Paip. regf File Read and edit

Paip. regf File Read and edit

 

 

The regf file is the binary file of the Registry .. you can read the registry data ..

You can use Regedit to mount it to view its information.

 

Hive format...

Hive Structure Analysis

Before recognizing a real hive file, let's list several main features of the hive file. First, presenting them will help us understand their file organization and data structure.

L The Registry consists of multiple hive files.

L a hive file consists of multiple bins. The first part of the hive file has a file header (Basic Block, base
Block is used to describe some global information of the hive file.

L a bin is composed of multiple cells. cells can be divided into five types (described later) for storing different registry data.

In this article, we do not use the English words hive, bin, and cell, but alternate with the corresponding Chinese words. In Chinese, they correspond to three terms: nest, nest, and nest.

 

Reference

Regf parsing of hive file format in Windows Registry-[sharing for everyone-Renren]