{"action":"created","issue":{"url":"https://api.github.com/repos/liberize/pecmd-decrypt/issues/1","labels_url":"https://api.github.com/repos/liberize/pecmd-decrypt/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/liberize/pecmd-decrypt/issues/1/comments","events_url":"https://api.github.com/repos/liberize/pecmd-decrypt/issues/1/events","html_url":"https://github.com/liberize/pecmd-decrypt/issues/1","id":120943515,"number":1,"title":"有一个老版本PECMD加密的脚本无法解密，应该是bug","user":{"login":"Williamzuckerberg","id":5424741,"avatar_url":"https://avatars.githubusercontent.com/u/5424741?v=3","gravatar_id":"","url":"https://api.github.com/users/Williamzuckerberg","html_url":"https://github.com/Williamzuckerberg","followers_url":"https://api.github.com/users/Williamzuckerberg/followers","following_url":"https://api.github.com/users/Williamzuckerberg/following{/other_user}","gists_url":"https://api.github.com/users/Williamzuckerberg/gists{/gist_id}","starred_url":"https://api.github.com/users/Williamzuckerberg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Williamzuckerberg/subscriptions","organizations_url":"https://api.github.com/users/Williamzuckerberg/orgs","repos_url":"https://api.github.com/users/Williamzuckerberg/repos","events_url":"https://api.github.com/users/Williamzuckerberg/events{/privacy}","received_events_url":"https://api.github.com/users/Williamzuckerberg/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-12-08T06:36:01Z","updated_at":"2015-12-08T10:37:16Z","closed_at":null,"body":"只能解出部分，但是这些并不能使PE运行起来，也没有HASH，但是实际运行的是时候是有HASH的，以下是解出的代码，只有部分：\r\nGroup 3 传真编码 Group 4 传真编码 Group 3 传真编码 Group 4 传真编码 Group 3 传真编码 Group 4 传真编码 Group 3 传真编码 Group 4 传真编码 Group 3 传真编码 Group 4 传真编码 Group 3 传真编码 Group 4 传真编码 _SUB setup\r\n\r\n\tLINK %Desktop%\\分区工具(Alt+D),%CurDir%\\磁盘光盘\\diskgen\\x86\\DiskGenius.exe\r\n\r\n\tHOTK Alt+#0x44,%CurDir%\\磁盘光盘\\diskgen\\x86\\DiskGenius.exe\r\n\r\n\tLINK %Desktop%\\备份还原(Alt+G),%CurDir%\\安装系统\\oneghost\\GHOST32.exe\r\n\r\n\tHOTK Alt+#0x47,%CurDir%\\安装系统\\oneghost\\Ghost32.exe\r\n\r\n\tLINK %Desktop%\\通用GHOST工具,%CurDir%\\安装系统\\oneghost\\WinCMD.EXE,LOAD ghost.WCS,%CurDir%\\安装系统\\oneghost\\logo.ico\r\n\r\n\tLINK %Desktop%\\硬件检测(Alt+A),%CurDir%\\硬件检测\\AIDA64\\aida64.exe\r\n\r\n\tHOTK Alt+#0x41,%CurDir%\\硬件检测\\AIDA64\\AIDA64.exe\r\n\r\n\tLINK %Desktop%\\引导修复(Alt+W),%CurDir%\\系统引导\\NTBOOTautofix.exe\r\n\r\n\tHOTK Alt+#0x57,%CurDir%\\系统引导\\NTBOOTautofix.exe\r\n\r\n\tLINK %Desktop%\\ADSL帐号密码查看器,%CurDir%\\ADSL帐号密码查看器\\DIALUPASS.EXE\r\n\r\n\tLINK %StartMenu%\\自动搜索USM工具箱,%Windir%\\System32\\pecmd.exe,exec !%CurDir%\\USM工具箱\\USM工具箱.cmd,%CurDir%\\USM工具箱\\USM工具箱.ico\r\n\r\n\tEXEC !