Min version | XP | 2003/XP64 | 2003/XP64 SP1 | Vista | Vista SP1 | 7 | 8 Pre RTM | 8 Pre RTM | 8 | 8.1 | 8.1 Update 1 | 10 Pre RTM | 10 Pre RTM | 10 | 10 TH2 | ||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Max version | XP SP3 | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | |||||||||||||||||
Architecture | x86 | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x86 | x64 | x64 | x86 | x64 | x64 | x64 | x86 | x64 | x64 | |
x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | |||||||||||||||||||
0x0000 | struct _KEVENT Event | 0x0000 | |||||||||||||||||||
0x0010 | struct _LIST_ENTRY JobLinks | 0x0018 | |||||||||||||||||||
0x0018 | struct _LIST_ENTRY ProcessListHead | 0x0028 | |||||||||||||||||||
0x0020 | struct _ERESOURCE JobLock | 0x0038 | |||||||||||||||||||
0x0058 | union _LARGE_INTEGER TotalUserTime | 0x00A0 | |||||||||||||||||||
0x0060 | union _LARGE_INTEGER TotalKernelTime | 0x00A8 | |||||||||||||||||||
0x0068 | union _LARGE_INTEGER ThisPeriodTotalUserTime | union _LARGE_INTEGER TotalCycleTime | 0x00B0 | ||||||||||||||||||
0x0070 | union _LARGE_INTEGER ThisPeriodTotalKernelTime | union _LARGE_INTEGER ThisPeriodTotalUserTime | 0x00B8 | ||||||||||||||||||
0x0078 | unsigned long TotalPageFaultCount | union _LARGE_INTEGER ThisPeriodTotalKernelTime | 0x00C0 | ||||||||||||||||||
0x007C | unsigned long TotalProcesses | 0x00C4 | |||||||||||||||||||
0x0080 | unsigned long ActiveProcesses | uint64_t TotalContextSwitches | 0x00C8 | ||||||||||||||||||
0x0084 | unsigned long TotalTerminatedProcesses | 0x00CC | |||||||||||||||||||
0x0088 | union _LARGE_INTEGER PerProcessUserTimeLimit | unsigned long TotalPageFaultCount | 0x00D0 | ||||||||||||||||||
0x008C | unsigned long TotalProcesses | 0x00D4 | |||||||||||||||||||
0x0090 | union _LARGE_INTEGER PerJobUserTimeLimit | unsigned long ActiveProcesses | 0x00D8 | ||||||||||||||||||
0x0094 | unsigned long TotalTerminatedProcesses | 0x00DC | |||||||||||||||||||
0x0098 | unsigned long LimitFlags | uintptr_t MinimumWorkingSetSize | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | union _LARGE_INTEGER PerProcessUserTimeLimit | 0x00E0 | ||||||||||
0x009C | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | 0x00E8 | ||||||||||||||
0x00A0 | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | union _LARGE_INTEGER PerJobUserTimeLimit | 0x00E8 | ||||||||||||
0x00A0 | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | unsigned long LimitFlags | union _LARGE_INTEGER PerJobUserTimeLimit | 0x00F0 | ||||||||||||||
0x00A4 | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | 0x00F4 | ||||||||||||||||||
0x00A4 | unsigned long ActiveProcessLimit | 0x00F8 | |||||||||||||||||||
0x00A8 | unsigned long Affinity | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | uintptr_t MinimumWorkingSetSize | 0x00F0 | |||||||||||
0x00A8 | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | uint64_t MaximumWorkingSetSize | uint64_t MaximumWorkingSetSize | uint64_t MaximumWorkingSetSize | 0x00F8 | |||||||||||||||
0x00A8 | uintptr_t Affinity | 0x0100 | |||||||||||||||||||
0x00AC | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | uintptr_t MaximumWorkingSetSize | 0x00F8 | ||||||||||||
0x00AC | uint8_t PriorityClass | unsigned long MaximumWorkingSetSize | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | 0x0108 | |||||||||||||||
0x00B0 | unsigned long UIRestrictionsClass | unsigned long LimitFlags | unsigned long LimitFlags | unsigned long LimitFlags | unsigned long LimitFlags | unsigned long LimitFlags | unsigned long LimitFlags | unsigned long LimitFlags | unsigned long LimitFlags | 0x0100 | |||||||||||
0x00B0 | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | 0x010C | ||||||||||||||||||
0x00B0 | struct _JOB_ACCESS_STATE * AccessState | 0x0110 | |||||||||||||||||||
0x00B4 | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | unsigned long ActiveProcessLimit | 0x0104 | ||||||||||||
0x00B4 | unsigned long SecurityLimitFlags | unsigned long SecurityLimitFlags | unsigned long ActiveProcessLimit | 0x0110 | |||||||||||||||||
0x00B4 | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | 0x0118 | ||||||||||||||||||
0x00B4 | uint8_t PriorityClass | 0x0120 | |||||||||||||||||||
0x00B8 | void * Token | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | 0x0108 | |||||||||||
0x00B8 | void * Token | void * Token | 0x0118 | ||||||||||||||||||
0x00B8 | unsigned long EndOfJobTimeAction | unsigned long EndOfJobTimeAction | 0x011C | ||||||||||||||||||
0x00B8 | struct _JOB_ACCESS_STATE * AccessState | 0x0128 | |||||||||||||||||||
0x00BC | struct _PS_JOB_TOKEN_FILTER * Filter | struct _PS_JOB_TOKEN_FILTER * Filter | void * CompletionPort | void * CompletionPort | 0x0120 | ||||||||||||||||
0x00BC | struct _PS_JOB_TOKEN_FILTER * Filter | unsigned long UIRestrictionsClass | 0x0130 | ||||||||||||||||||
0x00C0 | unsigned long EndOfJobTimeAction | unsigned long EndOfJobTimeAction | void * CompletionKey | void * CompletionKey | 0x0128 | ||||||||||||||||
0x00C0 | unsigned long EndOfJobTimeAction | unsigned long EndOfJobTimeAction | 0x0134 | ||||||||||||||||||
0x00C4 | void * CompletionPort | void * CompletionPort | unsigned long SessionId | unsigned long SessionId | 0x0130 | ||||||||||||||||
0x00C4 | void * CompletionPort | void * CompletionPort | void * CompletionPort | struct _JOB_ACCESS_STATE * AccessState | 0x0138 | ||||||||||||||||
0x00C4 | uint8_t PriorityClass | uint8_t PriorityClass | 0x0150 | ||||||||||||||||||
0x00C4 | struct _JOB_ACCESS_STATE * AccessState | struct _JOB_ACCESS_STATE * AccessState | struct _JOB_ACCESS_STATE * AccessState | 0x01B0 | |||||||||||||||||
0x00C8 | unsigned long SchedulingClass | unsigned long SchedulingClass | 0x0134 | ||||||||||||||||||
0x00C8 | void * CompletionKey | void * CompletionKey | void * AccessStateQuotaReference | 0x0138 | |||||||||||||||||
0x00C8 | void * CompletionKey | void * CompletionKey | 0x0140 | ||||||||||||||||||
0x00C8 | struct _JOB_ACCESS_STATE * AccessState | struct _JOB_ACCESS_STATE * AccessState | 0x0158 | ||||||||||||||||||
0x00C8 | void * AccessStateQuotaReference | 0x01B8 | |||||||||||||||||||
0x00CC | unsigned long SessionId | unsigned long SessionId | 0x0140 | ||||||||||||||||||
0x00CC | unsigned long SessionId | unsigned long SessionId | 0x0148 | ||||||||||||||||||
