?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Revert "TODO epan/dissectors/asn1/kerberos/packet-kerberos-template.c new GSS flags"
[wireshark-sm.git] / epan / dissectors / packet-dcerpc-winreg.c
blobcfb96f10bfa81c89c0a4655e4338c99db2396b78
1 /* DO NOT EDIT
2 This file was automatically generated by Pidl
3 from winreg.idl and winreg.cnf.
4
5 Pidl is a perl based IDL compiler for DCE/RPC idl files.
6 It is maintained by the Samba team, not the Wireshark team.
7 Instructions on how to download and install Pidl can be
8 found at https://wiki.wireshark.org/Pidl
9 */
10
11
12 #include "config.h"
13 #include <string.h>
14 #include <wsutil/array.h>
15 #include <epan/packet.h>
16 #include <epan/tfs.h>
17
18 #include "packet-dcerpc.h"
19 #include "packet-dcerpc-nt.h"
20 #include "packet-windows-common.h"
21 #include "packet-dcerpc-winreg.h"
22 void proto_register_dcerpc_winreg(void);
23 void proto_reg_handoff_dcerpc_winreg(void);
24
25 /* Ett declarations */
26 static int ett_dcerpc_winreg;
27 static int ett_winreg_security_secinfo;
28 static int ett_winreg_winreg_AccessMask;
29 static int ett_winreg_winreg_String;
30 static int ett_winreg_KeySecurityData;
31 static int ett_winreg_winreg_SecBuf;
32 static int ett_winreg_winreg_KeyOptions;
33 static int ett_winreg_winreg_StringBuf;
34 static int ett_winreg_winreg_ValNameBuf;
35 static int ett_winreg_winreg_NotifyChangeType;
36 static int ett_winreg_winreg_RestoreKeyFlags;
37 static int ett_winreg_KeySecurityAttribute;
38 static int ett_winreg_QueryMultipleValue;
39
40
41 /* Header field declarations */
42 static int hf_winreg_KeySecurityAttribute_data_size;
43 static int hf_winreg_KeySecurityAttribute_inherit;
44 static int hf_winreg_KeySecurityAttribute_sec_data;
45 static int hf_winreg_KeySecurityData_data;
46 static int hf_winreg_KeySecurityData_len;
47 static int hf_winreg_KeySecurityData_size;
48 static int hf_winreg_QueryMultipleValue_ve_type;
49 static int hf_winreg_QueryMultipleValue_ve_valuelen;
50 static int hf_winreg_QueryMultipleValue_ve_valuename;
51 static int hf_winreg_QueryMultipleValue_ve_valueptr;
52 static int hf_winreg_access_mask;
53 static int hf_winreg_handle;
54 static int hf_winreg_opnum;
55 static int hf_winreg_sd;
56 static int hf_winreg_sd_actual_size;
57 static int hf_winreg_sd_max_size;
58 static int hf_winreg_sd_offset;
59 static int hf_winreg_system_name;
60 static int hf_winreg_werror;
61 static int hf_winreg_winreg_AbortSystemShutdown_server;
62 static int hf_winreg_winreg_AccessMask_KEY_CREATE_LINK;
63 static int hf_winreg_winreg_AccessMask_KEY_CREATE_SUB_KEY;
64 static int hf_winreg_winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS;
65 static int hf_winreg_winreg_AccessMask_KEY_NOTIFY;
66 static int hf_winreg_winreg_AccessMask_KEY_QUERY_VALUE;
67 static int hf_winreg_winreg_AccessMask_KEY_SET_VALUE;
68 static int hf_winreg_winreg_AccessMask_KEY_WOW64_32KEY;
69 static int hf_winreg_winreg_AccessMask_KEY_WOW64_64KEY;
70 static int hf_winreg_winreg_CreateKey_action_taken;
71 static int hf_winreg_winreg_CreateKey_keyclass;
72 static int hf_winreg_winreg_CreateKey_name;
73 static int hf_winreg_winreg_CreateKey_new_handle;
74 static int hf_winreg_winreg_CreateKey_options;
75 static int hf_winreg_winreg_CreateKey_secdesc;
76 static int hf_winreg_winreg_DeleteKeyEx_access_mask;
77 static int hf_winreg_winreg_DeleteKeyEx_handle;
78 static int hf_winreg_winreg_DeleteKeyEx_key;
79 static int hf_winreg_winreg_DeleteKeyEx_reserved;
80 static int hf_winreg_winreg_DeleteKey_key;
81 static int hf_winreg_winreg_DeleteValue_value;
82 static int hf_winreg_winreg_EnumKey_enum_index;
83 static int hf_winreg_winreg_EnumKey_keyclass;
84 static int hf_winreg_winreg_EnumKey_last_changed_time;
85 static int hf_winreg_winreg_EnumKey_name;
86 static int hf_winreg_winreg_EnumValue_enum_index;
87 static int hf_winreg_winreg_EnumValue_length;
88 static int hf_winreg_winreg_EnumValue_name;
89 static int hf_winreg_winreg_EnumValue_size;
90 static int hf_winreg_winreg_EnumValue_type;
91 static int hf_winreg_winreg_EnumValue_value;
92 static int hf_winreg_winreg_GetKeySecurity_sec_info;
93 static int hf_winreg_winreg_GetVersion_version;
94 static int hf_winreg_winreg_InitiateSystemShutdownEx_do_reboot;
95 static int hf_winreg_winreg_InitiateSystemShutdownEx_force_apps;
96 static int hf_winreg_winreg_InitiateSystemShutdownEx_hostname;
97 static int hf_winreg_winreg_InitiateSystemShutdownEx_message;
98 static int hf_winreg_winreg_InitiateSystemShutdownEx_reason;
99 static int hf_winreg_winreg_InitiateSystemShutdownEx_timeout;
100 static int hf_winreg_winreg_InitiateSystemShutdown_do_reboot;
101 static int hf_winreg_winreg_InitiateSystemShutdown_force_apps;
102 static int hf_winreg_winreg_InitiateSystemShutdown_hostname;
103 static int hf_winreg_winreg_InitiateSystemShutdown_message;
104 static int hf_winreg_winreg_InitiateSystemShutdown_timeout;
105 static int hf_winreg_winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE;
106 static int hf_winreg_winreg_KeyOptions_REG_OPTION_CREATE_LINK;
107 static int hf_winreg_winreg_KeyOptions_REG_OPTION_OPEN_LINK;
108 static int hf_winreg_winreg_KeyOptions_REG_OPTION_VOLATILE;
109 static int hf_winreg_winreg_LoadKey_filename;
110 static int hf_winreg_winreg_LoadKey_keyname;
111 static int hf_winreg_winreg_NotifyChangeKeyValue_notify_filter;
112 static int hf_winreg_winreg_NotifyChangeKeyValue_string1;
113 static int hf_winreg_winreg_NotifyChangeKeyValue_string2;
114 static int hf_winreg_winreg_NotifyChangeKeyValue_unknown;
115 static int hf_winreg_winreg_NotifyChangeKeyValue_unknown2;
116 static int hf_winreg_winreg_NotifyChangeKeyValue_watch_subtree;
117 static int hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES;
118 static int hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET;
119 static int hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME;
120 static int hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY;
121 static int hf_winreg_winreg_OpenHKCU_access_mask;
122 static int hf_winreg_winreg_OpenHKPD_access_mask;
123 static int hf_winreg_winreg_OpenKey_access_mask;
124 static int hf_winreg_winreg_OpenKey_keyname;
125 static int hf_winreg_winreg_OpenKey_options;
126 static int hf_winreg_winreg_OpenKey_parent_handle;
127 static int hf_winreg_winreg_QueryInfoKey_classname;
128 static int hf_winreg_winreg_QueryInfoKey_last_changed_time;
129 static int hf_winreg_winreg_QueryInfoKey_max_classlen;
130 static int hf_winreg_winreg_QueryInfoKey_max_subkeylen;
131 static int hf_winreg_winreg_QueryInfoKey_max_valbufsize;
132 static int hf_winreg_winreg_QueryInfoKey_max_valnamelen;
133 static int hf_winreg_winreg_QueryInfoKey_num_subkeys;
134 static int hf_winreg_winreg_QueryInfoKey_num_values;
135 static int hf_winreg_winreg_QueryInfoKey_secdescsize;
136 static int hf_winreg_winreg_QueryMultipleValues2_buffer;
137 static int hf_winreg_winreg_QueryMultipleValues2_key_handle;
138 static int hf_winreg_winreg_QueryMultipleValues2_needed;
139 static int hf_winreg_winreg_QueryMultipleValues2_num_values;
140 static int hf_winreg_winreg_QueryMultipleValues2_offered;
141 static int hf_winreg_winreg_QueryMultipleValues2_values_in;
142 static int hf_winreg_winreg_QueryMultipleValues2_values_out;
143 static int hf_winreg_winreg_QueryMultipleValues_buffer;
144 static int hf_winreg_winreg_QueryMultipleValues_buffer_size;
145 static int hf_winreg_winreg_QueryMultipleValues_key_handle;
146 static int hf_winreg_winreg_QueryMultipleValues_num_values;
147 static int hf_winreg_winreg_QueryMultipleValues_values_in;
148 static int hf_winreg_winreg_QueryMultipleValues_values_out;
149 static int hf_winreg_winreg_QueryValue_data;
150 static int hf_winreg_winreg_QueryValue_data_length;
151 static int hf_winreg_winreg_QueryValue_data_size;
152 static int hf_winreg_winreg_QueryValue_type;
153 static int hf_winreg_winreg_QueryValue_value_name;
154 static int hf_winreg_winreg_ReplaceKey_handle;
155 static int hf_winreg_winreg_ReplaceKey_new_file;
156 static int hf_winreg_winreg_ReplaceKey_old_file;
157 static int hf_winreg_winreg_ReplaceKey_subkey;
158 static int hf_winreg_winreg_RestoreKeyFlags_REG_FORCE_RESTORE;
159 static int hf_winreg_winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH;
160 static int hf_winreg_winreg_RestoreKeyFlags_REG_REFRESH_HIVE;
161 static int hf_winreg_winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE;
162 static int hf_winreg_winreg_RestoreKey_filename;
163 static int hf_winreg_winreg_RestoreKey_flags;
164 static int hf_winreg_winreg_RestoreKey_handle;
165 static int hf_winreg_winreg_SaveKeyEx_filename;
166 static int hf_winreg_winreg_SaveKeyEx_flags;
167 static int hf_winreg_winreg_SaveKeyEx_handle;
168 static int hf_winreg_winreg_SaveKeyEx_sec_attrib;
169 static int hf_winreg_winreg_SaveKey_filename;
170 static int hf_winreg_winreg_SaveKey_handle;
171 static int hf_winreg_winreg_SaveKey_sec_attrib;
172 static int hf_winreg_winreg_SecBuf_inherit;
173 static int hf_winreg_winreg_SecBuf_length;
174 static int hf_winreg_winreg_SecBuf_sd;
175 static int hf_winreg_winreg_SetKeySecurity_sec_info;
176 static int hf_winreg_winreg_SetValue_data;
177 static int hf_winreg_winreg_SetValue_name;
178 static int hf_winreg_winreg_SetValue_size;
179 static int hf_winreg_winreg_SetValue_type;
180 static int hf_winreg_winreg_StringBuf_length;
181 static int hf_winreg_winreg_StringBuf_name;
182 static int hf_winreg_winreg_StringBuf_size;
183 static int hf_winreg_winreg_String_name;
184 static int hf_winreg_winreg_String_name_len;
185 static int hf_winreg_winreg_String_name_size;
186 static int hf_winreg_winreg_UnLoadKey_handle;
187 static int hf_winreg_winreg_UnLoadKey_subkey;
188 static int hf_winreg_winreg_ValNameBuf_length;
189 static int hf_winreg_winreg_ValNameBuf_name;
190 static int hf_winreg_winreg_ValNameBuf_size;
191
192 static int proto_dcerpc_winreg;
193 /* Version information */
194
195
196 static e_guid_t uuid_dcerpc_winreg = {
197 0x338cd001, 0x2244, 0x31f1,
198 { 0xaa, 0xaa, 0x90, 0x00, 0x38, 0x00, 0x10, 0x03 }
199 };
200 static uint16_t ver_dcerpc_winreg = 1;
201
202 static const true_false_string winreg_AccessMask_KEY_QUERY_VALUE_tfs = {
203 "KEY_QUERY_VALUE is SET",
204 "KEY_QUERY_VALUE is NOT SET",
205 };
206 static const true_false_string winreg_AccessMask_KEY_SET_VALUE_tfs = {
207 "KEY_SET_VALUE is SET",
208 "KEY_SET_VALUE is NOT SET",
209 };
210 static const true_false_string winreg_AccessMask_KEY_CREATE_SUB_KEY_tfs = {
211 "KEY_CREATE_SUB_KEY is SET",
212 "KEY_CREATE_SUB_KEY is NOT SET",
213 };
214 static const true_false_string winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS_tfs = {
215 "KEY_ENUMERATE_SUB_KEYS is SET",
216 "KEY_ENUMERATE_SUB_KEYS is NOT SET",
217 };
218 static const true_false_string winreg_AccessMask_KEY_NOTIFY_tfs = {
219 "KEY_NOTIFY is SET",
220 "KEY_NOTIFY is NOT SET",
221 };
222 static const true_false_string winreg_AccessMask_KEY_CREATE_LINK_tfs = {
223 "KEY_CREATE_LINK is SET",
224 "KEY_CREATE_LINK is NOT SET",
225 };
226 static const true_false_string winreg_AccessMask_KEY_WOW64_64KEY_tfs = {
227 "KEY_WOW64_64KEY is SET",
228 "KEY_WOW64_64KEY is NOT SET",
229 };
230 static const true_false_string winreg_AccessMask_KEY_WOW64_32KEY_tfs = {
231 "KEY_WOW64_32KEY is SET",
232 "KEY_WOW64_32KEY is NOT SET",
233 };
234 static int winreg_dissect_element_String_name_len(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
235 static int winreg_dissect_element_String_name_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
236 static int winreg_dissect_element_String_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
237 static int winreg_dissect_element_String_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
238 static int winreg_dissect_element_KeySecurityData_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
239 static int winreg_dissect_element_KeySecurityData_data_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
240 static int winreg_dissect_element_KeySecurityData_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
241 static int winreg_dissect_element_KeySecurityData_len(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
242 static int winreg_dissect_element_SecBuf_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
243 static int winreg_dissect_element_SecBuf_sd(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
244 static int winreg_dissect_element_SecBuf_inherit(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
245 static const true_false_string winreg_KeyOptions_REG_OPTION_VOLATILE_tfs = {
246 "REG_OPTION_VOLATILE is SET",
247 "REG_OPTION_VOLATILE is NOT SET",
248 };
249 static const true_false_string winreg_KeyOptions_REG_OPTION_CREATE_LINK_tfs = {
250 "REG_OPTION_CREATE_LINK is SET",
251 "REG_OPTION_CREATE_LINK is NOT SET",
252 };
253 static const true_false_string winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE_tfs = {
254 "REG_OPTION_BACKUP_RESTORE is SET",
255 "REG_OPTION_BACKUP_RESTORE is NOT SET",
256 };
257 static const true_false_string winreg_KeyOptions_REG_OPTION_OPEN_LINK_tfs = {
258 "REG_OPTION_OPEN_LINK is SET",
259 "REG_OPTION_OPEN_LINK is NOT SET",
260 };
261 const value_string winreg_winreg_CreateAction_vals[] = {
262 { REG_ACTION_NONE, "REG_ACTION_NONE" },
263 { REG_CREATED_NEW_KEY, "REG_CREATED_NEW_KEY" },
264 { REG_OPENED_EXISTING_KEY, "REG_OPENED_EXISTING_KEY" },
265 { 0, NULL }
266 };
267 static int winreg_dissect_element_StringBuf_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
268 static int winreg_dissect_element_StringBuf_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
269 static int winreg_dissect_element_StringBuf_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
270 static int winreg_dissect_element_StringBuf_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
271 static int winreg_dissect_element_StringBuf_name__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
272 static int winreg_dissect_element_ValNameBuf_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
273 static int winreg_dissect_element_ValNameBuf_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
274 static int winreg_dissect_element_ValNameBuf_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
275 static int winreg_dissect_element_ValNameBuf_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
276 static int winreg_dissect_element_ValNameBuf_name__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
277 static const true_false_string winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME_tfs = {
278 "REG_NOTIFY_CHANGE_NAME is SET",
279 "REG_NOTIFY_CHANGE_NAME is NOT SET",
280 };
281 static const true_false_string winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES_tfs = {
282 "REG_NOTIFY_CHANGE_ATTRIBUTES is SET",
283 "REG_NOTIFY_CHANGE_ATTRIBUTES is NOT SET",
284 };
285 static const true_false_string winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET_tfs = {
286 "REG_NOTIFY_CHANGE_LAST_SET is SET",
287 "REG_NOTIFY_CHANGE_LAST_SET is NOT SET",
288 };
289 static const true_false_string winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY_tfs = {
290 "REG_NOTIFY_CHANGE_SECURITY is SET",
291 "REG_NOTIFY_CHANGE_SECURITY is NOT SET",
292 };
293 static const true_false_string winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE_tfs = {
294 "REG_WHOLE_HIVE_VOLATILE is SET",
295 "REG_WHOLE_HIVE_VOLATILE is NOT SET",
296 };
297 static const true_false_string winreg_RestoreKeyFlags_REG_REFRESH_HIVE_tfs = {
298 "REG_REFRESH_HIVE is SET",
299 "REG_REFRESH_HIVE is NOT SET",
300 };
301 static const true_false_string winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH_tfs = {
302 "REG_NO_LAZY_FLUSH is SET",
303 "REG_NO_LAZY_FLUSH is NOT SET",
304 };
305 static const true_false_string winreg_RestoreKeyFlags_REG_FORCE_RESTORE_tfs = {
306 "REG_FORCE_RESTORE is SET",
307 "REG_FORCE_RESTORE is NOT SET",
308 };
309 static int winreg_dissect_element_KeySecurityAttribute_data_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
310 static int winreg_dissect_element_KeySecurityAttribute_sec_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
311 static int winreg_dissect_element_KeySecurityAttribute_inherit(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
312 static int winreg_dissect_element_QueryMultipleValue_ve_valuename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
313 static int winreg_dissect_element_QueryMultipleValue_ve_valuename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
314 static int winreg_dissect_element_QueryMultipleValue_ve_valuelen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
315 static int winreg_dissect_element_QueryMultipleValue_ve_valueptr(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
316 static int winreg_dissect_element_QueryMultipleValue_ve_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
317 static int winreg_dissect_element_OpenHKCR_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
318 static int winreg_dissect_element_OpenHKCR_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
319 static int winreg_dissect_element_OpenHKCR_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
320 static int winreg_dissect_element_OpenHKCR_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
321 static int winreg_dissect_element_OpenHKCR_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
322 static int winreg_dissect_element_OpenHKCU_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
323 static int winreg_dissect_element_OpenHKCU_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
324 static int winreg_dissect_element_OpenHKCU_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
325 static int winreg_dissect_element_OpenHKCU_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
326 static int winreg_dissect_element_OpenHKCU_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
327 static int winreg_dissect_element_OpenHKLM_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
328 static int winreg_dissect_element_OpenHKLM_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
329 static int winreg_dissect_element_OpenHKLM_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
330 static int winreg_dissect_element_OpenHKLM_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
331 static int winreg_dissect_element_OpenHKLM_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
332 static int winreg_dissect_element_OpenHKPD_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
333 static int winreg_dissect_element_OpenHKPD_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
334 static int winreg_dissect_element_OpenHKPD_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
335 static int winreg_dissect_element_OpenHKPD_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
336 static int winreg_dissect_element_OpenHKPD_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
337 static int winreg_dissect_element_OpenHKU_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
338 static int winreg_dissect_element_OpenHKU_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
339 static int winreg_dissect_element_OpenHKU_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
340 static int winreg_dissect_element_OpenHKU_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
341 static int winreg_dissect_element_OpenHKU_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
342 static int winreg_dissect_element_CloseKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
343 static int winreg_dissect_element_CloseKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
344 static int winreg_dissect_element_CreateKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
345 static int winreg_dissect_element_CreateKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
346 static int winreg_dissect_element_CreateKey_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
347 static int winreg_dissect_element_CreateKey_keyclass(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
348 static int winreg_dissect_element_CreateKey_options(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
349 static int winreg_dissect_element_CreateKey_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
350 static int winreg_dissect_element_CreateKey_secdesc(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
351 static int winreg_dissect_element_CreateKey_secdesc_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
352 static int winreg_dissect_element_CreateKey_new_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
353 static int winreg_dissect_element_CreateKey_new_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
354 static int winreg_dissect_element_CreateKey_action_taken(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
355 static int winreg_dissect_element_CreateKey_action_taken_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
356 static int winreg_dissect_element_DeleteKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
357 static int winreg_dissect_element_DeleteKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
358 static int winreg_dissect_element_DeleteKey_key(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
359 static int winreg_dissect_element_DeleteValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
360 static int winreg_dissect_element_DeleteValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
361 static int winreg_dissect_element_DeleteValue_value(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
362 static int winreg_dissect_element_EnumKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
363 static int winreg_dissect_element_EnumKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
364 static int winreg_dissect_element_EnumKey_enum_index(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
365 static int winreg_dissect_element_EnumKey_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
366 static int winreg_dissect_element_EnumKey_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
367 static int winreg_dissect_element_EnumKey_keyclass(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
368 static int winreg_dissect_element_EnumKey_keyclass_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
369 static int winreg_dissect_element_EnumKey_last_changed_time(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
370 static int winreg_dissect_element_EnumKey_last_changed_time_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
371 static int winreg_dissect_element_EnumValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
372 static int winreg_dissect_element_EnumValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
373 static int winreg_dissect_element_EnumValue_enum_index(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
374 static int winreg_dissect_element_EnumValue_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
375 static int winreg_dissect_element_EnumValue_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
376 static int winreg_dissect_element_EnumValue_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
377 static int winreg_dissect_element_EnumValue_type_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
378 static int winreg_dissect_element_EnumValue_value(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
379 static int winreg_dissect_element_EnumValue_value_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
380 static int winreg_dissect_element_EnumValue_value__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
381 static int winreg_dissect_element_EnumValue_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
382 static int winreg_dissect_element_EnumValue_size_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
383 static int winreg_dissect_element_EnumValue_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
384 static int winreg_dissect_element_EnumValue_length_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
385 static int winreg_dissect_element_FlushKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
386 static int winreg_dissect_element_FlushKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
387 static int winreg_dissect_element_GetKeySecurity_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
388 static int winreg_dissect_element_GetKeySecurity_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
389 static int winreg_dissect_element_GetKeySecurity_sec_info(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
390 static int winreg_dissect_element_GetKeySecurity_sd(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
391 static int winreg_dissect_element_GetKeySecurity_sd_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
392 static int winreg_dissect_element_LoadKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
393 static int winreg_dissect_element_LoadKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
394 static int winreg_dissect_element_LoadKey_keyname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
395 static int winreg_dissect_element_LoadKey_keyname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
396 static int winreg_dissect_element_LoadKey_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
397 static int winreg_dissect_element_LoadKey_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
398 static int winreg_dissect_element_NotifyChangeKeyValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
399 static int winreg_dissect_element_NotifyChangeKeyValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
400 static int winreg_dissect_element_NotifyChangeKeyValue_watch_subtree(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
401 static int winreg_dissect_element_NotifyChangeKeyValue_notify_filter(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
402 static int winreg_dissect_element_NotifyChangeKeyValue_unknown(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
403 static int winreg_dissect_element_NotifyChangeKeyValue_string1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
404 static int winreg_dissect_element_NotifyChangeKeyValue_string2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
405 static int winreg_dissect_element_NotifyChangeKeyValue_unknown2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
406 static int winreg_dissect_element_OpenKey_parent_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
407 static int winreg_dissect_element_OpenKey_parent_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
408 static int winreg_dissect_element_OpenKey_keyname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
409 static int winreg_dissect_element_OpenKey_options(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
410 static int winreg_dissect_element_OpenKey_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
411 static int winreg_dissect_element_OpenKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
412 static int winreg_dissect_element_OpenKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
413 static int winreg_dissect_element_QueryInfoKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
414 static int winreg_dissect_element_QueryInfoKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
415 static int winreg_dissect_element_QueryInfoKey_classname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
416 static int winreg_dissect_element_QueryInfoKey_classname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
417 static int winreg_dissect_element_QueryInfoKey_num_subkeys(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
418 static int winreg_dissect_element_QueryInfoKey_num_subkeys_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
419 static int winreg_dissect_element_QueryInfoKey_max_subkeylen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
