x86 offset offset:bitpos | Field Name | ||||
0x0000 | void * Object | volatile long VolatileLowValue | |||
0x0000 | unsigned long ObAttributes | long LowValue | |||
0x0000 | struct _HANDLE_TABLE_ENTRY_INFO * InfoTable | struct _HANDLE_TABLE_ENTRY_INFO * volatile InfoTable | |||
0x0000 | unsigned long Value | unsigned long Unlocked | |||
0x0000:0x01 | unsigned long Attributes | ||||
0x0000:0x03 | unsigned long ObjectPointerBits | ||||
0x0004 | unsigned long GrantedAccess | long HighValue | |||
0x0004 | uint16_t GrantedAccessIndex | struct _HANDLE_TABLE_ENTRY * NextFreeHandleEntry | union _HANDLE_TABLE_ENTRY * NextFreeHandleEntry | ||
0x0004 | long NextFreeTableEntry | unsigned long NextFreeTableEntry | struct _EXHANDLE LeafHandleValue | ||
0x0004:0x00 | unsigned long GrantedAccessBits | long RefCountField | |||
0x0004:0x00 | unsigned long GrantedAccessBits | ||||
0x0006 | uint16_t CreatorBackTraceIndex | ||||
0x0004:0x19 | unsigned long ProtectFromClose | ||||
0x0004:0x1A | unsigned long RefCnt | unsigned long NoRightsUpgrade | |||
0x0004:0x1B | unsigned long RefCnt |
ZOOM:
Copyright (c) 2015, ReWolf, Terminus Project