0x00CC | unsigned long SessionId | void * AccessStateQuotaReference | void * AccessStateQuotaReference | unsigned long UIRestrictionsClass | 0x0160 | ||||||||||||||||
0x00CC | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | 0x01C0 | |||||||||||||||||
0x00D0 | unsigned long SchedulingClass | uint64_t ReadOperationCount | uint64_t ReadOperationCount | unsigned long EndOfJobTimeAction | 0x0138 | ||||||||||||||||
0x00D0 | unsigned long SchedulingClass | unsigned long SchedulingClass | 0x0144 | ||||||||||||||||||
0x00D0 | unsigned long SchedulingClass | unsigned long SchedulingClass | 0x014C | ||||||||||||||||||
0x00D0 | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | 0x0168 | ||||||||||||||||||
0x00D0 | unsigned long EndOfJobTimeAction | 0x01C4 | |||||||||||||||||||
0x00D4 | unsigned long EndOfJobTimeAction | unsigned long EndOfJobTimeAction | void * CompletionPort | 0x016C | |||||||||||||||||
0x00D4 | void * CompletionPort | void * CompletionPort | void * CompletionPort | 0x01C8 | |||||||||||||||||
0x00D8 | uint64_t WriteOperationCount | uint64_t WriteOperationCount | 0x0140 | ||||||||||||||||||
0x00D8 | uint64_t ReadOperationCount | uint64_t ReadOperationCount | void * CompletionKey | 0x0148 | |||||||||||||||||
0x00D8 | uint64_t ReadOperationCount | uint64_t ReadOperationCount | 0x0150 | ||||||||||||||||||
0x00D8 | void * CompletionPort | void * CompletionPort | 0x0170 | ||||||||||||||||||
0x00D8 | void * CompletionKey | void * CompletionKey | void * CompletionKey | 0x01D0 | |||||||||||||||||
0x00DC | void * CompletionKey | 0x0178 | |||||||||||||||||||
0x00E0 | uint64_t WriteOperationCount | uint64_t OtherOperationCount | uint64_t OtherOperationCount | uint64_t CompletionCount | 0x0148 | ||||||||||||||||
0x00E0 | uint64_t WriteOperationCount | uint64_t WriteOperationCount | 0x0150 | ||||||||||||||||||
0x00E0 | uint64_t WriteOperationCount | uint64_t WriteOperationCount | 0x0158 | ||||||||||||||||||
0x00E0 | uint64_t CompletionCount | uint64_t CompletionCount | 0x0180 | ||||||||||||||||||
0x00E0 | uint64_t CompletionCount | 0x01D8 | |||||||||||||||||||
0x00E8 | uint64_t OtherOperationCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | unsigned long SessionId | 0x0150 | ||||||||||||||||
0x00E8 | uint64_t OtherOperationCount | uint64_t OtherOperationCount | 0x0158 | ||||||||||||||||||
0x00E8 | uint64_t OtherOperationCount | uint64_t OtherOperationCount | 0x0160 | ||||||||||||||||||
0x00E8 | unsigned long SessionId | unsigned long SessionId | 0x0188 | ||||||||||||||||||
0x00E8 | unsigned long SessionId | 0x01E0 | |||||||||||||||||||
0x00EC | unsigned long SchedulingClass | unsigned long SchedulingClass | 0x018C | ||||||||||||||||||
0x00EC | unsigned long SchedulingClass | 0x01E4 | |||||||||||||||||||
0x00F0 | uint64_t WriteTransferCount | uint64_t WriteTransferCount | 0x0158 | ||||||||||||||||||
0x00F0 | uint64_t ReadTransferCount | uint64_t ReadTransferCount | 0x0160 | ||||||||||||||||||
0x00F0 | uint64_t ReadTransferCount | uint64_t ReadTransferCount | 0x0168 | ||||||||||||||||||
0x00F0 | uint64_t ReadTransferCount | uint64_t ReadOperationCount | uint64_t ReadOperationCount | uint64_t ReadOperationCount | 0x0190 | ||||||||||||||||
0x00F0 | uint64_t ReadOperationCount | uint64_t ReadOperationCount | uint64_t ReadOperationCount | 0x01E8 | |||||||||||||||||
0x00F8 | uint64_t OtherTransferCount | uint64_t OtherTransferCount | 0x0160 | ||||||||||||||||||
0x00F8 | uint64_t WriteTransferCount | uint64_t WriteTransferCount | 0x0168 | ||||||||||||||||||
0x00F8 | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteOperationCount | 0x0170 | ||||||||||||||||
0x00F8 | uint64_t WriteOperationCount | uint64_t WriteOperationCount | 0x0198 | ||||||||||||||||||
0x00F8 | uint64_t WriteOperationCount | 0x01F0 | |||||||||||||||||||
0x0100 | uintptr_t ProcessMemoryLimit | uintptr_t ProcessMemoryLimit | 0x0168 | ||||||||||||||||||
0x0100 | uint64_t OtherTransferCount | uint64_t OtherTransferCount | uint64_t OtherOperationCount | 0x0170 | |||||||||||||||||
0x0100 | uint64_t OtherTransferCount | uint64_t OtherTransferCount | 0x0178 | ||||||||||||||||||
0x0100 | uint64_t OtherOperationCount | uint64_t OtherOperationCount | 0x01A0 | ||||||||||||||||||
0x0100 | uint64_t OtherOperationCount | uint64_t OtherOperationCount | uint64_t OtherOperationCount | uint64_t OtherOperationCount | uint64_t OtherOperationCount | uint64_t OtherOperationCount | 0x01F8 | ||||||||||||||
0x0104 | uintptr_t JobMemoryLimit | 0x0170 | |||||||||||||||||||
0x0108 | struct _IO_COUNTERS IoInfo | struct _IO_COUNTERS IoInfo | uintptr_t PeakProcessMemoryUsed | uintptr_t PeakProcessMemoryUsed | 0x0178 | ||||||||||||||||
0x0108 | uintptr_t ProcessMemoryLimit | uintptr_t ProcessMemoryLimit | 0x0180 | ||||||||||||||||||
0x0108 | struct _IO_COUNTERS IoInfo | uint64_t ReadTransferCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | 0x01A8 | ||||||||||||||||
0x0108 | uint64_t ReadTransferCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | 0x0200 | ||||||||||||||
0x010C | uintptr_t PeakJobMemoryUsed | uintptr_t PeakJobMemoryUsed | 0x0180 | ||||||||||||||||||
0x010C | uintptr_t JobMemoryLimit | uintptr_t JobMemoryLimit | 0x0188 | ||||||||||||||||||
0x0110 | uintptr_t CurrentJobMemoryUsed | uintptr_t CurrentJobMemoryUsed | uint64_t WriteTransferCount | 0x0188 | |||||||||||||||||
0x0110 | uintptr_t PeakProcessMemoryUsed | uintptr_t PeakProcessMemoryUsed | 0x0190 | ||||||||||||||||||
0x0110 | uint64_t WriteTransferCount | uint64_t WriteTransferCount | 0x01B0 | ||||||||||||||||||
0x0110 | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteTransferCount | 0x0208 | ||||||||||||||
0x0114 | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _EX_PUSH_LOCK MemoryLimitsLock | 0x0190 | ||||||||||||||||||
0x0114 | uintptr_t PeakJobMemoryUsed | uintptr_t PeakJobMemoryUsed | 0x0198 | ||||||||||||||||||
0x0118 | struct _LIST_ENTRY JobSetLinks | struct _LIST_ENTRY JobSetLinks | uint64_t OtherTransferCount | 0x0198 | |||||||||||||||||
0x0118 | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | 0x01A0 | ||||||||||||||||||
0x0118 | uint64_t OtherTransferCount | uint64_t OtherTransferCount | 0x01B8 | ||||||||||||||||||
0x0118 | uint64_t OtherTransferCount | 0x0210 | |||||||||||||||||||
