python-registry | Pure Python parser for Windows Registry hives
kandi X-RAY | python-registry Summary
kandi X-RAY | python-registry Summary
Pure Python parser for Windows Registry hives.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
- Returns the string of the data type .
- Get network settings .
- Parse command line arguments .
- The value type of this VkRecord .
- Compute the MAC of the buffer .
- Format a Registry Value
- Parses a composite value .
- Initialize registry .
- Copy the contents of the header .
- Return a list of os settings
python-registry Key Features
python-registry Examples and Code Snippets
def sync():
"""No-op. Used to synchronize the contents of the Python registry with C++."""
Community Discussions
Trending Discussions on python-registry
QUESTION
I notice there are many legitimate unknown value types in the HKEY_LOCAL_MACHINE of Windows 10. These are just a few of them:
- 0x100000
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\hidbthle.inf_amd64_55f7f576bf549669\Configurations\HidBthLE.NT\Device] "WUDF"
- 0x200000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class{4d36e96c-e325-11ce-bfc1-08002be10318}\Configuration\Reset\Driver] "DevLoader"
- 0x40007
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\cdrom.inf_amd64_21e18060f597c313\Configurations\cdrom_install\Services\cdrom] "AutoRunAlwaysDisable"
- 0xffff0009
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\Upgrade\NetworkDriverBackup\Control\NetworkSetup2\Interfaces{0176DBBA-3617-44FF-BA79-90375AAC4B6A}\Properties{a111f1f4-5923-47c0-9a68-d0bafb577901}\0004] "(Default)"
- 0xffff000d
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\Upgrade\NetworkDriverBackup\Control\NetworkSetup2\Filters{171C5016-3D19-4CB2-9556-63E586EE5010}\Properties{a111f1f7-5923-47c0-9a68-d0bafb577901}\0002] "(Default)"
- 0xffff100d
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\Upgrade\NetworkDriverBackup\Control\NetworkSetup2\Filters{E475CF9A-60CD-4439-A75F-0079CE0E18A1}\Properties{a111f1f0-5923-47c0-9a68-d0bafb577901}\0052] "(Default)"
- 0xffff2012
[HKEY_LOCAL_MACHINE\SYSTEM\Setup\Upgrade\NetworkDriverBackup\Control\NetworkSetup2\Clients{54494F4E-5441-4B53-CCB9-061A6EC4BF6E}\Properties{a111f1f1-5923-47c0-9a68-d0bafb577901}\0002] "(Default)"
Interestingly, NirSoft RegScanner interprets the value type 0xffff0009 as REG_FULL_RESOURCE_DESCRIPTOR
(0x09).
Since the predefined constants defined in "winnt.h" (see below) are no more than one byte, my temporary conclusion is that we should AND the value type reported by RegQueryValueEx() with 0x000000ff. However, I'm not sure about this.
...ANSWER
Answered 2018-May-20 at 18:45registry subsystem not interpret (and not check) the Type
value of key. it simply store or load it as DWORD
data. as result we in principle can use any value for type with any data. say for example we can do
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install python-registry
You can use python-registry like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page