Min version2003/XP64 SP1Vista SP178 Pre RTM88.18.1 Update 110 Pre RTM10 Pre RTM1010 TH2
Max version2003/XP64 SP2Vista SP27 SP1
x64 offset
offset:bitpos
Field Name
0x0000struct _KEVENT
Event
0x0018struct _LIST_ENTRY
JobLinks
0x0028struct _LIST_ENTRY
ProcessListHead
0x0038struct _ERESOURCE
JobLock
0x00A0union _LARGE_INTEGER
TotalUserTime
0x00A8union _LARGE_INTEGER
TotalKernelTime
0x00B0union _LARGE_INTEGER
ThisPeriodTotalUserTime
union _LARGE_INTEGER
TotalCycleTime
0x00B8union _LARGE_INTEGER
ThisPeriodTotalKernelTime
union _LARGE_INTEGER
ThisPeriodTotalUserTime
0x00C0unsigned long
TotalPageFaultCount
union _LARGE_INTEGER
ThisPeriodTotalKernelTime
0x00C4unsigned long
TotalProcesses
0x00C8unsigned long
ActiveProcesses
uint64_t
TotalContextSwitches
0x00CCunsigned long
TotalTerminatedProcesses
0x00D0union _LARGE_INTEGER
PerProcessUserTimeLimit
unsigned long
TotalPageFaultCount
0x00D4unsigned long
TotalProcesses
0x00D8union _LARGE_INTEGER
PerJobUserTimeLimit
unsigned long
ActiveProcesses
0x00DCunsigned long
TotalTerminatedProcesses
0x00E0unsigned long
LimitFlags
uint64_t
MinimumWorkingSetSize
union _LARGE_INTEGER
PerProcessUserTimeLimit
0x00E8uint64_t
MinimumWorkingSetSize
uint64_t
MaximumWorkingSetSize
union _LARGE_INTEGER
PerJobUserTimeLimit
0x00F0uint64_t
MaximumWorkingSetSize
unsigned long
LimitFlags
uint64_t
MinimumWorkingSetSize
0x00F4unsigned long
ActiveProcessLimit
0x00F8unsigned long
ActiveProcessLimit
struct _KAFFINITY_EX
Affinity
uint64_t
MaximumWorkingSetSize
0x0100uint64_t
Affinity
unsigned long
LimitFlags
0x0104unsigned long
ActiveProcessLimit
0x0108uint8_t
PriorityClass
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
0x010Cunsigned long
UIRestrictionsClass
0x0110unsigned long
SecurityLimitFlags
struct _JOB_ACCESS_STATE *
AccessState
0x0118void *
Token
unsigned long
UIRestrictionsClass
0x011Cunsigned long
EndOfJobTimeAction
0x0120struct _PS_JOB_TOKEN_FILTER *
Filter
void *
CompletionPort
uint8_t
PriorityClass
0x0128unsigned long
EndOfJobTimeAction
void *
CompletionKey
struct _JOB_ACCESS_STATE *
AccessState
0x0130void *
CompletionPort
unsigned long
SessionId
unsigned long
UIRestrictionsClass
0x0134unsigned long
SchedulingClass
unsigned long
EndOfJobTimeAction
0x0138void *
CompletionKey
uint64_t
ReadOperationCount
void *
CompletionPort
0x0140unsigned long
SessionId
uint64_t
WriteOperationCount
void *
CompletionKey
0x0144unsigned long
SchedulingClass
0x0148uint64_t
ReadOperationCount
uint64_t
OtherOperationCount
unsigned long
SessionId
0x014Cunsigned long
SchedulingClass
0x0150uint64_t
WriteOperationCount
uint64_t
ReadTransferCount
uint64_t
ReadOperationCount
uint8_t
PriorityClass
0x0158uint64_t
OtherOperationCount
uint64_t
WriteTransferCount
uint64_t
WriteOperationCount
struct _JOB_ACCESS_STATE *
AccessState
0x0160uint64_t
ReadTransferCount
uint64_t
OtherTransferCount
uint64_t
OtherOperationCount
void *
AccessStateQuotaReference
0x0168uint64_t
WriteTransferCount
uint64_t
ProcessMemoryLimit
