typedef struct _MM_SESSION_SPACE                                         // 37 elements, 0x1D80 bytes (sizeof)
           {
/*0x000*/      struct _MM_SESSION_SPACE* GlobalVirtualAddress;
/*0x008*/      LONG32       ReferenceCount;
               union                                                                // 2 elements, 0x4 bytes (sizeof)
               {
/*0x00C*/          ULONG32      LongFlags;
/*0x00C*/          struct _MM_SESSION_SPACE_FLAGS Flags;                            // 3 elements, 0x4 bytes (sizeof)
               }u;
/*0x010*/      ULONG32      SessionId;
/*0x014*/      UINT8        _PADDING0_[0x4];
/*0x018*/      struct _LIST_ENTRY ProcessList;                                      // 2 elements, 0x10 bytes (sizeof)
/*0x028*/      union _LARGE_INTEGER LastProcessSwappedOutTime;                      // 4 elements, 0x8 bytes (sizeof)
/*0x030*/      UINT64       SessionPageDirectoryIndex;
/*0x038*/      UINT64       NonPagablePages;
/*0x040*/      UINT64       CommittedPages;
/*0x048*/      VOID*        PagedPoolStart;
/*0x050*/      VOID*        PagedPoolEnd;
/*0x058*/      struct _MMPTE* PagedPoolBasePde;
/*0x060*/      ULONG32      Color;
/*0x064*/      LONG32       ResidentProcessCount;
/*0x068*/      ULONG32      SessionPoolAllocationFailures[4];
/*0x078*/      struct _LIST_ENTRY ImageList;                                        // 2 elements, 0x10 bytes (sizeof)
/*0x088*/      ULONG32      LocaleId;
/*0x08C*/      ULONG32      AttachCount;
/*0x090*/      struct _KEVENT AttachEvent;                                          // 1 elements, 0x18 bytes (sizeof)
/*0x0A8*/      struct _EPROCESS* LastProcess;
/*0x0B0*/      LONG32       ProcessReferenceToSession;
/*0x0B4*/      UINT8        _PADDING1_[0x4];
/*0x0B8*/      struct _LIST_ENTRY WsListEntry;                                      // 2 elements, 0x10 bytes (sizeof)
/*0x0C8*/      UINT8        _PADDING2_[0x38];
/*0x100*/      struct _GENERAL_LOOKASIDE Lookaside[21];
/*0xB80*/      struct _MMSESSION Session;                                           // 9 elements, 0x68 bytes (sizeof)
/*0xBE8*/      struct _KGUARDED_MUTEX PagedPoolMutex;                               // 7 elements, 0x38 bytes (sizeof)
/*0xC20*/      struct _MM_PAGED_POOL_INFO PagedPoolInfo;                            // 8 elements, 0x40 bytes (sizeof)
/*0xC60*/      struct _MMSUPPORT Vm;                                                // 15 elements, 0x58 bytes (sizeof)
/*0xCB8*/      struct _MMWSLE* Wsle;
/*0xCC0*/      PVOID Win32KDriverUnload;
/*0xCC8*/      struct _POOL_DESCRIPTOR PagedPool;                                   // 13 elements, 0x1048 bytes (sizeof)
/*0x1D10*/     struct _MMPTE PageDirectory;                                         // 1 elements, 0x8 bytes (sizeof)
/*0x1D18*/     struct _MMPTE* SpecialPoolFirstPte;
/*0x1D20*/     struct _MMPTE* SpecialPoolLastPte;
/*0x1D28*/     struct _MMPTE* NextPdeForSpecialPoolExpansion;
/*0x1D30*/     struct _MMPTE* LastPdeForSpecialPoolExpansion;
/*0x1D38*/     UINT64       SpecialPagesInUse;
/*0x1D40*/     LONG32       ImageLoadingCount;
/*0x1D44*/     UINT8        _PADDING3_[0x3C];
           }MM_SESSION_SPACE, *PMM_SESSION_SPACE;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.