Jump to content











Photo
- - - - -

offlinereg


  • Please log in to reply
340 replies to this topic

#301 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 17 December 2019 - 06:31 PM

No, the suggested change didn't work, we don't have now the two extra lines at the end, (wich is good) but the "ImagePath"=system32\DRIVERS\wofadk.sys is uncomplete, it seems to me it is necessary to increase the length for the acepted values on the program.

 

I think this is a change erwan.l needs to  do to his program, to make it more reliable.

 

EDIT: But for now it is better to check all hex entries on the GUI, particularly the long ones, and if we know the meaning of the hex value in a human readable way, we can edit that value on the GUI.

 

See attached picture.

 

alacran

Attached Thumbnails

  • Fail.png


#302 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 18 December 2019 - 06:23 PM

No, the suggested change didn't work, we don't have now the two extra lines at the end, (wich is good) but the "ImagePath"=system32\DRIVERS\wofadk.sys is uncomplete, it seems to me it is necessary to increase the length for the acepted values on the program.

 

I think this is a change erwan.l needs to  do to his program, to make it more reliable.

 

EDIT: But for now it is better to check all hex entries on the GUI, particularly the long ones, and if we know the meaning of the hex value in a human readable way, we can edit that value on the GUI.

 

See attached picture.

 

alacran

 

Hi Alacran,

 

I am not very present these days (busy life, changing job, etc) but do read all posts i subscribed.

This one looks like an easy one to fix.

Provide with me the inputs (a reg file?) and the command line you use and I'll tshoot/fix it.

 

Cheers,

Erwan


  • Tokener and alacran like this

#303 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 18 December 2019 - 06:54 PM

Hi erwan.l

 

It is good to talk with you, always very friendly and ready to hear comments.

 

This is the reg file:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk]
"DebugFlags"=dword:00000000
"ErrorControl"=dword:00000001
"Start"=dword:00000000
"SupportedFeatures"=dword:00000003
"Tag"=dword:00000002
"Type"=dword:00000002
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00
"Description"="WofAdk Mini-Filter Driver"
"DisplayName"="WofAdk"
"Group"="FSFilter Compression"
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,77,00,6f,00,66,00,61,00,64,00,6b,\
  00,2e,00,73,00,79,00,73,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances]
"DefaultInstance"="WofAdk Instance"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances\WofAdk Instance]
"Altitude"="40730"
"Flags"=dword:00000000

And I used this command:

 

offlinereg-win64 "C:\temp\Windows\System32\config\system" "D:\Aplicaciones\offlinereg\WofAdk.reg" import WofAdk.reg

 

For more info and some images you can take a look of all details starting from this post: http://reboot.pro/to...-12#entry213603on previous page

 

Thanks very much for this fantastic tool, and for your interest in fixing this issue.

 

Your friend

 

alacran



#304 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 20 December 2019 - 07:26 PM

Also tried offlinereg-win64 "C:\temp\Windows\System32\config\system" " " import WofAdk.reg with same result.  (offlinereg-win64 and WofAdk.reg are on same folder).

 

Just for testing I decided to make a command.txt, to test it this way, this is my manually converted reg to commands:

 

wofadk.txt:

CurrentControlSet\services createkey WofAdk
CurrentControlSet\services\WofAdk setvalue DebugFlags 00000000 4
CurrentControlSet\services\WofAdk setvalue ErrorControl 00000001 4
CurrentControlSet\services\WofAdk setvalue Start 00000000 4
CurrentControlSet\services\WofAdk setvalue SupportedFeatures 00000003 4
CurrentControlSet\services\WofAdk setvalue Tag 00000002 4
CurrentControlSet\services\WofAdk setvalue Type 00000002 4
CurrentControlSet\services\WofAdk setvalue DependOnService FltMgr 7
CurrentControlSet\services\WofAdk setvalue Description "WofAdk Mini-Filter Driver"
CurrentControlSet\services\WofAdk setvalue DisplayName WofAdk
CurrentControlSet\services\WofAdk setvalue Group "FSFilter Compression"
CurrentControlSet\services\WofAdk setvalue ImagePath "system32\DRIVERS\wofadk.sys" 2
CurrentControlSet\services\WofAdk createkey Instances
CurrentControlSet\services\WofAdk\Instances setvalue DefaultInstance "WofAdk Instance"
CurrentControlSet\services\WofAdk\Instances createkey "WofAdk Instance"
"CurrentControlSet\services\WofAdk\Instances\WofAdk Instance" setvalue Altitude 40730
"CurrentControlSet\services\WofAdk\Instances\WofAdk Instance" setvalue Flags 00000000 4