uint64_t
ReadTransferCount
unsigned long
UIRestrictionsClass
0x016Cunsigned long
EndOfJobTimeAction
0x0170uint64_t
OtherTransferCount
uint64_t
JobMemoryLimit
uint64_t
WriteTransferCount
void *
CompletionPort
0x0178struct _IO_COUNTERS
IoInfo
uint64_t
PeakProcessMemoryUsed
uint64_t
OtherTransferCount
void *
CompletionKey
0x0180uint64_t
PeakJobMemoryUsed
uint64_t
ProcessMemoryLimit
uint64_t
CompletionCount
0x0188uint64_t
CurrentJobMemoryUsed
uint64_t
JobMemoryLimit
unsigned long
SessionId
0x018Cunsigned long
SchedulingClass
0x0190struct _EX_PUSH_LOCK
MemoryLimitsLock
uint64_t
PeakProcessMemoryUsed
uint64_t
ReadOperationCount
0x0198struct _LIST_ENTRY
JobSetLinks
uint64_t
PeakJobMemoryUsed
uint64_t
WriteOperationCount
0x01A0uint64_t
CurrentJobMemoryUsed
uint64_t
OtherOperationCount
0x01A8uint64_t
ProcessMemoryLimit
unsigned long
MemberLevel
struct _EX_PUSH_LOCK
MemoryLimitsLock
uint64_t
ReadTransferCount
0x01ACunsigned long
JobFlags
0x01B0uint64_t
JobMemoryLimit
struct _LIST_ENTRY
JobSetLinks
uint64_t
WriteTransferCount
struct _JOB_ACCESS_STATE *
AccessState
0x01B8uint64_t
PeakProcessMemoryUsed
uint64_t
OtherTransferCount
void *
AccessStateQuotaReference
0x01C0uint64_t
PeakJobMemoryUsed
unsigned long
MemberLevel
struct _PROCESS_DISK_COUNTERS
DiskIoInfo
unsigned long
UIRestrictionsClass
0x01C4unsigned long
JobFlags
unsigned long
EndOfJobTimeAction
0x01C8uint64_t
CurrentJobMemoryUsed
void *
CompletionPort
0x01D0struct _KGUARDED_MUTEX
MemoryLimitsLock
void *
CompletionKey
0x01D8uint64_t
CompletionCount
0x01E0unsigned long
SessionId
0x01E4unsigned long
SchedulingClass
0x01E8uint64_t
ProcessMemoryLimit
uint64_t
ReadOperationCount
0x01F0uint64_t
JobMemoryLimit
uint64_t
WriteOperationCount
0x01F8uint64_t
PeakProcessMemoryUsed
uint64_t
OtherOperationCount
0x0200uint64_t
PeakJobMemoryUsed
uint64_t
ReadTransferCount
0x0208struct _LIST_ENTRY
JobSetLinks
struct _KAFFINITY_EX
EffectiveAffinity
uint64_t
WriteTransferCount
0x0210uint64_t
OtherTransferCount
0x0218unsigned long
MemberLevel
struct _PROCESS_DISK_COUNTERS
DiskIoInfo
0x021Cunsigned long
JobFlags
0x0240uint64_t
ProcessMemoryLimit
0x0248uint64_t
JobMemoryLimit
0x0250union _LARGE_INTEGER
EffectivePerProcessUserTimeLimit
uint64_t
PeakProcessMemoryUsed
uint64_t
JobTotalMemoryLimit
0x0258uint64_t
EffectiveMinimumWorkingSetSize
uint64_t
PeakJobMemoryUsed
uint64_t
PeakProcessMemoryUsed
0x0260uint64_t
EffectiveMaximumWorkingSetSize
struct _KAFFINITY_EX
EffectiveAffinity
uint64_t
PeakJobMemoryUsed
0x0268uint64_t
EffectiveProcessMemoryLimit
struct _KAFFINITY_EX
EffectiveAffinity
0x0270struct _EJOB *
EffectiveProcessMemoryLimitJob
0x0278struct _EJOB *
EffectivePerProcessUserTimeLimitJob
0x0280unsigned long
EffectiveLimitFlags
0x0284unsigned long
EffectiveSchedulingClass
0x0288unsigned long
EffectiveFreezeCount
0x028Cunsigned long
EffectiveIdleAwareCount
0x0290uint8_t
EffectivePriorityClass
0x0291uint8_t[3]
Reserved
0x0294unsigned long
CompletionFilter