420 static int winreg_dissect_element_QueryInfoKey_max_subkeylen_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
421 static int winreg_dissect_element_QueryInfoKey_max_classlen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
422 static int winreg_dissect_element_QueryInfoKey_max_classlen_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
423 static int winreg_dissect_element_QueryInfoKey_num_values(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
424 static int winreg_dissect_element_QueryInfoKey_num_values_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
425 static int winreg_dissect_element_QueryInfoKey_max_valnamelen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
426 static int winreg_dissect_element_QueryInfoKey_max_valnamelen_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
427 static int winreg_dissect_element_QueryInfoKey_max_valbufsize(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
428 static int winreg_dissect_element_QueryInfoKey_max_valbufsize_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
429 static int winreg_dissect_element_QueryInfoKey_secdescsize(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
430 static int winreg_dissect_element_QueryInfoKey_secdescsize_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
431 static int winreg_dissect_element_QueryInfoKey_last_changed_time(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
432 static int winreg_dissect_element_QueryInfoKey_last_changed_time_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
433 static int winreg_dissect_element_QueryValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
434 static int winreg_dissect_element_QueryValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
435 static int winreg_dissect_element_QueryValue_value_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
436 static int winreg_dissect_element_QueryValue_value_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
437 static int winreg_dissect_element_QueryValue_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
438 static int winreg_dissect_element_QueryValue_type_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
439 static int winreg_dissect_element_QueryValue_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
440 static int winreg_dissect_element_QueryValue_data_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
441 static int winreg_dissect_element_QueryValue_data__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
442 static int winreg_dissect_element_QueryValue_data_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
443 static int winreg_dissect_element_QueryValue_data_size_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
444 static int winreg_dissect_element_QueryValue_data_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
445 static int winreg_dissect_element_QueryValue_data_length_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
446 static int winreg_dissect_element_ReplaceKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
447 static int winreg_dissect_element_ReplaceKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
448 static int winreg_dissect_element_ReplaceKey_subkey(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
449 static int winreg_dissect_element_ReplaceKey_subkey_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
450 static int winreg_dissect_element_ReplaceKey_new_file(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
451 static int winreg_dissect_element_ReplaceKey_new_file_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
452 static int winreg_dissect_element_ReplaceKey_old_file(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
453 static int winreg_dissect_element_ReplaceKey_old_file_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
454 static int winreg_dissect_element_RestoreKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
455 static int winreg_dissect_element_RestoreKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
456 static int winreg_dissect_element_RestoreKey_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
457 static int winreg_dissect_element_RestoreKey_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
458 static int winreg_dissect_element_RestoreKey_flags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
459 static int winreg_dissect_element_SaveKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
460 static int winreg_dissect_element_SaveKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
461 static int winreg_dissect_element_SaveKey_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
462 static int winreg_dissect_element_SaveKey_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
463 static int winreg_dissect_element_SaveKey_sec_attrib(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
464 static int winreg_dissect_element_SaveKey_sec_attrib_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
465 static int winreg_dissect_element_SetKeySecurity_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
466 static int winreg_dissect_element_SetKeySecurity_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
467 static int winreg_dissect_element_SetKeySecurity_sec_info(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
468 static int winreg_dissect_element_SetKeySecurity_sd(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
469 static int winreg_dissect_element_SetKeySecurity_sd_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
470 static int winreg_dissect_element_SetValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
471 static int winreg_dissect_element_SetValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
472 static int winreg_dissect_element_SetValue_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
473 static int winreg_dissect_element_SetValue_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
474 static int winreg_dissect_element_SetValue_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
475 static int winreg_dissect_element_SetValue_data_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
476 static int winreg_dissect_element_SetValue_data__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
477 static int winreg_dissect_element_SetValue_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
478 static int winreg_dissect_element_UnLoadKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
479 static int winreg_dissect_element_UnLoadKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
480 static int winreg_dissect_element_UnLoadKey_subkey(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
481 static int winreg_dissect_element_UnLoadKey_subkey_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
482 static int winreg_dissect_element_InitiateSystemShutdown_hostname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
483 static int winreg_dissect_element_InitiateSystemShutdown_hostname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
484 static int winreg_dissect_element_InitiateSystemShutdown_message(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
485 static int winreg_dissect_element_InitiateSystemShutdown_message_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
486 static int winreg_dissect_element_InitiateSystemShutdown_timeout(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
487 static int winreg_dissect_element_InitiateSystemShutdown_force_apps(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
488 static int winreg_dissect_element_InitiateSystemShutdown_do_reboot(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
489 static int winreg_dissect_element_AbortSystemShutdown_server(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
490 static int winreg_dissect_element_AbortSystemShutdown_server_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
491 static int winreg_dissect_element_GetVersion_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
492 static int winreg_dissect_element_GetVersion_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
493 static int winreg_dissect_element_GetVersion_version(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
494 static int winreg_dissect_element_GetVersion_version_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
495 static int winreg_dissect_element_OpenHKCC_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
496 static int winreg_dissect_element_OpenHKCC_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
497 static int winreg_dissect_element_OpenHKCC_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
498 static int winreg_dissect_element_OpenHKCC_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
499 static int winreg_dissect_element_OpenHKCC_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
500 static int winreg_dissect_element_OpenHKDD_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
501 static int winreg_dissect_element_OpenHKDD_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
502 static int winreg_dissect_element_OpenHKDD_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
503 static int winreg_dissect_element_OpenHKDD_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
504 static int winreg_dissect_element_OpenHKDD_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
505 static int winreg_dissect_element_QueryMultipleValues_key_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
506 static int winreg_dissect_element_QueryMultipleValues_key_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
507 static int winreg_dissect_element_QueryMultipleValues_values_in(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
508 static int winreg_dissect_element_QueryMultipleValues_values_in_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
509 static int winreg_dissect_element_QueryMultipleValues_values_in__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
510 static int winreg_dissect_element_QueryMultipleValues_values_out(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
511 static int winreg_dissect_element_QueryMultipleValues_values_out_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
512 static int winreg_dissect_element_QueryMultipleValues_values_out__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
513 static int winreg_dissect_element_QueryMultipleValues_num_values(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
514 static int winreg_dissect_element_QueryMultipleValues_buffer(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
515 static int winreg_dissect_element_QueryMultipleValues_buffer_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
516 static int winreg_dissect_element_QueryMultipleValues_buffer__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
517 static int winreg_dissect_element_QueryMultipleValues_buffer_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
518 static int winreg_dissect_element_QueryMultipleValues_buffer_size_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
519 static int winreg_dissect_element_InitiateSystemShutdownEx_hostname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
520 static int winreg_dissect_element_InitiateSystemShutdownEx_hostname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
521 static int winreg_dissect_element_InitiateSystemShutdownEx_message(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
522 static int winreg_dissect_element_InitiateSystemShutdownEx_message_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
523 static int winreg_dissect_element_InitiateSystemShutdownEx_timeout(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
524 static int winreg_dissect_element_InitiateSystemShutdownEx_force_apps(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
525 static int winreg_dissect_element_InitiateSystemShutdownEx_do_reboot(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
526 static int winreg_dissect_element_InitiateSystemShutdownEx_reason(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
527 static int winreg_dissect_element_SaveKeyEx_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
528 static int winreg_dissect_element_SaveKeyEx_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
529 static int winreg_dissect_element_SaveKeyEx_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
530 static int winreg_dissect_element_SaveKeyEx_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
531 static int winreg_dissect_element_SaveKeyEx_sec_attrib(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
532 static int winreg_dissect_element_SaveKeyEx_sec_attrib_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
533 static int winreg_dissect_element_SaveKeyEx_flags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
534 static int winreg_dissect_element_OpenHKPT_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
535 static int winreg_dissect_element_OpenHKPT_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
536 static int winreg_dissect_element_OpenHKPT_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
537 static int winreg_dissect_element_OpenHKPT_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
538 static int winreg_dissect_element_OpenHKPT_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
539 static int winreg_dissect_element_OpenHKPN_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
540 static int winreg_dissect_element_OpenHKPN_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
541 static int winreg_dissect_element_OpenHKPN_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
542 static int winreg_dissect_element_OpenHKPN_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
543 static int winreg_dissect_element_OpenHKPN_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
544 static int winreg_dissect_element_QueryMultipleValues2_key_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
545 static int winreg_dissect_element_QueryMultipleValues2_key_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
546 static int winreg_dissect_element_QueryMultipleValues2_values_in(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
547 static int winreg_dissect_element_QueryMultipleValues2_values_in_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
548 static int winreg_dissect_element_QueryMultipleValues2_values_in__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
549 static int winreg_dissect_element_QueryMultipleValues2_values_out(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
550 static int winreg_dissect_element_QueryMultipleValues2_values_out_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
551 static int winreg_dissect_element_QueryMultipleValues2_values_out__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
552 static int winreg_dissect_element_QueryMultipleValues2_num_values(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
553 static int winreg_dissect_element_QueryMultipleValues2_buffer(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
554 static int winreg_dissect_element_QueryMultipleValues2_buffer_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
555 static int winreg_dissect_element_QueryMultipleValues2_buffer__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
556 static int winreg_dissect_element_QueryMultipleValues2_offered(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
557 static int winreg_dissect_element_QueryMultipleValues2_offered_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
558 static int winreg_dissect_element_QueryMultipleValues2_needed(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
559 static int winreg_dissect_element_QueryMultipleValues2_needed_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
560 static int winreg_dissect_element_DeleteKeyEx_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
561 static int winreg_dissect_element_DeleteKeyEx_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
562 static int winreg_dissect_element_DeleteKeyEx_key(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
563 static int winreg_dissect_element_DeleteKeyEx_key_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
564 static int winreg_dissect_element_DeleteKeyEx_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
565 static int winreg_dissect_element_DeleteKeyEx_reserved(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_);
566 #include "packet-dcerpc-lsa.h"
567 static void
568 winreg_specific_rights(tvbuff_t *tvb, int offset, proto_tree *tree, uint32_t access)
569 {
570 static int* const access_flags[] = {
571 &hf_winreg_winreg_AccessMask_KEY_WOW64_32KEY,
572 &hf_winreg_winreg_AccessMask_KEY_WOW64_64KEY,
573 &hf_winreg_winreg_AccessMask_KEY_CREATE_LINK,
574 &hf_winreg_winreg_AccessMask_KEY_NOTIFY,
575 &hf_winreg_winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS,
576 &hf_winreg_winreg_AccessMask_KEY_CREATE_SUB_KEY,
577 &hf_winreg_winreg_AccessMask_KEY_SET_VALUE,
578 &hf_winreg_winreg_AccessMask_KEY_QUERY_VALUE,
579 NULL
580 };
581 proto_tree_add_bitmask_list_value(tree, tvb, offset, 4, access_flags, access);
582 }
583 static struct access_mask_info winreg_access_mask_info = {
584 "WINREG", /* Name of specific rights */
585 winreg_specific_rights, /* Dissection function */
586 NULL, /* Generic mapping table */
587 NULL /* Standard mapping table */
588 };
589 static int
590 winreg_dissect_element_KeySecurityData_data_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, uint8_t *drep)
591 {
592 uint32_t len;
593 if(di->conformant_run){
594 /*just a run to handle conformant arrays, nothing to dissect */
595 return offset;
596 }
597 /* this is a varying and conformant array */
598 offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, di, drep, hf_winreg_sd_max_size, NULL);
599 offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, di, drep, hf_winreg_sd_offset, NULL);
600 offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, di, drep, hf_winreg_sd_actual_size, &len);
601 dissect_nt_sec_desc(tvb, offset, pinfo, tree, drep, true, len,
602 &winreg_access_mask_info);
603 offset += len;
604 return offset;
605 }
606 int
607 winreg_dissect_bitmap_AccessMask(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di, uint8_t *drep, int hf_index _U_, uint32_t param _U_)
608 {
609 offset = dissect_nt_access_mask(
610 tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask,
611 &winreg_access_mask_info, NULL);
612 return offset;
613 }
614 /* winreg_String :
615 * typedef [public,noejs] struct {
616 * [value(strlen_m_term(name)*2)] uint16 name_len;
617 * [value(strlen_m_term(name)*2)] uint16 name_size;
618 * [string,charset(UTF16)] uint16 *name;
619 * } winreg_String;
620 */
621 static int
622 cnf_dissect_winreg_String(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *parent_tree, dcerpc_info* di, uint8_t *drep, uint32_t param, int hfindex)
623 {
624 proto_item *item = NULL;
625 proto_tree *tree = NULL;
626 int old_offset;
627 header_field_info *hf_info;
628 ALIGN_TO_4_BYTES;
629 old_offset = offset;
630 hf_info=proto_registrar_get_nth(hfindex);
631 if (parent_tree) {
632 tree = proto_tree_add_subtree_format(parent_tree, tvb, offset, 0, ett_winreg_winreg_String, &item, "%s: ", hf_info->name);
633 }
634
635 offset = winreg_dissect_element_String_name_len(tvb, offset, pinfo, tree, di, drep);
636 offset = winreg_dissect_element_String_name_size(tvb, offset, pinfo, tree, di, drep);
637 offset = dissect_ndr_pointer_cb(
638 tvb, offset, pinfo, tree, di, drep,
639 dissect_ndr_wchar_cvstring, NDR_POINTER_UNIQUE,
640 hf_info->name, hfindex, cb_wstr_postprocess,
641 GINT_TO_POINTER(param));
642 proto_item_set_len(item, offset-old_offset);
643 return offset;
644 }
645
646
647 /* IDL: bitmap { */
648 /* IDL: } */
649
650 int
651 winreg_dissect_bitmap_security_secinfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
652 {
653 uint32_t flags;
654 ALIGN_TO_4_BYTES;
655
656 proto_tree_add_item(parent_tree, hf_index, tvb, offset, 4, DREP_ENC_INTEGER(drep));
657
658 offset = dissect_ndr_uint32(tvb, offset, pinfo, parent_tree, di, drep, -1, &flags);
659
660 return offset;
661 }
662
663
664 /* IDL: bitmap { */
665 /* IDL: KEY_QUERY_VALUE = 0x00000001 , */
666 /* IDL: KEY_SET_VALUE = 0x00000002 , */
667 /* IDL: KEY_CREATE_SUB_KEY = 0x00000004 , */
668 /* IDL: KEY_ENUMERATE_SUB_KEYS = 0x00000008 , */
669 /* IDL: KEY_NOTIFY = 0x00000010 , */
670 /* IDL: KEY_CREATE_LINK = 0x00000020 , */
671 /* IDL: KEY_WOW64_64KEY = 0x00000100 , */
672 /* IDL: KEY_WOW64_32KEY = 0x00000200 , */
673 /* IDL: } */
674
675
676 /* IDL: struct { */
677 /* IDL: [value(strlen_m_term(name)*2)] uint16 name_len; */
678 /* IDL: [value(strlen_m_term(name)*2)] uint16 name_size; */
679 /* IDL: [charset(UTF16)] [unique(1)] uint16 *name; */
680 /* IDL: } */
681
682 static int
683 winreg_dissect_element_String_name_len(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
684 {
685 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_String_name_len, 0);
686
687 return offset;
688 }
689
690 static int
691 winreg_dissect_element_String_name_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
692 {
693 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_String_name_size, 0);
694
695 return offset;
696 }
697
698 static int
699 winreg_dissect_element_String_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
700 {
701 offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_String_name_, NDR_POINTER_UNIQUE, "Pointer to Name (uint16)",hf_winreg_winreg_String_name);
702
703 return offset;
704 }
705
706 static int
707 winreg_dissect_element_String_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
708 {
709 char *data = NULL;
710 struct ndr_generic_array nga = { .is_conformant = false, };
711
712 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
713
714 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
715 offset = dissect_ndr_generic_array_string(tvb, offset, pinfo, tree, di, drep, sizeof(uint16_t), hf_winreg_winreg_String_name, false, &nga, &data);
716 proto_item_append_text(tree, ": %s", data);
717
718 return offset;
719 }
720
721 int
722 winreg_dissect_struct_String(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
723 {
724 proto_item *item = NULL;
725 proto_tree *tree = NULL;
726 int old_offset;
727
728 ALIGN_TO_4_BYTES;
729
730 old_offset = offset;
731
732 if (parent_tree) {
733 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
734 tree = proto_item_add_subtree(item, ett_winreg_winreg_String);
735 }
736
737 offset = winreg_dissect_element_String_name_len(tvb, offset, pinfo, tree, di, drep);
738
739 offset = winreg_dissect_element_String_name_size(tvb, offset, pinfo, tree, di, drep);
740
741 offset = winreg_dissect_element_String_name(tvb, offset, pinfo, tree, di, drep);
742
743
744 proto_item_set_len(item, offset-old_offset);
745
746
747 if (di->call_data->flags & DCERPC_IS_NDR64) {
748 ALIGN_TO_4_BYTES;
749 }
750
751 return offset;
752 }
753
754
755 /* IDL: struct { */
756 /* IDL: [length_is(len)] [size_is(size)] [unique(1)] uint8 *data; */
757 /* IDL: uint32 size; */
758 /* IDL: uint32 len; */
759 /* IDL: } */
760
761 static int
762 winreg_dissect_element_KeySecurityData_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
763 {
764 offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_KeySecurityData_data_, NDR_POINTER_UNIQUE, "Pointer to Data (uint8)",hf_winreg_KeySecurityData_data);
765
766 return offset;
767 }
768
769 static int
770 winreg_dissect_element_KeySecurityData_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
771 {
772 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_KeySecurityData_size, 0);
773
774 return offset;
775 }
776
777 static int
778 winreg_dissect_element_KeySecurityData_len(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
779 {
780 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_KeySecurityData_len, 0);
781
782 return offset;
783 }
784
785 int
786 winreg_dissect_struct_KeySecurityData(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
787 {
788 proto_item *item = NULL;
789 proto_tree *tree = NULL;
790 int old_offset;
791
792 ALIGN_TO_5_BYTES;
793
794 old_offset = offset;
795
796 if (parent_tree) {
797 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
798 tree = proto_item_add_subtree(item, ett_winreg_KeySecurityData);
799 }
800
801 offset = winreg_dissect_element_KeySecurityData_data(tvb, offset, pinfo, tree, di, drep);
802
803 offset = winreg_dissect_element_KeySecurityData_size(tvb, offset, pinfo, tree, di, drep);
804
805 offset = winreg_dissect_element_KeySecurityData_len(tvb, offset, pinfo, tree, di, drep);
806
807
808 proto_item_set_len(item, offset-old_offset);
809
810
811 if (di->call_data->flags & DCERPC_IS_NDR64) {
812 ALIGN_TO_5_BYTES;
813 }
814
815 return offset;
816 }
817
818
819 /* IDL: struct { */
820 /* IDL: uint32 length; */
821 /* IDL: KeySecurityData sd; */
822 /* IDL: uint8 inherit; */
823 /* IDL: } */
824
825 static int
826 winreg_dissect_element_SecBuf_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
827 {
828 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SecBuf_length, 0);
829
830 return offset;
831 }
832
833 static int
834 winreg_dissect_element_SecBuf_sd(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
835 {
836 offset = winreg_dissect_struct_KeySecurityData(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_SecBuf_sd,0);
837
838 return offset;
839 }
840
841 static int
842 winreg_dissect_element_SecBuf_inherit(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
843 {
844 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SecBuf_inherit, 0);
845
846 return offset;
847 }
848
849 int
850 winreg_dissect_struct_SecBuf(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
851 {
852 proto_item *item = NULL;
853 proto_tree *tree = NULL;
854 int old_offset;
855
856 ALIGN_TO_5_BYTES;
857
858 old_offset = offset;
859
860 if (parent_tree) {
861 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
862 tree = proto_item_add_subtree(item, ett_winreg_winreg_SecBuf);
863 }
864
865 offset = winreg_dissect_element_SecBuf_length(tvb, offset, pinfo, tree, di, drep);
866
867 offset = winreg_dissect_element_SecBuf_sd(tvb, offset, pinfo, tree, di, drep);
868
869 offset = winreg_dissect_element_SecBuf_inherit(tvb, offset, pinfo, tree, di, drep);
870
871
872 proto_item_set_len(item, offset-old_offset);
873
874
875 if (di->call_data->flags & DCERPC_IS_NDR64) {
876 ALIGN_TO_5_BYTES;
877 }
878
879 return offset;
880 }
881
882
883 /* IDL: bitmap { */
884 /* IDL: REG_OPTION_VOLATILE = 0x00000001 , */
885 /* IDL: REG_OPTION_CREATE_LINK = 0x00000002 , */
886 /* IDL: REG_OPTION_BACKUP_RESTORE = 0x00000004 , */
887 /* IDL: REG_OPTION_OPEN_LINK = 0x00000008 , */
888 /* IDL: } */
889
890 int
891 winreg_dissect_bitmap_KeyOptions(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
892 {
893 proto_item *item;
894 static int * const winreg_winreg_KeyOptions_fields[] = {
895 &hf_winreg_winreg_KeyOptions_REG_OPTION_VOLATILE,
896 &hf_winreg_winreg_KeyOptions_REG_OPTION_CREATE_LINK,
897 &hf_winreg_winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE,
898 &hf_winreg_winreg_KeyOptions_REG_OPTION_OPEN_LINK,
899 NULL
900 };
901 uint32_t flags;
902 ALIGN_TO_4_BYTES;
903
904 item = proto_tree_add_bitmask_with_flags(parent_tree, tvb, offset, hf_index,
905 ett_winreg_winreg_KeyOptions, winreg_winreg_KeyOptions_fields, DREP_ENC_INTEGER(drep), BMT_NO_FALSE);
906
907 offset = dissect_ndr_uint32(tvb, offset, pinfo, parent_tree, di, drep, -1, &flags);
908
909 if (!flags)
910 proto_item_append_text(item, ": (No values set)");
911
912 if (flags & (~0x0000000f)) {
913 flags &= (~0x0000000f);
914 proto_item_append_text(item, "Unknown bitmap value 0x%x", flags);
915 }
916
917 return offset;
918 }
919
920
921 /* IDL: enum { */
922 /* IDL: REG_ACTION_NONE=0, */
923 /* IDL: REG_CREATED_NEW_KEY=1, */
