aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-dcerpc-winreg.c
diff options
context:
space:
mode:
authorJörg Mayer <jmayer@loplof.de>2013-11-06 22:55:17 +0000
committerJörg Mayer <jmayer@loplof.de>2013-11-06 22:55:17 +0000
commit29fef43b407076664c959f837dafb7e2514deca0 (patch)
tree7d2d71afb452193d689df06d7982bc9196fec795 /epan/dissectors/packet-dcerpc-winreg.c
parentf7f47af562550143ac9aa16e219fe44fa52cb44b (diff)
With the updated pidl it is now possible to generate several
of the dcerpc dissectors again. Commit those of the generated onces that actually compile. svn path=/trunk/; revision=53122
Diffstat (limited to 'epan/dissectors/packet-dcerpc-winreg.c')
-rw-r--r--epan/dissectors/packet-dcerpc-winreg.c317
1 files changed, 158 insertions, 159 deletions
diff --git a/epan/dissectors/packet-dcerpc-winreg.c b/epan/dissectors/packet-dcerpc-winreg.c
index 676193c978..8a04160991 100644
--- a/epan/dissectors/packet-dcerpc-winreg.c
+++ b/epan/dissectors/packet-dcerpc-winreg.c
@@ -2,9 +2,9 @@
This filter was automatically generated
from winreg.idl and winreg.cnf.
- Pidl is a perl based IDL compiler for DCE/RPC idl files.
+ Pidl is a perl based IDL compiler for DCE/RPC idl files.
It is maintained by the Samba team, not the Wireshark team.
- Instructions on how to download and install Pidl can be
+ Instructions on how to download and install Pidl can be
found at http://wiki.wireshark.org/Pidl
$Id$
@@ -590,20 +590,19 @@ struct access_mask_info winreg_access_mask_info = {
NULL /* Standard mapping table */
};
static int
-winreg_dissect_element_KeySecurityData_data_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep)
+winreg_dissect_element_KeySecurityData_data_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep)
{
guint32 len;
-
- if(di->conformant_run){
+ if(di->conformant_run){
/*just a run to handle conformant arrays, nothing to dissect */
return offset;
}
/* this is a varying and conformant array */
- offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
+ offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, di, drep,
hf_winreg_sd_max_size, NULL);
- offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
+ offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, di, drep,
hf_winreg_sd_offset, NULL);
- offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep,
+ offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, di, drep,
hf_winreg_sd_actual_size, &len);
dissect_nt_sec_desc(tvb, offset, pinfo, tree, drep, TRUE, len,
&winreg_access_mask_info);
@@ -611,7 +610,7 @@ winreg_dissect_element_KeySecurityData_data_(tvbuff_t *tvb, int offset, packet_i
return offset;
}
int
-winreg_dissect_bitmap_AccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info *di, guint8 *drep, int hf_index _U_, guint32 param _U_)
+winreg_dissect_bitmap_AccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, guint8 *drep, int hf_index _U_, guint32 param _U_)
{
offset = dissect_nt_access_mask(
tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask,
@@ -626,7 +625,7 @@ winreg_dissect_bitmap_AccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo,
* } winreg_String;
*/
static int
-cnf_dissect_winreg_String(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *parent_tree, dcerpc_info *di, guint8 *drep, guint32 param, int hfindex)
+cnf_dissect_winreg_String(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *parent_tree, dcerpc_info* di, guint8 *drep, guint32 param, int hfindex)
{
proto_item *item = NULL;
proto_tree *tree = NULL;
@@ -4876,303 +4875,303 @@ static dcerpc_sub_dissector winreg_dissectors[] = {
void proto_register_dcerpc_winreg(void)
{
static hf_register_info hf[] = {
- { &hf_winreg_winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS,
+ { &hf_winreg_winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS,
