注册表转批处理文件

18588452015 · 发表于 2023-11-25 13:19:28

本帖最后由 18588452015 于 2023-11-25 13:39 编辑

【注册表转批处理文件】
前段时间在网上找到的一个工具，可以将*.reg文件转换成批处理脚本文件
不是常见的那种工具[将注册表逐行写出到文件，再regedit.exe /S 此文件]

注册表文件：

转换后的文件：

注意！注意！注意！不是下面这种(红色字体)方法的哦！
@echo OFF
If exist "%Temp%\~import.reg" (
Attrib -R -S -H "%Temp%\~import.reg"
del /F /Q "%Temp%\~import.reg"
If exist "%Temp%\~import.reg" (
Echo Could not delete file "%Temp%\~import.reg"
Pause
)
)
> "%Temp%\~import.reg" ECHO Windows Registry Editor Version 5.00
>> "%Temp%\~import.reg" ECHO.
>> "%Temp%\~import.reg" ECHO [HKEY_CLASSES_ROOT\*\shell\MD5_Price]
>> "%Temp%\~import.reg" ECHO @="MD5_校验此文件&(E)"
>> "%Temp%\~import.reg" ECHO "Icon"="D:\\360极速浏览器X下载\\Hash_1.0.4.exe"
>> "%Temp%\~import.reg" ECHO.
>> "%Temp%\~import.reg" ECHO [HKEY_CLASSES_ROOT\*\shell\MD5_Price\Command]
>> "%Temp%\~import.reg" ECHO @="D:\\360极速浏览器X下载\\Hash_1.0.4.exe %%0"
START /WAIT REGEDIT /S "%Temp%\~import.reg"
DEL "%Temp%\~import.reg"

支持转换：二进制值、DWORD值、QWORD值...，其它注册表键值未测试！

为了方便使用，我用易语言套了个壳，信息如下：

在此奉上工具：

游客，如果您要查看本帖隐藏内容请回复

有需要的朋友可以玩玩！

18588452015 · 发表于 2023-11-25 13:20:32

占座*1

mrzhonghb · 发表于 2023-11-25 13:39:39

感谢分享，板凳

sxz7392 · 发表于 2023-11-25 13:42:07

感谢分享

wyu · 发表于 2023-11-25 13:47:24

感谢分享!