Where the final numbers are:

NO Number = REG_SZ

4 = dword

7 = hex(7) = REG_MULTI_SZ

2 = hex(2) = REG_EXPAND_SZ

 

when running offlinereg-win64 "C:\temp\Windows\System32\config\system" " " run wofadk.txt all is applied fine.
 

Unfortunately it is a tedious and time consuming work to conver the reg file to commands, and in some cases we may not know the human readable translation of the REG_MULTI_SZ [hex(7)] or REG_EXPAND_SZ [hex(2)] values.

 

I found this free tool to convert from both to a human readable translation and vice versa, valid for Windows Registry Editor Versions 4.00 and 5.00, just select what conversion you want, copy the value and make a click on Convert it!, it works fine.

 

OTConvertIt page and dowmload: http://www.geekstogo...04-otconvertit/

 

Hope our fellow erwan.l fix the reg import issue soon, as he mentioned.

 

But on the meantime we have this alternative too.

 

Merry christmas to all

 

alacran


  • Tokener likes this

#305 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 20 December 2019 - 08:48 PM

...

 

For more info and some images you can take a look of all details starting from this post: http://reboot.pro/to...-12#entry213603on previous page

 

Thanks very much for this fantastic tool, and for your interest in fixing this issue.

 

Your friend

 

alacran

 

 

I copy pasted the registry entries from this post to woadk.reg.

 

Then used this command : offlinereg-win64 alacran WofAdk.reg import WofAdk.reg

 

This gave the below output 

[CurrentControlSet\services\WofAdk]
added -> DebugFlags=dword:0
added -> ErrorControl=dword:1
added -> Start=dword:0
added -> SupportedFeatures=dword:3
added -> Tag=dword:2
added -> Type=dword:2
added -> DependOnService=hex(7):FltMgr
added -> Description=string:WofAdk Mini-Filter Driver
added -> DisplayName=string:WofAdk
added -> Group=string:FSFilter Compression
added -> ImagePath=hex(2):system32\DRIVERS\wofadk.sys
[CurrentControlSet\services\WofAdk\Instances]
added -> DefaultInstance=string:WofAdk Instance
[CurrentControlSet\services\WofAdk\Instances\WofAdk Instance]
added -> Altitude=string:40730
added -> Flags=dword:0
saved to alacran ok 

And did not encounter the issue?

Are you using latest version 1.0.3?

 

I copy pasted the registry entries from this post to woadk.reg.

 

Then used this command : offlinereg-win64 alacran WofAdk.reg import WofAdk.reg

 

This gave the below output 

[CurrentControlSet\services\WofAdk]
added -> DebugFlags=dword:0
added -> ErrorControl=dword:1
added -> Start=dword:0
added -> SupportedFeatures=dword:3
added -> Tag=dword:2
added -> Type=dword:2
added -> DependOnService=hex(7):FltMgr
added -> Description=string:WofAdk Mini-Filter Driver
added -> DisplayName=string:WofAdk
added -> Group=string:FSFilter Compression
added -> ImagePath=hex(2):system32\DRIVERS\wofadk.sys
[CurrentControlSet\services\WofAdk\Instances]
added -> DefaultInstance=string:WofAdk Instance
[CurrentControlSet\services\WofAdk\Instances\WofAdk Instance]
added -> Altitude=string:40730
added -> Flags=dword:0
saved to alacran ok 

And did not encounter the issue?

