//0x380 bytes (sizeof)
struct _KTM
{
ULONG cookie; //0x0
struct _KMUTANT Mutex; //0x8
enum KTM_STATE State; //0x40
struct _KTMOBJECT_NAMESPACE_LINK NamespaceLink; //0x48
struct _GUID TmIdentity; //0x70
ULONG Flags; //0x80
ULONG VolatileFlags; //0x84
struct _UNICODE_STRING LogFileName; //0x88
struct _FILE_OBJECT* LogFileObject; //0x98
VOID* MarshallingContext; //0xa0
VOID* LogManagementContext; //0xa8
struct _KTMOBJECT_NAMESPACE Transactions; //0xb0
struct _KTMOBJECT_NAMESPACE ResourceManagers; //0x158
struct _KMUTANT LsnOrderedMutex; //0x200
struct _LIST_ENTRY LsnOrderedList; //0x238
union _LARGE_INTEGER CommitVirtualClock; //0x248
struct _FAST_MUTEX CommitVirtualClockMutex; //0x250
union _CLS_LSN BaseLsn; //0x288
union _CLS_LSN CurrentReadLsn; //0x290
VOID* TmRmHandle; //0x298
struct _KRESOURCEMANAGER* TmRm; //0x2a0
struct _KEVENT LogFullNotifyEvent; //0x2a8
struct _WORK_QUEUE_ITEM CheckpointWorkItem; //0x2c0
union _CLS_LSN CheckpointTargetLsn; //0x2e0
struct _WORK_QUEUE_ITEM LogFullCompletedWorkItem; //0x2e8
struct _ERESOURCE LogWriteResource; //0x308
ULONG LogFlags; //0x370
LONG LogFullStatus; //0x374
LONG RecoveryStatus; //0x378
};