_EJOB

//0x710 bytes (sizeof) struct _EJOB { struct _KEVENT Event; //0x0 struct _LIST_ENTRY JobLinks; //0x18 struct _LIST_ENTRY ProcessListHead; //0x28 struct _ERESOURCE JobLock; //0x38 union _LARGE_INTEGER TotalUserTime; //0xa0 union _LARGE_INTEGER TotalKernelTime; //0xa8 union _LARGE_INTEGER TotalCycleTime; //0xb0 union _LARGE_INTEGER ThisPeriodTotalUserTime; //0xb8 union _LARGE_INTEGER ThisPeriodTotalKernelTime; //0xc0 ULONGLONG TotalContextSwitches; //0xc8 ULONG TotalPageFaultCount; //0xd0 ULONG TotalProcesses; //0xd4 ULONG ActiveProcesses; //0xd8 ULONG TotalTerminatedProcesses; //0xdc union _LARGE_INTEGER PerProcessUserTimeLimit; //0xe0 union _LARGE_INTEGER PerJobUserTimeLimit; //0xe8 ULONGLONG MinimumWorkingSetSize; //0xf0 ULONGLONG MaximumWorkingSetSize; //0xf8 ULONG LimitFlags; //0x100 ULONG ActiveProcessLimit; //0x104 struct _KAFFINITY_EX Affinity; //0x108 struct _JOB_ACCESS_STATE* AccessState; //0x210 VOID* AccessStateQuotaReference; //0x218 ULONG UIRestrictionsClass; //0x220 ULONG EndOfJobTimeAction; //0x224 VOID* CompletionPort; //0x228 VOID* CompletionKey; //0x230 ULONGLONG CompletionCount; //0x238 ULONG SessionId; //0x240 ULONG SchedulingClass; //0x244 ULONGLONG ReadOperationCount; //0x248 ULONGLONG WriteOperationCount; //0x250 ULONGLONG OtherOperationCount; //0x258 ULONGLONG ReadTransferCount; //0x260 ULONGLONG WriteTransferCount; //0x268 ULONGLONG OtherTransferCount; //0x270 struct _PROCESS_DISK_COUNTERS DiskIoInfo; //0x278 ULONGLONG ProcessMemoryLimit; //0x2a0 ULONGLONG JobMemoryLimit; //0x2a8 ULONGLONG JobTotalMemoryLimit; //0x2b0 ULONGLONG PeakProcessMemoryUsed; //0x2b8 ULONGLONG PeakJobMemoryUsed; //0x2c0 struct _KAFFINITY_EX EffectiveAffinity; //0x2c8 union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; //0x3d0 ULONGLONG EffectiveMinimumWorkingSetSize; //0x3d8 ULONGLONG EffectiveMaximumWorkingSetSize; //0x3e0 ULONGLONG EffectiveProcessMemoryLimit; //0x3e8 struct _EJOB* EffectiveProcessMemoryLimitJob; //0x3f0 struct _EJOB* EffectivePerProcessUserTimeLimitJob; //0x3f8 struct _EJOB* EffectiveNetIoRateLimitJob; //0x400 struct _EJOB* EffectiveHeapAttributionJob; //0x408 ULONG EffectiveLimitFlags; //0x410 ULONG EffectiveSchedulingClass; //0x414 ULONG EffectiveFreezeCount; //0x418 ULONG EffectiveBackgroundCount; //0x41c ULONG EffectiveSwapCount; //0x420 ULONG EffectiveNotificationLimitCount; //0x424 ULONG EffectiveIoPriorityLimit; //0x428 ULONG IoPriorityLimit; //0x42c ULONG EffectivePagePriorityLimit; //0x430 ULONG PagePriorityLimit; //0x434 UCHAR EffectivePriorityClass; //0x438 UCHAR PriorityClass; //0x439 UCHAR NestingDepth; //0x43a UCHAR Reserved1[1]; //0x43b ULONG CompletionFilter; //0x43c union { struct _WNF_STATE_NAME WakeChannel; //0x440 struct _PS_JOB_WAKE_INFORMATION WakeInfo; //0x440 }; struct _JOBOBJECT_WAKE_FILTER WakeFilter; //0x488 ULONG LowEdgeLatchFilter; //0x490 struct _EJOB* NotificationLink; //0x498 ULONGLONG CurrentJobMemoryUsed; //0x4a0 struct _JOB_NOTIFICATION_INFORMATION* NotificationInfo; //0x4a8 VOID* NotificationInfoQuotaReference; //0x4b0 struct _IO_MINI_COMPLETION_PACKET_USER* NotificationPacket; //0x4b8 struct _JOB_CPU_RATE_CONTROL* CpuRateControl; //0x4c0 VOID* EffectiveSchedulingGroup; //0x4c8 ULONGLONG ReadyTime; //0x4d0 struct _EX_PUSH_LOCK