Skip to content

Instantly share code, notes, and snippets.

@swwwolf
Created January 27, 2018 08:47
Show Gist options
  • Save swwwolf/c16b2c2573630c5e7f15072b4dbb684c to your computer and use it in GitHub Desktop.
Save swwwolf/c16b2c2573630c5e7f15072b4dbb684c to your computer and use it in GitHub Desktop.
struct _OBJECT_HEADER [sizeof = 56] {
data +0x00 [sizeof=8] __int64 PointerCount
data +0x08 [sizeof=8] __int64 HandleCount
data +0x08 [sizeof=8] void* NextToFree
data +0x10 [sizeof=8] _EX_PUSH_LOCK Lock
data +0x18 [sizeof=1] unsigned char TypeIndex
data +0x19 [sizeof=1] unsigned char TraceFlags
data +0x19 [sizeof=1] unsigned char DbgRefTrace : 1
data +0x19 [sizeof=1] unsigned char DbgTracePermanent : 1
data +0x1a [sizeof=1] unsigned char InfoMask
data +0x1b [sizeof=1] unsigned char Flags
data +0x1b [sizeof=1] unsigned char NewObject : 1
data +0x1b [sizeof=1] unsigned char KernelObject : 1
data +0x1b [sizeof=1] unsigned char KernelOnlyAccess : 1
data +0x1b [sizeof=1] unsigned char ExclusiveObject : 1
data +0x1b [sizeof=1] unsigned char PermanentObject : 1
data +0x1b [sizeof=1] unsigned char DefaultSecurityQuota : 1
data +0x1b [sizeof=1] unsigned char SingleHandleEntry : 1
data +0x1b [sizeof=1] unsigned char DeletedInline : 1
data +0x1c [sizeof=4] unsigned long Reserved
data +0x20 [sizeof=8] _OBJECT_CREATE_INFORMATION* ObjectCreateInfo
data +0x20 [sizeof=8] void* QuotaBlockCharged
data +0x28 [sizeof=8] void* SecurityDescriptor
data +0x30 [sizeof=8] _QUAD Body
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment