search for: unknown1

Hi all. Using the following code: plot(bsa, abs, col='blue', pch=16, xlim=c(0, 25), ylim=c(0.0, 1.0), xlab = expression(paste(BSA, " (", mu, "g)", sep="")), ylab=expression(A[595])) plot(unknown1, abs2, col='blue', pch=16, xlim=c(0, 25), ylim=c(0.0, 1.0), xlab = expression(paste(Unknown_1, " (", mu, "g)", sep="")), ylab=expression(A[595])) plot(unknown2, abs3, col='blue', pch=16, xlim=c(0, 25), ylim=c(0.0, 1.0), xlab = expression(paste(Unknown_...

...bit 7: VirtMirrored + bit 8: VirtTarget + bit 9: VirtualStore */ + /* Information from: Peter Norris: The Internal Structure of the + Windows Registry, 2008, p.220 ff. */ int64_t timestamp; uint32_t unknown1; uint32_t parent; /* offset of owner/parent */ -- 1.8.4.3

...desc[1]; /* security info follows */ } __attribute__((__packed__)); +struct ntreg_db_record { + int32_t seg_len; /* length (always -ve because used) */ + char id[2]; /* "db" */ + uint16_t nr_blocks; + uint32_t blocklist_offset; + uint32_t unknown1; +} __attribute__((__packed__)); + +struct ntreg_db_block { + int32_t seg_len; + char data[1]; +} __attribute__((__packed__)); + static uint32_t header_checksum (const hive_h *h) { @@ -1418,22 +1431,60 @@ hivex_value_value (hive_h *h, hive_value_h value, * instead. */ size_t blen =...

* Richard W.M. Jones: > diff --git a/lib/hivex.c b/lib/hivex.c > index e3c1e05..9351ac5 100644 > --- a/lib/hivex.c > +++ b/lib/hivex.c > @@ -1471,7 +1471,7 @@ hivex_value_value (hive_h *h, hive_value_h value, > if (h->msglvl >= 2) > fprintf (stderr, "hivex_value_value: warning: big data block is not " > "valid

Hi friends, I need to generate a list, that should contain the quantile value of one column in a data frame. while I am compiling this one i am facing one bug,, Really I cannot find out that where the problem has occurred? Could any one help me to come out from this bug?? Here is the code, data <- lapply(comb.data$zFE, function(x) aggregate(x,

...llows */ > } __attribute__((__packed__)); > > +struct ntreg_db_record { > + int32_t seg_len; /* length (always -ve because used) */ > + char id[2]; /* "db" */ > + uint16_t nr_blocks; > + uint32_t blocklist_offset; > + uint32_t unknown1; > +} __attribute__((__packed__)); > + > +struct ntreg_db_block { > + int32_t seg_len; > + char data[1]; > +} __attribute__((__packed__)); > + > static uint32_t > header_checksum (const hive_h *h) > { > @@ -1418,22 +1431,60 @@ hivex_value_value (hive_h *h, hive...

...desc[1]; /* security info follows */ } __attribute__((__packed__)); +struct ntreg_db_record { + int32_t seg_len; /* length (always -ve because used) */ + char id[2]; /* "db" */ + uint16_t nr_blocks; + uint32_t blocklist_offset; + uint32_t unknown1; +} __attribute__((__packed__)); + +struct ntreg_db_block { + int32_t seg_len; + char data[1]; +} __attribute__((__packed__)); + static uint32_t header_checksum (const hive_h *h) { @@ -1418,22 +1431,70 @@ hivex_value_value (hive_h *h, hive_value_h value, * instead. */ size_t blen =...

...b9c03 process_attach+0xa3(wm=0x1107c0, lpReserved=0x1) [/usr/src/wine-0.9.19/dlls/ntdll/loader.c:901] in ntdll (0x7efb9c03) 43 0x7efb9d00 process_attach+0x1a0(wm=0x110898, lpReserved=0x1) [/usr/src/wine-0.9.19/dlls/ntdll/loader.c:893] in ntdll (0x7efb9d00) 44 0x7efbc75e LdrInitializeThunk+0x1ae(unknown1=0x0, unknown2=0x0, unknown3=0x0, unknown4=0x0) [/usr/src/wine-0.9.19/dlls/ntdll/loader.c:2143] in ntdll (0x7efbc75e) 45 0x7eecc1df start_process+0x9f(arg=0x0) [/usr/src/wine-0.9.19/dlls/kernel/process.c:812] in kernel32 (0x7eecc1df) 46 0xb7eb1897 wine_switch_to_stack+0x17 in libwine.so.1 (0xb7e...

--- hivex/hivexsh.pod | 9 ++++++++- 1 files changed, 8 insertions(+), 1 deletions(-) diff --git a/hivex/hivexsh.pod b/hivex/hivexsh.pod index 277e3ae..9336798 100644 --- a/hivex/hivexsh.pod +++ b/hivex/hivexsh.pod @@ -100,7 +100,14 @@ or even: Path elements (node names) are matched case insensitively, and characters like space, C<*>, and C<?> have I<no> special

..._record { int32_t seg_len; /* length (always -ve because used) */ char id[2]; /* "nk" */ - uint16_t flags; + uint16_t flags; /* bit 5 set: latin1 + bit 5 clr: UTF-16 */ char timestamp[8]; uint32_t unknown1; uint32_t parent; /* offset of owner/parent */ @@ -571,11 +573,6 @@ hivex_node_name (hive_h *h, hive_node_h node) struct ntreg_nk_record *nk = (struct ntreg_nk_record *) (h->addr + node); - /* AFAIK the node name is always plain ASCII, so no conversion - * to UTF-8 is n...