yyz2191958 · 发表于 2023-11-25 13:47:26

感谢分享

chibuzhu · 发表于 2023-11-25 13:48:08

感谢分享

xqxeq · 发表于 2023-11-25 13:53:02

多谢分享

woaini · 发表于 2023-11-25 13:53:57

谢谢分享

2010hook · 发表于 2023-11-25 13:55:46

本帖最后由 2010hook 于 2023-11-25 15:22 编辑

麻烦楼主转一下这个测试范本，看看编程水平：

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC]
@="\\%WINDIR%\\CMD.EXE"
"str1"="\\\\cdcdscds"
"binval"=hex:11,22,33,44,55,66,77,88
"V64"=hex(b):08,07,06,05,04,03,02,91
"multistr"=hex(7):61,00,61,00,61,00,61,00,61,00,61,00,61,00,5c,00,30,00,61,00,\
61,00,61,00,61,00,61,00,61,00,00,00,62,00,62,00,62,00,62,00,62,00,62,00,62,\
00,62,00,62,00,62,00,62,00,00,00,63,00,63,00,63,00,63,00,63,00,63,00,63,00,\
63,00,63,00,63,00,63,00,63,00,00,00,00,00
"expstr"=hex(2):25,00,53,00,79,00,65,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,5c,00,6e,00,6f,00,74,00,65,00,70,00,61,00,64,00,2e,00,65,00,78,00,\
65,00,00,00
"V32"=dword:00ab4130
"aa%a\\"bb b"=hex:"xx\"="vv"c, =c\\\"
"multistr2"=hex(7):31,00,5c,00,30,00,5c,00,5c,00,00,00,32,00,32,00,32,00,5c,00,\
00,00,00,00
"multistr3"=hex(7):31,00,5c,00,30,00,5c,00,5c,00,00,00,32,00,32,00,32,00,5c,00,\
00,00,00,00
"6=LINK-最小0"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,00,5c,\
00,55,00,73,00,65,00,72,00
"\\STR2"="22222222222"
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\a0%新项 #1]
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\a2a,b bbbb]
"新值 |#1"="aa ddd"
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\a3新项 #2]
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\~!@#$%^&*()_+|}{:"?><,./;'[]=-]
"\\~!@#$%^&*()_+|}{:"?><,./;'[]=-\"="\\~!@#$%^&*()_+|}{:"?><,./;'[]=-\"
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\RegWorkShop-例子]
;4种字符串,类型
"1=SZ-最小2"="\\Registry\\User"
"2=EXPAND_SZ-最小2"=hex(2):5c,00,25,00,6f,00,73,00,25,00,5c,00,00,00
"6=LINK-最小0"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,00,5c,\
00,55,00,73,00,65,00,72,00
"7=MULTI_SZ-最小2"=hex(7):6c,00,31,00,00,00,6c,00,32,00,00,00,00,00
;3种WORD
"4=DWORD-最小4"=dword:00030201
"5=DWORD_BIG_ENDIAN-最小4"=hex(5):01,02,03,00
"B=QWORD-最小8"=hex(b):01,02,03,04,0a,0b,0c,00
;5种系统常见已知bin,直接--16可以,不要丢弃为空字符,但是类型能识别为hex(这里原来的吗)
"0=NONE-最小0"=hex(0):00
"3=BINARY-最小0"=hex:00
"8=RESOURCE_LIST-最小0"=hex(8):03,00,00
"9=FULL_RESOURCE_DESCRIPTOR-最小0"=hex(9):02,00
"A=RESOURCE_REQUIREMENTS_LIST-最小0"=hex(a):25,00,00,00
"c"=hex(c):0c,01,02,03,04
"d"=hex(d):0d,01,02,03,04
"8个f最大类型"=hex(ffffffff):ff,01,02,03,04,05
;REG_MUI_SZ SmartPhone PockPC支持
"15=MUI_SZ-VAL"=hex(15):4f,00,4b,00
"15=MUI_SZ-VAL2"=hex(15):4f,00,4b,00
;;;删除
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\删除-值]
"a"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\删除-默认值]
@=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\TEST!ABC\删除-项]