{ "Key Enumerate Sub Keys", "winreg.winreg_AccessMask.KEY_ENUMERATE_SUB_KEYS", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS_tfs), ( 0x00008 ), NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeKeyValue_string2,
+ { &hf_winreg_winreg_NotifyChangeKeyValue_string2,
{ "String2", "winreg.winreg_NotifyChangeKeyValue.string2", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdown_message,
+ { &hf_winreg_winreg_InitiateSystemShutdown_message,
{ "Message", "winreg.winreg_InitiateSystemShutdown.message", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_String_name,
+ { &hf_winreg_winreg_String_name,
{ "Name", "winreg.winreg_String.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdownEx_message,
+ { &hf_winreg_winreg_InitiateSystemShutdownEx_message,
{ "Message", "winreg.winreg_InitiateSystemShutdownEx.message", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumValue_enum_index,
+ { &hf_winreg_winreg_EnumValue_enum_index,
{ "Enum Index", "winreg.winreg_EnumValue.enum_index", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_access_mask,
+ { &hf_winreg_access_mask,
{ "Access Mask", "winreg.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_CreateKey_options,
+ { &hf_winreg_winreg_CreateKey_options,
{ "Options", "winreg.winreg_CreateKey.options", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdownEx_timeout,
+ { &hf_winreg_winreg_InitiateSystemShutdownEx_timeout,
{ "Timeout", "winreg.winreg_InitiateSystemShutdownEx.timeout", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_handle,
+ { &hf_winreg_handle,
{ "Handle", "winreg.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_max_valnamelen,
+ { &hf_winreg_winreg_QueryInfoKey_max_valnamelen,
{ "Max Valnamelen", "winreg.winreg_QueryInfoKey.max_valnamelen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SecBuf_length,
+ { &hf_winreg_winreg_SecBuf_length,
{ "Length", "winreg.winreg_SecBuf.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdown_do_reboot,
+ { &hf_winreg_winreg_InitiateSystemShutdown_do_reboot,
{ "Do Reboot", "winreg.winreg_InitiateSystemShutdown.do_reboot", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_DeleteKeyEx_handle,
+ { &hf_winreg_winreg_DeleteKeyEx_handle,
{ "Handle", "winreg.winreg_DeleteKeyEx.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues_buffer_size,
+ { &hf_winreg_winreg_QueryMultipleValues_buffer_size,
{ "Buffer Size", "winreg.winreg_QueryMultipleValues.buffer_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_CreateKey_new_handle,
+ { &hf_winreg_winreg_CreateKey_new_handle,
{ "New Handle", "winreg.winreg_CreateKey.new_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_needed,
+ { &hf_winreg_winreg_QueryMultipleValues2_needed,
{ "Needed", "winreg.winreg_QueryMultipleValues2.needed", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_QueryMultipleValue_ve_valuelen,
+ { &hf_winreg_QueryMultipleValue_ve_valuelen,
{ "Ve Valuelen", "winreg.QueryMultipleValue.ve_valuelen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_KeySecurityAttribute_sec_data,
+ { &hf_winreg_KeySecurityAttribute_sec_data,
{ "Sec Data", "winreg.KeySecurityAttribute.sec_data", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_GetKeySecurity_sec_info,
+ { &hf_winreg_winreg_GetKeySecurity_sec_info,
{ "Sec Info", "winreg.winreg_GetKeySecurity.sec_info", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SaveKeyEx_handle,
+ { &hf_winreg_winreg_SaveKeyEx_handle,
{ "Handle", "winreg.winreg_SaveKeyEx.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_KeyOptions_REG_OPTION_VOLATILE,
+ { &hf_winreg_winreg_KeyOptions_REG_OPTION_VOLATILE,
{ "Reg Option Volatile", "winreg.winreg_KeyOptions.REG_OPTION_VOLATILE", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_VOLATILE_tfs), ( 0x00000001 ), NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_num_values,
