Min version2003/XP64 SP1
Max versionVista SP2
x64 offset
offset:bitpos
Field Name
0x0000unsigned long
PagedPoolCharge
0x0004unsigned long
NonPagedPoolCharge
0x0008unsigned long
SecurityDescriptorCharge
0x0010struct _EPROCESS *
ExclusiveProcess
0x0018uint64_t
Reserved