| Min version | 8 Pre RTM | 8 Pre RTM | 8.1 Update 1 | 10 Pre RTM | 10 Pre RTM |
|---|---|---|---|---|---|
| Max version | 8 | 10 TH2 | |||
| x86 offset offset:bitpos | Field Name | ||||
| 0x0000 | struct _NT_TIB64 NtTib | ||||
| 0x0038 | uint64_t EnvironmentPointer | ||||
| 0x0040 | struct _CLIENT_ID64 ClientId | ||||
| 0x0050 | uint64_t ActiveRpcHandle | ||||
| 0x0058 | uint64_t ThreadLocalStoragePointer | ||||
| 0x0060 | uint64_t ProcessEnvironmentBlock | ||||
| 0x0068 | unsigned long LastErrorValue | ||||
| 0x006C | unsigned long CountOfOwnedCriticalSections | ||||
| 0x0070 | uint64_t CsrClientThread | ||||
| 0x0078 | uint64_t Win32ThreadInfo | ||||
| 0x0080 | unsigned long[26] User32Reserved | ||||
| 0x00E8 | unsigned long[5] UserReserved | ||||
| 0x0100 | uint64_t WOW32Reserved | ||||
| 0x0108 | unsigned long CurrentLocale | ||||
| 0x010C | unsigned long FpSoftwareStatusRegister | ||||
| 0x0110 | uint64_t[54] SystemReserved1 | uint64_t[16] ReservedForDebuggerInstrumentation | |||
| 0x0190 | uint64_t[38] SystemReserved1 | ||||
| 0x02C0 | long ExceptionCode | ||||
| 0x02C4 | uint8_t[4] Padding0 | ||||
| 0x02C8 | uint64_t ActivationContextStackPointer | ||||
| 0x02D0 | uint8_t[24] SpareBytes | uint64_t InstrumentationCallbackSp | |||
| 0x02D8 | uint64_t InstrumentationCallbackPreviousPc | ||||
| 0x02E0 | uint64_t InstrumentationCallbackPreviousSp | ||||
| 0x02E8 | unsigned long TxFsContext | ||||
| 0x02EC | uint8_t[4] Padding1 | uint8_t InstrumentationCallbackDisabled | |||
| 0x02ED | uint8_t[3] Padding1 | ||||
| 0x02F0 | struct _GDI_TEB_BATCH64 GdiTebBatch | ||||
| 0x07D8 | struct _CLIENT_ID64 RealClientId | ||||
| 0x07E8 | uint64_t GdiCachedProcessHandle | ||||
| 0x07F0 | unsigned long GdiClientPID | ||||
| 0x07F4 | unsigned long GdiClientTID | ||||
| 0x07F8 | uint64_t GdiThreadLocalInfo | ||||
| 0x0800 | uint64_t[62] Win32ClientInfo | ||||
| 0x09F0 | uint64_t[233] glDispatchTable | ||||
| 0x1138 | uint64_t[29] glReserved1 | ||||
| 0x1220 | uint64_t glReserved2 | ||||
| 0x1228 | uint64_t glSectionInfo | ||||
| 0x1230 | uint64_t glSection | ||||
| 0x1238 | uint64_t glTable | ||||
| 0x1240 | uint64_t glCurrentRC | ||||
| 0x1248 | uint64_t glContext | ||||
| 0x1250 | unsigned long LastStatusValue | ||||
| 0x1254 | uint8_t[4] Padding2 | ||||
| 0x1258 | struct _STRING64 StaticUnicodeString | ||||
| 0x1268 | wchar_t[261] StaticUnicodeBuffer | ||||
| 0x1472 | uint8_t[6] Padding3 | ||||
| 0x1478 | uint64_t DeallocationStack | ||||
| 0x1480 | uint64_t[64] TlsSlots | ||||
| 0x1680 | struct LIST_ENTRY64 TlsLinks | ||||
| 0x1690 | uint64_t Vdm | ||||
| 0x1698 | uint64_t ReservedForNtRpc | ||||
| 0x16A0 | uint64_t[2] DbgSsReserved | ||||
| 0x16B0 | unsigned long HardErrorMode | ||||
| 0x16B4 | uint8_t[4] Padding4 | ||||
| 0x16B8 | uint64_t[11] Instrumentation | ||||
| 0x1710 | struct _GUID ActivityId | ||||
| 0x1720 | uint64_t SubProcessTag | ||||
| 0x1728 | uint64_t EtwLocalData | uint64_t PerflibData | |||
