public void ProcessValues(RegistryKey key)
{
_values.Clear();
Errors.Clear();
var valuesList = new List <ValuesOut>();
var vn = string.Empty;
try
{
var fav = key.Values.SingleOrDefault(t => t.ValueName == "Favorites");
if (fav == null)
{
return;
}
var br = new BinaryReader(new MemoryStream(fav.ValueDataRaw));
var chunks = new List <byte[]>();
var shellItems = new List <byte[]>();
var unk = br.ReadByte(); //
while (br.BaseStream.Position < br.BaseStream.Length)
{
var size = br.ReadInt32();
br.BaseStream.Seek(-4, SeekOrigin.Current);
var b = br.ReadBytes(size);
chunks.Add(b);
var marker = br.ReadBytes(5);
}
foreach (var chunk in chunks)
{
var chunkstream = new BinaryReader(new MemoryStream(chunk));
var chunksize = chunkstream.ReadInt32();
while (chunkstream.BaseStream.Position < chunkstream.BaseStream.Length)
{
var siSize = chunkstream.ReadInt16();
chunkstream.BaseStream.Seek(-2, SeekOrigin.Current);
var siBytes = chunkstream.ReadBytes(siSize);
shellItems.Add(siBytes);
}
}
var det = new StringBuilder();
bags = new List <ShellBag>();
ShellBag bag = null;
foreach (var bytese in shellItems)
{
try
{
switch (bytese[2])
{
case 0x00:
bag = new ShellBag0X00(bytese);
break;
case 0x1f:
bag = new ShellBag0X1F(bytese);
break;
case 0x2f:
bag = new ShellBag0X2F(bytese);
break;
case 0x2e:
bag = new ShellBag0X2E(bytese);
break;
case 0xb1:
case 0x31:
case 0x35:
case 0x36:
bag = new ShellBag0X31(bytese);
break;
case 0x32:
bag = new ShellBag0X32(bytese);
break;
case 0x3a:
bag = new ShellBag0X3A(bytese);
break;
case 0x71:
bag = new ShellBag0X71(bytese);
break;
case 0x74:
bag = new ShellBag0X74(bytese);
break;
case 0x40:
bag = new ShellBag0X40(bytese);
break;
case 0x61:
bag = new ShellBag0X61(bytese);
break;
case 0xc3:
bag = new ShellBag0Xc3(bytese);
break;
default:
det.AppendLine(
$"Key: {key.KeyName}, Value name: {fav.ValueName}, Message: **** Unsupported ShellID: 0x{bytese[2]:x2}. Send this ID to [email protected] so support can be added!! ****");
Errors.Add(
$"Key: {key.KeyName}, Value name: {fav.ValueName}, Message: **** Unsupported ShellID: 0x{bytese[2]:x2}. Send this ID to [email protected] so support can be added!! ****");
break;
}
}
catch (Exception e)
{
Errors.Add($"Error processing Favorites value '{vn}': {e.Message}");
}
if (bag != null)
{
det.AppendLine(bag.ToString());
bags.Add(bag);
}
}
foreach (var shellBag in bags)
{
var exe = "(unknown)";
var ed = shellBag.ExtensionBlocks.SingleOrDefault(t => t is ExtensionBlocks.Beef001d);
if (ed != null)
{
exe = ((Beef001d)ed).Executable;
}
var pp = shellBag.ExtensionBlocks.SingleOrDefault(t => t is ExtensionBlocks.Beef001e);
var pt = "(unknown)";
if (pp != null)
{
pt = ((Beef001e)pp).PinType;
}
if (shellBag.FriendlyName == "Directory")
{
exe = "(Directory)";
pt = "(Directory)";
}
var v = new ValuesOut(shellBag.Value, exe, pt);
v.BatchKeyPath = key.KeyPath;
v.BatchValueName = fav.ValueName;
valuesList.Add(v);
}
}
catch (Exception ex)
{
Errors.Add($"Error processing Favorites value '{vn}': {ex.Message}");
}
if (Errors.Count > 0)
{
AlertMessage = "Errors detected. See Errors information in lower right corner of plugin window";
}
var v1 = valuesList;
foreach (var source in v1.ToList())
{
_values.Add(source);
}
}