0x0298struct _WNF_STATE_NAME
WakeChannel
0x0298struct _JOBOBJECT_WAKE_INFORMATION
WakeInfo
0x02C0struct _JOBOBJECT_WAKE_FILTER
WakeFilter
0x02C8struct _EJOB *
NotificationLink
0x02D0struct _JOB_NOTIFICATION_LIMITS *
NotificationLimits
0x02D8void *
NotificationLimitsQuotaReference
0x02E0struct _IO_MINI_COMPLETION_PACKET_USER *
NotificationPacket
0x02E8unsigned long
NotificationLimitFlags
0x02ECunsigned long
ViolationLimitFlags
0x02F0struct _JOB_CPU_RATE_CONTROL *
CpuRateControl
0x02F8void *
EffectiveSchedulingGroup
0x0300unsigned long
ProcessListCount
0x0308uint64_t
CurrentJobMemoryUsed
union _LARGE_INTEGER
EffectivePerProcessUserTimeLimit
0x0310struct _EX_PUSH_LOCK
MemoryLimitsLock
uint64_t
EffectiveMinimumWorkingSetSize
union _LARGE_INTEGER
EffectivePerProcessUserTimeLimit
0x0318struct _LIST_ENTRY
SiblingJobLinks
uint64_t
EffectiveMaximumWorkingSetSize
uint64_t
EffectiveMinimumWorkingSetSize
0x0320uint64_t
EffectiveProcessMemoryLimit
uint64_t
EffectiveMaximumWorkingSetSize
0x0328struct _LIST_ENTRY
ChildJobListHead
struct _EJOB *
EffectiveProcessMemoryLimitJob
uint64_t
EffectiveProcessMemoryLimit
0x0330struct _EJOB *
EffectivePerProcessUserTimeLimitJob
struct _EJOB *
EffectiveProcessMemoryLimitJob
0x0338struct _EJOB *
ParentJob
unsigned long
EffectiveLimitFlags
struct _EJOB *
EffectiveDiskIoRateLimitJob
struct _EJOB *
EffectivePerProcessUserTimeLimitJob
0x033Cunsigned long
EffectiveSchedulingClass
0x0340struct _EJOB * volatile
RootJob
unsigned long
EffectiveFreezeCount
struct _EJOB *
EffectiveNetIoRateLimitJob
struct _EJOB *
EffectiveDiskIoRateLimitJob
0x0344unsigned long
EffectiveBackgroundCount
0x0348struct _LIST_ENTRY
IteratorListHead
unsigned long
EffectiveSwapCount
struct _EJOB *
EffectiveHeapAttributionJob
struct _EJOB *
EffectiveNetIoRateLimitJob
0x034Cunsigned long
EffectiveNotificationLimitCount
0x0350uint8_t
EffectivePriorityClass
unsigned long
EffectiveLimitFlags
struct _EJOB *
EffectiveHeapAttributionJob
0x0351uint8_t
PriorityClass
0x0352uint8_t[2]
Reserved1
0x0354unsigned long
CompletionFilter
unsigned long
EffectiveSchedulingClass
0x0358struct _KPROCESS_VALUES
Accounting
struct _WNF_STATE_NAME
WakeChannel
unsigned long
EffectiveFreezeCount
unsigned long
EffectiveLimitFlags
0x0358struct _PS_WAKE_INFORMATION
WakeInfo
struct _PS_WAKE_INFORMATION
WakeInfo
0x035Cunsigned long
EffectiveBackgroundCount
unsigned long
EffectiveSchedulingClass
0x0360unsigned long
EffectiveSwapCount
unsigned long
EffectiveFreezeCount
0x0364unsigned long
EffectiveNotificationLimitCount
unsigned long
EffectiveBackgroundCount
0x0368uint8_t
EffectivePriorityClass
unsigned long
EffectiveSwapCount
0x0369uint8_t
PriorityClass
0x036Auint8_t[2]
Reserved1
0x036Cunsigned long
CompletionFilter
unsigned long
EffectiveNotificationLimitCount
0x0370struct _WNF_STATE_NAME
WakeChannel
uint8_t
EffectivePriorityClass
0x0370struct _PS_WAKE_INFORMATION
WakeInfo
0x0371uint8_t
PriorityClass
0x0372uint8_t[2]
Reserved1
uint8_t
