News for hackers. Stuff that matters.

A comment on Registry Explorer: Replacement for the Windows Built-In Regedit.exe Tool.

Re:Registry Explorer: Replacement for the Windows Built-In R... by cmeacham98 on Sunday July 25, 2021 @08:40AM (#27948747)
> Show real Registry (not just the standard one)

Can someone with more Windows knowledge explain this? Does regedit show a "fake" registry?

[ Parent | on HN ]
Re:Registry Explorer: Replacement for the Windows Built-In R... by roblabla on Sunday July 25, 2021 @09:29AM (#27949033)
The Windows Registry API is an incomplete wrapper over the NT Registry API. One glaring problem with it is that the windows API uses null-terminated string, whereas the NT API (and the underlying file format) use length-prefixed strings. This means you can effectively hide keys and values from software using the normal Windows API.
[ Parent | on HN ]