regfi
|
These items represent interpreted versions of the REGFI_DATA::raw field. More...
Data Fields | |
uint8_t * | none |
REG_NONE. | |
uint8_t * | string |
REG_SZ. | |
uint8_t * | expand_string |
REG_EXPAND_SZ. | |
uint8_t * | binary |
REG_BINARY. | |
uint32_t | dword |
REG_DWORD. | |
uint32_t | dword_be |
REG_DWORD_BE. | |
uint8_t * | link |
REG_LINK. | |
uint8_t ** | multiple_string |
REG_MULTI_SZ. | |
uint64_t | qword |
REG_QWORD. | |
uint8_t * | resource_list |
REG_RESOURCE_LIST. | |
uint8_t * | full_resource_descriptor |
REG_FULL_RESOURCE_DESCRIPTOR. | |
uint8_t * | resource_requirements_list |
REG_RESOURCE_REQUIREMENTS_LIST. |
These items represent interpreted versions of the REGFI_DATA::raw field.
Only use the appropriate member according to the REGFI_DATA::type field. In the event of an unknown type, use only the REGFI_DATA::raw field.
REG_NONE.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_SZ.
Stored as a NUL terminated string. Converted to the specified REGFI_ENCODING.
Referenced by regfi_interpret_data().
REG_EXPAND_SZ.
Stored as a NUL terminated string. Converted to the specified REGFI_ENCODING.
REG_BINARY.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_LINK.
Stored as a NUL terminated string. Converted to the specified REGFI_ENCODING.
REG_MULTI_SZ.
Stored as a list of uint8_t* pointers, terminated with a NULL pointer. Each string element in the list is NUL terminated, and the character set is determined by the specified REGFI_ENCODING.
Referenced by regfi_interpret_data().
REG_RESOURCE_LIST.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_FULL_RESOURCE_DESCRIPTOR.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().
REG_RESOURCE_REQUIREMENTS_LIST.
Stored as a raw buffer. Use REGFI_DATA::interpreted_size to determine length.
Referenced by regfi_interpret_data().