IDA的伪代码返回多少才是注册的？

冥界3大法王

[Asm] 纯文本查看 复制代码

int __stdcall sub_74B5E0(LPCSTR lpValueName, BYTE *lpData)
{
  int result; // eax
  LPCSTR lpSubKey; // [esp+4h] [ebp-18h] BYREF
  HKEY phkResult; // [esp+8h] [ebp-14h] BYREF
  DWORD dwDisposition; // [esp+Ch] [ebp-10h] BYREF
  int v6; // [esp+18h] [ebp-4h]

  v6 = 1;
  CString::CString((CString *)&lpSubKey, aSoftwareMacrom_1);
  LOBYTE(v6) = 2;
  CString::operator+=(&lpSubKey, aRegistration);
  if ( RegCreateKeyExA(HKEY_LOCAL_MACHINE, lpSubKey, 0, 0, 0, 0xF003Fu, 0, &phkResult, &dwDisposition)
    || RegSetValueExA(phkResult, lpValueName, 0, 1u, lpData, *((_DWORD *)lpData - 2)) )
  {
    LOBYTE(v6) = 1;
    CString::~CString((CString *)&lpSubKey);
    LOBYTE(v6) = 0;
    CString::~CString((CString *)&lpValueName);
    v6 = -1;
    CString::~CString((CString *)&lpData);
    result = 0;
  }
  else
  {
    RegCloseKey(phkResult);
    LOBYTE(v6) = 1;
    CString::~CString((CString *)&lpSubKey);
    LOBYTE(v6) = 0;
    CString::~CString((CString *)&lpValueName);
    v6 = -1;
    CString::~CString((CString *)&lpData);
    result = 1;
  }
  return result;
}

你好，再见

0为false 1为true，所以我猜是1