diff --git a/KernelLibrary/SysMon.h b/KernelLibrary/SysMon.h index 0f6b8ef..7196a0c 100644 --- a/KernelLibrary/SysMon.h +++ b/KernelLibrary/SysMon.h @@ -74,7 +74,7 @@ struct _OB_CALLBACK_BLOCK; typedef struct _OB_CALLBACK_ENTRY { LIST_ENTRY CallbackList; OB_OPERATION Operations; // 1 for Creations, 2 for Duplications - ULONG Flags; + BOOL Enabled; struct _OB_CALLBACK_BLOCK* RegistrationHandle; // Points to the OB_CALLBACK_BLOCK used for ObUnRegisterCallback POBJECT_TYPE ObjectType; POB_PRE_OPERATION_CALLBACK PreOperation; @@ -83,6 +83,7 @@ typedef struct _OB_CALLBACK_ENTRY { }OB_CALLBACK_ENTRY, * POB_CALLBACK_ENTRY; + // x86 0x10 0x24 16 36 // x64 0x20 0x40 32 64 typedef struct _OB_CALLBACK_BLOCK {