[main] Title=RegEdit WB Description=This script loads the target registry hives into Regedit Author=Peter Schlang Level=10 contact=http://BootLand.pt.vu Selected=none Credits= Version=004 Locked=True Date=2006-Nov-20 18:31:05 Updates=http://beta.boot-land.net Upload=2007-Feb-15 14:05:38 Download_Level=0 [Interface] pTextLabel1="This script attaches the registry hives of your target directory to the local registry and runs Regedit ..",1,1,14,26,466,32,9,Normal pTextLabel3="When Regedit is closed, changes are optionally written to the target registry hives.",1,1,14,70,483,22,9,Normal pCheckBox1=Sam,1,3,18,145,200,18,True pCheckBox2=Security,1,3,18,165,200,18,True pCheckBox3=Default,1,3,18,185,200,18,True pCheckBox4=System,1,3,18,205,201,18,True pCheckBox5=Software,1,3,18,225,90,18,True pCheckBox6=Setup,1,3,18,125,90,18,True pRadioButton1=ReadOnly,1,11,167,136,100,20,false pRadioButton2=Read/Write,1,11,167,157,100,20,true pButton1="Load PE Hives",1,8,156,191,95,39,Doit pBevel1=pBevel1,1,12,6,119,264,128 pBevel2=pBevel2,1,12,273,119,212,128 pTextLabel5="Please note: This script can only be started by the 'Load PE Hives' button",1,1,36,256,456,18,10,Normal pTextLabel6="Checked hives are only processed if they exist. No error report is given if a hive does not exist.",1,1,294,140,176,88,12,Normal [AuthorEncoded] regeditwb.gif=1Kb,2Kb Logo=regeditwb.gif [EncodedFile-AuthorEncoded-regeditwb.gif] lines=0 0=eJwd1IlXU2caBvAbFoUABRREFCWA0h5AD6KtqKgpILJZt87UsXVKKa3CsR4QGRksHCAJWVjCXkCIIUE2Id4kLEkIIRvJBYREEQwYETGaACGEtaIB5zK/87zP+f6A9/3ORoQFHv0FDaABLbDJwtz8Czs7REQEcOkScO2aS2gokJAA3LwJpKUBGRneERFRkZERMTEX0tJiY2Li7t5NvHXrTnJyyp07qSkpGRkZQGYm8OIFoFYDBgOwsZHKZP4JgultbWkaTWZmZjYMg8NgcVgYDp+Tk4MnEIg4HAFGJJGIRBLcJFIuKa+ARMrLzYPl5xfA8gsKyYVF5IqKwgIy/IIVFRVvKiktKSkvLS0tK/urvKz8/yoqSksry8srKyurqqpr7lfDamooFDgUygMKNZvNzu7oyOnszOzqwnV3E7lcokCQz+UW9PQ8oNIodHp5VxeVQqFTHlCpVDq1lkaj1dPpdfS6TQ8bHtIYDQ3NjXR6c0NDU2NTc3Pzo0ctrU3NLS0tra2Mx/AwGI0PmS1NbYyWDrCVATJA1mMQbOWCIMhkslkgyGKy2Cw2m90GtrW1s9tgHR0d3PZ2TieH0y7gcDhdHC6Px+vq4vO5PD6f38PvFggE3A5Rd7cILxQSRaJ8OFJpsVhcJhJVisX3ZbLq3l6KXI7Vaomzs3nT07jVVcLSEnFlhby0RFpbK9NqaRBU199fD0H1AwPNg4OPFQo2BIFDQ90QxH3+vGtkhKMaazQaW4xGcH6ePT/fOT8vFAiEPUKYWCyWSiRSqbS3Vy6TySTCfqkYkksHIVkfBEF9ff39cODqe/Kkf2Bw4AlsaGjoSf8zxaBSoVAqh4afDo0qlcrhp882PR0ZHn4OGx0dHVaqRobHR5+/VI2Mjo2NjY+Pv1S9VqvU6pdq2KuJTa8n3ryenJx8PQXXFGxSo3n7VvNGq9Fo3sPe6Wa0czqdbmZmZnZ6Tj+rn5ud1+v1c3qDQT9vMBiMRuPiwiJsdWl1eXl5ZWV1Fc7q6t+rH2AfP340mUwb6+sbGxvw8nusWSA2j8BvszZvArDaANat3cJBqghjtd3nJwisleAdvCKrw5m03tydhxPUEJMuJ6NCSG4Rt1GnExWUteavb+4+fm+/+wy7HW+TvxOdqfE/ZB7dnnrIJaGkJM7a40dJsR37N0L+X07/EM7ZJICvGSf+nRnv28l4xUuZ7k/fLbtuTfx9rXGbxX+05IHrBnX7/U/OLYE/Xg3eeb/5n+pdVzSjxzDXww1qSfLThWeetKrxP6/EJp3bonDmo5Mc5Sk/3CovRukazXwtDtYwU1sm23n8sWuRHAPLLlLke0Pg0feMu93bZ8Inla4TYrQMV/7lRltRSLxMzquY4sVEuShc9ofP0gJdLxb8RL1do9zI8nEmqI/+y4/Sm7ffag8vRae6qVPGYT/Nl0H/RcmzrK2SFHpUVMS6n2P0DwuQF/lAsZvj+SDj91vJPsbUbURbTcX1MNf1wjayXb/tUUUQ0sxDgflSxo4KeoCNDQt6d+eolaOpsI6M9BAfnipA+hBoB6ISEbX33kljQ/GodGqcpS1/W+4BltTzXSmzsJFatijEfHdctzM4LNz