jweinraub
26th January 2009 21:41 UTC
So using regdll won't be enough?
how do i call an external NSIS installer then?
it installs essentially four dll files into System32, and a sys file into system32\drivers.
Looking in registry just one entry for uninstall info, one entry in HKLM software with just the name.
and under services, a daemon gets installed: expert is:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rpcapd]
"Type"=dword:00000010
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):22,00,25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,\
69,00,6c,00,65,00,73,00,25,00,5c,00,57,00,69,00,6e,00,50,00,63,00,61,00,70,\
00,5c,00,72,00,70,00,63,00,61,00,70,00,64,00,2e,00,65,00,78,00,65,00,22,00,\
20,00,2d,00,64,00,20,00,2d,00,66,00,20,00,22,00,25,00,50,00,72,00,6f,00,67,\
00,72,00,61,00,6d,00,46,00,69,00,6c,00,65,00,73,00,25,00,5c,00,57,00,69,00,\
6e,00,50,00,63,00,61,00,70,00,5c,00,72,00,70,00,63,00,61,00,70,00,64,00,2e,\
00,69,00,6e,00,69,00,22,00,00,00
"DisplayName"="Remote Packet Capture Protocol v.0 (experimental)"
"ObjectName"="LocalSystem"
"Description"="Allows to capture traffic on this machine from a remote machine."
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\rpcapd\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00