Min version | Vista SP1 |
---|---|
Max version | 10 TH2 |
x64 offset offset:bitpos | Field Name |
0x0000 | struct _SINGLE_LIST_ENTRY Link |
0x0008 | enum _MM_PAGE_ACCESS_TYPE Type |
0x000C | unsigned long EmptySequenceNumber |
0x000C | unsigned long CurrentFileIndex |
0x0010 | uint64_t CreateTime |
0x0018 | uint64_t EmptyTime |
0x0018 | struct _MM_PAGE_ACCESS_INFO * TempEntry |
0x0020 | struct _MM_PAGE_ACCESS_INFO * PageEntry |
0x0020 | uint64_t * PageFrameEntry |
0x0028 | uint64_t * FileEntry |
0x0028 | uint64_t * LastPageFrameEntry |
0x0030 | uint64_t * FirstFileEntry |
0x0038 | struct _EPROCESS * Process |
0x0040 | unsigned long SessionId |