这个问题因两件事而变得复杂:
- UltraVNC 将自身安装在 64 位 Windows 上注册表的 64 位视图中,因此我们需要查询这两个视图,并且
- RemoteRegistry 在 Windows Vista 及更高版本上默认不运行。
这就是我想出的:
function RegConnectRegistry(machineName: String; hKeyRoot:Integer; var phKey: Integer): integer;
external 'RegConnectRegistryA@Advapi32.dll';
function RegOpenKeyEx(hKeyRoot:Integer; subkey:string; reserved, access:integer; var phKey: Integer): integer;
external 'RegOpenKeyExA@Advapi32.dll';
function RegQueryValueEx(hKey:Integer; value: String; reserved: integer; var pType: integer; data: string; var pDataLen:integer): integer;
external 'RegQueryValueExA@Advapi32.dll';
function RegCloseKey(hKey:Integer): integer;
external 'RegCloseKey@Advapi32.dll';
然后,调用函数相对简单。为简洁起见,大多数错误处理已被省略。此外,不会尝试读取非 REG_SZ 值。
<target>是目标,按名称或按 IP 地址。<key>并且<value>是要查询的远程键和值。
procedure CheckRemoteVNC();
var
HKRM, key: Integer;
data: string;
dwType, dataLen, retVal: Integer;
begin
data := '12345678901234567890'; { Padding. Digits so I can easily count how long it is. }
dataLen := 20
{ Make sure the Remote Registry service is running }
Exec('sc', ExpandConstant('\\<target> start RemoteRegistry'), '', SW_HIDE, ewWaitUntilTerminated, retVal)
RegConnectRegistry('<target>', HKEY_LOCAL_MACHINE, HKRM)
if RegOpenKeyEx(HKRM, '<key>', 0, 1 {KEY_QUERY_VALUE}, key) = 2 {Bad registry entry} then
{ Try the 64-bit view. }
retVal := RegOpenKeyEx(HKRM, '<key>', 0, 257 {0x101 == KEY_WOW64_64KEY | KEY_QUERY_VALUE}, key)
RegQueryValueEx(Key, '<value>', 0, dwType, data, dataLen)
data := Copy(data, 0, dataLen-1)
{ Deal with the data appropriately. }
if key <> 0 then RegCloseKey(key)
if HKRM <> 0 then RegCloseKey(HKRM)
end;
有关更多详细信息,请参阅Microsoft 关于这些功能的文档。