|
本帖最后由 chishingchan 于 2023-9-4 23:13 编辑
ResTuner_setup.vbs
- Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
- Set colItems = objWMIService.ExecQuery ("Select * from Win32_OperatingSystem")
- For Each objItem in colItems
- OSA = objItem.OSArchitecture
- Next
- Const HKCU = &H80000001
- Const HKLM = &H80000002
- Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")
- If OSA = "64-bit" Or OSA = "64 位" Then
- oReg.GetStringValue HKLM,"SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Resource Tuner_is1","DisplayName",DN
- oReg.GetStringValue HKLM,"SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Resource Tuner_is1","DisplayVersion",DV
- oReg.GetStringValue HKLM,"SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Resource Tuner_is1","InstallLocation",IL
- Else
- oReg.GetStringValue HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Resource Tuner_is1","DisplayName",DN
- oReg.GetStringValue HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Resource Tuner_is1","DisplayVersion",DV
- oReg.GetStringValue HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Resource Tuner_is1","InstallLocation",IL
- End If
- Set WshShell = CreateObject("WScript.Shell")
- Set objFSO = CreateObject("Scripting.FileSystemObject")
- If IsNull(IL) Then
- WshShell.Popup "软件可能未安装!",5,"错误",0
- WScript.Quit
- End If
- If Not objFSO.FileExists(IL & "restuner.exe") Then
- WshShell.Popup "目标文件不存在!",5,"错误",0
- WScript.Quit
- End If
- If DV <> "2.23" Then
- WshShell.Popup "软件版本不支持!",5,"错误",0
- WScript.Quit
- End If
- Name = Array("restuner.exe")
- Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate,(Debug)}!\\.\root\cimv2")
- Set colProcessList = objWMIService.ExecQuery ("Select * from Win32_Process")
- For Each objProcess In colProcessList
- For Each Process In Name
- If LCase(objProcess.Name) = LCase(Process) Then
- objProcess.Terminate()
- End If
- Next
- Next
- Set ado_stream = CreateObject("ADODB.Stream")
- ado_stream.Type = 1
- ado_stream.open
- ado_stream.LoadFromFile IL & "restuner.exe"
- ado_stream.position = 1267962 '08000000E87DFBECFFBB01000000
- ado_stream.Write HexToByte("00000000E87DFBECFFEB20909090")
- ado_stream.position = 1716204 '修改为:W.i.n.d.o.w.s.
- ado_stream.Write HexToByte("570069006E0064006F00770073000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
- ado_stream.position = 1719400 '修改为:B.u.s.i.n.e.s.s. .L.i.c.e.n.s.e.
- ado_stream.Write HexToByte("42007500730069006E0065007300730020004C006900630065006E00730065000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
- ado_stream.position = 1721168 '修改为:5. .U.s.e.r.
- ado_stream.Write HexToByte("35002000550073006500720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
- ado_stream.position = 1725000 '修改为:0.5./.1.7./.2.0.8.3.
- ado_stream.Write HexToByte("300035002F00310037002F0032003000380033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
- ado_stream.position = 3016208 '8B15CC1175008B12
- ado_stream.Write HexToByte("BAEC3B5A00909090")
- ado_stream.position = 3016246 '8B1558FF74008B12
- ado_stream.Write HexToByte("BA68485A00909090")
- ado_stream.position = 3016284 '8B15C81175008B12
- ado_stream.Write HexToByte("BA504F5A00909090")
- ado_stream.position = 3016322 '8B15740675008B12
- ado_stream.Write HexToByte("BA485E5A00909090")
- ado_stream.position = 3390546 '83F802
- ado_stream.Write HexToByte("3BC090")
- ado_stream.position = 3413077 '88
- ado_stream.Write HexToByte("FE")
- ado_stream.SaveToFile IL & "restuner.exe", 2
- ado_stream.Close
- Set ado_stream = Nothing
- WshShell.Popup "已破解主程序!"& vbcrlf & vbcrlf & "VBScript by ChiShingChan", 10, DN & " v" & DV, 0
- Function HexToByte(hexStr)
- Set xmldom = Wscript.CreateObject("Microsoft.XMLDOM")
- Set byteObj= xmldom.createElement("byteObj")
- byteObj.dataType = "bin.hex"
- byteObj.nodeTypedValue = hexStr
- HexToByte=byteObj.nodeTypedValue
- End Function
复制代码
|
评分
-
查看全部评分
|