_MM_SESSION_SPACE

//0x1f80 bytes (sizeof) struct _MM_SESSION_SPACE { volatile LONG ReferenceCount; //0x0 union { ULONG LongFlags; //0x4 struct _MM_SESSION_SPACE_FLAGS Flags; //0x4 } u; //0x4 ULONG SessionId; //0x8 volatile LONG ProcessReferenceToSession; //0xc struct _LIST_ENTRY ProcessList; //0x10 union _LARGE_INTEGER LastProcessSwappedOutTime; //0x20 ULONGLONG SessionPageDirectoryIndex; //0x28 volatile ULONGLONG NonPagablePages; //0x30 volatile ULONGLONG CommittedPages; //0x38 VOID* PagedPoolStart; //0x40 VOID* PagedPoolEnd; //0x48 VOID* SessionObject; //0x50 VOID* SessionObjectHandle; //0x58 volatile LONG ResidentProcessCount; //0x60 ULONG SessionPoolAllocationFailures[4]; //0x64 struct _LIST_ENTRY ImageList; //0x78 ULONG LocaleId; //0x88 ULONG AttachCount; //0x8c struct _KGATE AttachGate; //0x90 struct _LIST_ENTRY WsListEntry; //0xa8 struct _GENERAL_LOOKASIDE Lookaside[21]; //0xc0 struct _MMSESSION Session; //0xb40 struct _MM_PAGED_POOL_INFO PagedPoolInfo; //0xb98 struct _MMSUPPORT Vm; //0xc00 struct _MMWSLE* Wsle; //0xc88 VOID (* volatileDriverUnload)(struct _DRIVER_OBJECT* arg1); //0xc90 struct _POOL_DESCRIPTOR PagedPool; //0xcc0 struct _MMPTE PageDirectory; //0x1e00 struct _KGUARDED_MUTEX SessionVaLock; //0x1e08 struct _RTL_BITMAP DynamicVaBitMap; //0x1e40 ULONG DynamicVaHint; //0x1e50 struct _MI_SPECIAL_POOL SpecialPool; //0x1e58 struct _KGUARDED_MUTEX SessionPteLock; //0x1ea0 LONG PoolBigEntriesInUse; //0x1ed8 ULONG PagedPoolPdeCount; //0x1edc ULONG SpecialPoolPdeCount; //0x1ee0 ULONG DynamicSessionPdeCount; //0x1ee4 struct _MI_SYSTEM_PTE_TYPE SystemPteInfo; //0x1ee8 VOID* PoolTrackTableExpansion; //0x1f30 ULONGLONG PoolTrackTableExpansionSize; //0x1f38 VOID* PoolTrackBigPages; //0x1f40 ULONGLONG PoolTrackBigPagesSize; //0x1f48 enum _IO_SESSION_STATE IoState; //0x1f50 ULONG IoStateSequence; //0x1f54 struct _KEVENT IoNotificationEvent; //0x1f58 struct _PS_CPU_QUOTA_BLOCK* CpuQuotaBlock; //0x1f70 };