1 files changed, 15 insertions, 0 deletions
diff --git a/patterns/win7_physstore.pat b/patterns/win7_physstore.pat
new file mode 100644
index 0000000..6c816ac
--- /dev/null
+++ b/patterns/win7_physstore.pat
@@ -0,0 +1,15 @@
+#include <std/mem.pat>
+
+struct tsd_data {
+    u32 val_type; // 0 None, 1 Named, 2 Attribute, 3 Timer
+    u32 flags;
+    u32 len_key;
+    u32 len_val;
+    u32 len_data;
+    char16 key[len_key/2];
+    u8 value[len_val];
+    u8 data[len_data];
+    padding[-$&3];
+};
+
+tsd_data store[while($ < std::mem::size())] @ 0x8;
+\ No newline at end of file