able/windows-nt
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
windows-nt/Source/XPSP1/NT/base/wow64/regremap/wow64reg/reflectr.c

1140 lines
28 KiB
C
Raw Normal View History

Add source files
2020-09-26 03:20:57 -05:00
/*++
Copyright (c) 1999-2000 Microsoft Corporation
Module Name:
reflectr.c
Abstract:
This module will register reflector thread and do necessary action while awake up.
Author:
ATM Shafiqul Khalid (askhalid) 16-Feb-2000
Revision History:
--*/
#include <windows.h>
#include <windef.h>
#include <stdio.h>
#include <string.h>
#include "wow64reg.h"
#include <assert.h>
#include <shlwapi.h>
#include "reflectr.h"
REFLECTOR_EVENT eReflector[ISN_NODE_MAX_NUM];
REFLECTR_STATUS ReflectrStatus = Stopped;
HANDLE hRegistryEvent[ISN_NODE_MAX_NUM];
HANDLE hReflector;
DWORD TotalEventCount = 0;
VOID
DbgPrint(
PCHAR FormatString,
...
);
REFLECTR_STATUS
GetReflectorThreadStatus ()
/*++
Routine Description:
Return current thread status;
Arguments:
None.
Return Value:
REFLECTR_STATUS
--*/
{
return ReflectrStatus;
}
BOOL
NotifyKeyChange (
HKEY hKey,
HANDLE hEvent
)
/*
Routine Description:
Register an event to be fired when something get changed on a key.
Arguments:
hKey - handle to a key that need to be watched.
hEvent event that need to be triggered.
Return Value:
TRUE if the event registration succeed,
FALSE otherwise.
--*/
{
DWORD Ret;
ResetEvent (hEvent);
Ret = RegNotifyChangeKeyValue(
hKey, // need to change to the ISN node
TRUE, // Watch the whole sub-tree
REG_NOTIFY_CHANGE_NAME |
REG_NOTIFY_CHANGE_LAST_SET, // Don't watch for anything
hEvent, // Event Handle
TRUE // Async
);
if ( ERROR_SUCCESS != Ret)
DbgPrint ("\nWow64.exe:Error!! Couldn't register events:%x on handle %x",hEvent, hKey);
return Ret == ERROR_SUCCESS;
}
VOID
RefreshWaitEventTable ()
/*++
Routine Description:
Just copy all event object and we can wail for new event to trigger.
Arguments:
None.
Return Value:
None.
--*/
{
DWORD k;
for (k=0;k<TotalEventCount;k++)
hRegistryEvent[k] = eReflector[k].hRegistryEvent;
}
BOOL
CreateInsertEvent (
PWCHAR Name,
DWORD dwIndex
)
/*++
Routine Description:
Create an event for the key.
Arguments:
Name - Name of the key an event will be created to watch any changes.
dwIndex - is the index to the reflector table. when event is fired up we need to tack the key.
Return Value:
TRUE on success,
FALSE Otherwise
--*/
{
if ( Name == UNICODE_NULL)
return FALSE;
if (wcsstr( Name, (LPCWSTR)L"\\REGISTRY\\USER\\*\\")) {
if (RegOpenKey ( HKEY_CURRENT_USER,
Name+sizeof ( L"\\REGISTRY\\USER\\*")/sizeof(WCHAR),
&eReflector[TotalEventCount].hKey) != ERROR_SUCCESS) {
Wow64RegDbgPrint (("\nSorry! couldn't open Key [%S]",
Name+sizeof ( L"\\REGISTRY\\USER\\*")/sizeof(WCHAR) ) );
return FALSE;
}
} else {
eReflector[TotalEventCount].hKey = OpenNode (Name);
if ( eReflector[TotalEventCount].hKey == NULL ) {
Wow64RegDbgPrint (("\nSorry! couldn't open Key [%S] Len%d %d %d", Name, wcslen (Name), Name[0], UNICODE_NULL ));
return FALSE;
}
}
//
// DO make sure that 32bit version exist on the hive...
//
{
WCHAR TempName[256];
GetMirrorName (Name, TempName);
if ( wcscmp(Name,TempName ) )
CreateNode ( TempName );
// get all kind of name
}
eReflector[TotalEventCount].hRegistryEvent = CreateEvent(
NULL, // Security Attributes
TRUE, // Manual Reset
FALSE, // Initial State
NULL // Unnamed
) ;
if ( !eReflector[TotalEventCount].hRegistryEvent) {
Wow64RegDbgPrint (("\nUnable to create event"));
RegCloseKey (eReflector[TotalEventCount].hKey);
return FALSE;
}
eReflector[TotalEventCount].dwIndex = dwIndex;
ResetEvent (eReflector[TotalEventCount].hRegistryEvent);
if (!NotifyKeyChange (eReflector[TotalEventCount].hKey,
eReflector[TotalEventCount].hRegistryEvent
)) {
Wow64RegDbgPrint ( ("\nSevere Error!!!! Couldn't hook to registry notify index:%d", TotalEventCount) );
RegCloseKey (eReflector[TotalEventCount].hKey);
CloseHandle (eReflector[TotalEventCount].hRegistryEvent);
return FALSE; //set thread state
}
TotalEventCount++;
return TRUE;
}
DWORD
TotalRelflectorKey()
/*++
Routine Description:
Return the total number of the key in the reflector Table.
Arguments:
None.
Return Value:
Number of entry in the reflector table.
--*/
{
extern ISN_NODE_TYPE *ReflectorTable;
DWORD i;
for (i=0;;i++)
if ( ReflectorTable[i].NodeValue[0] == UNICODE_NULL )
return i;
}
VOID
PrintTable ()
/*++
Routine Description:
Dump the current content of the table, just for debugging purpose.
Arguments:
None.
Return Value:
None.
--*/
{
extern ISN_NODE_TYPE *ReflectorTable;
DWORD Size = TotalRelflectorKey();
DWORD i;
for ( i=0;i<Size;i++)
Wow64RegDbgPrint ( ("\nTableElem [%d], %S", i, ReflectorTable[i].NodeValue));
}
BOOL
RemoveKeyToWatch (
PWCHAR Name
)
/*++
Routine Description:
Remove an entry in from the table to reflector thread need to watch.
Arguments:
Name - Name of the key to remove from the table.
Return Value:
TRUE on success,
FALSE Otherwise
--*/
{
DWORD i;
DWORD k;
extern ISN_NODE_TYPE *ReflectorTable;
DWORD Size;
for (i=1; i<TotalEventCount;i++)
if (!_wcsicmp (Name, ReflectorTable[eReflector[i].dwIndex].NodeValue)) {//found match
// move reflector table entry
// fixup pointer in the ereflectortable
Size = TotalRelflectorKey ();
wcscpy ( ReflectorTable[eReflector[i].dwIndex].NodeValue,
ReflectorTable[Size-1].NodeValue
);
Size--;
ReflectorTable[Size].NodeValue[0]=UNICODE_NULL; //invalidate the place
for (k=1; k<TotalEventCount;k++)
if ( eReflector[k].dwIndex == Size ) {
eReflector[k].dwIndex = eReflector[i].dwIndex; //new location
break;
}
// fixup the table with the new entry
{
REFLECTOR_EVENT Temp = eReflector[i];
eReflector[i] = eReflector[TotalEventCount-1];
eReflector[TotalEventCount-1] = Temp;;
}
TotalEventCount--;
CloseHandle (eReflector[TotalEventCount].hRegistryEvent );
RegCloseKey ( eReflector[TotalEventCount].hKey);
eReflector[TotalEventCount].dwIndex = -1;
//Now remove from the original table
PrintTable();
return TRUE;
}
return FALSE;
}
BOOL
AddKeyToWatch (
PWCHAR Name
)
/*++
Routine Description:
Add an entry in the table to reflector thread need to watch.
Arguments:
Name - Name of the key to watch.
Return Value:
TRUE on success,
FALSE Otherwise
--*/
{
//
// Check for duplicate entry
//
DWORD i;
DWORD k;
extern ISN_NODE_TYPE *ReflectorTable;
DWORD Size;
for (i=1; i<TotalEventCount;i++)
if (!_wcsicmp (Name, ReflectorTable[eReflector[i].dwIndex].NodeValue)) {//found match
return FALSE; //already there
}
Size = TotalRelflectorKey ();
wcscpy ( ReflectorTable[Size].NodeValue, Name );
ReflectorTable[Size+1].NodeValue[0]=UNICODE_NULL; //invalidate the place
if (!CreateInsertEvent ( Name, Size ))
ReflectorTable[Size].NodeValue[0]=UNICODE_NULL; //no point of keeping the bad entry
return TRUE;
}
BOOL
ValidateOpenHandleEventTable (
DWORD dwIndex
)
/*++
Routine Description:
Validate a given node and if something wrong kick out the entry from the
event table.
Arguments:
dwIndex - entry that need to be checked
Return Value:
TRUE if function succeed.
FALSE otherwise.
--*/
{
extern ISN_NODE_TYPE *ReflectorTable;
//
// current implementation will just remove the entry from the table
//
return RemoveKeyToWatch (ReflectorTable[eReflector[dwIndex].dwIndex].NodeValue);
}
VOID
PeocessHiveLoadUnload ()
/*++
Routine Description:
Take necessary action when a hive has been unloaded.
Arguments:
None.
Return Value:
None.
--*/
{
DWORD i;
WCHAR Name[257];
WCHAR Type;
for (;;) {
if (!DeQueueObject ( Name, &Type ))
break;
if ( Type == HIVE_UNLOADING ) { //Closing hive
RemoveKeyToWatch (Name);
} else if ( Type == HIVE_LOADING) { //opening hive
AddKeyToWatch (Name);
}
Wow64RegDbgPrint ( ("\nFired up from shared memory write.....Value..%S [%C]", Name, Type) );
}
}
ULONG
ReflectorFn (
PVOID *pTemp
)
/*++
Routine Description:
Main reflector thread.
Arguments:
pTemp -
Return Value:
return exit code.
--*/
{
DWORD Ret, k;
DWORD LocalWaitTime;
pTemp=NULL;
for (k=0;k<TotalEventCount;k++)
hRegistryEvent[k] = eReflector[k].hRegistryEvent;
for (k=0;k<TotalEventCount;k++) { //reset everything and wait for a fresh event
if (eReflector[k].hRegistryEvent)
NotifyKeyChange ( eReflector[k].hKey, eReflector[k].hRegistryEvent);
}
for (;;) {
if ( ReflectrStatus == PrepareToStop ) {
Wow64RegDbgPrint ( ("\nGoing to stop"));
ReflectrStatus = Stopped;
break; // the thread should stop
}
Wow64RegDbgPrint ( ("\nReflector thread has been started and will wait for event\n.......") );
Sleep (1000*10); //wait 10 sec before reregistering events
LocalWaitTime = WAIT_INTERVAL; //wait infinite
for (;;) {
//DbgPrint ("\nwow64.exe Waiting to liten...");
Ret = WaitForMultipleObjects(TotalEventCount, hRegistryEvent, FALSE, LocalWaitTime );
if (ReflectrStatus == PrepareToStop) {
ReflectrStatus = Stopped;
Wow64RegDbgPrint ( ("\nGoing to stop"));
break; // the thread should stop
}
if ( Ret == WAIT_TIMEOUT )
break; // break the loop and process all dirty hives.
if ( ( Ret-WAIT_OBJECT_0) > TotalEventCount ) { //right index
Wow64RegDbgPrint ( ("\nWaitMultiple object failed!!.. %d LastError:%d", Ret, GetLastError ()) );
Sleep (1000*10); //wait 10 sec before reregistering events
continue;
//break;
}
//
// Checkspecial case like shared memory write
//
if ( (Ret-WAIT_OBJECT_0) == 0){
PeocessHiveLoadUnload ();
ResetEvent (eReflector[0].hRegistryEvent); // reset the event that triggered this
RefreshWaitEventTable ();
continue;
}
//
// set timeout to 10 second, Mark the hive dirty, reset event, and back to sleep
//
LocalWaitTime = 5*1000; // poll the event every 5 second.
Sleep (1000* 3);// Sleep 3 second to reregister the event.
eReflector[Ret-WAIT_OBJECT_0].bDirty = TRUE;
ResetEvent (eReflector[Ret-WAIT_OBJECT_0].hRegistryEvent);
//
// watch for the event again
//
if (!NotifyKeyChange ( eReflector[Ret-WAIT_OBJECT_0].hKey,
eReflector[Ret-WAIT_OBJECT_0].hRegistryEvent)){
//
// if the node get deleted you need to unload the events and everything
//
ValidateOpenHandleEventTable (Ret-WAIT_OBJECT_0);
RefreshWaitEventTable ();
//ReflectrStatus = Abnormal;
//break; //set thread state
}
}
if (ReflectrStatus == PrepareToStop)
break;
//
// Now process all dirty hive.