NestingDepth
0x0373uint8_t[1]
Reserved1
0x0374unsigned long
CompletionFilter
0x0378struct _WNF_STATE_NAME
WakeChannel
0x0378struct _PS_WAKE_INFORMATION
WakeInfo
0x0390struct _JOBOBJECT_WAKE_FILTER
WakeFilter
0x0398unsigned long
LowEdgeLatchFilter
0x039Cunsigned long
OwnedHighEdgeFilters
0x03A0struct _JOBOBJECT_WAKE_FILTER
WakeFilter
struct _EJOB *
NotificationLink
0x03A8uint64_t
TimerListLock
unsigned long
LowEdgeLatchFilter
uint64_t
CurrentJobMemoryUsed
struct _JOBOBJECT_WAKE_FILTER
WakeFilter
0x03ACunsigned long
OwnedHighEdgeFilters
0x03B0struct _LIST_ENTRY
TimerListHead
struct _EJOB *
NotificationLink
struct _JOB_NOTIFICATION_INFORMATION *
NotificationInfo
unsigned long
LowEdgeLatchFilter
struct _JOBOBJECT_WAKE_FILTER
WakeFilter
0x03B4unsigned long
OwnedHighEdgeFilters
0x03B8uint64_t
CurrentJobMemoryUsed
void *
NotificationInfoQuotaReference
struct _EJOB *
NotificationLink
unsigned long
LowEdgeLatchFilter
0x03BCunsigned long
OwnedHighEdgeFilters
0x03C0unsigned long
JobFlags
struct _JOB_NOTIFICATION_INFORMATION *
NotificationInfo
struct _IO_MINI_COMPLETION_PACKET_USER *
NotificationPacket
uint64_t
CurrentJobMemoryUsed
struct _EJOB *
NotificationLink
0x03C0:0x00unsigned long
CloseDone
0x03C0:0x01unsigned long
MultiGroup
0x03C0:0x02unsigned long
OutstandingNotification
0x03C0:0x03unsigned long
NotificationInProgress
0x03C0:0x04unsigned long
UILimits
0x03C0:0x05unsigned long
CpuRateControlActive
0x03C0:0x06unsigned long
OwnCpuRateControl
0x03C0:0x07unsigned long
Terminating
0x03C0:0x08unsigned long
WorkingSetLock
0x03C0:0x09unsigned long
JobFrozen
0x03C0:0x0Aunsigned long
IdleAware
0x03C0:0x0Bunsigned long
WakeNotificationAllocated
0x03C0:0x0Cunsigned long
WakeNotificationEnabled
0x03C0:0x0Dunsigned long
WakeNotificationPending
0x03C0:0x0Eunsigned long
LimitNotificationRequired
0x03C0:0x0Funsigned long
ZeroCountNotificationRequired
0x03C0:0x10unsigned long
CycleTimeNotificationRequired
0x03C0:0x11unsigned long
CycleTimeNotificationPending
0x03C0:0x12unsigned long
TimersVirtualized
0x03C0:0x13unsigned long
SpareJobFlags
0x03C8void *
NotificationInfoQuotaReference
struct _JOB_CPU_RATE_CONTROL *
CpuRateControl
struct _JOB_NOTIFICATION_INFORMATION *
NotificationInfo
uint64_t
CurrentJobMemoryUsed
0x03D0struct _IO_MINI_COMPLETION_PACKET_USER *
NotificationPacket
void *
EffectiveSchedulingGroup
void *
NotificationInfoQuotaReference
struct _JOB_NOTIFICATION_INFORMATION *
NotificationInfo
0x03D8struct _JOB_CPU_RATE_CONTROL *
CpuRateControl
uint64_t
ReadyTime
struct _IO_MINI_COMPLETION_PACKET_USER *
NotificationPacket
void *
NotificationInfoQuotaReference
0x03E0void *
EffectiveSchedulingGroup
struct _EX_PUSH_LOCK
MemoryLimitsLock
struct _JOB_CPU_RATE_CONTROL *
CpuRateControl
struct _IO_MINI_COMPLETION_PACKET_USER *
NotificationPacket
0x03E8struct _EX_PUSH_LOCK
MemoryLimitsLock
struct _LIST_ENTRY
SiblingJobLinks
void *
EffectiveSchedulingGroup
struct _JOB_CPU_RATE_CONTROL *
CpuRateControl
0x03F0struct _LIST_ENTRY
