Min version | 2003/XP64 SP1 | Vista SP1 |
---|---|---|
Max version | 2003/XP64 SP2 | 10 TH2 |
x64 offset offset:bitpos | Field Name | |
0x0000 | int16_t Type | |
0x0002 | int16_t Size | |
0x0008 | struct _DEVICE_OBJECT * DeviceObject | |
0x0010 | struct _VPB * Vpb | |
0x0018 | void * FsContext | |
0x0020 | void * FsContext2 | |
0x0028 | struct _SECTION_OBJECT_POINTERS * SectionObjectPointer | |
0x0030 | void * PrivateCacheMap | |
0x0038 | long FinalStatus | |
0x0040 | struct _FILE_OBJECT * RelatedFileObject | |
0x0048 | uint8_t LockOperation | |
0x0049 | uint8_t DeletePending | |
0x004A | uint8_t ReadAccess | |
0x004B | uint8_t WriteAccess | |
0x004C | uint8_t DeleteAccess | |
0x004D | uint8_t SharedRead | |
0x004E | uint8_t SharedWrite | |
0x004F | uint8_t SharedDelete | |
0x0050 | unsigned long Flags | |
0x0058 | struct _UNICODE_STRING FileName | |
0x0068 | union _LARGE_INTEGER CurrentByteOffset | |
0x0070 | unsigned long Waiters | |
0x0074 | unsigned long Busy | |
0x0078 | void * LastLock | |
0x0080 | struct _KEVENT Lock | |
0x0098 | struct _KEVENT Event | |
0x00B0 | struct _IO_COMPLETION_CONTEXT * CompletionContext | |
0x00B8 | uint64_t IrpListLock | |
0x00C0 | struct _LIST_ENTRY IrpList | |
0x00D0 | void * FileObjectExtension |