| Min version | XP | 2003/XP64 SP1 | Vista | 7 | 8 Pre RTM | |||
|---|---|---|---|---|---|---|---|---|
| Max version | 2003/XP64 SP2 | 7 SP1 | 10 TH2 | |||||
| Architecture | x86 | x64 | x86 | x86 | x64 | x86 | x64 | |
| x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | ||||||
| 0x0000 | uint16_t Length | 0x0000 | ||||||
| 0x0002 | uint8_t UseDefaultObject | uint8_t ObjectTypeFlags | 0x0002 | |||||
| 0x0002:0x00 | uint8_t CaseInsensitive | 0x0002:0x00 | ||||||
| 0x0002:0x01 | uint8_t UnnamedObjectsOnly | 0x0002:0x01 | ||||||
| 0x0002:0x02 | uint8_t UseDefaultObject | 0x0002:0x02 | ||||||
| 0x0002:0x03 | uint8_t SecurityRequired | 0x0002:0x03 | ||||||
| 0x0002:0x04 | uint8_t MaintainHandleCount | 0x0002:0x04 | ||||||
| 0x0002:0x05 | uint8_t MaintainTypeList | 0x0002:0x05 | ||||||
| 0x0002:0x06 | uint8_t SupportsObjectCallbacks | 0x0002:0x06 | ||||||
| 0x0002:0x07 | uint8_t CacheAligned | 0x0002:0x07 | ||||||
| 0x0003 | uint8_t CaseInsensitive | 0x0003 | ||||||
| 0x0004 | unsigned long InvalidAttributes | unsigned long ObjectTypeCode | 0x0004 | |||||
| 0x0008 | struct _GENERIC_MAPPING GenericMapping | unsigned long InvalidAttributes | 0x0008 | |||||
| 0x000C | struct _GENERIC_MAPPING GenericMapping | 0x000C | ||||||
| 0x0018 | unsigned long ValidAccessMask | 0x0018 | ||||||
| 0x001C | uint8_t SecurityRequired | unsigned long ValidAccessMask | 0x001C | |||||
| 0x001D | uint8_t MaintainHandleCount | 0x001D | ||||||
| 0x001E | uint8_t MaintainTypeList | 0x001E | ||||||
| 0x0020 | enum _POOL_TYPE PoolType | unsigned long RetainAccess | 0x0020 | |||||
| 0x0024 | unsigned long DefaultPagedPoolCharge | enum _POOL_TYPE PoolType | 0x0024 | |||||
| 0x0028 | unsigned long DefaultNonPagedPoolCharge | unsigned long DefaultPagedPoolCharge | 0x0028 | |||||
| 0x002C | unsigned long DefaultNonPagedPoolCharge | unsigned long DefaultNonPagedPoolCharge | unsigned long DefaultNonPagedPoolCharge | unsigned long DefaultNonPagedPoolCharge | 0x002C | |||
| 0x002C | function * DumpProcedure | function * DumpProcedure | function * DumpProcedure | 0x0030 | ||||
| 0x0030 | function * DumpProcedure | function * DumpProcedure | function * DumpProcedure | function * DumpProcedure | 0x0030 | |||
| 0x0030 | function * OpenProcedure | function * OpenProcedure | function * OpenProcedure | 0x0038 | ||||
| 0x0034 | function * OpenProcedure | function * OpenProcedure | function * OpenProcedure | function * OpenProcedure | 0x0038 | |||
| 0x0034 | function * CloseProcedure | function * CloseProcedure | function * CloseProcedure | 0x0040 | ||||
| 0x0038 | function * DeleteProcedure | function * CloseProcedure | function * CloseProcedure | function * CloseProcedure | function * CloseProcedure | 0x0040 | ||
| 0x0038 | function * DeleteProcedure | function * DeleteProcedure | 0x0048 | |||||
| 0x003C | function * DeleteProcedure | function * DeleteProcedure | function * DeleteProcedure | function * DeleteProcedure | 0x0048 | |||
| 0x003C | function * ParseProcedure | function * ParseProcedure | function * ParseProcedure | 0x0050 | ||||
| 0x0040 | function * SecurityProcedure | function * ParseProcedure | function * ParseProcedure | function * ParseProcedure | function * ParseProcedure | 0x0050 | ||
| 0x0040 | function * SecurityProcedure | function * SecurityProcedure | 0x0058 | |||||
| 0x0044 | function * QueryNameProcedure | function * SecurityProcedure | function * SecurityProcedure | function * SecurityProcedure | function * SecurityProcedure | 0x0058 | ||
| 0x0044 | function * QueryNameProcedure | function * QueryNameProcedure | 0x0060 | |||||
| 0x0048 | function * QueryNameProcedure | function * QueryNameProcedure | function * QueryNameProcedure | function * QueryNameProcedure | 0x0060 | |||
| 0x0048 | function * OkayToCloseProcedure | function * OkayToCloseProcedure | function * OkayToCloseProcedure | 0x0068 | ||||
| 0x004C | function * OkayToCloseProcedure | 0x0068 | ||||||
| 0x0050 | unsigned long WaitObjectFlagMask | 0x0070 | ||||||
| 0x0054 | uint16_t WaitObjectFlagOffset | 0x0074 | ||||||
| 0x0056 | uint16_t WaitObjectPointerOffset | 0x0076 | ||||||