本帖最后由 2010hook 于 2023-11-25 15:22 编辑
麻烦楼主转一下这个测试范本,看看编程水平:
- Windows Registry Editor Version 5.00
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC]
- @="\\%WINDIR%\\CMD.EXE"
- "str1"="\\\\cdcdscds"
- "binval"=hex:11,22,33,44,55,66,77,88
- "V64"=hex(b):08,07,06,05,04,03,02,91
- "multistr"=hex(7):61,00,61,00,61,00,61,00,61,00,61,00,61,00,5c,00,30,00,61,00,\
- 61,00,61,00,61,00,61,00,61,00,00,00,62,00,62,00,62,00,62,00,62,00,62,00,62,\
- 00,62,00,62,00,62,00,62,00,00,00,63,00,63,00,63,00,63,00,63,00,63,00,63,00,\
- 63,00,63,00,63,00,63,00,63,00,00,00,00,00
- "expstr"=hex(2):25,00,53,00,79,00,65,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
- 00,25,00,5c,00,6e,00,6f,00,74,00,65,00,70,00,61,00,64,00,2e,00,65,00,78,00,\
- 65,00,00,00
- "V32"=dword:00ab4130
- "aa%a\\"bb b"=hex:"xx\"="vv"c, =c\\\"
- "multistr2"=hex(7):31,00,5c,00,30,00,5c,00,5c,00,00,00,32,00,32,00,32,00,5c,00,\
- 00,00,00,00
- "multistr3"=hex(7):31,00,5c,00,30,00,5c,00,5c,00,00,00,32,00,32,00,32,00,5c,00,\
- 00,00,00,00
- "6=LINK-最小0"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,00,5c,\
- 00,55,00,73,00,65,00,72,00
- "\\STR2"="22222222222"
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\a0%新项 #1]
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\a2a,b bbbb]
- "新值 |#1"="aa ddd"
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\a3新项 #2]
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\~!@#$%^&*()_+|}{:"?><,./;'[]=-]
- "\\~!@#$%^&*()_+|}{:"?><,./;'[]=-\"="\\~!@#$%^&*()_+|}{:"?><,./;'[]=-\"
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\RegWorkShop-例子]
- ;4种字符串,类型
- "1=SZ-最小2"="\\Registry\\User"
- "2=EXPAND_SZ-最小2"=hex(2):5c,00,25,00,6f,00,73,00,25,00,5c,00,00,00
- "6=LINK-最小0"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,00,5c,\
- 00,55,00,73,00,65,00,72,00
- "7=MULTI_SZ-最小2"=hex(7):6c,00,31,00,00,00,6c,00,32,00,00,00,00,00
- ;3种WORD
- "4=DWORD-最小4"=dword:00030201
- "5=DWORD_BIG_ENDIAN-最小4"=hex(5):01,02,03,00
- "B=QWORD-最小8"=hex(b):01,02,03,04,0a,0b,0c,00
- ;5种系统常见已知bin,直接--16可以,不要丢弃为空字符,但是类型能识别为hex(这里原来的吗)
- "0=NONE-最小0"=hex(0):00
- "3=BINARY-最小0"=hex:00
- "8=RESOURCE_LIST-最小0"=hex(8):03,00,00
- "9=FULL_RESOURCE_DESCRIPTOR-最小0"=hex(9):02,00
- "A=RESOURCE_REQUIREMENTS_LIST-最小0"=hex(a):25,00,00,00
- "c"=hex(c):0c,01,02,03,04
- "d"=hex(d):0d,01,02,03,04
- "8个f最大类型"=hex(ffffffff):ff,01,02,03,04,05
- ;REG_MUI_SZ SmartPhone PockPC支持
- "15=MUI_SZ-VAL"=hex(15):4f,00,4b,00
- "15=MUI_SZ-VAL2"=hex(15):4f,00,4b,00
- ;;;删除
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\删除-值]
- "a"=-
- [HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\删除-默认值]
- @=-
- [-HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\删除-项]
复制代码 |