Contents

# -*- coding: binary -*-
module Rex
module Registry

class RegfBlock

	attr_accessor :timestamp, :root_key_offset

	def initialize(hive)

		regf_header = hive[0x00, 4]

		if regf_header !~ /regf/
			puts "Not a registry hive"
			return
		end

		@timestamp = hive[0x0C, 8].unpack('q').first
		@root_key_offset = 0x20

	end
end

end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
librex-0.0.68	lib/rex/registry/regf.rb
librex-0.0.66	lib/rex/registry/regf.rb