Subversion Repositories recyclebinunit

Compare Revisions

Regard whitespace Rev 106 → Rev 107

/trunk/FORMAT.md
97,7 → 97,7
| offset (hex) | size (dec) | type | description |
|--------------|------------|-----------------|-------------|
| 0000 | 8 | int64 | Version, always `01 00 00 00 00 00 00 00` |
| 0008 | 8 | uint64 | Original size |
| 0008 | 8 | int64 | Original size |
| 0010 | 8 | FILETIME | Deletion time |
| 0018 | 520 | wchar[MAX_PATH] | Original file name and path in Unicode characters. 260 characters (including NUL terminator) |
 
106,7 → 106,7
| offset (hex) | size (dec) | type | description |
|--------------|------------|-----------------|-------------|
| 0000 | 8 | int64 | Version, always `02 00 00 00 00 00 00 00` |
| 0008 | 8 | uint64 | Original size |
| 0008 | 8 | int64 | Original size |
| 0010 | 8 | FILETIME | Deletion time |
| 0018 | 4 | DWORD | Original file name and path: Count of Unicode characters, including NUL terminator |
| 001C | 2*n | wchar[] | Original file name and path: Zero terminated Unicode string |
/trunk/README.md
0,0 → 1,15
 
# Recycle Bin Unit
 
The Recycle Bin Unit helps you analyze recycle bin contents from your currently running system
("online mode") as well as analyze recycle bins from foreign system drives ("offline mode"),
i.e. for forensics or data recovery.
 
 
This repository contains:
 
- Analysis of all recycle bin info file formats for Windows 95 beta until Windows 11.
 
- "Recycle Bin Unit" for Delphi for reading online and offline recycle bins.
 
- Demo Application (pre-compiled) to list deleted files from online and offline recycle bins.