|
regfi
|
These items represent interpreted versions of the REGFI_DATA::raw field. More...
Data Fields | |
| uint8_t * | none |
| REG_NONE. | |
| uint8_t * | string |
| REG_SZ. | |
| uint8_t * | expand_string |
| REG_EXPAND_SZ. | |
| uint8_t * | binary |
| REG_BINARY. | |
| uint32_t | dword |
| REG_DWORD. | |
| uint32_t | dword_be |
| REG_DWORD_BE. | |
| uint8_t * | link |
| REG_LINK. | |
| uint8_t ** | multiple_string |
| REG_MULTI_SZ. | |
| uint64_t | qword |
| REG_QWORD. | |
| uint8_t * | resource_list |
| REG_RESOURCE_LIST. | |
| uint8_t * | full_resource_descriptor |
| REG_FULL_RESOURCE_DESCRIPTOR. | |
| uint8_t * | resource_requirements_list |
| REG_RESOURCE_REQUIREMENTS_LIST. | |
These items represent interpreted versions of the REGFI_DATA::raw field.
Only use the appropriate member according to the REGFI_DATA::type field. In the event of an unknown type, use only the REGFI_DATA::raw field.
REG_NONE.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_SZ.
Stored as a NUL terminated string. Converted to the specified REGFI_ENCODING.
Referenced by regfi_interpret_data().
REG_EXPAND_SZ.
Stored as a NUL terminated string. Converted to the specified REGFI_ENCODING.
REG_BINARY.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_LINK.
Stored as a NUL terminated string. Converted to the specified REGFI_ENCODING.
REG_MULTI_SZ.
Stored as a list of uint8_t* pointers, terminated with a NULL pointer. Each string element in the list is NUL terminated, and the character set is determined by the specified REGFI_ENCODING.
Referenced by regfi_interpret_data().
REG_RESOURCE_LIST.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_FULL_RESOURCE_DESCRIPTOR.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_RESOURCE_REQUIREMENTS_LIST.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
1.7.4