I'm sitting here with a program that on registration writes the serial to the registry and probably checks it later...

I've been braking on RegQueryValueExA and have not gotten anything out of it.

Is there a function in delphi 6 for reading keys in the registry which doesn't call RegQueryValueExA?

/Manko

Didn't get any further with finding the delphifunction, but the coder was kind enough to hardcode the name of the key in the app.

I didn't find it at first as I'm new to IDA. (W32dasm wouldn't work with this proggy...) I just saw the place he wrote to the registry...

It bothers me that I would NOT have found my way if he had crypted that text...


/Manko

Sigh!

I'm a dork!
Now that I know where it read the key I thought I'd see for sure if it not use regqueryvalueexa.
Of course it did... *blush*
How I could miss it, I do not know... except, there was a shitload of hits that just looked stupid. (Just because i don't know better...) Hmm... But I can swear I didn't encounter it...
I had even automated the task using several data windows looking for both resultbuffer and keyname and some other... hmm... Maybe I'm just too unexperienced. Probably looked at wrong things... Or was too impatient...

Next time I'll not be sidetracked.

btw, IDA seems great!


/Manko

I am glad we helped you with your problem