回复 7# WHY - $reg = '(?i)=hex\(2\):(?> *(?:[a-f0-9]{2},)+(?:\\\r\n)?)+ *00(?!,)'
复制代码 稍微修正一下,处理吊车尾 00- [HKEY_CLASSES_ROOT\CLSID\{046AEAD9-5A27-4D3C-8A67-F82552E0A91B}\LocalServer32]
- @=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
- 00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,72,00,75,00,\
- 6e,00,64,00,6c,00,6c,00,33,00,32,00,2e,00,65,00,78,00,65,00,20,00,73,00,68,\
- 00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,53,00,48,00,\
- 43,00,72,00,65,00,61,00,74,00,65,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,\
- 00,72,00,76,00,65,00,72,00,52,00,75,00,6e,00,44,00,6c,00,6c,00,20,00,7b,00,\
- 30,00,34,00,36,00,41,00,45,00,41,00,44,00,39,00,2d,00,35,00,41,00,32,00,37,\
- 00,2d,00,34,00,44,00,33,00,43,00,2d,00,38,00,41,00,36,00,37,00,2d,00,46,00,\
- 38,00,32,00,35,00,35,00,32,00,45,00,30,00,41,00,39,00,31,00,42,00,7d,00,00,\
- 00
复制代码
|