Min version2003/XP64 SP1
Max versionVista SP2
x86 offset
offset:bitpos
Field Name
0x0000struct _OBJECT_DIRECTORY_ENTRY *
ChainLink
0x0004void *
Object
0x0008unsigned long
HashValue