Multi-OEM/Retail Project {MRP} - Mk3

Concerning to say the least. Hopefully its just a hospital visit that takes it time

 

Why are several friends in the forum sick? The world makes people feel uneasy.

 

This isnt the place to discuss this, he was ill for years and had a brain hemorrhage some years ago. As you can see by Tito's post he passed away so

 

Sources .. I can get you the sources
~~~~~~~~~~~
Also MRPConfigCreator_v62 Source added.
Check the file yourself before compile. -or run
~~~~~~~~~~~
Decompile.exe -> C:\ProgramData\TempM

Code:

`
@rem ----- ExeScript Options Begin -----
                                    
                                                
                                  
                                  
                                      
                                      
                                              
                                                                
                                  
                                                    
                          
                                      
                                                
                              
            
@rem ----- ExeScript Options End -----
@echo off
REM -------------------------------------------------------------
REM [ Decompile control file - Calls Extraction Routine for MRP ]
REM -------------------------------------------------------------
IF EXIST "%Windir%\Sysnative\reg.exe" ( SET "SysPath=%Windir%\Sysnative" ) ELSE ( SET "SysPath=%Windir%\System32" )
SET "Path=%SysPath%;%Windir%;%SysPath%\Wbem" & SET "REGEXE=REG.exe"
IF EXIST "%SystemDrive%\ProgramData\TempM\extract.exe" CALL "%SystemDrive%\ProgramData\TempM\extract.exe" %1
IF EXIST "%SystemDrive%\ProgramData\TempM\extract.exe" DEL /F /Q "%SystemDrive%\ProgramData\TempM\extract.exe" >NUL 2>&1
GOTO :FinExt
:FinExt
SET "MRPChkX="
REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v "MRPChkX" /f >NUL 2>&1
DEL /F /Q "%0%" >NUL 2>&1
`

Call `C:\ProgramData\TempM\extract.exe` -> c:\windows\system32\extract.cmd
~~~~~~
C:\ProgramData\TempM\Install.7z ~ PASSWORD PROTECTED, c:\windows\system32\extract.cmd, FIND `FLEX,` PASS --> `DEV_Mx2K=5xYo=MRP3`
ALL SOURCES FILE's.


~~~~~~~~~~~

Tool, ExeScript

Code:

when compiling the exe make sure it set to 32bit as if set as 64bit you cannot run the exe on 32bit.

Also when compiling a bat/cmd and it uses reg and other commands it best to use the sysnative ones, if you look at top area of my scripts you will see the section that sets the REGEXE, CSCRIPTEXE etc then you just use the variable names which then will use the correct file as with reg.exe if you run the 32bit one on a compiled exe and not the sysnative one certain /add /delete and /query parameters will not work as expect and can cause serious issues.

Took me ages to wok that out by trial and error.

The sad thing is damn AV's nab the files as trojan etc - all lies it just m$ not want people to use such tools.

Code:

@cls
@echo off
cd /d "%~dp0"
set "tempb=C:\windows\temp"
set "tempm=C:\ProgramData\TempM"

if not exist "$OEM$\$$\Setup\Scripts\DeCompile.exe" (
    echo: & echo:
    echo Missing files
    echo:
    pause
    exit /b
)

icacls "%tempm%" /grant everyone:(OI)(CI)(DE,DC)
icacls "%tempb%" /grant everyone:(OI)(CI)(DE,DC)
rd/s/q %tempm% & md %tempm%
rd/s/q %tempb% & md %tempb%
icacls "%tempm%" /deny everyone:(OI)(CI)(DE,DC)
icacls "%tempb%" /deny everyone:(OI)(CI)(DE,DC)

rd/s/q ExtractFiles & md ExtractFiles
start "" "$OEM$\$$\Setup\Scripts\DeCompile.exe"
timeout 1
copy /y %tempm% ExtractFiles
copy /y c:\windows\system32\extract.cmd ExtractFiles
copy /y C:\Windows\SysWOW64\extract.cmd ExtractFiles

cd /d ExtractFiles
if not exist extract.cmd if exist extract.exe (
    start "" "%cd%\extract.exe"
    timeout 2
    copy /y C:\Windows\temp\*.cmd extract.cmd
    copy /y c:\windows\system32\extract.cmd
    copy /y C:\Windows\SysWOW64\extract.cmd
)

for /f "tokens=*" %%$ in ('type extract.cmd ^| find /i "FLEX=-P"') do set "Pass=%%$"
md Install_Files
7za x -y "install.7z" -o"Install_Files" -p%Pass:~12,-1%
explorer "Install_Files"

icacls "%tempm%" /grant everyone:(OI)(CI)(DE,DC)
icacls "%tempb%" /grant everyone:(OI)(CI)(DE,DC)
rd/s/q %tempm%
rd/s/q %tempb%

 

Definitely, we gotta keep working on this. My document talking about the History of 7 RTM activators will be dedicated to mxman2k himself, I will add a specific paragraph dedicated to him. And I will add his profile picture in memory of him.

 

you can extract the file's with this script (i shared), and you can make .exe later using ExeScript tool
he shared with me the tool + Serial, i can share with everyone else who need
and the autoit part, you can get a decoder, and get full source code.
(Exe2Aut_v5.7, myAutToExe_v2.12, myAutToExe_v2.16, Universal-AutoIT-Extractor-and-De-obfuscator-2.1)

 

Okay! Thanks

 

If @Alphawaves could reach out again to his family and ask for it, they might but it feels abit extreme

 

Dang, this hit me hard. RIP my friend. I was the one who helped him take over the project. I will miss him.

AKA:
The Guardian
Cerberus