Results 1 to 8 of 8

Thread: Have similar registry editor vb6 source code?vba registry editor

  1. #1

    Thread Starter
    PowerPoster
    Join Date
    Jan 2020
    Posts
    3,948

    Have similar registry editor vb6 source code?vba registry editor

    Have similar registry editor vb6 source code? vba Registry editor

    The first step is to implement the registry function to read and write all data types, enumerating all subentries
    The second step, tree controls such as display, visual modification, view
    Step 3: Import and export the registry
    The fourth step is registry monitoring, detecting which registry keys are created, deleted, and modified
    The fifth step, green software development, put changes in the registry, computer file monitoring HOOK added, modified what. Synthesize a green software, or package it into a software in virtual sandbox mode. There is no damage to the registry of existing computers

    It would be perfect if we could do that.

  2. #2
    PowerPoster Arnoutdv's Avatar
    Join Date
    Oct 2013
    Posts
    6,071

    Re: Have similar registry editor vb6 source code?vba registry editor

    Go ahead and start programming!

  3. #3
    PowerPoster
    Join Date
    Jul 2010
    Location
    NYC
    Posts
    6,018

    Re: Have similar registry editor vb6 source code?vba registry editor

    This is a major project, especially because monitoring for changes is a royal pain (you'll need to use ETW or a kernel mode driver). Also no idea how this connects to environment friendly development; translation problem?

    So, you taking bids here or just wanted to post 'wouldn't it be cool if we made a better regedit in vb?'?

  4. #4

    Thread Starter
    PowerPoster
    Join Date
    Jan 2020
    Posts
    3,948

    Re: Have similar registry editor vb6 source code?vba registry editor

    A good registry management tool is still very useful, like your TLB type library, as well as RC6.DLL, are almost every VB6 developer will use.
    Microsoft is very messy when it comes to registry management, and EVERYTHING is a very powerful file management, fast search tool. It would be a lot easier if Microsoft had a perfect registry management tool.
    Just like a Chinese and English dictionary, there are many important registry items that we should perfectly master. Each KEY and VALUE can be translated into Chinese and English, which will be very convenient, and some items are optional values.
    For example, let the specified program run with administrator privileges, compatibility set to XP SP3, need to write 64-bit registry entries:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

    The name to be written is: EXE program path and the value to be written is "~ RUNASADMIN WINXPSP3"
    Use VBS to write to the registry, because the name has \ folder path symbol, so it cannot be written. At the same time, the project needs to write 64-bit registry, directly using VB6,vbs operation registry failed.

    If writing a registry management tool is more complex, writing a common registry database management knowledge base is very helpful for many people.

  5. #5

    Thread Starter
    PowerPoster
    Join Date
    Jan 2020
    Posts
    3,948

    Re: Have similar registry editor vb6 source code?vba registry editor

    auditpol /set /subcategory:"{0CCE921E-69AE-11D9-BED3-505054503030}" /success:enable
    auditpol /set /subcategory:"{0CCE921E-69AE-11D9-BED3-505054503030}" /success:disable

    Registry Changes - Registry Auditing, What methods can I view registry changes in WINDOWS logs, and then use VB to filter and read the logs?
    Simple string data shouldn't be difficult.
    Various bytes, multi-line characters, 32-bit, 64-bit numbers and other information may not be fully read out?

  6. #6

    Thread Starter
    PowerPoster
    Join Date
    Jan 2020
    Posts
    3,948

    Re: Have similar registry editor vb6 source code?vba registry editor

    Windows Optimization Master was launched by Lu Jin in 2000, has been operating on the software fee registration model, some industry insiders estimate that its installed capacity is 20 million to 30 million, and the number of paid legitimate users is unknown
    The company is a tool software company for personal computers. Before the acquisition of Windows Optimization Master, it already had several software products for personal computers, including Greenbrowser, the Internet Explorer Toolbar and the Windows Tool Tray. The business model is different from the paid-for Windows optimizer, which mainly generates revenue by selling ads bundled with the software.

    Industry analysts believe that the acquisition of Windows Optimization Master once again proves the value of client software, in the past, music player software Qianjing, video player software Storm video and download tool software Flashget have been expensive acquisitions. (Niu Lixiong)

    This is a registry optimization tool that was developed around 2000 and was acquired by large companies around 2007 for around $100 million.
    If an excellent tool such as TWINBASIC can be acquired by someone for $100 million to $1 million, it at least proves the value and market influence of the software /IDE, the core technology. I don't know how much money was invested in the development company of B4A and B4I.

  7. #7

    Thread Starter
    PowerPoster
    Join Date
    Jan 2020
    Posts
    3,948

    Re: Have similar registry editor vb6 source code?vba registry editor

    1. Use RegNotifyChangeKeyValue

    This function monitors changes (additions, deletions, modifications, etc.) to an entry in the registry and its subentries.

    Disadvantages of this method: the registry change information that can be directly obtained is very little, if it is to obtain such as modification items, modification time, modification method, etc., it must be obtained by other means.

