C / C++ / MFC

<br />
BOOL CKey::LoadKey(CString csHiveFilePathName, ULONG ulFlags /* 0x0000 */)<br />
{<br />
<br />
	ASSERT(csHiveFilePathName != _T(""));<br />
	ASSERT((m_csRootPath == _T("\\Registry\\User") || <br />
			m_csRootPath == _T("\\Registry\\Machine")));<br />
<br />
	BOOL bSuccess = TRUE;<br />
<br />
	HANDLE hRootKey = NULL, hHiveFile = NULL;<br />
<br />
	NT::UNICODE_STRING usRootKeyName, usHiveFileName, usHiveFile;<br />
    NT::OBJECT_ATTRIBUTES DestinationKeyName, RegHiveFileName, RegHiveFile;<br />
<br />
	int n=0;<br />
<br />
<br />
	// Make sure the filenames is setup correctly<br />
	if (csHiveFilePathName.Left(4) != _T("\\??\\"))<br />
		csHiveFilePathName.Insert(0,_T("\\??\\"));<br />
<br />
	// Enable the restore privilege<br />
	m_NtStatus = EnablePrivilege(SE_RESTORE_NAME, TRUE);<br />
	if(!NT_SUCCESS(m_NtStatus))<br />
	{<br />
		bSuccess = FALSE;<br />
		goto end_it;<br />
	}<br />
<br />
	WCHAR wszHiveFile[1024];<br />
	for (n=0; n<csHiveFilePathName.GetLength(); n++)<br />
		wszHiveFile[n] = (WCHAR)csHiveFilePathName[n];<br />
<br />
	wszHiveFile[n++] = L'\0';<br />
<br />
	usHiveFileName.Buffer = wszHiveFile;<br />
	usHiveFileName.Length = wcslen(wszHiveFile) * sizeof(WCHAR);<br />
<br />
	InitializeObjectAttributes(&RegHiveFileName, &usHiveFileName, <br />
								OBJ_CASE_INSENSITIVE, NULL, NULL );<br />
<br />
	WCHAR wszRootKey[2048];<br />
	for (n=0; n<m_csRootPath.GetLength(); n++)<br />
		wszRootKey[n] = (WCHAR)m_csRootPath[n];<br />
<br />
	wszRootKey[n++] = L'\0';<br />
<br />
	usRootKeyName.Buffer = wszRootKey;<br />
	usRootKeyName.Length = wcslen(wszRootKey) * sizeof(WCHAR);<br />
<br />
	InitializeObjectAttributes(&DestinationKeyName, &usRootKeyName, <br />
								OBJ_CASE_INSENSITIVE, NULL, NULL );<br />
<br />
	if (ulFlags == 0x0000)<br />
	{<br />
		if (m_ntModeType == 0) // UserMode = 0, KernalMode = 1<br />
			m_NtStatus = NT::ZwLoadKey(&DestinationKeyName, &RegHiveFileName);<br />
		else<br />
//			m_NtStatus = NT::NtLoadKey(&DestinationKeyName, &RegHiveFileName);<br />
	}<br />
	else<br />
		m_NtStatus = NT::ZwLoadKey2(&DestinationKeyName, &RegHiveFileName, ulFlags);<br />
<br />
	if (!NT_SUCCESS(m_NtStatus)) <br />
	{<br />
		bSuccess = FALSE;<br />
	}<br />
<br />
end_it:<br />
<br />
	m_csFunction = _T("LoadKey()");<br />
	if (ulFlags == 0x0004)<br />
		m_csFunction = _T("LoadKey(2)");<br />
<br />
	if (!bSuccess) <br />
		Output(DisplayError(m_NtStatus), MB_OK|MB_ICONERROR);<br />
<br />
	// Now remove the privilege (back to its prior state).<br />
	// This is not strictly necessary, since we're going<br />
	// to terminate the process anyway, and the token we've<br />
	// adjusted will be destroyed, but in real life you might<br />
	// have processes that do a little more than this :-)<br />
	m_NtStatus = EnablePrivilege(SE_RESTORE_NAME, FALSE);<br />
<br />
//	NT::ZwClose( hRootKey );<br />
//	NT::ZwClose( hHiveFile );<br />
<br />
	if (!NT_SUCCESS(m_NtStatus)) <br />
	{<br />
		Output(DisplayError(m_NtStatus), MB_OK|MB_ICONERROR);<br />
		m_csFunction = _T("");<br />
		return FALSE;<br />
	}<br />
	else if (!bSuccess) <br />
	{<br />
		m_csFunction = _T("");<br />
		return FALSE;<br />
	}<br />
<br />
	return TRUE;<br />
}<br />