Page 1 of 1

Registry Load/Unload/Save functions

Posted: Wed Jun 20, 2012 11:58 am
by iPick12
Hey, I'm near implementing NtLoadKey, NtUnloadKey and NtSaveKey. The only serious problem I have is that I'm not sure about the MS Registry Binary File Format. Does anyone of you know anything about that?

Re: Registry Load/Unload/Save functions

Posted: Fri Jun 22, 2012 2:53 pm
by fireball
Hi.

The actual binary format is irrelevant for NtLoadKey/UnloadKey/SaveKey, because the cmlib should be utilized for accessing binary hives.