_MM_SESSION_SPACE

Metadatacopy
struct _MM_SESSION_SPACE {
    volatile long ReferenceCount;/* 0x0  4 */
    union {
        unsigned long LongFlags;/* 0x4  4 */
        struct _MM_SESSION_SPACE_FLAGS Flags;/* 0x4  4 */
    } u;/* 0x4  4 */
    unsigned long SessionId;/* 0x8  4 */
    volatile long ProcessReferenceToSession;/* 0xc  4 */
    struct _LIST_ENTRY ProcessList;/* 0x10  16 */
    volatile unsigned __int64 NonPagablePages;/* 0x20  8 */
    volatile unsigned __int64 CommittedPages;/* 0x28  8 */
    void* SessionObject;/* 0x30  8 */
    void* SessionObjectHandle;/* 0x38  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _RTL_AVL_TREE ImageTree;/* 0x40  8 */
    unsigned long LocaleId;/* 0x48  4 */
    unsigned long AttachCount;/* 0x4c  4 */
    struct _KGATE AttachGate;/* 0x50  24 */
    struct _EPROCESS* AttachersUsingPxeCopies[2];/* 0x68  16 */
    struct _LIST_ENTRY WsListEntry;/* 0x78  16 */
    /* ── cacheline 2 boundary (128 bytes) ── */
    struct _RTL_BALANCED_NODE WsTreeEntry;/* 0x88  24 */
    unsigned __int64 CombineDomain;/* 0xa0  8 */
    /* 24 bytes padding */
    /* ── cacheline 3 boundary (192 bytes) ── */
    struct _MMSUPPORT_FULL Vm;/* 0xc0  320 */
    /* ── cacheline 8 boundary (512 bytes) ── */
    struct _MMWSL_INSTANCE WorkingSetList;/* 0x200  40 */
    /* 24 bytes padding */
    /* ── cacheline 9 boundary (576 bytes) ── */
    struct _MMSUPPORT_AGGREGATION AggregateSessionWs;/* 0x240  32 */
    struct _MI_SESSION_DRIVER_UNLOAD DriverUnload;/* 0x260  8 */
    unsigned long TopLevelPteLockBits[32];/* 0x268  128 */
    /* ── cacheline 11 boundary (704 bytes) ── */
    struct _MMPTE PageTables[1];/* 0x2e8  8 */
    enum _IO_SESSION_STATE IoState;/* 0x2f0  4 */
    unsigned long IoStateSequence;/* 0x2f4  4 */
    struct _KEVENT IoNotificationEvent;/* 0x2f8  24 */
    /* ── cacheline 12 boundary (768 bytes) ── */
    struct _EJOB* ServerSilo;/* 0x310  8 */
    unsigned __int64 CreateTime;/* 0x318  8 */
};