Min version	XP	XP SP2	2003/XP64	2003/XP64 SP1	2003/XP64 SP2	Vista	Vista SP1	7	8 Pre RTM	8 Pre RTM	10 Pre RTM	10 Pre RTM
Max version	XP SP1	XP SP3		2003/XP64 SP2			Vista SP2	7 SP1		8.1 Update 1		10 TH2
x86 offset offset:bitpos	Field Name
0x0000	struct _NT_TIB NtTib
0x001C	void * EnvironmentPointer
0x0020	struct _CLIENT_ID ClientId
0x0028	void * ActiveRpcHandle
0x002C	void * ThreadLocalStoragePointer
0x0030	struct _PEB * ProcessEnvironmentBlock
0x0034	unsigned long LastErrorValue
0x0038	unsigned long CountOfOwnedCriticalSections
0x003C	void * CsrClientThread
0x0040	void * Win32ThreadInfo
0x0044	unsigned long[26] User32Reserved
0x00AC	unsigned long[5] UserReserved
0x00C0	void * WOW32Reserved
0x00C4	unsigned long CurrentLocale
0x00C8	unsigned long FpSoftwareStatusRegister
0x00CC	void *[54] SystemReserved1											void *[16] ReservedForDebuggerInstrumentation
0x010C												void *[38] SystemReserved1
0x01A4	long ExceptionCode
0x01A8	struct _ACTIVATION_CONTEXT_STACK ActivationContextStack			struct _ACTIVATION_CONTEXT_STACK * ActivationContextStackPointer
0x01AC				uint8_t[40] SpareBytes1		uint8_t[36] SpareBytes1		uint8_t[36] SpareBytes			unsigned long InstrumentationCallbackSp
0x01B0											unsigned long InstrumentationCallbackPreviousPc
0x01B4											unsigned long InstrumentationCallbackPreviousSp
0x01B8											uint8_t InstrumentationCallbackDisabled
0x01B9											uint8_t[23] SpareBytes
0x01BC	uint8_t[24] SpareBytes1
0x01D0						unsigned long TxFsContext
0x01D4	struct _GDI_TEB_BATCH GdiTebBatch
0x06B4	struct _CLIENT_ID RealClientId
0x06BC	void * GdiCachedProcessHandle
0x06C0	unsigned long GdiClientPID
0x06C4	unsigned long GdiClientTID
0x06C8	void * GdiThreadLocalInfo
0x06CC	unsigned long[62] Win32ClientInfo
0x07C4	void *[233] glDispatchTable
0x0B68	unsigned long[29] glReserved1
0x0BDC	void * glReserved2
0x0BE0	void * glSectionInfo
0x0BE4	void * glSection
0x0BE8	void * glTable
0x0BEC	void * glCurrentRC
0x0BF0	void * glContext
0x0BF4	unsigned long LastStatusValue
0x0BF8	struct _UNICODE_STRING StaticUnicodeString
0x0C00	uint16_t[261] StaticUnicodeBuffer				wchar_t[261] StaticUnicodeBuffer
0x0E0C	void * DeallocationStack
0x0E10	void *[64] TlsSlots
0x0F10	struct _LIST_ENTRY TlsLinks
0x0F18	void * Vdm
0x0F1C	void * ReservedForNtRpc
0x0F20	void *[2] DbgSsReserved
0x0F28	unsigned long HardErrorsAreDisabled		unsigned long HardErrorMode
0x0F2C	void *[16] Instrumentation			void *[14] Instrumentation		void *[9] Instrumentation
0x0F50						struct _GUID ActivityId
0x0F60						void * SubProcessTag
0x0F64				void * SubProcessTag		void * EtwLocalData				void * PerflibData
0x0F68				void * EtwTraceData
0x0F6C	void * WinSockData
0x0F70	unsigned long GdiBatchCount
0x0F74	uint8_t InDbgPrint					uint8_t SpareBool0		struct _PROCESSOR_NUMBER CurrentIdealProcessor
0x0F74								unsigned long IdealProcessorValue
0x0F74								uint8_t ReservedPad0