复制代码

18588452015 · 发表于 2023-11-25 14:06:00

2010hook 发表于 2023-11-25 13:55
麻烦楼主转一下这个测试范本，看看编程水平：

reg add "HKLM\SOFTWARE\TEST!ABC" /f /ve /t REG_SZ /d "\%%WINDIR%%\CMD.EXE"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "str1" /t REG_SZ /d "\\cdcdscds"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "binval" /t REG_BINARY /d 1122334455667788
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "V64" /t REG_QWORD /d 5.78437695752307e+017
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "multistr" /t REG_MULTI_SZ /d "aaaaaaa\0aaaaaa\0bbbbbbbbbbb\0cccccccccccc"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "expstr" /t REG_EXPAND_SZ /d "%%SyetemRoot%%\notepad.exe"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "V32" /t REG_DWORD /d 11223344
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "aa%%a\"bb b" /t REG_BINARY /d "xx"="vv"c =c\\"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "multistr2" /t REG_MULTI_SZ /d "1\0\\\0222\"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "multistr3" /t REG_MULTI_SZ /d "1\0\\\0222\"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "6=LINK-最小0" /t REG_LINK /d "\Registry\User"
reg add "HKLM\SOFTWARE\TEST!ABC" /f /v "\\STR2" /t REG_SZ /d "22222222222"
reg add "HKLM\SOFTWARE\TEST!ABC\a2a,b bbbb" /f /v "新值 |#1" /t REG_SZ /d "aa ddd"
reg add "HKLM\SOFTWARE\TEST!ABC\a3新项 #2" /f /v "\\~!@#$%%^&*()_+|}{:"?><,./;'[]=-" /t REG_SZ /d "\~!@#$%%^&*()_+|}{:"?><,./;'[]=-\"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "1=SZ-最小2" /t REG_SZ /d "\Registry\User"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "2=EXPAND_SZ-最小2" /t REG_EXPAND_SZ /d "\%%os%%\"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "6=LINK-最小0" /t REG_LINK /d "\Registry\User"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "7=MULTI_SZ-最小2" /t REG_MULTI_SZ /d "l1\0l2"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "4=DWORD-最小4" /t REG_DWORD /d 197121
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "5=DWORD_BIG_ENDIAN-最小4" /t REG_DWORD_BIG_ENDIAN /d 1
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "B=QWORD-最小8" /t REG_QWORD /d 7.26238598745979e+016
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "0=NONE-最小0" /t REG_NONE /d 00
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "3=BINARY-最小0" /t REG_BINARY /d 00
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "8=RESOURCE_LIST-最小0" /t REG_RESOURCE_LIST /d 030000
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "9=FULL_RESOURCE_DESCRIPTOR-最小0" /t REG_FULL_RESOURCE_DESCRIPTOR /d 0200
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "A=RESOURCE_REQUIREMENTS_LIST-最小0" /t REG_RESOURCE_REQUIREMENTS_LIST /d 25000000
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "c" /t REG_SZ /d "hex(c):0c,01,02,03,04"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "d" /t REG_SZ /d "hex(d):0d,01,02,03,04"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "8个f最大类型" /t REG_SZ /d "hex(ffffffff):ff,01,02,03,04,05"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "15=MUI_SZ-VAL" /t REG_SZ /d "hex(15):4f,00,4b,00"
reg add "HKLM\SOFTWARE\TEST!ABC\RegWorkShop-例子" /f /v "15=MUI_SZ-VAL2" /t REG_SZ /d "hex(15):4f,00,4b,00"
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe" /f /v "MitigationOptions" /t REG_QWORD /d 5.0920699759854e+017
reg delete "HKLM\SOFTWARE\TEST!ABC\删除-值" /f /v "a"
reg delete "HKLM\SOFTWARE\TEST!ABC\删除-默认值" /f /ve
reg delete "HKLM\SOFTWARE\TEST!ABC\删除-项" /f

复制代码

18588452015 · 发表于 2023-11-25 14:07:21

2010hook 发表于 2023-11-25 13:55
麻烦楼主转一下这个测试范本，看看编程水平：

不知道对不对？

Zap · 发表于 2023-11-25 14:11:15

smss · 发表于 2023-11-25 14:12:06

arthursoft · 发表于 2023-11-25 14:12:52

谢谢分享

fzp070 · 发表于 2023-11-25 14:13:28

不错的工具，感谢楼主分享！辛苦了

77723036 · 发表于 2023-11-25 14:14:41

啥办法，咋看不懂呢

18588452015 · 发表于 2023-11-25 14:17:10

77723036 发表于 2023-11-25 14:14
啥办法，咋看不懂呢

看不懂没关系，只要程序的功能没问题就行咯。

51xp · 发表于 2023-11-25 14:20:53

感谢分享

ttt0001 · 发表于 2023-11-25 14:23:27

感谢分享

2010oplk160 · 发表于 2023-11-25 14:24:27

感谢分享

创新科技2015 · 发表于 2023-11-25 14:27:37

感谢分享

创新科技2015 · 发表于 2023-11-25 14:28:53

很给力！

xudi1234 · 发表于 2023-11-25 14:36:48

感谢分享，用用看

czjfqlcy · 发表于 2023-11-25 14:54:36

学习学习

2010xyy0451 · 发表于 2023-11-25 14:56:34

不错

wang66 · 发表于 2023-11-25 14:59:25

好东东。。。。。。

2010hook · 发表于 2023-11-25 15:20:28

18588452015 发表于 2023-11-25 14:07
不知道对不对？

肯定不对！这些hex很多都是错的，本坛有个精华帖reg2cmd，比较可靠，其它别用了。

tanglf · 发表于 2023-11-25 15:22:18

很好，谢谢楼主提供

crtrccrtt · 发表于 2023-11-25 15:37:24

上工具：

		自动登录	找回密码
密码			注册

[分享] 注册表转批处理文件

点评

评分

点评

点评

点评

点评