| Min version | 2003/XP64 SP1 | Vista SP1 |
|---|---|---|
| Max version | 2003/XP64 SP2 | 10 TH2 |
| x64 offset offset:bitpos | Field Name | |
| 0x0000 | int16_t Type | |
| 0x0002 | int16_t Size | |
| 0x0008 | struct _DEVICE_OBJECT * DeviceObject | |
| 0x0010 | struct _VPB * Vpb | |
| 0x0018 | void * FsContext | |
| 0x0020 | void * FsContext2 | |
| 0x0028 | struct _SECTION_OBJECT_POINTERS * SectionObjectPointer | |
| 0x0030 | void * PrivateCacheMap | |
| 0x0038 | long FinalStatus | |
| 0x0040 | struct _FILE_OBJECT * RelatedFileObject | |
| 0x0048 | uint8_t LockOperation | |
| 0x0049 | uint8_t DeletePending | |
| 0x004A | uint8_t ReadAccess | |
| 0x004B | uint8_t WriteAccess | |
| 0x004C | uint8_t DeleteAccess | |
| 0x004D | uint8_t SharedRead | |
| 0x004E | uint8_t SharedWrite | |
| 0x004F | uint8_t SharedDelete | |
| 0x0050 | unsigned long Flags | |
| 0x0058 | struct _UNICODE_STRING FileName | |
| 0x0068 | union _LARGE_INTEGER CurrentByteOffset | |
| 0x0070 | unsigned long Waiters | |
| 0x0074 | unsigned long Busy | |
| 0x0078 | void * LastLock | |
| 0x0080 | struct _KEVENT Lock | |
| 0x0098 | struct _KEVENT Event | |
| 0x00B0 | struct _IO_COMPLETION_CONTEXT * CompletionContext | |
| 0x00B8 | uint64_t IrpListLock | |
| 0x00C0 | struct _LIST_ENTRY IrpList | |
| 0x00D0 | void * FileObjectExtension | |