0x0120 | unsigned long MemberLevel | unsigned long MemberLevel | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _PROCESS_DISK_COUNTERS DiskIoInfo | 0x01A8 | |||||||||||||||
0x0120 | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | 0x01C0 | ||||||||||||||||||
0x0120 | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | 0x0218 | ||||||||||||||
0x0124 | unsigned long JobFlags | unsigned long JobFlags | 0x01AC | ||||||||||||||||||
0x0124 | struct _LIST_ENTRY JobSetLinks | struct _JOB_ACCESS_STATE * AccessState | struct _JOB_ACCESS_STATE * AccessState | struct _JOB_ACCESS_STATE * AccessState | 0x01B0 | ||||||||||||||||
0x012C | unsigned long MemberLevel | 0x01C0 | |||||||||||||||||||
0x0130 | unsigned long JobFlags | 0x01C4 | |||||||||||||||||||
0x0138 | uintptr_t ProcessMemoryLimit | 0x01A8 | |||||||||||||||||||
0x013C | uintptr_t JobMemoryLimit | 0x01B0 | |||||||||||||||||||
0x0140 | uintptr_t PeakProcessMemoryUsed | 0x01B8 | |||||||||||||||||||
0x0144 | uintptr_t PeakJobMemoryUsed | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | unsigned long UIRestrictionsClass | 0x01C0 | ||||||||||||||||
0x0148 | uintptr_t CurrentJobMemoryUsed | uintptr_t CurrentJobMemoryUsed | unsigned long ProcessMemoryLimit | void * CompletionPort | void * CompletionPort | void * CompletionPort | 0x01C8 | ||||||||||||||
0x0148 | uintptr_t ProcessMemoryLimit | uintptr_t ProcessMemoryLimit | uint64_t ReadOperationCount | uint64_t ReadOperationCount | uint64_t ReadOperationCount | 0x01E8 | |||||||||||||||
0x0148 | uintptr_t ProcessMemoryLimit | 0x0240 | |||||||||||||||||||
0x014C | struct _KGUARDED_MUTEX MemoryLimitsLock | struct _KGUARDED_MUTEX MemoryLimitsLock | void * CompletionKey | void * CompletionKey | void * CompletionKey | 0x01D0 | |||||||||||||||
0x014C | uintptr_t JobMemoryLimit | uintptr_t JobMemoryLimit | 0x01F0 | ||||||||||||||||||
0x014C | struct _FAST_MUTEX MemoryLimitsLock | uintptr_t JobMemoryLimit | 0x0248 | ||||||||||||||||||
0x0150 | uintptr_t PeakProcessMemoryUsed | uintptr_t PeakProcessMemoryUsed | uintptr_t PeakProcessMemoryUsed | 0x01F8 | |||||||||||||||||
0x0150 | uintptr_t PeakProcessMemoryUsed | uintptr_t PeakProcessMemoryUsed | uintptr_t JobTotalMemoryLimit | 0x0250 | |||||||||||||||||
0x0154 | uintptr_t PeakJobMemoryUsed | uintptr_t PeakJobMemoryUsed | uintptr_t PeakJobMemoryUsed | uint64_t ReadTransferCount | uint64_t ReadTransferCount | uint64_t ReadTransferCount | 0x0200 | ||||||||||||||
0x0154 | uintptr_t PeakJobMemoryUsed | uintptr_t PeakProcessMemoryUsed | 0x0258 | ||||||||||||||||||
0x0158 | struct _KAFFINITY_EX EffectiveAffinity | struct _KAFFINITY_EX EffectiveAffinity | struct _KAFFINITY_EX EffectiveAffinity | uint64_t WriteTransferCount | uint64_t WriteTransferCount | uint64_t WriteTransferCount | 0x0208 | ||||||||||||||
0x0158 | struct _KAFFINITY_EX EffectiveAffinity | uintptr_t PeakJobMemoryUsed | 0x0260 | ||||||||||||||||||
0x015C | struct _KAFFINITY_EX EffectiveAffinity | 0x0268 | |||||||||||||||||||
0x0168 | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | uint64_t PeakProcessMemoryUsed | uint64_t PeakProcessMemoryUsed | uint64_t JobTotalMemoryLimit | uint64_t JobTotalMemoryLimit | 0x0250 | |||||||||||||
0x0168 | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | 0x0308 | ||||||||||||||||
0x0168 | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | 0x0310 | ||||||||||||||||||
0x016C | struct _LIST_ENTRY JobSetLinks | struct _LIST_ENTRY JobSetLinks | 0x0208 | ||||||||||||||||||
0x0170 | uintptr_t EffectiveMinimumWorkingSetSize | uintptr_t EffectiveMinimumWorkingSetSize | 0x0258 | ||||||||||||||||||
0x0170 | uintptr_t EffectiveMinimumWorkingSetSize | uintptr_t EffectiveMinimumWorkingSetSize | uintptr_t EffectiveMinimumWorkingSetSize | uintptr_t EffectiveMinimumWorkingSetSize | 0x0310 | ||||||||||||||||
0x0170 | uintptr_t EffectiveMinimumWorkingSetSize | uintptr_t EffectiveMinimumWorkingSetSize | 0x0318 | ||||||||||||||||||
0x0174 | unsigned long MemberLevel | unsigned long MemberLevel | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | struct _PROCESS_DISK_COUNTERS DiskIoInfo | 0x0218 | |||||||||||||||
0x0174 | uintptr_t EffectiveMaximumWorkingSetSize | uintptr_t EffectiveMaximumWorkingSetSize | 0x0260 | ||||||||||||||||||
0x0174 | uintptr_t EffectiveMaximumWorkingSetSize | uintptr_t EffectiveMaximumWorkingSetSize | uintptr_t EffectiveMaximumWorkingSetSize | uintptr_t EffectiveMaximumWorkingSetSize | 0x0318 | ||||||||||||||||
0x0174 | unsigned long MemberLevel | uintptr_t EffectiveMaximumWorkingSetSize | uintptr_t EffectiveMaximumWorkingSetSize | 0x0320 | |||||||||||||||||
0x0178 | unsigned long JobFlags | unsigned long JobFlags | 0x021C | ||||||||||||||||||
0x0178 | uintptr_t EffectiveProcessMemoryLimit | uintptr_t EffectiveProcessMemoryLimit | 0x0268 | ||||||||||||||||||
0x0178 | unsigned long JobFlags | uintptr_t EffectiveProcessMemoryLimit | uintptr_t EffectiveProcessMemoryLimit | uintptr_t EffectiveProcessMemoryLimit | uintptr_t EffectiveProcessMemoryLimit | uint64_t EffectiveMaximumWorkingSetSize | uint64_t EffectiveMaximumWorkingSetSize | 0x0320 | |||||||||||||
0x0178 | uintptr_t EffectiveProcessMemoryLimit | 0x0328 | |||||||||||||||||||
0x017C | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | 0x0270 | ||||||||||||||||||
0x017C | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | 0x0328 | ||||||||||||||||
0x017C | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | 0x0330 | ||||||||||||||||||
0x0180 | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | 0x0278 | ||||||||||||||||||
0x0180 | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | 0x0330 | ||||||||||||||
0x0180 | struct _EJOB * EffectivePerProcessUserTimeLimitJob | 0x0338 | |||||||||||||||||||
0x0184 | unsigned long EffectiveLimitFlags | unsigned long EffectiveLimitFlags | unsigned long EffectiveLimitFlags | 0x0280 | |||||||||||||||||
0x0184 | unsigned long EffectiveLimitFlags | unsigned long EffectiveLimitFlags | unsigned long EffectiveLimitFlags | unsigned long EffectiveLimitFlags | 0x0338 | ||||||||||||||||
0x0184 | struct _EJOB * EffectiveDiskIoRateLimitJob | 0x0340 | |||||||||||||||||||
0x0188 | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | 0x0284 | |||||||||||||||||
0x0188 | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | 0x033C | ||||||||||||||||
0x0188 | struct _EJOB * EffectiveNetIoRateLimitJob | 0x0348 | |||||||||||||||||||
