Min versionXP2003/XP64 SP1VistaVista SP1
Max version2003/XP64 SP210 TH2
Architecturex86x64x86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000int16_t
Type
0x0000
0x0002int16_t
Size
0x0002
0x0004struct _DEVICE_OBJECT *
DeviceObject
0x0008
0x0008struct _VPB *
Vpb
0x0010
0x000Cvoid *
FsContext
0x0018
0x0010void *
FsContext2
0x0020
0x0014struct _SECTION_OBJECT_POINTERS *
SectionObjectPointer
0x0028
0x0018void *
PrivateCacheMap
0x0030
0x001Clong
FinalStatus
0x0038
0x0020struct _FILE_OBJECT *
RelatedFileObject
0x0040
0x0024uint8_t
LockOperation
0x0048
0x0025uint8_t
DeletePending
0x0049
0x0026uint8_t
ReadAccess
0x004A
0x0027uint8_t
WriteAccess
0x004B
0x0028uint8_t
DeleteAccess
0x004C
0x0029uint8_t
SharedRead
0x004D
0x002Auint8_t
SharedWrite
0x004E
0x002Buint8_t
SharedDelete
0x004F
0x002Cunsigned long
Flags
0x0050
0x0030struct _UNICODE_STRING
FileName
0x0058
0x0038union _LARGE_INTEGER
CurrentByteOffset
0x0068
0x0040unsigned long
Waiters
0x0070
0x0044unsigned long
Busy
0x0074
0x0048void *
LastLock
0x0078
0x004Cstruct _KEVENT
Lock
0x0080
0x005Cstruct _KEVENT
Event
0x0098
0x006Cstruct _IO_COMPLETION_CONTEXT *
CompletionContext
0x00B0
0x0070uintptr_t
IrpListLock
0x00B8
0x0074struct _LIST_ENTRY
IrpList
0x00C0
0x007Cvoid *
FileObjectExtension
0x00D0