Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


[help]about code

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming
View previous topic :: View next topic  
Author Message
bluesky
Cheater
Reputation: 0

Joined: 25 Sep 2006
Posts: 46

PostPosted: Wed Dec 05, 2007 7:08 am    Post subject: [help]about code Reply with quote

Code:
0040147A   .  52            PUSH EDX                                          ; /pHandle
0040147B   .  68 E0604400   PUSH SuperCli.004460E0                            ; |Subkey = "SOFTWARE\PeterSoft\SuperClick"
00401480   .  68 02000080   PUSH 80000002                                     ; |hKey = HKEY_LOCAL_MACHINE
00401485   .  C74424 18 000>MOV DWORD PTR SS:[ESP+18],0                       ; |
0040148D   .  AA            STOS BYTE PTR ES:[EDI]                            ; |
0040148E   .  C74424 1C 000>MOV DWORD PTR SS:[ESP+1C],400                     ; |
00401496   .  FF15 08904300 CALL DWORD PTR DS:[<&ADVAPI32.RegOpenKeyA>]       ; \RegOpenKeyA
0040149C   .  8B5424 0C     MOV EDX,DWORD PTR SS:[ESP+C]
004014A0   .  8D4424 10     LEA EAX,DWORD PTR SS:[ESP+10]
004014A4   .  8D8C24 600200>LEA ECX,DWORD PTR SS:[ESP+260]
004014AB   .  50            PUSH EAX                                          ; /pValueSize
004014AC   .  51            PUSH ECX                                          ; |Value
004014AD   .  6A 00         PUSH 0                                            ; |Subkey = NULL
004014AF   .  52            PUSH EDX                                          ; |hKey
004014B0   .  FF15 04904300 CALL DWORD PTR DS:[<&ADVAPI32.RegQueryValueA>]    ; \RegQueryValueA
004014B6   .  8B4424 0C     MOV EAX,DWORD PTR SS:[ESP+C]
004014BA   .  50            PUSH EAX                                          ; /hKey
004014BB   .  FF15 00904300 CALL DWORD PTR DS:[<&ADVAPI32.RegCloseKey>]       ; \RegCloseKey
004014C1   .  837C24 10 08  CMP DWORD PTR SS:[ESP+10],8
004014C6   .  7C 24         JL SHORT SuperCli.004014EC
004014C8   .  8D8C24 600200>LEA ECX,DWORD PTR SS:[ESP+260]
004014CF   .  51            PUSH ECX
004014D0   .  8D4C24 18     LEA ECX,DWORD PTR SS:[ESP+18]


i open a program with olly,is it open a register in my computer?
what do the code perform?


in the code of attachment,i found it open 3 DWORD in registry >
SOFTWARE\PeterSoft\SuperClick" named "AutoStart","MultRun","Restart".

but when i go registry > SOFTWARE\PeterSoft\SuperClick,i found there is a string registry name "(default).

which line is write value into that string and which line is take the value inside that string registry?



The Extension 'rar' was deactivated by an board admin, therefore this Attachment is not displayed.



Last edited by bluesky on Sun Dec 09, 2007 6:20 am; edited 1 time in total
Back to top
View user's profile Send private message
Symbol
I'm a spammer
Reputation: 0

Joined: 18 Apr 2007
Posts: 5094
Location: Israel.

PostPosted: Wed Dec 05, 2007 7:23 am    Post subject: Reply with quote

Writes to the registry.
Back to top
View user's profile Send private message
bluesky
Cheater
Reputation: 0

Joined: 25 Sep 2006
Posts: 46

PostPosted: Sun Dec 09, 2007 6:22 am    Post subject: Reply with quote

anyone know how to open a string registry and take out the content?
Back to top
View user's profile Send private message
Pseudo Xero
I post too much
Reputation: 0

Joined: 16 Feb 2007
Posts: 2607

PostPosted: Sun Dec 09, 2007 7:31 am    Post subject: Reply with quote

bluesky wrote:
anyone know how to open a string registry and take out the content?

Open up regedit.

_________________
haxory' wrote:
can't VB do anything??
windows is programmed using VB right? correct me if im wrong.

so all things in windows you have like the start menu is a windows form too.
Back to top
View user's profile Send private message
bluesky
Cheater
Reputation: 0

Joined: 25 Sep 2006
Posts: 46

PostPosted: Sun Dec 09, 2007 8:53 am    Post subject: Reply with quote

i mean the code in a software
Back to top
View user's profile Send private message
atom0s
Moderator
Reputation: 205

Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1

PostPosted: Sun Dec 09, 2007 9:31 am    Post subject: Reply with quote

bluesky wrote:
i mean the code in a software


Look at the registry API on MSDN:
http://msdn2.microsoft.com/en-us/library/ms724875.aspx

_________________
- Retired.
Back to top
View user's profile Send private message Visit poster's website
bluesky
Cheater
Reputation: 0

Joined: 25 Sep 2006
Posts: 46

PostPosted: Sun Dec 09, 2007 9:38 am    Post subject: Reply with quote

ok thanks
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites