any information \PIPE\ntsvcs ?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
> Gerald (Jerry) Carter wrote:
>>>Does anyone have any pointers to related explanation for the
>>>ntsvcs pipe (Plug and Play services) ?  I've not found
>>>anything directly related.  Nor have searches of MSDN of
>>>the names in ntsvcs.idl turned up anything.
>>>
>>>Pointers appreciated.
> 
> ok.  After some more digging with regmon (silly me...should
> have done this earlier) I realize that the namespace for
> services on the PnP pipe maps on to HKLM\SYSTEM\CurrentControlSet\Enum
> which means I can basically do this with a another virtual registry
> branch.  There still some values I don't quite get but at
> least I can map the registry values to the reply data.

Gahh...I'm an idiot.  Make sense now (somewhat).  The informatio
between the 'CurrentControlSet\Enum' keys is referenced by values in
'CurrentControlSet\Services\<servicename>\Enum'




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDKefsIR7qMdg1EfYRApi6AJ9/O8oTe4yY8fZqW5MQWubyUAclNwCg8TSQ
NtNOCF6jHHyjKEIjmpvM1Ik=
=8w8/
-----END PGP SIGNATURE-----