+ { &hf_winreg_winreg_QueryMultipleValues2_num_values,
{ "Num Values", "winreg.winreg_QueryMultipleValues2.num_values", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SetKeySecurity_sec_info,
+ { &hf_winreg_winreg_SetKeySecurity_sec_info,
{ "Sec Info", "winreg.winreg_SetKeySecurity.sec_info", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_StringBuf_size,
+ { &hf_winreg_winreg_StringBuf_size,
{ "Size", "winreg.winreg_StringBuf.size", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SecBuf_sd,
+ { &hf_winreg_winreg_SecBuf_sd,
{ "Sd", "winreg.winreg_SecBuf.sd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_secdescsize,
+ { &hf_winreg_winreg_QueryInfoKey_secdescsize,
{ "Secdescsize", "winreg.winreg_QueryInfoKey.secdescsize", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY,
+ { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY,
{ "Reg Notify Change Security", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_SECURITY", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY_tfs), ( 0x00000008 ), NULL, HFILL }},
- { &hf_winreg_winreg_SetValue_name,
+ { &hf_winreg_winreg_SetValue_name,
{ "Name", "winreg.winreg_SetValue.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKey_flags,
+ { &hf_winreg_winreg_RestoreKey_flags,
{ "Flags", "winreg.winreg_RestoreKey.flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_QueryMultipleValue_ve_type,
+ { &hf_winreg_QueryMultipleValue_ve_type,
{ "Ve Type", "winreg.QueryMultipleValue.ve_type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_CreateKey_secdesc,
+ { &hf_winreg_winreg_CreateKey_secdesc,
{ "Secdesc", "winreg.winreg_CreateKey.secdesc", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_DeleteKeyEx_reserved,
+ { &hf_winreg_winreg_DeleteKeyEx_reserved,
{ "Reserved", "winreg.winreg_DeleteKeyEx.reserved", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdownEx_force_apps,
+ { &hf_winreg_winreg_InitiateSystemShutdownEx_force_apps,
{ "Force Apps", "winreg.winreg_InitiateSystemShutdownEx.force_apps", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SetValue_type,
+ { &hf_winreg_winreg_SetValue_type,
{ "Type", "winreg.winreg_SetValue.type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_opnum,
+ { &hf_winreg_opnum,
{ "Operation", "winreg.opnum", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumValue_name,
+ { &hf_winreg_winreg_EnumValue_name,
{ "Name", "winreg.winreg_EnumValue.name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_LoadKey_filename,
+ { &hf_winreg_winreg_LoadKey_filename,
{ "Filename", "winreg.winreg_LoadKey.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_CREATE_LINK,
+ { &hf_winreg_winreg_AccessMask_KEY_CREATE_LINK,
{ "Key Create Link", "winreg.winreg_AccessMask.KEY_CREATE_LINK", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_CREATE_LINK_tfs), ( 0x00020 ), NULL, HFILL }},
- { &hf_winreg_winreg_DeleteValue_value,
+ { &hf_winreg_winreg_DeleteValue_value,
{ "Value", "winreg.winreg_DeleteValue.value", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_offered,
+ { &hf_winreg_winreg_QueryMultipleValues2_offered,
{ "Offered", "winreg.winreg_QueryMultipleValues2.offered", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues_values_in,
+ { &hf_winreg_winreg_QueryMultipleValues_values_in,
{ "Values In", "winreg.winreg_QueryMultipleValues.values_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_NOTIFY,
+ { &hf_winreg_winreg_AccessMask_KEY_NOTIFY,
{ "Key Notify", "winreg.winreg_AccessMask.KEY_NOTIFY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_NOTIFY_tfs), ( 0x00010 ), NULL, HFILL }},
- { &hf_winreg_winreg_OpenKey_parent_handle,
+ { &hf_winreg_winreg_OpenKey_parent_handle,