Are you using latest version 1.0.3?

 

jQBRPIO.png



#306 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 20 December 2019 - 09:12 PM

I downloaded your program from the downlad on link on fist post, Is that the 1.03 version?

 

EDIT: Just checked and it is labeled as offlinereg 1.0.3, but, just in case Could you give me a link to your site please?

 

Thanks in advance

 

alacran



#307 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 20 December 2019 - 09:22 PM

I downloaded your program from the downlad on link on fist post,Is that the 1.03 version?

 

EDIT: Just checked and it is labeled as offlinereg 1.0.3, but, just in case Could you give me a link to your site please?

 

Thanks in advance

 

alacran

 

direct link 



#308 Atari800XL

Atari800XL

    Frequent Member

  • Advanced user
  • 192 posts
  •  
    Netherlands

Posted 20 December 2019 - 09:27 PM

Sorry if I forgot something, but why are we using the double mention of the .reg file?

 

offlinereg-win64 alacran WofAdk.reg import WofAdk.reg

Should we not use this?

 

offlinereg-win64 alacran " " import WofAdk.reg

 

Sorry, the double .reg confuses me...?

 



#309 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 20 December 2019 - 09:30 PM

Just tested again, the issue is present here see attached image, I'm on Win7x64, (AV disabled), if this can be a factor to influence this issue.

 

alacran

 

EDIT: I was writing when you put the link, I will test now with a download from your new link, and report back.

Attached Thumbnails

  • offlinereg.png


#310 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 20 December 2019 - 09:33 PM

Sorry if I forgot something, but why are we using the double mention of the .reg file?

 

offlinereg-win64 alacran WofAdk.reg import WofAdk.reg

Should we not use this?

 

offlinereg-win64 alacran " " import WofAdk.reg

 

Sorry, the double .reg confuses me...?

 

correct, type on my end, it should be : offlinereg-win64 alacran " " import WofAdk.reg

 

alacran here is my hive.



#311 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 20 December 2019 - 09:37 PM

Just tested again, the issue is present here see attached image, I'm on Win7x64, (AV disabled), if this can be a factor to influence this issue.

 

alacran

 

EDIT: I was writing when you put the link, I will test now with a download from your new link, and report back.

 

I believe the issue is either with crlf and/or the ucs-2 format (your file has "magical" chars $fffe at the start of the file which you can see in a hex editor).

 

Copy paste the below to fresh new text file and try again to exclude the ucs-2 issue (i.e do not use the reg file generated by regedit).

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk]
"DebugFlags"=dword:00000000
"ErrorControl"=dword:00000001
"Start"=dword:00000000
"SupportedFeatures"=dword:00000003
"Tag"=dword:00000002
"Type"=dword:00000002
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00
"Description"="WofAdk Mini-Filter Driver"
"DisplayName"="WofAdk"
"Group"="FSFilter Compression"
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,77,00,6f,00,66,00,61,00,64,00,6b,\
  00,2e,00,73,00,79,00,73,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances]
"DefaultInstance"="WofAdk Instance"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances\WofAdk Instance]
"Altitude"="40730"
"Flags"=dword:00000000

If still not working, try again with the below

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk]
"DebugFlags"=dword:00000000
"ErrorControl"=dword:00000001
"Start"=dword:00000000
"SupportedFeatures"=dword:00000003
"Tag"=dword:00000002
"Type"=dword:00000002
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00
"Description"="WofAdk Mini-Filter Driver"
"DisplayName"="WofAdk"
"Group"="FSFilter Compression"
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,00,49,00,56,00,45,00,52,00,53,00,5c,00,77,00,6f,00,66,00,61,00,64,00,6b,00,2e,00,73,00,79,00,73,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances]
"DefaultInstance"="WofAdk Instance"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances\WofAdk Instance]
"Altitude"="40730"
"Flags"=dword:00000000


#312 Atari800XL

Atari800XL

    Frequent Member

  • Advanced user
  • 192 posts
  •  
    Netherlands

Posted 20 December 2019 - 09:42 PM

I agree, I think Alacran's reg file got screwed...

