From: Jim Meyering <meyering@redhat.com> --- generator/generator.ml | 12 ++++++------ lib/tools/visualizer.ml | 8 ++++---- perl/lib/Win/Hivex/Regedit.pm | 6 +++--- sh/hivexsh.pod | 24 ++++++++++++------------ 4 files changed, 25 insertions(+), 25 deletions(-) diff --git a/generator/generator.ml b/generator/generator.ml index 8f1f935..31478cd 100755 --- a/generator/generator.ml +++ b/generator/generator.ml @@ -19,16 +19,16 @@ (* This script generates language bindings and some documentation for * hivex. - * + * * After editing this file, run it (./generator/generator.ml) to * regenerate all the output files. 'make' will rerun this * automatically when necessary. Note that if you are using a separate * build directory you must run generator.ml from the _source_ * directory. - * + * * IMPORTANT: This script should NOT print any warnings. If it prints * warnings, you should treat them as errors. - * + * * OCaml tips: (1) In emacs, install tuareg-mode to display and format * OCaml code correctly. 'vim' comes with a good OCaml editing mode by * default. (2) Read the resources at http://ocaml-tutorial.org/ @@ -73,7 +73,7 @@ and argt = (* Note, cannot be NULL/0 unless it (* Hive types, from: * https://secure.wikimedia.org/wikipedia/en/wiki/Windows_Registry#Keys_and_val... - * + * * It's unfortunate that in our original C binding we strayed away from * the names that Windows uses (eg. REG_SZ for strings). We include * both our names and the Windows names. @@ -841,7 +841,7 @@ hivex - Windows Registry \"hive\" extraction library =head1 SYNOPSIS #include <hivex.h> - + "; List.iter ( fun (shortname, style, _, _) -> @@ -3020,7 +3020,7 @@ initlibhivexmod (void) initialized = 1; } " - + and generate_python_py () = generate_header HashStyle LGPLv2plus; diff --git a/lib/tools/visualizer.ml b/lib/tools/visualizer.ml index 5b7ac79..cc71748 100644 --- a/lib/tools/visualizer.ml +++ b/lib/tools/visualizer.ml @@ -83,10 +83,10 @@ let bitmatch header_fields = (* All three GUIDs here confirmed in Windows 7 registries. In * Windows <= 2003 these GUID fields seem to contain junk. - * + * * If you write zeroes to the GUID fields, load and unload in Win7 * REGEDIT, then Windows 7 writes some random GUIDs. - * + * * Also (on Win7) unknownguid1 == unknownguid2. unknownguid3 is * different. *) @@ -414,10 +414,10 @@ let bitmatch nk_fields = * names are usually ASCII, that would be max length of names * 2). * This is a historical maximum, so it can be greater than the * current maximum name field. - * + * * The remaining fields are often non-zero, but the purpose is * unknown. - * + * * In the hives we examined the other fields had values as * follows: * userflags: 0, 2, 0xa, 0xe diff --git a/perl/lib/Win/Hivex/Regedit.pm b/perl/lib/Win/Hivex/Regedit.pm index 9b6a5d5..3d7e5ed 100644 --- a/perl/lib/Win/Hivex/Regedit.pm +++ b/perl/lib/Win/Hivex/Regedit.pm @@ -29,13 +29,13 @@ Win::Hivex::Regedit - Helper for reading and writing regedit format files use Win::Hivex; use Win::Hivex::Regedit qw(reg_import reg_export); - + $h = Win::Hivex->open ('SOFTWARE', write => 1); - + open FILE, "updates.reg"; reg_import (\*FILE, $h); $h->commit (undef); - + reg_export ($h, "\\Microsoft\\Windows NT\\CurrentVersion", \*OUTFILE, prefix => "HKEY_LOCAL_MACHINE\\SOFTWARE"); diff --git a/sh/hivexsh.pod b/sh/hivexsh.pod index a31d9e0..7d7fc0a 100644 --- a/sh/hivexsh.pod +++ b/sh/hivexsh.pod @@ -30,13 +30,13 @@ Or you can start C<hivexsh> without any arguments, and immediately use the C<load> command to load a hive: $ hivexsh - + Welcome to hivexsh, the hivex interactive shell for examining Windows Registry binary hive files. - + Type: 'help' for help with commands 'quit' to quit the shell - +
load software software\>
<fs> download win:c:\windows\system32\config\software software <fs> quit
@@ -198,22 +198,22 @@ The second line of each pair is the value, which has a special format C<type:value> with possible types summarized in the table below: none No data is stored, and the type is set to 0. - + string:abc "abc" is stored as a UTF16-LE-encoded string (type 1). Note that only 7 bit ASCII strings are supported as input. - + expandstring:... Same as string but with type 2. - + dword:0x01234567 A DWORD (type 4) with the hex value 0x01234567. You can also use decimal or octal numbers here. - + qword:0x0123456789abcdef A QWORD (type 11) with the hex value 0x0123456789abcdef. You can also use decimal or octal numbers here. - + hex:<type>:<hexbytes> hex:1:41,00,42,00,43,00,44,00,00,00 This is the generic way to enter any @@ -231,15 +231,15 @@ C<type:value> with possible types summarized in the table below: $ guestfish --ro -i Windows7 - + $ hivexsh software - + Welcome to hivexsh, the hivex interactive shell for examining Windows Registry binary hive files. - + Type: 'help' for help with commands 'quit' to quit the shell - + software\> ls ATI Technologies Classes -- 1.7.6.rc2.302.gc2115