Min version2003/XP64 SP1
Max version2003/XP64 SP2
x64 offset
offset:bitpos
Field Name
0x0000unsigned long
CapturedSidCount
0x0008struct _SID_AND_ATTRIBUTES *
CapturedSids
0x0010unsigned long
CapturedSidsLength
0x0014unsigned long
CapturedGroupCount
0x0018struct _SID_AND_ATTRIBUTES *
CapturedGroups
0x0020unsigned long
CapturedGroupsLength
0x0024unsigned long
CapturedPrivilegeCount
0x0028struct _LUID_AND_ATTRIBUTES *
CapturedPrivileges
0x0030unsigned long
CapturedPrivilegesLength