PsQueryJobMemoryUsageByProcess
VOID __stdcall PsQueryJobMemoryUsageByProcess(
_EPROCESS *Process,
UINT64 *JobCommitLimit,
UINT64 *JobTotalCommitLimit,
UINT64 *JobMemoryUsage,
UINT64 *JobSharedMemoryUsage){
UINT64 v5;
UINT64 v7;
UINT64 v8;
_EJOB *volatile Job;
v5 = 0i64;
if( Process->Job )
{
Job = Process->Job;
v5 = *((_QWORD *)Job + 74);
*JobSharedMemoryUsage = *((_QWORD *)Job + 167);
v8 = *((_QWORD *)Job + 73);
v7 = *((_QWORD *)Job + 122);
}
else
{
*JobSharedMemoryUsage = 0i64;
v7 = 0i64;
v8 = 0i64;
}
*JobMemoryUsage = v7;
*JobCommitLimit = v8;
*JobTotalCommitLimit = v5;
}Referenced by:
MiLogCommitRequestFailed