Min version | Vista |
---|---|
Max version | 10 TH2 |
x86 offset offset:bitpos | Field Name |
0x0000 | struct _SINGLE_LIST_ENTRY Link |
0x0004 | enum _MM_PAGE_ACCESS_TYPE Type |
0x0008 | unsigned long EmptySequenceNumber |
0x0008 | unsigned long CurrentFileIndex |
0x0010 | uint64_t CreateTime |
0x0018 | uint64_t EmptyTime |
0x0018 | struct _MM_PAGE_ACCESS_INFO * TempEntry |
0x0020 | struct _MM_PAGE_ACCESS_INFO * PageEntry |
0x0020 | unsigned long * PageFrameEntry |
0x0024 | unsigned long * FileEntry |
0x0024 | unsigned long * LastPageFrameEntry |
0x0028 | unsigned long * FirstFileEntry |
0x002C | struct _EPROCESS * Process |
0x0030 | unsigned long SessionId |