Min version2003/XP64 SP1Vista SP1
Max version2003/XP64 SP2Vista SP2
x64 offset
offset:bitpos
Field Name
0x0000struct _EPROCESS *
Process
0x0008unsigned long
HandleCount
unsigned long
HandleCount
0x0008:0x18unsigned long
LockCount