Min version | 2003/XP64 SP1 | Vista SP1 | 7 | 8 Pre RTM | 8 | 8.1 | 8.1 Update 1 | 10 Pre RTM | 10 Pre RTM | 10 | 10 TH2 |
---|---|---|---|---|---|---|---|---|---|---|---|
Max version | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | ||||||||
x64 offset offset:bitpos | Field Name | ||||||||||
0x0000 | struct _KEVENT Event | ||||||||||
0x0018 | struct _LIST_ENTRY JobLinks | ||||||||||
0x0028 | struct _LIST_ENTRY ProcessListHead | ||||||||||
0x0038 | struct _ERESOURCE JobLock | ||||||||||
0x00A0 | union _LARGE_INTEGER TotalUserTime | ||||||||||
0x00A8 | union _LARGE_INTEGER TotalKernelTime | ||||||||||
0x00B0 | union _LARGE_INTEGER ThisPeriodTotalUserTime | union _LARGE_INTEGER TotalCycleTime | |||||||||
0x00B8 | union _LARGE_INTEGER ThisPeriodTotalKernelTime | union _LARGE_INTEGER ThisPeriodTotalUserTime | |||||||||
0x00C0 | unsigned long TotalPageFaultCount | union _LARGE_INTEGER ThisPeriodTotalKernelTime | |||||||||
0x00C4 | unsigned long TotalProcesses | ||||||||||
0x00C8 | unsigned long ActiveProcesses | uint64_t TotalContextSwitches | |||||||||
0x00CC | unsigned long TotalTerminatedProcesses | ||||||||||
0x00D0 | union _LARGE_INTEGER PerProcessUserTimeLimit | unsigned long TotalPageFaultCount | |||||||||
0x00D4 | unsigned long TotalProcesses | ||||||||||
0x00D8 | union _LARGE_INTEGER PerJobUserTimeLimit | unsigned long ActiveProcesses | |||||||||
0x00DC | unsigned long TotalTerminatedProcesses | ||||||||||
0x00E0 | unsigned long LimitFlags | uint64_t MinimumWorkingSetSize | union _LARGE_INTEGER PerProcessUserTimeLimit | ||||||||
0x00E8 | uint64_t MinimumWorkingSetSize | uint64_t MaximumWorkingSetSize | union _LARGE_INTEGER PerJobUserTimeLimit | ||||||||
0x00F0 | uint64_t MaximumWorkingSetSize | unsigned long LimitFlags | uint64_t MinimumWorkingSetSize | ||||||||
0x00F4 | unsigned long ActiveProcessLimit | ||||||||||
0x00F8 | unsigned long ActiveProcessLimit | struct _KAFFINITY_EX Affinity | uint64_t MaximumWorkingSetSize | ||||||||
0x0100 | uint64_t Affinity | unsigned long LimitFlags | |||||||||
0x0104 | unsigned long ActiveProcessLimit | ||||||||||
0x0108 | uint8_t PriorityClass | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | ||||||||
0x010C | unsigned long UIRestrictionsClass | ||||||||||
0x0110 | unsigned long SecurityLimitFlags | struct _JOB_ACCESS_STATE * AccessState | |||||||||
0x0118 | void * Token | unsigned long UIRestrictionsClass | |||||||||
0x011C | unsigned long EndOfJobTimeAction | ||||||||||
0x0120 | struct _PS_JOB_TOKEN_FILTER * Filter | void * CompletionPort | uint8_t PriorityClass | ||||||||
0x0128 | unsigned long EndOfJobTimeAction | void * CompletionKey | struct _JOB_ACCESS_STATE * AccessState | ||||||||
0x0130 | void * CompletionPort | unsigned long SessionId | unsigned long UIRestrictionsClass | ||||||||
0x0134 | unsigned long SchedulingClass | unsigned long EndOfJobTimeAction | |||||||||
0x0138 | void * CompletionKey | uint64_t ReadOperationCount | void * CompletionPort | ||||||||
0x0140 | unsigned long SessionId | uint64_t WriteOperationCount | void * CompletionKey | ||||||||
0x0144 | unsigned long SchedulingClass | ||||||||||
0x0148 | uint64_t ReadOperationCount | uint64_t OtherOperationCount | unsigned long SessionId | ||||||||
0x014C | unsigned long SchedulingClass | ||||||||||