MemoryLimitsLock; //0x4d8 struct _LIST_ENTRY SiblingJobLinks; //0x4e0 struct _LIST_ENTRY ChildJobListHead; //0x4f0 struct _EJOB* ParentJob; //0x500 struct _EJOB* volatile RootJob; //0x508 struct _LIST_ENTRY IteratorListHead; //0x510 ULONGLONG AncestorCount; //0x520 union { struct _EJOB** Ancestors; //0x528 VOID* SessionObject; //0x528 }; struct _EPROCESS_VALUES Accounting; //0x530 ULONG ShadowActiveProcessCount; //0x598 ULONG ActiveAuxiliaryProcessCount; //0x59c ULONG SequenceNumber; //0x5a0 ULONG JobId; //0x5a4 struct _GUID ContainerId; //0x5a8 struct _GUID ContainerTelemetryId; //0x5b8 struct _ESERVERSILO_GLOBALS* ServerSiloGlobals; //0x5c8 struct _PS_PROPERTY_SET PropertySet; //0x5d0 struct _PSP_STORAGE* Storage; //0x5e8 struct _JOB_NET_RATE_CONTROL* NetRateControl; //0x5f0 union { ULONG JobFlags; //0x5f8 struct { ULONG CloseDone:1; //0x5f8 ULONG MultiGroup:1; //0x5f8 ULONG OutstandingNotification:1; //0x5f8 ULONG NotificationInProgress:1; //0x5f8 ULONG UILimits:1; //0x5f8 ULONG CpuRateControlActive:1; //0x5f8 ULONG OwnCpuRateControl:1; //0x5f8 ULONG Terminating:1; //0x5f8 ULONG WorkingSetLock:1; //0x5f8 ULONG JobFrozen:1; //0x5f8 ULONG Background:1; //0x5f8 ULONG WakeNotificationAllocated:1; //0x5f8 ULONG WakeNotificationEnabled:1; //0x5f8 ULONG WakeNotificationPending:1; //0x5f8 ULONG LimitNotificationRequired:1; //0x5f8 ULONG ZeroCountNotificationRequired:1; //0x5f8 ULONG CycleTimeNotificationRequired:1; //0x5f8 ULONG CycleTimeNotificationPending:1; //0x5f8 ULONG TimersVirtualized:1; //0x5f8 ULONG JobSwapped:1; //0x5f8 ULONG ViolationDetected:1; //0x5f8 ULONG EmptyJobNotified:1; //0x5f8 ULONG NoSystemCharge:1; //0x5f8 ULONG DropNoWakeCharges:1; //0x5f8 ULONG NoWakeChargePolicyDecided:1; //0x5f8 ULONG NetRateControlActive:1; //0x5f8 ULONG OwnNetRateControl:1; //0x5f8 ULONG IoRateControlActive:1; //0x5f8 ULONG OwnIoRateControl:1; //0x5f8 ULONG DisallowNewProcesses:1; //0x5f8 ULONG Silo:1; //0x5f8 ULONG ContainerTelemetryIdSet:1; //0x5f8 }; }; union { ULONG JobFlags2; //0x5fc struct { ULONG ParentLocked:1; //0x5fc ULONG EnableUsermodeSiloThreadImpersonation:1; //0x5fc ULONG DisallowUsermodeSiloThreadImpersonation:1; //0x5fc }; }; struct _PROCESS_EXTENDED_ENERGY_VALUES* EnergyValues; //0x600 volatile ULONGLONG SharedCommitCharge; //0x608 ULONG DiskIoAttributionUserRefCount; //0x610 ULONG DiskIoAttributionRefCount; //0x614 union { VOID* DiskIoAttributionContext; //0x618 struct _EJOB* DiskIoAttributionOwnerJob; //0x618 }; struct _JOB_RATE_CONTROL_HEADER IoRateControlHeader; //0x620 struct _PS_IO_CONTROL_ENTRY GlobalIoControl; //0x648 volatile LONG IoControlStateLock; //0x680 struct _RTL_RB_TREE VolumeIoControlTree; //0x688 ULONGLONG IoRateOverQuotaHistory; //0x698 ULONG IoRateCurrentGeneration; //0x6a0 ULONG IoRateLastQueryGeneration; //0x6a4 ULONG IoRateGenerationLength; //0x6a8 ULONG IoRateOverQuotaNotifySequenceId; //0x6ac ULONGLONG LastThrottledIoTime; //0x6b0 struct _EX_PUSH_LOCK IoControlLock; //0x6b8 LONGLONG SiloHardReferenceCount; //0x6c0 struct _WORK_QUEUE_ITEM RundownWorkItem; //0x6c8 VOID* PartitionObject; //0x6e8 struct _EJOB* PartitionOwnerJob; //0x6f0 union _JOBOBJECT_ENERGY_TRACKING_STATE EnergyTrackingState; //0x6f8 ULONGLONG KernelWaitTime; //0x700 ULONGLONG UserWaitTime; //0x708 };