SiblingJobLinks
uint64_t
ReadyTime
void *
EffectiveSchedulingGroup
0x03F8struct _LIST_ENTRY
ChildJobListHead
struct _EX_PUSH_LOCK
MemoryLimitsLock
uint64_t
ReadyTime
0x0400struct _LIST_ENTRY
ChildJobListHead
struct _LIST_ENTRY
SiblingJobLinks
struct _EX_PUSH_LOCK
MemoryLimitsLock
0x0408struct _EJOB *
ParentJob
struct _LIST_ENTRY
SiblingJobLinks
0x0410struct _EJOB *
ParentJob
struct _EJOB * volatile
RootJob
struct _LIST_ENTRY
ChildJobListHead
0x0418struct _EJOB * volatile
RootJob
struct _LIST_ENTRY
IteratorListHead
struct _LIST_ENTRY
ChildJobListHead
0x0420struct _LIST_ENTRY
IteratorListHead
struct _EJOB *
ParentJob
0x0428uint64_t
AncestorCount
struct _EJOB * volatile
RootJob
struct _EJOB *
ParentJob
0x0430struct _EPROCESS_VALUES
Accounting
struct _EJOB * *
Ancestors
struct _LIST_ENTRY
IteratorListHead
struct _EJOB * volatile
RootJob
0x0438struct _EPROCESS_VALUES
Accounting
struct _LIST_ENTRY
IteratorListHead
0x0440uint64_t
AncestorCount
0x0448struct _EJOB * *
Ancestors
uint64_t
AncestorCount
0x0450struct _EPROCESS_VALUES
Accounting
struct _EJOB * *
Ancestors
0x0450void *
SessionObject
0x0458struct _EPROCESS_VALUES
Accounting
0x0480unsigned long
ShadowActiveProcessCount
0x0484unsigned long
SequenceNumber
0x0488uint64_t
TimerListLock
unsigned long
ShadowActiveProcessCount
0x048Cunsigned long
SequenceNumber
0x0490struct _LIST_ENTRY
TimerListHead
uint64_t
TimerListLock
0x0498struct _LIST_ENTRY
TimerListHead
0x04A0unsigned long
JobFlags
unsigned long
ShadowActiveProcessCount
0x04A0:0x00unsigned long
CloseDone
0x04A0:0x01unsigned long
MultiGroup
0x04A0:0x02unsigned long
OutstandingNotification
0x04A0:0x03unsigned long
NotificationInProgress
0x04A0:0x04unsigned long
UILimits
0x04A0:0x05unsigned long
CpuRateControlActive
0x04A0:0x06unsigned long
OwnCpuRateControl
0x04A0:0x07unsigned long
Terminating
0x04A0:0x08unsigned long
WorkingSetLock
0x04A0:0x09unsigned long
JobFrozen
0x04A0:0x0Aunsigned long
Background
0x04A0:0x0Bunsigned long
WakeNotificationAllocated
0x04A0:0x0Cunsigned long
WakeNotificationEnabled
0x04A0:0x0Dunsigned long
WakeNotificationPending
0x04A0:0x0Eunsigned long
LimitNotificationRequired
0x04A0:0x0Funsigned long
ZeroCountNotificationRequired
0x04A0:0x10unsigned long
CycleTimeNotificationRequired
0x04A0:0x11unsigned long
CycleTimeNotificationPending
0x04A0:0x12unsigned long
TimersVirtualized
0x04A0:0x13unsigned long
JobSwapped
0x04A0:0x14unsigned long
ViolationDetected
0x04A0:0x15unsigned long
EmptyJobNotified
0x04A0:0x16unsigned long
NoSystemCharge
0x04A0:0x17unsigned long
SpareJobFlags
0x04A4unsigned long
EffectiveHighEdgeFilters
unsigned long
SequenceNumber
0x04A8unsigned long
JobFlags
uint64_t
TimerListLock
unsigned long
ShadowActiveProcessCount
0x04A8:0x00unsigned long
CloseDone
0x04A8:0x01unsigned long
MultiGroup
0x04A8:0x02unsigned long
OutstandingNotification
0x04A8:0x03unsigned long
NotificationInProgress
0x04A8:0x04unsigned long
UILimits
0x04A8:0x05unsigned long
