Changeset 111 for trunk/include

Timestamp:

05/01/08 00:06:22 (16 years ago)

Author:

tim

Message:

Switched license to GPLv3

Added early version of new tool, reglookup-recover

Many library changes made to support this new tool

Location:

trunk/include

Files:

• byteorder.h (modified) (1 diff)
• regfi.h (modified) (3 diffs)
• smb_deps.h (modified) (1 diff)
• void_stack.h (modified) (1 diff)

trunk/include/byteorder.h

@@ -11 +11 @@
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; version 2 of the License.
+ * the Free Software Foundation; version 3 of the License.
  * 
  * This program is distributed in the hope that it will be useful,

trunk/include/regfi.h

@@ -171 +171 @@
   uint16 flag;
   uint16 unknown1;
+  bool data_in_offset;
 } REGF_VK_REC;
 
@@ -179 +180 @@
 typedef struct _regf_sk_rec 
 {
-  REGF_HBIN* hbin;      /* pointer to HBIN record (in memory) containing 
-                         * this nk record 
-                         */
+  uint32 offset;        /* Real file offset of this record */
+  uint32 cell_size;     /* ((start_offset - end_offset) & 0xfffffff8) */
+
   SEC_DESC* sec_desc;
   uint32 hbin_off;      /* offset from beginning of this hbin block */
-  uint32 cell_size;     /* ((start_offset - end_offset) & 0xfffffff8) */
-  uint32 offset;        /* Real file offset of this record */
   
   uint32 sk_off;        /* offset parsed from NK record used as a key
@@ -389 +388 @@
                         uint32 length, bool strict);
 
+REGF_SK_REC* regfi_parse_sk(REGF_FILE* file, uint32 offset, uint32 max_size, bool strict);
+
 range_list* regfi_parse_unalloc_cells(REGF_FILE* file);
 
+REGF_HBIN* regfi_lookup_hbin(REGF_FILE* file, uint32 offset);
+
+bool regfi_parse_cell(int fd, uint32 offset, uint8* hdr, uint32 hdr_len,
+                      uint32* cell_length, bool* unalloc);
+
 #endif  /* _REGFI_H */

trunk/include/smb_deps.h

@@ -10 +10 @@
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; version 2 of the License.
+ * the Free Software Foundation; version 3 of the License.
  * 
  * This program is distributed in the hope that it will be useful,

trunk/include/void_stack.h

@@ -4 +4 @@
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; version 2 of the License.
+ * the Free Software Foundation; version 3 of the License.
  * 
  * This program is distributed in the hope that it will be useful,