Min versionVistaVista SP1
Max version10 TH2
Architecturex86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000struct _SINGLE_LIST_ENTRY
Link
0x0000
0x0004enum _MM_PAGE_ACCESS_TYPE
Type
0x0008
0x0008unsigned long
EmptySequenceNumber
0x000C
0x0008unsigned long
CurrentFileIndex
0x000C
0x0010uint64_t
CreateTime
0x0010
0x0018uint64_t
EmptyTime
0x0018
0x0018struct _MM_PAGE_ACCESS_INFO *
TempEntry
0x0018
0x0020struct _MM_PAGE_ACCESS_INFO *
PageEntry
0x0020
0x0020uintptr_t *
PageFrameEntry
0x0020
0x0024uintptr_t *
FileEntry
0x0028
0x0024uintptr_t *
LastPageFrameEntry
0x0028
0x0028uintptr_t *
FirstFileEntry
0x0030
0x002Cstruct _EPROCESS *
Process
0x0038
0x0030unsigned long
SessionId
0x0040