Question about script file KMS_Suite.v9.8.bat by mephistooo2

Discussion in 'Scripting' started by RemixPL1994, May 19, 2025.

  1. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0
    #1 RemixPL1994, May 19, 2025
    Last edited by a moderator: May 19, 2025
    Hello. I have a question about the script file KMS_Suite.v9.8.by mephistooo2

    Can someone reply to me, explain and share knowledge about what code exactly is responsible for automatically centering the window after it is launched?


    upload_2025-5-19_22-31-25.png

    upload_2025-5-19_22-41-28.png
     
  2. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    50,893
    109,317
    450
    The thread title shows *******, usually that means the source is not really considered trustworthy on MDL.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0
    #3 RemixPL1994, May 19, 2025
    Last edited by a moderator: May 19, 2025
    (OP)
    <removed> unreliable?

    How?
     
  4. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    50,893
    109,317
    450
    #4 Enthousiast, May 19, 2025
    Last edited by a moderator: May 19, 2025
    Considering you have to put in spacings in the url to fool the forum software so you can show the link doesn't make you think :thinking: maybe this is not to be trusted?

    maybe it's better to have @Alphawaves or @Carlos Detweiller take a look at this, you seem to go out of your way to get it on MDL.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0

    I'm just looking for an answer to the question:

    How to get auto centering of a window in batch after it's launched, what code is needed and how to use it.

    @abbodi1406 @Mouri_Naruto @AveYo @mephistooo2

    @Alphawaves or @Carlos Detweiller

    As an example I gave this script file but we don't have to focus on it

    I'm just interested in how to get the functionality of auto centering the window after it's launched in batch.

    Does anyone know the answer and can help me?
     
  6. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    3,560
    2,793
    120
    Code:
    @echo off
    :: Get the current window handle and center it using PowerShell
    powershell -command ^
    "$sig = @'
    using System;
    using System.Runtime.InteropServices;
    public class Win32 {
        [DllImport(\"user32.dll\")]
        public static extern IntPtr GetConsoleWindow();
        [DllImport(\"user32.dll\")]
        public static extern bool GetWindowRect(IntPtr hWnd, out RECT lpRect);
        [DllImport(\"user32.dll\")]
        public static extern bool MoveWindow(IntPtr hWnd, int X, int Y, int nWidth, int nHeight, bool bRepaint);
        public struct RECT {
            public int Left;
            public int Top;
            public int Right;
            public int Bottom;
        }
    }
    '@; Add-Type $sig; $hwnd = [Win32]::GetConsoleWindow(); if ($hwnd -ne 0) {
        $rect = New-Object Win32+RECT;
        [Win32]::GetWindowRect($hwnd, [ref]$rect) | Out-Null;
        $width = $rect.Right - $rect.Left;
        $height = $rect.Bottom - $rect.Top;
        $screen = [System.Windows.Forms.Screen]::PrimaryScreen.WorkingArea;
        $x = ($screen.Width - $width) / 2;
        $y = ($screen.Height - $height) / 2;
        [Win32]::MoveWindow($hwnd, $x, $y, $width, $height, $true);
    }"
    
    :: Continue your batch code below
    echo This window is centered!
    pause
    
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0
    #7 RemixPL1994, May 19, 2025
    Last edited: May 19, 2025
    (OP)
    Thank you very much!

    The last thing left is to make sure whether the file I gave as an example is a virus/malicious or just a false positive?

    Why is www. ********* encrypted on the forum as ********???

    https://www.virustotal.com/gui/file/bed604d258d3e0ead02bd44c3c5c40feb56e0cee751169ab763887c727087747

    EDIT:


    @pm67310


    I saved the code you provided in .bat

    after running it, whether normally or as administrator, the CMD window appears for 1 second and disappears.

    No echo text is displayed and the pause command does not work.

    Is there a bug in it?

    @
    Dark Vador

    Is the file I provided using:

    https://www.securonix.com/blog/hiding-the-powershell-execution-flow/
     
  8. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,147
    8,544
    240
    Changed URLs mean the source is untrusted and not allowed to be posted on MDL. Trying to circumvent that could earn you a ban. So, please don't.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. bendeyar

    bendeyar MDL Member

    Mar 14, 2019
    104
    195
    10
    tnctr is a reliable site and is used by citizens of the Republic of Türkiye.
     