9xiR5i8khRr7fePMZwXspLoDs5Kf/Sht0O6sM7x5xldpgiXQCRM4lmgsK6goagbMmCC89rL7fSpf5uuOO1Z/e8SFZZNF0AYF1qlJhiLVeKi+ck//zw55YSQobF7g3HWyw3Phstc/e4evohRCv3Jhscu0HXX+41zeqkCnMAuRpUbw7wse7pSwBnYuozzMSnLjBRfbeazeKz3sVQP60oKUbmLCAPenoQspn3fT5LRZHUFudyP4syNNbJyGeUotReoKOH2Dxc993zQjevY8YIWAvRWTb+lWAVshPgVNWyLXJX8kna2qA77mxBwf0FKQJgzEfvmJ2xiYPVJohnXVvWSdH3ALCXP9u8/HnfdZUs0/JUI5ZznV8Y6ilyambHPRquRhnp5FOnXu053IVw3Kgvst+S6otiLZM0y/YBaoAc7yNUx7awrGHLzrHfSw77iDasVwiQliatmcCjqGobzcsr0Ks6F1fLQtDjvyBlRSxSidMSQ+R+4z2Zp8/mEUHjNWV2J+eNmWJ7WLDt+ccQ9yNXqlLnK9Mhj7pL3t9q3OoPWNNQm+XJbt6TOgrAmerDQarlcO2yHiC0PbQH9DlT4MXJVUmA+gdZ+9+KPVpcGAnv2j0DEMwvsp98p7vcDwydSHEcWafGTTjXOmbtkhaElw4PaRSypEp4OGtB1XsnlPTIG+w8BQzRuSONuYmtyFcd1x0Nyzju96f3Lc3HhC7ooX5Sdg38U7MPYvh2h48gW4Vjw62mfgl35+D8eRF1SJPfCjMOCLZguWItumybI9Ohhz4AhFjY3so+7TGy+WsXFgbohHl7J2sNevl5BzE6gpv+72x+R0V7BYsCc1Zxuw6o0S4gBfP4PXmuxWZZ13k4bKAqoW8G9H0XS8g2Te8hfxEt1/hX+TE/wCGERPPeJzjLUpNT03JLClP0kvPTGMYBSMMpLFD6GB27PLlsx76MzABACVyCDnrZzqkAQAAAAIAAAApAAAAUwcAAAAAAAABAAAAAAAAAAAAAAA [variables] %ConfigDir%=%TargetDir%\i386\system32\config %SystemDir%=%TargetDir%\i386\system32 %Check1%=False %Check2%=False %Check3%=False %Check4%=False %Check5%=False %Check6%=False [CheckExist] If,ExistFile,"%ConfigDir%\sam",Set,"%Check1%","%pCheckBox1%" If,ExistFile,"%ConfigDir%\security",Set,"%Check2%","%pCheckBox2%" If,ExistFile,"%ConfigDir%\default",Set,"%Check3%","%pCheckBox3%" If,ExistFile,"%ConfigDir%\system",Set,"%Check4%","%pCheckBox4%" If,ExistFile,"%ConfigDir%\software",Set,"%Check5%","%pCheckBox5%" If,ExistFile,"%SystemDir%\setupreg.hiv",Set,"%Check6%","%pCheckBox6%" [Load] If,%Check1%,Equal,True,RegHiveLoad,"WB-Sam","%ConfigDir%\sam" If,%Check2%,Equal,True,RegHiveLoad,"WB-Security","%ConfigDir%\security" If,%Check3%,Equal,True,RegHiveLoad,"WB-default","%ConfigDir%\default" If,%Check4%,Equal,True,RegHiveLoad,"WB-System","%ConfigDir%\system" If,%Check5%,Equal,True,RegHiveLoad,"WB-Software","%ConfigDir%\software" If,%Check6%,Equal,True,RegHiveLoad,"WB-Setup","%SystemDir%\setupreg.hiv" [UnloadOnly] If,%Check1%,Equal,True,ShellExecute,"hide","reg.exe","unload HKLM\WB-Sam" If,%Check2%,Equal,True,ShellExecute,"hide","reg.exe","unload HKLM\WB-Security" If,%Check3%,Equal,True,ShellExecute,"hide","reg.exe","unload HKLM\WB-default" If,%Check4%,Equal,True,ShellExecute,"hide","reg.exe","unload HKLM\WB-System" If,%Check5%,Equal,True,ShellExecute,"hide","reg.exe","unload HKLM\WB-Software" If,%Check6%,Equal,True,ShellExecute,"hide","reg.exe","unload HKLM\WB-Setup" [UnloadSave] If,%Check1%,Equal,True,RegHiveUnLoad,"WB-Sam" If,%Check2%,Equal,True,RegHiveUnLoad,"WB-Security" If,%Check3%,Equal,True,RegHiveUnLoad,"WB-default" If,%Check4%,Equal,True,RegHiveUnLoad,"WB-System" If,%Check5%,Equal,True,RegHiveUnLoad,"WB-Software" If,%Check6%,Equal,True,RegHiveUnLoad,"WB-Setup" [Doit] Run,%ScriptFile%,CheckExist Run,%ScriptFile%,Load ShellExecute,Open,"Regedit.Exe","" If,%pRadioButton1%,Equal,True,Run,%ScriptFile%,UnloadOnly If,%pRadioButton1%,NotEqual,True,Run,%ScriptFile%,UnloadSave