wince5.0监控注册表变化

来源：互联网发布：未来清单计价软件编辑：程序博客网时间：2024/06/06 08:53

WinCE 5.0下可以监控注册表的变化，可以监控整个注册表树或者单个注册表项的变化

1.我们用宏定义监控注册表树或者注册表项

//是否递归监控注册表改变#define MONITOR_TREE TRUE#define MONITOR_KEY FALSE

2.定义相关变量和函数

HKEY hkDrivers[4];HANDLE hFind[4];DWORD Status;HANDLE m_hdmonitorthread;//注册表改变监控线程static DWORD MonitorRegChangeThread(PVOID lparam);

3.打开注册表项

if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_CLASSES_ROOT,NULL,0,0,&hkDrivers[0])){MessageBox(L"打开注册表HKEY_CLASSES_ROOT失败!!");return FALSE;}if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_LOCAL_MACHINE,NULL,0,0,&hkDrivers[1])){MessageBox(L"打开注册表HKEY_LOCAL_MACHINE失败!!");return FALSE;}if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_CURRENT_USER,NULL,0,0,&hkDrivers[2])){MessageBox(L"打开注册表HKEY_CURRENT_USER失败!!");return FALSE;}if( ERROR_SUCCESS != RegOpenKeyEx(HKEY_USERS,NULL,0,0,&hkDrivers[3])){MessageBox(L"打开注册表HKEY_USERS失败!!");return FALSE;}m_hdmonitorthread = CreateThread(NULL,0,MonitorRegChangeThread,this,0,NULL);if (m_hdmonitorthread == NULL){MessageBox(L"创建注册表监控线程失败!!");return FALSE;}

4.监控线程

//监控注册表改变线程DWORD CMonitorregDlg::MonitorRegChangeThread(PVOID lparam){CMonitorregDlg *pThis=(CMonitorregDlg *)lparam;pThis->hFind[0]=CeFindFirstRegChange(pThis->hkDrivers[0],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET);pThis->hFind[1]=CeFindFirstRegChange(pThis->hkDrivers[1],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET);pThis->hFind[2]=CeFindFirstRegChange(pThis->hkDrivers[2],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET);pThis->hFind[3]=CeFindFirstRegChange(pThis->hkDrivers[3],MONITOR_TREE,REG_NOTIFY_CHANGE_NAME|REG_NOTIFY_CHANGE_LAST_SET);do{pThis->Status = WaitForMultipleObjects(4,pThis->hFind,NULL,INFINITE );switch(pThis->Status){case WAIT_OBJECT_0:pThis->MessageBox(L"监控到HKEY_CLASSES_ROOT注册表改变!!");CeFindNextRegChange(pThis->hFind[0]);break;case WAIT_OBJECT_0+1:pThis->MessageBox(L"监控到HKEY_LOCAL_MACHINE注册表改变!!");CeFindNextRegChange(pThis->hFind[1]);break;case WAIT_OBJECT_0+2:pThis->MessageBox(L"监控到HKEY_CURRENT_USER注册表改变!!");CeFindNextRegChange(pThis->hFind[2]);break;case WAIT_OBJECT_0+3:pThis->MessageBox(L"监控到HKEY_USERS注册表改变!!");CeFindNextRegChange(pThis->hFind[3]);break;case WAIT_FAILED:return 1;}} while(1);for(int i=0;i<4;i++)CeFindCloseRegChange(pThis->hFind[i]);}