Created
January 27, 2018 08:47
-
-
Save swwwolf/c16b2c2573630c5e7f15072b4dbb684c to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
struct _OBJECT_HEADER [sizeof = 56] { | |
data +0x00 [sizeof=8] __int64 PointerCount | |
data +0x08 [sizeof=8] __int64 HandleCount | |
data +0x08 [sizeof=8] void* NextToFree | |
data +0x10 [sizeof=8] _EX_PUSH_LOCK Lock | |
data +0x18 [sizeof=1] unsigned char TypeIndex | |
data +0x19 [sizeof=1] unsigned char TraceFlags | |
data +0x19 [sizeof=1] unsigned char DbgRefTrace : 1 | |
data +0x19 [sizeof=1] unsigned char DbgTracePermanent : 1 | |
data +0x1a [sizeof=1] unsigned char InfoMask | |
data +0x1b [sizeof=1] unsigned char Flags | |
data +0x1b [sizeof=1] unsigned char NewObject : 1 | |
data +0x1b [sizeof=1] unsigned char KernelObject : 1 | |
data +0x1b [sizeof=1] unsigned char KernelOnlyAccess : 1 | |
data +0x1b [sizeof=1] unsigned char ExclusiveObject : 1 | |
data +0x1b [sizeof=1] unsigned char PermanentObject : 1 | |
data +0x1b [sizeof=1] unsigned char DefaultSecurityQuota : 1 | |
data +0x1b [sizeof=1] unsigned char SingleHandleEntry : 1 | |
data +0x1b [sizeof=1] unsigned char DeletedInline : 1 | |
data +0x1c [sizeof=4] unsigned long Reserved | |
data +0x20 [sizeof=8] _OBJECT_CREATE_INFORMATION* ObjectCreateInfo | |
data +0x20 [sizeof=8] void* QuotaBlockCharged | |
data +0x28 [sizeof=8] void* SecurityDescriptor | |
data +0x30 [sizeof=8] _QUAD Body | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment