On 9 June 2015 at 09:32, Sebastian Lackner <sebastian at fds-team.de> wrote: > The same trick is also used for the ntdll equivalent structure (FILE_DISPOSITION_INFORMATION). > If there is a better method to solve this, any hints are appreciated. > winternl.h isn't public API as such.