mips / ntdllntoskrnl

_FILE_ALL_INFORMATION

incomplete only the Native API and process/thread environment structures two MIPS binaries were compiled with (_TEB, _PEB, _KPCR, RTL, object/file/registry information classes, image headers): no kernel objects


struct _FILE_ALL_INFORMATION {
    struct _FILE_BASIC_INFORMATION BasicInformation;/* 0x0  40 */
    struct _FILE_STANDARD_INFORMATION StandardInformation;/* 0x28  24 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _FILE_INTERNAL_INFORMATION InternalInformation;/* 0x40  8 */
    struct _FILE_EA_INFORMATION EaInformation;/* 0x48  4 */
    struct _FILE_ACCESS_INFORMATION AccessInformation;/* 0x4c  4 */
    struct _FILE_POSITION_INFORMATION PositionInformation;/* 0x50  8 */
    struct _FILE_MODE_INFORMATION ModeInformation;/* 0x58  4 */
    struct _FILE_ALIGNMENT_INFORMATION AlignmentInformation;/* 0x5c  4 */
    struct _FILE_NAME_INFORMATION NameInformation;/* 0x60  8 */
};
/* source: Windows NT 3.1 beta DDK, MIPS/CDPLAYER.EXE and MIPS/DISKPERF.EXE inline CodeView 4 (NB08) type records; build 404.1 per the DDK's version.h */

size 104 (0x68)9 members0 holespadding 02 cachelines