Geoff Chappell - Software Analyst
The MEMORY_PARTITION_PAGEFILE_INFORMATION structure (formally _MEMORY_PARTITION_PAGEFILE_INFORMATION) is expected as input to NtManagePartition when given the information class SystemMemoryPartitionAddPagefile (2).
The MEMORY_PARTITION_PAGEFILE_INFORMATION structure is 0x20 or 0x28 bytes in 32-bit and 64-bit Windows, respectively, up to and including Version 2004. Note, however, that the 32-bit form is useless in practice before Version 1703 because the 32-bit NtManagePartition fails trivially (returning STATUS_NOT_SUPPORTED).
Offset (x86) | Offset (x64) | Definition |
---|---|---|
0x00 | 0x00 |
UNICODE_STRING PageFileName; |
0x08 | 0x10 |
LARGE_INTEGER MinimumSize; |
0x10 | 0x18 |
LARGE_INTEGER MaximumSize; |
0x18 | 0x20 |
ULONG Flags; |