Page 4 of 4 FirstFirst 1234
Results 46 to 49 of 49

Thread: C++ programming for reversing

  1. #46
    Super Moderator
    Join Date
    Dec 2004
    Blog Entries
    there is long standing report that has not been addressed (about 10 years now)about this c?\ inwin7 or c:\?P in win8

    notepad ++ does not have any s&r problems afaik wrt c?\
    you probably did not use plain text search pattern and plain text radio button or
    did not escape the pattern if you used it with regular expression

    at the time of this post i have about 468 broken paths

    D:\>reg query hklm\software\microsoft\windows\currentversion\installer
        InstallerLocation    REG_SZ    C:\Windows\system32\
    D:\>reg export hklm\software\microsoft\windows\currentversion\installer waxnpp.reg
    The operation completed successfully.
    D:\>grep -obUaPc "\x43\x00\x3f\x00\x5c\x00" waxnpp.reg
    468 <<<<<<<<<<<<<<<<<<<<
    D:\>echo there are 468 broken paths at the moment in my machine lets npp this now
    there are 468 broken paths at the moment in my machine lets npp this now
    D:\>"c:\Program Files\Notepad++\notepad++.exe" waxnpp.reg
    D:\>wc -l waxnpp.reg
    218829 waxnpp.reg
    D:\>ls -lg waxnpp.reg
    -rw-rw-rw-  1 0 34893936 2020-01-17 18:31 waxnpp.reg
    D:\>file waxnpp.reg
    waxnpp.reg; Little-endian UTF-16 Unicode text, with CRLF line terminators
    the hive has about 219K lines weighs 34mb

    Name:  waxres.JPG
Views: 141
Size:  126.4 KB
    Name:  waxres1.JPG
Views: 139
Size:  121.8 KB

  2. #47
    Quote Originally Posted by blabberer View Post
    at the time of this post i have about 468 broken paths
    Are those actually broken paths, meaning they cannot be read? Should I edit them all and change them back to c:\...? Seems that the one using the pipe...| consistent throughout the path. That is all the \ are indicated as |.

    I have not encountered issues in XP or W7 with those paths as far as I know. I am having issues on XP with a version of msvcrt.dll that seems to have been substituted in sys32 for the one required. With certain apps I get an error: The procedure entry point _except_handler4_common could not be located in the dynamic link library msvcrt.dll.

    I was having another issue with windows installer with certain files. It complained that 'program files' has an illegal character in it. I could find no illegal characters in the registry but changing the d?\ and d:| entries to c?\ and c:| seems to have fixed that. A lot of them were related to .Net framework.

    Thanks for heads up re N++. I'll take a closer look. I do have a grep tool as well but it's on XP and I have not tried it as yet since the registry is locked. Did not think of exporting a hive. Good idea. Trouble is, some apps rename the hive internally and I wonder about putting it back as a hive. Have not tried it yet.

  3. #48
    Super Moderator
    Join Date
    Dec 2004
    Blog Entries
    the | is in key name which is a windows registry limitation it is not broken it is by design

    A keyname can contain any printable charecter except backslash

    i said broken for c? and c:\? in key values or keydata

    you can open regedit and try creating a key with key name foo\blah and regedit will show you

    Name:  yakku.JPG
Views: 136
Size:  42.2 KB

  4. #49
    Blabbs...thanks for clarification.

Similar Threads

  1. ask a question about debuger programming
    By zqBugZ in forum The Newbie Forum
    Replies: 3
    Last Post: June 23rd, 2008, 09:50
  2. World of Warcraft "reversing" / bot programming
    By n00bster in forum The Newbie Forum
    Replies: 25
    Last Post: April 27th, 2006, 05:06
  3. Assembler programming
    By book in forum The Newbie Forum
    Replies: 28
    Last Post: March 28th, 2006, 10:58
  4. Teach yourself programming...
    By TBone in forum The Newbie Forum
    Replies: 1
    Last Post: April 12th, 2004, 18:29
  5. ATA programming
    By goatass in forum Advanced Reversing and Programming
    Replies: 5
    Last Post: September 16th, 2002, 19:27


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts