//0x2000 bytes (sizeof)
struct _MM_SESSION_SPACE
{
volatile LONG ReferenceCount; //0x0
union
{
ULONG LongFlags; //0x4
struct _MM_SESSION_SPACE_FLAGS Flags; //0x4
} u; //0x4
ULONG SessionId; //0x8
volatile LONG ProcessReferenceToSession; //0xc
struct _LIST_ENTRY ProcessList; //0x10
union _LARGE_INTEGER LastProcessSwappedOutTime; //0x18
ULONG SessionPageDirectoryIndex; //0x20
volatile ULONG NonPagablePages; //0x24
volatile ULONG CommittedPages; //0x28
VOID* PagedPoolStart; //0x2c
VOID* PagedPoolEnd; //0x30
VOID* SessionObject; //0x34
VOID* SessionObjectHandle; //0x38
volatile LONG ResidentProcessCount; //0x3c
ULONG SessionPoolAllocationFailures[4]; //0x40
struct _LIST_ENTRY ImageList; //0x50
ULONG LocaleId; //0x58
ULONG AttachCount; //0x5c
struct _KGATE AttachGate; //0x60
struct _LIST_ENTRY WsListEntry; //0x70
struct _GENERAL_LOOKASIDE Lookaside[25]; //0x80
struct _MMSESSION Session; //0xd00
struct _MM_PAGED_POOL_INFO PagedPoolInfo; //0xd38
struct _MMSUPPORT Vm; //0xd70
struct _MMWSLE* Wsle; //0xddc
VOID (* volatileDriverUnload)(struct _DRIVER_OBJECT* arg1); //0xde0
struct _POOL_DESCRIPTOR PagedPool; //0xe00
struct _MMPTE* PageTables; //0x1f40
struct _MI_SPECIAL_POOL SpecialPool; //0x1f44
struct _KGUARDED_MUTEX SessionPteLock; //0x1f68
LONG PoolBigEntriesInUse; //0x1f88
ULONG PagedPoolPdeCount; //0x1f8c
ULONG SpecialPoolPdeCount; //0x1f90
ULONG DynamicSessionPdeCount; //0x1f94
struct _MI_SYSTEM_PTE_TYPE SystemPteInfo; //0x1f98
VOID* PoolTrackTableExpansion; //0x1fc8
ULONG PoolTrackTableExpansionSize; //0x1fcc
VOID* PoolTrackBigPages; //0x1fd0
ULONG PoolTrackBigPagesSize; //0x1fd4
enum _IO_SESSION_STATE IoState; //0x1fd8
ULONG IoStateSequence; //0x1fdc
struct _KEVENT IoNotificationEvent; //0x1fe0
struct _RTL_BITMAP SessionPoolPdes; //0x1ff0
struct _PS_CPU_QUOTA_BLOCK* CpuQuotaBlock; //0x1ff8
};