public void ProcessValues(RegistryKey key)
{
_values.Clear();
Errors.Clear();
var valuesList = new List <ValuesOut>();
var currentKey = string.Empty;
try
{
currentKey = key.KeyName;
//get MRU key and read it in
var mruVal = key.Values.SingleOrDefault(t => t.ValueName == "MRUListEx");
var mruListOrder = new ArrayList();
if (mruVal != null)
{
var index = 0;
var mruPos = 0;
while (index < mruVal.ValueDataRaw.Length)
{
mruPos = BitConverter.ToInt32(mruVal.ValueDataRaw, index);
index += 4;
if (mruPos != -1)
{
mruListOrder.Add(mruPos);
}
}
}
foreach (var keyValue in key.Values)
{
if (keyValue.ValueName == "MRUListEx")
{
continue;
}
bags = new List <ShellBag>();
var shellItemsRaw = new List <byte[]>();
var mru = mruListOrder.IndexOf(int.Parse(keyValue.ValueName)); //(int) mruListOrder[int.Parse(keyValue.BatchValueName)];
try
{
var det = new StringBuilder();
var index = 0;
//first is a unicode executable name
var exeName = Encoding.Unicode.GetString(keyValue.ValueDataRaw).Split('\0').First();
//update index to end of exename + null terminator
index = exeName.Length * 2 + 2;
//pull out shell items
while (index < keyValue.ValueDataRaw.Length)
{
var size = BitConverter.ToInt16(keyValue.ValueDataRaw, index);
if (size == 0)
{
break;
}
var shellRaw = new byte[size];
Buffer.BlockCopy(keyValue.ValueDataRaw, index, shellRaw, 0, size);
shellItemsRaw.Add(shellRaw);
index += size;
}
ShellBag bag = null;
foreach (var bytese in shellItemsRaw)
{
switch (bytese[2])
{
case 0x00:
bag = new ShellBag0X00(bytese);
break;
case 0x1f:
bag = new ShellBag0X1F(bytese);
break;
case 0x2f:
bag = new ShellBag0X2F(bytese);
break;
case 0x2e:
bag = new ShellBag0X2E(bytese);
break;
case 0xb1:
case 0x31:
case 0x35:
case 0x36:
bag = new ShellBag0X31(bytese);
break;
case 0x32:
bag = new ShellBag0X32(bytese);
break;
case 0x3a:
bag = new ShellBag0X3A(bytese);
break;
case 0x71:
bag = new ShellBag0X71(bytese);
break;
case 0x74:
bag = new ShellBag0X74(bytese);
break;
case 0x40:
bag = new ShellBag0X40(bytese);
break;
case 0x61:
bag = new ShellBag0X61(bytese);
break;
case 0xc3:
bag = new ShellBag0Xc3(bytese);
break;
default:
det.AppendLine(
$"Key: {key.KeyName}, Value name: {keyValue.ValueName}, Message: **** Unsupported ShellID: 0x{bytese[2]:x2}. Send this ID to [email protected] so support can be added!! ****");
Errors.Add(
$"Key: {key.KeyName}, Value name: {keyValue.ValueName}, Message: **** Unsupported ShellID: 0x{bytese[2]:x2}. Send this ID to [email protected] so support can be added!! ****");
break;
}
if (bag != null)
{
det.AppendLine(bag.ToString());
bags.Add(bag);
}
}
DateTimeOffset?openedOn = null;
if (mru == 0)
{
openedOn = key.LastWriteTime;
}
var v = new ValuesOut(exeName,
$"{GetAbsolutePathFromTargetIDs(bags)}", det.ToString(), keyValue.ValueName, mru, openedOn);
v.BatchKeyPath = key.KeyPath;
v.BatchValueName = keyValue.ValueName;
valuesList.Add(v);
}
catch (Exception ex)
{
Errors.Add(
$"Key: {key.KeyName}, Value name: {keyValue.ValueName}, message: {ex.Message}");
}
}
}
catch (Exception ex)
{
Errors.Add($"Error processing OpenSavePidlMRU subkey {currentKey}: {ex.Message}");
}
if (Errors.Count > 0)
{
AlertMessage = "Errors detected. See Errors information in lower right corner of plugin window";
}
