/* Copyright (c) 2004-2010 TrueCrypt Developers Association. All rights reserved. Governed by the TrueCrypt License 3.0 the full text of which is contained in the file License.txt included in TrueCrypt binary and source code distribution packages. */ #include "Tcdefs.h" #include "Registry.h" #include <Strsafe.h> BOOL ReadLocalMachineRegistryDword (char *subKey, char *name, DWORD *value) { HKEY hkey = 0; DWORD size = sizeof (*value); DWORD type; if (RegOpenKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, KEY_READ, &hkey) != ERROR_SUCCESS) return FALSE; if (RegQueryValueEx (hkey, name, NULL, &type, (BYTE *) value, &size) != ERROR_SUCCESS) { RegCloseKey (hkey); return FALSE; } RegCloseKey (hkey); return type == REG_DWORD; } BOOL ReadLocalMachineRegistryMultiString (char *subKey, char *name, char *value, DWORD *size) { HKEY hkey = 0; DWORD type; if (RegOpenKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, KEY_READ, &hkey) != ERROR_SUCCESS) return FALSE; if (RegQueryValueEx (hkey, name, NULL, &type, (BYTE *) value, size) != ERROR_SUCCESS) { RegCloseKey (hkey); return FALSE; } RegCloseKey (hkey); return type == REG_MULTI_SZ; } BOOL ReadLocalMachineRegistryString (const char *subKey, char *name, char *str, DWORD *size) { HKEY hkey = 0; DWORD type; if (RegOpenKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, KEY_READ, &hkey) != ERROR_SUCCESS) return FALSE; if (RegQueryValueEx (hkey, name, NULL, &type, (BYTE *) str, size) != ERROR_SUCCESS) { RegCloseKey (hkey); return FALSE; } RegCloseKey (hkey); return type == REG_SZ; } BOOL ReadLocalMachineRegistryStringNonReflected (const char *subKey, char *name, char *str, DWORD *size) { HKEY hkey = 0; DWORD type; if (RegOpenKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, KEY_READ | KEY_WOW64_64KEY, &hkey) != ERROR_SUCCESS) return FALSE; if (RegQueryValueEx (hkey, name, NULL, &type, (BYTE *) str, size) != ERROR_SUCCESS) { RegCloseKey (hkey); return FALSE; } RegCloseKey (hkey); return type == REG_SZ; } int ReadRegistryInt (char *subKey, char *name, int defaultValue) { HKEY hkey = 0; DWORD value, size = sizeof (DWORD); if (RegOpenKeyEx (HKEY_CURRENT_USER, subKey, 0, KEY_READ, &hkey) != ERROR_SUCCESS) return defaultValue; if (RegQueryValueEx (hkey, name, 0, 0, (LPBYTE) &value, &size) != ERROR_SUCCESS) value = defaultValue; RegCloseKey (hkey); return value; } char *ReadRegistryString (char *subKey, char *name, char *defaultValue, char *str, int maxLen) { HKEY hkey = 0; char value[MAX_PATH*4]; DWORD size = sizeof (value); str[maxLen-1] = 0; StringCbCopyA (str, maxLen, defaultValue); ZeroMemory (value, sizeof value); if (RegOpenKeyEx (HKEY_CURRENT_USER, subKey, 0, KEY_READ, &hkey) == ERROR_SUCCESS) if (RegQueryValueEx (hkey, name, 0, 0, (LPBYTE) value, &size) == ERROR_SUCCESS) StringCbCopyA (str, maxLen,value); if (hkey) RegCloseKey (hkey); return str; } DWORD ReadRegistryBytes (char *path, char *name, char *value, int maxLen) { HKEY hkey = 0; DWORD size = maxLen; BOOL success = FALSE; if (RegOpenKeyEx (HKEY_CURRENT_USER, path, 0, KEY_READ, &hkey) != ERROR_SUCCESS) return 0; success = (RegQueryValueEx (hkey, name, 0, 0, (LPBYTE) value, &size) == ERROR_SUCCESS); RegCloseKey (hkey); return success ? size : 0; } void WriteRegistryInt (char *subKey, char *name, int value) { HKEY hkey = 0; DWORD disp; if (RegCreateKeyEx (HKEY_CURRENT_USER, subKey, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp) != ERROR_SUCCESS) return; RegSetValueEx (hkey, name, 0, REG_DWORD, (BYTE *) &value, sizeof value); RegCloseKey (hkey); } BOOL WriteLocalMachineRegistryDword (char *subKey, char *name, DWORD value) { HKEY hkey = 0; DWORD disp; LONG status; if ((status = RegCreateKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp)) != ERROR_SUCCESS) { SetLastError (status); return FALSE; } if ((status = RegSetValueEx (hkey, name, 0, REG_DWORD, (BYTE *) &value, sizeof value)) != ERROR_SUCCESS) { RegCloseKey (hkey); SetLastError (status); return FALSE; } RegCloseKey (hkey); return TRUE; } BOOL WriteLocalMachineRegistryDwordW (WCHAR *subKey, WCHAR *name, DWORD value) { HKEY hkey = 0; DWORD disp; LONG status; if ((status = RegCreateKeyExW (HKEY_LOCAL_MACHINE, subKey, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp)) != ERROR_SUCCESS) { SetLastError (status); return FALSE; } if ((status = RegSetValueExW (hkey, name, 0, REG_DWORD, (BYTE *) &value, sizeof value)) != ERROR_SUCCESS) { RegCloseKey (hkey); SetLastError (status); return FALSE; } RegCloseKey (hkey); return TRUE; } BOOL WriteLocalMachineRegistryMultiString (char *subKey, char *name, char *multiString, DWORD size) { HKEY hkey = 0; DWORD disp; LONG status; if ((status = RegCreateKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp)) != ERROR_SUCCESS) { SetLastError (status); return FALSE; } if ((status = RegSetValueEx (hkey, name, 0, REG_MULTI_SZ, (BYTE *) multiString, size)) != ERROR_SUCCESS) { RegCloseKey (hkey); SetLastError (status); return FALSE; } RegCloseKey (hkey); return TRUE; } BOOL WriteLocalMachineRegistryString (char *subKey, char *name, char *str, BOOL expandable) { HKEY hkey = 0; DWORD disp; LONG status; if ((status = RegCreateKeyEx (HKEY_LOCAL_MACHINE, subKey, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp)) != ERROR_SUCCESS) { SetLastError (status); return FALSE; } if ((status = RegSetValueEx (hkey, name, 0, expandable ? REG_EXPAND_SZ : REG_SZ, (BYTE *) str, strlen (str) + 1)) != ERROR_SUCCESS) { RegCloseKey (hkey); SetLastError (status); return FALSE; } RegCloseKey (hkey); return TRUE; } void WriteRegistryString (char *subKey, char *name, char *str) { HKEY hkey = 0; DWORD disp; if (RegCreateKeyEx (HKEY_CURRENT_USER, subKey, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp) != ERROR_SUCCESS) return; RegSetValueEx (hkey, name, 0, REG_SZ, (BYTE *) str, strlen (str) + 1); RegCloseKey (hkey); } BOOL WriteRegistryBytes (char *path, char *name, char *str, DWORD size) { HKEY hkey = 0; DWORD disp; BOOL res; if (RegCreateKeyEx (HKEY_CURRENT_USER, path, 0, NULL, REG_OPTION_NON_VOLATILE, KEY_WRITE, NULL, &hkey, &disp) != ERROR_SUCCESS) return FALSE; res = RegSetValueEx (hkey, name, 0, REG_BINARY, (BYTE *) str, size); RegCloseKey (hkey); return res == ERROR_SUCCESS; } BOOL DeleteLocalMachineRegistryKey (char *parentKey, char *subKeyToDelete) { LONG status; HKEY hkey = 0; if ((status = RegOpenKeyEx (HKEY_LOCAL_MACHINE, parentKey, 0, KEY_WRITE, &hkey)) != ERROR_SUCCESS) { SetLastError (status); return FALSE; } if ((status = RegDeleteKey (hkey, subKeyToDelete)) != ERROR_SUCCESS) { RegCloseKey (hkey); SetLastError (status); return FALSE; } RegCloseKey (hkey); return TRUE; } void DeleteRegistryValue (char *subKey, char *name) { HKEY hkey = 0; if (RegOpenKeyEx (HKEY_CURRENT_USER, subKey, 0, KEY_WRITE, &hkey) != ERROR_SUCCESS) return; RegDeleteValue (hkey, name); RegCloseKey (hkey); } void GetStartupRegKeyName (char *regk, size_t cbRegk) { // The string is split in order to prevent some antivirus packages from falsely reporting // TrueCrypt.exe to contain a possible Trojan horse because of this string (heuristic scan). StringCbPrintfA (regk, cbRegk,"%s%s", "Software\\Microsoft\\Windows\\Curren", "tVersion\\Run"); }