CONTAINING_RECORD

MSDN描述：

CONTAINING_RECORD returns the base address of an instance of a structure given the type of the structure and the address of a field within the containing structure.

Syntax

PCHAR CONTAINING_RECORD(IN PCHAR Address, IN TYPE Type, 
IN PCHAR Field);

它的功能为已知结构体或类的某一成员、对象中该成员的地址和这一结构体名或类名，从而得到该对象的基地址。

其宏可以如此写：

#define CONTAINING_RECORD(address,type,field) \
((type*)((PCHAR)(address)-(ULONG_PTR)(&((type*)0)->field)))

实例：

#include <windows.h>  
#include <stdio.h>  

typedef struct
{
	int a;
	int b;
	int c;
	int d;
}DATA, *PDATA;

int main()
{
	DATA d = { 1, 2, 3, 4 };
	PDATA d2 = CONTAINING_RECORD(&d.b, DATA, b);
	printf("%d %d %d %d\n", d2->a, d2->b, d2->c, d2->d);  //Input：1 2 3 4

	int *d3 = (int*)(&((PDATA)0)->b);
	printf("%p\r\n", d3);  //Input：00000004 即b的相对地址
	ULONG_PTR Offset = (ULONG_PTR)d3;  //转成数字
	PDATA fin = (PDATA)((char*)(&d.b) - Offset);
	printf("%d %d %d %d\n", fin->a, fin->b, fin->c, fin->d);  //Input：1 2 3 4

	return 0;
}