0x0150 | uint64_t WriteOperationCount | uint64_t ReadTransferCount | uint64_t ReadOperationCount | uint8_t PriorityClass | |||||||
0x0158 | uint64_t OtherOperationCount | uint64_t WriteTransferCount | uint64_t WriteOperationCount | struct _JOB_ACCESS_STATE * AccessState | |||||||
0x0160 | uint64_t ReadTransferCount | uint64_t OtherTransferCount | uint64_t OtherOperationCount | void * AccessStateQuotaReference | |||||||
0x0168 | uint64_t WriteTransferCount | uint64_t ProcessMemoryLimit | uint64_t ReadTransferCount | unsigned long UIRestrictionsClass | |||||||
0x016C | unsigned long EndOfJobTimeAction | ||||||||||
0x0170 | uint64_t OtherTransferCount | uint64_t JobMemoryLimit | uint64_t WriteTransferCount | void * CompletionPort | |||||||
0x0178 | struct _IO_COUNTERS IoInfo | uint64_t PeakProcessMemoryUsed | uint64_t OtherTransferCount | void * CompletionKey | |||||||
0x0180 | uint64_t PeakJobMemoryUsed | uint64_t ProcessMemoryLimit | uint64_t CompletionCount | ||||||||
0x0188 | uint64_t CurrentJobMemoryUsed | uint64_t JobMemoryLimit | unsigned long SessionId | ||||||||
0x018C | unsigned long SchedulingClass | ||||||||||
0x0190 | struct _EX_PUSH_LOCK MemoryLimitsLock | uint64_t PeakProcessMemoryUsed | uint64_t ReadOperationCount | ||||||||
0x0198 | struct _LIST_ENTRY JobSetLinks | uint64_t PeakJobMemoryUsed | uint64_t WriteOperationCount | ||||||||
0x01A0 | uint64_t CurrentJobMemoryUsed | uint64_t OtherOperationCount | |||||||||
0x01A8 | uint64_t ProcessMemoryLimit | unsigned long MemberLevel | struct _EX_PUSH_LOCK MemoryLimitsLock | uint64_t ReadTransferCount | |||||||
0x01AC | unsigned long JobFlags | ||||||||||
0x01B0 | uint64_t JobMemoryLimit | struct _LIST_ENTRY JobSetLinks | uint64_t WriteTransferCount | struct _JOB_ACCESS_STATE * AccessState | |||||||
0x01B8 | uint64_t PeakProcessMemoryUsed | uint64_t OtherTransferCount | void * AccessStateQuotaReference | ||||||||
0x01C0 | uint64_t PeakJobMemoryUsed | unsigned long MemberLevel | struct _PROCESS_DISK_COUNTERS DiskIoInfo | unsigned long UIRestrictionsClass | |||||||
0x01C4 | unsigned long JobFlags | unsigned long EndOfJobTimeAction | |||||||||
0x01C8 | uint64_t CurrentJobMemoryUsed | void * CompletionPort | |||||||||
0x01D0 | struct _KGUARDED_MUTEX MemoryLimitsLock | void * CompletionKey | |||||||||
0x01D8 | uint64_t CompletionCount | ||||||||||
0x01E0 | unsigned long SessionId | ||||||||||
0x01E4 | unsigned long SchedulingClass | ||||||||||
0x01E8 | uint64_t ProcessMemoryLimit | uint64_t ReadOperationCount | |||||||||
0x01F0 | uint64_t JobMemoryLimit | uint64_t WriteOperationCount | |||||||||
0x01F8 | uint64_t PeakProcessMemoryUsed | uint64_t OtherOperationCount | |||||||||
0x0200 | uint64_t PeakJobMemoryUsed | uint64_t ReadTransferCount | |||||||||
0x0208 | struct _LIST_ENTRY JobSetLinks | struct _KAFFINITY_EX EffectiveAffinity | uint64_t WriteTransferCount | ||||||||
0x0210 | uint64_t OtherTransferCount | ||||||||||
0x0218 | unsigned long MemberLevel | struct _PROCESS_DISK_COUNTERS DiskIoInfo | |||||||||
0x021C | unsigned long JobFlags | ||||||||||
0x0240 | uint64_t ProcessMemoryLimit | ||||||||||
0x0248 | uint64_t JobMemoryLimit | ||||||||||
0x0250 | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | uint64_t PeakProcessMemoryUsed | uint64_t JobTotalMemoryLimit | ||||||||
