Min versionXPVistaVista SP178 Pre RTM
Max version2003/XP64 SP27 SP17 SP110 TH2
x86 offset
offset:bitpos
Field Name
0x0000uint16_t
Length
0x0002uint8_t
UseDefaultObject
uint8_t
ObjectTypeFlags
0x0002:0x00uint8_t
CaseInsensitive
0x0002:0x01uint8_t
UnnamedObjectsOnly
0x0002:0x02uint8_t
UseDefaultObject
0x0002:0x03uint8_t
SecurityRequired
0x0002:0x04uint8_t
MaintainHandleCount
0x0002:0x05uint8_t
MaintainTypeList
0x0002:0x06uint8_t
SupportsObjectCallbacks
0x0002:0x07uint8_t
CacheAligned
0x0003uint8_t
CaseInsensitive
0x0004unsigned long
InvalidAttributes
unsigned long
ObjectTypeCode
0x0008struct _GENERIC_MAPPING
GenericMapping
unsigned long
InvalidAttributes
0x000Cstruct _GENERIC_MAPPING
GenericMapping
0x0018unsigned long
ValidAccessMask
0x001Cuint8_t
SecurityRequired
unsigned long
ValidAccessMask
0x001Duint8_t
MaintainHandleCount
0x001Euint8_t
MaintainTypeList
0x0020enum _POOL_TYPE
PoolType
unsigned long
RetainAccess
0x0024unsigned long
DefaultPagedPoolCharge
enum _POOL_TYPE
PoolType
0x0028unsigned long
DefaultNonPagedPoolCharge
unsigned long
DefaultPagedPoolCharge
0x002Cfunction *
DumpProcedure
unsigned long
DefaultNonPagedPoolCharge
0x0030function *
OpenProcedure
function *
DumpProcedure
0x0034function *
CloseProcedure
function *
OpenProcedure
0x0038function *
DeleteProcedure
function *
CloseProcedure
0x003Cfunction *
ParseProcedure
function *
DeleteProcedure
0x0040function *
SecurityProcedure
function *
ParseProcedure
0x0044function *
QueryNameProcedure
function *
SecurityProcedure
0x0048function *
OkayToCloseProcedure
function *
QueryNameProcedure
0x004Cfunction *
OkayToCloseProcedure
0x0050unsigned long
WaitObjectFlagMask
0x0054uint16_t
WaitObjectFlagOffset
0x0056uint16_t
WaitObjectPointerOffset