reading registry

NTDEV
1

Hi,
Why is it that most of the device driver books
differ in the way RtlQueryRegistryValues in used from
msdn.

The requirement for the queryroutine makes the usage
a lot more difficult and longwinded. Are there
feasable alternatives?

Are there any thirdparty libraries to read the
registry from a device driver?

Rajeev

Everything you always wanted to know about cars and bikes,now
at: http://in.autos.yahoo.com/cricket/tracker.html

2

WinDK definitely has C++ classes and C modules for this. The registry
access DDI is really elegant and beautiful though, …not. We use ZwXxx
functions wherever possible, which is everywhere except for deleting value
keys. You have to use RtlDeleteRegistryValue for this as far as I can
figure out. For everything else there is a ZwXxx functions of some type
that will do the job.

–
Bill McKenzie

“Rajeev Rao” wrote in message news:xxxxx@ntdev…
>
> Hi,
> Why is it that most of the device driver books
> differ in the way RtlQueryRegistryValues in used from
> msdn.
>
> The requirement for the queryroutine makes the usage
> a lot more difficult and longwinded. Are there
> feasable alternatives?
>
> Are there any thirdparty libraries to read the
> registry from a device driver?
>
> Rajeev
>
> ________________________________________________________________________
> Everything you always wanted to know about cars and bikes,now
> at: http://in.autos.yahoo.com/cricket/tracker.html
>
>

3

> Why is it that most of the device driver books

differ in the way RtlQueryRegistryValues in used from
msdn.

I’ve been rather liking InitializeObjectAttributes, ZwOpenKey, and
ZwQueryValueKey recently to read registry values in drivers.

  • Jan