Access Hidden Registry Keys?

sbabineau · 1st May 2007, 23:50

It doesn't appear that I can get access to hidden registry keys using the built-in Registry functions. Is this true? If so, is there another way?

-Steve.

Brummelchen · 2nd May 2007, 00:37

http://www.codeproject.com/tools/NtRegEdit.asp

sbabineau · 2nd May 2007, 20:54

Thanks for the link! It is helpful. However, I would like to add/remove hidden registry keys with NSIS. Is there a way to access the registry without using WindowsAPI (The System plugin, perhaps?)?

Red Wine · 2nd May 2007, 21:04

Have you tried the registry plugin?

http://nsis.sourceforge.net/Registry_plug-in

Brummelchen · 2nd May 2007, 21:30

Red Wine - plugin cant do this cause it only uses the API
which cannot handle direkt read/write to registry.

sbabineau · 2nd May 2007, 21:44

Exactly

Brummelchen · 2nd May 2007, 23:25

normally that shit is used for copy protection or avoiding change of serial numbers. i dont use any software with it - in case of it gets kicked immediately.

kichik · 3rd May 2007, 17:59

Use the System plug-in to call NtCreateKey and friends.

DimitarSerg · 17th October 2011, 13:00

Quote:

Originally Posted by kichik

Use the System plug-in to call NtCreateKey and friends.

Can anybody shows or shares a sample a part of source how to do this ?

LoRd_MuldeR · 17th October 2011, 18:10

This won't be that easy, because Nt/ZwCreateKey needs a pointer to a OBJECT_ATTRIBUTES structure.

Might be easier to write a simple plug-in for that purpose...

Anders · 17th October 2011, 21:12

Using structs with the system plugin is possible, but anyone can just set a breakpoint on System::Call and watch your calls as plain strings so you are not going to hide anything from people by using NSIS...

1st May 2007, 23:50	#1
sbabineau Junior Member Join Date: May 2007 Posts: 7	Access Hidden Registry Keys? It doesn't appear that I can get access to hidden registry keys using the built-in Registry functions. Is this true? If so, is there another way? -Steve.

2nd May 2007, 00:37	#2
Brummelchen Major Dude Join Date: May 2003 Posts: 681	http://www.codeproject.com/tools/NtRegEdit.asp Greets, Brummelchen

2nd May 2007, 21:04	#4
Red Wine Forum King Join Date: Mar 2006 Location: Ath. GR Posts: 2,078	Have you tried the registry plugin? http://nsis.sourceforge.net/Registry_plug-in Quick AVI Creator - Quick and easy convert from DVD/MPEG/AVI/MKV to AVI/MP4/MKV Quick AVI Creator entirely edited with NSIS and entirely upgraded to Unicode NSIS

2nd May 2007, 21:30	#5
Brummelchen Major Dude Join Date: May 2003 Posts: 681	Red Wine - plugin cant do this cause it only uses the API which cannot handle direkt read/write to registry. Greets, Brummelchen

2nd May 2007, 23:25	#7
Brummelchen Major Dude Join Date: May 2003 Posts: 681	normally that shit is used for copy protection or avoiding change of serial numbers. i dont use any software with it - in case of it gets kicked immediately. Greets, Brummelchen

2nd May 2007, 20:54	#3
sbabineau Junior Member Join Date: May 2007 Posts: 7	Thanks for the link! It is helpful. However, I would like to add/remove hidden registry keys with NSIS. Is there a way to access the registry without using WindowsAPI (The System plugin, perhaps?)?

2nd May 2007, 21:44	#6
sbabineau Junior Member Join Date: May 2007 Posts: 7	Exactly

3rd May 2007, 17:59	#8
kichik M.I.A. [NSIS Dev, Mod] Join Date: Oct 2001 Location: Israel Posts: 11,343	Use the System plug-in to call NtCreateKey and friends. NSIS FAQ \| NSIS Home Page \| Donate $ "I hear and I forget. I see and I remember. I do and I understand." -- Confucius

17th October 2011, 18:10	#10
LoRd_MuldeR Major Dude Join Date: Sep 2005 Location: Somewhere over the Slaughterhouse Posts: 797	This won't be that easy, because Nt/ZwCreateKey needs a pointer to a OBJECT_ATTRIBUTES structure. Might be easier to write a simple plug-in for that purpose... My Plugins: StdUtils \| NSISList \| CPUFeatures \| ExecTimeout \| KillProc My source of inspiration: http://youtu.be/lCwY4_0W1YI

17th October 2011, 21:12	#11
Anders Moderator Join Date: Jun 2002 Location: ${NSISDIR} Posts: 5,449	Using structs with the system plugin is possible, but anyone can just set a breakpoint on System::Call and watch your calls as plain strings so you are not going to hide anything from people by using NSIS... IntOp $PostCount $PostCount + 1

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode