OllyDbg + Registry question

Originally Posted by sTfN0X

So, if I understand you right the %1 is the name of the exe I right click on that gets passed as a parameter?

that's right...

about retreiveing that parameter... it's allready passed to your loader.
you just need to call olly with that same param.

in case you don't know how to read it... should be something like this

C like

int main(int argc, char *argv[])
{
  int i;

  for (i = 1; i < argc; i++) printf("%s ", argv[i]);
  printf("\n");

  return 0;
}

delphi

procedure TForm1.FormCreate(Sender: TObject);
Var
    I : Integer;
begin
    Memo1.Lines.Clear;
    Memo1.Lines.Add('Parameters Count : '+IntToStr(ParamCount));
    { ParamCount - Returns the number of parameters passed on
    the command line. }
    If ParamCount>0 Then
        For I:=1 To ParamCount Do
        { ParamStr - Returns a specified parameter from the command-line. }
        Memo1.Lines.Add('Parameter '+IntToStr(I)+' : '+ParamStr(I))
end;

vb

Sub Main()
Debug.Print Command$
End Sub

hope this helps