924 /* IDL: REG_OPENED_EXISTING_KEY=2, */
925 /* IDL: } */
926
927 int
928 winreg_dissect_enum_CreateAction(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t *param _U_)
929 {
930 uint32_t parameter=0;
931 if (param) {
932 parameter = *param;
933 }
934 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_index, &parameter);
935 if (param) {
936 *param = parameter;
937 }
938 return offset;
939 }
940
941
942 /* IDL: struct { */
943 /* IDL: [value(strlen_m_term_null(name)*2)] uint16 length; */
944 /* IDL: uint16 size; */
945 /* IDL: [charset(UTF16)] [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *name; */
946 /* IDL: } */
947
948 static int
949 winreg_dissect_element_StringBuf_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
950 {
951 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_StringBuf_length, 0);
952
953 return offset;
954 }
955
956 static int
957 winreg_dissect_element_StringBuf_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
958 {
959 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_StringBuf_size, 0);
960
961 return offset;
962 }
963
964 static int
965 winreg_dissect_element_StringBuf_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
966 {
967 offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_StringBuf_name_, NDR_POINTER_UNIQUE, "Pointer to Name (uint16)",hf_winreg_winreg_StringBuf_name);
968
969 return offset;
970 }
971
972 static int
973 winreg_dissect_element_StringBuf_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
974 {
975 struct ndr_generic_array nga = { .is_conformant = false, };
976
977 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
978
979 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
980
981 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_StringBuf_name__);
982
983 return offset;
984 }
985
986 static int
987 winreg_dissect_element_StringBuf_name__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
988 {
989 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_StringBuf_name, 0);
990
991 return offset;
992 }
993
994 int
995 winreg_dissect_struct_StringBuf(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
996 {
997 proto_item *item = NULL;
998 proto_tree *tree = NULL;
999 int old_offset;
1000
1001 ALIGN_TO_5_BYTES;
1002
1003 old_offset = offset;
1004
1005 if (parent_tree) {
1006 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
1007 tree = proto_item_add_subtree(item, ett_winreg_winreg_StringBuf);
1008 }
1009
1010 offset = winreg_dissect_element_StringBuf_length(tvb, offset, pinfo, tree, di, drep);
1011
1012 offset = winreg_dissect_element_StringBuf_size(tvb, offset, pinfo, tree, di, drep);
1013
1014 offset = winreg_dissect_element_StringBuf_name(tvb, offset, pinfo, tree, di, drep);
1015
1016
1017 proto_item_set_len(item, offset-old_offset);
1018
1019
1020 if (di->call_data->flags & DCERPC_IS_NDR64) {
1021 ALIGN_TO_5_BYTES;
1022 }
1023
1024 return offset;
1025 }
1026
1027
1028 /* IDL: struct { */
1029 /* IDL: [value(strlen_m_term(name)*2)] uint16 length; */
1030 /* IDL: uint16 size; */
1031 /* IDL: [charset(UTF16)] [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *name; */
1032 /* IDL: } */
1033
1034 static int
1035 winreg_dissect_element_ValNameBuf_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1036 {
1037 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_ValNameBuf_length, 0);
1038
1039 return offset;
1040 }
1041
1042 static int
1043 winreg_dissect_element_ValNameBuf_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1044 {
1045 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_ValNameBuf_size, 0);
1046
1047 return offset;
1048 }
1049
1050 static int
1051 winreg_dissect_element_ValNameBuf_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1052 {
1053 offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_ValNameBuf_name_, NDR_POINTER_UNIQUE, "Pointer to Name (uint16)",hf_winreg_winreg_ValNameBuf_name);
1054
1055 return offset;
1056 }
1057
1058 static int
1059 winreg_dissect_element_ValNameBuf_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1060 {
1061 struct ndr_generic_array nga = { .is_conformant = false, };
1062
1063 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
1064
1065 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
1066
1067 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_ValNameBuf_name__);
1068
1069 return offset;
1070 }
1071
1072 static int
1073 winreg_dissect_element_ValNameBuf_name__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1074 {
1075 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_ValNameBuf_name, 0);
1076
1077 return offset;
1078 }
1079
1080 int
1081 winreg_dissect_struct_ValNameBuf(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
1082 {
1083 proto_item *item = NULL;
1084 proto_tree *tree = NULL;
1085 int old_offset;
1086
1087 ALIGN_TO_5_BYTES;
1088
1089 old_offset = offset;
1090
1091 if (parent_tree) {
1092 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
1093 tree = proto_item_add_subtree(item, ett_winreg_winreg_ValNameBuf);
1094 }
1095
1096 offset = winreg_dissect_element_ValNameBuf_length(tvb, offset, pinfo, tree, di, drep);
1097
1098 offset = winreg_dissect_element_ValNameBuf_size(tvb, offset, pinfo, tree, di, drep);
1099
1100 offset = winreg_dissect_element_ValNameBuf_name(tvb, offset, pinfo, tree, di, drep);
1101
1102
1103 proto_item_set_len(item, offset-old_offset);
1104
1105
1106 if (di->call_data->flags & DCERPC_IS_NDR64) {
1107 ALIGN_TO_5_BYTES;
1108 }
1109
1110 return offset;
1111 }
1112
1113
1114 /* IDL: bitmap { */
1115 /* IDL: REG_NOTIFY_CHANGE_NAME = 0x00000001 , */
1116 /* IDL: REG_NOTIFY_CHANGE_ATTRIBUTES = 0x00000002 , */
1117 /* IDL: REG_NOTIFY_CHANGE_LAST_SET = 0x00000004 , */
1118 /* IDL: REG_NOTIFY_CHANGE_SECURITY = 0x00000008 , */
1119 /* IDL: } */
1120
1121 int
1122 winreg_dissect_bitmap_NotifyChangeType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
1123 {
1124 proto_item *item;
1125 static int * const winreg_winreg_NotifyChangeType_fields[] = {
1126 &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME,
1127 &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES,
1128 &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET,
1129 &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY,
1130 NULL
1131 };
1132 uint32_t flags;
1133 ALIGN_TO_4_BYTES;
1134
1135 item = proto_tree_add_bitmask_with_flags(parent_tree, tvb, offset, hf_index,
1136 ett_winreg_winreg_NotifyChangeType, winreg_winreg_NotifyChangeType_fields, DREP_ENC_INTEGER(drep), BMT_NO_FALSE);
1137
1138 offset = dissect_ndr_uint32(tvb, offset, pinfo, parent_tree, di, drep, -1, &flags);
1139
1140 if (!flags)
1141 proto_item_append_text(item, ": (No values set)");
1142
1143 if (flags & (~0x0000000f)) {
1144 flags &= (~0x0000000f);
1145 proto_item_append_text(item, "Unknown bitmap value 0x%x", flags);
1146 }
1147
1148 return offset;
1149 }
1150
1151
1152 /* IDL: bitmap { */
1153 /* IDL: REG_WHOLE_HIVE_VOLATILE = 0x00000001 , */
1154 /* IDL: REG_REFRESH_HIVE = 0x00000002 , */
1155 /* IDL: REG_NO_LAZY_FLUSH = 0x00000004 , */
1156 /* IDL: REG_FORCE_RESTORE = 0x00000008 , */
1157 /* IDL: } */
1158
1159 int
1160 winreg_dissect_bitmap_RestoreKeyFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
1161 {
1162 proto_item *item;
1163 static int * const winreg_winreg_RestoreKeyFlags_fields[] = {
1164 &hf_winreg_winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE,
1165 &hf_winreg_winreg_RestoreKeyFlags_REG_REFRESH_HIVE,
1166 &hf_winreg_winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH,
1167 &hf_winreg_winreg_RestoreKeyFlags_REG_FORCE_RESTORE,
1168 NULL
1169 };
1170 uint32_t flags;
1171 ALIGN_TO_4_BYTES;
1172
1173 item = proto_tree_add_bitmask_with_flags(parent_tree, tvb, offset, hf_index,
1174 ett_winreg_winreg_RestoreKeyFlags, winreg_winreg_RestoreKeyFlags_fields, DREP_ENC_INTEGER(drep), BMT_NO_FALSE);
1175
1176 offset = dissect_ndr_uint32(tvb, offset, pinfo, parent_tree, di, drep, -1, &flags);
1177
1178 if (!flags)
1179 proto_item_append_text(item, ": (No values set)");
1180
1181 if (flags & (~0x0000000f)) {
1182 flags &= (~0x0000000f);
1183 proto_item_append_text(item, "Unknown bitmap value 0x%x", flags);
1184 }
1185
1186 return offset;
1187 }
1188
1189
1190 /* IDL: struct { */
1191 /* IDL: uint32 data_size; */
1192 /* IDL: KeySecurityData sec_data; */
1193 /* IDL: uint8 inherit; */
1194 /* IDL: } */
1195
1196 static int
1197 winreg_dissect_element_KeySecurityAttribute_data_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1198 {
1199 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_KeySecurityAttribute_data_size, 0);
1200
1201 return offset;
1202 }
1203
1204 static int
1205 winreg_dissect_element_KeySecurityAttribute_sec_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1206 {
1207 offset = winreg_dissect_struct_KeySecurityData(tvb,offset,pinfo,tree,di,drep,hf_winreg_KeySecurityAttribute_sec_data,0);
1208
1209 return offset;
1210 }
1211
1212 static int
1213 winreg_dissect_element_KeySecurityAttribute_inherit(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1214 {
1215 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_KeySecurityAttribute_inherit, 0);
1216
1217 return offset;
1218 }
1219
1220 int
1221 winreg_dissect_struct_KeySecurityAttribute(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
1222 {
1223 proto_item *item = NULL;
1224 proto_tree *tree = NULL;
1225 int old_offset;
1226
1227 ALIGN_TO_5_BYTES;
1228
1229 old_offset = offset;
1230
1231 if (parent_tree) {
1232 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
1233 tree = proto_item_add_subtree(item, ett_winreg_KeySecurityAttribute);
1234 }
1235
1236 offset = winreg_dissect_element_KeySecurityAttribute_data_size(tvb, offset, pinfo, tree, di, drep);
1237
1238 offset = winreg_dissect_element_KeySecurityAttribute_sec_data(tvb, offset, pinfo, tree, di, drep);
1239
1240 offset = winreg_dissect_element_KeySecurityAttribute_inherit(tvb, offset, pinfo, tree, di, drep);
1241
1242
1243 proto_item_set_len(item, offset-old_offset);
1244
1245
1246 if (di->call_data->flags & DCERPC_IS_NDR64) {
1247 ALIGN_TO_5_BYTES;
1248 }
1249
1250 return offset;
1251 }
1252
1253
1254 /* IDL: struct { */
1255 /* IDL: [unique(1)] winreg_ValNameBuf *ve_valuename; */
1256 /* IDL: uint32 ve_valuelen; */
1257 /* IDL: uint32 ve_valueptr; */
1258 /* IDL: winreg_Type ve_type; */
1259 /* IDL: } */
1260
1261 static int
1262 winreg_dissect_element_QueryMultipleValue_ve_valuename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1263 {
1264 offset = dissect_ndr_embedded_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValue_ve_valuename_, NDR_POINTER_UNIQUE, "Pointer to Ve Valuename (winreg_ValNameBuf)",hf_winreg_QueryMultipleValue_ve_valuename);
1265
1266 return offset;
1267 }
1268
1269 static int
1270 winreg_dissect_element_QueryMultipleValue_ve_valuename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1271 {
1272 offset = winreg_dissect_struct_ValNameBuf(tvb,offset,pinfo,tree,di,drep,hf_winreg_QueryMultipleValue_ve_valuename,0);
1273
1274 return offset;
1275 }
1276
1277 static int
1278 winreg_dissect_element_QueryMultipleValue_ve_valuelen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1279 {
1280 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_QueryMultipleValue_ve_valuelen, 0);
1281
1282 return offset;
1283 }
1284
1285 static int
1286 winreg_dissect_element_QueryMultipleValue_ve_valueptr(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1287 {
1288 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_QueryMultipleValue_ve_valueptr, 0);
1289
1290 return offset;
1291 }
1292
1293 static int
1294 winreg_dissect_element_QueryMultipleValue_ve_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1295 {
1296 offset=misc_dissect_enum_winreg_Type(tvb, offset, pinfo, tree, di, drep, hf_winreg_QueryMultipleValue_ve_type, 0);
1297
1298 return offset;
1299 }
1300
1301 int
1302 winreg_dissect_struct_QueryMultipleValue(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
1303 {
1304 proto_item *item = NULL;
1305 proto_tree *tree = NULL;
1306 int old_offset;
1307
1308 ALIGN_TO_5_BYTES;
1309
1310 old_offset = offset;
1311
1312 if (parent_tree) {
1313 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
1314 tree = proto_item_add_subtree(item, ett_winreg_QueryMultipleValue);
1315 }
1316
1317 offset = winreg_dissect_element_QueryMultipleValue_ve_valuename(tvb, offset, pinfo, tree, di, drep);
1318
1319 offset = winreg_dissect_element_QueryMultipleValue_ve_valuelen(tvb, offset, pinfo, tree, di, drep);
1320
1321 offset = winreg_dissect_element_QueryMultipleValue_ve_valueptr(tvb, offset, pinfo, tree, di, drep);
1322
1323 offset = winreg_dissect_element_QueryMultipleValue_ve_type(tvb, offset, pinfo, tree, di, drep);
1324
1325
1326 proto_item_set_len(item, offset-old_offset);
1327
1328
1329 if (di->call_data->flags & DCERPC_IS_NDR64) {
1330 ALIGN_TO_5_BYTES;
1331 }
1332
1333 return offset;
1334 }
1335
1336 static int
1337 winreg_dissect_element_OpenHKCR_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1338 {
1339 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKCR_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
1340
1341 return offset;
1342 }
1343
1344 static int
1345 winreg_dissect_element_OpenHKCR_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1346 {
1347 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
1348
1349 return offset;
1350 }
1351
1352 static int
1353 winreg_dissect_element_OpenHKCR_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1354 {
1355 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
1356
1357 return offset;
1358 }
1359
1360 static int
1361 winreg_dissect_element_OpenHKCR_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1362 {
1363 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKCR_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1364
1365 return offset;
1366 }
1367
1368 static int
1369 winreg_dissect_element_OpenHKCR_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1370 {
1371 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
1372
1373 return offset;
1374 }
1375
1376 /* IDL: WERROR winreg_OpenHKCR( */
1377 /* IDL: [in] [unique(1)] uint16 *system_name, */
1378 /* IDL: [in] winreg_AccessMask access_mask, */
1379 /* IDL: [out] [ref] policy_handle *handle */
1380 /* IDL: ); */
1381
1382 static int
1383 winreg_dissect_OpenHKCR_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1384 {
1385 uint32_t status;
1386
1387 di->dcerpc_procedure_name="OpenHKCR";
1388 offset = winreg_dissect_element_OpenHKCR_handle(tvb, offset, pinfo, tree, di, drep);
1389 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1390
1391 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1392
1393 if (status != 0)
1394 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1395
1396 return offset;
1397 }
1398
1399 static int
1400 winreg_dissect_OpenHKCR_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1401 {
1402 di->dcerpc_procedure_name="OpenHKCR";
1403 offset = winreg_dissect_element_OpenHKCR_system_name(tvb, offset, pinfo, tree, di, drep);
1404 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1405 offset = winreg_dissect_element_OpenHKCR_access_mask(tvb, offset, pinfo, tree, di, drep);
1406 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1407 return offset;
1408 }
1409
1410 static int
1411 winreg_dissect_element_OpenHKCU_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1412 {
1413 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKCU_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
1414
1415 return offset;
1416 }
1417
1418 static int
1419 winreg_dissect_element_OpenHKCU_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1420 {
1421 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
1422
1423 return offset;
1424 }
1425
1426 static int
1427 winreg_dissect_element_OpenHKCU_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1428 {
1429 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_OpenHKCU_access_mask, 0);
1430
1431 return offset;
1432 }
1433
1434 static int
1435 winreg_dissect_element_OpenHKCU_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1436 {
1437 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKCU_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1438
1439 return offset;
1440 }
1441
1442 static int
1443 winreg_dissect_element_OpenHKCU_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1444 {
1445 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
1446
1447 return offset;
1448 }
1449
1450 /* IDL: WERROR winreg_OpenHKCU( */
1451 /* IDL: [in] [unique(1)] uint16 *system_name, */
1452 /* IDL: [in] winreg_AccessMask access_mask, */
1453 /* IDL: [out] [ref] policy_handle *handle */
1454 /* IDL: ); */
1455
1456 static int
1457 winreg_dissect_OpenHKCU_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1458 {
1459 uint32_t status;
1460
1461 di->dcerpc_procedure_name="OpenHKCU";
1462 offset = winreg_dissect_element_OpenHKCU_handle(tvb, offset, pinfo, tree, di, drep);
1463 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1464
1465 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1466
1467 if (status != 0)
1468 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1469
1470 return offset;
1471 }
1472
1473 static int
1474 winreg_dissect_OpenHKCU_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1475 {
1476 di->dcerpc_procedure_name="OpenHKCU";
1477 offset = winreg_dissect_element_OpenHKCU_system_name(tvb, offset, pinfo, tree, di, drep);
1478 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1479 offset = winreg_dissect_element_OpenHKCU_access_mask(tvb, offset, pinfo, tree, di, drep);
1480 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1481 return offset;
1482 }
1483
1484 static int
1485 winreg_dissect_element_OpenHKLM_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1486 {
1487 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKLM_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
1488
1489 return offset;
1490 }
1491
1492 static int
1493 winreg_dissect_element_OpenHKLM_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1494 {
1495 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
1496
1497 return offset;
1498 }
1499
1500 static int
1501 winreg_dissect_element_OpenHKLM_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1502 {
1503 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
1504
1505 return offset;
1506 }
1507
1508 static int
1509 winreg_dissect_element_OpenHKLM_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1510 {
1511 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKLM_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1512
1513 return offset;
1514 }
1515
1516 static int
1517 winreg_dissect_element_OpenHKLM_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1518 {
1519 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
1520
1521 return offset;
1522 }
1523
1524 /* IDL: WERROR winreg_OpenHKLM( */
1525 /* IDL: [in] [unique(1)] uint16 *system_name, */
1526 /* IDL: [in] winreg_AccessMask access_mask, */
1527 /* IDL: [out] [ref] policy_handle *handle */
1528 /* IDL: ); */
1529
1530 static int
1531 winreg_dissect_OpenHKLM_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1532 {
1533 uint32_t status;
1534
1535 di->dcerpc_procedure_name="OpenHKLM";
1536 offset = winreg_dissect_element_OpenHKLM_handle(tvb, offset, pinfo, tree, di, drep);
1537 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1538
1539 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1540
1541 if (status != 0)
1542 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1543
1544 return offset;
1545 }
1546
1547 static int
1548 winreg_dissect_OpenHKLM_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1549 {
1550 di->dcerpc_procedure_name="OpenHKLM";
1551 offset = winreg_dissect_element_OpenHKLM_system_name(tvb, offset, pinfo, tree, di, drep);
1552 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1553 offset = winreg_dissect_element_OpenHKLM_access_mask(tvb, offset, pinfo, tree, di, drep);
1554 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1555 return offset;
1556 }
1557
1558 static int
1559 winreg_dissect_element_OpenHKPD_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1560 {
1561 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKPD_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
1562
1563 return offset;
1564 }
1565
1566 static int
1567 winreg_dissect_element_OpenHKPD_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1568 {
1569 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
1570
1571 return offset;
1572 }
1573
1574 static int
1575 winreg_dissect_element_OpenHKPD_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1576 {
1577 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_OpenHKPD_access_mask, 0);
1578
1579 return offset;
1580 }
1581
1582 static int
1583 winreg_dissect_element_OpenHKPD_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1584 {
1585 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKPD_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1586
1587 return offset;
1588 }
1589
1590 static int
1591 winreg_dissect_element_OpenHKPD_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1592 {
1593 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
1594
1595 return offset;
1596 }
1597
1598 /* IDL: WERROR winreg_OpenHKPD( */
1599 /* IDL: [in] [unique(1)] uint16 *system_name, */
1600 /* IDL: [in] winreg_AccessMask access_mask, */
1601 /* IDL: [out] [ref] policy_handle *handle */
1602 /* IDL: ); */
1603
1604 static int
1605 winreg_dissect_OpenHKPD_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1606 {
1607 uint32_t status;
1608
1609 di->dcerpc_procedure_name="OpenHKPD";
1610 offset = winreg_dissect_element_OpenHKPD_handle(tvb, offset, pinfo, tree, di, drep);
1611 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1612
1613 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1614
1615 if (status != 0)
1616 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1617
1618 return offset;
1619 }
1620
1621 static int
1622 winreg_dissect_OpenHKPD_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1623 {
1624 di->dcerpc_procedure_name="OpenHKPD";
1625 offset = winreg_dissect_element_OpenHKPD_system_name(tvb, offset, pinfo, tree, di, drep);
1626 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1627 offset = winreg_dissect_element_OpenHKPD_access_mask(tvb, offset, pinfo, tree, di, drep);
1628 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1629 return offset;
1630 }
1631
1632 static int
1633 winreg_dissect_element_OpenHKU_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1634 {
1635 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKU_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
1636
1637 return offset;
1638 }
1639
1640 static int
1641 winreg_dissect_element_OpenHKU_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1642 {
1643 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
1644
1645 return offset;
1646 }
1647
1648 static int
1649 winreg_dissect_element_OpenHKU_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1650 {
1651 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
1652
1653 return offset;
1654 }
1655
1656 static int
1657 winreg_dissect_element_OpenHKU_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1658 {
1659 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKU_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1660
1661 return offset;
1662 }
1663
1664 static int
1665 winreg_dissect_element_OpenHKU_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1666 {
1667 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
1668
1669 return offset;
1670 }
1671
1672 /* IDL: WERROR winreg_OpenHKU( */
1673 /* IDL: [in] [unique(1)] uint16 *system_name, */
1674 /* IDL: [in] winreg_AccessMask access_mask, */
1675 /* IDL: [out] [ref] policy_handle *handle */
1676 /* IDL: ); */
1677
1678 static int
1679 winreg_dissect_OpenHKU_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1680 {
1681 uint32_t status;
1682
1683 di->dcerpc_procedure_name="OpenHKU";
1684 offset = winreg_dissect_element_OpenHKU_handle(tvb, offset, pinfo, tree, di, drep);
1685 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1686
1687 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1688
1689 if (status != 0)
1690 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1691
1692 return offset;
1693 }
1694
1695 static int
1696 winreg_dissect_OpenHKU_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1697 {
1698 di->dcerpc_procedure_name="OpenHKU";
1699 offset = winreg_dissect_element_OpenHKU_system_name(tvb, offset, pinfo, tree, di, drep);
1700 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1701 offset = winreg_dissect_element_OpenHKU_access_mask(tvb, offset, pinfo, tree, di, drep);
1702 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1703 return offset;
1704 }
1705
1706 static int
1707 winreg_dissect_element_CloseKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1708 {
1709 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_CloseKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1710
1711 return offset;
1712 }
1713
1714 static int
1715 winreg_dissect_element_CloseKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1716 {
1717 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_CLOSE);
1718
1719 return offset;
1720 }
1721
1722 /* IDL: WERROR winreg_CloseKey( */
1723 /* IDL: [in] [out] [ref] policy_handle *handle */
1724 /* IDL: ); */
1725
1726 static int
1727 winreg_dissect_CloseKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1728 {
1729 uint32_t status;
1730
1731 di->dcerpc_procedure_name="CloseKey";
1732 offset = winreg_dissect_element_CloseKey_handle(tvb, offset, pinfo, tree, di, drep);
1733 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1734
1735 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1736
1737 if (status != 0)
1738 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1739
1740 return offset;
1741 }
1742
1743 static int
1744 winreg_dissect_CloseKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1745 {
1746 di->dcerpc_procedure_name="CloseKey";
1747 offset = winreg_dissect_element_CloseKey_handle(tvb, offset, pinfo, tree, di, drep);
1748 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1749 return offset;
1750 }
1751
1752 static int
1753 winreg_dissect_element_CreateKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1754 {
1755 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_CreateKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1756
1757 return offset;
1758 }
1759
1760 static int
1761 winreg_dissect_element_CreateKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1762 {
1763 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
1764
1765 return offset;
1766 }
1767
1768 static int
1769 winreg_dissect_element_CreateKey_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1770 {
1771 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 2|PIDL_SET_COL_INFO, hf_winreg_winreg_CreateKey_name);
1772
1773 return offset;
1774 }
1775
1776 static int
1777 winreg_dissect_element_CreateKey_keyclass(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1778 {
1779 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_CreateKey_keyclass);
1780
1781 return offset;
1782 }
1783
1784 static int
1785 winreg_dissect_element_CreateKey_options(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1786 {
1787 offset = winreg_dissect_bitmap_KeyOptions(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_CreateKey_options, 0);
1788
1789 return offset;
1790 }
1791
1792 static int
1793 winreg_dissect_element_CreateKey_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1794 {
1795 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
1796
1797 return offset;
1798 }
1799
1800 static int