{ "Parent Handle", "winreg.winreg_OpenKey.parent_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_num_subkeys,
+ { &hf_winreg_winreg_QueryInfoKey_num_subkeys,
{ "Num Subkeys", "winreg.winreg_QueryInfoKey.num_subkeys", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_WOW64_32KEY,
+ { &hf_winreg_winreg_AccessMask_KEY_WOW64_32KEY,
{ "Key Wow64 32key", "winreg.winreg_AccessMask.KEY_WOW64_32KEY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_WOW64_32KEY_tfs), ( 0x00200 ), NULL, HFILL }},
- { &hf_winreg_winreg_SaveKeyEx_sec_attrib,
+ { &hf_winreg_winreg_SaveKeyEx_sec_attrib,
{ "Sec Attrib", "winreg.winreg_SaveKeyEx.sec_attrib", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_last_changed_time,
+ { &hf_winreg_winreg_QueryInfoKey_last_changed_time,
{ "Last Changed Time", "winreg.winreg_QueryInfoKey.last_changed_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_KeyOptions_REG_OPTION_OPEN_LINK,
+ { &hf_winreg_winreg_KeyOptions_REG_OPTION_OPEN_LINK,
{ "Reg Option Open Link", "winreg.winreg_KeyOptions.REG_OPTION_OPEN_LINK", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_OPEN_LINK_tfs), ( 0x00000008 ), NULL, HFILL }},
- { &hf_winreg_winreg_OpenHKPD_access_mask,
+ { &hf_winreg_winreg_OpenHKPD_access_mask,
{ "Access Mask", "winreg.winreg_OpenHKPD.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AbortSystemShutdown_server,
+ { &hf_winreg_winreg_AbortSystemShutdown_server,
{ "Server", "winreg.winreg_AbortSystemShutdown.server", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryValue_type,
+ { &hf_winreg_winreg_QueryValue_type,
{ "Type", "winreg.winreg_QueryValue.type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_sd_actual_size,
+ { &hf_winreg_sd_actual_size,
{ "Actual Size", "winreg.sd.actual_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKeyFlags_REG_FORCE_RESTORE,
+ { &hf_winreg_winreg_RestoreKeyFlags_REG_FORCE_RESTORE,
{ "Reg Force Restore", "winreg.winreg_RestoreKeyFlags.REG_FORCE_RESTORE", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_FORCE_RESTORE_tfs), ( 0x00000008 ), NULL, HFILL }},
- { &hf_winreg_winreg_SecBuf_inherit,
+ { &hf_winreg_winreg_SecBuf_inherit,
{ "Inherit", "winreg.winreg_SecBuf.inherit", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SetValue_size,
+ { &hf_winreg_winreg_SetValue_size,
{ "Size", "winreg.winreg_SetValue.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SaveKey_handle,
+ { &hf_winreg_winreg_SaveKey_handle,
{ "Handle", "winreg.winreg_SaveKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET,
+ { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET,
{ "Reg Notify Change Last Set", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_LAST_SET", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET_tfs), ( 0x00000004 ), NULL, HFILL }},
- { &hf_winreg_winreg_ReplaceKey_handle,
+ { &hf_winreg_winreg_ReplaceKey_handle,
{ "Handle", "winreg.winreg_ReplaceKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_GetVersion_version,
+ { &hf_winreg_winreg_GetVersion_version,
{ "Version", "winreg.winreg_GetVersion.version", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_ReplaceKey_old_file,
+ { &hf_winreg_winreg_ReplaceKey_old_file,
{ "Old File", "winreg.winreg_ReplaceKey.old_file", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_QUERY_VALUE,
+ { &hf_winreg_winreg_AccessMask_KEY_QUERY_VALUE,
{ "Key Query Value", "winreg.winreg_AccessMask.KEY_QUERY_VALUE", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_QUERY_VALUE_tfs), ( 0x00001 ), NULL, HFILL }},
- { &hf_winreg_winreg_CreateKey_action_taken,
+ { &hf_winreg_winreg_CreateKey_action_taken,
{ "Action Taken", "winreg.winreg_CreateKey.action_taken", FT_UINT32, BASE_DEC, VALS(winreg_winreg_CreateAction_vals), 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_num_values,
+ { &hf_winreg_winreg_QueryInfoKey_num_values,
