On 64 bit sizeof(POOL_HEADER) != sizeof(LIST_ENTRY)! I have not checked how this...