x01B9 | uint8_t[23] SpareBytes | |||
| 0x01D0 | unsigned long TxFsContext | |||
| 0x01D4 | struct _GDI_TEB_BATCH32 GdiTebBatch | |||
| 0x06B4 | struct _CLIENT_ID32 RealClientId | |||
| 0x06BC | unsigned long GdiCachedProcessHandle | |||
| 0x06C0 | unsigned long GdiClientPID | |||
| 0x06C4 | unsigned long GdiClientTID | |||
| 0x06C8 | unsigned long GdiThreadLocalInfo | |||
| 0x06CC | unsigned long[62] Win32ClientInfo | |||
| 0x07C4 | unsigned long[233] glDispatchTable | |||
| 0x0B68 | unsigned long[29] glReserved1 | |||
| 0x0BDC | unsigned long glReserved2 | |||
| 0x0BE0 | unsigned long glSectionInfo | |||
| 0x0BE4 | unsigned long glSection | |||
| 0x0BE8 | unsigned long glTable | |||
| 0x0BEC | unsigned long glCurrentRC | |||
| 0x0BF0 | unsigned long glContext | |||
| 0x0BF4 | unsigned long LastStatusValue | |||
| 0x0BF8 | struct _STRING32 StaticUnicodeString | |||
| 0x0C00 | wchar_t[261] StaticUnicodeBuffer | |||
| 0x0E0C | unsigned long DeallocationStack | |||
| 0x0E10 | unsigned long[64] TlsSlots | |||
| 0x0F10 | struct LIST_ENTRY32 TlsLinks | |||
| 0x0F18 | unsigned long Vdm | |||
| 0x0F1C | unsigned long ReservedForNtRpc | |||
| 0x0F20 | unsigned long[2] DbgSsReserved | |||
| 0x0F28 | unsigned long HardErrorMode | |||
| 0x0F2C | unsigned long[9] Instrumentation | |||
| 0x0F50 | struct _GUID ActivityId | |||
| 0x0F60 | unsigned long SubProcessTag | |||
| 0x0F64 | unsigned long EtwLocalData | unsigned long PerflibData | ||
| 0x0F68 | unsigned long EtwTraceData | |||
| 0x0F6C | unsigned long WinSockData | |||
| 0x0F70 | unsigned long GdiBatchCount | |||
| 0x0F74 | struct _PROCESSOR_NUMBER CurrentIdealProcessor | |||
| 0x0F74 | unsigned long IdealProcessorValue | |||
| 0x0F74 | uint8_t ReservedPad0 | |||
| 0x0F75 | uint8_t ReservedPad1 | |||
| 0x0F76 | uint8_t ReservedPad2 | |||
| 0x0F77 | uint8_t IdealProcessor | |||
| 0x0F78 | unsigned long GuaranteedStackBytes | |||
| 0x0F7C | unsigned long ReservedForPerf | |||
| 0x0F80 | unsigned long ReservedForOle | |||
| 0x0F84 | unsigned long WaitingOnLoaderLock | |||
| 0x0F88 | unsigned long SavedPriorityState | |||
| 0x0F8C | unsigned long ReservedForCodeCoverage | |||
| 0x0F90 | unsigned long ThreadPoolData | |||
| 0x0F94 | unsigned long TlsExpansionSlots | |||
| 0x0F98 | unsigned long MuiGeneration | |||
| 0x0F9C | unsigned long IsImpersonating | |||
| 0x0FA0 | unsigned long NlsCache | |||
| 0x0FA4 | unsigned long pShimData | |||
| 0x0FA8 | uint16_t HeapVirtualAffinity | |||
| 0x0FAA | uint16_t LowFragHeapDataSlot | |||
| 0x0FAC | unsigned long CurrentTransactionHandle | |||
| 0x0FB0 | unsigned long ActiveFrame | |||
| 0x0FB4 | unsigned long FlsData | |||
| 0x0FB8 | unsigned long PreferredLanguages | |||
| 0x0FBC | unsigned long UserPrefLanguages | |||
| 0x0FC0 | unsigned long MergedPrefLanguages | |||
| 0x0FC4 | unsigned long MuiImpersonation | |||
| 0x0FC8 | volatile uint16_t CrossTebFlags | |||
| 0x0FC8:0x00 | uint16_t SpareCrossTebBits | |||
| 0x0FCA | uint16_t SameTebFlags | |||
| 0x0FCA:0x00 | uint16_t SafeThunkCall | |||
| 0x0FCA:0x01 | uint16_t InDebugPrint | |||
| 0x0FCA:0x02 | uint16_t HasFiberData | |||
| 0x0FCA:0x03 | uint16_t SkipThreadAttach | |||
| 0x0FCA:0x04 | uint16_t WerInShipAssertCode | |||
| 0x0FCA:0x05 | uint16_t RanProcessInit | |||
| 0x0FCA:0x06 | uint16_t ClonedThread | |||
| 0x0FCA:0x07 | uint16_t SuppressDebugMsg | |||
| 0x0FCA:0x08 | uint16_t DisableUserStackWalk | |||
| 0x0FCA:0x09 | uint16_t RtlExceptionAttached | |||
| 0x0FCA:0x0A | uint16_t InitialThread | |||
| 0x0FCA:0x0B | uint16_t SessionAware | |||
| 0x0FCA:0x0C | uint16_t DisabledStackCheck | uint16_t SpareSameTebBits | uint16_t LoadOwner | |
| 0x0FCA:0x0D | uint16_t SpareSameTebBits | uint16_t LoaderWorker | ||
| 0x0FCA:0x0E | uint16_t SpareSameTebBits | |||
| 0x0FCC | unsigned long TxnScopeEnterCallback | |||
| 0x0FD0 | unsigned long TxnScopeExitCallback | |||
| 0x0FD4 | unsigned long TxnScopeContext | |||
| 0x0FD8 | unsigned long LockCount | |||
| 0x0FDC | unsigned long SpareUlong0 | long WowTebOffset | ||
| 0x0FE0 | unsigned long ResourceRetValue | |||
| 0x0FE4 | unsigned long ReservedForWdf | |||
| 0x0FE8 | uint64_t ReservedForCrt | |||
| 0x0FF0 | struct _GUID EffectiveContainerId | |||