typedef struct _CMHIVE                                  // 60 elements, 0xBE0 bytes (sizeof)
          {
/*0x000*/     struct _HHIVE Hive;                                 // 30 elements, 0x598 bytes (sizeof)
/*0x598*/     VOID*        FileHandles[6];
/*0x5C8*/     struct _LIST_ENTRY NotifyList;                      // 2 elements, 0x10 bytes (sizeof)
/*0x5D8*/     struct _LIST_ENTRY HiveList;                        // 2 elements, 0x10 bytes (sizeof)
/*0x5E8*/     struct _LIST_ENTRY PreloadedHiveList;               // 2 elements, 0x10 bytes (sizeof)
/*0x5F8*/     struct _EX_RUNDOWN_REF HiveRundown;                 // 2 elements, 0x8 bytes (sizeof)
/*0x600*/     struct _LIST_ENTRY ParseCacheEntries;               // 2 elements, 0x10 bytes (sizeof)
/*0x610*/     struct _CM_KEY_HASH_TABLE_ENTRY* KcbCacheTable;
/*0x618*/     ULONG32      KcbCacheTableSize;
/*0x61C*/     ULONG32      Identity;
/*0x620*/     struct _FAST_MUTEX* HiveLock;
/*0x628*/     struct _EX_PUSH_LOCK ViewLock;                      // 7 elements, 0x8 bytes (sizeof)
/*0x630*/     struct _KTHREAD* ViewLockOwner;
/*0x638*/     ULONG32      ViewLockLast;
/*0x63C*/     ULONG32      ViewUnLockLast;
/*0x640*/     struct _FAST_MUTEX* WriterLock;
/*0x648*/     struct _ERESOURCE* FlusherLock;
/*0x650*/     struct _RTL_BITMAP FlushDirtyVector;                // 2 elements, 0x10 bytes (sizeof)
/*0x660*/     struct _CMP_OFFSET_ARRAY* FlushOffsetArray;
/*0x668*/     ULONG32      FlushOffsetArrayCount;
/*0x66C*/     ULONG32      FlushHiveTruncated;
/*0x670*/     struct _FAST_MUTEX* FlushLock2;
/*0x678*/     struct _EX_PUSH_LOCK SecurityLock;                  // 7 elements, 0x8 bytes (sizeof)
/*0x680*/     struct _LIST_ENTRY MappedViewList;                  // 2 elements, 0x10 bytes (sizeof)
/*0x690*/     struct _LIST_ENTRY PinnedViewList;                  // 2 elements, 0x10 bytes (sizeof)
/*0x6A0*/     struct _LIST_ENTRY FlushedViewList;                 // 2 elements, 0x10 bytes (sizeof)
/*0x6B0*/     UINT16       MappedViewCount;
/*0x6B2*/     UINT16       PinnedViewCount;
/*0x6B4*/     ULONG32      UseCount;
/*0x6B8*/     ULONG32      ViewsPerHive;
/*0x6BC*/     UINT8        _PADDING0_[0x4];
/*0x6C0*/     struct _FILE_OBJECT* FileObject;
/*0x6C8*/     ULONG32      LastShrinkHiveSize;
/*0x6CC*/     UINT8        _PADDING1_[0x4];
/*0x6D0*/     union _LARGE_INTEGER ActualFileSize;                // 4 elements, 0x8 bytes (sizeof)
/*0x6D8*/     struct _UNICODE_STRING FileFullPath;                // 3 elements, 0x10 bytes (sizeof)
/*0x6E8*/     struct _UNICODE_STRING FileUserName;                // 3 elements, 0x10 bytes (sizeof)
/*0x6F8*/     struct _UNICODE_STRING HiveRootPath;                // 3 elements, 0x10 bytes (sizeof)
/*0x708*/     ULONG32      SecurityCount;
/*0x70C*/     ULONG32      SecurityCacheSize;
/*0x710*/     LONG32       SecurityHitHint;
/*0x714*/     UINT8        _PADDING2_[0x4];
/*0x718*/     struct _CM_KEY_SECURITY_CACHE_ENTRY* SecurityCache;
/*0x720*/     struct _LIST_ENTRY SecurityHash[64];
/*0xB20*/     ULONG32      UnloadEventCount;
/*0xB24*/     UINT8        _PADDING3_[0x4];
/*0xB28*/     struct _KEVENT** UnloadEventArray;
/*0xB30*/     struct _CM_KEY_CONTROL_BLOCK* RootKcb;
/*0xB38*/     UINT8        Frozen;
/*0xB39*/     UINT8        _PADDING4_[0x7];
/*0xB40*/     struct _CM_WORKITEM* UnloadWorkItem;
/*0xB48*/     struct _CM_WORKITEM UnloadWorkItemHolder;           // 4 elements, 0x28 bytes (sizeof)
/*0xB70*/     UINT8        GrowOnlyMode;
/*0xB71*/     UINT8        _PADDING5_[0x3];
/*0xB74*/     ULONG32      GrowOffset;
/*0xB78*/     struct _LIST_ENTRY KcbConvertListHead;              // 2 elements, 0x10 bytes (sizeof)
/*0xB88*/     struct _LIST_ENTRY KnodeConvertListHead;            // 2 elements, 0x10 bytes (sizeof)
/*0xB98*/     struct _CM_CELL_REMAP_BLOCK* CellRemapArray;
/*0xBA0*/     ULONG32      Flags;
/*0xBA4*/     UINT8        _PADDING6_[0x4];
/*0xBA8*/     struct _LIST_ENTRY TrustClassEntry;                 // 2 elements, 0x10 bytes (sizeof)
/*0xBB8*/     ULONG32      FlushCount;
/*0xBBC*/     UINT8        _PADDING7_[0x4];
/*0xBC0*/     struct _CM_RM* CmRm;
/*0xBC8*/     ULONG32      CmRmInitFailPoint;
/*0xBCC*/     LONG32       CmRmInitFailStatus;
/*0xBD0*/     struct _KTHREAD* CreatorOwner;
/*0xBD8*/     struct _KTHREAD* RundownThread;
          }CMHIVE, *PCMHIVE;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.