Jump to content

Recommended Posts

Posted

Greetings.

In a nutshell, a registry value can be one of the following types, as seen in a .reg file

"string" = REG_SZ

dword = REG_DWORD

hex = REG_BINARY

hex 2 = REG_EXPAND_SZ

hex 7 = REG_MULTI_SZ

hex 8 = REG_RESOURCE_LIST

hex 9 = REG_FULL_RESOURCE_DESCRIPTOR

hex A = REG_RESOURCE_REQUIREMENTS_LIST

hex B = REG_QWORD

Obscurely there is also hex 1 = REG_SZ. This comes into play if you have CR or LF within the REG_SZ value. If you had a .reg entry of

"value1"=hex(1):string value in hexadecimal here

and merged it into the registry, the REG_SZ value could have CR & LF characters within.

I am looking for a way to include this type of REG_SZ into an INF file. 0x00000000 is the flag for a REG_SZ. I have tried many different flags, but have failed to find the correct one. Is there anyone who has ever seen this and knows the correct flag value?

Thanks a million to anyone who has,

Sul.


Posted

I bet the millionth of a dollar i just earn there that you can set it as a REG_BINARY or REG_NONE (or maybe REG_MULTI_SZ for first line and REG_MULTI_SZ_APPEND for others) and the windows API will not see the difference (i mean it will be readable as a string depending how strong is the code).

Is it a theorical or practical question ?

++

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...