You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
173 lines
3.4 KiB
173 lines
3.4 KiB
/*++
|
|
|
|
Copyright (c) 1991 Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
rtdmpval.c
|
|
|
|
Abstract:
|
|
|
|
NT level registry api test program, basic non-error paths.
|
|
|
|
dump a key's value entry (field)
|
|
|
|
rtdmpval <KeyPath> <value entry name>
|
|
|
|
Example:
|
|
|
|
rtdmpval \REGISTRY\MACHINE\TEST\bigkey first_value_field
|
|
|
|
Author:
|
|
|
|
John Vert (jvert) 25-Mar-1993 (written expressly for reading JimK's
|
|
supersecret file)
|
|
|
|
Revision History:
|
|
|
|
--*/
|
|
|
|
#include "cmp.h"
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#define WORK_SIZE 1024
|
|
|
|
void __cdecl main(int, char *);
|
|
void processargs();
|
|
|
|
void
|
|
Delete(
|
|
HANDLE Handle
|
|
);
|
|
|
|
UNICODE_STRING WorkName;
|
|
WCHAR workbuffer[WORK_SIZE];
|
|
|
|
UNICODE_STRING ValueName;
|
|
WCHAR valuebuffer[WORK_SIZE];
|
|
|
|
void
|
|
__cdecl main(
|
|
int argc,
|
|
char *argv[]
|
|
)
|
|
{
|
|
NTSTATUS status;
|
|
OBJECT_ATTRIBUTES ObjectAttributes;
|
|
HANDLE BaseHandle;
|
|
KEY_VALUE_PARTIAL_INFORMATION PartialInfo;
|
|
PKEY_VALUE_PARTIAL_INFORMATION pInfo;
|
|
ULONG i;
|
|
ULONG Count;
|
|
|
|
|
|
//
|
|
// Process args
|
|
//
|
|
|
|
WorkName.MaximumLength = WORK_SIZE;
|
|
WorkName.Length = 0L;
|
|
WorkName.Buffer = &(workbuffer[0]);
|
|
|
|
|
|
ValueName.MaximumLength = WORK_SIZE;
|
|
ValueName.Length = 0L;
|
|
ValueName.Buffer = &(valuebuffer[0]);
|
|
|
|
processargs(argc, argv);
|
|
|
|
|
|
//
|
|
// Set up and open KeyPath
|
|
//
|
|
|
|
printf("rtdmpval: starting\n");
|
|
|
|
InitializeObjectAttributes(
|
|
&ObjectAttributes,
|
|
&WorkName,
|
|
0,
|
|
(HANDLE)NULL,
|
|
NULL
|
|
);
|
|
ObjectAttributes.Attributes |= OBJ_CASE_INSENSITIVE;
|
|
|
|
status = NtOpenKey(
|
|
&BaseHandle,
|
|
KEY_READ,
|
|
&ObjectAttributes
|
|
);
|
|
if (!NT_SUCCESS(status)) {
|
|
printf("rtdmpval: t0: %08lx\n", status);
|
|
exit(1);
|
|
}
|
|
|
|
status = NtQueryValueKey(BaseHandle,
|
|
&ValueName,
|
|
KeyValuePartialInformation,
|
|
&PartialInfo,
|
|
sizeof(PartialInfo),
|
|
&Count);
|
|
|
|
pInfo=malloc(PartialInfo.DataLength+sizeof(PartialInfo));
|
|
status = NtQueryValueKey(BaseHandle,
|
|
&ValueName,
|
|
KeyValuePartialInformation,
|
|
pInfo,
|
|
PartialInfo.DataLength+sizeof(PartialInfo),
|
|
&Count);
|
|
if (!NT_SUCCESS(status)) {
|
|
printf("rtdmpval: t2: %08lx\n", status);
|
|
exit(1);
|
|
}
|
|
|
|
for (i=0; i<PartialInfo.DataLength; i++) {
|
|
printf("%c",pInfo->Data[i]);
|
|
}
|
|
|
|
free(pInfo);
|
|
NtClose(BaseHandle);
|
|
exit(0);
|
|
}
|
|
|
|
void
|
|
processargs(
|
|
int argc,
|
|
char *argv[]
|
|
)
|
|
{
|
|
ANSI_STRING temp;
|
|
|
|
if ( (argc != 3) )
|
|
{
|
|
printf("Usage: %s <KeyPath> <value entry name>\n",
|
|
argv[0]);
|
|
exit(1);
|
|
}
|
|
|
|
RtlInitAnsiString(
|
|
&temp,
|
|
argv[1]
|
|
);
|
|
|
|
RtlAnsiStringToUnicodeString(
|
|
&WorkName,
|
|
&temp,
|
|
TRUE
|
|
);
|
|
|
|
RtlInitAnsiString(
|
|
&temp,
|
|
argv[2]
|
|
);
|
|
|
|
RtlAnsiStringToUnicodeString(
|
|
&ValueName,
|
|
&temp,
|
|
TRUE
|
|
);
|
|
|
|
return;
|
|
}
|