1801 winreg_dissect_element_CreateKey_secdesc(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1802 {
1803 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_CreateKey_secdesc_, NDR_POINTER_UNIQUE, "Pointer to Secdesc (winreg_SecBuf)",hf_winreg_winreg_CreateKey_secdesc);
1804
1805 return offset;
1806 }
1807
1808 static int
1809 winreg_dissect_element_CreateKey_secdesc_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1810 {
1811 offset = winreg_dissect_struct_SecBuf(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_CreateKey_secdesc,0);
1812
1813 return offset;
1814 }
1815
1816 static int
1817 winreg_dissect_element_CreateKey_new_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1818 {
1819 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_CreateKey_new_handle_, NDR_POINTER_REF, "Pointer to New Handle (policy_handle)",hf_winreg_winreg_CreateKey_new_handle);
1820
1821 return offset;
1822 }
1823
1824 static int
1825 winreg_dissect_element_CreateKey_new_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1826 {
1827 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_CreateKey_new_handle, PIDL_POLHND_OPEN);
1828
1829 return offset;
1830 }
1831
1832 static int
1833 winreg_dissect_element_CreateKey_action_taken(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1834 {
1835 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_CreateKey_action_taken_, NDR_POINTER_UNIQUE, "Pointer to Action Taken (winreg_CreateAction)",hf_winreg_winreg_CreateKey_action_taken);
1836
1837 return offset;
1838 }
1839
1840 static int
1841 winreg_dissect_element_CreateKey_action_taken_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1842 {
1843 offset = winreg_dissect_enum_CreateAction(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_CreateKey_action_taken, 0);
1844
1845 return offset;
1846 }
1847
1848 /* IDL: WERROR winreg_CreateKey( */
1849 /* IDL: [in] [ref] policy_handle *handle, */
1850 /* IDL: [in] winreg_String name, */
1851 /* IDL: [in] winreg_String keyclass, */
1852 /* IDL: [in] winreg_KeyOptions options, */
1853 /* IDL: [in] winreg_AccessMask access_mask, */
1854 /* IDL: [in] [unique(1)] winreg_SecBuf *secdesc, */
1855 /* IDL: [out] [ref] policy_handle *new_handle, */
1856 /* IDL: [in] [out] [unique(1)] winreg_CreateAction *action_taken */
1857 /* IDL: ); */
1858
1859 static int
1860 winreg_dissect_CreateKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1861 {
1862 uint32_t status;
1863
1864 di->dcerpc_procedure_name="CreateKey";
1865 offset = winreg_dissect_element_CreateKey_new_handle(tvb, offset, pinfo, tree, di, drep);
1866 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1867
1868 offset = winreg_dissect_element_CreateKey_action_taken(tvb, offset, pinfo, tree, di, drep);
1869 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1870
1871 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1872
1873 if (status != 0)
1874 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1875
1876 return offset;
1877 }
1878
1879 static int
1880 winreg_dissect_CreateKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1881 {
1882 di->dcerpc_procedure_name="CreateKey";
1883 offset = winreg_dissect_element_CreateKey_handle(tvb, offset, pinfo, tree, di, drep);
1884 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1885 offset = winreg_dissect_element_CreateKey_name(tvb, offset, pinfo, tree, di, drep);
1886 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1887 offset = winreg_dissect_element_CreateKey_keyclass(tvb, offset, pinfo, tree, di, drep);
1888 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1889 offset = winreg_dissect_element_CreateKey_options(tvb, offset, pinfo, tree, di, drep);
1890 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1891 offset = winreg_dissect_element_CreateKey_access_mask(tvb, offset, pinfo, tree, di, drep);
1892 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1893 offset = winreg_dissect_element_CreateKey_secdesc(tvb, offset, pinfo, tree, di, drep);
1894 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1895 offset = winreg_dissect_element_CreateKey_action_taken(tvb, offset, pinfo, tree, di, drep);
1896 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1897 return offset;
1898 }
1899
1900 static int
1901 winreg_dissect_element_DeleteKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1902 {
1903 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_DeleteKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1904
1905 return offset;
1906 }
1907
1908 static int
1909 winreg_dissect_element_DeleteKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1910 {
1911 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
1912
1913 return offset;
1914 }
1915
1916 static int
1917 winreg_dissect_element_DeleteKey_key(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1918 {
1919 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 2|PIDL_SET_COL_INFO, hf_winreg_winreg_DeleteKey_key);
1920
1921 return offset;
1922 }
1923
1924 /* IDL: WERROR winreg_DeleteKey( */
1925 /* IDL: [in] [ref] policy_handle *handle, */
1926 /* IDL: [in] winreg_String key */
1927 /* IDL: ); */
1928
1929 static int
1930 winreg_dissect_DeleteKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1931 {
1932 uint32_t status;
1933
1934 di->dcerpc_procedure_name="DeleteKey";
1935 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1936
1937 if (status != 0)
1938 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1939
1940 return offset;
1941 }
1942
1943 static int
1944 winreg_dissect_DeleteKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1945 {
1946 di->dcerpc_procedure_name="DeleteKey";
1947 offset = winreg_dissect_element_DeleteKey_handle(tvb, offset, pinfo, tree, di, drep);
1948 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1949 offset = winreg_dissect_element_DeleteKey_key(tvb, offset, pinfo, tree, di, drep);
1950 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
1951 return offset;
1952 }
1953
1954 static int
1955 winreg_dissect_element_DeleteValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1956 {
1957 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_DeleteValue_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
1958
1959 return offset;
1960 }
1961
1962 static int
1963 winreg_dissect_element_DeleteValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1964 {
1965 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
1966
1967 return offset;
1968 }
1969
1970 static int
1971 winreg_dissect_element_DeleteValue_value(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1972 {
1973 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_DeleteValue_value);
1974
1975 return offset;
1976 }
1977
1978 /* IDL: WERROR winreg_DeleteValue( */
1979 /* IDL: [in] [ref] policy_handle *handle, */
1980 /* IDL: [in] winreg_String value */
1981 /* IDL: ); */
1982
1983 static int
1984 winreg_dissect_DeleteValue_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1985 {
1986 uint32_t status;
1987
1988 di->dcerpc_procedure_name="DeleteValue";
1989 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
1990
1991 if (status != 0)
1992 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
1993
1994 return offset;
1995 }
1996
1997 static int
1998 winreg_dissect_DeleteValue_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
1999 {
2000 di->dcerpc_procedure_name="DeleteValue";
2001 offset = winreg_dissect_element_DeleteValue_handle(tvb, offset, pinfo, tree, di, drep);
2002 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2003 offset = winreg_dissect_element_DeleteValue_value(tvb, offset, pinfo, tree, di, drep);
2004 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2005 return offset;
2006 }
2007
2008 static int
2009 winreg_dissect_element_EnumKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2010 {
2011 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2012
2013 return offset;
2014 }
2015
2016 static int
2017 winreg_dissect_element_EnumKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2018 {
2019 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2020
2021 return offset;
2022 }
2023
2024 static int
2025 winreg_dissect_element_EnumKey_enum_index(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2026 {
2027 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumKey_enum_index, 0);
2028
2029 return offset;
2030 }
2031
2032 static int
2033 winreg_dissect_element_EnumKey_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2034 {
2035 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumKey_name_, NDR_POINTER_REF, "Pointer to Name (winreg_StringBuf)",hf_winreg_winreg_EnumKey_name);
2036
2037 return offset;
2038 }
2039
2040 static int
2041 winreg_dissect_element_EnumKey_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2042 {
2043 offset = winreg_dissect_struct_StringBuf(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_EnumKey_name,0);
2044
2045 return offset;
2046 }
2047
2048 static int
2049 winreg_dissect_element_EnumKey_keyclass(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2050 {
2051 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumKey_keyclass_, NDR_POINTER_UNIQUE, "Pointer to Keyclass (winreg_StringBuf)",hf_winreg_winreg_EnumKey_keyclass);
2052
2053 return offset;
2054 }
2055
2056 static int
2057 winreg_dissect_element_EnumKey_keyclass_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2058 {
2059 offset = winreg_dissect_struct_StringBuf(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_EnumKey_keyclass,0);
2060
2061 return offset;
2062 }
2063
2064 static int
2065 winreg_dissect_element_EnumKey_last_changed_time(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2066 {
2067 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumKey_last_changed_time_, NDR_POINTER_UNIQUE, "Pointer to Last Changed Time (NTTIME)",hf_winreg_winreg_EnumKey_last_changed_time);
2068
2069 return offset;
2070 }
2071
2072 static int
2073 winreg_dissect_element_EnumKey_last_changed_time_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2074 {
2075 offset = dissect_ndr_nt_NTTIME(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumKey_last_changed_time);
2076
2077 return offset;
2078 }
2079
2080 /* IDL: WERROR winreg_EnumKey( */
2081 /* IDL: [in] [ref] policy_handle *handle, */
2082 /* IDL: [in] uint32 enum_index, */
2083 /* IDL: [in] [out] [ref] winreg_StringBuf *name, */
2084 /* IDL: [in] [out] [unique(1)] winreg_StringBuf *keyclass, */
2085 /* IDL: [in] [out] [unique(1)] NTTIME *last_changed_time */
2086 /* IDL: ); */
2087
2088 static int
2089 winreg_dissect_EnumKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2090 {
2091 uint32_t status;
2092
2093 di->dcerpc_procedure_name="EnumKey";
2094 offset = winreg_dissect_element_EnumKey_name(tvb, offset, pinfo, tree, di, drep);
2095 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2096
2097 offset = winreg_dissect_element_EnumKey_keyclass(tvb, offset, pinfo, tree, di, drep);
2098 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2099
2100 offset = winreg_dissect_element_EnumKey_last_changed_time(tvb, offset, pinfo, tree, di, drep);
2101 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2102
2103 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2104
2105 if (status != 0)
2106 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2107
2108 return offset;
2109 }
2110
2111 static int
2112 winreg_dissect_EnumKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2113 {
2114 di->dcerpc_procedure_name="EnumKey";
2115 offset = winreg_dissect_element_EnumKey_handle(tvb, offset, pinfo, tree, di, drep);
2116 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2117 offset = winreg_dissect_element_EnumKey_enum_index(tvb, offset, pinfo, tree, di, drep);
2118 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2119 offset = winreg_dissect_element_EnumKey_name(tvb, offset, pinfo, tree, di, drep);
2120 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2121 offset = winreg_dissect_element_EnumKey_keyclass(tvb, offset, pinfo, tree, di, drep);
2122 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2123 offset = winreg_dissect_element_EnumKey_last_changed_time(tvb, offset, pinfo, tree, di, drep);
2124 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2125 return offset;
2126 }
2127
2128 static int
2129 winreg_dissect_element_EnumValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2130 {
2131 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumValue_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2132
2133 return offset;
2134 }
2135
2136 static int
2137 winreg_dissect_element_EnumValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2138 {
2139 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2140
2141 return offset;
2142 }
2143
2144 static int
2145 winreg_dissect_element_EnumValue_enum_index(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2146 {
2147 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumValue_enum_index, 0);
2148
2149 return offset;
2150 }
2151
2152 static int
2153 winreg_dissect_element_EnumValue_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2154 {
2155 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumValue_name_, NDR_POINTER_REF, "Pointer to Name (winreg_ValNameBuf)",hf_winreg_winreg_EnumValue_name);
2156
2157 return offset;
2158 }
2159
2160 static int
2161 winreg_dissect_element_EnumValue_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2162 {
2163 offset = winreg_dissect_struct_ValNameBuf(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_EnumValue_name,0);
2164
2165 return offset;
2166 }
2167
2168 static int
2169 winreg_dissect_element_EnumValue_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2170 {
2171 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumValue_type_, NDR_POINTER_UNIQUE, "Pointer to Type (winreg_Type)",hf_winreg_winreg_EnumValue_type);
2172
2173 return offset;
2174 }
2175
2176 static int
2177 winreg_dissect_element_EnumValue_type_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2178 {
2179 offset=misc_dissect_enum_winreg_Type(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumValue_type, 0);
2180
2181 return offset;
2182 }
2183
2184 static int
2185 winreg_dissect_element_EnumValue_value(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2186 {
2187 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumValue_value_, NDR_POINTER_UNIQUE, "Pointer to Value (uint8)",hf_winreg_winreg_EnumValue_value);
2188
2189 return offset;
2190 }
2191
2192 static int
2193 winreg_dissect_element_EnumValue_value_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2194 {
2195 struct ndr_generic_array nga = { .is_conformant = false, };
2196
2197 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
2198
2199 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
2200
2201 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_EnumValue_value__);
2202
2203 return offset;
2204 }
2205
2206 static int
2207 winreg_dissect_element_EnumValue_value__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2208 {
2209 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumValue_value, 0);
2210
2211 return offset;
2212 }
2213
2214 static int
2215 winreg_dissect_element_EnumValue_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2216 {
2217 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumValue_size_, NDR_POINTER_UNIQUE, "Pointer to Size (uint32)",hf_winreg_winreg_EnumValue_size);
2218
2219 return offset;
2220 }
2221
2222 static int
2223 winreg_dissect_element_EnumValue_size_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2224 {
2225 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumValue_size, 0);
2226
2227 return offset;
2228 }
2229
2230 static int
2231 winreg_dissect_element_EnumValue_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2232 {
2233 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_EnumValue_length_, NDR_POINTER_UNIQUE, "Pointer to Length (uint32)",hf_winreg_winreg_EnumValue_length);
2234
2235 return offset;
2236 }
2237
2238 static int
2239 winreg_dissect_element_EnumValue_length_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2240 {
2241 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_EnumValue_length, 0);
2242
2243 return offset;
2244 }
2245
2246 /* IDL: WERROR winreg_EnumValue( */
2247 /* IDL: [in] [ref] policy_handle *handle, */
2248 /* IDL: [in] uint32 enum_index, */
2249 /* IDL: [in] [out] [ref] winreg_ValNameBuf *name, */
2250 /* IDL: [in] [out] [unique(1)] winreg_Type *type, */
2251 /* IDL: [in] [length_is(length?*length:0)] [out] [range(0,0x4000000)] [size_is(size?*size:0)] [unique(1)] uint8 *value, */
2252 /* IDL: [in] [out] [unique(1)] uint32 *size, */
2253 /* IDL: [in] [out] [unique(1)] uint32 *length */
2254 /* IDL: ); */
2255
2256 static int
2257 winreg_dissect_EnumValue_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2258 {
2259 uint32_t status;
2260
2261 di->dcerpc_procedure_name="EnumValue";
2262 offset = winreg_dissect_element_EnumValue_name(tvb, offset, pinfo, tree, di, drep);
2263 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2264
2265 offset = winreg_dissect_element_EnumValue_type(tvb, offset, pinfo, tree, di, drep);
2266 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2267
2268 offset = winreg_dissect_element_EnumValue_value(tvb, offset, pinfo, tree, di, drep);
2269 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2270
2271 offset = winreg_dissect_element_EnumValue_size(tvb, offset, pinfo, tree, di, drep);
2272 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2273
2274 offset = winreg_dissect_element_EnumValue_length(tvb, offset, pinfo, tree, di, drep);
2275 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2276
2277 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2278
2279 if (status != 0)
2280 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2281
2282 return offset;
2283 }
2284
2285 static int
2286 winreg_dissect_EnumValue_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2287 {
2288 di->dcerpc_procedure_name="EnumValue";
2289 offset = winreg_dissect_element_EnumValue_handle(tvb, offset, pinfo, tree, di, drep);
2290 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2291 offset = winreg_dissect_element_EnumValue_enum_index(tvb, offset, pinfo, tree, di, drep);
2292 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2293 offset = winreg_dissect_element_EnumValue_name(tvb, offset, pinfo, tree, di, drep);
2294 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2295 offset = winreg_dissect_element_EnumValue_type(tvb, offset, pinfo, tree, di, drep);
2296 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2297 offset = winreg_dissect_element_EnumValue_value(tvb, offset, pinfo, tree, di, drep);
2298 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2299 offset = winreg_dissect_element_EnumValue_size(tvb, offset, pinfo, tree, di, drep);
2300 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2301 offset = winreg_dissect_element_EnumValue_length(tvb, offset, pinfo, tree, di, drep);
2302 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2303 return offset;
2304 }
2305
2306 static int
2307 winreg_dissect_element_FlushKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2308 {
2309 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_FlushKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2310
2311 return offset;
2312 }
2313
2314 static int
2315 winreg_dissect_element_FlushKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2316 {
2317 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2318
2319 return offset;
2320 }
2321
2322 /* IDL: WERROR winreg_FlushKey( */
2323 /* IDL: [in] [ref] policy_handle *handle */
2324 /* IDL: ); */
2325
2326 static int
2327 winreg_dissect_FlushKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2328 {
2329 uint32_t status;
2330
2331 di->dcerpc_procedure_name="FlushKey";
2332 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2333
2334 if (status != 0)
2335 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2336
2337 return offset;
2338 }
2339
2340 static int
2341 winreg_dissect_FlushKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2342 {
2343 di->dcerpc_procedure_name="FlushKey";
2344 offset = winreg_dissect_element_FlushKey_handle(tvb, offset, pinfo, tree, di, drep);
2345 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2346 return offset;
2347 }
2348
2349 static int
2350 winreg_dissect_element_GetKeySecurity_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2351 {
2352 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_GetKeySecurity_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2353
2354 return offset;
2355 }
2356
2357 static int
2358 winreg_dissect_element_GetKeySecurity_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2359 {
2360 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2361
2362 return offset;
2363 }
2364
2365 static int
2366 winreg_dissect_element_GetKeySecurity_sec_info(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2367 {
2368 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_GetKeySecurity_sec_info, NULL);
2369
2370 return offset;
2371 }
2372
2373 static int
2374 winreg_dissect_element_GetKeySecurity_sd(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2375 {
2376 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_GetKeySecurity_sd_, NDR_POINTER_REF, "Pointer to Sd (KeySecurityData)",hf_winreg_sd);
2377
2378 return offset;
2379 }
2380
2381 static int
2382 winreg_dissect_element_GetKeySecurity_sd_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2383 {
2384 offset = winreg_dissect_struct_KeySecurityData(tvb,offset,pinfo,tree,di,drep,hf_winreg_sd,0);
2385
2386 return offset;
2387 }
2388
2389 /* IDL: WERROR winreg_GetKeySecurity( */
2390 /* IDL: [in] [ref] policy_handle *handle, */
2391 /* IDL: [in] security_secinfo sec_info, */
2392 /* IDL: [in] [out] [ref] KeySecurityData *sd */
2393 /* IDL: ); */
2394
2395 static int
2396 winreg_dissect_GetKeySecurity_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2397 {
2398 uint32_t status;
2399
2400 di->dcerpc_procedure_name="GetKeySecurity";
2401 offset = winreg_dissect_element_GetKeySecurity_sd(tvb, offset, pinfo, tree, di, drep);
2402 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2403
2404 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2405
2406 if (status != 0)
2407 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2408
2409 return offset;
2410 }
2411
2412 static int
2413 winreg_dissect_GetKeySecurity_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2414 {
2415 di->dcerpc_procedure_name="GetKeySecurity";
2416 offset = winreg_dissect_element_GetKeySecurity_handle(tvb, offset, pinfo, tree, di, drep);
2417 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2418 offset = winreg_dissect_element_GetKeySecurity_sec_info(tvb, offset, pinfo, tree, di, drep);
2419 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2420 offset = winreg_dissect_element_GetKeySecurity_sd(tvb, offset, pinfo, tree, di, drep);
2421 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2422 return offset;
2423 }
2424
2425 static int
2426 winreg_dissect_element_LoadKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2427 {
2428 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_LoadKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2429
2430 return offset;
2431 }
2432
2433 static int
2434 winreg_dissect_element_LoadKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2435 {
2436 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2437
2438 return offset;
2439 }
2440
2441 static int
2442 winreg_dissect_element_LoadKey_keyname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2443 {
2444 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_LoadKey_keyname_, NDR_POINTER_UNIQUE, "Pointer to Keyname (winreg_String)",hf_winreg_winreg_LoadKey_keyname);
2445
2446 return offset;
2447 }
2448
2449 static int
2450 winreg_dissect_element_LoadKey_keyname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2451 {
2452 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_LoadKey_keyname);
2453
2454 return offset;
2455 }
2456
2457 static int
2458 winreg_dissect_element_LoadKey_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2459 {
2460 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_LoadKey_filename_, NDR_POINTER_UNIQUE, "Pointer to Filename (winreg_String)",hf_winreg_winreg_LoadKey_filename);
2461
2462 return offset;
2463 }
2464
2465 static int
2466 winreg_dissect_element_LoadKey_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2467 {
2468 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_LoadKey_filename);
2469
2470 return offset;
2471 }
2472
2473 /* IDL: WERROR winreg_LoadKey( */
2474 /* IDL: [in] [ref] policy_handle *handle, */
2475 /* IDL: [in] [unique(1)] winreg_String *keyname, */
2476 /* IDL: [in] [unique(1)] winreg_String *filename */
2477 /* IDL: ); */
2478
2479 static int
2480 winreg_dissect_LoadKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2481 {
2482 uint32_t status;
2483
2484 di->dcerpc_procedure_name="LoadKey";
2485 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2486
2487 if (status != 0)
2488 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2489
2490 return offset;
2491 }
2492
2493 static int
2494 winreg_dissect_LoadKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2495 {
2496 di->dcerpc_procedure_name="LoadKey";
2497 offset = winreg_dissect_element_LoadKey_handle(tvb, offset, pinfo, tree, di, drep);
2498 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2499 offset = winreg_dissect_element_LoadKey_keyname(tvb, offset, pinfo, tree, di, drep);
2500 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2501 offset = winreg_dissect_element_LoadKey_filename(tvb, offset, pinfo, tree, di, drep);
2502 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2503 return offset;
2504 }
2505
2506 static int
2507 winreg_dissect_element_NotifyChangeKeyValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2508 {
2509 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_NotifyChangeKeyValue_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2510
2511 return offset;
2512 }
2513
2514 static int
2515 winreg_dissect_element_NotifyChangeKeyValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2516 {
2517 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2518
2519 return offset;
2520 }
2521
2522 static int
2523 winreg_dissect_element_NotifyChangeKeyValue_watch_subtree(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2524 {
2525 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_NotifyChangeKeyValue_watch_subtree, 0);
2526
2527 return offset;
2528 }
2529
2530 static int
2531 winreg_dissect_element_NotifyChangeKeyValue_notify_filter(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2532 {
2533 offset = winreg_dissect_bitmap_NotifyChangeType(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_NotifyChangeKeyValue_notify_filter, 0);
2534
2535 return offset;
2536 }
2537
2538 static int
2539 winreg_dissect_element_NotifyChangeKeyValue_unknown(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2540 {
2541 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_NotifyChangeKeyValue_unknown, 0);
2542
2543 return offset;
2544 }
2545
2546 static int
2547 winreg_dissect_element_NotifyChangeKeyValue_string1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2548 {
2549 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_NotifyChangeKeyValue_string1);
2550
2551 return offset;
2552 }
2553
2554 static int
2555 winreg_dissect_element_NotifyChangeKeyValue_string2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2556 {
2557 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_NotifyChangeKeyValue_string2);
2558
2559 return offset;
2560 }
2561
2562 static int
2563 winreg_dissect_element_NotifyChangeKeyValue_unknown2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2564 {
2565 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_NotifyChangeKeyValue_unknown2, 0);
2566
2567 return offset;
2568 }
2569
2570 /* IDL: WERROR winreg_NotifyChangeKeyValue( */
2571 /* IDL: [in] [ref] policy_handle *handle, */
2572 /* IDL: [in] uint8 watch_subtree, */
2573 /* IDL: [in] winreg_NotifyChangeType notify_filter, */
2574 /* IDL: [in] uint32 unknown, */
2575 /* IDL: [in] winreg_String string1, */
2576 /* IDL: [in] winreg_String string2, */
2577 /* IDL: [in] uint32 unknown2 */
2578 /* IDL: ); */
2579
2580 static int
2581 winreg_dissect_NotifyChangeKeyValue_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2582 {
2583 uint32_t status;
2584
2585 di->dcerpc_procedure_name="NotifyChangeKeyValue";
2586 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2587
2588 if (status != 0)
2589 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2590
2591 return offset;
2592 }
2593
2594 static int
2595 winreg_dissect_NotifyChangeKeyValue_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2596 {
2597 di->dcerpc_procedure_name="NotifyChangeKeyValue";
2598 offset = winreg_dissect_element_NotifyChangeKeyValue_handle(tvb, offset, pinfo, tree, di, drep);
2599 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2600 offset = winreg_dissect_element_NotifyChangeKeyValue_watch_subtree(tvb, offset, pinfo, tree, di, drep);
2601 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2602 offset = winreg_dissect_element_NotifyChangeKeyValue_notify_filter(tvb, offset, pinfo, tree, di, drep);
2603 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2604 offset = winreg_dissect_element_NotifyChangeKeyValue_unknown(tvb, offset, pinfo, tree, di, drep);
2605 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2606 offset = winreg_dissect_element_NotifyChangeKeyValue_string1(tvb, offset, pinfo, tree, di, drep);
2607 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2608 offset = winreg_dissect_element_NotifyChangeKeyValue_string2(tvb, offset, pinfo, tree, di, drep);
2609 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2610 offset = winreg_dissect_element_NotifyChangeKeyValue_unknown2(tvb, offset, pinfo, tree, di, drep);
2611 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2612 return offset;
2613 }
2614
2615 static int
2616 winreg_dissect_element_OpenKey_parent_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2617 {
2618 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenKey_parent_handle_, NDR_POINTER_REF, "Pointer to Parent Handle (policy_handle)",hf_winreg_winreg_OpenKey_parent_handle);
2619
2620 return offset;
2621 }
2622
2623 static int
2624 winreg_dissect_element_OpenKey_parent_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2625 {
2626 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_OpenKey_parent_handle, 0);
2627
2628 return offset;
2629 }
2630
2631 static int
2632 winreg_dissect_element_OpenKey_keyname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2633 {
2634 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 2|PIDL_SET_COL_INFO|PIDL_STR_SAVE, hf_winreg_winreg_OpenKey_keyname);
2635
2636 return offset;
2637 }
2638
2639 static int
2640 winreg_dissect_element_OpenKey_options(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2641 {
2642 offset = winreg_dissect_bitmap_KeyOptions(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_OpenKey_options, 0);
2643
2644 return offset;
2645 }
2646
2647 static int
2648 winreg_dissect_element_OpenKey_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2649 {
2650 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_OpenKey_access_mask, 0);
2651
2652 return offset;
2653 }
2654
2655 static int
2656 winreg_dissect_element_OpenKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2657 {
2658 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2659
2660 return offset;
2661 }
2662
2663 static int
2664 winreg_dissect_element_OpenKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2665 {
2666 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
2667
2668 return offset;
2669 }
2670
2671 /* IDL: WERROR winreg_OpenKey( */
2672 /* IDL: [in] [ref] policy_handle *parent_handle, */
2673 /* IDL: [in] winreg_String keyname, */
2674 /* IDL: [in] winreg_KeyOptions options, */
2675 /* IDL: [in] winreg_AccessMask access_mask, */
2676 /* IDL: [out] [ref] policy_handle *handle */
2677 /* IDL: ); */
2678
2679 static int
2680 winreg_dissect_OpenKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2681 {
2682 uint32_t status;
2683
2684 di->dcerpc_procedure_name="OpenKey";
2685 offset = winreg_dissect_element_OpenKey_handle(tvb, offset, pinfo, tree, di, drep);
2686 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2687
2688 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2689
2690 if (status != 0)
2691 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2692
2693 return offset;
2694 }
2695
2696 static int
2697 winreg_dissect_OpenKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2698 {
2699 di->dcerpc_procedure_name="OpenKey";
2700 offset = winreg_dissect_element_OpenKey_parent_handle(tvb, offset, pinfo, tree, di, drep);
2701 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2702 offset = winreg_dissect_element_OpenKey_keyname(tvb, offset, pinfo, tree, di, drep);
2703 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2704 offset = winreg_dissect_element_OpenKey_options(tvb, offset, pinfo, tree, di, drep);
2705 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2706 offset = winreg_dissect_element_OpenKey_access_mask(tvb, offset, pinfo, tree, di, drep);
2707 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2708 return offset;
2709 }
2710
2711 static int
2712 winreg_dissect_element_QueryInfoKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2713 {
2714 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2715
2716 return offset;
2717 }
2718
2719 static int
2720 winreg_dissect_element_QueryInfoKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2721 {
2722 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2723
2724 return offset;
2725 }
2726
2727 static int
2728 winreg_dissect_element_QueryInfoKey_classname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2729 {
2730 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_classname_, NDR_POINTER_REF, "Pointer to Classname (winreg_String)",hf_winreg_winreg_QueryInfoKey_classname);
2731
2732 return offset;
2733 }
2734
2735 static int
2736 winreg_dissect_element_QueryInfoKey_classname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2737 {
2738 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_QueryInfoKey_classname);
2739
2740 return offset;
2741 }
2742
2743 static int
2744 winreg_dissect_element_QueryInfoKey_num_subkeys(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2745 {
2746 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_num_subkeys_, NDR_POINTER_REF, "Pointer to Num Subkeys (uint32)",hf_winreg_winreg_QueryInfoKey_num_subkeys);
2747
2748 return offset;
2749 }
2750
2751 static int
2752 winreg_dissect_element_QueryInfoKey_num_subkeys_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2753 {
2754 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_num_subkeys, 0);
2755
2756 return offset;
2757 }
2758
2759 static int
2760 winreg_dissect_element_QueryInfoKey_max_subkeylen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2761 {
2762 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_max_subkeylen_, NDR_POINTER_REF, "Pointer to Max Subkeylen (uint32)",hf_winreg_winreg_QueryInfoKey_max_subkeylen);
2763
2764 return offset;
2765 }
2766
2767 static int
2768 winreg_dissect_element_QueryInfoKey_max_subkeylen_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2769 {
2770 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_max_subkeylen, 0);
2771
2772 return offset;
2773 }
2774
2775 static int
2776 winreg_dissect_element_QueryInfoKey_max_classlen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2777 {
2778 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_max_classlen_, NDR_POINTER_REF, "Pointer to Max Classlen (uint32)",hf_winreg_winreg_QueryInfoKey_max_classlen);
2779
2780 return offset;
2781 }
2782
2783 static int
2784 winreg_dissect_element_QueryInfoKey_max_classlen_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2785 {
2786 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_max_classlen, 0);
2787
2788 return offset;
2789 }
2790
2791 static int
2792 winreg_dissect_element_QueryInfoKey_num_values(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2793 {
2794 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_num_values_, NDR_POINTER_REF, "Pointer to Num Values (uint32)",hf_winreg_winreg_QueryInfoKey_num_values);
2795
2796 return offset;
2797 }
2798
2799 static int
2800 winreg_dissect_element_QueryInfoKey_num_values_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2801 {
2802 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_num_values, 0);
2803
2804 return offset;
2805 }
2806
2807 static int
2808 winreg_dissect_element_QueryInfoKey_max_valnamelen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2809 {
2810 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_max_valnamelen_, NDR_POINTER_REF, "Pointer to Max Valnamelen (uint32)",hf_winreg_winreg_QueryInfoKey_max_valnamelen);
2811
2812 return offset;
2813 }
2814
2815 static int
2816 winreg_dissect_element_QueryInfoKey_max_valnamelen_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2817 {
2818 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_max_valnamelen, 0);
2819
2820 return offset;
2821 }
2822
2823 static int
2824 winreg_dissect_element_QueryInfoKey_max_valbufsize(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2825 {
2826 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_max_valbufsize_, NDR_POINTER_REF, "Pointer to Max Valbufsize (uint32)",hf_winreg_winreg_QueryInfoKey_max_valbufsize);
2827
2828 return offset;
2829 }
2830
2831 static int
2832 winreg_dissect_element_QueryInfoKey_max_valbufsize_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2833 {
2834 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_max_valbufsize, 0);
2835
2836 return offset;
2837 }
2838
2839 static int
2840 winreg_dissect_element_QueryInfoKey_secdescsize(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2841 {
2842 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_secdescsize_, NDR_POINTER_REF, "Pointer to Secdescsize (uint32)",hf_winreg_winreg_QueryInfoKey_secdescsize);
2843
2844 return offset;
2845 }
2846
2847 static int
2848 winreg_dissect_element_QueryInfoKey_secdescsize_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2849 {
2850 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_secdescsize, 0);
2851
2852 return offset;
2853 }
2854
2855 static int
2856 winreg_dissect_element_QueryInfoKey_last_changed_time(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2857 {
2858 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryInfoKey_last_changed_time_, NDR_POINTER_REF, "Pointer to Last Changed Time (NTTIME)",hf_winreg_winreg_QueryInfoKey_last_changed_time);
2859
2860 return offset;
2861 }
2862
2863 static int
2864 winreg_dissect_element_QueryInfoKey_last_changed_time_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2865 {
2866 offset = dissect_ndr_nt_NTTIME(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryInfoKey_last_changed_time);
2867
2868 return offset;
2869 }
2870
2871 /* IDL: WERROR winreg_QueryInfoKey( */
2872 /* IDL: [in] [ref] policy_handle *handle, */
2873 /* IDL: [in] [out] [ref] winreg_String *classname, */
2874 /* IDL: [out] [ref] uint32 *num_subkeys, */
2875 /* IDL: [out] [ref] uint32 *max_subkeylen, */
2876 /* IDL: [out] [ref] uint32 *max_classlen, */
2877 /* IDL: [out] [ref] uint32 *num_values, */
2878 /* IDL: [out] [ref] uint32 *max_valnamelen, */
2879 /* IDL: [out] [ref] uint32 *max_valbufsize, */
2880 /* IDL: [out] [ref] uint32 *secdescsize, */
2881 /* IDL: [out] [ref] NTTIME *last_changed_time */
2882 /* IDL: ); */
2883
2884 static int
2885 winreg_dissect_QueryInfoKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2886 {
2887 uint32_t status;
2888
2889 di->dcerpc_procedure_name="QueryInfoKey";
2890 offset = winreg_dissect_element_QueryInfoKey_classname(tvb, offset, pinfo, tree, di, drep);
2891 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2892
2893 offset = winreg_dissect_element_QueryInfoKey_num_subkeys(tvb, offset, pinfo, tree, di, drep);
2894 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2895
2896 offset = winreg_dissect_element_QueryInfoKey_max_subkeylen(tvb, offset, pinfo, tree, di, drep);
2897 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2898
2899 offset = winreg_dissect_element_QueryInfoKey_max_classlen(tvb, offset, pinfo, tree, di, drep);
2900 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2901
2902 offset = winreg_dissect_element_QueryInfoKey_num_values(tvb, offset, pinfo, tree, di, drep);
2903 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2904
2905 offset = winreg_dissect_element_QueryInfoKey_max_valnamelen(tvb, offset, pinfo, tree, di, drep);
2906 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2907
2908 offset = winreg_dissect_element_QueryInfoKey_max_valbufsize(tvb, offset, pinfo, tree, di, drep);
2909 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2910
2911 offset = winreg_dissect_element_QueryInfoKey_secdescsize(tvb, offset, pinfo, tree, di, drep);
2912 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2913
2914 offset = winreg_dissect_element_QueryInfoKey_last_changed_time(tvb, offset, pinfo, tree, di, drep);
2915 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2916
2917 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
2918
2919 if (status != 0)
2920 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
2921
2922 return offset;
2923 }
2924
2925 static int
2926 winreg_dissect_QueryInfoKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2927 {
2928 di->dcerpc_procedure_name="QueryInfoKey";
2929 offset = winreg_dissect_element_QueryInfoKey_handle(tvb, offset, pinfo, tree, di, drep);
2930 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2931 offset = winreg_dissect_element_QueryInfoKey_classname(tvb, offset, pinfo, tree, di, drep);
2932 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
2933 return offset;
2934 }
2935
2936 static int
2937 winreg_dissect_element_QueryValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2938 {
2939 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryValue_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
2940
2941 return offset;
2942 }
2943
2944 static int
2945 winreg_dissect_element_QueryValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2946 {
2947 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
2948
2949 return offset;
2950 }
2951
2952 static int
2953 winreg_dissect_element_QueryValue_value_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2954 {
2955 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryValue_value_name_, NDR_POINTER_REF, "Pointer to Value Name (winreg_String)",hf_winreg_winreg_QueryValue_value_name);
2956
2957 return offset;
2958 }
2959
2960 static int
2961 winreg_dissect_element_QueryValue_value_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2962 {
2963 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_QueryValue_value_name);
2964
2965 return offset;
2966 }
2967
2968 static int
2969 winreg_dissect_element_QueryValue_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2970 {
2971 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryValue_type_, NDR_POINTER_UNIQUE, "Pointer to Type (winreg_Type)",hf_winreg_winreg_QueryValue_type);
2972
2973 return offset;
2974 }
2975
2976 static int
2977 winreg_dissect_element_QueryValue_type_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2978 {
2979 offset=misc_dissect_enum_winreg_Type(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryValue_type, 0);
2980
2981 return offset;
2982 }
2983
2984 static int
2985 winreg_dissect_element_QueryValue_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2986 {
2987 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryValue_data_, NDR_POINTER_UNIQUE, "Pointer to Data (uint8)",hf_winreg_winreg_QueryValue_data);
2988
2989 return offset;
2990 }
2991
2992 static int
2993 winreg_dissect_element_QueryValue_data_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
2994 {
2995 struct ndr_generic_array nga = { .is_conformant = false, };
2996
2997 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
2998
2999 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
3000
3001 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryValue_data__);
3002
3003 return offset;
3004 }
3005
3006 static int
3007 winreg_dissect_element_QueryValue_data__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3008 {
3009 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryValue_data, 0);
3010
3011 return offset;
3012 }
3013
3014 static int
3015 winreg_dissect_element_QueryValue_data_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3016 {
3017 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryValue_data_size_, NDR_POINTER_UNIQUE, "Pointer to Data Size (uint32)",hf_winreg_winreg_QueryValue_data_size);
3018
3019 return offset;
3020 }
3021
3022 static int
3023 winreg_dissect_element_QueryValue_data_size_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3024 {
3025 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryValue_data_size, 0);
3026
3027 return offset;
3028 }
3029
3030 static int
3031 winreg_dissect_element_QueryValue_data_length(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3032 {
3033 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryValue_data_length_, NDR_POINTER_UNIQUE, "Pointer to Data Length (uint32)",hf_winreg_winreg_QueryValue_data_length);
3034
3035 return offset;
3036 }
3037
3038 static int
3039 winreg_dissect_element_QueryValue_data_length_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3040 {
3041 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryValue_data_length, 0);
3042
3043 return offset;
3044 }
3045
3046 /* IDL: WERROR winreg_QueryValue( */
3047 /* IDL: [in] [ref] policy_handle *handle, */
3048 /* IDL: [in] [ref] winreg_String *value_name, */
3049 /* IDL: [in] [out] [unique(1)] winreg_Type *type, */
3050 /* IDL: [in] [length_is(data_length?*data_length:0)] [out] [range(0,0x4000000)] [size_is(data_size?*data_size:0)] [unique(1)] uint8 *data, */
3051 /* IDL: [in] [out] [unique(1)] uint32 *data_size, */
3052 /* IDL: [in] [out] [unique(1)] uint32 *data_length */
3053 /* IDL: ); */
3054
3055 static int
3056 winreg_dissect_QueryValue_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3057 {
3058 uint32_t status;
3059
3060 di->dcerpc_procedure_name="QueryValue";
3061 offset = winreg_dissect_element_QueryValue_type(tvb, offset, pinfo, tree, di, drep);
3062 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3063
3064 offset = winreg_dissect_element_QueryValue_data(tvb, offset, pinfo, tree, di, drep);
3065 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3066
3067 offset = winreg_dissect_element_QueryValue_data_size(tvb, offset, pinfo, tree, di, drep);
3068 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3069
3070 offset = winreg_dissect_element_QueryValue_data_length(tvb, offset, pinfo, tree, di, drep);
3071 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3072
3073 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3074
3075 if (status != 0)
3076 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3077
3078 return offset;
3079 }
3080
3081 static int
3082 winreg_dissect_QueryValue_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3083 {
3084 di->dcerpc_procedure_name="QueryValue";
3085 offset = winreg_dissect_element_QueryValue_handle(tvb, offset, pinfo, tree, di, drep);
3086 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3087 offset = winreg_dissect_element_QueryValue_value_name(tvb, offset, pinfo, tree, di, drep);
3088 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3089 offset = winreg_dissect_element_QueryValue_type(tvb, offset, pinfo, tree, di, drep);
3090 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3091 offset = winreg_dissect_element_QueryValue_data(tvb, offset, pinfo, tree, di, drep);
3092 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3093 offset = winreg_dissect_element_QueryValue_data_size(tvb, offset, pinfo, tree, di, drep);
3094 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3095 offset = winreg_dissect_element_QueryValue_data_length(tvb, offset, pinfo, tree, di, drep);
3096 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3097 return offset;
3098 }
3099
3100 static int
3101 winreg_dissect_element_ReplaceKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3102 {
3103 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_ReplaceKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_winreg_ReplaceKey_handle);
3104
3105 return offset;
3106 }
3107
3108 static int
3109 winreg_dissect_element_ReplaceKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3110 {
3111 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_ReplaceKey_handle, 0);
3112
3113 return offset;
3114 }
3115
3116 static int
3117 winreg_dissect_element_ReplaceKey_subkey(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3118 {
3119 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_ReplaceKey_subkey_, NDR_POINTER_REF, "Pointer to Subkey (winreg_String)",hf_winreg_winreg_ReplaceKey_subkey);
3120
3121 return offset;
3122 }
3123
3124 static int
3125 winreg_dissect_element_ReplaceKey_subkey_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3126 {
3127 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_ReplaceKey_subkey);
3128
3129 return offset;
3130 }
3131
3132 static int
3133 winreg_dissect_element_ReplaceKey_new_file(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3134 {
3135 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_ReplaceKey_new_file_, NDR_POINTER_REF, "Pointer to New File (winreg_String)",hf_winreg_winreg_ReplaceKey_new_file);
3136
3137 return offset;
3138 }
3139
3140 static int
3141 winreg_dissect_element_ReplaceKey_new_file_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3142 {
3143 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_ReplaceKey_new_file);
3144
3145 return offset;
3146 }
3147
3148 static int
3149 winreg_dissect_element_ReplaceKey_old_file(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3150 {
3151 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_ReplaceKey_old_file_, NDR_POINTER_REF, "Pointer to Old File (winreg_String)",hf_winreg_winreg_ReplaceKey_old_file);
3152
3153 return offset;
3154 }
3155
3156 static int
3157 winreg_dissect_element_ReplaceKey_old_file_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3158 {
3159 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_ReplaceKey_old_file);
3160
3161 return offset;
3162 }
3163
3164 /* IDL: WERROR winreg_ReplaceKey( */
3165 /* IDL: [in] [ref] policy_handle *handle, */
3166 /* IDL: [in] [ref] winreg_String *subkey, */
3167 /* IDL: [in] [ref] winreg_String *new_file, */
3168 /* IDL: [in] [ref] winreg_String *old_file */
3169 /* IDL: ); */
3170
3171 static int
3172 winreg_dissect_ReplaceKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3173 {
3174 uint32_t status;
3175
3176 di->dcerpc_procedure_name="ReplaceKey";
3177 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3178
3179 if (status != 0)
3180 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3181
3182 return offset;
3183 }
3184
3185 static int
3186 winreg_dissect_ReplaceKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3187 {
3188 di->dcerpc_procedure_name="ReplaceKey";
3189 offset = winreg_dissect_element_ReplaceKey_handle(tvb, offset, pinfo, tree, di, drep);
3190 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3191 offset = winreg_dissect_element_ReplaceKey_subkey(tvb, offset, pinfo, tree, di, drep);
3192 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3193 offset = winreg_dissect_element_ReplaceKey_new_file(tvb, offset, pinfo, tree, di, drep);
3194 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3195 offset = winreg_dissect_element_ReplaceKey_old_file(tvb, offset, pinfo, tree, di, drep);
3196 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3197 return offset;
3198 }
3199
3200 static int
3201 winreg_dissect_element_RestoreKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3202 {
3203 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_RestoreKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_winreg_RestoreKey_handle);
3204
3205 return offset;
3206 }
3207
3208 static int
3209 winreg_dissect_element_RestoreKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3210 {
3211 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_RestoreKey_handle, 0);
3212
3213 return offset;
3214 }
3215
3216 static int
3217 winreg_dissect_element_RestoreKey_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3218 {
3219 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_RestoreKey_filename_, NDR_POINTER_REF, "Pointer to Filename (winreg_String)",hf_winreg_winreg_RestoreKey_filename);
3220
3221 return offset;
3222 }
3223
3224 static int
3225 winreg_dissect_element_RestoreKey_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3226 {
3227 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_RestoreKey_filename);
3228
3229 return offset;
3230 }
3231
3232 static int
3233 winreg_dissect_element_RestoreKey_flags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3234 {
3235 offset = winreg_dissect_bitmap_RestoreKeyFlags(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_RestoreKey_flags, 0);
3236
3237 return offset;
3238 }
3239
3240 /* IDL: WERROR winreg_RestoreKey( */
3241 /* IDL: [in] [ref] policy_handle *handle, */
3242 /* IDL: [in] [ref] winreg_String *filename, */
3243 /* IDL: [in] winreg_RestoreKeyFlags flags */
3244 /* IDL: ); */
3245
3246 static int
3247 winreg_dissect_RestoreKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3248 {
3249 uint32_t status;
3250
3251 di->dcerpc_procedure_name="RestoreKey";
3252 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3253
3254 if (status != 0)
3255 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3256
3257 return offset;
3258 }
3259
3260 static int
3261 winreg_dissect_RestoreKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3262 {
3263 di->dcerpc_procedure_name="RestoreKey";
3264 offset = winreg_dissect_element_RestoreKey_handle(tvb, offset, pinfo, tree, di, drep);
3265 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3266 offset = winreg_dissect_element_RestoreKey_filename(tvb, offset, pinfo, tree, di, drep);
3267 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3268 offset = winreg_dissect_element_RestoreKey_flags(tvb, offset, pinfo, tree, di, drep);
3269 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3270 return offset;
3271 }
3272
3273 static int
3274 winreg_dissect_element_SaveKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3275 {
3276 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SaveKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_winreg_SaveKey_handle);
3277
3278 return offset;
3279 }
3280
3281 static int
3282 winreg_dissect_element_SaveKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3283 {
3284 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SaveKey_handle, 0);
3285
3286 return offset;
3287 }
3288
3289 static int
3290 winreg_dissect_element_SaveKey_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3291 {
3292 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SaveKey_filename_, NDR_POINTER_REF, "Pointer to Filename (winreg_String)",hf_winreg_winreg_SaveKey_filename);
