Displaying 1 result from an estimated 1 matches for "hiveexit".
2013 Nov 22
4
[PATCH 1/3] Document ntreg_nk_record.flags
...-internal.h
+++ b/lib/hivex-internal.h
@@ -125,7 +125,19 @@ struct ntreg_hbin_block {
struct ntreg_nk_record {
int32_t seg_len; /* length (always -ve because used) */
char id[2]; /* "nk" */
- uint16_t flags;
+ uint16_t flags; /* bit 1: HiveExit
+ bit 2: HiveEntry == root key
+ bit 3: NoDelete
+ bit 4: SymbolicLink
+ bit 5: CompressedName: Name is encoded
+ in ASCII...