typedef struct _KTM
{
     ULONG cookie;
     KMUTANT Mutex;
     KTM_STATE State;
     KTMOBJECT_NAMESPACE_LINK NamespaceLink;
     GUID TmIdentity;
     ULONG Flags;
     ULONG VolatileFlags;
     UNICODE_STRING LogFileName;
     PFILE_OBJECT LogFileObject;
     PVOID MarshallingContext;
     PVOID LogManagementContext;
     KTMOBJECT_NAMESPACE Transactions;
     KTMOBJECT_NAMESPACE ResourceManagers;
     KMUTANT LsnOrderedMutex;
     LIST_ENTRY LsnOrderedList;
     LARGE_INTEGER CommitVirtualClock;
     FAST_MUTEX CommitVirtualClockMutex;
     CLS_LSN BaseLsn;
     CLS_LSN CurrentReadLsn;
     PVOID TmRmHandle;
     PKRESOURCEMANAGER TmRm;
     KEVENT LogFullNotifyEvent;
     WORK_QUEUE_ITEM CheckpointWorkItem;
     CLS_LSN CheckpointTargetLsn;
     WORK_QUEUE_ITEM LogFullCompletedWorkItem;
     ERESOURCE LogWriteResource;
     ULONG LogFlags;
     LONG LogFullStatus;
     LONG RecoveryStatus;
} KTM, *PKTM;

Windows Vista Kernel Structures