_CMHIVE

//0x5e0 bytes (sizeof) struct _CMHIVE { struct _HHIVE Hive; //0x0 VOID* FileHandles[6]; //0x2e8 struct _LIST_ENTRY NotifyList; //0x300 struct _LIST_ENTRY HiveList; //0x308 struct _FAST_MUTEX* HiveLock; //0x310 struct _EX_PUSH_LOCK ViewLock; //0x314 struct _KTHREAD* ViewLockOwner; //0x318 ULONG ViewLockLast; //0x31c ULONG ViewUnLockLast; //0x320 struct _FAST_MUTEX* WriterLock; //0x324 struct _EX_PUSH_LOCK FlusherLock; //0x328 struct _EX_PUSH_LOCK SecurityLock; //0x32c struct _LIST_ENTRY MappedViewList; //0x330 struct _LIST_ENTRY PinnedViewList; //0x338 struct _LIST_ENTRY FlushedViewList; //0x340 USHORT MappedViewCount; //0x348 USHORT PinnedViewCount; //0x34a ULONG UseCount; //0x34c ULONG ViewsPerHive; //0x350 struct _FILE_OBJECT* FileObject; //0x354 ULONG LastShrinkHiveSize; //0x358 union _LARGE_INTEGER ActualFileSize; //0x360 struct _UNICODE_STRING FileFullPath; //0x368 struct _UNICODE_STRING FileUserName; //0x370 struct _UNICODE_STRING HiveRootPath; //0x378 ULONG SecurityCount; //0x380 ULONG SecurityCacheSize; //0x384 LONG SecurityHitHint; //0x388 struct _CM_KEY_SECURITY_CACHE_ENTRY* SecurityCache; //0x38c struct _LIST_ENTRY SecurityHash[64]; //0x390 ULONG UnloadEventCount; //0x590 struct _KEVENT** UnloadEventArray; //0x594 struct _CM_KEY_CONTROL_BLOCK* RootKcb; //0x598 UCHAR Frozen; //0x59c struct _CM_WORKITEM* UnloadWorkItem; //0x5a0 UCHAR GrowOnlyMode; //0x5a4 ULONG GrowOffset; //0x5a8 struct _LIST_ENTRY KcbConvertListHead; //0x5ac struct _LIST_ENTRY KnodeConvertListHead; //0x5b4 struct _CM_CELL_REMAP_BLOCK* CellRemapArray; //0x5bc ULONG Flags; //0x5c0 struct _LIST_ENTRY TrustClassEntry; //0x5c4 ULONG FlushCount; //0x5cc struct _CM_RM* CmRm; //0x5d0 ULONG CmRmInitFailPoint; //0x5d4 LONG CmRmInitFailStatus; //0x5d8 struct _KTHREAD* CreatorOwner; //0x5dc };