Min version	XP	2003/XP64	Vista	7	8 Pre RTM	8 Pre RTM	8	8.1 Update 1	10
Max version	XP SP3	2003/XP64 SP2	Vista SP2	7 SP1
x86 offset offset:bitpos	Field Name
0x0000	struct _KEVENT Event
0x0010	struct _LIST_ENTRY JobLinks
0x0018	struct _LIST_ENTRY ProcessListHead
0x0020	struct _ERESOURCE JobLock
0x0058	union _LARGE_INTEGER TotalUserTime
0x0060	union _LARGE_INTEGER TotalKernelTime
0x0068	union _LARGE_INTEGER ThisPeriodTotalUserTime				union _LARGE_INTEGER TotalCycleTime
0x0070	union _LARGE_INTEGER ThisPeriodTotalKernelTime				union _LARGE_INTEGER ThisPeriodTotalUserTime
0x0078	unsigned long TotalPageFaultCount				union _LARGE_INTEGER ThisPeriodTotalKernelTime
0x007C	unsigned long TotalProcesses
0x0080	unsigned long ActiveProcesses				uint64_t TotalContextSwitches
0x0084	unsigned long TotalTerminatedProcesses
0x0088	union _LARGE_INTEGER PerProcessUserTimeLimit				unsigned long TotalPageFaultCount
0x008C					unsigned long TotalProcesses
0x0090	union _LARGE_INTEGER PerJobUserTimeLimit				unsigned long ActiveProcesses
0x0094					unsigned long TotalTerminatedProcesses
0x0098	unsigned long LimitFlags			unsigned long MinimumWorkingSetSize	union _LARGE_INTEGER PerProcessUserTimeLimit
0x009C	unsigned long MinimumWorkingSetSize			unsigned long MaximumWorkingSetSize
0x00A0	unsigned long MaximumWorkingSetSize			unsigned long LimitFlags	union _LARGE_INTEGER PerJobUserTimeLimit
0x00A4	unsigned long ActiveProcessLimit
0x00A8	unsigned long Affinity			struct _KAFFINITY_EX Affinity	unsigned long MinimumWorkingSetSize
0x00AC	uint8_t PriorityClass				unsigned long MaximumWorkingSetSize
0x00B0	unsigned long UIRestrictionsClass		struct _JOB_ACCESS_STATE * AccessState		unsigned long LimitFlags
0x00B4	unsigned long SecurityLimitFlags		unsigned long UIRestrictionsClass	uint8_t PriorityClass	unsigned long ActiveProcessLimit
0x00B8	void * Token		unsigned long EndOfJobTimeAction	struct _JOB_ACCESS_STATE * AccessState	struct _KAFFINITY_EX Affinity
0x00BC	struct _PS_JOB_TOKEN_FILTER * Filter		void * CompletionPort	unsigned long UIRestrictionsClass
0x00C0	unsigned long EndOfJobTimeAction		void * CompletionKey	unsigned long EndOfJobTimeAction
0x00C4	void * CompletionPort		unsigned long SessionId	void * CompletionPort	uint8_t PriorityClass	struct _JOB_ACCESS_STATE * AccessState
0x00C8	void * CompletionKey		unsigned long SchedulingClass	void * CompletionKey	struct _JOB_ACCESS_STATE * AccessState	void * AccessStateQuotaReference
0x00CC	unsigned long SessionId			unsigned long SessionId	void * AccessStateQuotaReference	unsigned long UIRestrictionsClass
0x00D0	unsigned long SchedulingClass		uint64_t ReadOperationCount	unsigned long SchedulingClass	unsigned long UIRestrictionsClass	unsigned long EndOfJobTimeAction
0x00D4					unsigned long EndOfJobTimeAction	void * CompletionPort
0x00D8	uint64_t ReadOperationCount		uint64_t WriteOperationCount	uint64_t ReadOperationCount	void * CompletionPort	void * CompletionKey
0x00DC					void * CompletionKey
0x00E0	uint64_t WriteOperationCount		uint64_t OtherOperationCount	uint64_t WriteOperationCount	uint64_t CompletionCount
0x00E8	uint64_t OtherOperationCount		uint64_t ReadTransferCount	uint64_t OtherOperationCount	unsigned long SessionId
0x00EC					unsigned long SchedulingClass
0x00F0	uint64_t ReadTransferCount		uint64_t WriteTransferCount	uint64_t ReadTransferCount	uint64_t ReadOperationCount
0x00F8	uint64_t WriteTransferCount		uint64_t OtherTransferCount	uint64_t WriteTransferCount	uint64_t WriteOperationCount
