Min version2003/XP64 SP1
Max versionVista SP2
x86 offset
offset:bitpos
Field Name
0x0000unsigned long
PagedPoolCharge
0x0004unsigned long
NonPagedPoolCharge
0x0008unsigned long
SecurityDescriptorCharge
0x000Cstruct _EPROCESS *
ExclusiveProcess