Min version	2003/XP64 SP1	Vista SP1	7	8 Pre RTM	8	8.1	10 Pre RTM	10 Pre RTM	10
Max version	2003/XP64 SP2	Vista SP2	7 SP1			8.1 Update 1			10 TH2
x64 offset offset:bitpos	Field Name
0x0000	struct _NT_TIB NtTib
0x0038	void * EnvironmentPointer
0x0040	struct _CLIENT_ID ClientId
0x0050	void * ActiveRpcHandle
0x0058	void * ThreadLocalStoragePointer
0x0060	struct _PEB * ProcessEnvironmentBlock
0x0068	unsigned long LastErrorValue
0x006C	unsigned long CountOfOwnedCriticalSections
0x0070	void * CsrClientThread
0x0078	void * Win32ThreadInfo
0x0080	unsigned long[26] User32Reserved
0x00E8	unsigned long[5] UserReserved
0x0100	void * WOW32Reserved
0x0108	unsigned long CurrentLocale
0x010C	unsigned long FpSoftwareStatusRegister
0x0110	void *[54] SystemReserved1								void *[16] ReservedForDebuggerInstrumentation
0x0190									void *[38] SystemReserved1
0x02C0	long ExceptionCode
0x02C4						uint8_t[4] Padding0
0x02C8	struct _ACTIVATION_CONTEXT_STACK * ActivationContextStackPointer
0x02D0	uint8_t[28] SpareBytes1	uint8_t[24] SpareBytes1	uint8_t[24] SpareBytes				uint64_t InstrumentationCallbackSp
0x02D8							uint64_t InstrumentationCallbackPreviousPc
0x02E0							uint64_t InstrumentationCallbackPreviousSp
0x02E8		unsigned long TxFsContext
0x02EC						uint8_t[4] Padding1	uint8_t InstrumentationCallbackDisabled
0x02ED							uint8_t[3] Padding1
0x02F0	struct _GDI_TEB_BATCH GdiTebBatch
0x07D8	struct _CLIENT_ID RealClientId
0x07E8	void * GdiCachedProcessHandle
0x07F0	unsigned long GdiClientPID
0x07F4	unsigned long GdiClientTID
0x07F8	void * GdiThreadLocalInfo
0x0800	uint64_t[62] Win32ClientInfo
0x09F0	void *[233] glDispatchTable
0x1138	uint64_t[29] glReserved1
0x1220	void * glReserved2
0x1228	void * glSectionInfo
0x1230	void * glSection
0x1238	void * glTable
0x1240	void * glCurrentRC
0x1248	void * glContext
0x1250	unsigned long LastStatusValue
0x1254						uint8_t[4] Padding2
0x1258	struct _UNICODE_STRING StaticUnicodeString
0x1268	uint16_t[261] StaticUnicodeBuffer	wchar_t[261] StaticUnicodeBuffer
0x1472						uint8_t[6] Padding3
0x1478	void * DeallocationStack
0x1480	void *[64] TlsSlots
0x1680	struct _LIST_ENTRY TlsLinks
0x1690	void * Vdm
0x1698	void * ReservedForNtRpc
0x16A0	void *[2] DbgSsReserved
0x16B0	unsigned long HardErrorMode
0x16B4						uint8_t[4] Padding4
0x16B8	void *[14] Instrumentation	void *[11] Instrumentation
0x1710		struct _GUID ActivityId
0x1720		void * SubProcessTag
0x1728	void * SubProcessTag	void * EtwLocalData			void * PerflibData
0x1730	void * EtwTraceData
0x1738	void * WinSockData
0x1740	unsigned long GdiBatchCount
0x1744	uint8_t InDbgPrint	uint8_t SpareBool0	struct _PROCESSOR_NUMBER CurrentIdealProcessor
0x1744			unsigned long IdealProcessorValue
0x1744			uint8_t ReservedPad0