3293
3294 return offset;
3295 }
3296
3297 static int
3298 winreg_dissect_element_SaveKey_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3299 {
3300 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_SaveKey_filename);
3301
3302 return offset;
3303 }
3304
3305 static int
3306 winreg_dissect_element_SaveKey_sec_attrib(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3307 {
3308 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SaveKey_sec_attrib_, NDR_POINTER_UNIQUE, "Pointer to Sec Attrib (KeySecurityAttribute)",hf_winreg_winreg_SaveKey_sec_attrib);
3309
3310 return offset;
3311 }
3312
3313 static int
3314 winreg_dissect_element_SaveKey_sec_attrib_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3315 {
3316 offset = winreg_dissect_struct_KeySecurityAttribute(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_SaveKey_sec_attrib,0);
3317
3318 return offset;
3319 }
3320
3321 /* IDL: WERROR winreg_SaveKey( */
3322 /* IDL: [in] [ref] policy_handle *handle, */
3323 /* IDL: [in] [ref] winreg_String *filename, */
3324 /* IDL: [in] [unique(1)] KeySecurityAttribute *sec_attrib */
3325 /* IDL: ); */
3326
3327 static int
3328 winreg_dissect_SaveKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3329 {
3330 uint32_t status;
3331
3332 di->dcerpc_procedure_name="SaveKey";
3333 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3334
3335 if (status != 0)
3336 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3337
3338 return offset;
3339 }
3340
3341 static int
3342 winreg_dissect_SaveKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3343 {
3344 di->dcerpc_procedure_name="SaveKey";
3345 offset = winreg_dissect_element_SaveKey_handle(tvb, offset, pinfo, tree, di, drep);
3346 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3347 offset = winreg_dissect_element_SaveKey_filename(tvb, offset, pinfo, tree, di, drep);
3348 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3349 offset = winreg_dissect_element_SaveKey_sec_attrib(tvb, offset, pinfo, tree, di, drep);
3350 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3351 return offset;
3352 }
3353
3354 static int
3355 winreg_dissect_element_SetKeySecurity_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3356 {
3357 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SetKeySecurity_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
3358
3359 return offset;
3360 }
3361
3362 static int
3363 winreg_dissect_element_SetKeySecurity_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3364 {
3365 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
3366
3367 return offset;
3368 }
3369
3370 static int
3371 winreg_dissect_element_SetKeySecurity_sec_info(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3372 {
3373 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_GetKeySecurity_sec_info, NULL);
3374
3375 return offset;
3376 }
3377
3378 static int
3379 winreg_dissect_element_SetKeySecurity_sd(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3380 {
3381 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SetKeySecurity_sd_, NDR_POINTER_REF, "Pointer to Sd (KeySecurityData)",hf_winreg_sd);
3382
3383 return offset;
3384 }
3385
3386 static int
3387 winreg_dissect_element_SetKeySecurity_sd_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3388 {
3389 offset = winreg_dissect_struct_KeySecurityData(tvb,offset,pinfo,tree,di,drep,hf_winreg_sd,0);
3390
3391 return offset;
3392 }
3393
3394 /* IDL: WERROR winreg_SetKeySecurity( */
3395 /* IDL: [in] [ref] policy_handle *handle, */
3396 /* IDL: [in] security_secinfo sec_info, */
3397 /* IDL: [in] [ref] KeySecurityData *sd */
3398 /* IDL: ); */
3399
3400 static int
3401 winreg_dissect_SetKeySecurity_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3402 {
3403 uint32_t status;
3404
3405 di->dcerpc_procedure_name="SetKeySecurity";
3406 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3407
3408 if (status != 0)
3409 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3410
3411 return offset;
3412 }
3413
3414 static int
3415 winreg_dissect_SetKeySecurity_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3416 {
3417 di->dcerpc_procedure_name="SetKeySecurity";
3418 offset = winreg_dissect_element_SetKeySecurity_handle(tvb, offset, pinfo, tree, di, drep);
3419 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3420 offset = winreg_dissect_element_SetKeySecurity_sec_info(tvb, offset, pinfo, tree, di, drep);
3421 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3422 offset = winreg_dissect_element_SetKeySecurity_sd(tvb, offset, pinfo, tree, di, drep);
3423 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3424 return offset;
3425 }
3426
3427 static int
3428 winreg_dissect_element_SetValue_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3429 {
3430 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SetValue_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
3431
3432 return offset;
3433 }
3434
3435 static int
3436 winreg_dissect_element_SetValue_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3437 {
3438 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
3439
3440 return offset;
3441 }
3442
3443 static int
3444 winreg_dissect_element_SetValue_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3445 {
3446 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 2|PIDL_SET_COL_INFO, hf_winreg_winreg_SetValue_name);
3447
3448 return offset;
3449 }
3450
3451 static int
3452 winreg_dissect_element_SetValue_type(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3453 {
3454 offset=misc_dissect_enum_winreg_Type(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SetValue_type, 0);
3455
3456 return offset;
3457 }
3458
3459 static int
3460 winreg_dissect_element_SetValue_data(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3461 {
3462 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SetValue_data_, NDR_POINTER_REF, "Pointer to Data (uint8)",hf_winreg_winreg_SetValue_data);
3463
3464 return offset;
3465 }
3466
3467 static int
3468 winreg_dissect_element_SetValue_data_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3469 {
3470 struct ndr_generic_array nga = { .is_conformant = false, };
3471
3472 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
3473
3474 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_SetValue_data__);
3475
3476 return offset;
3477 }
3478
3479 static int
3480 winreg_dissect_element_SetValue_data__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3481 {
3482 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SetValue_data, 0);
3483
3484 return offset;
3485 }
3486
3487 static int
3488 winreg_dissect_element_SetValue_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3489 {
3490 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SetValue_size, 0);
3491
3492 return offset;
3493 }
3494
3495 /* IDL: WERROR winreg_SetValue( */
3496 /* IDL: [in] [ref] policy_handle *handle, */
3497 /* IDL: [in] winreg_String name, */
3498 /* IDL: [in] winreg_Type type, */
3499 /* IDL: [in] [ref] [size_is(size)] uint8 *data, */
3500 /* IDL: [in] uint32 size */
3501 /* IDL: ); */
3502
3503 static int
3504 winreg_dissect_SetValue_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3505 {
3506 uint32_t status;
3507
3508 di->dcerpc_procedure_name="SetValue";
3509 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3510
3511 if (status != 0)
3512 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3513
3514 return offset;
3515 }
3516
3517 static int
3518 winreg_dissect_SetValue_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3519 {
3520 di->dcerpc_procedure_name="SetValue";
3521 offset = winreg_dissect_element_SetValue_handle(tvb, offset, pinfo, tree, di, drep);
3522 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3523 offset = winreg_dissect_element_SetValue_name(tvb, offset, pinfo, tree, di, drep);
3524 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3525 offset = winreg_dissect_element_SetValue_type(tvb, offset, pinfo, tree, di, drep);
3526 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3527 offset = winreg_dissect_element_SetValue_data(tvb, offset, pinfo, tree, di, drep);
3528 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3529 offset = winreg_dissect_element_SetValue_size(tvb, offset, pinfo, tree, di, drep);
3530 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3531 return offset;
3532 }
3533
3534 static int
3535 winreg_dissect_element_UnLoadKey_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3536 {
3537 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_UnLoadKey_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_winreg_UnLoadKey_handle);
3538
3539 return offset;
3540 }
3541
3542 static int
3543 winreg_dissect_element_UnLoadKey_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3544 {
3545 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_UnLoadKey_handle, 0);
3546
3547 return offset;
3548 }
3549
3550 static int
3551 winreg_dissect_element_UnLoadKey_subkey(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3552 {
3553 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_UnLoadKey_subkey_, NDR_POINTER_REF, "Pointer to Subkey (winreg_String)",hf_winreg_winreg_UnLoadKey_subkey);
3554
3555 return offset;
3556 }
3557
3558 static int
3559 winreg_dissect_element_UnLoadKey_subkey_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3560 {
3561 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_UnLoadKey_subkey);
3562
3563 return offset;
3564 }
3565
3566 /* IDL: WERROR winreg_UnLoadKey( */
3567 /* IDL: [in] [ref] policy_handle *handle, */
3568 /* IDL: [in] [ref] winreg_String *subkey */
3569 /* IDL: ); */
3570
3571 static int
3572 winreg_dissect_UnLoadKey_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3573 {
3574 uint32_t status;
3575
3576 di->dcerpc_procedure_name="UnLoadKey";
3577 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3578
3579 if (status != 0)
3580 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3581
3582 return offset;
3583 }
3584
3585 static int
3586 winreg_dissect_UnLoadKey_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3587 {
3588 di->dcerpc_procedure_name="UnLoadKey";
3589 offset = winreg_dissect_element_UnLoadKey_handle(tvb, offset, pinfo, tree, di, drep);
3590 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3591 offset = winreg_dissect_element_UnLoadKey_subkey(tvb, offset, pinfo, tree, di, drep);
3592 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3593 return offset;
3594 }
3595
3596 static int
3597 winreg_dissect_element_InitiateSystemShutdown_hostname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3598 {
3599 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_InitiateSystemShutdown_hostname_, NDR_POINTER_UNIQUE, "Pointer to Hostname (uint16)",hf_winreg_winreg_InitiateSystemShutdown_hostname);
3600
3601 return offset;
3602 }
3603
3604 static int
3605 winreg_dissect_element_InitiateSystemShutdown_hostname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3606 {
3607 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdown_hostname, 0);
3608
3609 return offset;
3610 }
3611
3612 static int
3613 winreg_dissect_element_InitiateSystemShutdown_message(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3614 {
3615 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_InitiateSystemShutdown_message_, NDR_POINTER_UNIQUE, "Pointer to Message (lsa_StringLarge)",hf_winreg_winreg_InitiateSystemShutdown_message);
3616
3617 return offset;
3618 }
3619
3620 static int
3621 winreg_dissect_element_InitiateSystemShutdown_message_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3622 {
3623 offset=lsarpc_dissect_struct_lsa_StringLarge(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdown_message, 0);
3624
3625 return offset;
3626 }
3627
3628 static int
3629 winreg_dissect_element_InitiateSystemShutdown_timeout(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3630 {
3631 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdown_timeout, 0);
3632
3633 return offset;
3634 }
3635
3636 static int
3637 winreg_dissect_element_InitiateSystemShutdown_force_apps(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3638 {
3639 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdown_force_apps, 0);
3640
3641 return offset;
3642 }
3643
3644 static int
3645 winreg_dissect_element_InitiateSystemShutdown_do_reboot(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3646 {
3647 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdown_do_reboot, 0);
3648
3649 return offset;
3650 }
3651
3652 /* IDL: WERROR winreg_InitiateSystemShutdown( */
3653 /* IDL: [in] [unique(1)] uint16 *hostname, */
3654 /* IDL: [in] [unique(1)] lsa_StringLarge *message, */
3655 /* IDL: [in] uint32 timeout, */
3656 /* IDL: [in] uint8 force_apps, */
3657 /* IDL: [in] uint8 do_reboot */
3658 /* IDL: ); */
3659
3660 static int
3661 winreg_dissect_InitiateSystemShutdown_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3662 {
3663 uint32_t status;
3664
3665 di->dcerpc_procedure_name="InitiateSystemShutdown";
3666 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3667
3668 if (status != 0)
3669 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3670
3671 return offset;
3672 }
3673
3674 static int
3675 winreg_dissect_InitiateSystemShutdown_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3676 {
3677 di->dcerpc_procedure_name="InitiateSystemShutdown";
3678 offset = winreg_dissect_element_InitiateSystemShutdown_hostname(tvb, offset, pinfo, tree, di, drep);
3679 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3680 offset = winreg_dissect_element_InitiateSystemShutdown_message(tvb, offset, pinfo, tree, di, drep);
3681 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3682 offset = winreg_dissect_element_InitiateSystemShutdown_timeout(tvb, offset, pinfo, tree, di, drep);
3683 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3684 offset = winreg_dissect_element_InitiateSystemShutdown_force_apps(tvb, offset, pinfo, tree, di, drep);
3685 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3686 offset = winreg_dissect_element_InitiateSystemShutdown_do_reboot(tvb, offset, pinfo, tree, di, drep);
3687 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3688 return offset;
3689 }
3690
3691 static int
3692 winreg_dissect_element_AbortSystemShutdown_server(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3693 {
3694 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_AbortSystemShutdown_server_, NDR_POINTER_UNIQUE, "Pointer to Server (uint16)",hf_winreg_winreg_AbortSystemShutdown_server);
3695
3696 return offset;
3697 }
3698
3699 static int
3700 winreg_dissect_element_AbortSystemShutdown_server_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3701 {
3702 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_AbortSystemShutdown_server, 0);
3703
3704 return offset;
3705 }
3706
3707 /* IDL: WERROR winreg_AbortSystemShutdown( */
3708 /* IDL: [in] [unique(1)] uint16 *server */
3709 /* IDL: ); */
3710
3711 static int
3712 winreg_dissect_AbortSystemShutdown_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3713 {
3714 uint32_t status;
3715
3716 di->dcerpc_procedure_name="AbortSystemShutdown";
3717 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3718
3719 if (status != 0)
3720 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3721
3722 return offset;
3723 }
3724
3725 static int
3726 winreg_dissect_AbortSystemShutdown_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3727 {
3728 di->dcerpc_procedure_name="AbortSystemShutdown";
3729 offset = winreg_dissect_element_AbortSystemShutdown_server(tvb, offset, pinfo, tree, di, drep);
3730 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3731 return offset;
3732 }
3733
3734 static int
3735 winreg_dissect_element_GetVersion_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3736 {
3737 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_GetVersion_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
3738
3739 return offset;
3740 }
3741
3742 static int
3743 winreg_dissect_element_GetVersion_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3744 {
3745 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, 0);
3746
3747 return offset;
3748 }
3749
3750 static int
3751 winreg_dissect_element_GetVersion_version(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3752 {
3753 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_GetVersion_version_, NDR_POINTER_REF, "Pointer to Version (uint32)",hf_winreg_winreg_GetVersion_version);
3754
3755 return offset;
3756 }
3757
3758 static int
3759 winreg_dissect_element_GetVersion_version_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3760 {
3761 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_GetVersion_version, 0);
3762
3763 return offset;
3764 }
3765
3766 /* IDL: WERROR winreg_GetVersion( */
3767 /* IDL: [in] [ref] policy_handle *handle, */
3768 /* IDL: [out] [ref] uint32 *version */
3769 /* IDL: ); */
3770
3771 static int
3772 winreg_dissect_GetVersion_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3773 {
3774 uint32_t status;
3775
3776 di->dcerpc_procedure_name="GetVersion";
3777 offset = winreg_dissect_element_GetVersion_version(tvb, offset, pinfo, tree, di, drep);
3778 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3779
3780 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3781
3782 if (status != 0)
3783 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3784
3785 return offset;
3786 }
3787
3788 static int
3789 winreg_dissect_GetVersion_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3790 {
3791 di->dcerpc_procedure_name="GetVersion";
3792 offset = winreg_dissect_element_GetVersion_handle(tvb, offset, pinfo, tree, di, drep);
3793 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3794 return offset;
3795 }
3796
3797 static int
3798 winreg_dissect_element_OpenHKCC_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3799 {
3800 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKCC_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
3801
3802 return offset;
3803 }
3804
3805 static int
3806 winreg_dissect_element_OpenHKCC_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3807 {
3808 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
3809
3810 return offset;
3811 }
3812
3813 static int
3814 winreg_dissect_element_OpenHKCC_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3815 {
3816 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
3817
3818 return offset;
3819 }
3820
3821 static int
3822 winreg_dissect_element_OpenHKCC_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3823 {
3824 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKCC_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
3825
3826 return offset;
3827 }
3828
3829 static int
3830 winreg_dissect_element_OpenHKCC_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3831 {
3832 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
3833
3834 return offset;
3835 }
3836
3837 /* IDL: WERROR winreg_OpenHKCC( */
3838 /* IDL: [in] [unique(1)] uint16 *system_name, */
3839 /* IDL: [in] winreg_AccessMask access_mask, */
3840 /* IDL: [out] [ref] policy_handle *handle */
3841 /* IDL: ); */
3842
3843 static int
3844 winreg_dissect_OpenHKCC_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3845 {
3846 uint32_t status;
3847
3848 di->dcerpc_procedure_name="OpenHKCC";
3849 offset = winreg_dissect_element_OpenHKCC_handle(tvb, offset, pinfo, tree, di, drep);
3850 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3851
3852 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3853
3854 if (status != 0)
3855 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3856
3857 return offset;
3858 }
3859
3860 static int
3861 winreg_dissect_OpenHKCC_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3862 {
3863 di->dcerpc_procedure_name="OpenHKCC";
3864 offset = winreg_dissect_element_OpenHKCC_system_name(tvb, offset, pinfo, tree, di, drep);
3865 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3866 offset = winreg_dissect_element_OpenHKCC_access_mask(tvb, offset, pinfo, tree, di, drep);
3867 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3868 return offset;
3869 }
3870
3871 static int
3872 winreg_dissect_element_OpenHKDD_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3873 {
3874 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKDD_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
3875
3876 return offset;
3877 }
3878
3879 static int
3880 winreg_dissect_element_OpenHKDD_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3881 {
3882 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
3883
3884 return offset;
3885 }
3886
3887 static int
3888 winreg_dissect_element_OpenHKDD_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3889 {
3890 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
3891
3892 return offset;
3893 }
3894
3895 static int
3896 winreg_dissect_element_OpenHKDD_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3897 {
3898 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKDD_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
3899
3900 return offset;
3901 }
3902
3903 static int
3904 winreg_dissect_element_OpenHKDD_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3905 {
3906 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
3907
3908 return offset;
3909 }
3910
3911 /* IDL: WERROR winreg_OpenHKDD( */
3912 /* IDL: [in] [unique(1)] uint16 *system_name, */
3913 /* IDL: [in] winreg_AccessMask access_mask, */
3914 /* IDL: [out] [ref] policy_handle *handle */
3915 /* IDL: ); */
3916
3917 static int
3918 winreg_dissect_OpenHKDD_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3919 {
3920 uint32_t status;
3921
3922 di->dcerpc_procedure_name="OpenHKDD";
3923 offset = winreg_dissect_element_OpenHKDD_handle(tvb, offset, pinfo, tree, di, drep);
3924 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3925
3926 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
3927
3928 if (status != 0)
3929 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
3930
3931 return offset;
3932 }
3933
3934 static int
3935 winreg_dissect_OpenHKDD_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3936 {
3937 di->dcerpc_procedure_name="OpenHKDD";
3938 offset = winreg_dissect_element_OpenHKDD_system_name(tvb, offset, pinfo, tree, di, drep);
3939 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3940 offset = winreg_dissect_element_OpenHKDD_access_mask(tvb, offset, pinfo, tree, di, drep);
3941 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
3942 return offset;
3943 }
3944
3945 static int
3946 winreg_dissect_element_QueryMultipleValues_key_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3947 {
3948 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues_key_handle_, NDR_POINTER_REF, "Pointer to Key Handle (policy_handle)",hf_winreg_winreg_QueryMultipleValues_key_handle);
3949
3950 return offset;
3951 }
3952
3953 static int
3954 winreg_dissect_element_QueryMultipleValues_key_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3955 {
3956 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues_key_handle, 0);
3957
3958 return offset;
3959 }
3960
3961 static int
3962 winreg_dissect_element_QueryMultipleValues_values_in(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3963 {
3964 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues_values_in_, NDR_POINTER_REF, "Pointer to Values In (QueryMultipleValue)",hf_winreg_winreg_QueryMultipleValues_values_in);
3965
3966 return offset;
3967 }
3968
3969 static int
3970 winreg_dissect_element_QueryMultipleValues_values_in_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3971 {
3972 struct ndr_generic_array nga = { .is_conformant = false, };
3973
3974 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
3975
3976 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
3977
3978 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryMultipleValues_values_in__);
3979
3980 return offset;
3981 }
3982
3983 static int
3984 winreg_dissect_element_QueryMultipleValues_values_in__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3985 {
3986 offset = winreg_dissect_struct_QueryMultipleValue(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_QueryMultipleValues_values_in,0);
3987
3988 return offset;
3989 }
3990
3991 static int
3992 winreg_dissect_element_QueryMultipleValues_values_out(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
3993 {
3994 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues_values_out_, NDR_POINTER_REF, "Pointer to Values Out (QueryMultipleValue)",hf_winreg_winreg_QueryMultipleValues_values_out);
3995
3996 return offset;
3997 }
3998
3999 static int
4000 winreg_dissect_element_QueryMultipleValues_values_out_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4001 {
4002 struct ndr_generic_array nga = { .is_conformant = false, };
4003
4004 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4005
4006 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4007
4008 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryMultipleValues_values_out__);
4009
4010 return offset;
4011 }
4012
4013 static int
4014 winreg_dissect_element_QueryMultipleValues_values_out__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4015 {
4016 offset = winreg_dissect_struct_QueryMultipleValue(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_QueryMultipleValues_values_out,0);
4017
4018 return offset;
4019 }
4020
4021 static int
4022 winreg_dissect_element_QueryMultipleValues_num_values(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4023 {
4024 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues_num_values, 0);
4025
4026 return offset;
4027 }
4028
4029 static int
4030 winreg_dissect_element_QueryMultipleValues_buffer(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4031 {
4032 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues_buffer_, NDR_POINTER_UNIQUE, "Pointer to Buffer (uint8)",hf_winreg_winreg_QueryMultipleValues_buffer);
4033
4034 return offset;
4035 }
4036
4037 static int
4038 winreg_dissect_element_QueryMultipleValues_buffer_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4039 {
4040 struct ndr_generic_array nga = { .is_conformant = false, };
4041
4042 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4043
4044 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4045
4046 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryMultipleValues_buffer__);
4047
4048 return offset;
4049 }
4050
4051 static int
4052 winreg_dissect_element_QueryMultipleValues_buffer__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4053 {
4054 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues_buffer, 0);
4055
4056 return offset;
4057 }
4058
4059 static int
4060 winreg_dissect_element_QueryMultipleValues_buffer_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4061 {
4062 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues_buffer_size_, NDR_POINTER_REF, "Pointer to Buffer Size (uint32)",hf_winreg_winreg_QueryMultipleValues_buffer_size);
4063
4064 return offset;
4065 }
4066
4067 static int
4068 winreg_dissect_element_QueryMultipleValues_buffer_size_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4069 {
4070 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues_buffer_size, 0);
4071
4072 return offset;
4073 }
4074
4075 /* IDL: WERROR winreg_QueryMultipleValues( */
4076 /* IDL: [in] [ref] policy_handle *key_handle, */
4077 /* IDL: [in] [length_is(num_values)] [ref] [size_is(num_values)] QueryMultipleValue *values_in, */
4078 /* IDL: [length_is(num_values)] [out] [ref] [size_is(num_values)] QueryMultipleValue *values_out, */
4079 /* IDL: [in] uint32 num_values, */
4080 /* IDL: [in] [length_is(*buffer_size)] [out] [size_is(*buffer_size)] [unique(1)] uint8 *buffer, */
4081 /* IDL: [in] [out] [ref] uint32 *buffer_size */
