Displaying 2 results from an estimated 2 matches for "regcreatekeyw".
Did you mean:
regcreatekeya
2014 Jan 08
0
Re: hivex: Make node names and value names with embedded null characters accessible
On Wed, Jan 08, 2014 at 01:26:23AM +0100, Hilko Bengen wrote:
> On Windows, there exist at least two APIs for dealing with the
> Registry: The Win32 API (RegCreateKeyA, RegCreateKeyW, etc.) works
> with null-terminated ASCII or UTF-16 strings. The native API
> (ZwCreateKey, etc.), on the other hand works with UTF-16 strings that
> are stored as buffers+length and may contain null characters. Malware
> authors have been relying on the Win32 API's inability to pro...
2014 Jan 08
5
hivex: Make node names and value names with embedded null characters accessible
On Windows, there exist at least two APIs for dealing with the
Registry: The Win32 API (RegCreateKeyA, RegCreateKeyW, etc.) works
with null-terminated ASCII or UTF-16 strings. The native API
(ZwCreateKey, etc.), on the other hand works with UTF-16 strings that
are stored as buffers+length and may contain null characters. Malware
authors have been relying on the Win32 API's inability to properly
work with such...