| View previous topic :: View next topic |
| Author |
Message |
bluesky Cheater
Reputation: 0
Joined: 25 Sep 2006 Posts: 46
|
Posted: Wed Dec 05, 2007 7:08 am Post subject: [help]about code |
|
|
| Code: | 0040147A . 52 PUSH EDX ; /pHandle
0040147B . 68 E0604400 PUSH SuperCli.004460E0 ; |Subkey = "SOFTWARE\PeterSoft\SuperClick"
00401480 . 68 02000080 PUSH 80000002 ; |hKey = HKEY_LOCAL_MACHINE
00401485 . C74424 18 000>MOV DWORD PTR SS:[ESP+18],0 ; |
0040148D . AA STOS BYTE PTR ES:[EDI] ; |
0040148E . C74424 1C 000>MOV DWORD PTR SS:[ESP+1C],400 ; |
00401496 . FF15 08904300 CALL DWORD PTR DS:[<&ADVAPI32.RegOpenKeyA>] ; \RegOpenKeyA
0040149C . 8B5424 0C MOV EDX,DWORD PTR SS:[ESP+C]
004014A0 . 8D4424 10 LEA EAX,DWORD PTR SS:[ESP+10]
004014A4 . 8D8C24 600200>LEA ECX,DWORD PTR SS:[ESP+260]
004014AB . 50 PUSH EAX ; /pValueSize
004014AC . 51 PUSH ECX ; |Value
004014AD . 6A 00 PUSH 0 ; |Subkey = NULL
004014AF . 52 PUSH EDX ; |hKey
004014B0 . FF15 04904300 CALL DWORD PTR DS:[<&ADVAPI32.RegQueryValueA>] ; \RegQueryValueA
004014B6 . 8B4424 0C MOV EAX,DWORD PTR SS:[ESP+C]
004014BA . 50 PUSH EAX ; /hKey
004014BB . FF15 00904300 CALL DWORD PTR DS:[<&ADVAPI32.RegCloseKey>] ; \RegCloseKey
004014C1 . 837C24 10 08 CMP DWORD PTR SS:[ESP+10],8
004014C6 . 7C 24 JL SHORT SuperCli.004014EC
004014C8 . 8D8C24 600200>LEA ECX,DWORD PTR SS:[ESP+260]
004014CF . 51 PUSH ECX
004014D0 . 8D4C24 18 LEA ECX,DWORD PTR SS:[ESP+18] |
i open a program with olly,is it open a register in my computer?
what do the code perform?
in the code of attachment,i found it open 3 DWORD in registry >
SOFTWARE\PeterSoft\SuperClick" named "AutoStart","MultRun","Restart".
but when i go registry > SOFTWARE\PeterSoft\SuperClick,i found there is a string registry name "(default).
which line is write value into that string and which line is take the value inside that string registry?
Last edited by bluesky on Sun Dec 09, 2007 6:20 am; edited 1 time in total |
|
| Back to top |
|
 |
Symbol I'm a spammer
Reputation: 0
Joined: 18 Apr 2007 Posts: 5094 Location: Israel.
|
Posted: Wed Dec 05, 2007 7:23 am Post subject: |
|
|
| Writes to the registry.
|
|
| Back to top |
|
 |
bluesky Cheater
Reputation: 0
Joined: 25 Sep 2006 Posts: 46
|
Posted: Sun Dec 09, 2007 6:22 am Post subject: |
|
|
| anyone know how to open a string registry and take out the content?
|
|
| Back to top |
|
 |
Pseudo Xero I post too much
Reputation: 0
Joined: 16 Feb 2007 Posts: 2607
|
Posted: Sun Dec 09, 2007 7:31 am Post subject: |
|
|
| bluesky wrote: | | anyone know how to open a string registry and take out the content? |
Open up regedit.
_________________
| haxory' wrote: | can't VB do anything??
windows is programmed using VB right? correct me if im wrong.
so all things in windows you have like the start menu is a windows form too. |
|
|
| Back to top |
|
 |
bluesky Cheater
Reputation: 0
Joined: 25 Sep 2006 Posts: 46
|
Posted: Sun Dec 09, 2007 8:53 am Post subject: |
|
|
| i mean the code in a software
|
|
| Back to top |
|
 |
atom0s Moderator
Reputation: 205
Joined: 25 Jan 2006 Posts: 8587 Location: 127.0.0.1
|
|
| Back to top |
|
 |
bluesky Cheater
Reputation: 0
Joined: 25 Sep 2006 Posts: 46
|
Posted: Sun Dec 09, 2007 9:38 am Post subject: |
|
|
| ok thanks
|
|
| Back to top |
|
 |
|