Skip to content

Instantly share code, notes, and snippets.

@alexplaskett

alexplaskett/ntfs-wnf-9.c Secret

Created Jul 15, 2021
Embed
What would you like to do?
ExpWnfFindStateName
_QWORD *__fastcall ExpWnfFindStateName(__int64 scopeinstance, unsigned __int64 statename)
{
_QWORD *i; // rax
for ( i = *(_QWORD **)(scopeinstance + 0x38); ; i = (_QWORD *)i[1] )
{
while ( 1 )
{
if ( !i )
return 0i64;
if ( statename >= i[3] )
break;
i = (_QWORD *)*i;
}
if ( statename <= i[3] )
break;
}
return i - 2;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment