windows Driver 查询指定键值

NTSTATUS status;
	HANDLE hKey = NULL;
	OBJECT_ATTRIBUTES oa;
	UNICODE_STRING strPath = RTL_CONSTANT_STRING(L"\\Registry\\Machine\\HARDWARE\\DEVICEMAP\\SERIALCOMM");
	UNICODE_STRING strKeyName = RTL_CONSTANT_STRING(L"\\Device\\Serial0");
	ULONG ResultLength = 0;
	PKEY_VALUE_PARTIAL_INFORMATION Pkvpi;
	ULONG index = 0;

	UNICODE_STRING strOutPut;
	wchar_t strTemp[ArrayLength] = {0};
	RtlInitEmptyUnicodeString(&strOutPut, strTemp, ArrayLength);

	InitializeObjectAttributes(&oa, &strPath, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, NULL);
	status = ZwOpenKey(&hKey, KEY_ALL_ACCESS, &oa);
	if (!NT_SUCCESS(status)){
		KdPrint(("ZwOpenKey failed"));
		return;
	}

	status = ZwQueryValueKey(hKey, &strKeyName, KeyValuePartialInformation, NULL, 0, &ResultLength);
	if (status == STATUS_OBJECT_NAME_NOT_FOUND || ResultLength == 0){
		KdPrint(("ZwQueryValueKey failed"));
		ZwClose(hKey);
		return ;
	}
	Pkvpi = (PKEY_VALUE_PARTIAL_INFORMATION) ExAllocatePool(PagedPool, ResultLength);
	if (!Pkvpi){
		KdPrint(("ExAllocatePool failed"));
		ExFreePool(Pkvpi);
		ZwClose(hKey);
		return;
	}
	status = ZwQueryValueKey(hKey, &strKeyName, KeyValuePartialInformation, Pkvpi, ResultLength, &ResultLength);
	if (!NT_SUCCESS(status)){
		KdPrint(("ZwQueryValueKey failed"));
		ExFreePool(Pkvpi);
		ZwClose(hKey);
		return;
	}

	RtlStringCbPrintfW(strOutPut.Buffer, ArrayLength, L"%s", Pkvpi->Data);
	KdPrint(("%ws", strOutPut.Buffer));

	ExFreePool(Pkvpi);
	ZwClose(hKey);

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值