| Min version | XP | 2003/XP64 SP1 | |
|---|---|---|---|
| Max version | 2003/XP64 SP2 | ||
| Architecture | x86 | x64 | |
| x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | |
| 0x0000 | unsigned long CapturedSidCount | 0x0000 | |
| 0x0004 | struct _SID_AND_ATTRIBUTES * CapturedSids | 0x0008 | |
| 0x0008 | unsigned long CapturedSidsLength | 0x0010 | |
| 0x000C | unsigned long CapturedGroupCount | 0x0014 | |
| 0x0010 | struct _SID_AND_ATTRIBUTES * CapturedGroups | 0x0018 | |
| 0x0014 | unsigned long CapturedGroupsLength | 0x0020 | |
| 0x0018 | unsigned long CapturedPrivilegeCount | 0x0024 | |
| 0x001C | struct _LUID_AND_ATTRIBUTES * CapturedPrivileges | 0x0028 | |
| 0x0020 | unsigned long CapturedPrivilegesLength | 0x0030 | |