0x0258 | uint64_t EffectiveMinimumWorkingSetSize | uint64_t PeakJobMemoryUsed | uint64_t PeakProcessMemoryUsed | ||||||||
0x0260 | uint64_t EffectiveMaximumWorkingSetSize | struct _KAFFINITY_EX EffectiveAffinity | uint64_t PeakJobMemoryUsed | ||||||||
0x0268 | uint64_t EffectiveProcessMemoryLimit | struct _KAFFINITY_EX EffectiveAffinity | |||||||||
0x0270 | struct _EJOB * EffectiveProcessMemoryLimitJob | ||||||||||
0x0278 | struct _EJOB * EffectivePerProcessUserTimeLimitJob | ||||||||||
0x0280 | unsigned long EffectiveLimitFlags | ||||||||||
0x0284 | unsigned long EffectiveSchedulingClass | ||||||||||
0x0288 | unsigned long EffectiveFreezeCount | ||||||||||
0x028C | unsigned long EffectiveIdleAwareCount | ||||||||||
0x0290 | uint8_t EffectivePriorityClass | ||||||||||
0x0291 | uint8_t[3] Reserved | ||||||||||
0x0294 | unsigned long CompletionFilter | ||||||||||
0x0298 | struct _WNF_STATE_NAME WakeChannel | ||||||||||
0x0298 | struct _JOBOBJECT_WAKE_INFORMATION WakeInfo | ||||||||||
0x02C0 | struct _JOBOBJECT_WAKE_FILTER WakeFilter | ||||||||||
0x02C8 | struct _EJOB * NotificationLink | ||||||||||
0x02D0 | struct _JOB_NOTIFICATION_LIMITS * NotificationLimits | ||||||||||
0x02D8 | void * NotificationLimitsQuotaReference | ||||||||||
0x02E0 | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | ||||||||||
0x02E8 | unsigned long NotificationLimitFlags | ||||||||||
0x02EC | unsigned long ViolationLimitFlags | ||||||||||
0x02F0 | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | ||||||||||
0x02F8 | void * EffectiveSchedulingGroup | ||||||||||
0x0300 | unsigned long ProcessListCount | ||||||||||
0x0308 | uint64_t CurrentJobMemoryUsed | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | |||||||||
0x0310 | struct _EX_PUSH_LOCK MemoryLimitsLock | uint64_t EffectiveMinimumWorkingSetSize | union _LARGE_INTEGER EffectivePerProcessUserTimeLimit | ||||||||
0x0318 | struct _LIST_ENTRY SiblingJobLinks | uint64_t EffectiveMaximumWorkingSetSize | uint64_t EffectiveMinimumWorkingSetSize | ||||||||
0x0320 | uint64_t EffectiveProcessMemoryLimit | uint64_t EffectiveMaximumWorkingSetSize | |||||||||
0x0328 | struct _LIST_ENTRY ChildJobListHead | struct _EJOB * EffectiveProcessMemoryLimitJob | uint64_t EffectiveProcessMemoryLimit | ||||||||
0x0330 | struct _EJOB * EffectivePerProcessUserTimeLimitJob | struct _EJOB * EffectiveProcessMemoryLimitJob | |||||||||
0x0338 | struct _EJOB * ParentJob | unsigned long EffectiveLimitFlags | struct _EJOB * EffectiveDiskIoRateLimitJob | struct _EJOB * EffectivePerProcessUserTimeLimitJob | |||||||
0x033C | unsigned long EffectiveSchedulingClass | ||||||||||
0x0340 | struct _EJOB * volatile RootJob | unsigned long EffectiveFreezeCount | struct _EJOB * EffectiveNetIoRateLimitJob | struct _EJOB * EffectiveDiskIoRateLimitJob | |||||||
0x0344 | unsigned long EffectiveBackgroundCount | ||||||||||
0x0348 | struct _LIST_ENTRY IteratorListHead | unsigned long EffectiveSwapCount | struct _EJOB * EffectiveHeapAttributionJob | struct _EJOB * EffectiveNetIoRateLimitJob | |||||||
0x034C | unsigned long EffectiveNotificationLimitCount | ||||||||||
0x0350 | uint8_t EffectivePriorityClass | unsigned long EffectiveLimitFlags | struct _EJOB * EffectiveHeapAttributionJob | ||||||||