0x018C | unsigned long EffectiveFreezeCount | unsigned long EffectiveFreezeCount | 0x0288 | ||||||||||||||||||
0x018C | unsigned long EffectiveFreezeCount | unsigned long EffectiveFreezeCount | unsigned long EffectiveFreezeCount | unsigned long EffectiveFreezeCount | 0x0340 | ||||||||||||||||
0x018C | struct _EJOB * EffectiveHeapAttributionJob | 0x0350 | |||||||||||||||||||
0x0190 | unsigned long EffectiveIdleAwareCount | unsigned long EffectiveIdleAwareCount | 0x028C | ||||||||||||||||||
0x0190 | unsigned long EffectiveBackgroundCount | unsigned long EffectiveBackgroundCount | unsigned long EffectiveBackgroundCount | unsigned long EffectiveBackgroundCount | 0x0344 | ||||||||||||||||
0x0190 | unsigned long EffectiveLimitFlags | 0x0358 | |||||||||||||||||||
0x0194 | uint8_t EffectivePriorityClass | uint8_t EffectivePriorityClass | 0x0290 | ||||||||||||||||||
0x0194 | unsigned long EffectiveSwapCount | unsigned long EffectiveSwapCount | unsigned long EffectiveSwapCount | unsigned long EffectiveSwapCount | struct _EJOB * EffectiveHeapAttributionJob | struct _EJOB * EffectiveNetIoRateLimitJob | struct _EJOB * EffectiveNetIoRateLimitJob | 0x0348 | |||||||||||||
0x0194 | unsigned long EffectiveBackgroundCount | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | unsigned long EffectiveSchedulingClass | 0x035C | ||||||||||||||||
0x0195 | uint8_t[3] Reserved | 0x0291 | |||||||||||||||||||
0x0198 | unsigned long CompletionFilter | unsigned long CompletionFilter | unsigned long EffectiveNotificationLimitCount | 0x0294 | |||||||||||||||||
0x0198 | unsigned long EffectiveNotificationLimitCount | unsigned long EffectiveNotificationLimitCount | unsigned long EffectiveNotificationLimitCount | unsigned long EffectiveNotificationLimitCount | 0x034C | ||||||||||||||||
0x0198 | unsigned long EffectiveSwapCount | unsigned long EffectiveFreezeCount | 0x0360 | ||||||||||||||||||
0x019C | uint8_t EffectivePriorityClass | uint8_t EffectivePriorityClass | uint8_t EffectivePriorityClass | uint8_t EffectivePriorityClass | unsigned long EffectiveLimitFlags | struct _EJOB * EffectiveHeapAttributionJob | struct _EJOB * EffectiveHeapAttributionJob | 0x0350 | |||||||||||||
0x019C | uint8_t EffectivePriorityClass | unsigned long EffectiveNotificationLimitCount | unsigned long EffectiveBackgroundCount | unsigned long EffectiveBackgroundCount | unsigned long EffectiveBackgroundCount | 0x0364 | |||||||||||||||
0x019D | uint8_t PriorityClass | 0x0351 | |||||||||||||||||||
0x019E | uint8_t[2] Reserved1 | 0x0352 | |||||||||||||||||||
0x01A0 | struct _WNF_STATE_NAME WakeChannel | unsigned long CompletionFilter | 0x0298 | ||||||||||||||||||
0x01A0 | struct _JOBOBJECT_WAKE_INFORMATION WakeInfo | struct _JOBOBJECT_WAKE_INFORMATION WakeInfo | 0x0298 | ||||||||||||||||||
0x01A0 | unsigned long CompletionFilter | unsigned long CompletionFilter | unsigned long CompletionFilter | unsigned long CompletionFilter | unsigned long EffectiveSchedulingClass | 0x0354 | |||||||||||||||
0x01A0 | uint8_t EffectivePriorityClass | unsigned long EffectiveSwapCount | unsigned long EffectiveSwapCount | unsigned long EffectiveSwapCount | 0x0368 | ||||||||||||||||
uint8_t PriorityClass | 0x0369 | ||||||||||||||||||||
uint8_t[2] Reserved1 | 0x036A | ||||||||||||||||||||
0x01A4 | unsigned long CompletionFilter | unsigned long EffectiveNotificationLimitCount | 0x036C | ||||||||||||||||||
0x01A8 | struct _WNF_STATE_NAME WakeChannel | unsigned long EffectiveFreezeCount | unsigned long EffectiveLimitFlags | unsigned long EffectiveLimitFlags | 0x0358 | ||||||||||||||||
0x01A8 | struct _PS_WAKE_INFORMATION WakeInfo | struct _PS_WAKE_INFORMATION WakeInfo | struct _PS_WAKE_INFORMATION WakeInfo | struct _PS_WAKE_INFORMATION WakeInfo | 0x0358 | ||||||||||||||||
struct _PS_WAKE_INFORMATION WakeInfo | 0x0370 | ||||||||||||||||||||
0x01A8 | struct _WNF_STATE_NAME WakeChannel | uint8_t EffectivePriorityClass | 0x0370 | ||||||||||||||||||
0x01A9 | uint8_t PriorityClass | 0x0371 | |||||||||||||||||||
0x01AA | uint8_t[2] Reserved1 | uint8_t NestingDepth | 0x0372 | ||||||||||||||||||
0x01AB | uint8_t[1] Reserved1 | 0x0373 | |||||||||||||||||||
0x01AC | unsigned long CompletionFilter | 0x0374 | |||||||||||||||||||
0x01B0 | struct _WNF_STATE_NAME WakeChannel | 0x0378 | |||||||||||||||||||
0x01B0 | struct _PS_WAKE_INFORMATION WakeInfo | struct _PS_WAKE_INFORMATION WakeInfo | struct _PS_WAKE_INFORMATION WakeInfo | 0x0378 | |||||||||||||||||
0x01C8 | struct _JOBOBJECT_WAKE_FILTER WakeFilter | 0x02C0 | |||||||||||||||||||
0x01D0 | struct _EJOB * NotificationLink | 0x02C8 | |||||||||||||||||||
0x01D4 | struct _JOB_NOTIFICATION_LIMITS * NotificationLimits | 0x02D0 | |||||||||||||||||||
0x01D8 | void * NotificationLimitsQuotaReference | 0x02D8 | |||||||||||||||||||
0x01DC | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | 0x02E0 | |||||||||||||||||||
0x01E0 | unsigned long NotificationLimitFlags | unsigned long NotificationLimitFlags | 0x02E8 | ||||||||||||||||||
0x01E0 | struct _JOBOBJECT_WAKE_FILTER WakeFilter | struct _JOBOBJECT_WAKE_FILTER WakeFilter | struct _JOBOBJECT_WAKE_FILTER WakeFilter | 0x0390 | |||||||||||||||||
0x01E4 | unsigned long ViolationLimitFlags | 0x02EC | |||||||||||||||||||
0x01E8 | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | 0x02F0 | ||||||||||||||||||
0x01E8 | unsigned long LowEdgeLatchFilter | unsigned long LowEdgeLatchFilter | unsigned long LowEdgeLatchFilter | 0x0398 | |||||||||||||||||
0x01E8 | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | unsigned long LowEdgeLatchFilter | struct _JOBOBJECT_WAKE_FILTER WakeFilter | struct _JOBOBJECT_WAKE_FILTER WakeFilter | struct _JOBOBJECT_WAKE_FILTER WakeFilter | 0x03B0 | |||||||||||||||
0x01EC | void * EffectiveSchedulingGroup | void * EffectiveSchedulingGroup | 0x02F8 | ||||||||||||||||||
0x01EC | unsigned long OwnedHighEdgeFilters | 0x039C | |||||||||||||||||||
0x01F0 | unsigned long ProcessListCount | unsigned long ProcessListCount | 0x0300 | ||||||||||||||||||
0x01F0 | struct _EJOB * NotificationLink | struct _JOBOBJECT_WAKE_FILTER WakeFilter | struct _EJOB * NotificationLink | 0x03A0 | |||||||||||||||||
unsigned long OwnedHighEdgeFilters | 0x03B4 | ||||||||||||||||||||
0x01F0 | void * NotificationInfoQuotaReference | struct _EJOB * NotificationLink | unsigned long LowEdgeLatchFilter | 0x03B8 | |||||||||||||||||
