Min version2003/XP64 SP1VistaVista SP1
Max version2003/XP64 SP2Vista SP2
Architecturex86x64x86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000struct _EPROCESS *
Process
0x0000
0x0004unsigned long
HandleCount
unsigned long
HandleCount
0x0008
0x0004:0x18unsigned long
LockCount
0x0008:0x18