struct _PEB// Size=0x470
{
    unsigned char InheritedAddressSpace;// Offset=0x0 Size=0x1
    unsigned char ReadImageFileExecOptions;// Offset=0x1 Size=0x1
    unsigned char BeingDebugged;// Offset=0x2 Size=0x1
    unsigned char BitField;// Offset=0x3 Size=0x1
    unsigned char ImageUsesLargePages:1;// Offset=0x3 Size=0x1 BitOffset=0x0 BitSize=0x1
    unsigned char IsProtectedProcess:1;// Offset=0x3 Size=0x1 BitOffset=0x1 BitSize=0x1
    unsigned char IsImageDynamicallyRelocated:1;// Offset=0x3 Size=0x1 BitOffset=0x2 BitSize=0x1
    unsigned char SkipPatchingUser32Forwarders:1;// Offset=0x3 Size=0x1 BitOffset=0x3 BitSize=0x1
    unsigned char IsPackagedProcess:1;// Offset=0x3 Size=0x1 BitOffset=0x4 BitSize=0x1
    unsigned char IsAppContainer:1;// Offset=0x3 Size=0x1 BitOffset=0x5 BitSize=0x1
    unsigned char IsProtectedProcessLight:1;// Offset=0x3 Size=0x1 BitOffset=0x6 BitSize=0x1
    unsigned char IsLongPathAwareProcess:1;// Offset=0x3 Size=0x1 BitOffset=0x7 BitSize=0x1
    void * Mutant;// Offset=0x4 Size=0x4
    void * ImageBaseAddress;// Offset=0x8 Size=0x4
    struct _PEB_LDR_DATA * Ldr;// Offset=0xc Size=0x4
    struct _RTL_USER_PROCESS_PARAMETERS * ProcessParameters;// Offset=0x10 Size=0x4
    void * SubSystemData;// Offset=0x14 Size=0x4
    void * ProcessHeap;// Offset=0x18 Size=0x4
    struct _RTL_CRITICAL_SECTION * FastPebLock;// Offset=0x1c Size=0x4
    union _SLIST_HEADER * AtlThunkSListPtr;// Offset=0x20 Size=0x4
    void * IFEOKey;// Offset=0x24 Size=0x4
    unsigned long CrossProcessFlags;// Offset=0x28 Size=0x4
    unsigned long ProcessInJob:1;// Offset=0x28 Size=0x4 BitOffset=0x0 BitSize=0x1
    unsigned long ProcessInitializing:1;// Offset=0x28 Size=0x4 BitOffset=0x1 BitSize=0x1
    unsigned long ProcessUsingVEH:1;// Offset=0x28 Size=0x4 BitOffset=0x2 BitSize=0x1
    unsigned long ProcessUsingVCH:1;// Offset=0x28 Size=0x4 BitOffset=0x3 BitSize=0x1
    unsigned long ProcessUsingFTH:1;// Offset=0x28 Size=0x4 BitOffset=0x4 BitSize=0x1
    unsigned long ProcessPreviouslyThrottled:1;// Offset=0x28 Size=0x4 BitOffset=0x5 BitSize=0x1
    unsigned long ProcessCurrentlyThrottled:1;// Offset=0x28 Size=0x4 BitOffset=0x6 BitSize=0x1
    unsigned long ReservedBits0:25;// Offset=0x28 Size=0x4 BitOffset=0x7 BitSize=0x19
    void * KernelCallbackTable;// Offset=0x2c Size=0x4
    void * UserSharedInfoPtr;// Offset=0x2c Size=0x4
    unsigned long SystemReserved;// Offset=0x30 Size=0x4
    union _SLIST_HEADER * AtlThunkSListPtr32;// Offset=0x34 Size=0x4
    void * ApiSetMap;// Offset=0x38 Size=0x4
    unsigned long TlsExpansionCounter;// Offset=0x3c Size=0x4
    void * TlsBitmap;// Offset=0x40 Size=0x4
    unsigned long TlsBitmapBits[2];// Offset=0x44 Size=0x8
    void * ReadOnlySharedMemoryBase;// Offset=0x4c Size=0x4
    void * SharedData;// Offset=0x50 Size=0x4
    void ** ReadOnlyStaticServerData;// Offset=0x54 Size=0x4
    void * AnsiCodePageData;// Offset=0x58 Size=0x4
    void * OemCodePageData;// Offset=0x5c Size=0x4
    void * UnicodeCaseTableData;// Offset=0x60 Size=0x4
    unsigned long NumberOfProcessors;// Offset=0x64 Size=0x4
    unsigned long NtGlobalFlag;// Offset=0x68 Size=0x4
    union _LARGE_INTEGER CriticalSectionTimeout;// Offset=0x70 Size=0x8
    unsigned long HeapSegmentReserve;// Offset=0x78 Size=0x4
    unsigned long HeapSegmentCommit;// Offset=0x7c Size=0x4
    unsigned long HeapDeCommitTotalFreeThreshold;// Offset=0x80 Size=0x4
    unsigned long HeapDeCommitFreeBlockThreshold;// Offset=0x84 Size=0x4
