Min version2003/XP64 SP1Vista SP178 Pre RTM88.110 Pre RTM10 Pre RTM10
Max version2003/XP64 SP2Vista SP27 SP18.1 Update 110 TH2
x64 offset
offset:bitpos
Field Name
0x0000struct _NT_TIB
NtTib
0x0038void *
EnvironmentPointer
0x0040struct _CLIENT_ID
ClientId
0x0050void *
ActiveRpcHandle
0x0058void *
ThreadLocalStoragePointer
0x0060struct _PEB *
ProcessEnvironmentBlock
0x0068unsigned long
LastErrorValue
0x006Cunsigned long
CountOfOwnedCriticalSections
0x0070void *
CsrClientThread
0x0078void *
Win32ThreadInfo
0x0080unsigned long[26]
User32Reserved
0x00E8unsigned long[5]
UserReserved
0x0100void *
WOW32Reserved
0x0108unsigned long
CurrentLocale
0x010Cunsigned long
FpSoftwareStatusRegister
0x0110void *[54]
SystemReserved1
void *[16]
ReservedForDebuggerInstrumentation
0x0190void *[38]
SystemReserved1
0x02C0long
ExceptionCode
0x02C4uint8_t[4]
Padding0
0x02C8struct _ACTIVATION_CONTEXT_STACK *
ActivationContextStackPointer
0x02D0uint8_t[28]
SpareBytes1
uint8_t[24]
SpareBytes1
uint8_t[24]
SpareBytes
uint64_t
InstrumentationCallbackSp
0x02D8uint64_t
InstrumentationCallbackPreviousPc
0x02E0uint64_t
InstrumentationCallbackPreviousSp
0x02E8unsigned long
TxFsContext
0x02ECuint8_t[4]
Padding1
uint8_t
InstrumentationCallbackDisabled
0x02EDuint8_t[3]
Padding1
0x02F0struct _GDI_TEB_BATCH
GdiTebBatch
0x07D8struct _CLIENT_ID
RealClientId
0x07E8void *
GdiCachedProcessHandle
0x07F0unsigned long
GdiClientPID
0x07F4unsigned long
GdiClientTID
0x07F8void *
GdiThreadLocalInfo
0x0800uint64_t[62]
Win32ClientInfo
0x09F0void *[233]
glDispatchTable
0x1138uint64_t[29]
glReserved1
0x1220void *
glReserved2
0x1228void *
glSectionInfo
0x1230void *
glSection
0x1238void *
glTable
0x1240void *
glCurrentRC
0x1248void *
glContext
0x1250unsigned long
LastStatusValue
0x1254uint8_t[4]
Padding2
0x1258struct _UNICODE_STRING
StaticUnicodeString
0x1268uint16_t[261]
StaticUnicodeBuffer
wchar_t[261]
StaticUnicodeBuffer
0x1472uint8_t[6]
Padding3
0x1478void *
DeallocationStack
0x1480void *[64]
TlsSlots
0x1680struct _LIST_ENTRY
TlsLinks
0x1690void *
Vdm
0x1698void *
ReservedForNtRpc
0x16A0void *[2]
DbgSsReserved
0x16B0unsigned long
HardErrorMode
0x16B4uint8_t[4]
Padding4
0x16B8void *[14]
Instrumentation
void *[11]
Instrumentation
0x1710struct _GUID
ActivityId
0x1720void *
SubProcessTag
0x1728void *
SubProcessTag
void *
EtwLocalData
void *
PerflibData
0x1730void *
EtwTraceData
0x1738void *
WinSockData
0x1740unsigned long
GdiBatchCount
0x1744uint8_t
InDbgPrint
uint8_t
SpareBool0
struct _PROCESSOR_NUMBER
CurrentIdealProcessor
0x1744unsigned long
IdealProcessorValue
0x1744uint8_t
ReservedPad0
0x1745uint8_t
FreeStackOnTermination