{ "Num Values", "winreg.winreg_QueryInfoKey.num_values", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE,
+ { &hf_winreg_winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE,
{ "Reg Whole Hive Volatile", "winreg.winreg_RestoreKeyFlags.REG_WHOLE_HIVE_VOLATILE", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE_tfs), ( 0x00000001 ), NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME,
+ { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME,
{ "Reg Notify Change Name", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_NAME", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME_tfs), ( 0x00000001 ), NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_SET_VALUE,
+ { &hf_winreg_winreg_AccessMask_KEY_SET_VALUE,
{ "Key Set Value", "winreg.winreg_AccessMask.KEY_SET_VALUE", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_SET_VALUE_tfs), ( 0x00002 ), NULL, HFILL }},
- { &hf_winreg_winreg_EnumKey_enum_index,
+ { &hf_winreg_winreg_EnumKey_enum_index,
{ "Enum Index", "winreg.winreg_EnumKey.enum_index", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKey_handle,
+ { &hf_winreg_winreg_RestoreKey_handle,
{ "Handle", "winreg.winreg_RestoreKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SetValue_data,
+ { &hf_winreg_winreg_SetValue_data,
{ "Data", "winreg.winreg_SetValue.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdown_force_apps,
+ { &hf_winreg_winreg_InitiateSystemShutdown_force_apps,
{ "Force Apps", "winreg.winreg_InitiateSystemShutdown.force_apps", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeKeyValue_string1,
+ { &hf_winreg_winreg_NotifyChangeKeyValue_string1,
{ "String1", "winreg.winreg_NotifyChangeKeyValue.string1", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SaveKeyEx_flags,
+ { &hf_winreg_winreg_SaveKeyEx_flags,
{ "Flags", "winreg.winreg_SaveKeyEx.flags", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues_buffer,
+ { &hf_winreg_winreg_QueryMultipleValues_buffer,
{ "Buffer", "winreg.winreg_QueryMultipleValues.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_classname,
+ { &hf_winreg_winreg_QueryInfoKey_classname,
{ "Classname", "winreg.winreg_QueryInfoKey.classname", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_WOW64_64KEY,
+ { &hf_winreg_winreg_AccessMask_KEY_WOW64_64KEY,
{ "Key Wow64 64key", "winreg.winreg_AccessMask.KEY_WOW64_64KEY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_WOW64_64KEY_tfs), ( 0x00100 ), NULL, HFILL }},
- { &hf_winreg_winreg_ReplaceKey_subkey,
+ { &hf_winreg_winreg_ReplaceKey_subkey,
{ "Subkey", "winreg.winreg_ReplaceKey.subkey", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_sd_max_size,
+ { &hf_winreg_sd_max_size,
{ "Max Size", "winreg.sd.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_max_classlen,
+ { &hf_winreg_winreg_QueryInfoKey_max_classlen,
{ "Max Classlen", "winreg.winreg_QueryInfoKey.max_classlen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_ValNameBuf_length,
+ { &hf_winreg_winreg_ValNameBuf_length,
{ "Length", "winreg.winreg_ValNameBuf.length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeKeyValue_notify_filter,
+ { &hf_winreg_winreg_NotifyChangeKeyValue_notify_filter,
{ "Notify Filter", "winreg.winreg_NotifyChangeKeyValue.notify_filter", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_UnLoadKey_subkey,
+ { &hf_winreg_winreg_UnLoadKey_subkey,
{ "Subkey", "winreg.winreg_UnLoadKey.subkey", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_ReplaceKey_new_file,
+ { &hf_winreg_winreg_ReplaceKey_new_file,
{ "New File", "winreg.winreg_ReplaceKey.new_file", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SaveKeyEx_filename,
+ { &hf_winreg_winreg_SaveKeyEx_filename,
{ "Filename", "winreg.winreg_SaveKeyEx.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_QueryMultipleValue_ve_valuename,