0x01F4 | struct _JOBOBJECT_WAKE_FILTER WakeFilter | unsigned long OwnedHighEdgeFilters | 0x03BC | ||||||||||||||||||
0x01F8 | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | 0x0308 | ||||||||||||||||
0x01F8 | unsigned long LowEdgeLatchFilter | unsigned long LowEdgeLatchFilter | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | struct _JOBOBJECT_WAKE_FILTER WakeFilter | 0x03A8 | ||||||||||||||
0x01F8 | struct _EJOB * NotificationLink | 0x03C0 | |||||||||||||||||||
0x01FC | unsigned long LowEdgeLatchFilter | unsigned long OwnedHighEdgeFilters | 0x03AC | ||||||||||||||||||
0x0200 | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _EX_PUSH_LOCK MemoryLimitsLock | unsigned long ShadowActiveProcessCount | uint64_t EffectiveMinimumWorkingSetSize | uint64_t EffectiveMinimumWorkingSetSize | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | 0x0310 | |||||||||||||
0x0200 | struct _EJOB * NotificationLink | struct _EJOB * NotificationLink | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | 0x03B0 | ||||||||||||||||
0x0200 | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | 0x03C8 | |||||||||||||||
0x0204 | struct _LIST_ENTRY SiblingJobLinks | struct _LIST_ENTRY SiblingJobLinks | uint64_t EffectiveMaximumWorkingSetSize | uint64_t EffectiveMaximumWorkingSetSize | uint64_t EffectiveMinimumWorkingSetSize | uint64_t EffectiveMinimumWorkingSetSize | 0x0318 | ||||||||||||||
0x0204 | void * NotificationInfoQuotaReference | void * NotificationInfoQuotaReference | 0x03B8 | ||||||||||||||||||
0x0208 | uint64_t CurrentJobMemoryUsed | uint64_t CurrentJobMemoryUsed | 0x03B8 | ||||||||||||||||||
0x0208 | uint64_t CurrentJobMemoryUsed | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | uint64_t CurrentJobMemoryUsed | struct _EJOB * NotificationLink | struct _EJOB * NotificationLink | 0x03C0 | |||||||||||||
0x0208 | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | 0x03D0 | |||||||||||||||||||
0x020C | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY ChildJobListHead | struct _EJOB * EffectiveProcessMemoryLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | uint64_t EffectiveProcessMemoryLimit | uint64_t EffectiveProcessMemoryLimit | 0x0328 | ||||||||||||||
0x020C | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | 0x03C8 | ||||||||||||||||||
0x020C | void * NotificationInfoQuotaReference | 0x03D8 | |||||||||||||||||||
0x0210 | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | 0x03C0 | ||||||||||||||||||
0x0210 | void * EffectiveSchedulingGroup | void * EffectiveSchedulingGroup | void * EffectiveSchedulingGroup | void * NotificationInfoQuotaReference | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | 0x03D0 | ||||||||||||||
0x0210 | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | 0x03E0 | |||||||||||||||||||
0x0214 | struct _EJOB * ParentJob | struct _EJOB * ParentJob | unsigned long EffectiveLimitFlags | struct _EJOB * EffectiveDiskIoRateLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | 0x0338 | ||||||||||||||
0x0214 | void * NotificationInfoQuotaReference | void * NotificationInfoQuotaReference | 0x03C8 | ||||||||||||||||||
0x0214 | void * NotificationInfoQuotaReference | struct _LIST_ENTRY SiblingJobLinks | void * EffectiveSchedulingGroup | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | 0x03E8 | ||||||||||||||||
0x0218 | struct _EJOB * volatile RootJob | struct _EJOB * volatile RootJob | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | unsigned long EffectiveFreezeCount | struct _EJOB * EffectiveNetIoRateLimitJob | struct _EJOB * EffectiveDiskIoRateLimitJob | struct _EJOB * EffectiveDiskIoRateLimitJob | 0x0340 | |||||||||||||
0x0218 | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | 0x03D0 | ||||||||||||||||||
0x0218 | uint64_t ReadyTime | uint64_t ReadyTime | uint64_t ReadyTime | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | void * NotificationInfoQuotaReference | void * NotificationInfoQuotaReference | 0x03D8 | ||||||||||||||
0x0218 | uint64_t ReadyTime | void * EffectiveSchedulingGroup | 0x03F0 | ||||||||||||||||||
0x021C | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY IteratorListHead | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | 0x0348 | |||||||||||||||||
0x021C | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | 0x03D8 | |||||||||||||||||||
0x0220 | void * EffectiveSchedulingGroup | void * EffectiveSchedulingGroup | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | 0x03E0 | ||||||||||||
0x0220 | uint64_t ReadyTime | uint64_t ReadyTime | 0x03F8 | ||||||||||||||||||
0x0224 | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _LIST_ENTRY SiblingJobLinks | struct _LIST_ENTRY SiblingJobLinks | 0x03E8 | |||||||||||||||||
0x0228 | struct _KPROCESS_VALUES Accounting | struct _KPROCESS_VALUES Accounting | 0x0358 | ||||||||||||||||||
0x0228 | struct _LIST_ENTRY SiblingJobLinks | struct _LIST_ENTRY SiblingJobLinks | 0x03F0 | ||||||||||||||||||
0x0228 | struct _LIST_ENTRY SiblingJobLinks | struct _LIST_ENTRY SiblingJobLinks | struct _EX_PUSH_LOCK MemoryLimitsLock | 0x0400 | |||||||||||||||||
0x022C | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY ChildJobListHead | struct _EX_PUSH_LOCK MemoryLimitsLock | uint64_t ReadyTime | uint64_t ReadyTime | 0x03F8 | ||||||||||||||
0x022C | struct _LIST_ENTRY SiblingJobLinks | struct _LIST_ENTRY SiblingJobLinks | 0x0408 | ||||||||||||||||||
0x0230 | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY ChildJobListHead | 0x0400 | ||||||||||||||||||
0x0234 | struct _EJOB * ParentJob | struct _EJOB * ParentJob | struct _EJOB * ParentJob | struct _LIST_ENTRY SiblingJobLinks | struct _LIST_ENTRY SiblingJobLinks | 0x0408 | |||||||||||||||
0x0234 | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY ChildJobListHead | 0x0418 | ||||||||||||||||||
0x0238 | struct _EJOB * ParentJob | struct _EJOB * volatile RootJob | struct _LIST_ENTRY ChildJobListHead | 0x0410 | |||||||||||||||||
0x023C | struct _EJOB * volatile RootJob | struct _EJOB * volatile RootJob | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY ChildJobListHead | 0x0418 | |||||||||||||
0x023C | struct _EJOB * ParentJob | 0x0428 | |||||||||||||||||||
0x0240 | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY IteratorListHead | struct _EJOB * ParentJob | 0x0420 | |||||||||||||||||