%CurDir%\\USM工具箱\\USM工具箱.cmd\r\n\r\n\tLINK %Desktop%\\映像总裁(Alt+C),%CurDir%\\安装系统\\SGI.exe\r\n\r\n\tHOTK Alt+#0x43,%CurDir%\\安装系统\\SGI.exe\r\n\r\n\tLINK %StartMenu%\\安装系统\\映像总裁(Alt+C),%CurDir%\\安装系统\\SGI.exe\r\n\r\n\tLINK %StartMenu%\\安装系统\\Windows安装助手,%Windir%\\System32\\pecmd.exe,exec %CurDir%\\安装系统\\SGI.exe -i,%CurDir%\\安装系统\\SGI.exe#0\r\n\r\n\tLINK %Desktop%\\Windows安装助手,%Windir%\\System32\\pecmd.exe,exec %CurDir%\\安装系统\\SGI.exe -i,%CurDir%\\安装系统\\SGI.exe#0\r\n\r\n\tLINK %StartMenu%\\安装系统\\Acronis TrueImage中文版,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\安装系统\\ATI\\INSTALL.INI,%CurDir%\\安装系统\\ATI\\TRUEIMAGE.EXE#0\r\n\r\n\t//LINK %Desktop%\\WinNTSetup,%CurDir%\\安装系统\\WinNTSetup\\WinNTSetup_x86.exe\r\n\r\n\t//LINK %StartMenu%\\安装系统\\WinNTSetup,%CurDir%\\安装系统\\WinNTSetup\\WinNTSetup_x86.exe\r\n\r\n\tLINK %StartMenu%\\安装系统\\备份还原Ghost(Alt+G),%CurDir%\\安装系统\\oneghost\\GHOST32.exe\r\n\r\n\tEXEC !REGEDIT /S %CurDir%\\安装系统\\oneghost\\gho.reg\r\n\r\n\tLINK %StartMenu%\\安装系统\\通用GHOST工具,%CurDir%\\安装系统\\oneghost\\WinCMD.EXE,LOAD ghost.WCS,%CurDir%\\安装系统\\oneghost\\logo.ico\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\分区工具DiskGen(Alt+D),%CurDir%\\磁盘光盘\\diskgen\\x86\\DiskGenius.exe\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\分区工具DiskGen4.7.2,%CurDir%\\磁盘光盘\\diskgen\\4.7.2\\DiskGenius.exe\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\虚拟光驱(isoDisk),%CurDir%\\磁盘光盘\\虚拟光驱\\isoDisk.exe\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\理顺盘符,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\磁盘光盘\\PANFU\\orderdrv.INI,%CurDir%\\磁盘光盘\\PANFU\\lishun.ico\r\n\r\n\tLINK %Desktop%\\理顺盘符,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\磁盘光盘\\PANFU\\orderdrv.INI,%CurDir%\\磁盘光盘\\PANFU\\lishun.ico\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\ULTRAISO,%CurDir%\\磁盘光盘\\ultraiso\\ULTRAISO.EXE\r\n\r\n\tLINK %StartMenu%\\密码恢复\\WinNT密码修改,%CurDir%\\密码恢复\\WinNT密码修改.exe\r\n\r\n\tLINK %StartMenu%\\密码恢复\\WinNT密码恢复,%CurDir%\\密码恢复\\WinNT密码恢复.exe\r\n\r\n\tLINK %StartMenu%\\密码恢复\\清除Windows密码(支持Windows全系列系统),%CurDir%\\密码恢复\\PasswordChanger.exe\r\n\r\n\tLINK %StartMenu%\\文件管理\\Recuva数据恢复,%CurDir%\\文件管理\\Recuva数据恢复\\Recuva.exe\r\n\r\n\tLINK %StartMenu%\\文件管理\\WinHex,%CurDir%\\文件管理\\Winhex\\winhex.exe\r\n\r\n\tLINK %StartMenu%\\文件管理\\搜索工具,%CurDir%\\文件管理\\EVERYTHING.exe\r\n\r\n\tEXEC !%CurDir%\\文件管理\\setup.cmd\r\n\r\n\tLINK %StartMenu%\\文件管理\\Wimtool,%CurDir%\\文件管理\\WimTOOL\\WIMTOOL.EXE\r\n\r\n\tREGI HKCU\\Software\\WimTool\\AutoMountPath=W:\\Wim_TEMP\r\n\r\n\tEXEC !REGEDIT /S %CurDir%\\文件管理\\FbinstT.reg\r\n\r\n\tLINK %StartMenu%\\文件管理\\FbinstTool,%CurDir%\\文件管理\\FbinstT.exe\r\n\r\n\tLINK %StartMenu%\\系统引导\\引导修复Bootfix(Alt+W),%CurDir%\\系统引导\\NTBOOTautofix.exe\r\n\r\n\tLINK %StartMenu%\\硬件检测\\硬件检测AIDA64(Alt+A),%CurDir%\\硬件检测\\AIDA64\\aida64.exe\r\n\r\n\tLINK %StartMenu%\\硬件检测\\CPU-Z(CPU检测工具),%CurDir%\\硬件检测\\CPU-Z\\cpuz_x32.exe\r\n\r\n\tEXEC !REGEDIT /S %CurDir%\\硬件检测\\HDTune\\SN.reg\r\n\r\n\tLINK %StartMenu%\\硬件检测\\硬件检测HDTune,%CurDir%\\硬件检测\\HDTune\\HDTunePro.exe\r\n\r\n\tLINK %StartMenu%\\硬件检测\\显示器检测DisplayX,%CurDir%\\硬件检测\\DisplayX.exe\r\n\r\n\tLINK %Desktop%\\智能驱动备份,%CurDir%\\drvbak\\智能驱动备份1.exe\r\n\r\n\tLINK %StartMenu%\\驱动备份\\智能驱动备份1,%CurDir%\\drvbak\\智能驱动备份1.exe\r\n\r\n\tLINK %StartMenu%\\驱动备份\\智能驱动备份2,%CurDir%\\drvbak\\智能驱动备份2.exe\r\n\r\n\tLINK %StartMenu%\\文件管理\\FinalRecovery数据恢复,%CurDir%\\文件管理\\FinalRecovery.exe\r\n\r\n\tLINK %StartMenu%\\设置虚拟内存,%CurDir%\\SETPAGEFILE.EXE\r\n\r\n\tLINK %StartMenu%\\刷新SHEL,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\SHELL.INI,%CurDir%\\shell.ico\r\n\r\n\tLINK %StartMenu%\\办公阅读\\EXCEL表格处理,%CurDir%\\办公阅读\\excel.exe\r\n\r\n\tLINK %StartMenu%\\办公阅读\\PDF阅读器,%CurDir%\\办公阅读\\PDF阅读器.exe\r\n\r\n\tLINK %StartMenu%\\办公阅读\\PPT幻灯片处理,%CurDir%\\办公阅读\\PPTVIEW.EXE\r\n\r\n\tEXEC =!%CurDir%\\办公阅读\\WORD.CMD\r\n\r\n\tLINK %StartMenu%\\办公阅读\\WORD文字处理,%CurDir%\\办公阅读\\WORD.EXE\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\截图工具(Alt+P),%CurDir%\\图形娱乐\\WINSNAP.EXE\r\n\r\n\tLINK %Desktop%\\截图工具(Alt+P),%CurDir%\\图形娱乐\\WINSNAP.EXE\r\n\r\n\tHOTK Alt+#0x50,%CurDir%\\图形娱乐\\WINSNAP.EXE\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\画图,%WinDir%\\system32\\mspaint.exe\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB x86setup\r\n\r\n\tLINK %StartMenu%\\文件管理\\WimKit,%CurDir%\\文件管理\\WimKit\\x86\\WimKit86.exe\r\n\r\n\tLINK %Desktop%\\分区助手专业版,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\磁盘光盘\\分区助手专业版\\x86\\setup.ini,%CurDir%\\磁盘光盘\\分区助手专业版\\x86\\PartAssist.exe#0\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\分区助手专业版,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\磁盘光盘\\分区助手专业版\\x86\\setup.ini,%CurDir%\\磁盘光盘\\分区助手专业版\\x86\\PartAssist.exe#0\r\n\r\n\tLINK %StartMenu%\\系统引导\\BOOTICE,%CurDir%\\系统引导\\BOOTICEx86.exe\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB 03pe\r\n\r\n\tLINK %StartMenu%\\硬件检测\\VICTORIA(Windows下的MHDD),%CurDir%\\硬件检测\\VICTORIA.exe\r\n\r\n\tLINK %StartMenu%\\系统引导\\NT6.X引导编辑器BcdTool,%CurDir%\\系统引导\\BcdTool.exe\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\看图软件Imagine,%CurDir%\\图形娱乐\\Imagine\\x86\\Imagine.exe\r\n\r\n\tEXEC !%CurDir%\\图形娱乐\\Imagine\\x86\\Imagine.exe /assocext /regcontextmenu/assocext /regcontextmenu\r\n\r\n\tLINK %StartMenu%\\文件管理\\WinRAR,%CurDir%\\文件管理\\WinRAR\\x86\\WinRAR.exe\r\n\r\n\tEXEC =!