How do I get from RegSetValueExW (HKEY hKey, LPCWSTR lpValueName, DWORD Reserved, DWORD dwType, CONST BYTE * lpData, DWO

ruben100

In other words, how do you know the value of the currently modified HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SystemService? Thank you! !!

air_younger

First open through the RegOpenKeyEx function!

stealth

CString StrFilter = "executable files (* .exe) | * .exe | all files (*. *) | *. * ||";
CFileDialog Dlg (TRUE, NULL, NULL, NULL, StrFilter, this);
if (Dlg.DoModal () == IDCANCEL)
return;
HKEY hKey;
LPCTSTR StrKey =
        "HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\SystemService";
if (ERROR_SUCCESS ==
        :: RegOpenKeyEx (HKEY_CURRENT_USER, StrKey, NULL, KEY_ALL_ACCESS,&hKey))
{
CString Value = Dlg.GetPathName ();
LPCSTR KeyValue = Dlg.GetFileTitle ();
if (ERROR_SUCCESS == :: RegSetValueEx (hKey, (LPCTSTR) KeyValue, 0, REG_SZ,
(BYTE *) (LPCSTR) Value, strlen (Value) +1))
{
AfxMessageBox ("Set the program to run automatically when the system starts!");
}
// :: RegDeleteValue (hKey, (LPCTSTR) KeyValue);
:: RegCloseKey (hKey);
}

ruben100

You have misunderstood what I meant. I am now doing a HOOK to intercept RegSetValueEx. If hKey is modifying my own registry key, I will return the wrong value, so I can only know the key to be modified from hKey.

lixiaof6471

RegMon specializes in this.

The technology used may be HOOK.