public void BlakeWordWheel() { var r = new WordWheelQuery(); var reg = new RegistryHive(@"D:\SynologyDrive\Registry\NTUSER_dblake.DAT"); reg.ParseHive(); var key = reg.GetKey(@"Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery"); Check.That(r.Values.Count).IsEqualTo(0); r.ProcessValues(key); Check.That(r.Values.Count).IsEqualTo(6); Check.That(r.Errors.Count).IsEqualTo(0); var ff = (RegistryPlugin.WordWheelQuery.ValuesOut)r.Values[0]; Check.That(ff.MruPosition).IsEqualTo(0); Check.That(ff.SearchTerm).Contains("defrag"); ff = (RegistryPlugin.WordWheelQuery.ValuesOut)r.Values[1]; Check.That(ff.MruPosition).IsEqualTo(0); Check.That(ff.SearchTerm).Contains("cc"); ff = (RegistryPlugin.WordWheelQuery.ValuesOut)r.Values[2]; Check.That(ff.MruPosition).IsEqualTo(1); Check.That(ff.SearchTerm).Contains("jboone"); }
/// <summary> /// /// </summary> protected override void ProcessRecord() { switch (ParameterSetName) { case "ByVolume": WriteObject(WordWheelQuery.GetInstances(volume), true); break; case "ByPath": WriteObject(WordWheelQuery.Get(hivePath), true); break; } }