typedef struct _CMHIVE                                  // 44 elements, 0xB38 bytes (sizeof)
          {
/*0x000*/     struct _HHIVE Hive;                                 // 29 elements, 0x590 bytes (sizeof)
/*0x590*/     VOID*        FileHandles[6];
/*0x5C0*/     struct _LIST_ENTRY NotifyList;                      // 2 elements, 0x10 bytes (sizeof)
/*0x5D0*/     struct _LIST_ENTRY HiveList;                        // 2 elements, 0x10 bytes (sizeof)
/*0x5E0*/     struct _FAST_MUTEX* HiveLock;
/*0x5E8*/     struct _FAST_MUTEX* ViewLock;
/*0x5F0*/     struct _FAST_MUTEX* WriterLock;
/*0x5F8*/     struct _EX_PUSH_LOCK FlusherLock;                   // 7 elements, 0x8 bytes (sizeof)
/*0x600*/     struct _EX_PUSH_LOCK SecurityLock;                  // 7 elements, 0x8 bytes (sizeof)
/*0x608*/     struct _LIST_ENTRY MappedViewList;                  // 2 elements, 0x10 bytes (sizeof)
/*0x618*/     struct _LIST_ENTRY PinnedViewList;                  // 2 elements, 0x10 bytes (sizeof)
/*0x628*/     struct _LIST_ENTRY FlushedViewList;                 // 2 elements, 0x10 bytes (sizeof)
/*0x638*/     UINT16       MappedViewCount;
/*0x63A*/     UINT16       PinnedViewCount;
/*0x63C*/     ULONG32      UseCount;
/*0x640*/     ULONG32      ViewsPerHive;
/*0x644*/     UINT8        _PADDING0_[0x4];
/*0x648*/     struct _FILE_OBJECT* FileObject;
/*0x650*/     ULONG32      LastShrinkHiveSize;
/*0x654*/     UINT8        _PADDING1_[0x4];
/*0x658*/     union _LARGE_INTEGER ActualFileSize;                // 4 elements, 0x8 bytes (sizeof)
/*0x660*/     struct _UNICODE_STRING FileFullPath;                // 3 elements, 0x10 bytes (sizeof)
/*0x670*/     struct _UNICODE_STRING FileUserName;                // 3 elements, 0x10 bytes (sizeof)
/*0x680*/     struct _UNICODE_STRING HiveRootPath;                // 3 elements, 0x10 bytes (sizeof)
/*0x690*/     ULONG32      SecurityCount;
/*0x694*/     ULONG32      SecurityCacheSize;
/*0x698*/     LONG32       SecurityHitHint;
/*0x69C*/     UINT8        _PADDING2_[0x4];
/*0x6A0*/     struct _CM_KEY_SECURITY_CACHE_ENTRY* SecurityCache;
/*0x6A8*/     struct _LIST_ENTRY SecurityHash[64];
/*0xAA8*/     ULONG32      UnloadEventCount;
/*0xAAC*/     UINT8        _PADDING3_[0x4];
/*0xAB0*/     struct _KEVENT** UnloadEventArray;
/*0xAB8*/     struct _CM_KEY_CONTROL_BLOCK* RootKcb;
/*0xAC0*/     UINT8        Frozen;
/*0xAC1*/     UINT8        _PADDING4_[0x7];
/*0xAC8*/     struct _CM_WORKITEM* UnloadWorkItem;
/*0xAD0*/     UINT8        GrowOnlyMode;
/*0xAD1*/     UINT8        _PADDING5_[0x3];
/*0xAD4*/     ULONG32      GrowOffset;
/*0xAD8*/     struct _LIST_ENTRY KcbConvertListHead;              // 2 elements, 0x10 bytes (sizeof)
/*0xAE8*/     struct _LIST_ENTRY KnodeConvertListHead;            // 2 elements, 0x10 bytes (sizeof)
/*0xAF8*/     struct _CM_CELL_REMAP_BLOCK* CellRemapArray;
/*0xB00*/     ULONG32      Flags;
/*0xB04*/     UINT8        _PADDING6_[0x4];
/*0xB08*/     struct _LIST_ENTRY TrustClassEntry;                 // 2 elements, 0x10 bytes (sizeof)
/*0xB18*/     ULONG32      FlushCount;
/*0xB1C*/     UINT8        _PADDING7_[0x4];
/*0xB20*/     struct _CM_RM* CmRm;
/*0xB28*/     ULONG32      CmRmInitFailPoint;
/*0xB2C*/     LONG32       CmRmInitFailStatus;
/*0xB30*/     struct _KTHREAD* CreatorOwner;
          }CMHIVE, *PCMHIVE;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.