typedef struct _FILE_OBJECT                                // 30 elements, 0x80 bytes (sizeof)
          {
/*0x000*/     INT16        Type;
/*0x002*/     INT16        Size;
/*0x004*/     struct _DEVICE_OBJECT* DeviceObject;
/*0x008*/     struct _VPB* Vpb;
/*0x00C*/     VOID*        FsContext;
/*0x010*/     VOID*        FsContext2;
/*0x014*/     struct _SECTION_OBJECT_POINTERS* SectionObjectPointer;
/*0x018*/     VOID*        PrivateCacheMap;
/*0x01C*/     LONG32       FinalStatus;
/*0x020*/     struct _FILE_OBJECT* RelatedFileObject;
/*0x024*/     UINT8        LockOperation;
/*0x025*/     UINT8        DeletePending;
/*0x026*/     UINT8        ReadAccess;
/*0x027*/     UINT8        WriteAccess;
/*0x028*/     UINT8        DeleteAccess;
/*0x029*/     UINT8        SharedRead;
/*0x02A*/     UINT8        SharedWrite;
/*0x02B*/     UINT8        SharedDelete;
/*0x02C*/     ULONG32      Flags;
/*0x030*/     struct _UNICODE_STRING FileName;                       // 3 elements, 0x8 bytes (sizeof)
/*0x038*/     union _LARGE_INTEGER CurrentByteOffset;                // 4 elements, 0x8 bytes (sizeof)
/*0x040*/     ULONG32      Waiters;
/*0x044*/     ULONG32      Busy;
/*0x048*/     VOID*        LastLock;
/*0x04C*/     struct _KEVENT Lock;                                   // 1 elements, 0x10 bytes (sizeof)
/*0x05C*/     struct _KEVENT Event;                                  // 1 elements, 0x10 bytes (sizeof)
/*0x06C*/     struct _IO_COMPLETION_CONTEXT* CompletionContext;
/*0x070*/     ULONG32      IrpListLock;
/*0x074*/     struct _LIST_ENTRY IrpList;                            // 2 elements, 0x8 bytes (sizeof)
/*0x07C*/     VOID*        FileObjectExtension;
          }FILE_OBJECT, *PFILE_OBJECT;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.