| 0x1730 | uint64_t EtwTraceData | ||||
| 0x1738 | uint64_t WinSockData | ||||
| 0x1740 | unsigned long GdiBatchCount | ||||
| 0x1744 | struct _PROCESSOR_NUMBER CurrentIdealProcessor | ||||
| 0x1744 | unsigned long IdealProcessorValue | ||||
| 0x1744 | uint8_t ReservedPad0 | ||||
| 0x1745 | uint8_t ReservedPad1 | ||||
| 0x1746 | uint8_t ReservedPad2 | ||||
| 0x1747 | uint8_t IdealProcessor | ||||
| 0x1748 | unsigned long GuaranteedStackBytes | ||||
| 0x174C | uint8_t[4] Padding5 | ||||
| 0x1750 | uint64_t ReservedForPerf | ||||
| 0x1758 | uint64_t ReservedForOle | ||||
| 0x1760 | unsigned long WaitingOnLoaderLock | ||||
| 0x1764 | uint8_t[4] Padding6 | ||||
| 0x1768 | uint64_t SavedPriorityState | ||||
| 0x1770 | uint64_t ReservedForCodeCoverage | ||||
| 0x1778 | uint64_t ThreadPoolData | ||||
| 0x1780 | uint64_t TlsExpansionSlots | ||||
| 0x1788 | uint64_t DeallocationBStore | ||||
| 0x1790 | uint64_t BStoreLimit | ||||
| 0x1798 | unsigned long MuiGeneration | ||||
| 0x179C | unsigned long IsImpersonating | ||||
| 0x17A0 | uint64_t NlsCache | ||||
| 0x17A8 | uint64_t pShimData | ||||
| 0x17B0 | uint16_t HeapVirtualAffinity | ||||
| 0x17B2 | uint16_t LowFragHeapDataSlot | ||||
| 0x17B4 | uint8_t[4] Padding7 | ||||
| 0x17B8 | uint64_t CurrentTransactionHandle | ||||
| 0x17C0 | uint64_t ActiveFrame | ||||
| 0x17C8 | uint64_t FlsData | ||||
| 0x17D0 | uint64_t PreferredLanguages | ||||
| 0x17D8 | uint64_t UserPrefLanguages | ||||
| 0x17E0 | uint64_t MergedPrefLanguages | ||||
| 0x17E8 | unsigned long MuiImpersonation | ||||
| 0x17EC | volatile uint16_t CrossTebFlags | ||||
| 0x17EC:0x00 | uint16_t SpareCrossTebBits | ||||
| 0x17EE | uint16_t SameTebFlags | ||||
| 0x17EE:0x00 | uint16_t SafeThunkCall | ||||
| 0x17EE:0x01 | uint16_t InDebugPrint | ||||
| 0x17EE:0x02 | uint16_t HasFiberData | ||||
| 0x17EE:0x03 | uint16_t SkipThreadAttach | ||||
| 0x17EE:0x04 | uint16_t WerInShipAssertCode | ||||
| 0x17EE:0x05 | uint16_t RanProcessInit | ||||
| 0x17EE:0x06 | uint16_t ClonedThread | ||||
| 0x17EE:0x07 | uint16_t SuppressDebugMsg | ||||
| 0x17EE:0x08 | uint16_t DisableUserStackWalk | ||||
| 0x17EE:0x09 | uint16_t RtlExceptionAttached | ||||
| 0x17EE:0x0A | uint16_t InitialThread | ||||
| 0x17EE:0x0B | uint16_t SessionAware | ||||
| 0x17EE:0x0C | uint16_t DisabledStackCheck | uint16_t SpareSameTebBits | uint16_t LoadOwner | ||
| 0x17EE:0x0D | uint16_t SpareSameTebBits | uint16_t LoaderWorker | |||
| 0x17EE:0x0E | uint16_t SpareSameTebBits | ||||
| 0x17F0 | uint64_t TxnScopeEnterCallback | ||||
| 0x17F8 | uint64_t TxnScopeExitCallback | ||||
| 0x1800 | uint64_t TxnScopeContext | ||||
| 0x1808 | unsigned long LockCount | ||||
| 0x180C | unsigned long SpareUlong0 | long WowTebOffset | |||
| 0x1810 | uint64_t ResourceRetValue | ||||
| 0x1818 | uint64_t ReservedForWdf | ||||
| 0x1820 | uint64_t ReservedForCrt | ||||
| 0x1828 | struct _GUID EffectiveContainerId | ||||