Min version2003/XP64 SP1
Max versionVista SP2
x64 offset
offset:bitpos
Field Name
0x0000struct _OBJECT_DIRECTORY *
Directory
0x0008struct _UNICODE_STRING
Name
0x0018unsigned long
QueryReferences