-
-
Save alexplaskett/0fd9be99b5d605e38eb5d67084f1aab6 to your computer and use it in GitHub Desktop.
_WNF_SCOPE_INSTANCE
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
struct _WNF_SCOPE_INSTANCE | |
{ | |
struct _WNF_NODE_HEADER Header; //0x0 | |
struct _EX_RUNDOWN_REF RunRef; //0x8 | |
enum _WNF_DATA_SCOPE DataScope; //0x10 | |
ULONG InstanceIdSize; //0x14 | |
VOID* InstanceIdData; //0x18 | |
struct _LIST_ENTRY ResolverListEntry; //0x20 | |
struct _WNF_LOCK NameSetLock; //0x30 | |
struct _RTL_AVL_TREE NameSet; //0x38 | |
VOID* PermanentDataStore; //0x40 | |
VOID* VolatilePermanentDataStore; //0x48 | |
}; | |
struct _RTL_AVL_TREE | |
{ | |
struct _RTL_BALANCED_NODE* Root; //0x0 | |
}; | |
struct _RTL_BALANCED_NODE | |
{ | |
union | |
{ | |
struct _RTL_BALANCED_NODE* Children[2]; //0x0 | |
struct | |
{ | |
struct _RTL_BALANCED_NODE* Left; //0x0 | |
struct _RTL_BALANCED_NODE* Right; //0x8 | |
}; | |
}; | |
union | |
{ | |
struct | |
{ | |
UCHAR Red : 1; //0x10 | |
UCHAR Balance : 2; //0x10 | |
}; | |
ULONGLONG ParentValue; //0x10 | |
}; | |
}; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment