mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update shellbags_xp.pl

Browse Source 
Fix output of characters for shellbags_xp
This commit is contained in:
Mark McKinnon 2021-09-09 09:50:18 -04:00
parent 2621d15bb6
commit 37e4b4a6d8
1 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
thirdparty/rr-full/plugins/shellbags_xp.pl vendored
View File

@ -37,9 +37,6 @@ package shellbags_xp;
use strict;
use Time::Local;
require 'shellitems.pl';
my %config = (hive => "NTUSER\.DAT",
hivemask => 32,
output => "report",
@ -779,13 +776,13 @@ sub parseFolderEntry {
$str = substr($data,$ofs,length($data) - 30);
my $longname = (split(/\x00\x00/,$str,2))[0];
$longname =~ s/\x00//g;
$longname = $longname.chr 0x00;
if ($longname ne "") {
$item{name} = Utf16ToUtf8($longname);
}
else {
$item{name} = _Utf16ToUtf8($shortname);
$item{name} = Utf16ToUtf8($shortname);
}
return %item;
}
@ -934,5 +931,14 @@ sub printData {
return @display;
}
#---------------------------------------------------------------------
# Utf16ToUtf8()
#---------------------------------------------------------------------
sub Utf16ToUtf8 {
my $str = $_[0];
Encode::from_to($str,'UTF-16LE','utf8');
my $str2 = Encode::decode_utf8($str);
return $str;
}
1;