174 lines
3.2 KiB
C
174 lines
3.2 KiB
C
|
/*++
|
|||
|
|
|||
|
Copyright (c) 1991 Microsoft Corporation
|
|||
|
|
|||
|
Module Name:
|
|||
|
|
|||
|
rtdmpval.c
|
|||
|
|
|||
|
Abstract:
|
|||
|
|
|||
|
NT level registry api test program, basic non-error paths.
|
|||
|
|
|||
|
dump a key's value entry (field)
|
|||
|
|
|||
|
rtdmpval <KeyPath> <value entry name>
|
|||
|
|
|||
|
Example:
|
|||
|
|
|||
|
rtdmpval \REGISTRY\MACHINE\TEST\bigkey first_value_field
|
|||
|
|
|||
|
Author:
|
|||
|
|
|||
|
John Vert (jvert) 25-Mar-1993 (written expressly for reading JimK's
|
|||
|
supersecret file)
|
|||
|
|
|||
|
Revision History:
|
|||
|
|
|||
|
--*/
|
|||
|
|
|||
|
#include "cmp.h"
|
|||
|
#include <stdio.h>
|
|||
|
#include <stdlib.h>
|
|||
|
#include <string.h>
|
|||
|
|
|||
|
#define WORK_SIZE 1024
|
|||
|
|
|||
|
void __cdecl main(int, char *);
|
|||
|
void processargs();
|
|||
|
|
|||
|
void
|
|||
|
Delete(
|
|||
|
HANDLE Handle
|
|||
|
);
|
|||
|
|
|||
|
UNICODE_STRING WorkName;
|
|||
|
WCHAR workbuffer[WORK_SIZE];
|
|||
|
|
|||
|
UNICODE_STRING ValueName;
|
|||
|
WCHAR valuebuffer[WORK_SIZE];
|
|||
|
|
|||
|
void
|
|||
|
__cdecl main(
|
|||
|
int argc,
|
|||
|
char *argv[]
|
|||
|
)
|
|||
|
{
|
|||
|
NTSTATUS status;
|
|||
|
OBJECT_ATTRIBUTES ObjectAttributes;
|
|||
|
HANDLE BaseHandle;
|
|||
|
KEY_VALUE_PARTIAL_INFORMATION PartialInfo;
|
|||
|
PKEY_VALUE_PARTIAL_INFORMATION pInfo;
|
|||
|
ULONG i;
|
|||
|
ULONG Count;
|
|||
|
|
|||
|
|
|||
|
//
|
|||
|
// Process args
|
|||
|
//
|
|||
|
|
|||
|
WorkName.MaximumLength = WORK_SIZE;
|
|||
|
WorkName.Length = 0L;
|
|||
|
WorkName.Buffer = &(workbuffer[0]);
|
|||
|
|
|||
|
|
|||
|
ValueName.MaximumLength = WORK_SIZE;
|
|||
|
ValueName.Length = 0L;
|
|||
|
ValueName.Buffer = &(valuebuffer[0]);
|
|||
|
|
|||
|
processargs(argc, argv);
|
|||
|
|
|||
|
|
|||
|
//
|
|||
|
// Set up and open KeyPath
|
|||
|
//
|
|||
|
|
|||
|
printf("rtdmpval: starting\n");
|
|||
|
|
|||
|
InitializeObjectAttributes(
|
|||
|
&ObjectAttributes,
|
|||
|
&WorkName,
|
|||
|
0,
|
|||
|
(HANDLE)NULL,
|
|||
|
NULL
|
|||
|
);
|
|||
|
ObjectAttributes.Attributes |= OBJ_CASE_INSENSITIVE;
|
|||
|
|
|||
|
status = NtOpenKey(
|
|||
|
&BaseHandle,
|
|||
|
KEY_READ,
|
|||
|
&ObjectAttributes
|
|||
|
);
|
|||
|
if (!NT_SUCCESS(status)) {
|
|||
|
printf("rtdmpval: t0: %08lx\n", status);
|
|||
|
exit(1);
|
|||
|
}
|
|||
|
|
|||
|
status = NtQueryValueKey(BaseHandle,
|
|||
|
&ValueName,
|
|||
|
KeyValuePartialInformation,
|
|||
|
&PartialInfo,
|
|||
|
sizeof(PartialInfo),
|
|||
|
&Count);
|
|||
|
|
|||
|
pInfo=malloc(PartialInfo.DataLength+sizeof(PartialInfo));
|
|||
|
status = NtQueryValueKey(BaseHandle,
|
|||
|
&ValueName,
|
|||
|
KeyValuePartialInformation,
|
|||
|
pInfo,
|
|||
|
PartialInfo.DataLength+sizeof(PartialInfo),
|
|||
|
&Count);
|
|||
|
if (!NT_SUCCESS(status)) {
|
|||
|
printf("rtdmpval: t2: %08lx\n", status);
|
|||
|
exit(1);
|
|||
|
}
|
|||
|
|
|||
|
for (i=0; i<PartialInfo.DataLength; i++) {
|
|||
|
printf("%c",pInfo->Data[i]);
|
|||
|
}
|
|||
|
|
|||
|
free(pInfo);
|
|||
|
NtClose(BaseHandle);
|
|||
|
exit(0);
|
|||
|
}
|
|||
|
|
|||
|
void
|
|||
|
processargs(
|
|||
|
int argc,
|
|||
|
char *argv[]
|
|||
|
)
|
|||
|
{
|
|||
|
ANSI_STRING temp;
|
|||
|
|
|||
|
if ( (argc != 3) )
|
|||
|
{
|
|||
|
printf("Usage: %s <KeyPath> <value entry name>\n",
|
|||
|
argv[0]);
|
|||
|
exit(1);
|
|||
|
}
|
|||
|
|
|||
|
RtlInitAnsiString(
|
|||
|
&temp,
|
|||
|
argv[1]
|
|||
|
);
|
|||
|
|
|||
|
RtlAnsiStringToUnicodeString(
|
|||
|
&WorkName,
|
|||
|
&temp,
|
|||
|
TRUE
|
|||
|
);
|
|||
|
|
|||
|
RtlInitAnsiString(
|
|||
|
&temp,
|
|||
|
argv[2]
|
|||
|
);
|
|||
|
|
|||
|
RtlAnsiStringToUnicodeString(
|
|||
|
&ValueName,
|
|||
|
&temp,
|
|||
|
TRUE
|
|||
|
);
|
|||
|
|
|||
|
return;
|
|||
|
}
|