typedef struct _CMHIVE                                  // 31 elements, 0x56C bytes (sizeof)
          {
/*0x000*/     struct _HHIVE Hive;                                 // 24 elements, 0x2D0 bytes (sizeof)
/*0x2D0*/     VOID*        FileHandles[3];
/*0x2DC*/     struct _LIST_ENTRY NotifyList;                      // 2 elements, 0x8 bytes (sizeof)
/*0x2E4*/     struct _LIST_ENTRY HiveList;                        // 2 elements, 0x8 bytes (sizeof)
/*0x2EC*/     struct _FAST_MUTEX* HiveLock;
/*0x2F0*/     struct _FAST_MUTEX* ViewLock;
/*0x2F4*/     struct _LIST_ENTRY LRUViewListHead;                 // 2 elements, 0x8 bytes (sizeof)
/*0x2FC*/     struct _LIST_ENTRY PinViewListHead;                 // 2 elements, 0x8 bytes (sizeof)
/*0x304*/     struct _FILE_OBJECT* FileObject;
/*0x308*/     struct _UNICODE_STRING FileFullPath;                // 3 elements, 0x8 bytes (sizeof)
/*0x310*/     struct _UNICODE_STRING FileUserName;                // 3 elements, 0x8 bytes (sizeof)
/*0x318*/     UINT16       MappedViews;
/*0x31A*/     UINT16       PinnedViews;
/*0x31C*/     ULONG32      UseCount;
/*0x320*/     ULONG32      SecurityCount;
/*0x324*/     ULONG32      SecurityCacheSize;
/*0x328*/     LONG32       SecurityHitHint;
/*0x32C*/     struct _CM_KEY_SECURITY_CACHE_ENTRY* SecurityCache;
/*0x330*/     struct _LIST_ENTRY SecurityHash[64];
/*0x530*/     struct _KEVENT* UnloadEvent;
/*0x534*/     struct _CM_KEY_CONTROL_BLOCK* RootKcb;
/*0x538*/     UINT8        Frozen;
/*0x539*/     UINT8        _PADDING0_[0x3];
/*0x53C*/     struct _WORK_QUEUE_ITEM* UnloadWorkItem;
/*0x540*/     UINT8        GrowOnlyMode;
/*0x541*/     UINT8        _PADDING1_[0x3];
/*0x544*/     ULONG32      GrowOffset;
/*0x548*/     struct _LIST_ENTRY KcbConvertListHead;              // 2 elements, 0x8 bytes (sizeof)
/*0x550*/     struct _LIST_ENTRY KnodeConvertListHead;            // 2 elements, 0x8 bytes (sizeof)
/*0x558*/     struct _CM_CELL_REMAP_BLOCK* CellRemapArray;
/*0x55C*/     ULONG32      Flags;
/*0x560*/     struct _LIST_ENTRY TrustClassEntry;                 // 2 elements, 0x8 bytes (sizeof)
/*0x568*/     ULONG32      FlushCount;
          }CMHIVE, *PCMHIVE;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.