174 lines
3.2 KiB
C
174 lines
3.2 KiB
C
/*++
|
||
|
||
Copyright (c) 1991 Microsoft Corporation
|
||
|
||
Module Name:
|
||
|
||
rtdmpval.c
|
||
|
||
Abstract:
|
||
|
||
NT level registry api test program, basic non-error paths.
|
||
|
||
dump a key's value entry (field)
|
||
|
||
rtdmpval <KeyPath> <value entry name>
|
||
|
||
Example:
|
||
|
||
rtdmpval \REGISTRY\MACHINE\TEST\bigkey first_value_field
|
||
|
||
Author:
|
||
|
||
John Vert (jvert) 25-Mar-1993 (written expressly for reading JimK's
|
||
supersecret file)
|
||
|
||
Revision History:
|
||
|
||
--*/
|
||
|
||
#include "cmp.h"
|
||
#include <stdio.h>
|
||
#include <stdlib.h>
|
||
#include <string.h>
|
||
|
||
#define WORK_SIZE 1024
|
||
|
||
void __cdecl main(int, char *);
|
||
void processargs();
|
||
|
||
void
|
||
Delete(
|
||
HANDLE Handle
|
||
);
|
||
|
||
UNICODE_STRING WorkName;
|
||
WCHAR workbuffer[WORK_SIZE];
|
||
|
||
UNICODE_STRING ValueName;
|
||
WCHAR valuebuffer[WORK_SIZE];
|
||
|
||
void
|
||
__cdecl main(
|
||
int argc,
|
||
char *argv[]
|
||
)
|
||
{
|
||
NTSTATUS status;
|
||
OBJECT_ATTRIBUTES ObjectAttributes;
|
||
HANDLE BaseHandle;
|
||
KEY_VALUE_PARTIAL_INFORMATION PartialInfo;
|
||
PKEY_VALUE_PARTIAL_INFORMATION pInfo;
|
||
ULONG i;
|
||
ULONG Count;
|
||
|
||
|
||
//
|
||
// Process args
|
||
//
|
||
|
||
WorkName.MaximumLength = WORK_SIZE;
|
||
WorkName.Length = 0L;
|
||
WorkName.Buffer = &(workbuffer[0]);
|
||
|
||
|
||
ValueName.MaximumLength = WORK_SIZE;
|
||
ValueName.Length = 0L;
|
||
ValueName.Buffer = &(valuebuffer[0]);
|
||
|
||
processargs(argc, argv);
|
||
|
||
|
||
//
|
||
// Set up and open KeyPath
|
||
//
|
||
|
||
printf("rtdmpval: starting\n");
|
||
|
||
InitializeObjectAttributes(
|
||
&ObjectAttributes,
|
||
&WorkName,
|
||
0,
|
||
(HANDLE)NULL,
|
||
NULL
|
||
);
|
||
ObjectAttributes.Attributes |= OBJ_CASE_INSENSITIVE;
|
||
|
||
status = NtOpenKey(
|
||
&BaseHandle,
|
||
KEY_READ,
|
||
&ObjectAttributes
|
||
);
|
||
if (!NT_SUCCESS(status)) {
|
||
printf("rtdmpval: t0: %08lx\n", status);
|
||
exit(1);
|
||
}
|
||
|
||
status = NtQueryValueKey(BaseHandle,
|
||
&ValueName,
|
||
KeyValuePartialInformation,
|
||
&PartialInfo,
|
||
sizeof(PartialInfo),
|
||
&Count);
|
||
|
||
pInfo=malloc(PartialInfo.DataLength+sizeof(PartialInfo));
|
||
status = NtQueryValueKey(BaseHandle,
|
||
&ValueName,
|
||
KeyValuePartialInformation,
|
||
pInfo,
|
||
PartialInfo.DataLength+sizeof(PartialInfo),
|
||
&Count);
|
||
if (!NT_SUCCESS(status)) {
|
||
printf("rtdmpval: t2: %08lx\n", status);
|
||
exit(1);
|
||
}
|
||
|
||
for (i=0; i<PartialInfo.DataLength; i++) {
|
||
printf("%c",pInfo->Data[i]);
|
||
}
|
||
|
||
free(pInfo);
|
||
NtClose(BaseHandle);
|
||
exit(0);
|
||
}
|
||
|
||
void
|
||
processargs(
|
||
int argc,
|
||
char *argv[]
|
||
)
|
||
{
|
||
ANSI_STRING temp;
|
||
|
||
if ( (argc != 3) )
|
||
{
|
||
printf("Usage: %s <KeyPath> <value entry name>\n",
|
||
argv[0]);
|
||
exit(1);
|
||
}
|
||
|
||
RtlInitAnsiString(
|
||
&temp,
|
||
argv[1]
|
||
);
|
||
|
||
RtlAnsiStringToUnicodeString(
|
||
&WorkName,
|
||
&temp,
|
||
TRUE
|
||
);
|
||
|
||
RtlInitAnsiString(
|
||
&temp,
|
||
argv[2]
|
||
);
|
||
|
||
RtlAnsiStringToUnicodeString(
|
||
&ValueName,
|
||
&temp,
|
||
TRUE
|
||
);
|
||
|
||
return;
|
||
}
|