Anyway, thanks for clearing up that double .reg thingy (who thought of that, and WHY did it even work!!?



#313 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 20 December 2019 - 09:43 PM

@ erwan.l

 

The files donwnloaded from your last link are the same as I have, but anyway I tested with the just downloaded and same thing.

 

alacran



#314 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 20 December 2019 - 09:55 PM

@ erwan.l

 

Just copied:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk]
"DebugFlags"=dword:00000000
"ErrorControl"=dword:00000001
"Start"=dword:00000000
"SupportedFeatures"=dword:00000003
"Tag"=dword:00000002
"Type"=dword:00000002
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00
"Description"="WofAdk Mini-Filter Driver"
"DisplayName"="WofAdk"
"Group"="FSFilter Compression"
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,77,00,6f,00,66,00,61,00,64,00,6b,\
  00,2e,00,73,00,79,00,73,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances]
"DefaultInstance"="WofAdk Instance"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WofAdk\Instances\WofAdk Instance]
"Altitude"="40730"
"Flags"=dword:00000000

And made new WofAdk.reg and used same command I have been using:

 

offlinereg-win64 "C:\temp\Windows\System32\config\system" " " import WofAdk.reg

 

And all worked fine see attached picture, so this means we can't use reg files generated by regedit or we need to do some trick to them before using, please explain me.

 

EDIT: This test was made on win 7x64 too, I saw your last post after writing mine.

 

alacran

Attached Thumbnails

  • Fine.png


#315 alacran

alacran

    Platinum Member

  • .script developer
  • 2710 posts
  •  
    Mexico

Posted 20 December 2019 - 10:23 PM

Answering myself: (after just testing the following)

 

If we copy the content of a reg file generated by regedit.exe to a new text file and then save it as xxxxx.reg, then it can be used without any problem on Offlinereg.

 

@ erwan.l

 

It is good the issue is very easy to avoid. I suggest you to make a note on first post and on download page about this issue and how to avoid it.

 

Thanks for all your time, I am sorry to disturb you, but I think at the end, it was good to find the cause of the issue and let other people not have same troubles.

 

Offlinereg is working fantastic, thanks for this tool erwan.l, I appreciate a lot your contributions for us.

 

Your friend

 

alacran



#316 wimb

wimb

    Platinum Member

  • Developer
  • 3756 posts
  • Interests:Boot and Install from USB
  •  
    Netherlands

Posted 21 February 2022 - 11:24 AM

offlinereg is quite handy for Offline import of .reg files in SYSTEM and SOFTWARE Hive.

 

Also I have used offlinereg to run .txt files to modify SYSTEM or SOFTWARE Hive.

 

Is there an easy way e.g. an App to convert .reg files to .txt files that can be used with the run option ?

 

How to use offlinereg to modify the DEFAULT Hive or is that option not available ?

My .reg files (may be wrong procedure  :unsure: ) were not imported in DEFAULT registry Hive. I don't know how to do it.

 

What I want is to use offlinereg run option with winpe_system.txt

and winpe_software.txt and winpe_default.txt to fix the registry of winre.wim file in project Make_WinPE.

 

How to make these .txt files from the already available SYSTEM.reg and SOFTWARE.reg and DEFAULT.reg obtained from 10XPE ?

 

How to use offlinereg option in case of DEFAULT Hive ?



#317 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 21 February 2022 - 08:01 PM

offlinereg is quite handy for Offline import of .reg files in SYSTEM and SOFTWARE Hive.

 

Also I have used offlinereg to run .txt files to modify SYSTEM or SOFTWARE Hive.

 

Is there an easy way e.g. an App to convert .reg files to .txt files that can be used with the run option ?

