Min version | 8 Pre RTM | 8 Pre RTM | 8.1 Update 1 | 10 Pre RTM | 10 Pre RTM | 10 | ||
---|---|---|---|---|---|---|---|---|
Max version | 8 | 10 TH2 | ||||||
Architecture | x86 | x86 | x86 | x86 | x64 | x86 | x64 | |
x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | ||||||
0x0000 | struct _NT_TIB64 NtTib | 0x0000 | ||||||
0x0038 | uint64_t EnvironmentPointer | 0x0038 | ||||||
0x0040 | struct _CLIENT_ID64 ClientId | 0x0040 | ||||||
0x0050 | uint64_t ActiveRpcHandle | 0x0050 | ||||||
0x0058 | uint64_t ThreadLocalStoragePointer | 0x0058 | ||||||
0x0060 | uint64_t ProcessEnvironmentBlock | 0x0060 | ||||||
0x0068 | unsigned long LastErrorValue | 0x0068 | ||||||
0x006C | unsigned long CountOfOwnedCriticalSections | 0x006C | ||||||
0x0070 | uint64_t CsrClientThread | 0x0070 | ||||||
0x0078 | uint64_t Win32ThreadInfo | 0x0078 | ||||||
0x0080 | unsigned long[26] User32Reserved | 0x0080 | ||||||
0x00E8 | unsigned long[5] UserReserved | 0x00E8 | ||||||
0x0100 | uint64_t WOW32Reserved | 0x0100 | ||||||
0x0108 | unsigned long CurrentLocale | 0x0108 | ||||||
0x010C | unsigned long FpSoftwareStatusRegister | 0x010C | ||||||
0x0110 | uint64_t[54] SystemReserved1 | uint64_t[16] ReservedForDebuggerInstrumentation | 0x0110 | |||||
0x0190 | uint64_t[38] SystemReserved1 | 0x0190 | ||||||
0x02C0 | long ExceptionCode | 0x02C0 | ||||||
0x02C4 | uint8_t[4] Padding0 | 0x02C4 | ||||||
0x02C8 | uint64_t ActivationContextStackPointer | 0x02C8 | ||||||
0x02D0 | uint8_t[24] SpareBytes | uint64_t InstrumentationCallbackSp | 0x02D0 | |||||
0x02D8 | uint64_t InstrumentationCallbackPreviousPc | 0x02D8 | ||||||
0x02E0 | uint64_t InstrumentationCallbackPreviousSp | 0x02E0 | ||||||
0x02E8 | unsigned long TxFsContext | 0x02E8 | ||||||
0x02EC | uint8_t[4] Padding1 | uint8_t InstrumentationCallbackDisabled | 0x02EC | |||||
0x02ED | uint8_t[3] Padding1 | 0x02ED | ||||||
0x02F0 | struct _GDI_TEB_BATCH64 GdiTebBatch | 0x02F0 | ||||||
0x07D8 | struct _CLIENT_ID64 RealClientId | 0x07D8 | ||||||
0x07E8 | uint64_t GdiCachedProcessHandle | 0x07E8 | ||||||
0x07F0 | unsigned long GdiClientPID | 0x07F0 | ||||||
0x07F4 | unsigned long GdiClientTID | 0x07F4 | ||||||
0x07F8 | uint64_t GdiThreadLocalInfo | 0x07F8 | ||||||
0x0800 | uint64_t[62] Win32ClientInfo | 0x0800 | ||||||
0x09F0 | uint64_t[233] glDispatchTable | 0x09F0 | ||||||
0x1138 | uint64_t[29] glReserved1 | 0x1138 | ||||||
0x1220 | uint64_t glReserved2 | 0x1220 | ||||||
0x1228 | uint64_t glSectionInfo | 0x1228 | ||||||
0x1230 | uint64_t glSection | 0x1230 | ||||||
0x1238 | uint64_t glTable | 0x1238 | ||||||
0x1240 | uint64_t glCurrentRC | 0x1240 | ||||||
0x1248 | uint64_t glContext | 0x1248 | ||||||
0x1250 | unsigned long LastStatusValue | 0x1250 | ||||||
0x1254 | uint8_t[4] Padding2 | 0x1254 | ||||||
0x1258 | struct _STRING64 StaticUnicodeString | 0x1258 | ||||||
0x1268 | wchar_t[261] StaticUnicodeBuffer | 0x1268 | ||||||
0x1472 | uint8_t[6] Padding3 | 0x1472 | ||||||
0x1478 | uint64_t DeallocationStack | 0x1478 | ||||||
0x1480 | uint64_t[64] TlsSlots | 0x1480 | ||||||
0x1680 | struct LIST_ENTRY64 TlsLinks | 0x1680 | ||||||
0x1690 | uint64_t Vdm | 0x1690 | ||||||
0x1698 | uint64_t ReservedForNtRpc | 0x1698 | ||||||
0x16A0 | uint64_t[2] DbgSsReserved | 0x16A0 | ||||||
0x16B0 | unsigned long HardErrorMode | 0x16B0 | ||||||
0x16B4 | uint8_t[4] Padding4 | 0x16B4 | ||||||
0x16B8 | uint64_t[11] Instrumentation | 0x16B8 | ||||||
0x1710 | struct _GUID ActivityId | 0x1710 | ||||||
0x1720 | uint64_t SubProcessTag | 0x1720 | ||||||
0x1728 | uint64_t EtwLocalData | uint64_t PerflibData | 0x1728 | |||||