0x0351 | uint8_t PriorityClass | ||||||||||
0x0352 | uint8_t[2] Reserved1 | ||||||||||
0x0354 | unsigned long CompletionFilter | unsigned long EffectiveSchedulingClass | |||||||||
0x0358 | struct _KPROCESS_VALUES Accounting | struct _WNF_STATE_NAME WakeChannel | unsigned long EffectiveFreezeCount | unsigned long EffectiveLimitFlags | |||||||
0x0358 | struct _PS_WAKE_INFORMATION WakeInfo | struct _PS_WAKE_INFORMATION WakeInfo | |||||||||
0x035C | unsigned long EffectiveBackgroundCount | unsigned long EffectiveSchedulingClass | |||||||||
0x0360 | unsigned long EffectiveSwapCount | unsigned long EffectiveFreezeCount | |||||||||
0x0364 | unsigned long EffectiveNotificationLimitCount | unsigned long EffectiveBackgroundCount | |||||||||
0x0368 | uint8_t EffectivePriorityClass | unsigned long EffectiveSwapCount | |||||||||
0x0369 | uint8_t PriorityClass | ||||||||||
0x036A | uint8_t[2] Reserved1 | ||||||||||
0x036C | unsigned long CompletionFilter | unsigned long EffectiveNotificationLimitCount | |||||||||
0x0370 | struct _WNF_STATE_NAME WakeChannel | uint8_t EffectivePriorityClass | |||||||||
0x0370 | struct _PS_WAKE_INFORMATION WakeInfo | ||||||||||
0x0371 | uint8_t PriorityClass | ||||||||||
0x0372 | uint8_t[2] Reserved1 | uint8_t NestingDepth | |||||||||
0x0373 | uint8_t[1] Reserved1 | ||||||||||
0x0374 | unsigned long CompletionFilter | ||||||||||
0x0378 | struct _WNF_STATE_NAME WakeChannel | ||||||||||
0x0378 | struct _PS_WAKE_INFORMATION WakeInfo | ||||||||||
0x0390 | struct _JOBOBJECT_WAKE_FILTER WakeFilter | ||||||||||
0x0398 | unsigned long LowEdgeLatchFilter | ||||||||||
0x039C | unsigned long OwnedHighEdgeFilters | ||||||||||
0x03A0 | struct _JOBOBJECT_WAKE_FILTER WakeFilter | struct _EJOB * NotificationLink | |||||||||
0x03A8 | uint64_t TimerListLock | unsigned long LowEdgeLatchFilter | uint64_t CurrentJobMemoryUsed | struct _JOBOBJECT_WAKE_FILTER WakeFilter | |||||||
0x03AC | unsigned long OwnedHighEdgeFilters | ||||||||||
0x03B0 | struct _LIST_ENTRY TimerListHead | struct _EJOB * NotificationLink | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | unsigned long LowEdgeLatchFilter | struct _JOBOBJECT_WAKE_FILTER WakeFilter | ||||||
0x03B4 | unsigned long OwnedHighEdgeFilters | ||||||||||
0x03B8 | uint64_t CurrentJobMemoryUsed | void * NotificationInfoQuotaReference | struct _EJOB * NotificationLink | unsigned long LowEdgeLatchFilter | |||||||
0x03BC | unsigned long OwnedHighEdgeFilters | ||||||||||
0x03C0 | unsigned long JobFlags | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | uint64_t CurrentJobMemoryUsed | struct _EJOB * NotificationLink | ||||||
0x03C0:0x00 | unsigned long CloseDone | ||||||||||
0x03C0:0x01 | unsigned long MultiGroup | ||||||||||
0x03C0:0x02 | unsigned long OutstandingNotification | ||||||||||
0x03C0:0x03 | unsigned long NotificationInProgress | ||||||||||
0x03C0:0x04 | unsigned long UILimits | ||||||||||
0x03C0:0x05 | unsigned long CpuRateControlActive | ||||||||||
0x03C0:0x06 | unsigned long OwnCpuRateControl | ||||||||||
0x03C0:0x07 | unsigned long Terminating | ||||||||||
0x03C0:0x08 | unsigned long WorkingSetLock | ||||||||||
0x03C0:0x09 | unsigned long JobFrozen | ||||||||||
0x03C0:0x0A | unsigned long IdleAware | ||||||||||