 

How to use offlinereg to modify the DEFAULT Hive or is that option not available ?

My .reg files (may be wrong procedure  unsure.png ) were not imported in DEFAULT registry Hive. I don't know how to do it.

 

What I want is to use offlinereg run option with winpe_system.txt

and winpe_software.txt and winpe_default.txt to fix the registry of winre.wim file in project Make_WinPE.

 

How to make these .txt files from the already available SYSTEM.reg and SOFTWARE.reg and DEFAULT.reg obtained from 10XPE ?

 

How to use offlinereg option in case of DEFAULT Hive ?

 

Hi Wimb,

 

Been a while that I did not put my hands on offlinereg smile.png

But i can sure bring some more improvements or fixes.

 

About converting reg files to txt files (used by offlinereg), I am afraid that there are no such things today as I have made the offlinereg syntax unique and proprietary...

 

What do you mean by default hive?

I know of the bdc, sam, security, system or software hives found under hkey_local_machine.

Do you mean the default user hive? i.e the one under hkey_users\.default ?

If so, this is just another hive/file named default found under c:\windows\system32\config which you can create/modify like any other hive.

 

And if  were to create it from scratch I would start something like below

offlinereg-win64.exe default.hive " " create
offlinereg-win64.exe default.hive " " createkey Environment nobackup

Let me know if this helps or if I missing something.

 

Regards,

Erwan



#318 wimb

wimb

    Platinum Member

  • Developer
  • 3756 posts
  • Interests:Boot and Install from USB
  •  
    Netherlands

Posted 21 February 2022 - 08:57 PM

I would like not to create but to modify Offline the registry file DEFAULT that occurs in \Mount\Windows\System32\config

 

When I use offlinereg for this purpose and try import 10_HKEY_USERS_DEFAULT.reg then file DEFAULT is not changed.

 

Instead offlinereg Creates file 10_HKEY_USERS_DEFAULT.reg.new which is the same as HKEY_USERS_DEFAULT.reg with double linespacing.

 

code used is

offlinereg\offlinereg-win64.exe " & $w7drive & "\Windows\System32\config\DEFAULT " & '"' & " " & '"' & " import " & "10_HKEY_USERS_DEFAULT.reg"

With SYSTEM or SOFTWARE such code works but not with DEFAULT

 

I tried also to remove HKEY_USERS and use [DEFAULT] keys or with [HKEY_LOCAL_MACHINE\DEFAULT] keys but both fail as well.

 

So I think it cannot be done with offlinereg. I can of cource use "reg load" and "reg import"  and "reg unload" that works quite well.



#319 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 21 February 2022 - 09:30 PM

I would like not to create but to modify Offline the registry file DEFAULT that occurs in \Mount\Windows\System32\config
 
When I use offlinereg for this purpose and try import 10_HKEY_USERS_DEFAULT.reg then file DEFAULT is not changed.
 
Instead offlinereg Creates file 10_HKEY_USERS_DEFAULT.reg.new which is the same as HKEY_USERS_DEFAULT.reg with double linespacing.
 
code used is

offlinereg\offlinereg-win64.exe " & $w7drive & "\Windows\System32\config\DEFAULT " & '"' & " " & '"' & " import " & "10_HKEY_USERS_DEFAULT.reg"
With SYSTEM or SOFTWARE such code works but not with DEFAULT
 
I tried also to remove HKEY_USERS and use [DEFAULT] keys or with [HKEY_LOCAL_MACHINE\DEFAULT] keys but both fail as well.
 
So I think it cannot be done with offlinereg. I can of cource use "reg load" and "reg import"  and "reg unload" that works quite well.

Can you share your reg file ?
I will do some test and debug over here.