CpuRateControlActive
0x04A8:0x06unsigned long
OwnCpuRateControl
0x04A8:0x07unsigned long
Terminating
0x04A8:0x08unsigned long
WorkingSetLock
0x04A8:0x09unsigned long
JobFrozen
0x04A8:0x0Aunsigned long
Background
0x04A8:0x0Bunsigned long
WakeNotificationAllocated
0x04A8:0x0Cunsigned long
WakeNotificationEnabled
0x04A8:0x0Dunsigned long
WakeNotificationPending
0x04A8:0x0Eunsigned long
LimitNotificationRequired
0x04A8:0x0Funsigned long
ZeroCountNotificationRequired
0x04A8:0x10unsigned long
CycleTimeNotificationRequired
0x04A8:0x11unsigned long
CycleTimeNotificationPending
0x04A8:0x12unsigned long
TimersVirtualized
0x04A8:0x13unsigned long
JobSwapped
0x04A8:0x14unsigned long
ViolationDetected
0x04A8:0x15unsigned long
EmptyJobNotified
0x04A8:0x16unsigned long
NoSystemCharge
0x04A8:0x17unsigned long
SpareJobFlags
unsigned long
DropNoWakeCharges
0x04A8:0x18unsigned long
NoWakeChargePolicyDecided
0x04A8:0x19unsigned long
SpareJobFlags
0x04ACunsigned long
EffectiveHighEdgeFilters
unsigned long
ActiveAuxiliaryProcessCount
0x04B0struct _LIST_ENTRY
TimerListHead
unsigned long
SequenceNumber
0x04B8uint64_t
TimerListLock
0x04C0struct _GUID
ContainerId
struct _LIST_ENTRY
TimerListHead
0x04D0unsigned long
JobFlags
struct _GUID
ContainerId
0x04D0:0x00unsigned long
CloseDone
0x04D0:0x01unsigned long
MultiGroup
0x04D0:0x02unsigned long
OutstandingNotification
0x04D0:0x03unsigned long
NotificationInProgress
0x04D0:0x04unsigned long
UILimits
0x04D0:0x05unsigned long
CpuRateControlActive
0x04D0:0x06unsigned long
OwnCpuRateControl
0x04D0:0x07unsigned long
Terminating
0x04D0:0x08unsigned long
WorkingSetLock
0x04D0:0x09unsigned long
JobFrozen
0x04D0:0x0Aunsigned long
Background
0x04D0:0x0Bunsigned long
WakeNotificationAllocated
0x04D0:0x0Cunsigned long
WakeNotificationEnabled
0x04D0:0x0Dunsigned long
WakeNotificationPending
0x04D0:0x0Eunsigned long
LimitNotificationRequired
0x04D0:0x0Funsigned long
ZeroCountNotificationRequired
0x04D0:0x10unsigned long
CycleTimeNotificationRequired
0x04D0:0x11unsigned long
CycleTimeNotificationPending
0x04D0:0x12unsigned long
TimersVirtualized
0x04D0:0x13unsigned long
JobSwapped
0x04D0:0x14unsigned long
ViolationDetected
0x04D0:0x15unsigned long
EmptyJobNotified
0x04D0:0x16unsigned long
NoSystemCharge
0x04D0:0x17unsigned long
DropNoWakeCharges
0x04D0:0x18unsigned long
NoWakeChargePolicyDecided
0x04D0:0x19unsigned long
SpareJobFlags
0x04D4unsigned long
EffectiveHighEdgeFilters
0x04D8struct _PSP_JOB_POLICY_TELEMETRY *
PolicyTelemetry
0x04E0struct _PROCESS_ENERGY_VALUES *
EnergyValues
struct _PS_PROPERTY_SET
PropertySet
struct _ESILO *
Container
struct _SILO_CONTEXT *
Container
0x04E8struct _PS_PROPERTY_SET
PropertySet
0x04F8struct _JOB_NET_RATE_CONTROL *
NetRateControl
0x0500struct _JOB_IO_RATE_CONTROL *
IoRateControl
struct _JOB_NET_RATE_CONTROL *
NetRateControl
0x0508unsigned long
JobFlags
struct _JOB_IO_RATE_CONTROL *
IoRateControl
0x0508:0x00unsigned long
CloseDone
0x0508:0x01unsigned long
