Min version2003/XP64 SP1Vista
Max version2003/XP64 SP2Vista SP2
x86 offset
offset:bitpos
Field Name
0x0000struct _EPROCESS *
Process
0x0004unsigned long
HandleCount
unsigned long
HandleCount
0x0004:0x18unsigned long
LockCount