//
for (k=0;k<TotalEventCount;k++)
if ( eReflector[k].bDirty ) {
CreateIsnNodeSingle( eReflector[k].dwIndex); // reflect changes
eReflector[k].bDirty = FALSE;
//ResetEvent (eReflector[k].hRegistryEvent);
}
} //for loop
Wow64RegDbgPrint ( ("\nReflector thread terminated...."));
return TRUE;
}
BOOL
RegisterReflector()
/*++
Routine Description:
Register the reflector thread after doing necessary initialization.
Arguments:
None.
Return Value:
TRUE if it can launch the reflector thread properly.
FALSE otherwise.
--*/
{
DWORD i;
DWORD Size;
extern ISN_NODE_TYPE *ReflectorTable;
if ( ReflectrStatus == Running )
return TRUE; // already running
if ( ReflectrStatus != Dead )
return FALSE; // last state was invalid I can do nothing
InitializeIsnTableReflector (); //initialize the table with the more list in the registry.
hReflector = NULL;
if (!TotalEventCount)
Wow64RegDbgPrint (("\nSorry! total event count for reflector is zero %d", TotalEventCount));
//
// Now time to create event and sync object for the shared resources
//
for (i=0;i<ISN_NODE_MAX_NUM;i++) {
eReflector[i].hRegistryEvent = NULL;
eReflector[i].hKey = NULL;
eReflector[i].dwIndex = -1;
eReflector[i].bDirty = FALSE; // not dirty so that we need to refresh.
}
if (!CreateSharedMemory ( 0 ))
Wow64RegDbgPrint (("\nSorry Couldn't create/open shared memory Ret:%x", GetLastError ())); //default creation
if (!Wow64CreateEvent ( 0, &eReflector[TotalEventCount].hRegistryEvent ))
Wow64RegDbgPrint ( ("\nSorry Couldn't create events, reflector can listen to others"));
else {
eReflector[TotalEventCount].dwIndex = -1;
TotalEventCount++;
}
Size = TotalRelflectorKey ();
for ( i=0;i<Size;i++) {
//
// Open The Key
//
//
// special case current user
//
CreateInsertEvent ( ReflectorTable[i].NodeValue, i );
}
//
// Now Create a thread to watch the event.
//
hReflector = CreateThread(
NULL, // pointer to security attributes
0, // initial thread stack size
ReflectorFn, // pointer to thread function
0, // argument for new thread
0, // creation flags
NULL // pointer to receive thread ID
);
if ( !hReflector ) {
Wow64RegDbgPrint ( ("\nCouldn't create reflector thread"));
return FALSE;
}
ReflectrStatus = Running;
return TRUE;
}
BOOL
UnRegisterReflector()
/*++
Routine Description:
Unregister reflector thread and cleanup resources used by the reflector thread.
Arguments:
None.
Return Value:
TRUE if the function succeed.
FALSE otherwise.
--*/
{
DWORD i;
DWORD k;
ReflectrStatus = PrepareToStop;
//
// try to signal event in case the thread is wating
//
for (k=0;k<TotalEventCount;k++) { //reset everything and wait for a fresh event
if (eReflector[k].hRegistryEvent)
SetEvent (eReflector[k].hRegistryEvent);
}
//
// Allow reflector thread little bit time to stop.
//
i=0;
while ( ReflectrStatus != Stopped ) {
Sleep(1000);
if ( ReflectrStatus != Running )
break; // why you should wait idle thread or that might be in a abnormal state.
i++;
if (i>60*5)
break; // 5min timeout going to stop anyway.
}
for (i=1;i<TotalEventCount;i++) { // skip the initial event for shared memory
CloseHandle (eReflector[i].hRegistryEvent);
eReflector[i].hRegistryEvent = NULL;
RegCloseKey ( eReflector[i].hKey );
eReflector[i].hKey = NULL;
}
if ( hReflector ) {
CloseHandle (hReflector); //make sure abnormal thread termination doesn't cause any corruption
hReflector = NULL;
}
ReflectrStatus = Dead;
//
// release shared resources
//
CloseSharedMemory ();
Wow64CloseEvent ();
return TRUE;
}
BOOL
InitReflector ()
/*++
Routine Description:
Initialize resources associated with a reflector thread.
Arguments:
None.
Return Value:
TRUE if the function succeed.
FALSE otherwise.
