Skip to content

Instantly share code, notes, and snippets.

@swwwolf

swwwolf/OBJECT_CALLBACK_ENTRY_COMMON.cpp

Created November 5, 2017 11:00
Show Gist options
  • Save swwwolf/1d6e90a5db94234756b5a320d5ddecd6 to your computer and use it in GitHub Desktop.
Save swwwolf/1d6e90a5db94234756b5a320d5ddecd6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
OBJECT_CALLBACK_ENTRY_COMMON.cpp
typedef struct _OBJECT_CALLBACK_ENTRY_COMMON {
LIST_ENTRY CallbackList;
OB_OPERATION Operations;
ULONG Active;
PVOID Handle;
POBJECT_TYPE ObjectType;
POB_PRE_OPERATION_CALLBACK PreOperation;
POB_POST_OPERATION_CALLBACK PostOperation;
} OBJECT_CALLBACK_ENTRY_COMMON, *POBJECT_CALLBACK_ENTRY_COMMON;
#if defined(_X86_)
static_assert(sizeof(_OBJECT_CALLBACK_ENTRY_COMMON) == 0x20, "Invalid OBJECT_CALLBACK_ENTRY_COMMON size");
static_assert(FIELD_OFFSET(_OBJECT_CALLBACK_ENTRY_COMMON, CallbackList) == 0x00, "Invalid CallbackList offset");
static_assert(FIELD_OFFSET(_OBJECT_CALLBACK_ENTRY_COMMON, PreOperation) == 0x18, "Invalid PreOperation offset");
static_assert(FIELD_OFFSET(_OBJECT_CALLBACK_ENTRY_COMMON, PostOperation) == 0x1C, "Invalid PostOperation offset");
#else // _WIN64
static_assert(sizeof(_OBJECT_CALLBACK_ENTRY_COMMON) == 0x38, "Invalid OBJECT_CALLBACK_ENTRY_COMMON size");
static_assert(FIELD_OFFSET(_OBJECT_CALLBACK_ENTRY_COMMON, CallbackList) == 0x00, "Invalid CallbackList offset");
static_assert(FIELD_OFFSET(_OBJECT_CALLBACK_ENTRY_COMMON, PreOperation) == 0x28, "Invalid PreOperation offset");
static_assert(FIELD_OFFSET(_OBJECT_CALLBACK_ENTRY_COMMON, PostOperation) == 0x30, "Invalid PostOperation offset");
#endif // _X86_
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment