typedef struct _MM_SESSION_SPACE                    // 38 elements, 0x1278 bytes (sizeof)
           {
/*0x000*/      ULONG32      ReferenceCount;
               union                                           // 2 elements, 0x4 bytes (sizeof)
               {
/*0x004*/          ULONG32      LongFlags;
/*0x004*/          struct _MM_SESSION_SPACE_FLAGS Flags;       // 7 elements, 0x4 bytes (sizeof)
               }u;
/*0x008*/      ULONG32      SessionId;
/*0x00C*/      ULONG32      SessionPageDirectoryIndex;
/*0x010*/      struct _MM_SESSION_SPACE* GlobalVirtualAddress;
/*0x014*/      struct _LIST_ENTRY ProcessList;                 // 2 elements, 0x8 bytes (sizeof)
/*0x01C*/      ULONG32      NonPagedPoolBytes;
/*0x020*/      ULONG32      PagedPoolBytes;
/*0x024*/      ULONG32      NonPagedPoolAllocations;
/*0x028*/      ULONG32      PagedPoolAllocations;
/*0x02C*/      ULONG32      NonPagablePages;
/*0x030*/      ULONG32      CommittedPages;
/*0x034*/      UINT8        _PADDING0_[0x4];
/*0x038*/      union _LARGE_INTEGER LastProcessSwappedOutTime; // 4 elements, 0x8 bytes (sizeof)
/*0x040*/      struct _MMPTE* PageTables;
/*0x044*/      struct _FAST_MUTEX PagedPoolMutex;              // 5 elements, 0x20 bytes (sizeof)
/*0x064*/      VOID*        PagedPoolStart;
/*0x068*/      VOID*        PagedPoolEnd;
/*0x06C*/      struct _MMPTE* PagedPoolBasePde;
/*0x070*/      struct _MM_PAGED_POOL_INFO PagedPoolInfo;       // 9 elements, 0x24 bytes (sizeof)
/*0x094*/      ULONG32      Color;
/*0x098*/      ULONG32      ProcessOutSwapCount;
/*0x09C*/      struct _LIST_ENTRY ImageList;                   // 2 elements, 0x8 bytes (sizeof)
/*0x0A4*/      struct _MMPTE* GlobalPteEntry;
/*0x0A8*/      ULONG32      CopyOnWriteCount;
/*0x0AC*/      ULONG32      SessionPoolAllocationFailures[4];
/*0x0BC*/      ULONG32      AttachCount;
/*0x0C0*/      struct _KEVENT AttachEvent;                     // 1 elements, 0x10 bytes (sizeof)
/*0x0D0*/      struct _EPROCESS* LastProcess;
/*0x0D4*/      UINT8        _PADDING1_[0x4];
/*0x0D8*/      struct _MMSUPPORT Vm;                           // 14 elements, 0x40 bytes (sizeof)
/*0x118*/      struct _MMWSLE* Wsle;
/*0x11C*/      struct _ERESOURCE WsLock;                       // 13 elements, 0x38 bytes (sizeof)
/*0x154*/      struct _LIST_ENTRY WsListEntry;                 // 2 elements, 0x8 bytes (sizeof)
/*0x15C*/      struct _MMSESSION Session;                      // 8 elements, 0x3C bytes (sizeof)
/*0x198*/      struct _DRIVER_OBJECT Win32KDriverObject;       // 15 elements, 0xA8 bytes (sizeof)
/*0x240*/      struct _ETHREAD* WorkingSetLockOwner;
/*0x244*/      struct _POOL_DESCRIPTOR PagedPool;              // 11 elements, 0x1028 bytes (sizeof)
/*0x126C*/     LONG32       ProcessReferenceToSession;
/*0x1270*/     ULONG32      LocaleId;
/*0x1274*/     UINT8        _PADDING2_[0x4];
           }MM_SESSION_SPACE, *PMM_SESSION_SPACE;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.