    unsigned long NumberOfHeaps;// Offset=0x88 Size=0x4
    unsigned long MaximumNumberOfHeaps;// Offset=0x8c Size=0x4
    void ** ProcessHeaps;// Offset=0x90 Size=0x4
    void * GdiSharedHandleTable;// Offset=0x94 Size=0x4
    void * ProcessStarterHelper;// Offset=0x98 Size=0x4
    unsigned long GdiDCAttributeList;// Offset=0x9c Size=0x4
    struct _RTL_CRITICAL_SECTION * LoaderLock;// Offset=0xa0 Size=0x4
    unsigned long OSMajorVersion;// Offset=0xa4 Size=0x4
    unsigned long OSMinorVersion;// Offset=0xa8 Size=0x4
    unsigned short OSBuildNumber;// Offset=0xac Size=0x2
    unsigned short OSCSDVersion;// Offset=0xae Size=0x2
    unsigned long OSPlatformId;// Offset=0xb0 Size=0x4
    unsigned long ImageSubsystem;// Offset=0xb4 Size=0x4
    unsigned long ImageSubsystemMajorVersion;// Offset=0xb8 Size=0x4
    unsigned long ImageSubsystemMinorVersion;// Offset=0xbc Size=0x4
    unsigned long ActiveProcessAffinityMask;// Offset=0xc0 Size=0x4
    unsigned long GdiHandleBuffer[34];// Offset=0xc4 Size=0x88
    void  ( * PostProcessInitRoutine)();// Offset=0x14c Size=0x4
    void * TlsExpansionBitmap;// Offset=0x150 Size=0x4
    unsigned long TlsExpansionBitmapBits[32];// Offset=0x154 Size=0x80
    unsigned long SessionId;// Offset=0x1d4 Size=0x4
    union _ULARGE_INTEGER AppCompatFlags;// Offset=0x1d8 Size=0x8
    union _ULARGE_INTEGER AppCompatFlagsUser;// Offset=0x1e0 Size=0x8
    void * pShimData;// Offset=0x1e8 Size=0x4
    void * AppCompatInfo;// Offset=0x1ec Size=0x4
    struct _UNICODE_STRING CSDVersion;// Offset=0x1f0 Size=0x8
    struct _ACTIVATION_CONTEXT_DATA * ActivationContextData;// Offset=0x1f8 Size=0x4
    struct _ASSEMBLY_STORAGE_MAP * ProcessAssemblyStorageMap;// Offset=0x1fc Size=0x4
    struct _ACTIVATION_CONTEXT_DATA * SystemDefaultActivationContextData;// Offset=0x200 Size=0x4
    struct _ASSEMBLY_STORAGE_MAP * SystemAssemblyStorageMap;// Offset=0x204 Size=0x4
    unsigned long MinimumStackCommit;// Offset=0x208 Size=0x4
    struct _FLS_CALLBACK_INFO * FlsCallback;// Offset=0x20c Size=0x4
    struct _LIST_ENTRY FlsListHead;// Offset=0x210 Size=0x8
    void * FlsBitmap;// Offset=0x218 Size=0x4
    unsigned long FlsBitmapBits[4];// Offset=0x21c Size=0x10
    unsigned long FlsHighIndex;// Offset=0x22c Size=0x4
    void * WerRegistrationData;// Offset=0x230 Size=0x4
    void * WerShipAssertPtr;// Offset=0x234 Size=0x4
    void * pUnused;// Offset=0x238 Size=0x4
    void * pImageHeaderHash;// Offset=0x23c Size=0x4
    unsigned long TracingFlags;// Offset=0x240 Size=0x4
    unsigned long HeapTracingEnabled:1;// Offset=0x240 Size=0x4 BitOffset=0x0 BitSize=0x1
    unsigned long CritSecTracingEnabled:1;// Offset=0x240 Size=0x4 BitOffset=0x1 BitSize=0x1
    unsigned long LibLoaderTracingEnabled:1;// Offset=0x240 Size=0x4 BitOffset=0x2 BitSize=0x1
    unsigned long SpareTracingBits:29;// Offset=0x240 Size=0x4 BitOffset=0x3 BitSize=0x1d
    unsigned long long CsrServerReadOnlySharedMemoryBase;// Offset=0x248 Size=0x8
    unsigned long TppWorkerpListLock;// Offset=0x250 Size=0x4
    struct _LIST_ENTRY TppWorkerpList;// Offset=0x254 Size=0x8
    void * WaitOnAddressHashTable[128];// Offset=0x25c Size=0x200
    void * TelemetryCoverageHeader;// Offset=0x45c Size=0x4
    unsigned long CloudFileFlags;// Offset=0x460 Size=0x4
    unsigned long CloudFileDiagFlags;// Offset=0x464 Size=0x4
    char PlaceholderCompatibilityMode;// Offset=0x468 Size=0x1
    char PlaceholderCompatibilityModeReserved[7];// Offset=0x469 Size=0x7
};