Adam, you already tried my suggestions? What do you see here: > Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: > acl: spn validation failed for ... ^^^^^^ So read the links below and post your results The event id you showed, for now can be ignored. Inrelevant (for now). And mostlikly wil disapear when you added/fixed the "correct" spn's On

.../* 3 */ uint32_t unknown5; /* 0 */ @@ -173,7 +174,7 @@ struct ntreg_nk_record { int32_t seg_len; /* length (always -ve because used) */ char id[2]; /* "nk" */ uint16_t flags; - char timestamp[8]; + int64_t timestamp; uint32_t unknown1; uint32_t parent; /* offset of owner/parent */ uint32_t nr_subkeys; /* number of subkeys */ @@ -359,6 +360,9 @@ hivex_open (const char *filename, int flags) goto error; } + /* Last-modified time. */ + h->last_modified = le64toh ((int64_t) h->hdr->las...

.../* 3 */ uint32_t unknown5; /* 0 */ @@ -173,7 +135,7 @@ struct ntreg_nk_record { int32_t seg_len; /* length (always -ve because used) */ char id[2]; /* "nk" */ uint16_t flags; - char timestamp[8]; + uint64_t timestamp; uint32_t unknown1; uint32_t parent; /* offset of owner/parent */ uint32_t nr_subkeys; /* number of subkeys */ @@ -265,7 +227,34 @@ header_checksum (const hive_h *h) return sum; } +#define WINDOWS_TICK 10000000LL +#define SEC_TO_UNIX_EPOCH 11644473600LL +/** + * Convert Windows filet...

...UPS temp, flags -> 8 bit) [Q1] (209.7 209.7 219.7 019 50.0 2.32 23.3 00000001 *UPS status (input V, fault V, output V, load, output freq, batt voltage, UPS temp, flags -> 8 bit) [QS] (209.7 209.7 219.7 020 50.0 41.8 23.3 00000001 *UPS status (new) (in V, in F, out V, out F, out Current, load, unknown1, unknown2, batt volt, unknown3, UPS temp, flags->12 bit) [QGS] (209.7 50.0 219.7 50.0 000.8 019 374.9 374.3 041.8 ---.- 023.3 100000000001 *Battery status (Batt Volt, Nr of batt packs, Nr of batt packs in parallel, %battery charge, expected runtime in minutes) [QBV] (041.8 03 01 100 058 *Wide ba...

.../* 3 */ uint32_t unknown5; /* 0 */ @@ -173,7 +175,7 @@ struct ntreg_nk_record { int32_t seg_len; /* length (always -ve because used) */ char id[2]; /* "nk" */ uint16_t flags; - char timestamp[8]; + uint64_t timestamp; uint32_t unknown1; uint32_t parent; /* offset of owner/parent */ uint32_t nr_subkeys; /* number of subkeys */ @@ -265,7 +267,34 @@ header_checksum (const hive_h *h) return sum; } +#define WINDOWS_TICK 10000000LL +#define SEC_TO_UNIX_EPOCH 11644473600LL +/** + * Convert Windows filet...

...1b fixme:ntdll:RtlNtStatusToDosErrorNoTeb no mapping for c0000119 Backtrace: =>1 0x7ff98067 stub_entry_point+0x4c(dll=0xd6be9a, name=0xd6c576) [/home/h4x0r/wine/dlls/ntdll/loader.c:184] in ntdll (0x7ff98067) 2 0x00611c68 in white (+0x211c68) (0x00611c68) 3 0x7ff9ccdc LdrInitializeThunk+0x548(unknown1=0x0, unknown2=0x0, unknown3=0x0, unknown4=0x0) [/home/h4x0r/wine/dlls/ntdll/loader.c:2163] in ntdll (0x7ff9ccdc) fixme:dbghelp:elf_load_debug_info_from_map Alpha-support for Dwarf2 information for kernel32<elf> 4 0x7fd4a0f5 build_argv(cmdlineW=<register not in topmost frame>, reserved...

This is, hopefully, a full fix for handling of li-records. See: https://bugzilla.redhat.com/show_bug.cgi?id=717583 https://bugzilla.redhat.com/show_bug.cgi?id=987463 Rich.

...Version: 1) [ 7.434327] thunderbolt 0000:07:00.0: Max Port Number: 12 [ 7.435749] thunderbolt 0000:07:00.0: Config: [ 7.437216] thunderbolt 0000:07:00.0: Upstream Port Number: 5 Depth: 0 Route String: 0x0 Enabled: 1, PlugEventsDelay: 255ms [ 7.438664] thunderbolt 0000:07:00.0: unknown1: 0x0 unknown4: 0x0 [ 7.447649] bcma-pci-bridge 0000:04:00.0: enabling device (0000 -> 0002) [ 7.448712] bcma: bus0: Found chip with id 0x4331, rev 0x02 and package 0x09 [ 7.450140] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x25, class 0x0) [ 7.451518] bcma: bus...

...= 4495376, uni_srv_name = {uni_max_len = 7, undoc = 0, uni_str_len = 7, buffer = 0x81ed110}, ptr_qual_name = 4495390, uni_qual_name = {uni_max_len = 13, undoc = 0, uni_str_len = 13, buffer = 0x81ee5b8}, uni_file_name = {uni_max_len = 32, undoc = 0, uni_str_len = 32, buffer = 0x81c6c50}, unknown1 = 7, unknown2 = 0, unknown3 = 0} r_u = {ptr_response = 1, size_response = 176, ptr_secdesc = 1, size_secdesc = 176, sec_desc = 0x81ede38, status = 0} data = (prs_struct *) 0x80 rdata = (prs_struct *) 0x81f466c #5 0x80a8708 in api_rpcTNP (p=0x81f2758, rpc_name=0x8133ec9 "api_srvsvc_rpc&qu...