#320 wimb

wimb

    Platinum Member

  • Developer
  • 3756 posts
  • Interests:Boot and Install from USB
  •  
    Netherlands

Posted 22 February 2022 - 06:54 AM

The Attachment DEFAULT_REG.zip contains DEFAULT Hive from Winre.wim located in folder Windows\System32\Recovery of install.wim from Win10_2004_English_x64.iso

 

The .reg files are made from Export Registry of DEFAULT Hive as made by Win10XPE and contain StartIsBack and PENetwork registry keys.

 

How to use offlinereg\offlinereg-win64.exe on Winre DEFAULT Hive to import 10_HKEY_USERS_DEFAULT.reg file or its variants ?

 

Attached File  DEFAULT_REG.zip   29.44KB   107 downloads



#321 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 22 February 2022 - 08:15 PM

I confirmed that the reg file must contain HKEY_USERS\.DEFAULT not HKEY_USERS\DEFAULT.

Latest version handles HKEY_USERS\.DEFAULT ok.

 

But there is still an issue with @="whatever" (i.e a default value) : need to look at it.

 

A version now correctly handling HKEY_USERS\.DEFAULT here (direct link to my ftp - if reported ok, i'll upload it back over here).

 

/Erwan

 

EDIT.

 

Ok, i was now able to import 10_HKEY_USERS_DOT_DEFAULT.reg without any error.

Thus that would need some more checking/testing : this is hastily fixed on a week day after a shitty day at work : quality sucks here smile.png


  • wimb likes this

#322 wimb

wimb

    Platinum Member

  • Developer
  • 3756 posts
  • Interests:Boot and Install from USB
  •  
    Netherlands

Posted 22 February 2022 - 08:34 PM

Thanks for New version offlinereg and Good to know that the DOT before DEFAULT is required and that Latest version handles HKEY_USERS\.DEFAULT ok.

 

noel informed me that offreg64.dll is also part of recent Win10/11 and may be an Update of that file can help to overcome issues.

 

Will test tomorrow your new offlinereg program.



#323 erwan.l

erwan.l

    Platinum Member

  • Developer
  • 3041 posts
  • Location:Nantes - France
  •  
    France

Posted 22 February 2022 - 08:38 PM

Thanks for New version offlinereg and Good to know that the DOT before DEFAULT is required and that Latest version handles HKEY_USERS\.DEFAULT ok.

 

noel informed me that offreg64.dll is also part of recent Win10/11 and may be an Update of that file can help to overcome issues.

 

Will test tomorrow your new offlinereg program.

 

Nice catch Noel :)

But here I am the guilty one : some sloppy code I wrote.

Latest version should be ok : have a look tomorrow and let me know.

I sense something dodgy with the @ default value but tomorrow is another day...

 

/Erwan



#324 wimb

wimb

    Platinum Member

  • Developer
  • 3756 posts
  • Interests:Boot and Install from USB
  •  
    Netherlands

Posted 23 February 2022 - 05:44 AM

Latest version should be ok : have a look tomorrow and let me know.

I sense something dodgy with the @ default value but tomorrow is another day...

 

 

Import of 10_HKEY_USERS_DOT_DEFAULT.reg is working OK now.  StartIsBack and PENetwork keys appear in DEFAULT Registry Hive.

 

Booting PE_19041_US_E.wim is OK.

 

But I have another issue now: In PE the Desktop background color is black instead of Wallpaper blue, which has to do with ACL I presume.

 

Originally the sequence giving good Desktop Wallpaper color was:

 

reg load >  use SetACL to Take Ownership and Grant full access for TK_DEFAULT hive - Then Import Registry Settings > reg unload

 

I think I need to use reg import so that I have control over permissions.

 

================================================================

 

New version has issue with import of HKEY_LOCAL_MACHINE\SOFTWARE .reg files

 

In that case I get .reg.new files ........ offlinereg program has still issues .....



#325 wimb

wimb

    Platinum Member

  • Developer
  • 3756 posts
  • Interests:Boot and Install from USB
  •  
    Netherlands

Posted 23 February 2022 - 06:53 AM

new offlinereg program has issues in case of SOFTWARE I get the .reg.new files ...






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users