Subversion Repositories recyclebinunit

Rev

Rev 100 | Blame | Compare with Previous | Last modification | View Log | RSS feed


Windows 95 "PurgeInfo" Analysis by Daniel Marschall

= Location =

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\BitBucket: PurgeInfo (Binary)

= Data structure =

Offset  00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Data    48 00 00 00 01 00 00 00 0A 00 0A 00 0A 00 0A 00
Sign    < cbSize  > <GS       > <Pa > <Pb > <Pc > <Pd >

Offset  10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f
Data    0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00
Sign    <Pe > <Pf > <Pg > <Ph > <Pi > <Pj > <Pk > <Pl >

Offset  20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f
Data    0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00
Sign    <Pm > <Pn > <Po > <Pp > <Pq > <Pr > <Ps > <Pt >

Offset  30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f
Data    0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00 0A 00
Sign    <Pu > <Pv > <Pw > <Px > <Py > <Pz > <PH > <PG >

Offset  40 41 42 43 44 45 46 47
Data    00 00 00 00 04 0D 02 00
Sign    N1 N2 N3 N4 ?? ?? ?? ??

= Legend =

GS
        Global settings
        0x00 = Individual settings for every drive
        0x01 = Global settings for all drives

Pa..Pz  Percentage of the drive A..Z
PH      Percentage of "homedrive" (drive '@', "Network home drive" of the Win95 times)
PG      Percentage of all drives (Global setting)
        0x00 = 0%
        0x64 = 100%

N1
        "Nuke on delete" setting in a bitmask (7..0)
        Bit 0 (LSB) = Flag for device A
        Bit 1       = Flag for device B
        Bit 2       = Flag for device C
        Bit 3       = Flag for device D
        Bit 4       = Flag for device E
        Bit 5       = Flag for device F
        Bit 6       = Flag for device G
        Bit 7 (MSB) = Flag for device H

N2
        "Nuke on delete" setting in a bitmask (7..0)
        Bit 0 (LSB) = Flag for device I
        Bit 1       = Flag for device J
        Bit 2       = Flag for device K
        Bit 3       = Flag for device L
        Bit 4       = Flag for device M
        Bit 5       = Flag for device N
        Bit 6       = Flag for device O
        Bit 7 (MSB) = Flag for device P

N3
        "Nuke on delete" setting in a bitmask (7..0)
        Bit 0 (LSB) = Flag for device Q
        Bit 1       = Flag for device R
        Bit 2       = Flag for device S
        Bit 3       = Flag for device T
        Bit 4       = Flag for device U
        Bit 5       = Flag for device V
        Bit 6       = Flag for device W
        Bit 7 (MSB) = Flag for device X

N4
        "Nuke on delete" setting in a bitmask (7..0)
        Bit 0 (LSB) = Flag for device Y
        Bit 1       = Flag for device Z
        Bit 2       = Flag for network home drive
        Bit 3       = Flag for global setting
        Bit 4       = Unused
        Bit 5       = Unused
        Bit 6       = Unused
        Bit 7 (MSB) = Unused