[文本处理] 批处理如何提取关键词所在行及其上下几行内容？

suchost

现有文本1.txt，内容如下

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7660AEC6D8E6CFE42A4E2B964A5DC9E7]
"00005119110000000100000000F01FEC"="C:\\Program Files\\Microsoft Office\\Office15\\MSOUC.EXE"
[HKEY_USERS\S-1-5-21-787889350-1610004461-349859190-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"c"="regedit.exe /e MSOUC.EXE.reg\\1"
复制代码

1、现在想得到如下的结果：
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]
"MSOSYNC.EXE"=dword:00000001
"MSOUC.EXE"=dword:00000001
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7660AEC6D8E6CFE42A4E2B964A5DC9E7]
"00005119110000000100000000F01FEC"="C:\\Program Files\\Microsoft Office\\Office15\\MSOUC.EXE"
[-HKEY_USERS\S-1-5-21-787889350-1610004461-349859190-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RunMRU]
"c"="regedit.exe /e MSOUC.EXE.reg\\1"
先谢了！

CrLf

有意思，回家写个第三方
不过你要以什么依据来定位呢？

pcl_test

//&cls&cscript -nologo -e:jscript "%~f0"<"1.txt"&pause&exit
var m=WScript.StdIn.ReadAll().match(/\[[^\]]+?\]\r?\n[^\[]*?MSOUC\.EXE[^\[]*/g)
for (var i=0; i<m.length; i++) WSH.echo(m[i].replace(/\[/g,'[-'));
复制代码

suchost

回复 2# CrLf


    不用第三方的行吗？关键词为MSOUC.EXE

suchost

回复 3# pcl_test


    版主很棒哦，但能根据关键词来提取关键词所在行及相应的[]吗？比如关键词为MSOUC，得到的结果为：
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]
"MSOUC.EXE"=dword:00000001
这样呢？

pcl_test

回复 5# suchost

m[i].replace(/(\[)([^\]]+?\]\r?\n)[\s\S]*?(.*?MSOUC\.EXE.*)/,'$1-$2$3')
复制代码

WHY

纯P

@echo off & setlocal enabledelayedexpansion
for /f "delims=" %%i in (1.txt) do (
    set "s=%%i"
    if "!s:~0,1!!s:~-1!" == "[]" (
        set "s1=!s:[=[-!"
    ) else (
        if not "!s:"MSOUC.EXE"=!" == "!s!" echo;!s1!&echo;!s!
    )
)
pause
复制代码

依山居

不太理解为什么要从这个文件取。
直接从注册表直接读不行？

suchost

回复 8# 依山居


  直接读取更好，请赐教啊！

suchost

回复 6# pcl_test


    这行代码怎么用呀？

suchost

回复 7# WHY


    怎么输出到文件呀？还有一行没显示出来

Batcher

回复 11# suchost


@echo off & setlocal enabledelayedexpansion
(for /f "delims=" %%i in (1.txt) do (
    set "s=%%i"
    if "!s:~0,1!!s:~-1!" == "[]" (
        set "s1=!s:[=[-!"
    ) else (
        if not "!s:"MSOUC.EXE"=!" == "!s!" echo;!s1!&echo;!s!
    )
))>2.txt
pause

Batcher

回复 10# suchost

//&cls&cscript -nologo -e:jscript "%~f0"<"1.txt"&pause&exit
var m=WScript.StdIn.ReadAll().match(/\[[^\]]+?\]\r?\n[^\[]*?MSOUC\.EXE[^\[]*/g)
for (var i=0; i<m.length; i++) WSH.echo(m[i].replace(/(\[)([^\]]+?\]\r?\n)[\s\S]*?(.*?MSOUC\.EXE.*)/,'$1-$2$3'));
复制代码

整段代码保存为 test.bat 双击执行

Batcher

回复 9# suchost


    你的 1.txt 是执行哪个命令得到的结果？发出来看看吧

/zhqsystem/zhq

我只想问楼主真的了解注册表吗?