0x1745	uint8_t FreeStackOnTermination	uint8_t SpareBool1	uint8_t ReservedPad1
0x1746	uint8_t HasFiberData	uint8_t SpareBool2	uint8_t ReservedPad2
0x1747	uint8_t IdealProcessor
0x1748	unsigned long GuaranteedStackBytes
0x174C						uint8_t[4] Padding5
0x1750	void * ReservedForPerf
0x1758	void * ReservedForOle
0x1760	unsigned long WaitingOnLoaderLock
0x1764						uint8_t[4] Padding6
0x1768	uint64_t SparePointer1	void * SavedPriorityState
0x1770	uint64_t SoftPatchPtr1			uint64_t ReservedForCodeCoverage
0x1778	uint64_t SoftPatchPtr2	void * ThreadPoolData
0x1780	void * * TlsExpansionSlots
0x1788	void * DeallocationBStore
0x1790	void * BStoreLimit
0x1798	unsigned long ImpersonationLocale		unsigned long MuiGeneration
0x179C	unsigned long IsImpersonating
0x17A0	void * NlsCache
0x17A8	void * pShimData
0x17B0	unsigned long HeapVirtualAffinity			uint16_t HeapVirtualAffinity
0x17B2				uint16_t LowFragHeapDataSlot
0x17B4						uint8_t[4] Padding7
0x17B8	void * CurrentTransactionHandle
0x17C0	struct _TEB_ACTIVE_FRAME * ActiveFrame
0x17C8	void * FlsData
0x17D0	uint8_t SafeThunkCall	void * PreferredLanguages
0x17D1	uint8_t[3] BooleanSpare
0x17D8		void * UserPrefLanguages
0x17E0		void * MergedPrefLanguages
0x17E8		unsigned long MuiImpersonation
0x17EC		volatile uint16_t CrossTebFlags
0x17EC:0x00		uint16_t SpareCrossTebBits
0x17EE		uint16_t SameTebFlags
0x17EE:0x00		uint16_t DbgSafeThunkCall	uint16_t SafeThunkCall
0x17EE:0x01		uint16_t DbgInDebugPrint	uint16_t InDebugPrint
0x17EE:0x02		uint16_t DbgHasFiberData	uint16_t HasFiberData
0x17EE:0x03		uint16_t DbgSkipThreadAttach	uint16_t SkipThreadAttach
0x17EE:0x04		uint16_t DbgWerInShipAssertCode	uint16_t WerInShipAssertCode
0x17EE:0x05		uint16_t DbgRanProcessInit	uint16_t RanProcessInit
0x17EE:0x06		uint16_t DbgClonedThread	uint16_t ClonedThread
0x17EE:0x07		uint16_t DbgSuppressDebugMsg	uint16_t SuppressDebugMsg
0x17EE:0x08		uint16_t RtlDisableUserStackWalk	uint16_t DisableUserStackWalk
0x17EE:0x09		uint16_t RtlExceptionAttached
0x17EE:0x0A		uint16_t SpareSameTebBits	uint16_t InitialThread
0x17EE:0x0B			uint16_t SpareSameTebBits	uint16_t SessionAware
0x17EE:0x0C				uint16_t DisabledStackCheck	uint16_t SpareSameTebBits		uint16_t LoadOwner
0x17EE:0x0D				uint16_t SpareSameTebBits			uint16_t LoaderWorker
0x17EE:0x0E							uint16_t SpareSameTebBits
0x17F0		void * TxnScopeEnterCallback
0x17F8		void * TxnScopeExitCallback
0x1800		void * TxnScopeContext
0x1808		unsigned long LockCount
0x180C		unsigned long ProcessRundown	unsigned long SpareUlong0					long WowTebOffset
0x1810		uint64_t LastSwitchTime	void * ResourceRetValue
0x1818		uint64_t TotalSwitchOutTime		void * ReservedForWdf
0x1820		union _LARGE_INTEGER WaitReasonBitMap					uint64_t ReservedForCrt
0x1828							struct _GUID EffectiveContainerId