Fravia's TOOLS OF OUR TRADE Messageboard ~ Moderated
Sice macro for trapping registry queries
Friday, 09-Apr-99 19:31:39
[This is part of a discussion at Sandman's on making a macro that traps a registry query based on a specified subkey and then displays the return data]
I found the following form works (after consulting the Sice manual):
MACRO reg="bpx RegQueryValueExA IF *(ESP->8) == \'%1\' DO \"D ESP->14\""
Q1: Why don't double quotes work around %1? BTW - they don't.
Q2: Why don't we need a backslash in front of the percent sign like the Sice manual implies?
Q3: Most puzzling to me - why *(esp->8) and not just (esp->8)? The address of the subkey string is at (esp+8) so we should be able to reference that string with *(esp+8) which is the same as (esp->8). *(esp->8) seems like a double indirection. As if the address at esp+8 pointed to another address which then finally points to the string. Am I off here? If so, please explain.
dh (confused)
Dh