X-Git-Url: http://git.annexia.org/?a=blobdiff_plain;f=regedit%2Fhivexregedit;h=966f725f2409398adf4c7687577df02cf602425c;hb=41c6e04831b0a6c6b1b15075d9f7c30b6c95e72b;hp=d177d4f90baf8fe62de39c7ad4b80ffcfb674e08;hpb=235a9619ffe45d81805cf3527e55c9b7168a6385;p=hivex.git

diff --git a/regedit/hivexregedit b/regedit/hivexregedit
index d177d4f..966f725 100755
--- a/regedit/hivexregedit
+++ b/regedit/hivexregedit
@@ -89,8 +89,23 @@ backslashes (but not both) to protect them from the shell.
 
 Registry keys like C<CurrentControlSet> don't really exist in the
 Windows Registry at the level of the hive file, and therefore you
-cannot modify these.  Replace this with C<ControlSet001>, and
-similarly for other C<Current...> keys.
+cannot modify these.
+
+C<CurrentControlSet> is usually an alias for C<ControlSet001>.  In
+some circumstances it might refer to another control set.  The way
+to find out is to look at the C<HKLM\SYSTEM\Select> key:
+
+ $ hivexregedit --export SYSTEM '\Select'
+ [\Select]
+ "Current"=dword:00000001
+ "Default"=dword:00000001
+ "Failed"=dword:00000000
+ "LastKnownGood"=dword:00000002
+
+"Current" is the one which Windows will choose when it boots.
+
+Similarly, other C<Current...> keys in the path may need to
+be replaced.
 
 =head1 EXAMPLE