#ifndef _NTOBAPI_H
/**
* The OBJECT_BASIC_INFORMATION structure contains basic information about an object.
*/
typedef struct _OBJECT_BASIC_INFORMATION
{
ULONG Attributes; // The attributes of the object include whether the object is permanent, can be inherited, and other characteristics.
ACCESS_MASK GrantedAccess; // Specifies a mask that represents the granted access when the object was created.
ULONG HandleCount; // The number of handles that are currently open for the object.
ULONG PointerCount; // The number of references to the object from both handles and other references, such as those from the system.
ULONG PagedPoolCharge; // The amount of paged pool memory that the object is using.
ULONG NonPagedPoolCharge; // The amount of non-paged pool memory that the object is using.
ULONG Reserved[3]; // Reserved for future use.
ULONG NameInfoSize; // The size of the name information for the object.
ULONG TypeInfoSize; // The size of the type information for the object.
ULONG SecurityDescriptorSize; // The size of the security descriptor for the object.
LARGE_INTEGER CreationTime; // The time when a symbolic link was created. Not supported for other types of objects.
} OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
View code on GitHub
Basic kernel handle/object information, common to all object types. This structure is partially documented in Windows Driver Kit.
A bit mask containing attributes of the handle/object:
OBJ_PROTECT_CLOSE
- the handle is protected from closing.OBJ_INHERIT
- the handle is inheritable.OBJ_PERMANENT
- object has permanent lifetime.OBJ_EXCLUSIVE
- the handle/object is exclusive and prevents other handles from being open to the object.The access mask granted on the handle.
The number of handles pointing to the object.
The number of pointers to the object.
The number of paged pool bytes charged for the object.
The number of non-paged pool bytes charged for the object.
Unused field.
The number of bytes required to query object name information.
The number of bytes required to query object type information.
The number of bytes required to query the security descriptor of the object. Note that the system populates this field only when the handle grants READ_CONTROL
access.
The time of creation for symbolic link objects.