private void Form1_Load(object sender, EventArgs e)
{
RegistryKey IFEORegx64 = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options");
TreeNode IFEONodex64 = new TreeNode("X64");
if (IFEORegx64 != null)
{
IFEOTree.TopNode.Nodes.Add(IFEONodex64);
foreach (string IFEOKey in IFEORegx64.GetSubKeyNames())
{
RegistryKey CurIFEOKey = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\" + IFEOKey);
if (CurIFEOKey.GetValue("debugger", null) != null)
{
IFEORegItem IFEOlist = new IFEORegItem(IFEOKey, "X64", (string)CurIFEOKey.GetValue("debugger", null));
MessageBox.Show(IFEOlist.ToString());//listBox1.Items.Add(IFEOlist);
}
}
}
IFEORegx64.Close();
//////////////////////////
RegistryKey IFEORegx86 = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options");
TreeNode IFEONodex86 = new TreeNode("X86");
if (IFEORegx86 != null)
{
IFEOTree.TopNode.Nodes.Add(IFEONodex86);
}
IFEORegx86.Close();
}
private void Window_Loaded(object sender, RoutedEventArgs e)
{
AeroGlass.ExtendGlassFrame(this, new Thickness(-1));
RegistryKey IFEORegx64 = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options");
// TreeNode IFEONodex64 = new TreeNode("X64");
if (IFEORegx64 != null)
{
// IFEOTree.TopNode.Nodes.Add(IFEONodex64);
foreach (string IFEOKey in IFEORegx64.GetSubKeyNames())
{
RegistryKey CurIFEOKey = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\" + IFEOKey);
if (CurIFEOKey.GetValue("debugger", null) != null)
{
IFEORegItem IFEOlist = new IFEORegItem(IFEOKey, "X64", (string)CurIFEOKey.GetValue("debugger", null));
//MessageBox.Show("Image:" + IFEOlist.ImageName + "\nPath:" + IFEOlist.ImagePath);
listBox1.Items.Add("--------");
listBox1.Items.Add(IFEOlist.ImageName);
listBox1.Items.Add(IFEOlist.ImagePath);
}
}
}
IFEORegx64.Close();
//////////////////////////
//RegistryKey IFEORegx86 = Registry.LocalMachine.OpenSubKey("SOFTWARE\\Wow6432Node\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options");
//TreeNode IFEONodex86 = new TreeNode("X86");
//if (IFEORegx86 != null)
//{
// IFEOTree.TopNode.Nodes.Add(IFEONodex86);
//}
//IFEORegx86.Close();
}
