dcerpc_winreg_QueryValue

[Michael B Allen]

Karl Melcher said:
> OK, thanks for the info.  For now, the Enum function will return the
> information I need, but it is not very efficient.
>
> I have done a bunch of packet captures on QueryValue and the desired
> values
> are being returned in the reply, it is just not getting loaded back into
> the
> .out. structure and a bunch of bytes are being ignored. I need to read
> more
> of the code to better understand how the IDL drives the parsing of the
> reply.

Send me what you have and I'll take a look. I've had a lot of practice
deciphering raw RPCs lately.

Mike