mips / ntdllntoskrnl

_FILE_STREAM_INFORMATION

incomplete only the Native API and process/thread environment structures two MIPS binaries were compiled with (_TEB, _PEB, _KPCR, RTL, object/file/registry information classes, image headers): no kernel objects

2 variants the sources define _FILE_STREAM_INFORMATION differently:


struct _FILE_STREAM_INFORMATION {
    unsigned long NextEntryOffset;/* 0x0  4 */
    unsigned long StreamNameLength;/* 0x4  4 */
    union _LARGE_INTEGER StreamSize;/* 0x8  8 */
    union _LARGE_INTEGER StreamAllocationSize;/* 0x10  8 */
    unsigned short StreamName[1];/* 0x18  2 */
};
/* source: Windows NT 3.1 beta DDK, MIPS/CDPLAYER.EXE and MIPS/DISKPERF.EXE inline CodeView 4 (NB08) type records; build 404.1 per the DDK's version.h; this definition: MIPS/CDPLAYER.EXE */

size 32 (0x20)5 members0 holespadding 61 cacheline


struct _FILE_STREAM_INFORMATION {
    unsigned long NextEntryOffset;/* 0x0  4 */
    /* 4 bytes padding */
    union _LARGE_INTEGER StreamSize;/* 0x8  8 */
    union _LARGE_INTEGER StreamAllocationSize;/* 0x10  8 */
    unsigned long StreamNameLength;/* 0x18  4 */
    unsigned short StreamName[1];/* 0x1c  2 */
};
/* source: Windows NT 3.1 beta DDK, MIPS/CDPLAYER.EXE and MIPS/DISKPERF.EXE inline CodeView 4 (NB08) type records; build 404.1 per the DDK's version.h; this definition: MIPS/DISKPERF.EXE */

size 32 (0x20)5 members1 hole (4 bytes)padding 21 cacheline