0x03C0:0x0B | unsigned long WakeNotificationAllocated | ||||||||||
0x03C0:0x0C | unsigned long WakeNotificationEnabled | ||||||||||
0x03C0:0x0D | unsigned long WakeNotificationPending | ||||||||||
0x03C0:0x0E | unsigned long LimitNotificationRequired | ||||||||||
0x03C0:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||
0x03C0:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||
0x03C0:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||
0x03C0:0x12 | unsigned long TimersVirtualized | ||||||||||
0x03C0:0x13 | unsigned long SpareJobFlags | ||||||||||
0x03C8 | void * NotificationInfoQuotaReference | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | uint64_t CurrentJobMemoryUsed | |||||||
0x03D0 | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | void * EffectiveSchedulingGroup | void * NotificationInfoQuotaReference | struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo | |||||||
0x03D8 | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | uint64_t ReadyTime | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | void * NotificationInfoQuotaReference | |||||||
0x03E0 | void * EffectiveSchedulingGroup | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket | |||||||
0x03E8 | struct _EX_PUSH_LOCK MemoryLimitsLock | struct _LIST_ENTRY SiblingJobLinks | void * EffectiveSchedulingGroup | struct _JOB_CPU_RATE_CONTROL * CpuRateControl | |||||||
0x03F0 | struct _LIST_ENTRY SiblingJobLinks | uint64_t ReadyTime | void * EffectiveSchedulingGroup | ||||||||
0x03F8 | struct _LIST_ENTRY ChildJobListHead | struct _EX_PUSH_LOCK MemoryLimitsLock | uint64_t ReadyTime | ||||||||
0x0400 | struct _LIST_ENTRY ChildJobListHead | struct _LIST_ENTRY SiblingJobLinks | struct _EX_PUSH_LOCK MemoryLimitsLock | ||||||||
0x0408 | struct _EJOB * ParentJob | struct _LIST_ENTRY SiblingJobLinks | |||||||||
0x0410 | struct _EJOB * ParentJob | struct _EJOB * volatile RootJob | struct _LIST_ENTRY ChildJobListHead | ||||||||
0x0418 | struct _EJOB * volatile RootJob | struct _LIST_ENTRY IteratorListHead | struct _LIST_ENTRY ChildJobListHead | ||||||||
0x0420 | struct _LIST_ENTRY IteratorListHead | struct _EJOB * ParentJob | |||||||||
0x0428 | uint64_t AncestorCount | struct _EJOB * volatile RootJob | struct _EJOB * ParentJob | ||||||||
0x0430 | struct _EPROCESS_VALUES Accounting | struct _EJOB * * Ancestors | struct _LIST_ENTRY IteratorListHead | struct _EJOB * volatile RootJob | |||||||
0x0438 | struct _EPROCESS_VALUES Accounting | struct _LIST_ENTRY IteratorListHead | |||||||||
0x0440 | uint64_t AncestorCount | ||||||||||
0x0448 | struct _EJOB * * Ancestors | uint64_t AncestorCount | |||||||||
0x0450 | struct _EPROCESS_VALUES Accounting | struct _EJOB * * Ancestors | |||||||||
0x0450 | void * SessionObject | ||||||||||
0x0458 | struct _EPROCESS_VALUES Accounting | ||||||||||
0x0480 | unsigned long ShadowActiveProcessCount | ||||||||||
0x0484 | unsigned long SequenceNumber | ||||||||||
0x0488 | uint64_t TimerListLock | unsigned long ShadowActiveProcessCount | |||||||||
0x048C | unsigned long SequenceNumber | ||||||||||
0x0490 | struct _LIST_ENTRY TimerListHead | uint64_t TimerListLock | |||||||||
0x0498 | struct _LIST_ENTRY TimerListHead | ||||||||||
0x04A0 | unsigned long JobFlags | unsigned long ShadowActiveProcessCount | |||||||||
