Detect disabled reg_multi_sz elements properly

This commit is contained in:
twangboy 2018-03-16 14:45:06 -06:00
parent 1dcd22e767
commit 661017104b
No known key found for this signature in database
GPG key ID: 93FF3BDEB278C9EB

View file

@ -3430,7 +3430,7 @@ def _processValueItem(element, reg_key, reg_valuename, policy, parent_element,
this_element_value = b''.join([this_element_value.encode('utf-16-le'),
encoded_null])
elif etree.QName(element).localname == 'multiText':
this_vtype = 'REG_MULTI_SZ'
this_vtype = 'REG_MULTI_SZ' if not check_deleted else 'REG_SZ'
if this_element_value is not None:
this_element_value = '{0}{1}{1}'.format(chr(0).join(this_element_value), chr(0))
elif etree.QName(element).localname == 'list':