0x0100	uint64_t OtherTransferCount		unsigned long ProcessMemoryLimit	uint64_t OtherTransferCount	uint64_t OtherOperationCount
0x0104			unsigned long JobMemoryLimit
0x0108	struct _IO_COUNTERS IoInfo		unsigned long PeakProcessMemoryUsed	unsigned long ProcessMemoryLimit	uint64_t ReadTransferCount
0x010C			unsigned long PeakJobMemoryUsed	unsigned long JobMemoryLimit
0x0110			unsigned long CurrentJobMemoryUsed	unsigned long PeakProcessMemoryUsed	uint64_t WriteTransferCount
0x0114			struct _EX_PUSH_LOCK MemoryLimitsLock	unsigned long PeakJobMemoryUsed
0x0118			struct _LIST_ENTRY JobSetLinks	uint64_t CurrentJobMemoryUsed	uint64_t OtherTransferCount
0x0120			unsigned long MemberLevel	struct _EX_PUSH_LOCK MemoryLimitsLock	struct _PROCESS_DISK_COUNTERS DiskIoInfo
0x0124			unsigned long JobFlags	struct _LIST_ENTRY JobSetLinks
0x012C				unsigned long MemberLevel
0x0130				unsigned long JobFlags
0x0138	unsigned long ProcessMemoryLimit
0x013C	unsigned long JobMemoryLimit
0x0140	unsigned long PeakProcessMemoryUsed
0x0144	unsigned long PeakJobMemoryUsed
0x0148	unsigned long CurrentJobMemoryUsed				unsigned long ProcessMemoryLimit
0x014C	struct _FAST_MUTEX MemoryLimitsLock	struct _KGUARDED_MUTEX MemoryLimitsLock			unsigned long JobMemoryLimit
0x0150					unsigned long PeakProcessMemoryUsed				unsigned long JobTotalMemoryLimit
0x0154					unsigned long PeakJobMemoryUsed				unsigned long PeakProcessMemoryUsed
0x0158					struct _KAFFINITY_EX EffectiveAffinity				unsigned long PeakJobMemoryUsed
0x015C									struct _KAFFINITY_EX EffectiveAffinity
0x0168					union _LARGE_INTEGER EffectivePerProcessUserTimeLimit
0x016C	struct _LIST_ENTRY JobSetLinks
0x0170					unsigned long EffectiveMinimumWorkingSetSize
0x0174	unsigned long MemberLevel				unsigned long EffectiveMaximumWorkingSetSize
0x0178	unsigned long JobFlags				unsigned long EffectiveProcessMemoryLimit
0x017C					struct _EJOB * EffectiveProcessMemoryLimitJob
0x0180					struct _EJOB * EffectivePerProcessUserTimeLimitJob
0x0184					unsigned long EffectiveLimitFlags				struct _EJOB * EffectiveDiskIoRateLimitJob
0x0188					unsigned long EffectiveSchedulingClass				struct _EJOB * EffectiveNetIoRateLimitJob
0x018C					unsigned long EffectiveFreezeCount				struct _EJOB * EffectiveHeapAttributionJob
0x0190					unsigned long EffectiveIdleAwareCount	unsigned long EffectiveBackgroundCount			unsigned long EffectiveLimitFlags
0x0194					uint8_t EffectivePriorityClass	unsigned long EffectiveSwapCount			unsigned long EffectiveSchedulingClass
0x0195					uint8_t[3] Reserved
0x0198					unsigned long CompletionFilter	unsigned long EffectiveNotificationLimitCount			unsigned long EffectiveFreezeCount
0x019C						uint8_t EffectivePriorityClass			unsigned long EffectiveBackgroundCount
0x019D						uint8_t PriorityClass
0x019E						uint8_t[2] Reserved1
0x01A0					struct _WNF_STATE_NAME WakeChannel	unsigned long CompletionFilter			unsigned long EffectiveSwapCount
0x01A0					struct _JOBOBJECT_WAKE_INFORMATION WakeInfo
0x01A4									unsigned long EffectiveNotificationLimitCount
0x01A8						struct _WNF_STATE_NAME WakeChannel			uint8_t EffectivePriorityClass
0x01A8						struct _PS_WAKE_INFORMATION WakeInfo		struct _PS_WAKE_INFORMATION WakeInfo
0x01A9									uint8_t PriorityClass
0x01AA									uint8_t NestingDepth
0x01AB									uint8_t[1] Reserved1
0x01AC									unsigned long CompletionFilter
0x01B0									struct _WNF_STATE_NAME WakeChannel
0x01B0									struct _PS_WAKE_INFORMATION WakeInfo