%CurDir%\\文件管理\\WinRAR\\x86\\setup.cmd\r\n\r\n\tLINK %StartMenu%\\文件管理\\7-ZIP,%CurDir%\\7-Zip\\x86\\7zFM.exe\r\n\r\n\tEXEC =!%CurDir%\\7-Zip\\x86\\setup.cmd\r\n\r\n\tLINK %QuickLaunch%\\截图工具(Alt+P),%CurDir%\\图形娱乐\\WINSNAP.EXE\r\n\r\n\tEXEC %CurDir%\\输入法\\freeime\\registry.exe /S\r\n\r\n\tIFEX %Windir%\\F.txt,call 03pef\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB 03pef\r\n\r\n\tLINK %Desktop%\\启动网卡及MMC支持,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\03DRV.ini,%CurDir%\\03net.ico\r\n\r\n\tLINK %StartMenu%\\启动网卡及MMC支持,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\03DRV.ini,%CurDir%\\03net.ico\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pe\r\n\r\n\tLINK %StartMenu%\\硬件检测\\VICTORIA(Windows下的MHDD),%CurDir%\\硬件检测\\VICTORIA_nt6.EXE\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\看图软件Imagine,%CurDir%\\图形娱乐\\Imagine\\x86\\Imagine.exe\r\n\r\n\tEXEC =!%CurDir%\\图形娱乐\\Imagine\\x86\\setup.cmd\r\n\r\n\tEXEC !%CurDir%\\图形娱乐\\Imagine\\x86\\Imagine.exe /assocext /regcontextmenu/assocext /regcontextmenu\r\n\r\n\tIFEX %Windir%\\x86.txt,call win8pex86\r\n\r\n\tIFEX %Windir%\\x64.txt,call win8pex64\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pex86\r\n\r\n\tLINK %StartMenu%\\文件管理\\Dism++,%CurDir%\\文件管理\\Dism++\\Dism++x86.exe\r\n\r\n\tPINT %CurDir%\\图形娱乐\\WINSNAP.EXE, TaskBand\r\n\r\n\tLINK %StartMenu%\\文件管理\\WinRAR,%CurDir%\\文件管理\\WinRAR\\x86\\WinRAR.exe\r\n\r\n\tEXEC =!%CurDir%\\文件管理\\WinRAR\\x86\\setup.cmd\r\n\r\n\tLINK %StartMenu%\\文件管理\\7-ZIP,%CurDir%\\7-Zip\\x86\\7zFM.exe\r\n\r\n\tEXEC =!%CurDir%\\7-Zip\\x86\\setup.cmd\r\n\r\n\tLINK %StartMenu%\\系统引导\\NT6.X引导编辑器BcdTool,%CurDir%\\系统引导\\BcdTool.exe\r\n\r\n\tIFEX %Windir%\\F.txt,call win8pex86f\r\n\r\n\tIFEX %Windir%\\L.txt,call win8pex86l\r\n\r\n\tIFEX %Windir%\\win8pe.txt,!EXIT _SUB\r\n\r\n\tEXEC %CurDir%\\输入法\\freeime\\registry.exe /S\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pex86l\r\n\r\n\tEXEC %CurDir%\\输入法\\freeime\\registry.exe /S\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pex86f\r\n\r\n\tIFEX %Windir%\\win8pe.txt,LINK %Desktop%\\启用驱动支持,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\8DRVx86.INI,Shell32.dll#17\r\n\r\n\tIFEX %Windir%\\win8pe.txt,LINK %StartMenu%\\启用驱动支持,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\8DRVx86.INI,Shell32.dll#17\r\n\r\n\tIFEX %Windir%\\win10pe.txt,!EXIT _SUB\r\n\r\n\tLINK %StartMenu%\\网络工具\\宽带连接,%CurDir%\\网络工具\\rasphone.pbk\r\n\r\n\tLINK %Desktop%\\宽带连接,%CurDir%\\网络工具\\rasphone.pbk\r\n\r\n\tLINK %StartMenu%\\网络工具\\PENetwork,%CurDir%\\网络工具\\PENetwork\\x86\\PENetwork.exe\r\n\r\n\tLINK %Desktop%\\PENetwork,%CurDir%\\网络工具\\PENetwork\\x86\\PENetwork.exe\r\n\r\n\tLINK %StartMenu%\\网络工具\\Opera浏览器,%CurDir%\\网络工具\\Opera\\x86\\opera.exe\r\n\r\n\tLINK %Desktop%\\Opera浏览器,%CurDir%\\网络工具\\Opera\\x86\\opera.exe\r\n\r\n\tEXEC =!