Jump to content
Sign in to follow this  
MrKKD

Hell me plese, about registry

Recommended Posts

I want to export the registry key. It is key, Binary
If export from registry editor It will be binary
"UxdRegData"=hex:93,cb,97,66

But, when using this code

 
$regAddress = 'HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT'
$regKey = 'UxdRegData'
$regOBM = 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT'


$regPath = RegRead($regAddress,$regKey)


$file = FileOpen(@DesktopDir & '\OBM1.8.reg',2)
FileWrite($file,'Windows Registry Editor Version 5.00' & @CRLF & @CRLF _
              & '[' & $regOBM & ']' & @CRLF _
              & '"' & $regKey & '"="' & $regPath &'"')
FileClose($file)

OBM1.8.reg file represented as

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT]
"UxdRegData"="0x93CB9766

It is not a binary code  :sweating:  :sweating:

 
Who can help me please :(
 
Sorry for not good English  :sweating:
 
 
 
 
 

Share this post


Link to post
Share on other sites

Try

$regAddress = 'HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT'
$regKey = 'UxdRegData'
$regOBM = 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT'

$regPath = RegRead($regAddress,$regKey)
$regPath=Hex($regPath, 8)

$file = FileOpen(@DesktopDir & '\OBM1.8.reg',2)
FileWrite($file,'Windows Registry Editor Version 5.00' & @CRLF & @CRLF _
              & '[' & $regOBM & ']' & @CRLF _
               & '"' & $regKey & '"=dword:' & $regPath)
FileClose($file)

PS: check your thread title..

Edited by careca

Spoiler

Renamer - Rename files and folders, remove portions of text from the filename etc.

GPO Tool - Export/Import Group policy settings.

MirrorDir - Synchronize/Backup/Mirror Folders

BeatsPlayer - Music player.

Params Tool - Right click an exe to see it's parameters or execute them.

String Trigger - Triggers pasting text or applications or internet links on specific strings.

Inconspicuous - Hide files in plain sight, not fully encrypted.

Regedit Control - Registry browsing history, quickly jump into any saved key.

Time4Shutdown - Write the time for shutdown in minutes.

Power Profiles Tool - Set a profile as active, delete, duplicate, export and import.

Finished Task Shutdown - Shuts down pc when specified window/Wndl/process closes.

NetworkSpeedShutdown - Shuts down pc if download speed goes under "X" Kb/s.

IUIAutomation - Topic with framework and examples

Au3Record.exe

Share this post


Link to post
Share on other sites

 Thank you careca for reply.

I try to use your scripts, and it do not work for me.

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT]
"UxdRegData"=dword:93CB9766

I want to be

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT]
"UxdRegData"=hex:93,cb,97,66

 

Ps.sorry for thread title, I can't chang it  :sweating: 

 

Share this post


Link to post
Share on other sites

try running this:

REG EXPORT "HKLM\Software\Microsoft\Windows NT" Registry.reg

may be it work for you

 

Thakyou  :)

but I do not want to export HKLMSoftwareMicrosoftWindows NT key

I want to export UxdRegData

from [HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoftWindows NT]

to [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NT]

Share this post


Link to post
Share on other sites

Show me the SciTE output pane info when you run (F5) the script so I can see what is happening.

Share this post


Link to post
Share on other sites

No need to post the screencaptures, just a Cut&Paste of the text would have been fine. ;)

You are running the x86 version of AutoIt3, not the x64 version.

Try running this code and post the result from SciTE Output pane:

ConsoleWrite('@@ Debug(' & @ScriptLineNumber & ') : regread("HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows NT", "UxdRegData") = ' & regread("HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows NT","UxdRegData") & @CRLF & '>Error code: ' & @error & @CRLF) ;### Debug Console
ConsoleWrite('@@ Debug(' & @ScriptLineNumber & ') : regread("HKLM\SOFTWARE\Microsoft\Windows NT","UxdRegData") = ' & regread("HKLM\SOFTWARE\Microsoft\Windows NT","UxdRegData") & @CRLF & '>Error code: ' & @error & @CRLF) ;### Debug Console
ConsoleWrite('@@ Debug(' & @ScriptLineNumber & ') : regread("HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT","UxdRegData") = ' & regread("HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT","UxdRegData") & @CRLF & '>Error code: ' & @error & @CRLF) ;### Debug Console

Jos

Edited by Jos

Share this post


Link to post
Share on other sites
>"C:\Program Files (x86)\AutoIt3\SciTE\..\autoit3.exe" /ErrorStdOut "C:\Users\Administrator\Desktop\debug.au3"    
@@ Debug(1) : regread("HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows NT", "UxdRegData") = 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
>Error code: 0
@@ Debug(2) : regread("HKLM\SOFTWARE\Microsoft\Windows NT","UxdRegData") = 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
>Error code: 0

:ILA2:

Share this post


Link to post
Share on other sites

>"C:\Program Files (x86)\AutoIt3\SciTE\..\autoit3.exe" /ErrorStdOut "C:\Users\Administrator\Desktop\debug.au3"    
@@ Debug(1) : regread("HKLM64\SOFTWARE\Wow6432Node\Microsoft\Windows NT", "UxdRegData") = 0x93CB976641188D5EA8AA25404D7B997EFC3E20A70CE33520F9FA961EE47560B2480DAAF7BC827A26DC968B6F681C1A5E4BD1F781F0D94CB44BD1F781F0D94CB4B272F74AB295223ADF18BCC8CFEC69F90E54CA5104D2F7CB058D42A07D5AED7E152E7F40A017AFCBC1008761A25A1254832F224AFAE268D65A71F1E0EFC2E5F4D9E2A2FFCAC52188BA9D3632E3AF55AE08D729534810C418AD6DC11F2569208C74E8B37B9C7607D6425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644EE75A0A47078DF88425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644425574C1E83E2644873F3D395F2B6095339B0542A8A0E2C0E950F4ABA26DE23055A2BDC46DE0CB78425574C1E83E2644D45FD42FC409A9E2
>Error code: 0
@@ Debug(2) : regread("HKLM\SOFTWARE\Microsoft\Windows NT","UxdRegData") = 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
>Error code: 0
@@ Debug(3) : regread("HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT","UxdRegData") = 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
>Error code: 0
>Exit code: 0    Time: 0.06029

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...