0x0240 | struct _LIST_ENTRY IteratorListHead | struct _EJOB * * Ancestors | struct _LIST_ENTRY IteratorListHead | struct _EJOB * volatile RootJob | 0x0430 | ||||||||||||||||
0x0244 | uintptr_t AncestorCount | uintptr_t AncestorCount | uintptr_t AncestorCount | struct _EJOB * volatile RootJob | struct _EJOB * ParentJob | struct _EJOB * ParentJob | 0x0428 | ||||||||||||||
0x0244 | struct _EPROCESS_VALUES Accounting | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY IteratorListHead | 0x0438 | ||||||||||||||||
0x0248 | struct _EPROCESS_VALUES Accounting | struct _EPROCESS_VALUES Accounting | struct _EJOB * * Ancestors | 0x0430 | |||||||||||||||||
uint64_t AncestorCount | 0x0440 | ||||||||||||||||||||
0x024C | struct _EJOB * * Ancestors | uintptr_t AncestorCount | 0x0448 | ||||||||||||||||||
0x0250 | struct _EPROCESS_VALUES Accounting | struct _EPROCESS_VALUES Accounting | 0x0438 | ||||||||||||||||||
0x0250 | struct _EPROCESS_VALUES Accounting | struct _EJOB * * Ancestors | 0x0450 | ||||||||||||||||||
0x0250 | void * SessionObject | 0x0450 | |||||||||||||||||||
0x0258 | struct _EPROCESS_VALUES Accounting | struct _EPROCESS_VALUES Accounting | struct _EPROCESS_VALUES Accounting | 0x0458 | |||||||||||||||||
0x0278 | uintptr_t TimerListLock | 0x03A8 | |||||||||||||||||||
0x027C | struct _LIST_ENTRY TimerListHead | 0x03B0 | |||||||||||||||||||
0x0284 | unsigned long JobFlags | 0x03C0 | |||||||||||||||||||
0x0284:0x00 | unsigned long CloseDone | 0x03C0:0x00 | |||||||||||||||||||
0x0284:0x01 | unsigned long MultiGroup | 0x03C0:0x01 | |||||||||||||||||||
0x0284:0x02 | unsigned long OutstandingNotification | 0x03C0:0x02 | |||||||||||||||||||
0x0284:0x03 | unsigned long NotificationInProgress | 0x03C0:0x03 | |||||||||||||||||||
0x0284:0x04 | unsigned long UILimits | 0x03C0:0x04 | |||||||||||||||||||
0x0284:0x05 | unsigned long CpuRateControlActive | 0x03C0:0x05 | |||||||||||||||||||
0x0284:0x06 | unsigned long OwnCpuRateControl | 0x03C0:0x06 | |||||||||||||||||||
0x0284:0x07 | unsigned long Terminating | 0x03C0:0x07 | |||||||||||||||||||
0x0284:0x08 | unsigned long WorkingSetLock | 0x03C0:0x08 | |||||||||||||||||||
0x0284:0x09 | unsigned long JobFrozen | 0x03C0:0x09 | |||||||||||||||||||
0x0284:0x0A | unsigned long IdleAware | 0x03C0:0x0A | |||||||||||||||||||
0x0284:0x0B | unsigned long WakeNotificationAllocated | 0x03C0:0x0B | |||||||||||||||||||
0x0284:0x0C | unsigned long WakeNotificationEnabled | 0x03C0:0x0C | |||||||||||||||||||
0x0284:0x0D | unsigned long WakeNotificationPending | 0x03C0:0x0D | |||||||||||||||||||
0x0284:0x0E | unsigned long LimitNotificationRequired | 0x03C0:0x0E | |||||||||||||||||||
0x0284:0x0F | unsigned long ZeroCountNotificationRequired | 0x03C0:0x0F | |||||||||||||||||||
0x0284:0x10 | unsigned long CycleTimeNotificationRequired | 0x03C0:0x10 | |||||||||||||||||||
0x0284:0x11 | unsigned long CycleTimeNotificationPending | 0x03C0:0x11 | |||||||||||||||||||
0x0284:0x12 | unsigned long TimersVirtualized | 0x03C0:0x12 | |||||||||||||||||||
0x0284:0x13 | unsigned long SpareJobFlags | 0x03C0:0x13 | |||||||||||||||||||
0x0298 | unsigned long SequenceNumber | unsigned long ShadowActiveProcessCount | 0x0480 | ||||||||||||||||||
0x029C | unsigned long TimerListLock | unsigned long SequenceNumber | 0x0484 | ||||||||||||||||||
0x02A0 | struct _LIST_ENTRY TimerListHead | uintptr_t TimerListLock | uintptr_t TimerListLock | unsigned long ShadowActiveProcessCount | 0x0488 | ||||||||||||||||
0x02A4 | unsigned long SequenceNumber | unsigned long SequenceNumber | unsigned long SequenceNumber | 0x048C | |||||||||||||||||
0x02A4 | struct _LIST_ENTRY TimerListHead | struct _LIST_ENTRY TimerListHead | 0x0490 | ||||||||||||||||||
0x02A8 | unsigned long JobFlags | uintptr_t TimerListLock | uintptr_t TimerListLock | uintptr_t TimerListLock | 0x0490 | ||||||||||||||||
0x02A8 | unsigned long CloseDone | unsigned long ShadowActiveProcessCount | 0x04A8 | ||||||||||||||||||
0x02A8:0x01 | unsigned long MultiGroup | ||||||||||||||||||||
0x02A8:0x02 | unsigned long OutstandingNotification | ||||||||||||||||||||
0x02A8:0x03 | unsigned long NotificationInProgress | ||||||||||||||||||||
0x02A8:0x04 | unsigned long UILimits | ||||||||||||||||||||
0x02A8:0x05 | unsigned long CpuRateControlActive | ||||||||||||||||||||
0x02A8:0x06 | unsigned long OwnCpuRateControl | ||||||||||||||||||||
0x02A8:0x07 | unsigned long Terminating | ||||||||||||||||||||
0x02A8:0x08 | unsigned long WorkingSetLock | ||||||||||||||||||||
0x02A8:0x09 | unsigned long JobFrozen | ||||||||||||||||||||
0x02A8:0x0A | unsigned long Background | ||||||||||||||||||||
0x02A8:0x0B | unsigned long WakeNotificationAllocated | ||||||||||||||||||||
0x02A8:0x0C | unsigned long WakeNotificationEnabled | ||||||||||||||||||||
0x02A8:0x0D | unsigned long WakeNotificationPending | ||||||||||||||||||||
0x02A8:0x0E | unsigned long LimitNotificationRequired | ||||||||||||||||||||
0x02A8:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||||||||||||
0x02A8:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||||||||||||
0x02A8:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||||||||||||
0x02A8:0x12 | unsigned long TimersVirtualized | ||||||||||||||||||||
0x02A8:0x13 | unsigned long JobSwapped | ||||||||||||||||||||
0x02A8:0x14 | unsigned long ViolationDetected | ||||||||||||||||||||
0x02A8:0x15 | unsigned long EmptyJobNotified | ||||||||||||||||||||
0x02A8:0x16 | unsigned long NoSystemCharge | ||||||||||||||||||||
0x02A8:0x17 | unsigned long SpareJobFlags | ||||||||||||||||||||
0x02AC | struct _LIST_ENTRY TimerListHead | struct _LIST_ENTRY TimerListHead | struct _LIST_ENTRY TimerListHead | 0x0498 | |||||||||||||||||
0x02AC | unsigned long JobFlags | unsigned long ShadowActiveProcessCount | 0x04A0 | ||||||||||||||||||
0x02AC:0x00 | unsigned long CloseDone | unsigned long CloseDone | 0x04A0:0x00 | ||||||||||||||||||
0x02AC | unsigned long EffectiveHighEdgeFilters | unsigned long ActiveAuxiliaryProcessCount | unsigned long ActiveAuxiliaryProcessCount | unsigned long ActiveAuxiliaryProcessCount | 0x04AC | ||||||||||||||||
0x02AC:0x01 | unsigned long MultiGroup | 0x04A0:0x01 | |||||||||||||||||||
0x02AC:0x02 | unsigned long OutstandingNotification | 0x04A0:0x02 | |||||||||||||||||||
0x02AC:0x03 | unsigned long NotificationInProgress | 0x04A0:0x03 | |||||||||||||||||||
0x02AC:0x04 | unsigned long UILimits | 0x04A0:0x04 | |||||||||||||||||||
0x02AC:0x05 | unsigned long CpuRateControlActive | 0x04A0:0x05 | |||||||||||||||||||
0x02AC:0x06 | unsigned long OwnCpuRateControl | 0x04A0:0x06 | |||||||||||||||||||
0x02AC:0x07 | unsigned long Terminating | 0x04A0:0x07 | |||||||||||||||||||
0x02AC:0x08 | unsigned long WorkingSetLock | 0x04A0:0x08 | |||||||||||||||||||
0x02AC:0x09 | unsigned long JobFrozen | 0x04A0:0x09 | |||||||||||||||||||
0x02AC:0x0A | unsigned long Background | 0x04A0:0x0A | |||||||||||||||||||
0x02AC:0x0B | unsigned long WakeNotificationAllocated | 0x04A0:0x0B | |||||||||||||||||||
0x02AC:0x0C | unsigned long WakeNotificationEnabled | 0x04A0:0x0C | |||||||||||||||||||
0x02AC:0x0D | unsigned long WakeNotificationPending | 0x04A0:0x0D | |||||||||||||||||||
0x02AC:0x0E | unsigned long LimitNotificationRequired | 0x04A0:0x0E | |||||||||||||||||||
0x02AC:0x0F | unsigned long ZeroCountNotificationRequired | 0x04A0:0x0F | |||||||||||||||||||
0x02AC:0x10 | unsigned long CycleTimeNotificationRequired | 0x04A0:0x10 | |||||||||||||||||||
0x02AC:0x11 | unsigned long CycleTimeNotificationPending | 0x04A0:0x11 | |||||||||||||||||||
0x02AC:0x12 | unsigned long TimersVirtualized | 0x04A0:0x12 | |||||||||||||||||||
0x02AC:0x13 | unsigned long JobSwapped | 0x04A0:0x13 | |||||||||||||||||||
0x02AC:0x14 | unsigned long ViolationDetected | 0x04A0:0x14 | |||||||||||||||||||
0x02AC:0x15 | unsigned long EmptyJobNotified | 0x04A0:0x15 | |||||||||||||||||||
0x02AC:0x16 | unsigned long NoSystemCharge | 0x04A0:0x16 | |||||||||||||||||||
0x02AC:0x17 | unsigned long SpareJobFlags | 0x04A0:0x17 | |||||||||||||||||||
0x02B0 | unsigned long EffectiveHighEdgeFilters | unsigned long EffectiveHighEdgeFilters | unsigned long SequenceNumber | 0x04A4 | |||||||||||||||||
0x02B0 | struct _LIST_ENTRY TimerListHead | unsigned long SequenceNumber | 0x04B0 | ||||||||||||||||||
0x02B4 | unsigned long JobFlags | uint64_t TimerListLock | unsigned long ShadowActiveProcessCount | unsigned long ShadowActiveProcessCount | 0x04A8 | ||||||||||||||||
0x02B4:0x00 | unsigned long CloseDone | unsigned long CloseDone | unsigned long CloseDone | 0x04A8:0x00 | |||||||||||||||||
0x02B4 | uintptr_t TimerListLock | uintptr_t TimerListLock | uintptr_t TimerListLock | 0x04B8 | |||||||||||||||||
0x02B4:0x01 | unsigned long MultiGroup | 0x04A8:0x01 | |||||||||||||||||||
0x02B4:0x02 | unsigned long OutstandingNotification | 0x04A8:0x02 | |||||||||||||||||||
0x02B4:0x03 | unsigned long NotificationInProgress | 0x04A8:0x03 | |||||||||||||||||||
0x02B4:0x04 | unsigned long UILimits | 0x04A8:0x04 | |||||||||||||||||||
0x02B4:0x05 | unsigned long CpuRateControlActive | 0x04A8:0x05 | |||||||||||||||||||
0x02B4:0x06 | unsigned long OwnCpuRateControl | 0x04A8:0x06 | |||||||||||||||||||
0x02B4:0x07 | unsigned long Terminating | 0x04A8:0x07 | |||||||||||||||||||
0x02B4:0x08 | unsigned long WorkingSetLock | 0x04A8:0x08 | |||||||||||||||||||
0x02B4:0x09 | unsigned long JobFrozen | 0x04A8:0x09 | |||||||||||||||||||
0x02B4:0x0A | unsigned long Background | 0x04A8:0x0A | |||||||||||||||||||
0x02B4:0x0B | unsigned long WakeNotificationAllocated | 0x04A8:0x0B | |||||||||||||||||||
0x02B4:0x0C | unsigned long WakeNotificationEnabled | 0x04A8:0x0C | |||||||||||||||||||
0x02B4:0x0D | unsigned long WakeNotificationPending | 0x04A8:0x0D | |||||||||||||||||||
0x02B4:0x0E | unsigned long LimitNotificationRequired | 0x04A8:0x0E | |||||||||||||||||||
0x02B4:0x0F | unsigned long ZeroCountNotificationRequired | 0x04A8:0x0F | |||||||||||||||||||
0x02B4:0x10 | unsigned long CycleTimeNotificationRequired | 0x04A8:0x10 | |||||||||||||||||||
0x02B4:0x11 | unsigned long CycleTimeNotificationPending | 0x04A8:0x11 | |||||||||||||||||||
0x02B4:0x12 | unsigned long TimersVirtualized | 0x04A8:0x12 | |||||||||||||||||||
0x02B4:0x13 | unsigned long JobSwapped | 0x04A8:0x13 | |||||||||||||||||||
0x02B4:0x14 | unsigned long ViolationDetected | 0x04A8:0x14 | |||||||||||||||||||
0x02B4:0x15 | unsigned long EmptyJobNotified | 0x04A8:0x15 | |||||||||||||||||||
0x02B4:0x16 | unsigned long NoSystemCharge | 0x04A8:0x16 | |||||||||||||||||||
0x02B4:0x17 | unsigned long SpareJobFlags | unsigned long DropNoWakeCharges | 0x04A8:0x17 | ||||||||||||||||||
0x02B4:0x18 | unsigned long NoWakeChargePolicyDecided | 0x04A8:0x18 | |||||||||||||||||||
0x02B4:0x19 | unsigned long SpareJobFlags | 0x04A8:0x19 | |||||||||||||||||||
0x02B8 | unsigned long EffectiveHighEdgeFilters | unsigned long EffectiveHighEdgeFilters | 0x04AC | ||||||||||||||||||
0x02B8 | struct _GUID ContainerId | struct _LIST_ENTRY TimerListHead | 0x04C0 | ||||||||||||||||||
unsigned long CloseDone | 0x04D0:0x00 | ||||||||||||||||||||
0x02C0 | unsigned long JobFlags | struct _GUID ContainerId | struct _GUID ContainerId | struct _GUID ContainerId | 0x04D0 | ||||||||||||||||
unsigned long MultiGroup | 0x04D0:0x01 | ||||||||||||||||||||
unsigned long OutstandingNotification | 0x04D0:0x02 | ||||||||||||||||||||
unsigned long NotificationInProgress | 0x04D0:0x03 | ||||||||||||||||||||
unsigned long UILimits | 0x04D0:0x04 | ||||||||||||||||||||
unsigned long CpuRateControlActive | 0x04D0:0x05 | ||||||||||||||||||||
unsigned long OwnCpuRateControl | 0x04D0:0x06 | ||||||||||||||||||||
unsigned long Terminating | 0x04D0:0x07 | ||||||||||||||||||||
unsigned long WorkingSetLock | 0x04D0:0x08 | ||||||||||||||||||||
unsigned long JobFrozen | 0x04D0:0x09 | ||||||||||||||||||||
unsigned long Background | 0x04D0:0x0A | ||||||||||||||||||||
unsigned long WakeNotificationAllocated | 0x04D0:0x0B | ||||||||||||||||||||
unsigned long WakeNotificationEnabled | 0x04D0:0x0C | ||||||||||||||||||||
unsigned long WakeNotificationPending | 0x04D0:0x0D | ||||||||||||||||||||
unsigned long LimitNotificationRequired | 0x04D0:0x0E | ||||||||||||||||||||
unsigned long ZeroCountNotificationRequired | 0x04D0:0x0F | ||||||||||||||||||||
unsigned long CycleTimeNotificationRequired | 0x04D0:0x10 | ||||||||||||||||||||
unsigned long CycleTimeNotificationPending | 0x04D0:0x11 | ||||||||||||||||||||
unsigned long TimersVirtualized | 0x04D0:0x12 | ||||||||||||||||||||
unsigned long JobSwapped | 0x04D0:0x13 | ||||||||||||||||||||
unsigned long ViolationDetected | 0x04D0:0x14 | ||||||||||||||||||||
