Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the CACHE_X.H header at
d:\th\minkernel\ntos\inc
and draws from it the following type definitions:
Line Number | Type | Line Number (NTIFS.H) |
---|---|---|
169 | struct _CACHE_MANAGER_CALLBACKS | 21066 |
183 | struct _CACHE_UNINITIALIZE_EVENT | 21080 |
249 | struct _CC_ASYNC_READ_CONTEXT | 21146 |
The header CACHE_X.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK). That said, all the types that the kernel is known to pick up from CACHE_X.H are defined in the standard header NTIFS.H. The line numbers on the left are from CACHE_X.H, as inferred from the public symbol file for the kernel. Those on the right are from NTIFS.H, as readily available in the WDK for Windows 10. It is not known whether CACHE_X.H is the source of definitions in NTIFS.H or whether both pick them up from yet another header.