//0x50 bytes (sizeof)
struct _CM_KEY_NODE
{
USHORT Signature; //0x0
USHORT Flags; //0x2
union _LARGE_INTEGER LastWriteTime; //0x4
ULONG AccessBits; //0xc
ULONG Parent; //0x10
ULONG SubKeyCounts[2]; //0x14
union
{
struct
{
ULONG SubKeyLists[2]; //0x1c
struct _CHILD_LIST ValueList; //0x24
};
struct _CM_KEY_REFERENCE ChildHiveReference; //0x1c
};
ULONG Security; //0x2c
ULONG Class; //0x30
ULONG MaxNameLen:16; //0x34
ULONG UserFlags:4; //0x34
ULONG VirtControlFlags:4; //0x34
ULONG Debug:8; //0x34
ULONG MaxClassLen; //0x38
ULONG MaxValueNameLen; //0x3c
ULONG MaxValueDataLen; //0x40
ULONG WorkVar; //0x44
USHORT NameLength; //0x48
USHORT ClassLength; //0x4a
WCHAR Name[1]; //0x4c
};