From ce01862459c73609e1a25666af6dc6aa74aec3df Mon Sep 17 00:00:00 2001 From: WitherOrNot Date: Thu, 13 Feb 2025 18:52:21 -0500 Subject: Add files via upload --- patterns/win7_physstore.pat | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 patterns/win7_physstore.pat (limited to 'patterns/win7_physstore.pat') diff --git a/patterns/win7_physstore.pat b/patterns/win7_physstore.pat new file mode 100644 index 0000000..6c816ac --- /dev/null +++ b/patterns/win7_physstore.pat @@ -0,0 +1,15 @@ +#include + +struct tsd_data { + u32 val_type; // 0 None, 1 Named, 2 Attribute, 3 Timer + u32 flags; + u32 len_key; + u32 len_val; + u32 len_data; + char16 key[len_key/2]; + u8 value[len_val]; + u8 data[len_data]; + padding[-$&3]; +}; + +tsd_data store[while($ < std::mem::size())] @ 0x8; \ No newline at end of file -- cgit v1.2.3