0x01C8					struct _JOBOBJECT_WAKE_FILTER WakeFilter
0x01D0					struct _EJOB * NotificationLink
0x01D4					struct _JOB_NOTIFICATION_LIMITS * NotificationLimits
0x01D8					void * NotificationLimitsQuotaReference
0x01DC					struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket
0x01E0					unsigned long NotificationLimitFlags			struct _JOBOBJECT_WAKE_FILTER WakeFilter
0x01E4					unsigned long ViolationLimitFlags
0x01E8					struct _JOB_CPU_RATE_CONTROL * CpuRateControl			unsigned long LowEdgeLatchFilter	struct _JOBOBJECT_WAKE_FILTER WakeFilter
0x01EC					void * EffectiveSchedulingGroup			unsigned long OwnedHighEdgeFilters
0x01F0					unsigned long ProcessListCount	struct _EJOB * NotificationLink	struct _JOBOBJECT_WAKE_FILTER WakeFilter	struct _EJOB * NotificationLink	unsigned long LowEdgeLatchFilter
0x01F4						struct _JOBOBJECT_WAKE_FILTER WakeFilter			unsigned long OwnedHighEdgeFilters
0x01F8					uint64_t CurrentJobMemoryUsed		unsigned long LowEdgeLatchFilter	uint64_t CurrentJobMemoryUsed	struct _EJOB * NotificationLink
0x01FC						unsigned long LowEdgeLatchFilter	unsigned long OwnedHighEdgeFilters
0x0200					struct _EX_PUSH_LOCK MemoryLimitsLock	unsigned long ShadowActiveProcessCount	struct _EJOB * NotificationLink	struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo	uint64_t CurrentJobMemoryUsed
0x0204					struct _LIST_ENTRY SiblingJobLinks			void * NotificationInfoQuotaReference
0x0208						uint64_t CurrentJobMemoryUsed		struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket	struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo
0x020C					struct _LIST_ENTRY ChildJobListHead			struct _JOB_CPU_RATE_CONTROL * CpuRateControl	void * NotificationInfoQuotaReference
0x0210						struct _JOB_NOTIFICATION_INFORMATION * NotificationInfo		void * EffectiveSchedulingGroup	struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket
0x0214					struct _EJOB * ParentJob	void * NotificationInfoQuotaReference			struct _JOB_CPU_RATE_CONTROL * CpuRateControl
0x0218					struct _EJOB * volatile RootJob	struct _IO_MINI_COMPLETION_PACKET_USER * NotificationPacket		uint64_t ReadyTime	void * EffectiveSchedulingGroup
0x021C					struct _LIST_ENTRY IteratorListHead	struct _JOB_CPU_RATE_CONTROL * CpuRateControl
0x0220						void * EffectiveSchedulingGroup		struct _EX_PUSH_LOCK MemoryLimitsLock	uint64_t ReadyTime
0x0224						struct _EX_PUSH_LOCK MemoryLimitsLock		struct _LIST_ENTRY SiblingJobLinks
0x0228					struct _KPROCESS_VALUES Accounting	struct _LIST_ENTRY SiblingJobLinks			struct _EX_PUSH_LOCK MemoryLimitsLock
0x022C			struct _LIST_ENTRY ChildJobListHead					struct _LIST_ENTRY SiblingJobLinks
0x0230						struct _LIST_ENTRY ChildJobListHead
0x0234			struct _EJOB * ParentJob	struct _LIST_ENTRY ChildJobListHead
0x0238			struct _EJOB * ParentJob			struct _EJOB * volatile RootJob
0x023C			struct _EJOB * volatile RootJob			struct _LIST_ENTRY IteratorListHead	struct _EJOB * ParentJob
0x0240			struct _LIST_ENTRY IteratorListHead				struct _EJOB * volatile RootJob
0x0244						unsigned long AncestorCount	struct _LIST_ENTRY IteratorListHead
0x0248			struct _EPROCESS_VALUES Accounting			struct _EJOB * * Ancestors
0x024C							unsigned long AncestorCount
0x0250						struct _EPROCESS_VALUES Accounting	struct _EJOB * * Ancestors
0x0250							void * SessionObject
0x0258							struct _EPROCESS_VALUES Accounting
0x0278					unsigned long TimerListLock
0x027C					struct _LIST_ENTRY TimerListHead