+ { &hf_winreg_QueryMultipleValue_ve_valuename,
{ "Ve Valuename", "winreg.QueryMultipleValue.ve_valuename", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_key_handle,
+ { &hf_winreg_winreg_QueryMultipleValues2_key_handle,
{ "Key Handle", "winreg.winreg_QueryMultipleValues2.key_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_KeySecurityData_size,
+ { &hf_winreg_KeySecurityData_size,
{ "Size", "winreg.KeySecurityData.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE,
+ { &hf_winreg_winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE,
{ "Reg Option Backup Restore", "winreg.winreg_KeyOptions.REG_OPTION_BACKUP_RESTORE", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE_tfs), ( 0x00000004 ), NULL, HFILL }},
- { &hf_winreg_winreg_EnumKey_name,
+ { &hf_winreg_winreg_EnumKey_name,
{ "Name", "winreg.winreg_EnumKey.name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_LoadKey_keyname,
+ { &hf_winreg_winreg_LoadKey_keyname,
{ "Keyname", "winreg.winreg_LoadKey.keyname", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues_key_handle,
+ { &hf_winreg_winreg_QueryMultipleValues_key_handle,
{ "Key Handle", "winreg.winreg_QueryMultipleValues.key_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumValue_type,
+ { &hf_winreg_winreg_EnumValue_type,
{ "Type", "winreg.winreg_EnumValue.type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumKey_last_changed_time,
+ { &hf_winreg_winreg_EnumKey_last_changed_time,
{ "Last Changed Time", "winreg.winreg_EnumKey.last_changed_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumValue_size,
+ { &hf_winreg_winreg_EnumValue_size,
{ "Size", "winreg.winreg_EnumValue.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SaveKey_sec_attrib,
+ { &hf_winreg_winreg_SaveKey_sec_attrib,
{ "Sec Attrib", "winreg.winreg_SaveKey.sec_attrib", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_sd,
+ { &hf_winreg_sd,
{ "KeySecurityData", "winreg.sd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_KeyOptions_REG_OPTION_CREATE_LINK,
+ { &hf_winreg_winreg_KeyOptions_REG_OPTION_CREATE_LINK,
{ "Reg Option Create Link", "winreg.winreg_KeyOptions.REG_OPTION_CREATE_LINK", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_CREATE_LINK_tfs), ( 0x00000002 ), NULL, HFILL }},
- { &hf_winreg_winreg_OpenKey_options,
+ { &hf_winreg_winreg_OpenKey_options,
{ "Options", "winreg.winreg_OpenKey.options", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_SaveKey_filename,
+ { &hf_winreg_winreg_SaveKey_filename,
{ "Filename", "winreg.winreg_SaveKey.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryValue_data,
+ { &hf_winreg_winreg_QueryValue_data,
{ "Data", "winreg.winreg_QueryValue.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_buffer,
+ { &hf_winreg_winreg_QueryMultipleValues2_buffer,
{ "Buffer", "winreg.winreg_QueryMultipleValues2.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdown_hostname,
+ { &hf_winreg_winreg_InitiateSystemShutdown_hostname,
{ "Hostname", "winreg.winreg_InitiateSystemShutdown.hostname", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_UnLoadKey_handle,
+ { &hf_winreg_winreg_UnLoadKey_handle,
{ "Handle", "winreg.winreg_UnLoadKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues_values_out,
+ { &hf_winreg_winreg_QueryMultipleValues_values_out,
{ "Values Out", "winreg.winreg_QueryMultipleValues.values_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_KeySecurityData_data,
+ { &hf_winreg_KeySecurityData_data,
{ "Data", "winreg.KeySecurityData.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_OpenKey_access_mask,
+ { &hf_winreg_winreg_OpenKey_access_mask,
{ "Access Mask", "winreg.winreg_OpenKey.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_OpenKey_keyname,
+ { &hf_winreg_winreg_OpenKey_keyname,