0x04A0:0x00 | unsigned long CloseDone | ||||||||||
0x04A0:0x01 | unsigned long MultiGroup | ||||||||||
0x04A0:0x02 | unsigned long OutstandingNotification | ||||||||||
0x04A0:0x03 | unsigned long NotificationInProgress | ||||||||||
0x04A0:0x04 | unsigned long UILimits | ||||||||||
0x04A0:0x05 | unsigned long CpuRateControlActive | ||||||||||
0x04A0:0x06 | unsigned long OwnCpuRateControl | ||||||||||
0x04A0:0x07 | unsigned long Terminating | ||||||||||
0x04A0:0x08 | unsigned long WorkingSetLock | ||||||||||
0x04A0:0x09 | unsigned long JobFrozen | ||||||||||
0x04A0:0x0A | unsigned long Background | ||||||||||
0x04A0:0x0B | unsigned long WakeNotificationAllocated | ||||||||||
0x04A0:0x0C | unsigned long WakeNotificationEnabled | ||||||||||
0x04A0:0x0D | unsigned long WakeNotificationPending | ||||||||||
0x04A0:0x0E | unsigned long LimitNotificationRequired | ||||||||||
0x04A0:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||
0x04A0:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||
0x04A0:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||
0x04A0:0x12 | unsigned long TimersVirtualized | ||||||||||
0x04A0:0x13 | unsigned long JobSwapped | ||||||||||
0x04A0:0x14 | unsigned long ViolationDetected | ||||||||||
0x04A0:0x15 | unsigned long EmptyJobNotified | ||||||||||
0x04A0:0x16 | unsigned long NoSystemCharge | ||||||||||
0x04A0:0x17 | unsigned long SpareJobFlags | ||||||||||
0x04A4 | unsigned long EffectiveHighEdgeFilters | unsigned long SequenceNumber | |||||||||
0x04A8 | unsigned long JobFlags | uint64_t TimerListLock | unsigned long ShadowActiveProcessCount | ||||||||
0x04A8:0x00 | unsigned long CloseDone | ||||||||||
0x04A8:0x01 | unsigned long MultiGroup | ||||||||||
0x04A8:0x02 | unsigned long OutstandingNotification | ||||||||||
0x04A8:0x03 | unsigned long NotificationInProgress | ||||||||||
0x04A8:0x04 | unsigned long UILimits | ||||||||||
0x04A8:0x05 | unsigned long CpuRateControlActive | ||||||||||
0x04A8:0x06 | unsigned long OwnCpuRateControl | ||||||||||
0x04A8:0x07 | unsigned long Terminating | ||||||||||
0x04A8:0x08 | unsigned long WorkingSetLock | ||||||||||
0x04A8:0x09 | unsigned long JobFrozen | ||||||||||
0x04A8:0x0A | unsigned long Background | ||||||||||
0x04A8:0x0B | unsigned long WakeNotificationAllocated | ||||||||||
0x04A8:0x0C | unsigned long WakeNotificationEnabled | ||||||||||
0x04A8:0x0D | unsigned long WakeNotificationPending | ||||||||||
0x04A8:0x0E | unsigned long LimitNotificationRequired | ||||||||||
0x04A8:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||
0x04A8:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||
0x04A8:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||
0x04A8:0x12 | unsigned long TimersVirtualized | ||||||||||
0x04A8:0x13 | unsigned long JobSwapped | ||||||||||
0x04A8:0x14 | unsigned long ViolationDetected | ||||||||||
0x04A8:0x15 | unsigned long EmptyJobNotified | ||||||||||
0x04A8:0x16 | unsigned long NoSystemCharge | ||||||||||
0x04A8:0x17 | unsigned long SpareJobFlags | unsigned long DropNoWakeCharges | |||||||||
0x04A8:0x18 | unsigned long NoWakeChargePolicyDecided | ||||||||||
0x04A8:0x19 | unsigned long SpareJobFlags | ||||||||||
0x04AC | unsigned long EffectiveHighEdgeFilters | unsigned long ActiveAuxiliaryProcessCount | |||||||||
