Thanks to some external help, there can be some improvements here
- Rename to
AddressListRuleElementData or something equivalent
- May actually be reading an
ADRLIST here. Read the numberOfValues and values as a ADRLIST structure.
- May actually be reading
ADRENTRY here. Read unknown as ulReserved1 etc.
- Need to confirm what the
propertyBlockDataSize field is - this doesn't appear in the ADRENTRY docs...
- Need to validate the reading of
PT_BINARY properties. Currently we use data2 as the offset and data3 as the count of bytes, but this is reversed in the SBinary documentation
- May actually be reading
SPropValue here. Read data1 as dwAlignPad and data2/data3 as _PV. Need to confirm how offsets are encoded as the SPropValue docs specify that multi-byte fields within _PV are pointers, but it seems that they are offsets into the file... Confusing!
/cc @dmitry007
Thanks to some external help, there can be some improvements here
PeopleOrPublicGroupListRuleElementData
AddressListRuleElementDataor something equivalentADRLISThere. Read thenumberOfValuesandvaluesas a ADRLIST structure.PropertiesList
ADRENTRYhere. ReadunknownasulReserved1etc.propertyBlockDataSizefield is - this doesn't appear in the ADRENTRY docs...PT_BINARYproperties. Currently we usedata2as the offset anddata3as the count of bytes, but this is reversed in the SBinary documentationPropertyValueHeader
SPropValuehere. Readdata1asdwAlignPadanddata2/data3as_PV. Need to confirm how offsets are encoded as the SPropValue docs specify that multi-byte fields within_PVare pointers, but it seems that they are offsets into the file... Confusing!/cc @dmitry007