unsigned long EmptyJobNotified | 0x04D0:0x15 | ||||||||||||||||||||
unsigned long NoSystemCharge | 0x04D0:0x16 | ||||||||||||||||||||
unsigned long DropNoWakeCharges | 0x04D0:0x17 | ||||||||||||||||||||
unsigned long NoWakeChargePolicyDecided | 0x04D0:0x18 | ||||||||||||||||||||
unsigned long SpareJobFlags | 0x04D0:0x19 | ||||||||||||||||||||
unsigned long EffectiveHighEdgeFilters | 0x04D4 | ||||||||||||||||||||
struct _PSP_JOB_POLICY_TELEMETRY * PolicyTelemetry | 0x04D8 | ||||||||||||||||||||
0x02D0 | struct _PROCESS_ENERGY_VALUES * EnergyValues | struct _PS_PROPERTY_SET PropertySet | struct _ESILO * Container | struct _SILO_CONTEXT * Container | 0x04E0 | ||||||||||||||||
0x02D4 | struct _PS_PROPERTY_SET PropertySet | struct _PS_PROPERTY_SET PropertySet | 0x04E8 | ||||||||||||||||||
struct _JOB_NET_RATE_CONTROL * NetRateControl | 0x04F8 | ||||||||||||||||||||
0x02E0 | struct _JOB_IO_RATE_CONTROL * IoRateControl | struct _JOB_NET_RATE_CONTROL * NetRateControl | 0x0500 | ||||||||||||||||||
unsigned long CloseDone | 0x0508:0x00 | ||||||||||||||||||||
0x02E4 | unsigned long JobFlags | struct _JOB_IO_RATE_CONTROL * IoRateControl | struct _JOB_IO_RATE_CONTROL * IoRateControl | 0x0508 | |||||||||||||||||
unsigned long MultiGroup | 0x0508:0x01 | ||||||||||||||||||||
unsigned long OutstandingNotification | 0x0508:0x02 | ||||||||||||||||||||
unsigned long NotificationInProgress | 0x0508:0x03 | ||||||||||||||||||||
unsigned long UILimits | 0x0508:0x04 | ||||||||||||||||||||
unsigned long CpuRateControlActive | 0x0508:0x05 | ||||||||||||||||||||
unsigned long OwnCpuRateControl | 0x0508:0x06 | ||||||||||||||||||||
unsigned long Terminating | 0x0508:0x07 | ||||||||||||||||||||
unsigned long WorkingSetLock | 0x0508:0x08 | ||||||||||||||||||||
unsigned long JobFrozen | 0x0508:0x09 | ||||||||||||||||||||
unsigned long Background | 0x0508:0x0A | ||||||||||||||||||||
unsigned long WakeNotificationAllocated | 0x0508:0x0B | ||||||||||||||||||||
unsigned long WakeNotificationEnabled | 0x0508:0x0C | ||||||||||||||||||||
unsigned long WakeNotificationPending | 0x0508:0x0D | ||||||||||||||||||||
unsigned long LimitNotificationRequired | 0x0508:0x0E | ||||||||||||||||||||
unsigned long ZeroCountNotificationRequired | 0x0508:0x0F | ||||||||||||||||||||
unsigned long CycleTimeNotificationRequired | 0x0508:0x10 | ||||||||||||||||||||
unsigned long CycleTimeNotificationPending | 0x0508:0x11 | ||||||||||||||||||||
unsigned long TimersVirtualized | 0x0508:0x12 | ||||||||||||||||||||
unsigned long JobSwapped | 0x0508:0x13 | ||||||||||||||||||||
unsigned long ViolationDetected | 0x0508:0x14 | ||||||||||||||||||||
unsigned long EmptyJobNotified | 0x0508:0x15 | ||||||||||||||||||||
unsigned long NoSystemCharge | 0x0508:0x16 | ||||||||||||||||||||
unsigned long DropNoWakeCharges | 0x0508:0x17 | ||||||||||||||||||||
unsigned long NoWakeChargePolicyDecided | 0x0508:0x18 | ||||||||||||||||||||
unsigned long NetRateControlActive | 0x0508:0x19 | ||||||||||||||||||||
unsigned long OwnNetRateControl | 0x0508:0x1A | ||||||||||||||||||||
unsigned long IoRateControlActive | 0x0508:0x1B | ||||||||||||||||||||
unsigned long OwnIoRateControl | 0x0508:0x1C | ||||||||||||||||||||
unsigned long SpareJobFlags | 0x0508:0x1D | ||||||||||||||||||||
unsigned long EffectiveHighEdgeFilters | 0x050C | ||||||||||||||||||||
0x02E8 | struct _PROCESS_ENERGY_VALUES * EnergyValues | unsigned long JobFlags | 0x0510 | ||||||||||||||||||
0x02E8:0x00 | unsigned long CloseDone | 0x0510:0x00 | |||||||||||||||||||
0x02E8:0x01 | unsigned long MultiGroup | 0x0510:0x01 | |||||||||||||||||||
0x02E8:0x02 | unsigned long OutstandingNotification | 0x0510:0x02 | |||||||||||||||||||
0x02E8:0x03 | unsigned long NotificationInProgress | 0x0510:0x03 | |||||||||||||||||||
0x02E8:0x04 | unsigned long UILimits | 0x0510:0x04 | |||||||||||||||||||
0x02E8:0x05 | unsigned long CpuRateControlActive | 0x0510:0x05 | |||||||||||||||||||
0x02E8:0x06 | unsigned long OwnCpuRateControl | 0x0510:0x06 | |||||||||||||||||||
0x02E8:0x07 | unsigned long Terminating | 0x0510:0x07 | |||||||||||||||||||
0x02E8:0x08 | unsigned long WorkingSetLock | 0x0510:0x08 | |||||||||||||||||||
0x02E8:0x09 | unsigned long JobFrozen | 0x0510:0x09 | |||||||||||||||||||
0x02E8:0x0A | unsigned long Background | 0x0510:0x0A | |||||||||||||||||||
0x02E8:0x0B | unsigned long WakeNotificationAllocated | 0x0510:0x0B | |||||||||||||||||||
0x02E8:0x0C | unsigned long WakeNotificationEnabled | 0x0510:0x0C | |||||||||||||||||||
0x02E8:0x0D | unsigned long WakeNotificationPending | 0x0510:0x0D | |||||||||||||||||||
0x02E8:0x0E | unsigned long LimitNotificationRequired | 0x0510:0x0E | |||||||||||||||||||
0x02E8:0x0F | unsigned long ZeroCountNotificationRequired | 0x0510:0x0F | |||||||||||||||||||
0x02E8:0x10 | unsigned long CycleTimeNotificationRequired | 0x0510:0x10 | |||||||||||||||||||
0x02E8:0x11 | unsigned long CycleTimeNotificationPending | 0x0510:0x11 | |||||||||||||||||||
0x02E8:0x12 | unsigned long TimersVirtualized | 0x0510:0x12 | |||||||||||||||||||
0x02E8:0x13 | unsigned long JobSwapped | 0x0510:0x13 | |||||||||||||||||||
0x02E8:0x14 | unsigned long ViolationDetected | 0x0510:0x14 | |||||||||||||||||||
0x02E8:0x15 | unsigned long EmptyJobNotified | 0x0510:0x15 | |||||||||||||||||||
0x02E8:0x16 | unsigned long NoSystemCharge | 0x0510:0x16 | |||||||||||||||||||
0x02E8:0x17 | unsigned long DropNoWakeCharges | 0x0510:0x17 | |||||||||||||||||||
0x02E8:0x18 | unsigned long NoWakeChargePolicyDecided | 0x0510:0x18 | |||||||||||||||||||
0x02E8:0x19 | unsigned long NetRateControlActive | 0x0510:0x19 | |||||||||||||||||||
0x02E8:0x1A | unsigned long OwnNetRateControl | 0x0510:0x1A | |||||||||||||||||||
0x02E8:0x1B | unsigned long IoRateControlActive | 0x0510:0x1B | |||||||||||||||||||
0x02E8:0x1C | unsigned long OwnIoRateControl | 0x0510:0x1C | |||||||||||||||||||
0x02E8:0x1D | unsigned long IsContainerRoot | unsigned long DisallowNewProcesses | 0x0510:0x1D | ||||||||||||||||||
0x02E8:0x1E | unsigned long SpareJobFlags | 0x0510:0x1E | |||||||||||||||||||
0x02EC | unsigned long EffectiveHighEdgeFilters | 0x0514 | |||||||||||||||||||
0x02F0 | volatile uint64_t SharedCommitCharge | struct _PROCESS_ENERGY_VALUES * EnergyValues | 0x0518 | ||||||||||||||||||
0x02F4 | volatile unsigned long SharedCommitCharge | volatile uint64_t SharedCommitCharge | 0x0520 |