wince5.0监控注册表变化

最新推荐文章于 2024-05-29 23:31:42 发布

原创最新推荐文章于 2024-05-29 23:31:42 发布 · 2.6k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#wince #null #tree #object #user

WinCE应用专栏收录该内容

7 篇文章

订阅专栏

本文介绍如何在WinCE5.0环境下实现对注册表的监控功能，包括使用宏定义选择监控范围，定义相关变量及函数，打开并监控指定的注册表项，如HKEY_CLASSES_ROOT等。

WinCE 5.0下可以监控注册表的变化，可以监控整个注册表树或者单个注册表项的变化

1.我们用宏定义监控注册表树或者注册表项

//是否递归监控注册表改变 #define MONITOR_TREE TRUE #define MONITOR_KEY FALSE

2.定义相关变量和函数

HKEY hkDrivers[4]; HANDLE hFind[4]; DWORD Status; HANDLE m_hdmonitorthread;//注册表改变监控线程 static DWORD MonitorRegChangeThread(PVOID lparam);

3.打开注册表项

if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_CLASSES_ROOT,NULL,0,0,&hkDrivers[0])) { MessageBox(L"打开注册表HKEY_CLASSES_ROOT失败!!"); return FALSE; } if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_LOCAL_MACHINE,NULL,0,0,&hkDrivers[1])) { MessageBox(L"打开注册表HKEY_LOCAL_MACHINE失败!!"); return FALSE; } if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_CURRENT_USER,NULL,0,0,&hkDrivers[2])) { MessageBox(L"打开注册表HKEY_CURRENT_USER失败!!"); return FALSE; } if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_USERS,NULL,0,0,&hkDrivers[3])) { MessageBox(L"打开注册表HKEY_USERS失败!!"); return FALSE; } m_hdmonitorthread = CreateThread(NULL,0,MonitorRegChangeThread,this,0,NULL); if (m_hdmonitorthread == NULL) { MessageBox(L"创建注册表监控线程失败!!"); return FALSE; }

4.监控线程

//监控注册表改变线程 DWORD CMonitorregDlg::MonitorRegChangeThread(PVOID lparam) { CMonitorregDlg *pThis=(CMonitorregDlg *)lparam; pThis->hFind[0]=CeFindFirstRegChange(pThis->hkDrivers[0],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET); pThis->hFind[1]=CeFindFirstRegChange(pThis->hkDrivers[1],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET); pThis->hFind[2]=CeFindFirstRegChange(pThis->hkDrivers[2],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET); pThis->hFind[3]=CeFindFirstRegChange(pThis->hkDrivers[3],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET); do{ pThis->Status = WaitForMultipleObjects(4,pThis->hFind,NULL,INFINITE ); switch(pThis->Status) { case WAIT_OBJECT_0: pThis->MessageBox(L"监控到HKEY_CLASSES_ROOT注册表改变!!"); CeFindNextRegChange(pThis->hFind[0]); break; case WAIT_OBJECT_0+1: pThis->MessageBox(L"监控到HKEY_LOCAL_MACHINE注册表改变!!"); CeFindNextRegChange(pThis->hFind[1]); break; case WAIT_OBJECT_0+2: pThis->MessageBox(L"监控到HKEY_CURRENT_USER注册表改变!!"); CeFindNextRegChange(pThis->hFind[2]); break; case WAIT_OBJECT_0+3: pThis->MessageBox(L"监控到HKEY_USERS注册表改变!!"); CeFindNextRegChange(pThis->hFind[3]); break; case WAIT_FAILED: return 1; } } while(1); for(int i=0;i<4;i++) CeFindCloseRegChange(pThis->hFind[i]); }