_ESERVERSILO_GLOBALS

Metadatacopy
struct _ESERVERSILO_GLOBALS {
    struct _OBP_SILODRIVERSTATE ObSiloState;/* 0x0  736 */
    /* ── cacheline 11 boundary (704 bytes) ── */
    struct _SEP_SILOSTATE SeSiloState;/* 0x2e0  48 */
    /* ── cacheline 12 boundary (768 bytes) ── */
    struct _SEP_RM_LSA_CONNECTION_STATE SeRmSiloState;/* 0x310  48 */
    /* ── cacheline 13 boundary (832 bytes) ── */
    struct _ETW_SILODRIVERSTATE* EtwSiloState;/* 0x340  8 */
    struct _EPROCESS* PspSessionLeaderProcess;/* 0x348  8 */
    struct _EPROCESS* ExpDefaultErrorPortProcess;/* 0x350  8 */
    void* ExpDefaultErrorPort;/* 0x358  8 */
    unsigned long HardErrorState;/* 0x360  4 */
    /* 4 bytes padding */
    struct _EXP_LICENSE_STATE* ExpLicenseState;/* 0x368  8 */
    struct _WNF_SILODRIVERSTATE WnfSiloState;/* 0x370  56 */
    /* ── cacheline 14 boundary (896 bytes) ── */
    struct _DBGK_SILOSTATE DbgkSiloState;/* 0x3a8  32 */
    /* ── cacheline 15 boundary (960 bytes) ── */
    struct _UNICODE_STRING PsProtectedCurrentDirectory;/* 0x3c8  16 */
    struct _UNICODE_STRING PsProtectedEnvironment;/* 0x3d8  16 */
    void* ApiSetSection;/* 0x3e8  8 */
    void* ApiSetSchema;/* 0x3f0  8 */
    unsigned char OneCoreForwardersEnabled;/* 0x3f8  1 */
    /* 7 bytes padding */
    /* ── cacheline 16 boundary (1024 bytes) ── */
    struct _NLS_STATE* NlsState;/* 0x400  8 */
    struct _RTL_NLS_STATE RtlNlsState;/* 0x408  184 */
    /* ── cacheline 19 boundary (1216 bytes) ── */
    void* ImgFileExecOptions;/* 0x4c0  8 */
    struct _EX_TIMEZONE_STATE* ExTimeZoneState;/* 0x4c8  8 */
    struct _UNICODE_STRING NtSystemRoot;/* 0x4d0  16 */
    struct _UNICODE_STRING SiloRootDirectoryName;/* 0x4e0  16 */
    struct _PSP_STORAGE* Storage;/* 0x4f0  8 */
    enum _SERVERSILO_STATE State;/* 0x4f8  4 */
    long ExitStatus;/* 0x4fc  4 */
    /* ── cacheline 20 boundary (1280 bytes) ── */
    struct _KEVENT* DeleteEvent;/* 0x500  8 */
    struct _SILO_USER_SHARED_DATA* UserSharedData;/* 0x508  8 */
    void* UserSharedSection;/* 0x510  8 */
    struct _WORK_QUEUE_ITEM TerminateWorkItem;/* 0x518  32 */
    unsigned long ContainerBuildNumber;/* 0x538  4 */
    long CriticalProcessExited;/* 0x53c  4 */
    /* ── cacheline 21 boundary (1344 bytes) ── */
    long CriticalProcessStatus;/* 0x540  4 */
    unsigned char CriticalProcessName[15];/* 0x544  15 */
    /* 5 bytes padding */
    struct _CRITICAL_PROCESS_EXCEPTION_DATA CriticalProcessExceptionData;/* 0x558  48 */
    /* ── cacheline 22 boundary (1408 bytes) ── */
    unsigned long RtlFunctionalityCache[4];/* 0x588  16 */
};