{ "Keyname", "winreg.winreg_OpenKey.keyname", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdownEx_do_reboot,
+ { &hf_winreg_winreg_InitiateSystemShutdownEx_do_reboot,
{ "Do Reboot", "winreg.winreg_InitiateSystemShutdownEx.do_reboot", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeKeyValue_watch_subtree,
+ { &hf_winreg_winreg_NotifyChangeKeyValue_watch_subtree,
{ "Watch Subtree", "winreg.winreg_NotifyChangeKeyValue.watch_subtree", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_DeleteKeyEx_access_mask,
+ { &hf_winreg_winreg_DeleteKeyEx_access_mask,
{ "Access Mask", "winreg.winreg_DeleteKeyEx.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_DeleteKeyEx_key,
+ { &hf_winreg_winreg_DeleteKeyEx_key,
{ "Key", "winreg.winreg_DeleteKeyEx.key", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryValue_data_length,
+ { &hf_winreg_winreg_QueryValue_data_length,
{ "Data Length", "winreg.winreg_QueryValue.data_length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_KeySecurityData_len,
+ { &hf_winreg_KeySecurityData_len,
{ "Len", "winreg.KeySecurityData.len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_ValNameBuf_size,
+ { &hf_winreg_winreg_ValNameBuf_size,
{ "Size", "winreg.winreg_ValNameBuf.size", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_CreateKey_name,
+ { &hf_winreg_winreg_CreateKey_name,
{ "Name", "winreg.winreg_CreateKey.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES,
+ { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES,
{ "Reg Notify Change Attributes", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES_tfs), ( 0x00000002 ), NULL, HFILL }},
- { &hf_winreg_winreg_String_name_len,
+ { &hf_winreg_winreg_String_name_len,
{ "Name Len", "winreg.winreg_String.name_len", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_DeleteKey_key,
+ { &hf_winreg_winreg_DeleteKey_key,
{ "Key", "winreg.winreg_DeleteKey.key", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryValue_data_size,
+ { &hf_winreg_winreg_QueryValue_data_size,
{ "Data Size", "winreg.winreg_QueryValue.data_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_system_name,
+ { &hf_winreg_system_name,
{ "System Name", "winreg.system_name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_QueryMultipleValue_ve_valueptr,
+ { &hf_winreg_QueryMultipleValue_ve_valueptr,
{ "Ve Valueptr", "winreg.QueryMultipleValue.ve_valueptr", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_KeySecurityAttribute_data_size,
+ { &hf_winreg_KeySecurityAttribute_data_size,
{ "Data Size", "winreg.KeySecurityAttribute.data_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues_num_values,
+ { &hf_winreg_winreg_QueryMultipleValues_num_values,
{ "Num Values", "winreg.winreg_QueryMultipleValues.num_values", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_StringBuf_name,
+ { &hf_winreg_winreg_StringBuf_name,
{ "Name", "winreg.winreg_StringBuf.name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeKeyValue_unknown2,
+ { &hf_winreg_winreg_NotifyChangeKeyValue_unknown2,
{ "Unknown2", "winreg.winreg_NotifyChangeKeyValue.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_sd_offset,
+ { &hf_winreg_sd_offset,
{ "Offset", "winreg.sd.offset", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_ValNameBuf_name,
+ { &hf_winreg_winreg_ValNameBuf_name,
{ "Name", "winreg.winreg_ValNameBuf.name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_StringBuf_length,
+ { &hf_winreg_winreg_StringBuf_length,
{ "Length", "winreg.winreg_StringBuf.length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_values_in,
+ { &hf_winreg_winreg_QueryMultipleValues2_values_in,
{ "Values In", "winreg.winreg_QueryMultipleValues2.values_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_String_name_size,
+ { &hf_winreg_winreg_String_name_size,
