rtdmpval.c File Reference

#include "cmp.h"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>

Go to the source code of this file.

Defines
#define	WORK_SIZE   1024
Functions
void __cdecl	main (int, char *)
void	processargs ()
void	Delete (HANDLE Handle)
void __cdecl	main (int argc, char *argv[])
void	processargs (int argc, char *argv[])
Variables
UNICODE_STRING	WorkName
WCHAR	workbuffer [WORK_SIZE]
UNICODE_STRING	ValueName
WCHAR	valuebuffer [WORK_SIZE]

---

Define Documentation

#define WORK_SIZE   1024

Definition at line 35 of file rtdmpval.c.

---

Function Documentation

void Delete (  HANDLE  Handle  )

void __cdecl main (  int  argc, char *  argv[] )

Definition at line 52 of file rtdmpval.c. References Count, exit, L, NT_SUCCESS, NtClose(), NtOpenKey(), NtQueryValueKey(), NTSTATUS(), NULL, ObjectAttributes, processargs(), valuebuffer, ValueName, WORK_SIZE, workbuffer, and WorkName. { NTSTATUS status; OBJECT_ATTRIBUTES ObjectAttributes; HANDLE BaseHandle; KEY_VALUE_PARTIAL_INFORMATION PartialInfo; PKEY_VALUE_PARTIAL_INFORMATION pInfo; ULONG i; ULONG Count; // // Process args // WorkName.MaximumLength = WORK_SIZE; WorkName.Length = 0L; WorkName.Buffer = &(workbuffer[0]); ValueName.MaximumLength = WORK_SIZE; ValueName.Length = 0L; ValueName.Buffer = &(valuebuffer[0]); processargs(argc, argv); // // Set up and open KeyPath // printf("rtdmpval: starting\n"); InitializeObjectAttributes( &ObjectAttributes, &WorkName, 0, (HANDLE)NULL, NULL ); ObjectAttributes.Attributes |= OBJ_CASE_INSENSITIVE; status = NtOpenKey( &BaseHandle, KEY_READ, &ObjectAttributes ); if (!NT_SUCCESS(status)) { printf("rtdmpval: t0: %08lx\n", status); exit(1); } status = NtQueryValueKey(BaseHandle, &ValueName, KeyValuePartialInformation, &PartialInfo, sizeof(PartialInfo), &Count); pInfo=malloc(PartialInfo.DataLength+sizeof(PartialInfo)); status = NtQueryValueKey(BaseHandle, &ValueName, KeyValuePartialInformation, pInfo, PartialInfo.DataLength+sizeof(PartialInfo), &Count); if (!NT_SUCCESS(status)) { printf("rtdmpval: t2: %08lx\n", status); exit(1); } for (i=0; i<PartialInfo.DataLength; i++) { printf("%c",pInfo->Data[i]); } free(pInfo); NtClose(BaseHandle); exit(0); }

void __cdecl main (  int  , char *  )

void processargs (  int  argc, char *  argv[] )

Definition at line 136 of file rtdmpval.c. References exit, RtlAnsiStringToUnicodeString(), RtlInitAnsiString(), TRUE, ValueName, and WorkName. { ANSI_STRING temp; if ( (argc != 3) ) { printf("Usage: %s <KeyPath> <value entry name>\n", argv[0]); exit(1); } RtlInitAnsiString( &temp, argv[1] ); RtlAnsiStringToUnicodeString( &WorkName, &temp, TRUE ); RtlInitAnsiString( &temp, argv[2] ); RtlAnsiStringToUnicodeString( &ValueName, &temp, TRUE ); return; }

void processargs (   )

---

Variable Documentation

WCHAR valuebuffer[WORK_SIZE]

Definition at line 49 of file rtdmpval.c.

UNICODE_STRING ValueName

Definition at line 48 of file rtdmpval.c.

WCHAR workbuffer[WORK_SIZE]

Definition at line 46 of file rtdmpval.c.

UNICODE_STRING WorkName

Definition at line 45 of file rtdmpval.c.

---