Min version2003/XP64 SP1
Max versionVista SP2
Architecturex86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000unsigned long
PagedPoolCharge
0x0000
0x0004unsigned long
NonPagedPoolCharge
0x0004
0x0008unsigned long
SecurityDescriptorCharge
0x0008
0x000Cstruct _EPROCESS *
ExclusiveProcess
0x0010