var v1 = valuesList.OrderBy(t => t.MruPosition);
foreach (var source in v1.ToList())
{
_values.Add(source);
}
}
public void ProcessValues(RegistryKey key)
{
_values.Clear();
Errors.Clear();
var valuesList = new List<ValuesOut>();
var currentKey = string.Empty;
try
{
currentKey = key.KeyName;
//get MRU key and read it in
var mruVal = key.Values.SingleOrDefault(t => t.ValueName == "MRUListEx");
var mruListOrder = new ArrayList();
if (mruVal != null)
{
var index = 0;
var mruPos = 0;
while (index < mruVal.ValueDataRaw.Length)
{
mruPos = BitConverter.ToInt32(mruVal.ValueDataRaw, index);
index += 4;
if (mruPos != -1)
{
mruListOrder.Add(mruPos);
}
}
}
foreach (var keyValue in key.Values)
{
if (keyValue.ValueName == "MRUListEx")
{
continue;
}
bags = new List<ShellBag>();
var shellItemsRaw = new List<byte[]>();
var mru = (int) mruListOrder[int.Parse(keyValue.ValueName)];
try
{
var det = new StringBuilder();
var index = 0;
//first is a unicode executable name
var exeName = Encoding.Unicode.GetString(keyValue.ValueDataRaw).Split('\0').First();
//update index to end of exename + null terminator
index = exeName.Length*2 + 2;
//pull out shell items
while (index < keyValue.ValueDataRaw.Length)
{
var size = BitConverter.ToInt16(keyValue.ValueDataRaw, index);
if (size == 0)
{
break;
}
var shellRaw = new byte[size];
Buffer.BlockCopy(keyValue.ValueDataRaw, index, shellRaw, 0, size);
shellItemsRaw.Add(shellRaw);
index += size;
}
ShellBag bag = null;
foreach (var bytese in shellItemsRaw)
{
switch (bytese[2])
{
case 0x00:
bag = new ShellBag0X00(bytese);
break;
case 0x1f:
bag = new ShellBag0X1F(bytese);
break;
case 0x2f:
bag = new ShellBag0X2F(bytese);
break;
case 0x2e:
bag = new ShellBag0X2E(bytese);
break;
case 0xb1:
case 0x31:
bag = new ShellBag0X31(bytese);
break;
case 0x32:
bag = new ShellBag0X32(bytese);
break;
case 0x71:
bag = new ShellBag0X71(bytese);
break;
case 0x74:
bag = new ShellBag0X74(bytese);
break;
case 0x40:
bag = new ShellBag0X40(bytese);
break;
case 0x61:
bag = new ShellBag0X61(bytese);
break;
case 0xc3:
bag = new ShellBag0Xc3(bytese);
break;
default:
det.AppendLine(
$"Key: {key.KeyName}, Value name: {keyValue.ValueName}, Message: **** Unsupported ShellID: 0x{bytese[2]:x2}. Send this ID to [email protected] so support can be added!! ****");
Errors.Add(
$"Key: {key.KeyName}, Value name: {keyValue.ValueName}, Message: **** Unsupported ShellID: 0x{bytese[2]:x2}. Send this ID to [email protected] so support can be added!! ****");
break;
}
if (bag != null)
{
det.AppendLine(bag.ToString());
bags.Add(bag);
}
}
DateTimeOffset? openedOn = null;
if (mru == 0)
{
openedOn = key.LastWriteTime;
}
var v = new ValuesOut(exeName,
$"{GetAbsolutePathFromTargetIDs(bags)}", det.ToString(), keyValue.ValueName, mru, openedOn);
valuesList.Add(v);
}
catch (Exception ex)
{
Errors.Add(
$"Key: {key.KeyName}, Value name: {keyValue.ValueName}, message: {ex.Message}");
}
}
}
catch (Exception ex)
{
Errors.Add($"Error processing OpenSavePidlMRU subkey {currentKey}: {ex.Message}");
}
if (Errors.Count > 0)
{
AlertMessage = "Errors detected. See Errors information in lower right corner of plugin window";
}
var v1 = valuesList.OrderBy(t => t.MruPosition);
foreach (var source in v1.ToList())
{
_values.Add(source);
}
}