%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x86\\setup.cmd\r\n\r\n\tLINK %Desktop%\\PotPlayer播放器,%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x86\\PotPlayerMini.exe\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\PotPlayer播放器,%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x86\\PotPlayerMini.exe\r\n\r\n\tEXEC =!%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x86\\PotPlayerMini.exe /RegisterAll\t\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pex64\r\n\r\n\tLINK %StartMenu%\\文件管理\\WimKit,%CurDir%\\文件管理\\WimKit\\x64\\WimKit64.exe\r\n\r\n\tLINK %StartMenu%\\文件管理\\Dism++,%CurDir%\\文件管理\\Dism++\\Dism++x64.exe\r\n\r\n\tLINK %Desktop%\\分区助手专业版,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\磁盘光盘\\分区助手专业版\\x64\\setup.ini,%CurDir%\\磁盘光盘\\分区助手专业版\\x86\\PartAssist.exe#0\r\n\r\n\tLINK %StartMenu%\\磁盘光盘\\分区助手专业版,%Windir%\\System32\\pecmd.exe,LOAD %CurDir%\\磁盘光盘\\分区助手专业版\\x64\\setup.ini,%CurDir%\\磁盘光盘\\分区助手专业版\\x86\\PartAssist.exe#0\r\n\r\n\tLINK %StartMenu%\\系统引导\\BOOTICE,%CurDir%\\系统引导\\BOOTICEx64.exe\r\n\r\n\tLINK %StartMenu%\\文件管理\\WinRAR,%CurDir%\\文件管理\\WinRAR\\x64\\WinRAR.exe\r\n\r\n\tEXEC =!%CurDir%\\文件管理\\WinRAR\\x64\\setup.cmd\r\n\r\n\tLINK %StartMenu%\\文件管理\\7-ZIP,%CurDir%\\7-Zip\\x64\\7zFM.exe\r\n\r\n\tEXEC =!%CurDir%\\7-Zip\\x64\\setup.cmd\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\看图软件Imagine,%CurDir%\\图形娱乐\\Imagine\\x64\\Imagine64.exe\r\n\r\n\tEXEC =!%CurDir%\\图形娱乐\\Imagine\\x64\\setup.cmd\r\n\r\n\tEXEC !%CurDir%\\图形娱乐\\Imagine\\x64\\Imagine64.exe /assocext /regcontextmenu/assocext /regcontextmenu\r\n\r\n\tIFEX %Windir%\\F.txt,call win8pex64f\r\n\r\n\tIFEX %Windir%\\L.txt,call win8pex64l\r\n\r\n\tIFEX %Windir%\\win8pe.txt,!EXIT _SUB\r\n\r\n\tEXEC %CurDir%\\输入法\\freeime\\registry.exe /S\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pex64l\r\n\r\n\tEXEC %CurDir%\\输入法\\freeime\\registry.exe /S\r\n\r\n_END\r\n\r\n\r\n\r\n_SUB win8pex64f\r\n\r\n\tIFEX %Windir%\\win8pe.txt,LINK %Desktop%\\启用驱动支持,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\8DRVx64.INI,Shell32.dll#17\r\n\r\n\tIFEX %Windir%\\win8pe.txt,LINK %StartMenu%\\启用驱动支持,%WinDir%\\SYSTEM32\\pecmd.exe,LOAD %CurDir%\\8DRVx64.INI,Shell32.dll#17\r\n\r\n\tIFEX %Windir%\\win10pe.txt,!EXIT _SUB\r\n\r\n\tLINK %StartMenu%\\网络工具\\宽带连接,%CurDir%\\网络工具\\rasphone.pbk\r\n\r\n\tLINK %Desktop%\\宽带连接,%CurDir%\\网络工具\\rasphone.pbk\r\n\r\n\tLINK %StartMenu%\\网络工具\\PENetwork,%CurDir%\\网络工具\\PENetwork\\x64\\PENetwork.exe\r\n\r\n\tLINK %Desktop%\\PENetwork,%CurDir%\\网络工具\\PENetwork\\x64\\PENetwork.exe\r\n\r\n\tLINK %StartMenu%\\网络工具\\Opera浏览器,%CurDir%\\网络工具\\Opera\\x64\\opera.exe\r\n\r\n\tLINK %Desktop%\\Opera浏览器,%CurDir%\\网络工具\\Opera\\x64\\opera.exe\r\n\r\n\tEXEC =!%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x64\\setup.cmd\r\n\r\n\tLINK %Desktop%\\PotPlayer播放器,%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x64\\PotPlayerMini64.exe\r\n\r\n\tLINK %StartMenu%\\图形娱乐\\PotPlayer播放器,%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x64\\PotPlayerMini64.exe\r\n\r\n\tEXEC =!%CurDir%\\图形娱乐\\DAUM\\PotPlayer\\x64\\PotPlayerMini64.exe /RegisterAll\r\n\r\n_END\r\n\r\n\r\n\r\nLINK %StartMenu%\\取消所有程序快捷键,%WinDir%\\SYSTEM32\\pecmd.exe,EXEC !\"%CurDir%\\deletelnk.cmd\",%Curdir%\\deletelnk.ICO\r\n\r\nSHOW -1:-1\r\n\r\ncall setup\r\n\r\nIFEX %Windir%\\x86.txt,call x86setup\r\n\r\nIFEX %Windir%\\03pe.txt,call 03pe\r\n\r\nIFEX %Windir%\\win8pe.txt,call win8pe\r\n\r\nIFEX %Windir%\\win10pe.txt,call win8pe\r\n\r\nEXEC !%CurDir%\\磁盘光盘\\ultraiso\\setup.cmd\r\n\r\nEXEC !REGEDIT /S %CurDir%\\磁盘光盘\\ultraiso\\setup.reg\r\n\r\nEXEC %CurDir%\\安装系统\\SGI.exe -S"},"comment":{"url":"https://api.github.com/repos/liberize/pecmd-decrypt/issues/comments/162844169","html_url":"https://github.com/liberize/pecmd-decrypt/issues/1#issuecomment-162844169","issue_url":"https://api.github.com/repos/liberize/pecmd-decrypt/issues/1","id":162844169,"user":{"login":"liberize","id":3303478,"avatar_url":"https://avatars.githubusercontent.com/u/3303478?v=3","gravatar_id":"","url":"https://api.github.com/users/liberize","html_url":"https://github.com/liberize","followers_url":"https://api.github.com/users/liberize/followers","following_url":"https://api.github.com/users/liberize/following{/other_user}","gists_url":"https://api.github.com/users/liberize/gists{/gist_id}","starred_url":"https://api.github.com/users/liberize/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liberize/subscriptions","organizations_url":"https://api.github.com/users/liberize/orgs","repos_url":"https://api.github.com/users/liberize/repos","events_url":"https://api.github.com/users/liberize/events{/privacy}","received_events_url":"https://api.github.com/users/liberize/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T10:37:16Z","updated_at":"2015-12-08T10:37:16Z","body":"这个好像又是 USM 那个 PE，无忧上有好几个人问过了，我记得那个好像是 Unicode 编码的，不会调用我 Hook 的 API，所以这个方法无效。\r\n至于你解出来的这些内容，应该是你用了会执行内置脚本的 PECMD，解出来的是内置脚本。"}}