{ "Name Size", "winreg.winreg_String.name_size", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_NotifyChangeKeyValue_unknown,
+ { &hf_winreg_winreg_NotifyChangeKeyValue_unknown,
{ "Unknown", "winreg.winreg_NotifyChangeKeyValue.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_AccessMask_KEY_CREATE_SUB_KEY,
+ { &hf_winreg_winreg_AccessMask_KEY_CREATE_SUB_KEY,
{ "Key Create Sub Key", "winreg.winreg_AccessMask.KEY_CREATE_SUB_KEY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_CREATE_SUB_KEY_tfs), ( 0x00004 ), NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKey_filename,
+ { &hf_winreg_winreg_RestoreKey_filename,
{ "Filename", "winreg.winreg_RestoreKey.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKeyFlags_REG_REFRESH_HIVE,
+ { &hf_winreg_winreg_RestoreKeyFlags_REG_REFRESH_HIVE,
{ "Reg Refresh Hive", "winreg.winreg_RestoreKeyFlags.REG_REFRESH_HIVE", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_REFRESH_HIVE_tfs), ( 0x00000002 ), NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_max_valbufsize,
+ { &hf_winreg_winreg_QueryInfoKey_max_valbufsize,
{ "Max Valbufsize", "winreg.winreg_QueryInfoKey.max_valbufsize", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdownEx_reason,
+ { &hf_winreg_winreg_InitiateSystemShutdownEx_reason,
{ "Reason", "winreg.winreg_InitiateSystemShutdownEx.reason", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumValue_length,
+ { &hf_winreg_winreg_EnumValue_length,
{ "Length", "winreg.winreg_EnumValue.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryInfoKey_max_subkeylen,
+ { &hf_winreg_winreg_QueryInfoKey_max_subkeylen,
{ "Max Subkeylen", "winreg.winreg_QueryInfoKey.max_subkeylen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdown_timeout,
+ { &hf_winreg_winreg_InitiateSystemShutdown_timeout,
{ "Timeout", "winreg.winreg_InitiateSystemShutdown.timeout", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_InitiateSystemShutdownEx_hostname,
+ { &hf_winreg_winreg_InitiateSystemShutdownEx_hostname,
{ "Hostname", "winreg.winreg_InitiateSystemShutdownEx.hostname", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_KeySecurityAttribute_inherit,
+ { &hf_winreg_KeySecurityAttribute_inherit,
{ "Inherit", "winreg.KeySecurityAttribute.inherit", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_werror,
+ { &hf_winreg_werror,
{ "Windows Error", "winreg.werror", FT_UINT32, BASE_HEX, VALS(WERR_errors), 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryMultipleValues2_values_out,
+ { &hf_winreg_winreg_QueryMultipleValues2_values_out,
{ "Values Out", "winreg.winreg_QueryMultipleValues2.values_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumKey_keyclass,
+ { &hf_winreg_winreg_EnumKey_keyclass,
{ "Keyclass", "winreg.winreg_EnumKey.keyclass", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_CreateKey_keyclass,
+ { &hf_winreg_winreg_CreateKey_keyclass,
{ "Keyclass", "winreg.winreg_CreateKey.keyclass", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_EnumValue_value,
+ { &hf_winreg_winreg_EnumValue_value,
{ "Value", "winreg.winreg_EnumValue.value", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_OpenHKCU_access_mask,
+ { &hf_winreg_winreg_OpenHKCU_access_mask,
{ "Access Mask", "winreg.winreg_OpenHKCU.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_QueryValue_value_name,
+ { &hf_winreg_winreg_QueryValue_value_name,
{ "Value Name", "winreg.winreg_QueryValue.value_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_winreg_winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH,
+ { &hf_winreg_winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH,
{ "Reg No Lazy Flush", "winreg.winreg_RestoreKeyFlags.REG_NO_LAZY_FLUSH", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH_tfs), ( 0x00000004 ), NULL, HFILL }},
};