Min versionVista SP1
Max version10 TH2
x64 offset
offset:bitpos
Field Name
0x0000struct _SINGLE_LIST_ENTRY
Link
0x0008enum _MM_PAGE_ACCESS_TYPE
Type
0x000Cunsigned long
EmptySequenceNumber
0x000Cunsigned long
CurrentFileIndex
0x0010uint64_t
CreateTime
0x0018uint64_t
EmptyTime
0x0018struct _MM_PAGE_ACCESS_INFO *
TempEntry
0x0020struct _MM_PAGE_ACCESS_INFO *
PageEntry
0x0020uint64_t *
PageFrameEntry
0x0028uint64_t *
FileEntry
0x0028uint64_t *
LastPageFrameEntry
0x0030uint64_t *
FirstFileEntry
0x0038struct _EPROCESS *
Process
0x0040unsigned long
SessionId