| Min version | Vista SP1 | 7 | 8 Pre RTM | 8.1 | 10 Pre RTM | 10 Pre RTM |
|---|---|---|---|---|---|---|
| Max version | Vista SP2 | 7 SP1 | 8 | 8.1 Update 1 | 10 TH2 | |
| x64 offset offset:bitpos | Field Name | |||||
| 0x0000 | void * Object | volatile int64_t VolatileLowValue | ||||
| 0x0000 | unsigned long ObAttributes | int64_t LowValue | ||||
| 0x0000 | struct _HANDLE_TABLE_ENTRY_INFO * InfoTable | struct _HANDLE_TABLE_ENTRY_INFO * volatile InfoTable | ||||
| 0x0000 | uint64_t Value | uint64_t Unlocked | int64_t RefCountField | |||
| 0x0000:0x00 | uint64_t Unlocked | |||||
| 0x0000:0x01 | uint64_t RefCnt | uint64_t RefCnt | ||||
| 0x0000:0x11 | uint64_t Attributes | |||||
| 0x0000:0x14 | uint64_t Attributes | uint64_t ObjectPointerBits | ||||
| 0x0000:0x17 | uint64_t ObjectPointerBits | |||||
| 0x0008 | unsigned long GrantedAccess | int64_t HighValue | ||||
| 0x0008 | uint16_t GrantedAccessIndex | struct _HANDLE_TABLE_ENTRY * NextFreeHandleEntry | union _HANDLE_TABLE_ENTRY * NextFreeHandleEntry | |||
| 0x0008 | long NextFreeTableEntry | unsigned long NextFreeTableEntry | struct _EXHANDLE LeafHandleValue | |||
| 0x0008:0x00 | unsigned long GrantedAccessBits | |||||
| 0x000A | uint16_t CreatorBackTraceIndex | |||||
| 0x0008:0x19 | unsigned long Spare | unsigned long NoRightsUpgrade | ||||
| 0x0008:0x1A | unsigned long Spare | unsigned long Spare1 | ||||
| 0x000C | unsigned long TypeInfo | unsigned long Spare2 | ||||