Skip to content
Browse files

hard tabs

  • Loading branch information...
1 parent a4d9e59 commit 4a3d2a18dee6c0b3e526c009e747486205db5816 @brandonprry committed Apr 2, 2012
Showing with 7 additions and 7 deletions.
  1. +3 −3 lib/rex/registry/hive.rb
  2. +3 −3 lib/rex/registry/nodekey.rb
  3. +1 −1 tools/reg.rb
View
6 lib/rex/registry/hive.rb
@@ -12,10 +12,10 @@ def initialize(hivepath)
hive_blob = open(hivepath, "rb") { |io| io.read }
@hive_regf = RegfBlock.new(hive_blob)
- return nil if !@hive_regf.root_key_offset
+ return nil if !@hive_regf.root_key_offset
- @root_key = NodeKey.new(hive_blob, 0x1000 + @hive_regf.root_key_offset)
- return nil if !@root_key.lf_record
+ @root_key = NodeKey.new(hive_blob, 0x1000 + @hive_regf.root_key_offset)
+ return nil if !@root_key.lf_record
keys = []
root_key.lf_record.children.each do |key|
View
6 lib/rex/registry/nodekey.rb
@@ -34,9 +34,9 @@ def initialize(hive, offset)
@class_name_length = hive[offset+0x4a, 2].unpack('c').first
@name = hive[offset+0x4c, @name_length].to_s
- windows_time = @timestamp
- unix_time = windows_time/10000000-11644473600
- ruby_time = Time.at(unix_time)
+ windows_time = @timestamp
+ unix_time = windows_time/10000000-11644473600
+ ruby_time = Time.at(unix_time)
@readable_timestamp = ruby_time
View
2 tools/reg.rb
@@ -375,7 +375,7 @@ def get_user_application_information
when "get_everything"
Dir.foreach(ARGV[1]) do |file|
next if file =~ /^\./
- next if ::File.directory?(ARGV[1] + "/" + file)
+ next if ::File.directory?(ARGV[1] + "/" + file)
@hive = Rex::Registry::Hive.new(ARGV[1] + "/" + file)

0 comments on commit 4a3d2a1

Please sign in to comment.
Something went wrong with that request. Please try again.