0x0F75	uint8_t FreeStackOnTermination					uint8_t SpareBool1		uint8_t ReservedPad1
0x0F76	uint8_t HasFiberData					uint8_t SpareBool2		uint8_t ReservedPad2
0x0F77	uint8_t IdealProcessor
0x0F78	unsigned long Spare3			unsigned long GuaranteedStackBytes
0x0F7C	void * ReservedForPerf
0x0F80	void * ReservedForOle
0x0F84	unsigned long WaitingOnLoaderLock
0x0F88	struct _Wx86ThreadState Wx86Thread			unsigned long SparePointer1		void * SavedPriorityState
0x0F8C				unsigned long SoftPatchPtr1					unsigned long ReservedForCodeCoverage
0x0F90				unsigned long SoftPatchPtr2		void * ThreadPoolData
0x0F94	void * * TlsExpansionSlots
0x0F98	unsigned long ImpersonationLocale							unsigned long MuiGeneration
0x0F9C	unsigned long IsImpersonating
0x0FA0	void * NlsCache
0x0FA4	void * pShimData
0x0FA8	unsigned long HeapVirtualAffinity								uint16_t HeapVirtualAffinity
0x0FAA									uint16_t LowFragHeapDataSlot
0x0FAC	void * CurrentTransactionHandle
0x0FB0	struct _TEB_ACTIVE_FRAME * ActiveFrame
0x0FB4		uint8_t SafeThunkCall	void * FlsData
0x0FB5		uint8_t[3] BooleanSpare
0x0FB8				uint8_t SafeThunkCall		void * PreferredLanguages
0x0FB9				uint8_t[3] BooleanSpare
0x0FBC						void * UserPrefLanguages
0x0FC0						void * MergedPrefLanguages
0x0FC4						unsigned long MuiImpersonation
0x0FC8						volatile uint16_t CrossTebFlags
0x0FC8:0x00						uint16_t SpareCrossTebBits
0x0FCA						uint16_t SameTebFlags
0x0FCA:0x00						uint16_t DbgSafeThunkCall		uint16_t SafeThunkCall
0x0FCA:0x01						uint16_t DbgInDebugPrint		uint16_t InDebugPrint
0x0FCA:0x02						uint16_t DbgHasFiberData		uint16_t HasFiberData
0x0FCA:0x03						uint16_t DbgSkipThreadAttach		uint16_t SkipThreadAttach
0x0FCA:0x04						uint16_t DbgWerInShipAssertCode		uint16_t WerInShipAssertCode
0x0FCA:0x05						uint16_t DbgRanProcessInit		uint16_t RanProcessInit
0x0FCA:0x06						uint16_t DbgClonedThread		uint16_t ClonedThread
0x0FCA:0x07						uint16_t DbgSuppressDebugMsg		uint16_t SuppressDebugMsg
0x0FCA:0x08						uint16_t SpareSameTebBits	uint16_t RtlDisableUserStackWalk	uint16_t DisableUserStackWalk
0x0FCA:0x09							uint16_t RtlExceptionAttached
0x0FCA:0x0A							uint16_t SpareSameTebBits	uint16_t InitialThread
0x0FCA:0x0B								uint16_t SpareSameTebBits	uint16_t SessionAware
0x0FCA:0x0C									uint16_t DisabledStackCheck	uint16_t SpareSameTebBits	uint16_t LoadOwner
0x0FCA:0x0D									uint16_t SpareSameTebBits		uint16_t LoaderWorker
0x0FCA:0x0E											uint16_t SpareSameTebBits
0x0FCC						void * TxnScopeEnterCallback
0x0FD0						void * TxnScopeExitCallback
0x0FD4						void * TxnScopeContext
0x0FD8						unsigned long LockCount
0x0FDC						unsigned long ProcessRundown		unsigned long SpareUlong0			long WowTebOffset
0x0FE0						uint64_t LastSwitchTime		void * ResourceRetValue
0x0FE4									void * ReservedForWdf
0x0FE8						uint64_t TotalSwitchOutTime					uint64_t ReservedForCrt
0x0FF0						union _LARGE_INTEGER WaitReasonBitMap					struct _GUID EffectiveContainerId