MultiGroup
0x0508:0x02unsigned long
OutstandingNotification
0x0508:0x03unsigned long
NotificationInProgress
0x0508:0x04unsigned long
UILimits
0x0508:0x05unsigned long
CpuRateControlActive
0x0508:0x06unsigned long
OwnCpuRateControl
0x0508:0x07unsigned long
Terminating
0x0508:0x08unsigned long
WorkingSetLock
0x0508:0x09unsigned long
JobFrozen
0x0508:0x0Aunsigned long
Background
0x0508:0x0Bunsigned long
WakeNotificationAllocated
0x0508:0x0Cunsigned long
WakeNotificationEnabled
0x0508:0x0Dunsigned long
WakeNotificationPending
0x0508:0x0Eunsigned long
LimitNotificationRequired
0x0508:0x0Funsigned long
ZeroCountNotificationRequired
0x0508:0x10unsigned long
CycleTimeNotificationRequired
0x0508:0x11unsigned long
CycleTimeNotificationPending
0x0508:0x12unsigned long
TimersVirtualized
0x0508:0x13unsigned long
JobSwapped
0x0508:0x14unsigned long
ViolationDetected
0x0508:0x15unsigned long
EmptyJobNotified
0x0508:0x16unsigned long
NoSystemCharge
0x0508:0x17unsigned long
DropNoWakeCharges
0x0508:0x18unsigned long
NoWakeChargePolicyDecided
0x0508:0x19unsigned long
NetRateControlActive
0x0508:0x1Aunsigned long
OwnNetRateControl
0x0508:0x1Bunsigned long
IoRateControlActive
0x0508:0x1Cunsigned long
OwnIoRateControl
0x0508:0x1Dunsigned long
SpareJobFlags
0x050Cunsigned long
EffectiveHighEdgeFilters
0x0510struct _PROCESS_ENERGY_VALUES *
EnergyValues
unsigned long
JobFlags
0x0510:0x00unsigned long
CloseDone
0x0510:0x01unsigned long
MultiGroup
0x0510:0x02unsigned long
OutstandingNotification
0x0510:0x03unsigned long
NotificationInProgress
0x0510:0x04unsigned long
UILimits
0x0510:0x05unsigned long
CpuRateControlActive
0x0510:0x06unsigned long
OwnCpuRateControl
0x0510:0x07unsigned long
Terminating
0x0510:0x08unsigned long
WorkingSetLock
0x0510:0x09unsigned long
JobFrozen
0x0510:0x0Aunsigned long
Background
0x0510:0x0Bunsigned long
WakeNotificationAllocated
0x0510:0x0Cunsigned long
WakeNotificationEnabled
0x0510:0x0Dunsigned long
WakeNotificationPending
0x0510:0x0Eunsigned long
LimitNotificationRequired
0x0510:0x0Funsigned long
ZeroCountNotificationRequired
0x0510:0x10unsigned long
CycleTimeNotificationRequired
0x0510:0x11unsigned long
CycleTimeNotificationPending
0x0510:0x12unsigned long
TimersVirtualized
0x0510:0x13unsigned long
JobSwapped
0x0510:0x14unsigned long
ViolationDetected
0x0510:0x15unsigned long
EmptyJobNotified
0x0510:0x16unsigned long
NoSystemCharge
0x0510:0x17unsigned long
DropNoWakeCharges
0x0510:0x18unsigned long
NoWakeChargePolicyDecided
0x0510:0x19unsigned long
NetRateControlActive
0x0510:0x1Aunsigned long
OwnNetRateControl
0x0510:0x1Bunsigned long
IoRateControlActive
0x0510:0x1Cunsigned long
OwnIoRateControl
0x0510:0x1Dunsigned long
IsContainerRoot
unsigned long
DisallowNewProcesses
0x0510:0x1Eunsigned long
SpareJobFlags
0x0514unsigned long
EffectiveHighEdgeFilters
0x0518volatile uint64_t
SharedCommitCharge
struct _PROCESS_ENERGY_VALUES *
EnergyValues
0x0520volatile uint64_t
SharedCommitCharge