Jump to content











Photo
- - - - -

RawReg


  • Please log in to reply
38 replies to this topic

#26 erwan.l

erwan.l

    Gold Member

  • Developer
  • 2286 posts
  • Location:Nantes - France
  •  
    France

Posted 07 December 2011 - 07:44 PM

I am not sure mixing both tools is a good idea.
Not only do they use a complete approach (raw vs library) but they also have a slightly different scope : offline is meant to be simple and command line oriented where rawreg is clearly an advanced/expert tool with a gui/

Regards,
Erwan

#27 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 14258 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 07 December 2011 - 07:47 PM

They are different things. RawReg provides details and features not available on the MS libraries.

For example, it provides details about the physical offfset location of keys inside the registry. It can see the raw format, meaning that keys with invalid format that are typically used by root kits to conceal data are perfectly visible on rawreg.

Also, it does not require administrative permissions to edit any key inside the registry, while the libraries will enforce security policies and prevent protected keys from being edited unless the current user holds permission to do so.

So, MS is indeed more reliable but they are not really opening things up that much.. :)

Exactly :) that's why I suggested "parallel" development. :thumbsup:
If something is available in the "MS library", use it.
If something is NOT available in it, use the experimental approach implemented in RawReg.
Compare results for those "features" that are availalble in both (correct issues - if any ).

This said, the "right" approach is still, and still IMHO, the "other" one :whistling:.

Anyway, just ideas....

:cheers:
Wonko

#28 pscEx

pscEx

    Platinum Member

  • Team Reboot
  • 12701 posts
  • Location:Korschenbroich, Germany
  • Interests:What somebody else cannot do.
  •  
    European Union

Posted 07 December 2011 - 09:25 PM

IMHO some of the last posts are BullS***.

It does not make any sence to compare a MS independent tool with a MS dependent tool.
It does not make any sence to think about combining a MS independent tool with a MS dependent tool.

@Nuno: Great (to be improved :cheers: ) tool!
@erwan.l: I appreciate your offer to continue the development of this tool.
@Paraglider: IMO you only tell possible difficulties and "think about-s". But I do not see further proposals.
@Wonko: As usual, sophisticated and correct comments and correct enumeration of possible issues. But I do not see further proposals.

Peter

#29 pscEx

pscEx

    Platinum Member

  • Team Reboot
  • 12701 posts
  • Location:Korschenbroich, Germany
  • Interests:What somebody else cannot do.
  •  
    European Union

Posted 07 December 2011 - 10:49 PM

Because Nuno and erwan.l blocked their PM, here a message I sent to them:

Just for info for Erwan (Nuno possibly remembers):
I have SVN copy of this tool since 2008.
The SVN server changed in between, and maybe there is no longer edit access. I did not try ...
Peter


Peter

#30 Nuno Brito

Nuno Brito

    Platinum Member

  • .script developer
  • 10522 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 08 December 2011 - 10:45 AM

I didn't disabled my PM, it was night time and I was sleeping so I couldn't reply right away. Already replied to the message some hours ago.. :loleverybody:

#31 pscEx

pscEx

    Platinum Member

  • Team Reboot
  • 12701 posts
  • Location:Korschenbroich, Germany
  • Interests:What somebody else cannot do.
  •  
    European Union

Posted 08 December 2011 - 10:56 AM

I didn't disabled my PM, it was night time and I was sleeping so I couldn't reply right away. Already replied to the message some hours ago.. :loleverybody:

I think that I misunderstood the software.

There was a red "Block" at your names. Now I know that that means "Block PMs to you from that person" rather than "That person has blocked PMs".

Sorry :frusty:

Peter

#32 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 14258 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 08 December 2011 - 12:40 PM

@pscEx
At the risk :ph34r: of seeming more picky :w00t: than I really am (but not much ;)), "parallel":
http://www.thefreedi...ry.com/parallel

has actually a VERY different meaning from "combine":
http://www.thefreedi...ary.com/combine

The former means "keeping separate and at a given same distance whilst leading in the same direction", the latter means "merge, join, become united".

:cheers:
Wonko

#33 sambul61

sambul61

    Gold Member

  • Advanced user
  • 1568 posts
  •  
    American Samoa

Posted 08 December 2011 - 01:14 PM

While in fact it might make perfect sense to combine and selectively use depending on a particular task several routings in a new single tool, regardless whether some of them are MS dependent or not. :lightbulb:

#34 paraglider

paraglider

    Gold Member

  • .script developer
  • 1719 posts
  • Location:NC,USA
  •  
    United States

Posted 08 December 2011 - 01:23 PM

One approach would be separating the registry api in Nuno's tool from the UI and wrapping the api with functions of the same name and format as the MS raw api.

I would suspect anyway that Nuno seperated the UI and internal registry api anyway as he already stated that he wanted to use the raw access in winbuilder.

That way you could relatively easily have 2 versions of the tool - one that uses offreg.dll and one that goes directly to the raw registry.

#35 paraglider

paraglider

    Gold Member

  • .script developer
  • 1719 posts
  • Location:NC,USA
  •  
    United States

Posted 08 December 2011 - 01:26 PM

Regardless think it is more important to get the tool completed than spending too much effort on diversions from that goal.

#36 sambul61

sambul61

    Gold Member

  • Advanced user
  • 1568 posts
  •  
    American Samoa

Posted 08 December 2011 - 01:32 PM

Not 2 versions, but different features of the same tool using different dlls.

"Completed" is quite a vague term given many proposals already made, or in the pipeline. And the "goal" is even more cloudy... :)

#37 sambul61

sambul61

    Gold Member

  • Advanced user
  • 1568 posts
  •  
    American Samoa

Posted 09 December 2011 - 07:32 PM

Just a quick idea, what an advanced Registry manipulation tool can do:

Posted Image

Resplendence Registrar Registry Manager opens System hives of 2 attached VHDs for editing - in this example one with OS installed on a real PC and another inside a VM - and then compares their content. You can change and Save registry hives that were Open for Editing (in separate windows instead of Unloading hives from online OS Registry window). Their copies will be kept in online Registry until OS reboot as TempKeys, but can't be changed from it. Still I'd prefer to see the comparison results in 2 pans opposite to each other and synced similar to Beyond Compare tool.

#38 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 14258 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 05 January 2012 - 02:54 PM

Maybe useful :unsure:, maybe not :ph34r::
http://www.codeproje...B/cs/ScanX.aspx

:cheers:
Wonko

#39 Buster_BSA

Buster_BSA

    Member

  • Developer
  • 57 posts
  •  
    Spain

Posted 27 March 2012 - 09:59 PM

Is the project dead?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users