OBJECT_HEADER_CREATOR_INFO

The OBJECT_HEADER_CREATOR_INFO structure is one of several structures that may precede an OBJECT_HEADER in a memory block that contains an Object Manager object.

The OBJECT_HEADER_CREATOR_INFO structure is 0x10 or 0x20 bytes in 32-bit and 64-bit Windows, respectively. Microsoft’s names and types are known from type information in public symbol files for the kernel, starting with Windows 2000 SP3. Names are known with slightly less certainty for version 4.0 from the output of the !dso command as implemented by the debugger extension USEREXTS.DLL from the Windows NT 4.0 Device Driver Kit (DDK).

LIST_ENTRY TypeList;

PVOID CreatorUniqueProcess;

USHORT CreatorBackTraceIndex;

USHORT Reserved;

ULONG Reserved2;