--*/
{
DWORD k;
ReflectrStatus = Dead;
hReflector = NULL;
for (k=0;k<ISN_NODE_MAX_NUM;k++) { //reset everything and wait for a fresh event
eReflector[k].hRegistryEvent = NULL;
eReflector[k].hKey = NULL;
eReflector[k].bDirty = FALSE; // not dirty so that we need to refresh.
}
return TRUE;
}
LONG
RegReflectKey (
HKEY hKey, // handle to open key
LPCTSTR lpSubKey, // subkey name
DWORD dwOption // option flag
)
/*++
Routine Description:
Synchronize registry hive from a given point.
Arguments:
hKey - handle to an open key. Can be predefined handle or NULL to sync all.
lpSubKey - Name of the subkey. This can be NULL.
dwOption - set to zero. for future uses.
Return Value:
ERROR_SUCCESS on success,
WIN32 error otherwise.
--*/
{
HKEY hDest;
WCHAR Path[_MAX_PATH];
DWORD Len = _MAX_PATH;
WCHAR DestNode[_MAX_PATH];
BOOL b64bitSide=TRUE;
BOOL Ret = TRUE;
DestNode[0] = UNICODE_NULL;
//
// present implementation will start from the very top level
//
//
// should interact with the running service, stop the thread, run the reflector and then try again.
//
if (hKey != NULL || dwOption!=0 ) {
Wow64RegDbgPrint (("\nCurrent implementation only take all zero parameters. "));
}
if (!InitializeIsnTable ())
return -1;
if (!InitializeIsnTableReflector ())
return -1;
if (!HandleToKeyName ( hKey, Path, &Len ))
return -1;
//
// Make the complete path
//
if ( lpSubKey != NULL )
if (lpSubKey[0] != UNICODE_NULL ) {
wcscat (Path, L"\\");
wcscat (Path, lpSubKey );
}
//
// MakeSure destination exists
//
//
// must check the value if that exist
//
if ( Is64bitNode ( Path )) {
Map64bitTo32bitKeyName ( Path, DestNode );
} else {
b64bitSide = FALSE;
Map32bitTo64bitKeyName ( Path, DestNode );
}
hDest = OpenNode (DestNode);
if (hDest != NULL)
RegCloseKey ( hDest);
else {
if ( !CreateNode (DestNode))
return -1;
}
SyncNode (Path);
return ERROR_SUCCESS;
}
BOOL
SetWow64InitialRegistryLayout ()
/*++
Routine Description:
This routine does some initial setup for the registry for wow64.
Arguments:
None.
Return Value:
TRUE if the function succeed.
FALSE otherwise.
--*/
{
DWORD Ret;
HKEY Key;
//HKEY Key1;
//
// Create symbolic link {HKLM\software\Wow6432Node\Classes to HKLM\software\classes\wow6432Node}
//
InitializeWow64OnBoot (1);
return TRUE;
Ret = RegCreateKeyEx(
HKEY_LOCAL_MACHINE, // handle to an open key
L"SOFTWARE\\Classes\\Wow6432Node", // address of subkey name
0, // reserved
NULL, // address of class string
REG_OPTION_NON_VOLATILE, // special options flag
KEY_ALL_ACCESS, // desired security access
NULL, // address of key security structure
&Key, // address of buffer for opened handle
NULL // address of disposition value buffer
);
if ( Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry! I couldn't create the key SOFTWARE\\Classes\\Wow6432Node") );
return FALSE;
}
RegCloseKey ( Key );
Ret = RegCreateKeyEx(
HKEY_LOCAL_MACHINE, // handle to an open key
L"SOFTWARE\\Wow6432Node", // address of subkey name
0, // reserved
NULL, // address of class string
REG_OPTION_NON_VOLATILE , // special options flag
KEY_ALL_ACCESS, // desired security access
NULL, // address of key security structure
&Key, // address of buffer for opened handle
NULL // address of disposition value buffer
);
if (Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry! couldn't create/open SOFTWARE\\Wow6432Node") );
return FALSE;
} else {
//
// Delete the Key if exist
//
Ret = RegDeleteKey ( Key, L"Classes");
RegCloseKey (Key);
}
if (Ret == ERROR_SUCCESS )
Ret = RegCreateKeyEx(
HKEY_LOCAL_MACHINE, // handle to an open key
L"SOFTWARE\\Wow6432Node\\Classes", // address of subkey name
0, // reserved
NULL, // address of class string
REG_OPTION_NON_VOLATILE | REG_OPTION_OPEN_LINK | REG_OPTION_CREATE_LINK, // special options flag
KEY_ALL_ACCESS | KEY_CREATE_LINK, // desired security access
NULL, // address of key security structure
&Key, // address of buffer for opened handle
NULL // address of disposition value buffer
);
if(Ret == ERROR_SUCCESS) {
Ret = RegSetValueEx(
Key,
L"SymbolicLinkValue",
0,
REG_LINK,
(PBYTE)WOW64_32BIT_MACHINE_CLASSES_ROOT,
(DWORD ) (wcslen (WOW64_32BIT_MACHINE_CLASSES_ROOT) * sizeof (WCHAR))
);
RegCloseKey(Key);
if ( Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry! I couldn't create symbolic link to %S", WOW64_32BIT_MACHINE_CLASSES_ROOT));
return FALSE;
}
}else {
Wow64RegDbgPrint ( ("\nWarning!! SOFTWARE\\Wow6432Node\\Classes might be already there\n") );
return FALSE;
}
return TRUE;
}
BOOL
PopulateReflectorTable ()
/*++
Routine Description:
Populate the initial redirector table
Arguments:
None.