  10. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,147
    8,544
    240
    Maybe, but it's not allowed here. I don't make the rules.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    50,893
    109,317
    450
    If it was about specific code then the code could have simply be copy/pasted here in code tags.

    And not multiple attempts to change the url to fool the forumsoftware to have the links showing/working.

    I can think of several things why some websites are blocked.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. Dark Vador

    Dark Vador X Æ A-12

    Feb 2, 2011
    4,449
    6,489
    150
    #12 Dark Vador, May 20, 2025
    Last edited: May 20, 2025
    I know how file work
    Since it's not allowed
    I will no discuss it
    No matter what my opinion
    :D

    In quantum computer
    Both 1 and 0 co exists
    That my life & choice weird
    It will solve your dilemma :cool:
    How this ok, and this not ?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0
    #13 RemixPL1994, May 20, 2025
    Last edited: May 20, 2025
    (OP)
    I see, this is the first time I've encountered such a situation with **** here and this mechanism.

    Okay, I'll remember not to do this again. I'm smarter now

    It's about specific code. I always paste code in code tags.

    But only when the code can be read normally and is not a thousand or more characters long.

    But did you check the file to see what it looks like?

    It can't be read normally for me, it contains random characters in thousands of lines.

    I decided that it makes no sense to paste it here in this case and that's why I gave a link to download and I wanted to provide the author / source of the page.

    I didn't do it on purpose because it would cheat.

    In that case " I can think of several things why some websites are blocked."

    Can you give me these examples and reasons using the example of the file and the code query I asked?


    If it is forbidden here publicly on the forum, can you explain it to me directly on PM or Discord?

    I would like to know how auto-centering works in this code and gain more experience if possible in this topic.

    Preview the code in .txt here:

    https://justpaste.it/hqw8p
     
  14. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,147
    8,544
    240
    So, it's either compiled or obfuscated. Means the author doesn't want you to be able to read it. Given that it takes code from this forum and makes it close source, it makes it very fishy and suspicious, and might hide potential Malware. Maybe that's exactly the behavoir that earned this site the ban it is under, here? ← Just an assumption!

    Have you tried asking the author directly? As it is not a vital core feature of the works, you may get some information.


    Only if you look the other direction... :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0
    #15 RemixPL1994, May 20, 2025
    Last edited: May 20, 2025
    (OP)
    The author is a user of this forum

    that's why I'm asking about it here on this forum

    I tagged him but he didn't answer anything still

    @mephistooo2

    https://forums.mydigitallife.net/threads/tsforge-activation-script.89194/page-2#post-1878853

    So is anyone able to check and analyze the code or is it just obfuscated to make it unreadable or is it some kind of virus/threat?

    From what I understand the logic. The solution must be clean since the user of this forum is not banned and his files are available for download normally with visible created topics / posts :)

    Code:
    1. **LibTSforge.dll Integration**: The script loads the `LibTSforge.dll` file, which is Base64 encoded, into memory. If the file is present, it will be loaded; otherwise,
        it will be decompressed from Base64 and loaded into memory.
     
  16. Dark Vador

    Dark Vador X Æ A-12

    Feb 2, 2011
    4,449
    6,489
    150
    #16 Dark Vador, May 20, 2025
    Last edited: May 20, 2025
    it's use aveyo, encode ps1 script,
    decode to temp folder, (Compressed 2 TXT - aveyo)
    than, combine scripts from abbodi1406 & other
    to join massive project, so is basicly type of MAS AIO version :p
    but in his forum tnc***, and also in nsa***
    he told me he retire from his project
    he also member here too :p
    so, virus, not, project with out manager, yes

    upload_2025-5-20_21-4-43.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. Dark Vador

    Dark Vador X Æ A-12

    Feb 2, 2011
    4,449
    6,489
    150
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. RemixPL1994

    RemixPL1994 MDL Junior Member

    Jul 16, 2017
    62
    6
    0
    Thank you, I will check and try it out
     
  19. Dark Vador

    Dark Vador X Æ A-12

    Feb 2, 2011
    4,449
    6,489
    150
    why you need to use tool that his owner, also say, it's out of date
    you killing me man :D:D:D:D :bash: :band:

    upload_2025-5-20_21-25-36.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  20. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,147
    8,544
    240
    It's just for the window-centering code snippet. Never wrong to find out how something works.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...