Module registry 

Fields related to Windows Registry operations.

Constants

REGISTRY_DATA_BYTES

Original bytes written with base64 encoding. For Windows registry operations, such as SetValueEx and RegQueryValueEx, this corresponds to the data pointed by lp_data. This is optional but provides better recoverability and should be populated for REG_BINARY encoded values.

REGISTRY_DATA_STRINGS

Content when writing string types. Populated as an array when writing string data to the registry. For single string registry types (REG_SZ, REG_EXPAND_SZ), this should be an array with one string. For sequences of string with REG_MULTI_SZ, this array will be variable length. For numeric data, such as REG_DWORD and REG_QWORD, this should be populated with the decimal representation (e.g "1").

REGISTRY_DATA_TYPE

Standard registry type for encoding contents

REGISTRY_HIVE

Abbreviated name for the hive.

REGISTRY_KEY

Hive-relative path of keys.

REGISTRY_PATH

Full path, including hive, key and value

REGISTRY_VALUE

Name of the value written.