0x04B0 | struct _LIST_ENTRY TimerListHead | unsigned long SequenceNumber | |||||||||
0x04B8 | uint64_t TimerListLock | ||||||||||
0x04C0 | struct _GUID ContainerId | struct _LIST_ENTRY TimerListHead | |||||||||
0x04D0 | unsigned long JobFlags | struct _GUID ContainerId | |||||||||
0x04D0:0x00 | unsigned long CloseDone | ||||||||||
0x04D0:0x01 | unsigned long MultiGroup | ||||||||||
0x04D0:0x02 | unsigned long OutstandingNotification | ||||||||||
0x04D0:0x03 | unsigned long NotificationInProgress | ||||||||||
0x04D0:0x04 | unsigned long UILimits | ||||||||||
0x04D0:0x05 | unsigned long CpuRateControlActive | ||||||||||
0x04D0:0x06 | unsigned long OwnCpuRateControl | ||||||||||
0x04D0:0x07 | unsigned long Terminating | ||||||||||
0x04D0:0x08 | unsigned long WorkingSetLock | ||||||||||
0x04D0:0x09 | unsigned long JobFrozen | ||||||||||
0x04D0:0x0A | unsigned long Background | ||||||||||
0x04D0:0x0B | unsigned long WakeNotificationAllocated | ||||||||||
0x04D0:0x0C | unsigned long WakeNotificationEnabled | ||||||||||
0x04D0:0x0D | unsigned long WakeNotificationPending | ||||||||||
0x04D0:0x0E | unsigned long LimitNotificationRequired | ||||||||||
0x04D0:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||
0x04D0:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||
0x04D0:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||
0x04D0:0x12 | unsigned long TimersVirtualized | ||||||||||
0x04D0:0x13 | unsigned long JobSwapped | ||||||||||
0x04D0:0x14 | unsigned long ViolationDetected | ||||||||||
0x04D0:0x15 | unsigned long EmptyJobNotified | ||||||||||
0x04D0:0x16 | unsigned long NoSystemCharge | ||||||||||
0x04D0:0x17 | unsigned long DropNoWakeCharges | ||||||||||
0x04D0:0x18 | unsigned long NoWakeChargePolicyDecided | ||||||||||
0x04D0:0x19 | unsigned long SpareJobFlags | ||||||||||
0x04D4 | unsigned long EffectiveHighEdgeFilters | ||||||||||
0x04D8 | struct _PSP_JOB_POLICY_TELEMETRY * PolicyTelemetry | ||||||||||
0x04E0 | struct _PROCESS_ENERGY_VALUES * EnergyValues | struct _PS_PROPERTY_SET PropertySet | struct _ESILO * Container | struct _SILO_CONTEXT * Container | |||||||
0x04E8 | struct _PS_PROPERTY_SET PropertySet | ||||||||||
0x04F8 | struct _JOB_NET_RATE_CONTROL * NetRateControl | ||||||||||
0x0500 | struct _JOB_IO_RATE_CONTROL * IoRateControl | struct _JOB_NET_RATE_CONTROL * NetRateControl | |||||||||
0x0508 | unsigned long JobFlags | struct _JOB_IO_RATE_CONTROL * IoRateControl | |||||||||
0x0508:0x00 | unsigned long CloseDone | ||||||||||
0x0508:0x01 | unsigned long MultiGroup | ||||||||||
0x0508:0x02 | unsigned long OutstandingNotification | ||||||||||
0x0508:0x03 | unsigned long NotificationInProgress | ||||||||||
0x0508:0x04 | unsigned long UILimits | ||||||||||
0x0508:0x05 | unsigned long CpuRateControlActive | ||||||||||
0x0508:0x06 | unsigned long OwnCpuRateControl | ||||||||||
0x0508:0x07 | unsigned long Terminating | ||||||||||
0x0508:0x08 | unsigned long WorkingSetLock | ||||||||||
0x0508:0x09 | unsigned long JobFrozen | ||||||||||
0x0508:0x0A | unsigned long Background | ||||||||||
0x0508:0x0B | unsigned long WakeNotificationAllocated | ||||||||||
0x0508:0x0C | unsigned long WakeNotificationEnabled | ||||||||||
