199 lines
4.2 KiB
C
199 lines
4.2 KiB
C
/*++
|
||
|
||
Copyright (c) 1991 Microsoft Corporation
|
||
|
||
Module Name:
|
||
|
||
rtsave.c
|
||
|
||
Abstract:
|
||
|
||
NT level registry api test program, basic non-error paths.
|
||
|
||
Perform an NtSaveKey call to dump part of the registry to a file.
|
||
|
||
rtsave <KeyPath> <FileName>
|
||
|
||
Example:
|
||
|
||
rtsave \registry\machine\user userfile.rd
|
||
|
||
Author:
|
||
|
||
Bryan Willman (bryanwi) 22-Jan-92
|
||
|
||
Revision History:
|
||
|
||
--*/
|
||
#include <nt.h>
|
||
#include <ntrtl.h>
|
||
#include <nturtl.h>
|
||
|
||
#include "cmp.h"
|
||
#include <stdio.h>
|
||
#include <stdlib.h>
|
||
#include <string.h>
|
||
|
||
#define WORK_SIZE 1024
|
||
|
||
void __cdecl main(int, char *[]);
|
||
void processargs();
|
||
|
||
UNICODE_STRING KeyPath;
|
||
WCHAR KeyPathBuffer[WORK_SIZE];
|
||
|
||
UNICODE_STRING FileName;
|
||
WCHAR FileNameBuffer[WORK_SIZE];
|
||
|
||
void
|
||
__cdecl main(
|
||
int argc,
|
||
char *argv[]
|
||
)
|
||
{
|
||
NTSTATUS status;
|
||
OBJECT_ATTRIBUTES ObjectAttributes;
|
||
IO_STATUS_BLOCK IoStatus;
|
||
HANDLE FileHandle;
|
||
HANDLE KeyHandle;
|
||
BOOLEAN WasEnabled;
|
||
|
||
//
|
||
// Process args
|
||
//
|
||
|
||
KeyPath.MaximumLength = WORK_SIZE;
|
||
KeyPath.Length = 0L;
|
||
KeyPath.Buffer = &(KeyPathBuffer[0]);
|
||
|
||
FileName.MaximumLength = WORK_SIZE;
|
||
FileName.Length = 0L;
|
||
FileName.Buffer = &(FileNameBuffer[0]);
|
||
|
||
processargs(argc, argv);
|
||
|
||
|
||
//
|
||
// Set up and open FileName
|
||
//
|
||
|
||
printf("rtsave: starting\n");
|
||
printf("rtsave: saving hive rooted at\n\t'%ws'\nto file\n\t'%ws'\n",
|
||
KeyPath.Buffer, FileName.Buffer);
|
||
|
||
InitializeObjectAttributes(
|
||
&ObjectAttributes,
|
||
&FileName,
|
||
0,
|
||
(HANDLE)NULL,
|
||
NULL
|
||
);
|
||
ObjectAttributes.Attributes |= OBJ_CASE_INSENSITIVE;
|
||
|
||
|
||
status = NtCreateFile(
|
||
&FileHandle,
|
||
GENERIC_WRITE | SYNCHRONIZE,
|
||
&ObjectAttributes,
|
||
&IoStatus,
|
||
NULL, // AllocationSize
|
||
FILE_ATTRIBUTE_NORMAL,
|
||
FILE_SHARE_READ, // ShareAccess
|
||
FILE_CREATE,
|
||
FILE_SYNCHRONOUS_IO_NONALERT,
|
||
NULL, // EaBuffer
|
||
0 // EaLength
|
||
);
|
||
|
||
if (!NT_SUCCESS(status)) {
|
||
if (status == STATUS_OBJECT_NAME_COLLISION) {
|
||
printf("rtsave: file '%ws' already exists!\n",
|
||
FileName.Buffer);
|
||
exit(1);
|
||
}
|
||
printf("rtsave: file open failed status = %08lx\n", status);
|
||
exit(1);
|
||
}
|
||
|
||
InitializeObjectAttributes(
|
||
&ObjectAttributes,
|
||
&KeyPath,
|
||
0,
|
||
(HANDLE)NULL,
|
||
NULL
|
||
);
|
||
ObjectAttributes.Attributes |= OBJ_CASE_INSENSITIVE;
|
||
|
||
status = NtOpenKey(
|
||
&KeyHandle,
|
||
MAXIMUM_ALLOWED,
|
||
&ObjectAttributes
|
||
);
|
||
if (!NT_SUCCESS(status)) {
|
||
printf("rtsave: key open failed status = %08lx\n", status);
|
||
exit(1);
|
||
}
|
||
|
||
RtlAdjustPrivilege(SE_BACKUP_PRIVILEGE, TRUE, FALSE, &WasEnabled);
|
||
|
||
status = NtSaveKey(KeyHandle, FileHandle);
|
||
|
||
RtlAdjustPrivilege(SE_BACKUP_PRIVILEGE, WasEnabled, FALSE, &WasEnabled);
|
||
|
||
if (!NT_SUCCESS(status)) {
|
||
printf("rtsave: NtSaveKey failed status = %08lx\n", status);
|
||
exit(1);
|
||
}
|
||
|
||
printf("rtsave: success\n");
|
||
exit(0);
|
||
}
|
||
|
||
void
|
||
processargs(
|
||
int argc,
|
||
char *argv[]
|
||
)
|
||
{
|
||
ANSI_STRING temp;
|
||
UNICODE_STRING DosFileName;
|
||
|
||
if ( (argc != 3) )
|
||
{
|
||
printf("Usage: %s <KeyName> <FileName>\nWhere <FileName> does NOT already exist\n",
|
||
argv[0]);
|
||
printf("Example: %s \\registry\\machine\\security d:\\backups\\security\n",
|
||
argv[0]);
|
||
exit(1);
|
||
}
|
||
|
||
RtlInitAnsiString(
|
||
&temp,
|
||
argv[1]
|
||
);
|
||
|
||
RtlAnsiStringToUnicodeString(
|
||
&KeyPath,
|
||
&temp,
|
||
TRUE
|
||
);
|
||
|
||
RtlInitAnsiString(
|
||
&temp,
|
||
argv[2]
|
||
);
|
||
|
||
RtlAnsiStringToUnicodeString(
|
||
&DosFileName,
|
||
&temp,
|
||
TRUE
|
||
);
|
||
|
||
RtlDosPathNameToNtPathName_U( DosFileName.Buffer,
|
||
&FileName,
|
||
NULL,
|
||
NULL );
|
||
|
||
return;
|
||
}
|