mirror of
https://github.com/overcuriousity/autopsy-flatpak.git
synced 2025-07-17 02:07:42 +00:00
67 lines
1.8 KiB
Perl
67 lines
1.8 KiB
Perl
#-----------------------------------------------------------
|
|
# xpedition.pl
|
|
# Determine the edition of XP (MediaCenter, TabletPC)
|
|
#
|
|
# History
|
|
# 20120722 - updated the %config hash
|
|
# 20090727 - created
|
|
#
|
|
# References
|
|
# http://windowsitpro.com/article/articleid/94531/
|
|
# how-can-a-script-determine-if-windows-xp-tablet-pc-edition-is-installed.html
|
|
# http://unasked.com/question/view/id/119610
|
|
#
|
|
# copyright 2009 H. Carvey
|
|
#-----------------------------------------------------------
|
|
package xpedition;
|
|
use strict;
|
|
my %config = (hive => "System",
|
|
hivemask => 4,
|
|
output => "report",
|
|
category => "",
|
|
hasShortDescr => 1,
|
|
hasDescr => 0,
|
|
hasRefs => 0,
|
|
osmask => 1,
|
|
version => 20120722);
|
|
|
|
sub getConfig{return %config}
|
|
sub getShortDescr {
|
|
return "Queries System hive for XP Edition info";
|
|
}
|
|
sub getDescr{}
|
|
sub getRefs {}
|
|
sub getHive {return $config{hive};}
|
|
sub getVersion {return $config{version};}
|
|
|
|
my $VERSION = getVersion();
|
|
|
|
sub pluginmain {
|
|
my $class = shift;
|
|
my $hive = shift;
|
|
my $key;
|
|
my $edition = 0;
|
|
|
|
::logMsg("Launching xpedition v.".$VERSION);
|
|
::rptMsg("xpedition v.".$VERSION); # banner
|
|
::rptMsg("(".getHive().") ".getShortDescr()."\n"); # 20110830 [fpi] + banner
|
|
my $reg = Parse::Win32Registry->new($hive);
|
|
my $root_key = $reg->get_root_key;
|
|
::rptMsg("xpedition v.".$VERSION);
|
|
eval {
|
|
$key = $root_key->get_subkey("WPA\\MediaCenter")->get_value("Installed")->get_data();
|
|
if ($key == 1) {
|
|
::rptMsg("MediaCenter Edition");
|
|
$edition = 1;
|
|
}
|
|
};
|
|
|
|
eval {
|
|
$key = $root_key->get_subkey("WPA\\TabletPC")->get_value("Installed")->get_data();
|
|
if ($key == 1) {
|
|
::rptMsg("TabletPC Edition");
|
|
$edition = 1;
|
|
}
|
|
};
|
|
}
|
|
1 |