PDA

View Full Version : reg_multi_sz


jassing
04-04-2007, 07:28 AM
I have several pending file operations. (a few deletes & moves)

when I issue this:
local cPending = Registry.GetValue(HKEY_LOCAL_MACHINE, "SYSTEM\\CurrentControlSet\\Control\\Session Manager", "PendingFileRenameOperations", false);
Clipboard.CopyText(cPending);
the clipboard holds exactly this:
\??\c:\99af4c5cbb04c658df2c\update\update.exe
however, the registry entry contains this:
\??\c:\99af4c5cbb04c658df2c\update\update.exe

\??\c:\99af4c5cbb04c658df2c\update

\??\c:\99af4bb04c658df2c

\??\c:\c5c4a8a153ba8443ec33643b0b5e\update\update. exe

\??\c:\c5c4a8a153ba8443ec33643b0b5e\update\updspap i.dll

\??\c:\c5c4a8a153ba8443ec33643b0b5e\update

\??\c:\c5c4a8a153ba8443ec33643b0b5e

\??\C:\windows\AppPatch\SET242.tmp
!\??\C:\windows\AppPatch\sysmain.sdb
\??\C:\windows\AppPatch\SET243.tmp
!\??\C:\windows\AppPatch\apphelp.sdb
\??\C:\windows\system32\DllCache\SET244.tmp
!\??\C:\windows\system32\DllCache\sysmain.sdb
\??\c:\9f779fa7cf58f44bf69bd830a69f6a8fc5c

Help says this:
Note:[...] For values of type REG_MULTI_SZ, a string will be returned where each registry entry string is separated by a "|" character.

how do I read this registry entry reliably?

Eagle
04-04-2007, 03:03 PM
this does'nt help much, however csd214 and myself spent some effort
looking into this, back then the issue was that particular key can have
a structure depending on the Os and how the entries in that key are
created. IR proggies I beleive create a space between each entry,
which makes proper returns of that key not reliable using the action.

not 100% sure on this yet, on Vista that pendingfilerename operations
key-valuename is different. My 64 bit machine with Vista installed is
down..dead motherboard,something to do over the easter break ;)

so can't check the different key thing for ya..

sorry not much help.

jassing
04-04-2007, 03:21 PM
well; at least it's a confirmed issue...

hey IR -- any chance of fixing this?

Eagle
04-04-2007, 03:36 PM
I'm sure IR will comment here, correcting my comments, if needed too :)

if you open regedit, it can raise an error if you select that valuename,
if there are pending file operations, and will remove the spaces.

again this particular multi type entry seems to be treated differently and depending on what Os :rolleyes