4082 /* IDL: ); */
4083
4084 static int
4085 winreg_dissect_QueryMultipleValues_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4086 {
4087 uint32_t status;
4088
4089 di->dcerpc_procedure_name="QueryMultipleValues";
4090 offset = winreg_dissect_element_QueryMultipleValues_values_out(tvb, offset, pinfo, tree, di, drep);
4091 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4092
4093 offset = winreg_dissect_element_QueryMultipleValues_buffer(tvb, offset, pinfo, tree, di, drep);
4094 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4095
4096 offset = winreg_dissect_element_QueryMultipleValues_buffer_size(tvb, offset, pinfo, tree, di, drep);
4097 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4098
4099 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4100
4101 if (status != 0)
4102 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4103
4104 return offset;
4105 }
4106
4107 static int
4108 winreg_dissect_QueryMultipleValues_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4109 {
4110 di->dcerpc_procedure_name="QueryMultipleValues";
4111 offset = winreg_dissect_element_QueryMultipleValues_key_handle(tvb, offset, pinfo, tree, di, drep);
4112 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4113 offset = winreg_dissect_element_QueryMultipleValues_values_in(tvb, offset, pinfo, tree, di, drep);
4114 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4115 offset = winreg_dissect_element_QueryMultipleValues_num_values(tvb, offset, pinfo, tree, di, drep);
4116 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4117 offset = winreg_dissect_element_QueryMultipleValues_buffer(tvb, offset, pinfo, tree, di, drep);
4118 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4119 offset = winreg_dissect_element_QueryMultipleValues_buffer_size(tvb, offset, pinfo, tree, di, drep);
4120 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4121 return offset;
4122 }
4123
4124 static int
4125 winreg_dissect_element_InitiateSystemShutdownEx_hostname(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4126 {
4127 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_InitiateSystemShutdownEx_hostname_, NDR_POINTER_UNIQUE, "Pointer to Hostname (uint16)",hf_winreg_winreg_InitiateSystemShutdownEx_hostname);
4128
4129 return offset;
4130 }
4131
4132 static int
4133 winreg_dissect_element_InitiateSystemShutdownEx_hostname_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4134 {
4135 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdownEx_hostname, 0);
4136
4137 return offset;
4138 }
4139
4140 static int
4141 winreg_dissect_element_InitiateSystemShutdownEx_message(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4142 {
4143 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_InitiateSystemShutdownEx_message_, NDR_POINTER_UNIQUE, "Pointer to Message (lsa_StringLarge)",hf_winreg_winreg_InitiateSystemShutdownEx_message);
4144
4145 return offset;
4146 }
4147
4148 static int
4149 winreg_dissect_element_InitiateSystemShutdownEx_message_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4150 {
4151 offset=lsarpc_dissect_struct_lsa_StringLarge(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdownEx_message, 0);
4152
4153 return offset;
4154 }
4155
4156 static int
4157 winreg_dissect_element_InitiateSystemShutdownEx_timeout(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4158 {
4159 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdownEx_timeout, 0);
4160
4161 return offset;
4162 }
4163
4164 static int
4165 winreg_dissect_element_InitiateSystemShutdownEx_force_apps(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4166 {
4167 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdownEx_force_apps, 0);
4168
4169 return offset;
4170 }
4171
4172 static int
4173 winreg_dissect_element_InitiateSystemShutdownEx_do_reboot(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4174 {
4175 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdownEx_do_reboot, 0);
4176
4177 return offset;
4178 }
4179
4180 static int
4181 winreg_dissect_element_InitiateSystemShutdownEx_reason(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4182 {
4183 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_InitiateSystemShutdownEx_reason, 0);
4184
4185 return offset;
4186 }
4187
4188 /* IDL: WERROR winreg_InitiateSystemShutdownEx( */
4189 /* IDL: [in] [unique(1)] uint16 *hostname, */
4190 /* IDL: [in] [unique(1)] lsa_StringLarge *message, */
4191 /* IDL: [in] uint32 timeout, */
4192 /* IDL: [in] uint8 force_apps, */
4193 /* IDL: [in] uint8 do_reboot, */
4194 /* IDL: [in] uint32 reason */
4195 /* IDL: ); */
4196
4197 static int
4198 winreg_dissect_InitiateSystemShutdownEx_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4199 {
4200 uint32_t status;
4201
4202 di->dcerpc_procedure_name="InitiateSystemShutdownEx";
4203 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4204
4205 if (status != 0)
4206 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4207
4208 return offset;
4209 }
4210
4211 static int
4212 winreg_dissect_InitiateSystemShutdownEx_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4213 {
4214 di->dcerpc_procedure_name="InitiateSystemShutdownEx";
4215 offset = winreg_dissect_element_InitiateSystemShutdownEx_hostname(tvb, offset, pinfo, tree, di, drep);
4216 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4217 offset = winreg_dissect_element_InitiateSystemShutdownEx_message(tvb, offset, pinfo, tree, di, drep);
4218 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4219 offset = winreg_dissect_element_InitiateSystemShutdownEx_timeout(tvb, offset, pinfo, tree, di, drep);
4220 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4221 offset = winreg_dissect_element_InitiateSystemShutdownEx_force_apps(tvb, offset, pinfo, tree, di, drep);
4222 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4223 offset = winreg_dissect_element_InitiateSystemShutdownEx_do_reboot(tvb, offset, pinfo, tree, di, drep);
4224 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4225 offset = winreg_dissect_element_InitiateSystemShutdownEx_reason(tvb, offset, pinfo, tree, di, drep);
4226 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4227 return offset;
4228 }
4229
4230 static int
4231 winreg_dissect_element_SaveKeyEx_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4232 {
4233 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SaveKeyEx_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_winreg_SaveKeyEx_handle);
4234
4235 return offset;
4236 }
4237
4238 static int
4239 winreg_dissect_element_SaveKeyEx_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4240 {
4241 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SaveKeyEx_handle, 0);
4242
4243 return offset;
4244 }
4245
4246 static int
4247 winreg_dissect_element_SaveKeyEx_filename(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4248 {
4249 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SaveKeyEx_filename_, NDR_POINTER_REF, "Pointer to Filename (winreg_String)",hf_winreg_winreg_SaveKeyEx_filename);
4250
4251 return offset;
4252 }
4253
4254 static int
4255 winreg_dissect_element_SaveKeyEx_filename_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4256 {
4257 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_SaveKeyEx_filename);
4258
4259 return offset;
4260 }
4261
4262 static int
4263 winreg_dissect_element_SaveKeyEx_sec_attrib(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4264 {
4265 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_SaveKeyEx_sec_attrib_, NDR_POINTER_UNIQUE, "Pointer to Sec Attrib (KeySecurityAttribute)",hf_winreg_winreg_SaveKeyEx_sec_attrib);
4266
4267 return offset;
4268 }
4269
4270 static int
4271 winreg_dissect_element_SaveKeyEx_sec_attrib_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4272 {
4273 offset = winreg_dissect_struct_KeySecurityAttribute(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_SaveKeyEx_sec_attrib,0);
4274
4275 return offset;
4276 }
4277
4278 static int
4279 winreg_dissect_element_SaveKeyEx_flags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4280 {
4281 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_SaveKeyEx_flags, 0);
4282
4283 return offset;
4284 }
4285
4286 /* IDL: WERROR winreg_SaveKeyEx( */
4287 /* IDL: [in] [ref] policy_handle *handle, */
4288 /* IDL: [in] [ref] winreg_String *filename, */
4289 /* IDL: [in] [unique(1)] KeySecurityAttribute *sec_attrib, */
4290 /* IDL: [in] uint32 flags */
4291 /* IDL: ); */
4292
4293 static int
4294 winreg_dissect_SaveKeyEx_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4295 {
4296 uint32_t status;
4297
4298 di->dcerpc_procedure_name="SaveKeyEx";
4299 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4300
4301 if (status != 0)
4302 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4303
4304 return offset;
4305 }
4306
4307 static int
4308 winreg_dissect_SaveKeyEx_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4309 {
4310 di->dcerpc_procedure_name="SaveKeyEx";
4311 offset = winreg_dissect_element_SaveKeyEx_handle(tvb, offset, pinfo, tree, di, drep);
4312 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4313 offset = winreg_dissect_element_SaveKeyEx_filename(tvb, offset, pinfo, tree, di, drep);
4314 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4315 offset = winreg_dissect_element_SaveKeyEx_sec_attrib(tvb, offset, pinfo, tree, di, drep);
4316 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4317 offset = winreg_dissect_element_SaveKeyEx_flags(tvb, offset, pinfo, tree, di, drep);
4318 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4319 return offset;
4320 }
4321
4322 static int
4323 winreg_dissect_element_OpenHKPT_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4324 {
4325 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKPT_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
4326
4327 return offset;
4328 }
4329
4330 static int
4331 winreg_dissect_element_OpenHKPT_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4332 {
4333 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
4334
4335 return offset;
4336 }
4337
4338 static int
4339 winreg_dissect_element_OpenHKPT_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4340 {
4341 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
4342
4343 return offset;
4344 }
4345
4346 static int
4347 winreg_dissect_element_OpenHKPT_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4348 {
4349 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKPT_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
4350
4351 return offset;
4352 }
4353
4354 static int
4355 winreg_dissect_element_OpenHKPT_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4356 {
4357 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
4358
4359 return offset;
4360 }
4361
4362 /* IDL: WERROR winreg_OpenHKPT( */
4363 /* IDL: [in] [unique(1)] uint16 *system_name, */
4364 /* IDL: [in] winreg_AccessMask access_mask, */
4365 /* IDL: [out] [ref] policy_handle *handle */
4366 /* IDL: ); */
4367
4368 static int
4369 winreg_dissect_OpenHKPT_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4370 {
4371 uint32_t status;
4372
4373 di->dcerpc_procedure_name="OpenHKPT";
4374 offset = winreg_dissect_element_OpenHKPT_handle(tvb, offset, pinfo, tree, di, drep);
4375 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4376
4377 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4378
4379 if (status != 0)
4380 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4381
4382 return offset;
4383 }
4384
4385 static int
4386 winreg_dissect_OpenHKPT_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4387 {
4388 di->dcerpc_procedure_name="OpenHKPT";
4389 offset = winreg_dissect_element_OpenHKPT_system_name(tvb, offset, pinfo, tree, di, drep);
4390 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4391 offset = winreg_dissect_element_OpenHKPT_access_mask(tvb, offset, pinfo, tree, di, drep);
4392 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4393 return offset;
4394 }
4395
4396 static int
4397 winreg_dissect_element_OpenHKPN_system_name(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4398 {
4399 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKPN_system_name_, NDR_POINTER_UNIQUE, "Pointer to System Name (uint16)",hf_winreg_system_name);
4400
4401 return offset;
4402 }
4403
4404 static int
4405 winreg_dissect_element_OpenHKPN_system_name_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4406 {
4407 offset = PIDL_dissect_uint16(tvb, offset, pinfo, tree, di, drep, hf_winreg_system_name, 0);
4408
4409 return offset;
4410 }
4411
4412 static int
4413 winreg_dissect_element_OpenHKPN_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4414 {
4415 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_access_mask, 0);
4416
4417 return offset;
4418 }
4419
4420 static int
4421 winreg_dissect_element_OpenHKPN_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4422 {
4423 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_OpenHKPN_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_handle);
4424
4425 return offset;
4426 }
4427
4428 static int
4429 winreg_dissect_element_OpenHKPN_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4430 {
4431 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_handle, PIDL_POLHND_OPEN);
4432
4433 return offset;
4434 }
4435
4436 /* IDL: WERROR winreg_OpenHKPN( */
4437 /* IDL: [in] [unique(1)] uint16 *system_name, */
4438 /* IDL: [in] winreg_AccessMask access_mask, */
4439 /* IDL: [out] [ref] policy_handle *handle */
4440 /* IDL: ); */
4441
4442 static int
4443 winreg_dissect_OpenHKPN_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4444 {
4445 uint32_t status;
4446
4447 di->dcerpc_procedure_name="OpenHKPN";
4448 offset = winreg_dissect_element_OpenHKPN_handle(tvb, offset, pinfo, tree, di, drep);
4449 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4450
4451 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4452
4453 if (status != 0)
4454 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4455
4456 return offset;
4457 }
4458
4459 static int
4460 winreg_dissect_OpenHKPN_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4461 {
4462 di->dcerpc_procedure_name="OpenHKPN";
4463 offset = winreg_dissect_element_OpenHKPN_system_name(tvb, offset, pinfo, tree, di, drep);
4464 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4465 offset = winreg_dissect_element_OpenHKPN_access_mask(tvb, offset, pinfo, tree, di, drep);
4466 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4467 return offset;
4468 }
4469
4470 static int
4471 winreg_dissect_element_QueryMultipleValues2_key_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4472 {
4473 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues2_key_handle_, NDR_POINTER_REF, "Pointer to Key Handle (policy_handle)",hf_winreg_winreg_QueryMultipleValues2_key_handle);
4474
4475 return offset;
4476 }
4477
4478 static int
4479 winreg_dissect_element_QueryMultipleValues2_key_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4480 {
4481 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues2_key_handle, 0);
4482
4483 return offset;
4484 }
4485
4486 static int
4487 winreg_dissect_element_QueryMultipleValues2_values_in(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4488 {
4489 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues2_values_in_, NDR_POINTER_REF, "Pointer to Values In (QueryMultipleValue)",hf_winreg_winreg_QueryMultipleValues2_values_in);
4490
4491 return offset;
4492 }
4493
4494 static int
4495 winreg_dissect_element_QueryMultipleValues2_values_in_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4496 {
4497 struct ndr_generic_array nga = { .is_conformant = false, };
4498
4499 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4500
4501 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4502
4503 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryMultipleValues2_values_in__);
4504
4505 return offset;
4506 }
4507
4508 static int
4509 winreg_dissect_element_QueryMultipleValues2_values_in__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4510 {
4511 offset = winreg_dissect_struct_QueryMultipleValue(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_QueryMultipleValues2_values_in,0);
4512
4513 return offset;
4514 }
4515
4516 static int
4517 winreg_dissect_element_QueryMultipleValues2_values_out(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4518 {
4519 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues2_values_out_, NDR_POINTER_REF, "Pointer to Values Out (QueryMultipleValue)",hf_winreg_winreg_QueryMultipleValues2_values_out);
4520
4521 return offset;
4522 }
4523
4524 static int
4525 winreg_dissect_element_QueryMultipleValues2_values_out_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4526 {
4527 struct ndr_generic_array nga = { .is_conformant = false, };
4528
4529 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4530
4531 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4532
4533 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryMultipleValues2_values_out__);
4534
4535 return offset;
4536 }
4537
4538 static int
4539 winreg_dissect_element_QueryMultipleValues2_values_out__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4540 {
4541 offset = winreg_dissect_struct_QueryMultipleValue(tvb,offset,pinfo,tree,di,drep,hf_winreg_winreg_QueryMultipleValues2_values_out,0);
4542
4543 return offset;
4544 }
4545
4546 static int
4547 winreg_dissect_element_QueryMultipleValues2_num_values(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4548 {
4549 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues2_num_values, 0);
4550
4551 return offset;
4552 }
4553
4554 static int
4555 winreg_dissect_element_QueryMultipleValues2_buffer(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4556 {
4557 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues2_buffer_, NDR_POINTER_UNIQUE, "Pointer to Buffer (uint8)",hf_winreg_winreg_QueryMultipleValues2_buffer);
4558
4559 return offset;
4560 }
4561
4562 static int
4563 winreg_dissect_element_QueryMultipleValues2_buffer_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4564 {
4565 struct ndr_generic_array nga = { .is_conformant = false, };
4566
4567 offset = dissect_ndr_conformant_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4568
4569 offset = dissect_ndr_varying_array_hdr(tvb, offset, pinfo, tree, di, drep, &nga);
4570
4571 offset = dissect_ndr_generic_array_bytes(tvb, offset, pinfo, tree, di, drep, &nga, winreg_dissect_element_QueryMultipleValues2_buffer__);
4572
4573 return offset;
4574 }
4575
4576 static int
4577 winreg_dissect_element_QueryMultipleValues2_buffer__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4578 {
4579 offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues2_buffer, 0);
4580
4581 return offset;
4582 }
4583
4584 static int
4585 winreg_dissect_element_QueryMultipleValues2_offered(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4586 {
4587 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues2_offered_, NDR_POINTER_REF, "Pointer to Offered (uint32)",hf_winreg_winreg_QueryMultipleValues2_offered);
4588
4589 return offset;
4590 }
4591
4592 static int
4593 winreg_dissect_element_QueryMultipleValues2_offered_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4594 {
4595 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues2_offered, 0);
4596
4597 return offset;
4598 }
4599
4600 static int
4601 winreg_dissect_element_QueryMultipleValues2_needed(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4602 {
4603 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_QueryMultipleValues2_needed_, NDR_POINTER_REF, "Pointer to Needed (uint32)",hf_winreg_winreg_QueryMultipleValues2_needed);
4604
4605 return offset;
4606 }
4607
4608 static int
4609 winreg_dissect_element_QueryMultipleValues2_needed_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4610 {
4611 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_QueryMultipleValues2_needed, 0);
4612
4613 return offset;
4614 }
4615
4616 /* IDL: WERROR winreg_QueryMultipleValues2( */
4617 /* IDL: [in] [ref] policy_handle *key_handle, */
4618 /* IDL: [in] [length_is(num_values)] [ref] [size_is(num_values)] QueryMultipleValue *values_in, */
4619 /* IDL: [length_is(num_values)] [out] [ref] [size_is(num_values)] QueryMultipleValue *values_out, */
4620 /* IDL: [in] uint32 num_values, */
4621 /* IDL: [in] [length_is(*offered)] [out] [size_is(*offered)] [unique(1)] uint8 *buffer, */
4622 /* IDL: [in] [ref] uint32 *offered, */
4623 /* IDL: [out] [ref] uint32 *needed */
4624 /* IDL: ); */
4625
4626 static int
4627 winreg_dissect_QueryMultipleValues2_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4628 {
4629 uint32_t status;
4630
4631 di->dcerpc_procedure_name="QueryMultipleValues2";
4632 offset = winreg_dissect_element_QueryMultipleValues2_values_out(tvb, offset, pinfo, tree, di, drep);
4633 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4634
4635 offset = winreg_dissect_element_QueryMultipleValues2_buffer(tvb, offset, pinfo, tree, di, drep);
4636 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4637
4638 offset = winreg_dissect_element_QueryMultipleValues2_needed(tvb, offset, pinfo, tree, di, drep);
4639 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4640
4641 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4642
4643 if (status != 0)
4644 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4645
4646 return offset;
4647 }
4648
4649 static int
4650 winreg_dissect_QueryMultipleValues2_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4651 {
4652 di->dcerpc_procedure_name="QueryMultipleValues2";
4653 offset = winreg_dissect_element_QueryMultipleValues2_key_handle(tvb, offset, pinfo, tree, di, drep);
4654 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4655 offset = winreg_dissect_element_QueryMultipleValues2_values_in(tvb, offset, pinfo, tree, di, drep);
4656 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4657 offset = winreg_dissect_element_QueryMultipleValues2_num_values(tvb, offset, pinfo, tree, di, drep);
4658 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4659 offset = winreg_dissect_element_QueryMultipleValues2_buffer(tvb, offset, pinfo, tree, di, drep);
4660 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4661 offset = winreg_dissect_element_QueryMultipleValues2_offered(tvb, offset, pinfo, tree, di, drep);
4662 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4663 return offset;
4664 }
4665
4666 static int
4667 winreg_dissect_element_DeleteKeyEx_handle(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4668 {
4669 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_DeleteKeyEx_handle_, NDR_POINTER_REF, "Pointer to Handle (policy_handle)",hf_winreg_winreg_DeleteKeyEx_handle);
4670
4671 return offset;
4672 }
4673
4674 static int
4675 winreg_dissect_element_DeleteKeyEx_handle_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4676 {
4677 offset = PIDL_dissect_policy_hnd(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_DeleteKeyEx_handle, 0);
4678
4679 return offset;
4680 }
4681
4682 static int
4683 winreg_dissect_element_DeleteKeyEx_key(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4684 {
4685 offset = dissect_ndr_toplevel_pointer(tvb, offset, pinfo, tree, di, drep, winreg_dissect_element_DeleteKeyEx_key_, NDR_POINTER_REF, "Pointer to Key (winreg_String)",hf_winreg_winreg_DeleteKeyEx_key);
4686
4687 return offset;
4688 }
4689
4690 static int
4691 winreg_dissect_element_DeleteKeyEx_key_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4692 {
4693 offset=cnf_dissect_winreg_String(tvb, offset, pinfo, tree, di, drep, 0, hf_winreg_winreg_DeleteKeyEx_key);
4694
4695 return offset;
4696 }
4697
4698 static int
4699 winreg_dissect_element_DeleteKeyEx_access_mask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4700 {
4701 offset = winreg_dissect_bitmap_AccessMask(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_DeleteKeyEx_access_mask, 0);
4702
4703 return offset;
4704 }
4705
4706 static int
4707 winreg_dissect_element_DeleteKeyEx_reserved(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4708 {
4709 offset = PIDL_dissect_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_winreg_DeleteKeyEx_reserved, 0);
4710
4711 return offset;
4712 }
4713
4714 /* IDL: WERROR winreg_DeleteKeyEx( */
4715 /* IDL: [in] [ref] policy_handle *handle, */
4716 /* IDL: [in] [ref] winreg_String *key, */
4717 /* IDL: [in] winreg_AccessMask access_mask, */
4718 /* IDL: [in] uint32 reserved */
4719 /* IDL: ); */
4720
4721 static int
4722 winreg_dissect_DeleteKeyEx_response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4723 {
4724 uint32_t status;
4725
4726 di->dcerpc_procedure_name="DeleteKeyEx";
4727 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, di, drep, hf_winreg_werror, &status);
4728
4729 if (status != 0)
4730 col_append_fstr(pinfo->cinfo, COL_INFO, ", Error: %s", val_to_str_ext(status, &WERR_errors_ext, "Unknown DOS error 0x%08x"));
4731
4732 return offset;
4733 }
4734
4735 static int
4736 winreg_dissect_DeleteKeyEx_request(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_)
4737 {
4738 di->dcerpc_procedure_name="DeleteKeyEx";
4739 offset = winreg_dissect_element_DeleteKeyEx_handle(tvb, offset, pinfo, tree, di, drep);
4740 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4741 offset = winreg_dissect_element_DeleteKeyEx_key(tvb, offset, pinfo, tree, di, drep);
4742 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4743 offset = winreg_dissect_element_DeleteKeyEx_access_mask(tvb, offset, pinfo, tree, di, drep);
4744 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4745 offset = winreg_dissect_element_DeleteKeyEx_reserved(tvb, offset, pinfo, tree, di, drep);
4746 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
4747 return offset;
4748 }
4749
4750
4751 static const dcerpc_sub_dissector winreg_dissectors[] = {
4752 { 0, "OpenHKCR",
4753 winreg_dissect_OpenHKCR_request, winreg_dissect_OpenHKCR_response},
4754 { 1, "OpenHKCU",
4755 winreg_dissect_OpenHKCU_request, winreg_dissect_OpenHKCU_response},
4756 { 2, "OpenHKLM",
4757 winreg_dissect_OpenHKLM_request, winreg_dissect_OpenHKLM_response},
4758 { 3, "OpenHKPD",
4759 winreg_dissect_OpenHKPD_request, winreg_dissect_OpenHKPD_response},
4760 { 4, "OpenHKU",
4761 winreg_dissect_OpenHKU_request, winreg_dissect_OpenHKU_response},
4762 { 5, "CloseKey",
4763 winreg_dissect_CloseKey_request, winreg_dissect_CloseKey_response},
4764 { 6, "CreateKey",
4765 winreg_dissect_CreateKey_request, winreg_dissect_CreateKey_response},
4766 { 7, "DeleteKey",
4767 winreg_dissect_DeleteKey_request, winreg_dissect_DeleteKey_response},
4768 { 8, "DeleteValue",
4769 winreg_dissect_DeleteValue_request, winreg_dissect_DeleteValue_response},
4770 { 9, "EnumKey",
4771 winreg_dissect_EnumKey_request, winreg_dissect_EnumKey_response},
4772 { 10, "EnumValue",
4773 winreg_dissect_EnumValue_request, winreg_dissect_EnumValue_response},
4774 { 11, "FlushKey",
4775 winreg_dissect_FlushKey_request, winreg_dissect_FlushKey_response},
4776 { 12, "GetKeySecurity",
4777 winreg_dissect_GetKeySecurity_request, winreg_dissect_GetKeySecurity_response},
4778 { 13, "LoadKey",
4779 winreg_dissect_LoadKey_request, winreg_dissect_LoadKey_response},
4780 { 14, "NotifyChangeKeyValue",
4781 winreg_dissect_NotifyChangeKeyValue_request, winreg_dissect_NotifyChangeKeyValue_response},
4782 { 15, "OpenKey",
4783 winreg_dissect_OpenKey_request, winreg_dissect_OpenKey_response},
4784 { 16, "QueryInfoKey",
4785 winreg_dissect_QueryInfoKey_request, winreg_dissect_QueryInfoKey_response},
4786 { 17, "QueryValue",
4787 winreg_dissect_QueryValue_request, winreg_dissect_QueryValue_response},
4788 { 18, "ReplaceKey",
4789 winreg_dissect_ReplaceKey_request, winreg_dissect_ReplaceKey_response},
