Min version2003/XP64 SP1
Max versionVista SP2
x86 offset
offset:bitpos
Field Name
0x0000struct _OBJECT_DIRECTORY *
Directory
0x0004struct _UNICODE_STRING
Name
0x000Cunsigned long
QueryReferences