uint8_t
SpareBool1
uint8_t
ReservedPad1
0x1746uint8_t
HasFiberData
uint8_t
SpareBool2
uint8_t
ReservedPad2
0x1747uint8_t
IdealProcessor
0x1748unsigned long
GuaranteedStackBytes
0x174Cuint8_t[4]
Padding5
0x1750void *
ReservedForPerf
0x1758void *
ReservedForOle
0x1760unsigned long
WaitingOnLoaderLock
0x1764uint8_t[4]
Padding6
0x1768uint64_t
SparePointer1
void *
SavedPriorityState
0x1770uint64_t
SoftPatchPtr1
uint64_t
ReservedForCodeCoverage
0x1778uint64_t
SoftPatchPtr2
void *
ThreadPoolData
0x1780void * *
TlsExpansionSlots
0x1788void *
DeallocationBStore
0x1790void *
BStoreLimit
0x1798unsigned long
ImpersonationLocale
unsigned long
MuiGeneration
0x179Cunsigned long
IsImpersonating
0x17A0void *
NlsCache
0x17A8void *
pShimData
0x17B0unsigned long
HeapVirtualAffinity
uint16_t
HeapVirtualAffinity
0x17B2uint16_t
LowFragHeapDataSlot
0x17B4uint8_t[4]
Padding7
0x17B8void *
CurrentTransactionHandle
0x17C0struct _TEB_ACTIVE_FRAME *
ActiveFrame
0x17C8void *
FlsData
0x17D0uint8_t
SafeThunkCall
void *
PreferredLanguages
0x17D1uint8_t[3]
BooleanSpare
0x17D8void *
UserPrefLanguages
0x17E0void *
MergedPrefLanguages
0x17E8unsigned long
MuiImpersonation
0x17ECvolatile uint16_t
CrossTebFlags
0x17EC:0x00uint16_t
SpareCrossTebBits
0x17EEuint16_t
SameTebFlags
0x17EE:0x00uint16_t
DbgSafeThunkCall
uint16_t
SafeThunkCall
0x17EE:0x01uint16_t
DbgInDebugPrint
uint16_t
InDebugPrint
0x17EE:0x02uint16_t
DbgHasFiberData
uint16_t
HasFiberData
0x17EE:0x03uint16_t
DbgSkipThreadAttach
uint16_t
SkipThreadAttach
0x17EE:0x04uint16_t
DbgWerInShipAssertCode
uint16_t
WerInShipAssertCode
0x17EE:0x05uint16_t
DbgRanProcessInit
uint16_t
RanProcessInit
0x17EE:0x06uint16_t
DbgClonedThread
uint16_t
ClonedThread
0x17EE:0x07uint16_t
DbgSuppressDebugMsg
uint16_t
SuppressDebugMsg
0x17EE:0x08uint16_t
RtlDisableUserStackWalk
uint16_t
DisableUserStackWalk
0x17EE:0x09uint16_t
RtlExceptionAttached
0x17EE:0x0Auint16_t
SpareSameTebBits
uint16_t
InitialThread
0x17EE:0x0Buint16_t
SpareSameTebBits
uint16_t
SessionAware
0x17EE:0x0Cuint16_t
DisabledStackCheck
uint16_t
SpareSameTebBits
uint16_t
LoadOwner
0x17EE:0x0Duint16_t
SpareSameTebBits
uint16_t
LoaderWorker
0x17EE:0x0Euint16_t
SpareSameTebBits
0x17F0void *
TxnScopeEnterCallback
0x17F8void *
TxnScopeExitCallback
0x1800void *
TxnScopeContext
0x1808unsigned long
LockCount
0x180Cunsigned long
ProcessRundown
unsigned long
SpareUlong0
long
WowTebOffset
0x1810uint64_t
LastSwitchTime
void *
ResourceRetValue
0x1818uint64_t
TotalSwitchOutTime
void *
ReservedForWdf
0x1820union _LARGE_INTEGER
WaitReasonBitMap
uint64_t
ReservedForCrt
0x1828struct _GUID
EffectiveContainerId