From 0aef91928fc102b96a6ebffe609d3daf27853095 Mon Sep 17 00:00:00 2001
From: blshkv <blshkv@pentoo.ch>
Date: Tue, 10 Jan 2017 22:54:37 +0800
Subject: [PATCH] dff: add missing modules

---
 ...ff-1.3.0-r1.ebuild => dff-1.3.0-r2.ebuild} |  3 +-
 app-forensics/reglookup/Manifest              |  1 +
 .../reglookup/reglookup-1.0.1.ebuild          | 39 +++++++++++++++++++
 .../package.accept_keywords/app-forensics     |  1 +
 4 files changed, 43 insertions(+), 1 deletion(-)
 rename app-forensics/dff/{dff-1.3.0-r1.ebuild => dff-1.3.0-r2.ebuild} (96%)
 create mode 100644 app-forensics/reglookup/Manifest
 create mode 100644 app-forensics/reglookup/reglookup-1.0.1.ebuild

diff --git a/app-forensics/dff/dff-1.3.0-r1.ebuild b/app-forensics/dff/dff-1.3.0-r2.ebuild
similarity index 96%
rename from app-forensics/dff/dff-1.3.0-r1.ebuild
rename to app-forensics/dff/dff-1.3.0-r2.ebuild
index 06b00f635..796dc4ccb 100644
--- a/app-forensics/dff/dff-1.3.0-r1.ebuild
+++ b/app-forensics/dff/dff-1.3.0-r2.ebuild
@@ -22,6 +22,7 @@ RDEPEND="${PYTHON_DEPS}
 	doc? ( >=dev-python/PyQt4-4.4.0[help,webkit,assistant,${PYTHON_USEDEP}] )
 	!doc? ( >=dev-python/PyQt4-4.4.0[help,${PYTHON_USEDEP}] )
 	dev-python/python-magic[${PYTHON_USEDEP}]
+	dev-python/apsw[${PYTHON_USEDEP}]
 	"
 
 DEPEND="${RDEPEND}
@@ -31,7 +32,7 @@ DEPEND="${RDEPEND}
 	pff? ( >=app-forensics/libpff-0.0.20120802_alpha )
 	>=dev-lang/swig-1.3.38
 	dev-libs/tre[python]
-	"
+	app-forensics/reglookup"
 
 pkg_setup() {
 	python-single-r1_pkg_setup
diff --git a/app-forensics/reglookup/Manifest b/app-forensics/reglookup/Manifest
new file mode 100644
index 000000000..2c9334021
--- /dev/null
+++ b/app-forensics/reglookup/Manifest
@@ -0,0 +1 @@
+DIST reglookup-src-1.0.1.tar.gz 186090 SHA256 bc5bed4046954a9d58c320be9da51588b7f30ebdd9c45f89dea44679c62bceff SHA512 1750655e27f634b7632f67bfab25182cdada33a6e36fa7d70a21c039f036a8c65c23256ebb76e90325ecd0472a57aac08168fa1b096ef51edc248d12feef9469 WHIRLPOOL 374f6b82741151bdab01634b7fd8aa643439ca6a40437119d06f14570c8a49e8f50f4211b87eef85c0ffd9156a26f19a12ea76a18384fb9ef8f1bf7707e2cec7
diff --git a/app-forensics/reglookup/reglookup-1.0.1.ebuild b/app-forensics/reglookup/reglookup-1.0.1.ebuild
new file mode 100644
index 000000000..64164e3b3
--- /dev/null
+++ b/app-forensics/reglookup/reglookup-1.0.1.ebuild
@@ -0,0 +1,39 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id $
+
+EAPI="5"
+
+PYTHON_COMPAT=( python2_7 )
+inherit scons-utils distutils-r1
+
+DESCRIPTION="An utility for reading and querying Windows NT/2K/XP registries"
+HOMEPAGE="http://projects.sentinelchicken.org/reglookup/"
+SRC_URI="http://projects.sentinelchicken.org/data/downloads/${PN}-src-${PV}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~x86 ~amd64 ~x64-macos ~x86-macos"
+IUSE=""
+
+RDEPEND="sys-libs/talloc
+	virtual/libiconv"
+
+S="${WORKDIR}/${PN}-src-${PV}"
+
+src_prepare() {
+	mv pyregfi-distutils.py setup.py
+}
+src_compile() {
+	escons
+}
+
+src_install() {
+	distutils-r1_src_install
+	dobin bin/reglookup-timeline src/reglookup src/reglookup-recover
+	dolib.so lib/libregfi.so
+	doman doc/*.1.gz
+	dodir /usr/include/regfi
+	insinto /usr/include/regfi
+	doins include/*.h
+}
diff --git a/profiles/pentoo/base/package.accept_keywords/app-forensics b/profiles/pentoo/base/package.accept_keywords/app-forensics
index e2ca0f1ef..bf899a4a6 100644
--- a/profiles/pentoo/base/package.accept_keywords/app-forensics
+++ b/profiles/pentoo/base/package.accept_keywords/app-forensics
@@ -8,6 +8,7 @@
 app-forensics/dff
 app-forensics/libbfio
 ~app-forensics/libpff-0.0.20120802_alpha
+~app-forensics/reglookup-1.0.1
 
 ~app-forensics/inception-0.4.1
 ~app-forensics/libforensic1394-0.2