searching the registry redux

[Stephen Zura]

Hello all, I am looking to get device names and IDs from the registry but so far I have been unable to do so. I found another similar question/response that showed how to search the registry through using log parser 2.2 as a COM library.

I modified only the query and where it plops the text out to from the original code

            RegRecordSet rs = null;
            try
            {
                LogQuery qry = new LogQuery();
                RegistryInputFormat registryFormat = new RegistryInputFormat();
                string query = @"SELECT ValueName, Value from \HKLM\SYSTEM\ControlSet001\Control\Class WHERE Value LIKE 'PCI\\VEN_%'";
                rs = qry.Execute(query, registryFormat);
                for (; !rs.atEnd(); rs.moveNext())
                    txt1.AppendText(rs.getRecord().toNativeString(" , ") + System.Environment.NewLine);
            }
            finally
            {
                rs.close();
            }
 

I get output like this

MatchingDeviceId , pci\ven_8086&dev_3a3a
MatchingDeviceId , pci\ven_8086&dev_3a3c
MatchingDeviceId , pci\ven_8086&dev_3a34
MatchingDeviceId , pci\ven_8086&dev_3a35
MatchingDeviceId , pci\ven_8086&dev_3a36
MatchingDeviceId , pci\ven_8086&dev_3a37
MatchingDeviceId , pci\ven_8086&dev_3a38
MatchingDeviceId , pci\ven_8086&dev_3a39
MatchingDeviceId , pci\ven_1002&dev_9442
MatchingDeviceId , pci\ven_1002&dev_68f9
DeviceInstanceID , PCI\VEN_8086&DEV_10CD&SUBSYS_01981025&REV_00\3&11583659&0&C8
ComponentId , pci\ven_8086&dev_10cd
MatchingDeviceId , pci\ven_8086&dev_10cd
MatchingDeviceId , pci\ven_8086&dev_3423
MatchingDeviceId , pci\ven_8086&dev_3a30
MatchingDeviceId , pci\ven_8086&dev_3425
MatchingDeviceId , pci\ven_8086&dev_244e
MatchingDeviceId , pci\ven_8086&dev_3426
MatchingDeviceId , pci\ven_8086&dev_3405
MatchingDeviceId , pci\ven_8086&dev_342d
MatchingDeviceId , pci\ven_8086&dev_3408
MatchingDeviceId , pci\ven_8086&dev_342e
MatchingDeviceId , pci\ven_8086&dev_340a
MatchingDeviceId , pci\ven_8086&dev_3438
MatchingDeviceId , pci\ven_8086&dev_340e
MatchingDeviceId , pci\ven_8086&dev_3a16
MatchingDeviceId , pci\ven_8086&dev_3422
MatchingDeviceId , pci\ven_1106&dev_3044
 

which is half the puzzle... what I would like to do is pull the DriverDesc field as well (or any other field for that matter) but it doesnt seem to let you based off of the way it makes it's "sql fields"

**From the Log parser 2.2 help file**

Thanks for any help/suggestions!