_CMHIVE

//0xb48 bytes (sizeof) struct _CMHIVE { struct _HHIVE Hive; //0x0 VOID* FileHandles[6]; //0x590 struct _LIST_ENTRY NotifyList; //0x5c0 struct _LIST_ENTRY HiveList; //0x5d0 struct _FAST_MUTEX* HiveLock; //0x5e0 struct _EX_PUSH_LOCK ViewLock; //0x5e8 struct _KTHREAD* ViewLockOwner; //0x5f0 ULONG ViewLockLast; //0x5f8 ULONG ViewUnLockLast; //0x5fc struct _FAST_MUTEX* WriterLock; //0x600 struct _EX_PUSH_LOCK FlusherLock; //0x608 struct _EX_PUSH_LOCK SecurityLock; //0x610 struct _LIST_ENTRY MappedViewList; //0x618 struct _LIST_ENTRY PinnedViewList; //0x628 struct _LIST_ENTRY FlushedViewList; //0x638 USHORT MappedViewCount; //0x648 USHORT PinnedViewCount; //0x64a ULONG UseCount; //0x64c ULONG ViewsPerHive; //0x650 struct _FILE_OBJECT* FileObject; //0x658 ULONG LastShrinkHiveSize; //0x660 union _LARGE_INTEGER ActualFileSize; //0x668 struct _UNICODE_STRING FileFullPath; //0x670 struct _UNICODE_STRING FileUserName; //0x680 struct _UNICODE_STRING HiveRootPath; //0x690 ULONG SecurityCount; //0x6a0 ULONG SecurityCacheSize; //0x6a4 LONG SecurityHitHint; //0x6a8 struct _CM_KEY_SECURITY_CACHE_ENTRY* SecurityCache; //0x6b0 struct _LIST_ENTRY SecurityHash[64]; //0x6b8 ULONG UnloadEventCount; //0xab8 struct _KEVENT** UnloadEventArray; //0xac0 struct _CM_KEY_CONTROL_BLOCK* RootKcb; //0xac8 UCHAR Frozen; //0xad0 struct _CM_WORKITEM* UnloadWorkItem; //0xad8 UCHAR GrowOnlyMode; //0xae0 ULONG GrowOffset; //0xae4 struct _LIST_ENTRY KcbConvertListHead; //0xae8 struct _LIST_ENTRY KnodeConvertListHead; //0xaf8 struct _CM_CELL_REMAP_BLOCK* CellRemapArray; //0xb08 ULONG Flags; //0xb10 struct _LIST_ENTRY TrustClassEntry; //0xb18 ULONG FlushCount; //0xb28 struct _CM_RM* CmRm; //0xb30 ULONG CmRmInitFailPoint; //0xb38 LONG CmRmInitFailStatus; //0xb3c struct _KTHREAD* CreatorOwner; //0xb40 };