Min version2003/XP64 SP1Vista SP1
Max version2003/XP64 SP210 TH2
x64 offset
offset:bitpos
Field Name
0x0000int16_t
Type
0x0002int16_t
Size
0x0008struct _DEVICE_OBJECT *
DeviceObject
0x0010struct _VPB *
Vpb
0x0018void *
FsContext
0x0020void *
FsContext2
0x0028struct _SECTION_OBJECT_POINTERS *
SectionObjectPointer
0x0030void *
PrivateCacheMap
0x0038long
FinalStatus
0x0040struct _FILE_OBJECT *
RelatedFileObject
0x0048uint8_t
LockOperation
0x0049uint8_t
DeletePending
0x004Auint8_t
ReadAccess
0x004Buint8_t
WriteAccess
0x004Cuint8_t
DeleteAccess
0x004Duint8_t
SharedRead
0x004Euint8_t
SharedWrite
0x004Fuint8_t
SharedDelete
0x0050unsigned long
Flags
0x0058struct _UNICODE_STRING
FileName
0x0068union _LARGE_INTEGER
CurrentByteOffset
0x0070unsigned long
Waiters
0x0074unsigned long
Busy
0x0078void *
LastLock
0x0080struct _KEVENT
Lock
0x0098struct _KEVENT
Event
0x00B0struct _IO_COMPLETION_CONTEXT *
CompletionContext
0x00B8uint64_t
IrpListLock
0x00C0struct _LIST_ENTRY
IrpList
0x00D0void *
FileObjectExtension