0x1730 | uint64_t EtwTraceData | 0x1730 | ||||||
0x1738 | uint64_t WinSockData | 0x1738 | ||||||
0x1740 | unsigned long GdiBatchCount | 0x1740 | ||||||
0x1744 | struct _PROCESSOR_NUMBER CurrentIdealProcessor | 0x1744 | ||||||
0x1744 | unsigned long IdealProcessorValue | 0x1744 | ||||||
0x1744 | uint8_t ReservedPad0 | 0x1744 | ||||||
0x1745 | uint8_t ReservedPad1 | 0x1745 | ||||||
0x1746 | uint8_t ReservedPad2 | 0x1746 | ||||||
0x1747 | uint8_t IdealProcessor | 0x1747 | ||||||
0x1748 | unsigned long GuaranteedStackBytes | 0x1748 | ||||||
0x174C | uint8_t[4] Padding5 | 0x174C | ||||||
0x1750 | uint64_t ReservedForPerf | 0x1750 | ||||||
0x1758 | uint64_t ReservedForOle | 0x1758 | ||||||
0x1760 | unsigned long WaitingOnLoaderLock | 0x1760 | ||||||
0x1764 | uint8_t[4] Padding6 | 0x1764 | ||||||
0x1768 | uint64_t SavedPriorityState | 0x1768 | ||||||
0x1770 | uint64_t ReservedForCodeCoverage | 0x1770 | ||||||
0x1778 | uint64_t ThreadPoolData | 0x1778 | ||||||
0x1780 | uint64_t TlsExpansionSlots | 0x1780 | ||||||
0x1788 | uint64_t DeallocationBStore | 0x1788 | ||||||
0x1790 | uint64_t BStoreLimit | 0x1790 | ||||||
0x1798 | unsigned long MuiGeneration | 0x1798 | ||||||
0x179C | unsigned long IsImpersonating | 0x179C | ||||||
0x17A0 | uint64_t NlsCache | 0x17A0 | ||||||
0x17A8 | uint64_t pShimData | 0x17A8 | ||||||
0x17B0 | uint16_t HeapVirtualAffinity | 0x17B0 | ||||||
0x17B2 | uint16_t LowFragHeapDataSlot | 0x17B2 | ||||||
0x17B4 | uint8_t[4] Padding7 | 0x17B4 | ||||||
0x17B8 | uint64_t CurrentTransactionHandle | 0x17B8 | ||||||
0x17C0 | uint64_t ActiveFrame | 0x17C0 | ||||||
0x17C8 | uint64_t FlsData | 0x17C8 | ||||||
0x17D0 | uint64_t PreferredLanguages | 0x17D0 | ||||||
0x17D8 | uint64_t UserPrefLanguages | 0x17D8 | ||||||
0x17E0 | uint64_t MergedPrefLanguages | 0x17E0 | ||||||
0x17E8 | unsigned long MuiImpersonation | 0x17E8 | ||||||
0x17EC | volatile uint16_t CrossTebFlags | 0x17EC | ||||||
0x17EC:0x00 | uint16_t SpareCrossTebBits | 0x17EC:0x00 | ||||||
0x17EE | uint16_t SameTebFlags | 0x17EE | ||||||
0x17EE:0x00 | uint16_t SafeThunkCall | 0x17EE:0x00 | ||||||
0x17EE:0x01 | uint16_t InDebugPrint | 0x17EE:0x01 | ||||||
0x17EE:0x02 | uint16_t HasFiberData | 0x17EE:0x02 | ||||||
0x17EE:0x03 | uint16_t SkipThreadAttach | 0x17EE:0x03 | ||||||
0x17EE:0x04 | uint16_t WerInShipAssertCode | 0x17EE:0x04 | ||||||
0x17EE:0x05 | uint16_t RanProcessInit | 0x17EE:0x05 | ||||||
0x17EE:0x06 | uint16_t ClonedThread | 0x17EE:0x06 | ||||||
0x17EE:0x07 | uint16_t SuppressDebugMsg | 0x17EE:0x07 | ||||||
0x17EE:0x08 | uint16_t DisableUserStackWalk | 0x17EE:0x08 | ||||||
0x17EE:0x09 | uint16_t RtlExceptionAttached | 0x17EE:0x09 | ||||||
0x17EE:0x0A | uint16_t InitialThread | 0x17EE:0x0A | ||||||
0x17EE:0x0B | uint16_t SessionAware | 0x17EE:0x0B | ||||||
0x17EE:0x0C | uint16_t DisabledStackCheck | uint16_t SpareSameTebBits | uint16_t LoadOwner | 0x17EE:0x0C | ||||
0x17EE:0x0D | uint16_t SpareSameTebBits | uint16_t LoaderWorker | 0x17EE:0x0D | |||||
0x17EE:0x0E | uint16_t SpareSameTebBits | 0x17EE:0x0E | ||||||
0x17F0 | uint64_t TxnScopeEnterCallback | 0x17F0 | ||||||
0x17F8 | uint64_t TxnScopeExitCallback | 0x17F8 | ||||||
0x1800 | uint64_t TxnScopeContext | 0x1800 | ||||||
0x1808 | unsigned long LockCount | 0x1808 | ||||||
0x180C | unsigned long SpareUlong0 | long WowTebOffset | 0x180C | |||||
0x1810 | uint64_t ResourceRetValue | 0x1810 | ||||||
0x1818 | uint64_t ReservedForWdf | 0x1818 | ||||||
0x1820 | uint64_t ReservedForCrt | 0x1820 | ||||||
0x1828 | struct _GUID EffectiveContainerId | 0x1828 |