Class: Rex::Registry::LFBlock

Inherits:
Object
  • Object
show all
Defined in:
lib/rex/registry/lfkey.rb

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(hive_blob, offset) ⇒ LFBlock

Returns a new instance of LFBlock.



11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
 
# File 'lib/rex/registry/lfkey.rb', line 11

def initialize(hive_blob, offset)
  offset = offset + 4
  lf_header = hive_blob[offset, 2]

  if lf_header !~ /lf/ && lf_header !~ /lh/
    return
  end

  @number_of_keys = hive_blob[offset + 0x02, 2].unpack('C').first

  @hash_records = []
  @children = []

  hash_offset = offset + 0x04

  1.upto(@number_of_keys) do |h|

    hash = LFHashRecord.new(hive_blob, hash_offset)

    @hash_records << hash

    hash_offset = hash_offset + 0x08

    @children << NodeKey.new(hive_blob, hash.nodekey_offset + 0x1000)
  end
end

Instance Attribute Details

#children ⇒ Object

Returns the value of attribute children.



9
10
11
 
# File 'lib/rex/registry/lfkey.rb', line 9

def children
  @children
end

#hash_records ⇒ Object

Returns the value of attribute hash_records.



9
10
11
 
# File 'lib/rex/registry/lfkey.rb', line 9

def hash_records
  @hash_records
end

#number_of_keys ⇒ Object

Returns the value of attribute number_of_keys.



9
10
11
 
# File 'lib/rex/registry/lfkey.rb', line 9

def number_of_keys
  @number_of_keys
end