0x0508:0x0D | unsigned long WakeNotificationPending | ||||||||||
0x0508:0x0E | unsigned long LimitNotificationRequired | ||||||||||
0x0508:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||
0x0508:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||
0x0508:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||
0x0508:0x12 | unsigned long TimersVirtualized | ||||||||||
0x0508:0x13 | unsigned long JobSwapped | ||||||||||
0x0508:0x14 | unsigned long ViolationDetected | ||||||||||
0x0508:0x15 | unsigned long EmptyJobNotified | ||||||||||
0x0508:0x16 | unsigned long NoSystemCharge | ||||||||||
0x0508:0x17 | unsigned long DropNoWakeCharges | ||||||||||
0x0508:0x18 | unsigned long NoWakeChargePolicyDecided | ||||||||||
0x0508:0x19 | unsigned long NetRateControlActive | ||||||||||
0x0508:0x1A | unsigned long OwnNetRateControl | ||||||||||
0x0508:0x1B | unsigned long IoRateControlActive | ||||||||||
0x0508:0x1C | unsigned long OwnIoRateControl | ||||||||||
0x0508:0x1D | unsigned long SpareJobFlags | ||||||||||
0x050C | unsigned long EffectiveHighEdgeFilters | ||||||||||
0x0510 | struct _PROCESS_ENERGY_VALUES * EnergyValues | unsigned long JobFlags | |||||||||
0x0510:0x00 | unsigned long CloseDone | ||||||||||
0x0510:0x01 | unsigned long MultiGroup | ||||||||||
0x0510:0x02 | unsigned long OutstandingNotification | ||||||||||
0x0510:0x03 | unsigned long NotificationInProgress | ||||||||||
0x0510:0x04 | unsigned long UILimits | ||||||||||
0x0510:0x05 | unsigned long CpuRateControlActive | ||||||||||
0x0510:0x06 | unsigned long OwnCpuRateControl | ||||||||||
0x0510:0x07 | unsigned long Terminating | ||||||||||
0x0510:0x08 | unsigned long WorkingSetLock | ||||||||||
0x0510:0x09 | unsigned long JobFrozen | ||||||||||
0x0510:0x0A | unsigned long Background | ||||||||||
0x0510:0x0B | unsigned long WakeNotificationAllocated | ||||||||||
0x0510:0x0C | unsigned long WakeNotificationEnabled | ||||||||||
0x0510:0x0D | unsigned long WakeNotificationPending | ||||||||||
0x0510:0x0E | unsigned long LimitNotificationRequired | ||||||||||
0x0510:0x0F | unsigned long ZeroCountNotificationRequired | ||||||||||
0x0510:0x10 | unsigned long CycleTimeNotificationRequired | ||||||||||
0x0510:0x11 | unsigned long CycleTimeNotificationPending | ||||||||||
0x0510:0x12 | unsigned long TimersVirtualized | ||||||||||
0x0510:0x13 | unsigned long JobSwapped | ||||||||||
0x0510:0x14 | unsigned long ViolationDetected | ||||||||||
0x0510:0x15 | unsigned long EmptyJobNotified | ||||||||||
0x0510:0x16 | unsigned long NoSystemCharge | ||||||||||
0x0510:0x17 | unsigned long DropNoWakeCharges | ||||||||||
0x0510:0x18 | unsigned long NoWakeChargePolicyDecided | ||||||||||
0x0510:0x19 | unsigned long NetRateControlActive | ||||||||||
0x0510:0x1A | unsigned long OwnNetRateControl | ||||||||||
0x0510:0x1B | unsigned long IoRateControlActive | ||||||||||
0x0510:0x1C | unsigned long OwnIoRateControl | ||||||||||
0x0510:0x1D | unsigned long IsContainerRoot | unsigned long DisallowNewProcesses | |||||||||
0x0510:0x1E | unsigned long SpareJobFlags | ||||||||||
0x0514 | unsigned long EffectiveHighEdgeFilters | ||||||||||
0x0518 | volatile uint64_t SharedCommitCharge | struct _PROCESS_ENERGY_VALUES * EnergyValues | |||||||||
0x0520 | volatile uint64_t SharedCommitCharge |