Min version	XP	XP SP2	2003/XP64	2003/XP64 SP1	Vista	Vista SP1	7	8 Pre RTM	8 Pre RTM	8.1 Update 1	10 TH2
Max version	XP SP1	XP SP3		2003/XP64 SP2		Vista SP2	7 SP1		8	10
x86 offset offset:bitpos	Field Name
0x0000	uint8_t InheritedAddressSpace
0x0001	uint8_t ReadImageFileExecOptions
0x0002	uint8_t BeingDebugged
0x0003	uint8_t SpareBool			uint8_t BitField
0x0003:0x00				uint8_t ImageUsesLargePages
0x0003:0x01				uint8_t SpareBits	uint8_t IsProtectedProcess
0x0003:0x02					uint8_t IsLegacyProcess					uint8_t IsImageDynamicallyRelocated
0x0003:0x03					uint8_t IsImageDynamicallyRelocated					uint8_t SkipPatchingUser32Forwarders
0x0003:0x04					uint8_t SpareBits	uint8_t SkipPatchingUser32Forwarders				uint8_t IsPackagedProcess
0x0003:0x05						uint8_t SpareBits			uint8_t IsPackagedProcess	uint8_t IsAppContainer
0x0003:0x06									uint8_t IsAppContainer	uint8_t IsProtectedProcessLight
0x0003:0x07									uint8_t SpareBits
0x0004	void * Mutant
0x0008	void * ImageBaseAddress
0x000C	struct _PEB_LDR_DATA * Ldr
0x0010	struct _RTL_USER_PROCESS_PARAMETERS * ProcessParameters
0x0014	void * SubSystemData
0x0018	void * ProcessHeap
0x001C	struct _RTL_CRITICAL_SECTION * FastPebLock
0x0020	void * FastPebLockRoutine		void * SparePtr1	void * AtlThunkSListPtr
0x0024	void * FastPebUnlockRoutine		void * SparePtr2		void * IFEOKey
0x0028	unsigned long EnvironmentUpdateCount				unsigned long CrossProcessFlags
0x0028:0x00					unsigned long ProcessInJob
0x0028:0x01					unsigned long ProcessInitializing
0x0028:0x02					unsigned long ReservedBits0	unsigned long ProcessUsingVEH
0x0028:0x03						unsigned long ProcessUsingVCH
0x0028:0x04						unsigned long ReservedBits0	unsigned long ProcessUsingFTH
0x0028:0x05							unsigned long ReservedBits0
0x002C	void * KernelCallbackTable				void * KernelCallbackTable
0x002C					void * UserSharedInfoPtr
0x0030	unsigned long[1] SystemReserved
0x0034:0x00	unsigned long ExecuteOptions	unsigned long AtlThunkSListPtr32	unsigned long ExecuteOptions	unsigned long SpareUlong			unsigned long AtlThunkSListPtr32
0x0034:0x02	unsigned long SpareBits		unsigned long SpareBits
0x0038	struct _PEB_FREE_BLOCK * FreeList					unsigned long SparePebPtr0	void * ApiSetMap
0x003C	unsigned long TlsExpansionCounter
0x0040	void * TlsBitmap
0x0044	unsigned long[2] TlsBitmapBits
0x004C	void * ReadOnlySharedMemoryBase
0x0050	void * ReadOnlySharedMemoryHeap				void * HotpatchInformation					void * SparePvoid0
0x0054	void * * ReadOnlyStaticServerData
0x0058	void * AnsiCodePageData
0x005C	void * OemCodePageData
0x0060	void * UnicodeCaseTableData
0x0064	unsigned long NumberOfProcessors
0x0068	unsigned long NtGlobalFlag
0x0070	union _LARGE_INTEGER CriticalSectionTimeout
0x0078	unsigned long HeapSegmentReserve
0x007C	unsigned long HeapSegmentCommit
0x0080	unsigned long HeapDeCommitTotalFreeThreshold
0x0084	unsigned long HeapDeCommitFreeBlockThreshold
0x0088	unsigned long NumberOfHeaps
0x008C	unsigned long MaximumNumberOfHeaps
0x0090	void * * ProcessHeaps
0x0094	void * GdiSharedHandleTable
0x0098	void * ProcessStarterHelper
0x009C	unsigned long GdiDCAttributeList
0x00A0	void * LoaderLock		struct _RTL_CRITICAL_SECTION * LoaderLock
0x00A4	unsigned long OSMajorVersion
0x00A8	unsigned long OSMinorVersion
0x00AC	uint16_t OSBuildNumber
0x00AE	uint16_t OSCSDVersion
0x00B0	unsigned long OSPlatformId
0x00B4	unsigned long ImageSubsystem
0x00B8	unsigned long ImageSubsystemMajorVersion
0x00BC	unsigned long ImageSubsystemMinorVersion
0x00C0	unsigned long ImageProcessAffinityMask					unsigned long ActiveProcessAffinityMask
0x00C4	unsigned long[34] GdiHandleBuffer
0x014C	function * PostProcessInitRoutine
0x0150	void * TlsExpansionBitmap
0x0154	unsigned long[32] TlsExpansionBitmapBits
0x01D4	unsigned long SessionId
0x01D8	union _ULARGE_INTEGER AppCompatFlags
0x01E0	union _ULARGE_INTEGER AppCompatFlagsUser
0x01E8	void * pShimData
0x01EC	void * AppCompatInfo
0x01F0	struct _UNICODE_STRING CSDVersion
0x01F8	void * ActivationContextData		const struct _ACTIVATION_CONTEXT_DATA * ActivationContextData
0x01FC	void * ProcessAssemblyStorageMap		struct _ASSEMBLY_STORAGE_MAP * ProcessAssemblyStorageMap
0x0200	void * SystemDefaultActivationContextData		const struct _ACTIVATION_CONTEXT_DATA * SystemDefaultActivationContextData
0x0204	void * SystemAssemblyStorageMap		struct _ASSEMBLY_STORAGE_MAP * SystemAssemblyStorageMap
0x0208	unsigned long MinimumStackCommit
0x020C			void * * FlsCallback		struct _FLS_CALLBACK_INFO * FlsCallback
0x0210			struct _LIST_ENTRY FlsListHead
0x0218			void * FlsBitmap
0x021C			unsigned long[4] FlsBitmapBits
0x022C			unsigned long FlsHighIndex
0x0230					void * WerRegistrationData
0x0234					void * WerShipAssertPtr
0x0238							void * pContextData	void * pUnused
0x023C							void * pImageHeaderHash
0x0240							unsigned long TracingFlags
0x0240:0x00							unsigned long HeapTracingEnabled
0x0240:0x01							unsigned long CritSecTracingEnabled
0x0240:0x02							unsigned long SpareTracingBits	unsigned long LibLoaderTracingEnabled
0x0240:0x03								unsigned long SpareTracingBits
0x0248								uint64_t CsrServerReadOnlySharedMemoryBase
0x0250											unsigned long TppWorkerpListLock
0x0254											struct _LIST_ENTRY TppWorkerpList
0x025C											void *[128] WaitOnAddressHashTable