Subversion Repositories recyclebinunit

Rev

Rev 100 | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
12 daniel-mar 1
 
73 daniel-mar 2
Windows 95 "PurgeInfo" Analysis by Daniel Marschall
12 daniel-mar 3
 
73 daniel-mar 4
= Location =
5
 
12 daniel-mar 6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\BitBucket: PurgeInfo (Binary)
7
 
8
= Data structure =
9
 
10
Offset	00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
11
Data	48 00 00 00 01 00 00 00 0A 00 0A 00 0A 00 0A 00
73 daniel-mar 12
Sign	< cbSize  > <GS       > <Pa > <Pb > <Pc > <Pd >
12 daniel-mar 13
 
14
Offset	10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f
15
Data	0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00
73 daniel-mar 16
Sign	<Pe > <Pf > <Pg > <Ph > <Pi > <Pj > <Pk > <Pl >
12 daniel-mar 17
 
18
Offset	20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f
19
Data	0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00
73 daniel-mar 20
Sign	<Pm > <Pn > <Po > <Pp > <Pq > <Pr > <Ps > <Pt >
12 daniel-mar 21
 
22
Offset	30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f
23
Data	0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00
73 daniel-mar 24
Sign	<Pu > <Pv > <Pw > <Px > <Py > <Pz > <PH > <PG >
12 daniel-mar 25
 
26
Offset	40 41 42 43 44 45 46 47
27
Data	00 00 00 00 04 0D 02 00
28
Sign	N1 N2 N3 N4 ?? ?? ?? ??
29
 
30
= Legend =
31
 
32
GS
33
	Global settings
34
	0x00 = Individual settings for every drive
35
	0x01 = Global settings for all drives
36
 
73 daniel-mar 37
Pa..Pz	Percentage of the drive A..Z
100 daniel-mar 38
PH	Percentage of "homedrive" (drive '@', "Network home drive" of the Win95 times)
73 daniel-mar 39
PG	Percentage of all drives (Global setting)
12 daniel-mar 40
	0x00 = 0%
41
	0x64 = 100%
42
 
43
N1
44
	"Nuke on delete" setting in a bitmask (7..0)
73 daniel-mar 45
	Bit 0 (LSB) = Flag for device A
46
	Bit 1       = Flag for device B
47
	Bit 2       = Flag for device C
48
	Bit 3       = Flag for device D
49
	Bit 4       = Flag for device E
50
	Bit 5       = Flag for device F
51
	Bit 6       = Flag for device G
52
	Bit 7 (MSB) = Flag for device H
12 daniel-mar 53
 
54
N2
55
	"Nuke on delete" setting in a bitmask (7..0)
73 daniel-mar 56
	Bit 0 (LSB) = Flag for device I
57
	Bit 1       = Flag for device J
58
	Bit 2       = Flag for device K
59
	Bit 3       = Flag for device L
60
	Bit 4       = Flag for device M
61
	Bit 5       = Flag for device N
62
	Bit 6       = Flag for device O
63
	Bit 7 (MSB) = Flag for device P
12 daniel-mar 64
 
65
N3
66
	"Nuke on delete" setting in a bitmask (7..0)
73 daniel-mar 67
	Bit 0 (LSB) = Flag for device Q
68
	Bit 1       = Flag for device R
69
	Bit 2       = Flag for device S
70
	Bit 3       = Flag for device T
71
	Bit 4       = Flag for device U
72
	Bit 5       = Flag for device V
73
	Bit 6       = Flag for device W
74
	Bit 7 (MSB) = Flag for device X
12 daniel-mar 75
 
76
N4
77
	"Nuke on delete" setting in a bitmask (7..0)
73 daniel-mar 78
	Bit 0 (LSB) = Flag for device Y
79
	Bit 1       = Flag for device Z
101 daniel-mar 80
	Bit 2       = Flag for network home drive
73 daniel-mar 81
	Bit 3       = Flag for global setting
101 daniel-mar 82
	Bit 4       = Unused
83
	Bit 5       = Unused
84
	Bit 6       = Unused
85
	Bit 7 (MSB) = Unused