From: Richard Jones <rjones@redhat.com>
Date: Fri, 30 Apr 2010 08:47:16 +0000 (+0100)
Subject: regedit: Fix documentation for CurrentControlSet (thanks Yuval Kashtan).
X-Git-Tag: 1.2.3~10
X-Git-Url: http://git.annexia.org/?a=commitdiff_plain;h=77bb0e7a3cca5e41509ad45fd764171ddc2e56ef;p=hivex.git

regedit: Fix documentation for CurrentControlSet (thanks Yuval Kashtan).
---

diff --git a/regedit/hivexregedit b/regedit/hivexregedit
index d177d4f..e094366 100755
--- a/regedit/hivexregedit
+++ b/regedit/hivexregedit
@@ -89,8 +89,23 @@ backslashes (but not both) to protect them from the shell.
 
 Registry keys like C<CurrentControlSet> don't really exist in the
 Windows Registry at the level of the hive file, and therefore you
-cannot modify these.  Replace this with C<ControlSet001>, and
-similarly for other C<Current...> keys.
+cannot modify these.
+
+C<CurrentControlSet> is usually an alias for C<ControlSet001>.  In
+some circumstances it might refer to another control set.  The way
+to find out is to look at the C<HKLM\SYSTEM\Select> key:
+
+ $ hivexregedit --export SYSTEM '\Select'
+ [\Select]
+ "Current"=dword:00000001
+ "Default"=dword:00000001
+ "Failed"=dword:00000000
+ "LastKnownGood"=dword:00000002
+
+"Default" is the one which Windows will choose when it boots.
+
+Similarly, other C<Current...> keys in the path may need to
+be replaced.
 
 =head1 EXAMPLE