    Advantages: The platform compatibility is good, the system after 98 is basically applicable, and the association with RegSaveKey and RegRestoreKey is used to achieve the recovery of the specified entries in the registry

    VB6 HOOK Registry BY RegNotifyChangeKeyValue,FROM chatgpt,how to run?

    Code:
    Private Declare Function RegNotifyChangeKeyValue Lib "advapi32.dll" _
        (ByVal hKey As Long, ByVal bWatchSubtree As Boolean, ByVal dwNotifyFilter As Long, _
        ByVal hEvent As Long, ByVal fAsynchronous As Boolean) As Long
     
    Private Sub WatchRegistry()
        Dim hKey As Long
        Dim bWatchSubtree As Boolean
        Dim dwNotifyFilter As Long
        Dim hEvent As Long
        Dim fAsynchronous As Boolean
        Dim retVal As Long
     
        ' ???????????? HKEY_LOCAL_MACHINE ??
        hKey = CLng(&H80000002)
        bWatchSubtree = True ' ??????
        dwNotifyFilter = &H0 ' ?????????
        hEvent = CreateEvent(ByVal 0&, True, False, vbNullString) ' ????????
        fAsynchronous = False ' ????
     
        ' ?? RegNotifyChangeKeyValue ??
        retVal = RegNotifyChangeKeyValue(hKey, bWatchSubtree, dwNotifyFilter, hEvent, fAsynchronous)
     
        If retVal <> 0 Then
            ' ????
            MsgBox "Error watching registry key"
        Else
            ' ???????
            If WaitForSingleObject(hEvent, INFINITE) = WAIT_OBJECT_0 Then
                MsgBox "Registry key changed"
            Else
                MsgBox "Wait failed"
            End If
        End If
     
        ' ??
        CloseHandle hEvent
    End Sub
    Code:
    //??HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run?
     
    #include <windows.h>
     
    //???????????????
    int reg()
    {
       HANDLE hNotify;
       HKEY hKeyx;
       //DWORD dwRes;
     
       hNotify = CreateEvent(NULL, //???SECURITY_ATTRIBUTES??
             FALSE, //?????
             TRUE,   //??????
             "RegistryNotify" //???????
             );
     
       if (hNotify == 0)
       {
         MessageBox(NULL,"CreateEvent failed"," ",MB_OK);
         ExitProcess(0);
       }
     
       if (RegOpenKeyEx(HKEY_LOCAL_MACHINE, //??
             "Software\\Microsoft\\Windows\\CurrentVersion\\Run", //??
             0, //reserved
             KEY_NOTIFY, //???
             &hKeyx //????
             ) != ERROR_SUCCESS)
       {
         CloseHandle(hNotify);
         MessageBox(NULL,"RegOpenKeyEx failed"," ",MB_OK);
         ExitProcess(0);
       }
     
       if (RegNotifyChangeKeyValue(hKeyx, //??????
             TRUE, //???????
             REG_NOTIFY_CHANGE_NAME | REG_NOTIFY_CHANGE_LAST_SET, //?????????????????????
             hNotify, //????????????????
             TRUE //????????
             ) != ERROR_SUCCESS)
       {
         CloseHandle(hNotify);
         RegCloseKey(hKeyx);
         MessageBox(NULL,"RegNotifyChangeKeyValue failed"," ", MB_OK);
         ExitProcess(0);
       }
     
       if (WaitForSingleObject(hNotify, INFINITE) != WAIT_FAILED)
       {
         MessageBox(NULL,"??????"," ",MB_OK);
       }
     
       CloseHandle(hNotify);
       RegCloseKey(hKeyx);
     
       return 0;
     
    }
     
    void main()
    {
    	reg();
    }
    Last edited by xiaoyao; May 29th, 2024 at 11:26 AM.

  8. #8

    Thread Starter
    PowerPoster
    Join Date
    Jan 2020
    Posts
    3,948

    Re: Have similar registry editor vb6 source code?vba registry editor

    2. Use ETW
    '
    'ETW stands for windows Event Tracking?
    '
    Disadvantages of this approach: Registry event tracking is not available until windows server 2008 and vista versions, and in other lower versions, this approach does not work.
    '
    '
    '3. Use wmi
    '
    'Advantages of this approach: strong system compatibility
    '
    'Disadvantages: When obtaining related data, RegistryKeyChangeEvent, RegistryTreeChangeEvent, and RegistryValueChangeEvent can only monitor changes under HKEY_LOCAL_MACHINE. Changes under other root keys cannot be monitored.
    '
    '
    '4. Use detours.lib
    '
    'detours.lib is a library from Microsoft that can be used to monitor calls to the win32 API. According to this mechanism, changes to the registry can also be monitored. All you need to do is monitor the win32 API that operates on the registry. The 32-bit version of the library can be downloaded for free from Microsoft's official website, and there are restrictions on commercial development, specifically see Microsoft's instructions, the 64-bit version is only available for payment. Available for all Microsoft systems.
    '

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width