Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add MUI support for timezone translations #518

Merged
merged 6 commits into from
Feb 1, 2024

Conversation

JSCU-CNI
Copy link
Contributor

This PR fixes the datetime plugin when running Dissect against Windows distributions with a different locale. The plugin assumes Python has access to the generated en-US locale on the machine which it is run from.

Non-English distributions of Windows contain a local translation in the Display, Dlt and Std keys in HKLM\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones. Previously this would break the datetime plugin and any other plugins using datetime.tzinfo to convert timestamps to UTC.

This is fixed by using a lookup table (exported from C:/Windows/System32/en-US/tzres.dll.mui) and the MUI_Display, MUI_Dlt and MUI_Std keys in timezone registry keys. These MUI_* keys contain a registry string redirection value which point to the English translation of a timezone in tzres.dll.mui.

Co-authored-by: Erik Schamper <1254028+Schamper@users.noreply.github.com>
Schamper
Schamper previously approved these changes Jan 31, 2024
Copy link

codecov bot commented Jan 31, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (411641c) 73.79% compared to head (0c65505) 73.80%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #518      +/-   ##
==========================================
+ Coverage   73.79%   73.80%   +0.01%     
==========================================
  Files         276      277       +1     
  Lines       23040    23050      +10     
==========================================
+ Hits        17003    17013      +10     
  Misses       6037     6037              
Flag Coverage Δ
unittests 73.80% <100.00%> (+0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@Schamper
Copy link
Member

I accidentally broke the test so we have to merge #519 first.. 😅

@Schamper Schamper merged commit 2f61051 into fox-it:main Feb 1, 2024
16 checks passed
@JSCU-CNI JSCU-CNI deleted the fix/windows-timezone-locale branch February 15, 2024 12:40
Zawadidone pushed a commit to Zawadidone/dissect.target that referenced this pull request Apr 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants