Jump to content











Submitter

SUPPORT TOPIC File Information

  • Submitted: May 10 2013 01:34 PM
  • Last Updated: A week ago
  • File Size: 386.58KB
  • Views: 7194
  • Downloads: 1975

Download offlinereg 0.9.8

- - - - -



Screenshots
Edit : an old thread but this tool was never posted to the downloads file on reboot.pro. Now catching up...

Based on MS WDK (http://msdn.microsof.../ee...7(v=VS.85).aspx), I wrote a command line tool that will allow one to read and write to an offline registry hive.

Command line usage :

OfflineReg a_hive_file a_key_path a_verb [a_value_name] [a_value]

example : OfflineReg "c:\temp\system" a_key getvalue a_value_name
example : OfflineReg "c:\temp\system" key\subkey getvalue a_value_name
example : OfflineReg "c:\temp\system" a_key setvalue a_string_value_name a_new_value
example : OfflineReg "c:\temp\system" a_key setvalue a_dword_value a_dword_value 4
example : OfflineReg "c:\temp\system" a_key setvalue a_qword_value a_qword_value 11
example : OfflineReg "c:\temp\system" a_key setvalue a_binary_value 0a,0b,0c,0d,0e,0f 3
example : OfflineReg "c:\temp\system" a_key_path setvalue a_multi_value_name "blah blah blah" 7
example : OfflineReg "c:\temp\system" a_key_path setvalue a_expand_value_name "blah blah blah" 7
(setvalue will createvalue if value does not exist yet)
example : OfflineReg "c:\temp\system" a_key deletevalue a_value
example : OfflineReg "c:\temp\system" a_key deletekey a_subkey
example : OfflineReg "c:\temp\system" a_key deletekeys
example : OfflineReg "c:\temp\system" a_key createkey a_subkey
example : OfflineReg "c:\temp\system" a_key enumkeys
example : OfflineReg "c:\temp\system" a_key enumvalues
example : OfflineReg "c:\temp\system" a_reg_file import
Example : OfflineReg "c:\temp\system" a_key_path create

A real life example :
OfflineReg "D:\Windows\system32\config\system" ControlSet001\Control\ProductOptions getvalue "ProductType".

Should display :
"ProductType"=WinNT

Regards,
Erwan.

What's New in Version 0.9.8 (See full changelog)

  • v0.1
  • added : getvalue , reg_sz and reg_dword only
  • added : setvalue , bug: last char for value is lost / reg_sz only
  • v0.2
  • added : getvalue , reg_binary and reg_multi_sz supported
  • added : getvalue will display "valuename"=value
  • fixed : setvalue will no longer truncate last char
  • v0.3
  • added : deletevalue
  • added : deletekey
  • v0.4
  • added : createkey
  • added : setvalue will also work work for reg_dword, reg_multi_sz and reg_binary
  • v0.5
  • added : enumkeys
  • added : enumvalues
  • added : getvalue, reg_expand_sz supported
  • added : setvalue, reg_expand_sz supported
  • v0.6
  • added : hive prefix (HKEY_LOCAL_MACHINE, etc) are now handled as well
  • v0.7
  • added : currentcontrolset will be mapped to the right controlset
  • v0.8
  • added : qword support
  • v0.9
  • fixed : support up to 512 length values
  • added : enumallvalues for keynames & values
  • fixed : dynamic memory allocation in getvalue
  • 0.9.1 : (failed) 1st attempt to support 64bits
  • 0.9.2 : exception handler
  • 0.9.3 : human error messages, next to int codes
  • 0.9.4 : nobackup parameter (last) to save to original file
  • 0.9.5 : deletekeys (and all its subkeys)
  • 0.9.6 :
  • added : deletekeys will delete the top (empty) key
  • added : import function (from a reg file)
  • 0.9.7
  • fixed : null string when importing ok
  • fixed : empty keys with subkeys ok
  • added : create a blank hive from scratch
  • 0.9.8
  • fixed : import was incorrectly importing multi_sz and expand_sz string
  • added : getvalue and enumallvalues will report the key type
  • added : setvalue syntax for reg_expand_sz was missing in the help






  • 374 Total Files
  • 13 Total Categories
  • 89 Total Authors
  • 5090702 Total Downloads
  • Discalot Latest File
  • ReTokener Latest Submitter

37 user(s) are online (in the past 3000 minutes)

0 members, 37 guests, 0 anonymous users