_CM_KEY_CONTROL_BLOCK

Metadatacopy
struct _CM_KEY_CONTROL_BLOCK {
    unsigned long RefCount;/* 0x0  4 */
    unsigned long ExtFlags : 9;/* 0x4:0  4 */
    unsigned long PrivateAlloc : 1;/* 0x4:9  4 */
    unsigned long Delete : 1;/* 0x4:10  4 */
    unsigned long DelayedCloseIndex : 11;/* 0x4:11  4 */
    unsigned long TotalLevels : 10;/* 0x4:22  4 */
    union {
        struct _CM_KEY_HASH KeyHash;/* 0x8  32 */
        struct {
            unsigned long ConvKey;/* 0x8  4 */
            /* 4 bytes padding */
            struct _CM_KEY_HASH* NextHash;/* 0x10  8 */
            struct _HHIVE* KeyHive;/* 0x18  8 */
            unsigned long KeyCell;/* 0x20  4 */
        };/* 0x8  28 */
    };/* 0x8  32 */
    struct _CM_KEY_CONTROL_BLOCK* ParentKcb;/* 0x28  8 */
    struct _CM_NAME_CONTROL_BLOCK* NameBlock;/* 0x30  8 */
    struct _CM_KEY_SECURITY_CACHE* CachedSecurity;/* 0x38  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _CACHED_CHILD_LIST ValueCache;/* 0x40  16 */
    union {
        struct _CM_INDEX_HINT_BLOCK* IndexHint;/* 0x50  8 */
        unsigned long HashKey;/* 0x50  4 */
        unsigned long SubKeyCount;/* 0x50  4 */
    };/* 0x50  8 */
    union {
        struct _LIST_ENTRY KeyBodyListHead;/* 0x58  16 */
        struct _LIST_ENTRY FreeListEntry;/* 0x58  16 */
    };/* 0x58  16 */
    struct _CM_KEY_BODY* KeyBodyArray[4];/* 0x68  32 */
    /* ── cacheline 2 boundary (128 bytes) ── */
    void* DelayCloseEntry;/* 0x88  8 */
    union _LARGE_INTEGER KcbLastWriteTime;/* 0x90  8 */
    unsigned short KcbMaxNameLen;/* 0x98  2 */
    unsigned short KcbMaxValueNameLen;/* 0x9a  2 */
    unsigned long KcbMaxValueDataLen;/* 0x9c  4 */
    unsigned long KcbUserFlags : 4;/* 0xa0:0  4 */
    unsigned long KcbVirtControlFlags : 4;/* 0xa0:4  4 */
    unsigned long KcbDebug : 8;/* 0xa0:8  4 */
    unsigned long Flags : 16;/* 0xa0:16  4 */
    /* 4 bytes padding */
    char* RealKeyName;/* 0xa8  8 */
    struct _LIST_ENTRY KCBUoWListHead;/* 0xb0  16 */
    /* ── cacheline 3 boundary (192 bytes) ── */
    struct _CM_TRANS* TransKCBOwner;/* 0xc0  8 */
    struct _CM_INTENT_LOCK KCBLock;/* 0xc8  16 */
    struct _CM_INTENT_LOCK KeyLock;/* 0xd8  16 */
    struct _CHILD_LIST TransValueCache;/* 0xe8  8 */
    struct _CM_TRANS* TransValueListOwner;/* 0xf0  8 */
    struct _UNICODE_STRING* FullKCBName;/* 0xf8  8 */
};