MEMORY_REMOVE_WORKING_SET_FLAG_DEFAULT - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTMMAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

// rev
/**
 * Valid flags for MEMORY_REMOVE_WORKING_SET_INFORMATION.Flags.
 *
 * \remarks Used with NtSetInformationVirtualMemory(VmRemoveFromWorkingSetInformation)
 * to request trimming pages from the process working set for the supplied ranges.
 * This does not decommit memory and does not change protection; trimmed pages remain
 * valid virtual memory and are faulted back on next access.
 */
// Descriptive PHNT names for the x64 kernel flags.
// DEFAULT permits the kernel to recognize eligible all-zero pages and replace
// their trimmed PTEs with demand-zero entries. It does not zero nonzero data.
// Bit 0 maps to internal trim flag 4, which skips MiConfirmPageIsZero and
// MiRewriteTrimPteAsDemandZero in MiWsleFree. It does not force additional pages
// out of the working set or bypass the normal page-eligibility checks.
#define MEMORY_REMOVE_WORKING_SET_FLAG_DEFAULT 0x00000000ul

#endif
#endif

View code on GitHub

NtDoc

No description available.