public void ShouldFindTwoValuesForSize100000()
{
var usrClass1 = new RegistryHive(@"..\..\..\Hives\UsrClass 1.dat");
usrClass1.RecoverDeleted = true;
usrClass1.FlushRecordListsAfterParse = false;
usrClass1.ParseHive();
var keys = usrClass1.FindByValueSize(100000).ToList();
Check.That(keys.Count).IsEqualTo(2);
}
public void ShouldExportValuesToFile()
{
var usrClass1 = new RegistryHive(@"..\..\..\Hives\UsrClass 1.dat");
usrClass1.RecoverDeleted = true;
usrClass1.FlushRecordListsAfterParse = false;
usrClass1.ParseHive();
var keys = usrClass1.FindByValueSize(100000).ToList();
foreach (var valueBySizeInfo in keys)
{
File.WriteAllBytes($"{valueBySizeInfo.Value.ValueName}.bin", valueBySizeInfo.Value.ValueDataRaw);
Check.That(File.Exists($"{valueBySizeInfo.Value.ValueName}.bin")).IsTrue();
}
}