4790 { 19, "RestoreKey",
4791 winreg_dissect_RestoreKey_request, winreg_dissect_RestoreKey_response},
4792 { 20, "SaveKey",
4793 winreg_dissect_SaveKey_request, winreg_dissect_SaveKey_response},
4794 { 21, "SetKeySecurity",
4795 winreg_dissect_SetKeySecurity_request, winreg_dissect_SetKeySecurity_response},
4796 { 22, "SetValue",
4797 winreg_dissect_SetValue_request, winreg_dissect_SetValue_response},
4798 { 23, "UnLoadKey",
4799 winreg_dissect_UnLoadKey_request, winreg_dissect_UnLoadKey_response},
4800 { 24, "InitiateSystemShutdown",
4801 winreg_dissect_InitiateSystemShutdown_request, winreg_dissect_InitiateSystemShutdown_response},
4802 { 25, "AbortSystemShutdown",
4803 winreg_dissect_AbortSystemShutdown_request, winreg_dissect_AbortSystemShutdown_response},
4804 { 26, "GetVersion",
4805 winreg_dissect_GetVersion_request, winreg_dissect_GetVersion_response},
4806 { 27, "OpenHKCC",
4807 winreg_dissect_OpenHKCC_request, winreg_dissect_OpenHKCC_response},
4808 { 28, "OpenHKDD",
4809 winreg_dissect_OpenHKDD_request, winreg_dissect_OpenHKDD_response},
4810 { 29, "QueryMultipleValues",
4811 winreg_dissect_QueryMultipleValues_request, winreg_dissect_QueryMultipleValues_response},
4812 { 30, "InitiateSystemShutdownEx",
4813 winreg_dissect_InitiateSystemShutdownEx_request, winreg_dissect_InitiateSystemShutdownEx_response},
4814 { 31, "SaveKeyEx",
4815 winreg_dissect_SaveKeyEx_request, winreg_dissect_SaveKeyEx_response},
4816 { 32, "OpenHKPT",
4817 winreg_dissect_OpenHKPT_request, winreg_dissect_OpenHKPT_response},
4818 { 33, "OpenHKPN",
4819 winreg_dissect_OpenHKPN_request, winreg_dissect_OpenHKPN_response},
4820 { 34, "QueryMultipleValues2",
4821 winreg_dissect_QueryMultipleValues2_request, winreg_dissect_QueryMultipleValues2_response},
4822 { 35, "DeleteKeyEx",
4823 winreg_dissect_DeleteKeyEx_request, winreg_dissect_DeleteKeyEx_response},
4824 { 0, NULL, NULL, NULL }
4825 };
4826
4827 void proto_register_dcerpc_winreg(void)
4828 {
4829 static hf_register_info hf[] = {
4830 { &hf_winreg_KeySecurityAttribute_data_size,
4831 { "Data Size", "winreg.KeySecurityAttribute.data_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4832 { &hf_winreg_KeySecurityAttribute_inherit,
4833 { "Inherit", "winreg.KeySecurityAttribute.inherit", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4834 { &hf_winreg_KeySecurityAttribute_sec_data,
4835 { "Sec Data", "winreg.KeySecurityAttribute.sec_data", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4836 { &hf_winreg_KeySecurityData_data,
4837 { "Data", "winreg.KeySecurityData.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4838 { &hf_winreg_KeySecurityData_len,
4839 { "Len", "winreg.KeySecurityData.len", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4840 { &hf_winreg_KeySecurityData_size,
4841 { "Size", "winreg.KeySecurityData.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4842 { &hf_winreg_QueryMultipleValue_ve_type,
4843 { "Ve Type", "winreg.QueryMultipleValue.ve_type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4844 { &hf_winreg_QueryMultipleValue_ve_valuelen,
4845 { "Ve Valuelen", "winreg.QueryMultipleValue.ve_valuelen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4846 { &hf_winreg_QueryMultipleValue_ve_valuename,
4847 { "Ve Valuename", "winreg.QueryMultipleValue.ve_valuename", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4848 { &hf_winreg_QueryMultipleValue_ve_valueptr,
4849 { "Ve Valueptr", "winreg.QueryMultipleValue.ve_valueptr", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4850 { &hf_winreg_access_mask,
4851 { "Access Mask", "winreg.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4852 { &hf_winreg_handle,
4853 { "Handle", "winreg.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
4854 { &hf_winreg_opnum,
4855 { "Operation", "winreg.opnum", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
4856 { &hf_winreg_sd,
4857 { "KeySecurityData", "winreg.sd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4858 { &hf_winreg_sd_actual_size,
4859 { "Actual Size", "winreg.sd.actual_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4860 { &hf_winreg_sd_max_size,
4861 { "Max Size", "winreg.sd.max_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4862 { &hf_winreg_sd_offset,
4863 { "Offset", "winreg.sd.offset", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4864 { &hf_winreg_system_name,
4865 { "System Name", "winreg.system_name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
4866 { &hf_winreg_werror,
4867 { "Windows Error", "winreg.werror", FT_UINT32, BASE_HEX|BASE_EXT_STRING, &WERR_errors_ext, 0, NULL, HFILL }},
4868 { &hf_winreg_winreg_AbortSystemShutdown_server,
4869 { "Server", "winreg.winreg_AbortSystemShutdown.server", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
4870 { &hf_winreg_winreg_AccessMask_KEY_CREATE_LINK,
4871 { "KEY CREATE LINK", "winreg.winreg_AccessMask.KEY_CREATE_LINK", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_CREATE_LINK_tfs), ( 0x00000020 ), NULL, HFILL }},
4872 { &hf_winreg_winreg_AccessMask_KEY_CREATE_SUB_KEY,
4873 { "KEY CREATE SUB KEY", "winreg.winreg_AccessMask.KEY_CREATE_SUB_KEY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_CREATE_SUB_KEY_tfs), ( 0x00000004 ), NULL, HFILL }},
4874 { &hf_winreg_winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS,
4875 { "KEY ENUMERATE SUB KEYS", "winreg.winreg_AccessMask.KEY_ENUMERATE_SUB_KEYS", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_ENUMERATE_SUB_KEYS_tfs), ( 0x00000008 ), NULL, HFILL }},
4876 { &hf_winreg_winreg_AccessMask_KEY_NOTIFY,
4877 { "KEY NOTIFY", "winreg.winreg_AccessMask.KEY_NOTIFY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_NOTIFY_tfs), ( 0x00000010 ), NULL, HFILL }},
4878 { &hf_winreg_winreg_AccessMask_KEY_QUERY_VALUE,
4879 { "KEY QUERY VALUE", "winreg.winreg_AccessMask.KEY_QUERY_VALUE", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_QUERY_VALUE_tfs), ( 0x00000001 ), NULL, HFILL }},
4880 { &hf_winreg_winreg_AccessMask_KEY_SET_VALUE,
4881 { "KEY SET VALUE", "winreg.winreg_AccessMask.KEY_SET_VALUE", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_SET_VALUE_tfs), ( 0x00000002 ), NULL, HFILL }},
4882 { &hf_winreg_winreg_AccessMask_KEY_WOW64_32KEY,
4883 { "KEY WOW64 32KEY", "winreg.winreg_AccessMask.KEY_WOW64_32KEY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_WOW64_32KEY_tfs), ( 0x00000200 ), NULL, HFILL }},
4884 { &hf_winreg_winreg_AccessMask_KEY_WOW64_64KEY,
4885 { "KEY WOW64 64KEY", "winreg.winreg_AccessMask.KEY_WOW64_64KEY", FT_BOOLEAN, 32, TFS(&winreg_AccessMask_KEY_WOW64_64KEY_tfs), ( 0x00000100 ), NULL, HFILL }},
4886 { &hf_winreg_winreg_CreateKey_action_taken,
4887 { "Action Taken", "winreg.winreg_CreateKey.action_taken", FT_UINT32, BASE_DEC, VALS(winreg_winreg_CreateAction_vals), 0, NULL, HFILL }},
4888 { &hf_winreg_winreg_CreateKey_keyclass,
4889 { "Keyclass", "winreg.winreg_CreateKey.keyclass", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4890 { &hf_winreg_winreg_CreateKey_name,
4891 { "Name", "winreg.winreg_CreateKey.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4892 { &hf_winreg_winreg_CreateKey_new_handle,
4893 { "New Handle", "winreg.winreg_CreateKey.new_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
4894 { &hf_winreg_winreg_CreateKey_options,
4895 { "Options", "winreg.winreg_CreateKey.options", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4896 { &hf_winreg_winreg_CreateKey_secdesc,
4897 { "Secdesc", "winreg.winreg_CreateKey.secdesc", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4898 { &hf_winreg_winreg_DeleteKeyEx_access_mask,
4899 { "Access Mask", "winreg.winreg_DeleteKeyEx.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4900 { &hf_winreg_winreg_DeleteKeyEx_handle,
4901 { "Handle", "winreg.winreg_DeleteKeyEx.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
4902 { &hf_winreg_winreg_DeleteKeyEx_key,
4903 { "Key", "winreg.winreg_DeleteKeyEx.key", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4904 { &hf_winreg_winreg_DeleteKeyEx_reserved,
4905 { "Reserved", "winreg.winreg_DeleteKeyEx.reserved", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4906 { &hf_winreg_winreg_DeleteKey_key,
4907 { "Key", "winreg.winreg_DeleteKey.key", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4908 { &hf_winreg_winreg_DeleteValue_value,
4909 { "Value", "winreg.winreg_DeleteValue.value", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4910 { &hf_winreg_winreg_EnumKey_enum_index,
4911 { "Enum Index", "winreg.winreg_EnumKey.enum_index", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4912 { &hf_winreg_winreg_EnumKey_keyclass,
4913 { "Keyclass", "winreg.winreg_EnumKey.keyclass", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4914 { &hf_winreg_winreg_EnumKey_last_changed_time,
4915 { "Last Changed Time", "winreg.winreg_EnumKey.last_changed_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
4916 { &hf_winreg_winreg_EnumKey_name,
4917 { "Name", "winreg.winreg_EnumKey.name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4918 { &hf_winreg_winreg_EnumValue_enum_index,
4919 { "Enum Index", "winreg.winreg_EnumValue.enum_index", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4920 { &hf_winreg_winreg_EnumValue_length,
4921 { "Length", "winreg.winreg_EnumValue.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4922 { &hf_winreg_winreg_EnumValue_name,
4923 { "Name", "winreg.winreg_EnumValue.name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4924 { &hf_winreg_winreg_EnumValue_size,
4925 { "Size", "winreg.winreg_EnumValue.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4926 { &hf_winreg_winreg_EnumValue_type,
4927 { "Type", "winreg.winreg_EnumValue.type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4928 { &hf_winreg_winreg_EnumValue_value,
4929 { "Value", "winreg.winreg_EnumValue.value", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4930 { &hf_winreg_winreg_GetKeySecurity_sec_info,
4931 { "Sec Info", "winreg.winreg_GetKeySecurity.sec_info", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4932 { &hf_winreg_winreg_GetVersion_version,
4933 { "Version", "winreg.winreg_GetVersion.version", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4934 { &hf_winreg_winreg_InitiateSystemShutdownEx_do_reboot,
4935 { "Do Reboot", "winreg.winreg_InitiateSystemShutdownEx.do_reboot", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4936 { &hf_winreg_winreg_InitiateSystemShutdownEx_force_apps,
4937 { "Force Apps", "winreg.winreg_InitiateSystemShutdownEx.force_apps", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4938 { &hf_winreg_winreg_InitiateSystemShutdownEx_hostname,
4939 { "Hostname", "winreg.winreg_InitiateSystemShutdownEx.hostname", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
4940 { &hf_winreg_winreg_InitiateSystemShutdownEx_message,
4941 { "Message", "winreg.winreg_InitiateSystemShutdownEx.message", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4942 { &hf_winreg_winreg_InitiateSystemShutdownEx_reason,
4943 { "Reason", "winreg.winreg_InitiateSystemShutdownEx.reason", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4944 { &hf_winreg_winreg_InitiateSystemShutdownEx_timeout,
4945 { "Timeout", "winreg.winreg_InitiateSystemShutdownEx.timeout", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4946 { &hf_winreg_winreg_InitiateSystemShutdown_do_reboot,
4947 { "Do Reboot", "winreg.winreg_InitiateSystemShutdown.do_reboot", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4948 { &hf_winreg_winreg_InitiateSystemShutdown_force_apps,
4949 { "Force Apps", "winreg.winreg_InitiateSystemShutdown.force_apps", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4950 { &hf_winreg_winreg_InitiateSystemShutdown_hostname,
4951 { "Hostname", "winreg.winreg_InitiateSystemShutdown.hostname", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
4952 { &hf_winreg_winreg_InitiateSystemShutdown_message,
4953 { "Message", "winreg.winreg_InitiateSystemShutdown.message", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
4954 { &hf_winreg_winreg_InitiateSystemShutdown_timeout,
4955 { "Timeout", "winreg.winreg_InitiateSystemShutdown.timeout", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4956 { &hf_winreg_winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE,
4957 { "REG OPTION BACKUP RESTORE", "winreg.winreg_KeyOptions.REG_OPTION_BACKUP_RESTORE", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_BACKUP_RESTORE_tfs), ( 0x00000004 ), NULL, HFILL }},
4958 { &hf_winreg_winreg_KeyOptions_REG_OPTION_CREATE_LINK,
4959 { "REG OPTION CREATE LINK", "winreg.winreg_KeyOptions.REG_OPTION_CREATE_LINK", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_CREATE_LINK_tfs), ( 0x00000002 ), NULL, HFILL }},
4960 { &hf_winreg_winreg_KeyOptions_REG_OPTION_OPEN_LINK,
4961 { "REG OPTION OPEN LINK", "winreg.winreg_KeyOptions.REG_OPTION_OPEN_LINK", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_OPEN_LINK_tfs), ( 0x00000008 ), NULL, HFILL }},
4962 { &hf_winreg_winreg_KeyOptions_REG_OPTION_VOLATILE,
4963 { "REG OPTION VOLATILE", "winreg.winreg_KeyOptions.REG_OPTION_VOLATILE", FT_BOOLEAN, 32, TFS(&winreg_KeyOptions_REG_OPTION_VOLATILE_tfs), ( 0x00000001 ), NULL, HFILL }},
4964 { &hf_winreg_winreg_LoadKey_filename,
4965 { "Filename", "winreg.winreg_LoadKey.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4966 { &hf_winreg_winreg_LoadKey_keyname,
4967 { "Keyname", "winreg.winreg_LoadKey.keyname", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4968 { &hf_winreg_winreg_NotifyChangeKeyValue_notify_filter,
4969 { "Notify Filter", "winreg.winreg_NotifyChangeKeyValue.notify_filter", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4970 { &hf_winreg_winreg_NotifyChangeKeyValue_string1,
4971 { "String1", "winreg.winreg_NotifyChangeKeyValue.string1", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4972 { &hf_winreg_winreg_NotifyChangeKeyValue_string2,
4973 { "String2", "winreg.winreg_NotifyChangeKeyValue.string2", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4974 { &hf_winreg_winreg_NotifyChangeKeyValue_unknown,
4975 { "Unknown", "winreg.winreg_NotifyChangeKeyValue.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4976 { &hf_winreg_winreg_NotifyChangeKeyValue_unknown2,
4977 { "Unknown2", "winreg.winreg_NotifyChangeKeyValue.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
4978 { &hf_winreg_winreg_NotifyChangeKeyValue_watch_subtree,
4979 { "Watch Subtree", "winreg.winreg_NotifyChangeKeyValue.watch_subtree", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
4980 { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES,
4981 { "REG NOTIFY CHANGE ATTRIBUTES", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_ATTRIBUTES", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_ATTRIBUTES_tfs), ( 0x00000002 ), NULL, HFILL }},
4982 { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET,
4983 { "REG NOTIFY CHANGE LAST SET", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_LAST_SET", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_LAST_SET_tfs), ( 0x00000004 ), NULL, HFILL }},
4984 { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME,
4985 { "REG NOTIFY CHANGE NAME", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_NAME", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_NAME_tfs), ( 0x00000001 ), NULL, HFILL }},
4986 { &hf_winreg_winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY,
4987 { "REG NOTIFY CHANGE SECURITY", "winreg.winreg_NotifyChangeType.REG_NOTIFY_CHANGE_SECURITY", FT_BOOLEAN, 32, TFS(&winreg_NotifyChangeType_REG_NOTIFY_CHANGE_SECURITY_tfs), ( 0x00000008 ), NULL, HFILL }},
4988 { &hf_winreg_winreg_OpenHKCU_access_mask,
4989 { "Access Mask", "winreg.winreg_OpenHKCU.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4990 { &hf_winreg_winreg_OpenHKPD_access_mask,
4991 { "Access Mask", "winreg.winreg_OpenHKPD.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4992 { &hf_winreg_winreg_OpenKey_access_mask,
4993 { "Access Mask", "winreg.winreg_OpenKey.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4994 { &hf_winreg_winreg_OpenKey_keyname,
4995 { "Keyname", "winreg.winreg_OpenKey.keyname", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
4996 { &hf_winreg_winreg_OpenKey_options,
4997 { "Options", "winreg.winreg_OpenKey.options", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
4998 { &hf_winreg_winreg_OpenKey_parent_handle,
4999 { "Parent Handle", "winreg.winreg_OpenKey.parent_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5000 { &hf_winreg_winreg_QueryInfoKey_classname,
5001 { "Classname", "winreg.winreg_QueryInfoKey.classname", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5002 { &hf_winreg_winreg_QueryInfoKey_last_changed_time,
5003 { "Last Changed Time", "winreg.winreg_QueryInfoKey.last_changed_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
5004 { &hf_winreg_winreg_QueryInfoKey_max_classlen,
5005 { "Max Classlen", "winreg.winreg_QueryInfoKey.max_classlen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5006 { &hf_winreg_winreg_QueryInfoKey_max_subkeylen,
5007 { "Max Subkeylen", "winreg.winreg_QueryInfoKey.max_subkeylen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5008 { &hf_winreg_winreg_QueryInfoKey_max_valbufsize,
5009 { "Max Valbufsize", "winreg.winreg_QueryInfoKey.max_valbufsize", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5010 { &hf_winreg_winreg_QueryInfoKey_max_valnamelen,
5011 { "Max Valnamelen", "winreg.winreg_QueryInfoKey.max_valnamelen", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5012 { &hf_winreg_winreg_QueryInfoKey_num_subkeys,
5013 { "Num Subkeys", "winreg.winreg_QueryInfoKey.num_subkeys", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5014 { &hf_winreg_winreg_QueryInfoKey_num_values,
5015 { "Num Values", "winreg.winreg_QueryInfoKey.num_values", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5016 { &hf_winreg_winreg_QueryInfoKey_secdescsize,
5017 { "Secdescsize", "winreg.winreg_QueryInfoKey.secdescsize", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5018 { &hf_winreg_winreg_QueryMultipleValues2_buffer,
5019 { "Buffer", "winreg.winreg_QueryMultipleValues2.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
5020 { &hf_winreg_winreg_QueryMultipleValues2_key_handle,
5021 { "Key Handle", "winreg.winreg_QueryMultipleValues2.key_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5022 { &hf_winreg_winreg_QueryMultipleValues2_needed,
5023 { "Needed", "winreg.winreg_QueryMultipleValues2.needed", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5024 { &hf_winreg_winreg_QueryMultipleValues2_num_values,
5025 { "Num Values", "winreg.winreg_QueryMultipleValues2.num_values", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5026 { &hf_winreg_winreg_QueryMultipleValues2_offered,
5027 { "Offered", "winreg.winreg_QueryMultipleValues2.offered", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5028 { &hf_winreg_winreg_QueryMultipleValues2_values_in,
5029 { "Values In", "winreg.winreg_QueryMultipleValues2.values_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5030 { &hf_winreg_winreg_QueryMultipleValues2_values_out,
5031 { "Values Out", "winreg.winreg_QueryMultipleValues2.values_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5032 { &hf_winreg_winreg_QueryMultipleValues_buffer,
5033 { "Buffer", "winreg.winreg_QueryMultipleValues.buffer", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
5034 { &hf_winreg_winreg_QueryMultipleValues_buffer_size,
5035 { "Buffer Size", "winreg.winreg_QueryMultipleValues.buffer_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5036 { &hf_winreg_winreg_QueryMultipleValues_key_handle,
5037 { "Key Handle", "winreg.winreg_QueryMultipleValues.key_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5038 { &hf_winreg_winreg_QueryMultipleValues_num_values,
5039 { "Num Values", "winreg.winreg_QueryMultipleValues.num_values", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5040 { &hf_winreg_winreg_QueryMultipleValues_values_in,
5041 { "Values In", "winreg.winreg_QueryMultipleValues.values_in", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5042 { &hf_winreg_winreg_QueryMultipleValues_values_out,
5043 { "Values Out", "winreg.winreg_QueryMultipleValues.values_out", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5044 { &hf_winreg_winreg_QueryValue_data,
5045 { "Data", "winreg.winreg_QueryValue.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
5046 { &hf_winreg_winreg_QueryValue_data_length,
5047 { "Data Length", "winreg.winreg_QueryValue.data_length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5048 { &hf_winreg_winreg_QueryValue_data_size,
5049 { "Data Size", "winreg.winreg_QueryValue.data_size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5050 { &hf_winreg_winreg_QueryValue_type,
5051 { "Type", "winreg.winreg_QueryValue.type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5052 { &hf_winreg_winreg_QueryValue_value_name,
5053 { "Value Name", "winreg.winreg_QueryValue.value_name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5054 { &hf_winreg_winreg_ReplaceKey_handle,
5055 { "Handle", "winreg.winreg_ReplaceKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5056 { &hf_winreg_winreg_ReplaceKey_new_file,
5057 { "New File", "winreg.winreg_ReplaceKey.new_file", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5058 { &hf_winreg_winreg_ReplaceKey_old_file,
5059 { "Old File", "winreg.winreg_ReplaceKey.old_file", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5060 { &hf_winreg_winreg_ReplaceKey_subkey,
5061 { "Subkey", "winreg.winreg_ReplaceKey.subkey", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5062 { &hf_winreg_winreg_RestoreKeyFlags_REG_FORCE_RESTORE,
5063 { "REG FORCE RESTORE", "winreg.winreg_RestoreKeyFlags.REG_FORCE_RESTORE", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_FORCE_RESTORE_tfs), ( 0x00000008 ), NULL, HFILL }},
5064 { &hf_winreg_winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH,
5065 { "REG NO LAZY FLUSH", "winreg.winreg_RestoreKeyFlags.REG_NO_LAZY_FLUSH", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_NO_LAZY_FLUSH_tfs), ( 0x00000004 ), NULL, HFILL }},
5066 { &hf_winreg_winreg_RestoreKeyFlags_REG_REFRESH_HIVE,
5067 { "REG REFRESH HIVE", "winreg.winreg_RestoreKeyFlags.REG_REFRESH_HIVE", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_REFRESH_HIVE_tfs), ( 0x00000002 ), NULL, HFILL }},
5068 { &hf_winreg_winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE,
5069 { "REG WHOLE HIVE VOLATILE", "winreg.winreg_RestoreKeyFlags.REG_WHOLE_HIVE_VOLATILE", FT_BOOLEAN, 32, TFS(&winreg_RestoreKeyFlags_REG_WHOLE_HIVE_VOLATILE_tfs), ( 0x00000001 ), NULL, HFILL }},
5070 { &hf_winreg_winreg_RestoreKey_filename,
5071 { "Filename", "winreg.winreg_RestoreKey.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5072 { &hf_winreg_winreg_RestoreKey_flags,
5073 { "Flags", "winreg.winreg_RestoreKey.flags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
5074 { &hf_winreg_winreg_RestoreKey_handle,
5075 { "Handle", "winreg.winreg_RestoreKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5076 { &hf_winreg_winreg_SaveKeyEx_filename,
5077 { "Filename", "winreg.winreg_SaveKeyEx.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5078 { &hf_winreg_winreg_SaveKeyEx_flags,
5079 { "Flags", "winreg.winreg_SaveKeyEx.flags", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5080 { &hf_winreg_winreg_SaveKeyEx_handle,
5081 { "Handle", "winreg.winreg_SaveKeyEx.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5082 { &hf_winreg_winreg_SaveKeyEx_sec_attrib,
5083 { "Sec Attrib", "winreg.winreg_SaveKeyEx.sec_attrib", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5084 { &hf_winreg_winreg_SaveKey_filename,
5085 { "Filename", "winreg.winreg_SaveKey.filename", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5086 { &hf_winreg_winreg_SaveKey_handle,
5087 { "Handle", "winreg.winreg_SaveKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5088 { &hf_winreg_winreg_SaveKey_sec_attrib,
5089 { "Sec Attrib", "winreg.winreg_SaveKey.sec_attrib", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5090 { &hf_winreg_winreg_SecBuf_inherit,
5091 { "Inherit", "winreg.winreg_SecBuf.inherit", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
5092 { &hf_winreg_winreg_SecBuf_length,
5093 { "Length", "winreg.winreg_SecBuf.length", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5094 { &hf_winreg_winreg_SecBuf_sd,
5095 { "Sd", "winreg.winreg_SecBuf.sd", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5096 { &hf_winreg_winreg_SetKeySecurity_sec_info,
5097 { "Sec Info", "winreg.winreg_SetKeySecurity.sec_info", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
5098 { &hf_winreg_winreg_SetValue_data,
5099 { "Data", "winreg.winreg_SetValue.data", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
5100 { &hf_winreg_winreg_SetValue_name,
5101 { "Name", "winreg.winreg_SetValue.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5102 { &hf_winreg_winreg_SetValue_size,
5103 { "Size", "winreg.winreg_SetValue.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
5104 { &hf_winreg_winreg_SetValue_type,
5105 { "Type", "winreg.winreg_SetValue.type", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
5106 { &hf_winreg_winreg_StringBuf_length,
5107 { "Length", "winreg.winreg_StringBuf.length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5108 { &hf_winreg_winreg_StringBuf_name,
5109 { "Name", "winreg.winreg_StringBuf.name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5110 { &hf_winreg_winreg_StringBuf_size,
5111 { "Size", "winreg.winreg_StringBuf.size", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5112 { &hf_winreg_winreg_String_name,
5113 { "Name", "winreg.winreg_String.name", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5114 { &hf_winreg_winreg_String_name_len,
5115 { "Name Len", "winreg.winreg_String.name_len", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5116 { &hf_winreg_winreg_String_name_size,
5117 { "Name Size", "winreg.winreg_String.name_size", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5118 { &hf_winreg_winreg_UnLoadKey_handle,
5119 { "Handle", "winreg.winreg_UnLoadKey.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
5120 { &hf_winreg_winreg_UnLoadKey_subkey,
5121 { "Subkey", "winreg.winreg_UnLoadKey.subkey", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }},
5122 { &hf_winreg_winreg_ValNameBuf_length,
5123 { "Length", "winreg.winreg_ValNameBuf.length", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5124 { &hf_winreg_winreg_ValNameBuf_name,
5125 { "Name", "winreg.winreg_ValNameBuf.name", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5126 { &hf_winreg_winreg_ValNameBuf_size,
5127 { "Size", "winreg.winreg_ValNameBuf.size", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
5128 };
5129
5130
5131 static int *ett[] = {
5132 &ett_dcerpc_winreg,
5133 &ett_winreg_security_secinfo,
5134 &ett_winreg_winreg_AccessMask,
5135 &ett_winreg_winreg_String,
5136 &ett_winreg_KeySecurityData,
5137 &ett_winreg_winreg_SecBuf,
5138 &ett_winreg_winreg_KeyOptions,
5139 &ett_winreg_winreg_StringBuf,
5140 &ett_winreg_winreg_ValNameBuf,
5141 &ett_winreg_winreg_NotifyChangeType,
5142 &ett_winreg_winreg_RestoreKeyFlags,
5143 &ett_winreg_KeySecurityAttribute,
5144 &ett_winreg_QueryMultipleValue,
5145 };
5146
5147 proto_dcerpc_winreg = proto_register_protocol("Remote Registry Service", "WINREG", "winreg");
5148 proto_register_field_array(proto_dcerpc_winreg, hf, array_length (hf));
5149 proto_register_subtree_array(ett, array_length(ett));
5150 }
5151
5152 void proto_reg_handoff_dcerpc_winreg(void)
5153 {
5154 dcerpc_init_uuid(proto_dcerpc_winreg, ett_dcerpc_winreg,
5155 &uuid_dcerpc_winreg, ver_dcerpc_winreg,
5156 winreg_dissectors, hf_winreg_opnum);
5157 }
Metzes wireshark repo