0x0284					unsigned long JobFlags
0x0284:0x00					unsigned long CloseDone
0x0284:0x01					unsigned long MultiGroup
0x0284:0x02	unsigned long OutstandingNotification
0x0284:0x03	unsigned long NotificationInProgress
0x0284:0x04	unsigned long UILimits
0x0284:0x05	unsigned long CpuRateControlActive
0x0284:0x06	unsigned long OwnCpuRateControl
0x0284:0x07	unsigned long Terminating
0x0284:0x08	unsigned long WorkingSetLock
0x0284:0x09	unsigned long JobFrozen
0x0284:0x0A	unsigned long IdleAware
0x0284:0x0B	unsigned long WakeNotificationAllocated
0x0284:0x0C	unsigned long WakeNotificationEnabled
0x0284:0x0D	unsigned long WakeNotificationPending
0x0284:0x0E	unsigned long LimitNotificationRequired
0x0284:0x0F	unsigned long ZeroCountNotificationRequired
0x0284:0x10	unsigned long CycleTimeNotificationRequired
0x0284:0x11	unsigned long CycleTimeNotificationPending
0x0284:0x12	unsigned long TimersVirtualized
0x0284:0x13	unsigned long SpareJobFlags
0x0298		unsigned long SequenceNumber	unsigned long ShadowActiveProcessCount
0x029C		unsigned long TimerListLock	unsigned long SequenceNumber
0x02A0		struct _LIST_ENTRY TimerListHead	unsigned long TimerListLock	unsigned long ShadowActiveProcessCount
0x02A4			struct _LIST_ENTRY TimerListHead	unsigned long SequenceNumber
0x02A8		unsigned long JobFlags		unsigned long TimerListLock	unsigned long ShadowActiveProcessCount
0x02A8:0x00		unsigned long CloseDone
0x02A8:0x01		unsigned long MultiGroup
0x02A8:0x02		unsigned long OutstandingNotification
0x02A8:0x03		unsigned long NotificationInProgress
0x02A8:0x04		unsigned long UILimits
0x02A8:0x05		unsigned long CpuRateControlActive
0x02A8:0x06		unsigned long OwnCpuRateControl
0x02A8:0x07		unsigned long Terminating
0x02A8:0x08		unsigned long WorkingSetLock
0x02A8:0x09		unsigned long JobFrozen
0x02A8:0x0A		unsigned long Background
0x02A8:0x0B		unsigned long WakeNotificationAllocated
0x02A8:0x0C		unsigned long WakeNotificationEnabled
0x02A8:0x0D		unsigned long WakeNotificationPending
0x02A8:0x0E		unsigned long LimitNotificationRequired
0x02A8:0x0F		unsigned long ZeroCountNotificationRequired
0x02A8:0x10		unsigned long CycleTimeNotificationRequired
0x02A8:0x11		unsigned long CycleTimeNotificationPending
0x02A8:0x12		unsigned long TimersVirtualized
0x02A8:0x13		unsigned long JobSwapped
0x02A8:0x14		unsigned long ViolationDetected
0x02A8:0x15		unsigned long EmptyJobNotified
0x02A8:0x16		unsigned long NoSystemCharge
0x02A8:0x17		unsigned long SpareJobFlags
0x02AC			unsigned long JobFlags	struct _LIST_ENTRY TimerListHead	unsigned long ActiveAuxiliaryProcessCount
0x02AC:0x00			unsigned long CloseDone
0x02AC:0x01			unsigned long MultiGroup
0x02AC:0x02			unsigned long OutstandingNotification
0x02AC:0x03			unsigned long NotificationInProgress
0x02AC:0x04			unsigned long UILimits
0x02AC:0x05			unsigned long CpuRateControlActive
0x02AC:0x06			unsigned long OwnCpuRateControl
0x02AC:0x07			unsigned long Terminating
0x02AC:0x08			unsigned long WorkingSetLock
0x02AC:0x09			unsigned long JobFrozen
0x02AC:0x0A			unsigned long Background
0x02AC:0x0B			unsigned long WakeNotificationAllocated
0x02AC:0x0C			unsigned long WakeNotificationEnabled
0x02AC:0x0D			unsigned long WakeNotificationPending
0x02AC:0x0E			unsigned long LimitNotificationRequired
0x02AC:0x0F			unsigned long ZeroCountNotificationRequired
0x02AC:0x10			unsigned long CycleTimeNotificationRequired
0x02AC:0x11			unsigned long CycleTimeNotificationPending
0x02AC:0x12			unsigned long TimersVirtualized
