Min version | Vista | Vista SP1 | |
---|---|---|---|
Max version | 10 TH2 | ||
Architecture | x86 | x64 | |
x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | |
0x0000 | struct _SINGLE_LIST_ENTRY Link | 0x0000 | |
0x0004 | enum _MM_PAGE_ACCESS_TYPE Type | 0x0008 | |
0x0008 | unsigned long EmptySequenceNumber | 0x000C | |
0x0008 | unsigned long CurrentFileIndex | 0x000C | |
0x0010 | uint64_t CreateTime | 0x0010 | |
0x0018 | uint64_t EmptyTime | 0x0018 | |
0x0018 | struct _MM_PAGE_ACCESS_INFO * TempEntry | 0x0018 | |
0x0020 | struct _MM_PAGE_ACCESS_INFO * PageEntry | 0x0020 | |
0x0020 | uintptr_t * PageFrameEntry | 0x0020 | |
0x0024 | uintptr_t * FileEntry | 0x0028 | |
0x0024 | uintptr_t * LastPageFrameEntry | 0x0028 | |
0x0028 | uintptr_t * FirstFileEntry | 0x0030 | |
0x002C | struct _EPROCESS * Process | 0x0038 | |
0x0030 | unsigned long SessionId | 0x0040 |