Return Value:
TRUE if the function succeed.
FALSE otherwise.
--*/
{
extern ISN_NODE_TYPE *ReflectorTable;
extern ISN_NODE_TYPE *RedirectorTable;
HKEY Key;
LONG Ret;
DWORD dwIndex=0;
//
// delete the entry first
//
SetWow64InitialRegistryLayout ();
Ret = RegCreateKeyEx(
HKEY_LOCAL_MACHINE, // handle to an open key
(LPCWSTR ) WOW64_REGISTRY_SETUP_KEY_NAME_REL, // address of subkey name
0, // reserved
NULL, // address of class string
REG_OPTION_NON_VOLATILE, // special options flag
KEY_ALL_ACCESS, // desired security access
NULL, // address of key security structure
&Key, // address of buffer for opened handle
NULL // address of disposition value buffer
);
if (Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry!! couldn't open/create key list at %S", WOW64_REGISTRY_SETUP_REFLECTOR_KEY) );
return FALSE;
}
//
// Now Key point to the right location
//
for ( dwIndex=0;wcslen (RedirectorTable[dwIndex].NodeValue);dwIndex++) {
if (RedirectorTable[dwIndex].Flag==0) { // write the node in the registry
Ret = RegSetValueEx(
Key,
RedirectorTable[dwIndex].NodeName,
0,
REG_SZ,
(PBYTE)&RedirectorTable[dwIndex].NodeValue[0],
(ULONG)(wcslen (RedirectorTable[dwIndex].NodeValue)+sizeof(UNICODE_NULL))*sizeof(WCHAR)
);
if ( Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry! couldn't write the key"));
RegCloseKey (Key);
return FALSE;
}
}
}
RegCloseKey (Key);
//
// populate list for reflector
//
Ret = RegCreateKeyEx(
HKEY_LOCAL_MACHINE, // handle to an open key
(LPCWSTR ) WOW64_REGISTRY_SETUP_REFLECTOR_KEY, // address of subkey name
0, // reserved
NULL, // address of class string
REG_OPTION_NON_VOLATILE, // special options flag
KEY_ALL_ACCESS, // desired security access
NULL, // address of key security structure
&Key, // address of buffer for opened handle
NULL // address of disposition value buffer
);
if (Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry!! couldn't open/create key list at %S", WOW64_REGISTRY_SETUP_REFLECTOR_KEY));
return FALSE;
}
//
// Now Key point to the right location
//
for ( dwIndex=0;wcslen (ReflectorTable[dwIndex].NodeValue);dwIndex++) {
if (ReflectorTable[dwIndex].Flag==0) { // write the node in the registry
Ret = RegSetValueEx(
Key,
ReflectorTable[dwIndex].NodeName,
0,
REG_SZ,
(PBYTE)&ReflectorTable[dwIndex].NodeValue[0],
(ULONG)(wcslen (ReflectorTable[dwIndex].NodeValue)+sizeof(UNICODE_NULL))*sizeof(WCHAR)
);
if ( Ret != ERROR_SUCCESS ) {
Wow64RegDbgPrint ( ("\nSorry! couldn't write the key"));
RegCloseKey (Key);
return FALSE;
}
}
}
RegCloseKey (Key);
return TRUE;
}
Reference in a new issue Copy permalink