0x02AC:0x13			unsigned long JobSwapped
0x02AC:0x14			unsigned long ViolationDetected
0x02AC:0x15			unsigned long EmptyJobNotified
0x02AC:0x16			unsigned long NoSystemCharge
0x02AC:0x17			unsigned long SpareJobFlags
0x02B0			unsigned long EffectiveHighEdgeFilters		unsigned long SequenceNumber
0x02B4				unsigned long JobFlags	unsigned long TimerListLock
0x02B4:0x00				unsigned long CloseDone
0x02B4:0x01				unsigned long MultiGroup
0x02B4:0x02				unsigned long OutstandingNotification
0x02B4:0x03				unsigned long NotificationInProgress
0x02B4:0x04				unsigned long UILimits
0x02B4:0x05				unsigned long CpuRateControlActive
0x02B4:0x06				unsigned long OwnCpuRateControl
0x02B4:0x07				unsigned long Terminating
0x02B4:0x08	unsigned long WorkingSetLock
0x02B4:0x09	unsigned long JobFrozen
0x02B4:0x0A	unsigned long Background
0x02B4:0x0B	unsigned long WakeNotificationAllocated
0x02B4:0x0C	unsigned long WakeNotificationEnabled
0x02B4:0x0D	unsigned long WakeNotificationPending
0x02B4:0x0E	unsigned long LimitNotificationRequired
0x02B4:0x0F	unsigned long ZeroCountNotificationRequired
0x02B4:0x10	unsigned long CycleTimeNotificationRequired
0x02B4:0x11	unsigned long CycleTimeNotificationPending
0x02B4:0x12	unsigned long TimersVirtualized
0x02B4:0x13	unsigned long JobSwapped
0x02B4:0x14	unsigned long ViolationDetected
0x02B4:0x15	unsigned long EmptyJobNotified
0x02B4:0x16	unsigned long NoSystemCharge
0x02B4:0x17	unsigned long DropNoWakeCharges
0x02B4:0x18	unsigned long NoWakeChargePolicyDecided
0x02B4:0x19	unsigned long SpareJobFlags
0x02B8	unsigned long EffectiveHighEdgeFilters			struct _LIST_ENTRY TimerListHead
0x02C0				struct _GUID ContainerId
0x02D0				struct _ESILO * Container
0x02D4				struct _PS_PROPERTY_SET PropertySet
0x02E0				struct _JOB_NET_RATE_CONTROL * NetRateControl
0x02E4				struct _JOB_IO_RATE_CONTROL * IoRateControl
0x02E8				unsigned long JobFlags
0x02E8:0x00				unsigned long CloseDone
0x02E8:0x01				unsigned long MultiGroup
0x02E8:0x02				unsigned long OutstandingNotification
0x02E8:0x03				unsigned long NotificationInProgress
0x02E8:0x04		unsigned long UILimits
0x02E8:0x05		unsigned long CpuRateControlActive
0x02E8:0x06		unsigned long OwnCpuRateControl
0x02E8:0x07		unsigned long Terminating
0x02E8:0x08		unsigned long WorkingSetLock
0x02E8:0x09		unsigned long JobFrozen
0x02E8:0x0A		unsigned long Background
0x02E8:0x0B		unsigned long WakeNotificationAllocated
0x02E8:0x0C		unsigned long WakeNotificationEnabled
0x02E8:0x0D		unsigned long WakeNotificationPending
0x02E8:0x0E		unsigned long LimitNotificationRequired
0x02E8:0x0F		unsigned long ZeroCountNotificationRequired
0x02E8:0x10		unsigned long CycleTimeNotificationRequired
0x02E8:0x11		unsigned long CycleTimeNotificationPending
0x02E8:0x12		unsigned long TimersVirtualized
0x02E8:0x13		unsigned long JobSwapped
0x02E8:0x14		unsigned long ViolationDetected
0x02E8:0x15		unsigned long EmptyJobNotified
0x02E8:0x16		unsigned long NoSystemCharge
0x02E8:0x17		unsigned long DropNoWakeCharges
0x02E8:0x18		unsigned long NoWakeChargePolicyDecided
0x02E8:0x19		unsigned long NetRateControlActive
0x02E8:0x1A		unsigned long OwnNetRateControl
0x02E8:0x1B		unsigned long IoRateControlActive
0x02E8:0x1C		unsigned long OwnIoRateControl
0x02E8:0x1D		unsigned long IsContainerRoot
0x02E8:0x1E		unsigned long SpareJobFlags
0x02EC		unsigned long EffectiveHighEdgeFilters
0x02F0		struct _PROCESS_ENERGY_VALUES * EnergyValues
0x02F4		volatile unsigned long SharedCommitCharge