OBJECT_HEADER_QUOTA_INFO

The OBJECT_HEADER_QUOTA_INFO structure is one of several structures that may precede an OBJECT_HEADER in a memory block that contains an Object Manager object.

Layout

The OBJECT_HEADER_QUOTA_INFO structure is 0x10 or 0x20 bytes in 32-bit and 64-bit Windows, respectively. Microsoft’s names and types are known from type information in public symbol files for the kernel, starting with Windows 2003 SP1. Names are known with slightly less certainty for version 4.0 from the output of the !dso command as implemented by the debugger extension USEREXTS.DLL from the Windows NT 4.0 Device Driver Kit (DDK).

Offset (x86) Offset (x64) Definition Versions
0x00 0x00
ULONG PagedPoolCharge;
3.50 and higher
0x04 0x04
ULONG NonPagedPoolCharge;
3.50 and higher
0x08 0x08
ULONG SecurityDescriptorCharge;
3.50 and higher
0x0C 0x10
EPROCESS *ExclusiveProcess;
3.50 to 6.0
PVOID SecurityDescriptorQuotaBlock;
6.1 and higher
  0x18
ULONGLONG Reserved;
late 5.2 and higher