_MM_SESSION_SPACE

//0x1fc0 bytes (sizeof) struct _MM_SESSION_SPACE { volatile LONG ReferenceCount; //0x0 union { ULONG LongFlags; //0x4 struct _MM_SESSION_SPACE_FLAGS Flags; //0x4 } u; //0x4 ULONG SessionId; //0x8 volatile LONG ProcessReferenceToSession; //0xc struct _LIST_ENTRY ProcessList; //0x10 ULONG SessionPageDirectoryIndex; //0x18 volatile ULONG NonPagablePages; //0x1c volatile ULONG CommittedPages; //0x20 VOID* PagedPoolStart; //0x24 VOID* PagedPoolEnd; //0x28 VOID* SessionObject; //0x2c VOID* SessionObjectHandle; //0x30 ULONG SessionPoolAllocationFailures[4]; //0x34 struct _LIST_ENTRY ImageList; //0x44 ULONG LocaleId; //0x4c ULONG AttachCount; //0x50 struct _KGATE AttachGate; //0x54 struct _LIST_ENTRY WsListEntry; //0x64 struct _GENERAL_LOOKASIDE Lookaside[24]; //0x80 struct _MMSESSION Session; //0xc80 struct _MM_PAGED_POOL_INFO PagedPoolInfo; //0xcb8 struct _MMSUPPORT Vm; //0xcec struct _MMWSLE* Wsle; //0xd5c struct _MI_SESSION_DRIVER_UNLOAD DriverUnload; //0xd60 struct _POOL_DESCRIPTOR PagedPool; //0xd80 struct _MMPTE* PageTables; //0x1ec0 struct _MI_SPECIAL_POOL SpecialPool; //0x1ec8 struct _FAST_MUTEX SessionPteLock; //0x1f10 LONG PoolBigEntriesInUse; //0x1f30 ULONG PagedPoolPdeCount; //0x1f34 ULONG SpecialPoolPdeCount; //0x1f38 ULONG DynamicSessionPdeCount; //0x1f3c struct _MI_SYSTEM_PTE_TYPE SystemPteInfo; //0x1f40 VOID* PoolTrackTableExpansion; //0x1f74 ULONG PoolTrackTableExpansionSize; //0x1f78 VOID* PoolTrackBigPages; //0x1f7c ULONG PoolTrackBigPagesSize; //0x1f80 enum _IO_SESSION_STATE IoState; //0x1f84 ULONG IoStateSequence; //0x1f88 struct _KEVENT IoNotificationEvent; //0x1f8c struct _RTL_BITMAP SessionPoolPdes; //0x1f9c };