/*++ Copyright (c) 2000 Microsoft Corporation Module Name: SearchPathInAppPaths.cpp Abstract: An application might use SearchPath to determine if a specific EXE is found in the current path. Some applications have registered their path with the shell in "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths" If SearchPath fails, we'll check to see if the applications has registered a path. History: 03/03/2000 robkenny Created --*/ #include "precomp.h" #include IMPLEMENT_SHIM_BEGIN(SearchPathInAppPaths) #include "ShimHookMacro.h" APIHOOK_ENUM_BEGIN APIHOOK_ENUM_ENTRY(SearchPathA) APIHOOK_ENUM_END /*++ Grab an entry from the registry, expand if REG_EXPAND_SZ. Return a full path in lpBuffer, and a pointer to the file part. Return the number of chars copied into lpBuffer, including NULL terminator. --*/ DWORD GetPathFromRegistryA( HKEY hKey, // handle to key LPCSTR lpKeyPath, // value name LPCSTR lpValueName, // value name DWORD nBufferLength, // size of buffer LPSTR lpBuffer, // found file name buffer LPSTR *lpFilePart // file component (optional) ) { DWORD returnValue = 0; HKEY hkPathKey; LONG success; success = RegOpenKeyExA(hKey, lpKeyPath, 0, KEY_QUERY_VALUE, &hkPathKey); if (success == ERROR_SUCCESS) { DWORD appPathsKeyType; char appPathsData[MAX_PATH]; DWORD appPathsDataSize = MAX_PATH; appPathsData[0] = 0; success = RegQueryValueExA( hkPathKey, lpValueName, NULL, &appPathsKeyType, (BYTE *)appPathsData, &appPathsDataSize); if (success == ERROR_SUCCESS) { if (appPathsKeyType == REG_EXPAND_SZ) { // Gotta expand the env. vars char expandedAppPathsData[MAX_PATH]; DWORD dwChars = ExpandEnvironmentStringsA(appPathsData, expandedAppPathsData, MAX_PATH); if (dwChars > 0) { returnValue = GetFullPathNameA(expandedAppPathsData, nBufferLength, lpBuffer, lpFilePart); } } else if (appPathsKeyType == REG_SZ) { returnValue = GetFullPathNameA(appPathsData, nBufferLength, lpBuffer, lpFilePart); } } RegCloseKey(hkPathKey); } return returnValue; } DWORD APIHOOK(SearchPathA)( LPCSTR lpPath, // search path LPCSTR lpFileName, // file name LPCSTR lpExtension, // file extension DWORD nBufferLength, // size of buffer LPSTR lpBuffer, // found file name buffer LPSTR *lpFilePart // file component ) { DWORD returnValue = ORIGINAL_API(SearchPathA)( lpPath, lpFileName, lpExtension, nBufferLength, lpBuffer, lpFilePart); if (returnValue == 0) { // Search failed, look in the registry. // First look for lpFileName. If that fails, append lpExtension and look again. CSTRING_TRY { CString csFile(lpFileName); CString csReg(L"Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\"); csReg.AppendPath(csFile); DWORD success; success = GetPathFromRegistryA(HKEY_LOCAL_MACHINE, csReg.GetAnsi(), NULL, // (Default) entry nBufferLength, lpBuffer, lpFilePart); if (success > 0) { // SearchPath returns the number of chars, not including the NULL terminator returnValue = success - 1; } else { // Try appending the extension onto the path CString csExt(lpExtension); csReg += csExt; success = GetPathFromRegistryA(HKEY_LOCAL_MACHINE, csReg.GetAnsi(), NULL, // (Default) entry nBufferLength, lpBuffer, lpFilePart); if (success > 0) { // SearchPath returns the number of chars, not including the NULL terminator returnValue = success - 1; } } } CSTRING_CATCH { // Do nothing } } return returnValue; } /*++ Register hooked functions --*/ HOOK_BEGIN APIHOOK_ENTRY(KERNEL32.DLL, SearchPathA) HOOK_END IMPLEMENT_SHIM_END