' & cls & cscript.exe /nologo /e:vbscript "%~f0" "1.sct" "2.sct" & pause & exit

Set oStream = CreateObject("ADODB.Stream")
oStream.Type = 1    'adTypeBinary
oStream.Mode = 3    'adModeReadWrite
oStream.Open()
With CreateObject("ADODB.Stream")
    .Type = 1    'adTypeBinary
    .Mode = 3    'adModeReadWrite
    .Open()
    .LoadFromFile WScript.Arguments(0)
    .Position = 4
    .CopyTo oStream
    .Close()
End With
oStream.SaveToFile WScript.Arguments(1), 2    'adSaveCreateOverWrite
oStream.Close()
复制代码

@echo off
setlocal ENABLEDELAYEDEXPANSION
(
	for /f "skip=2 delims=" %%. in ('certutil input.png ^| find /v "CertUtil"') do (
		for /f "tokens=2-17 delims= " %%a in ("%%.") do (
			if defined prev (
				rem 这么写是因为最后一行得做特殊处理（certutil输出格式不标准）
				echo !prev!
			)
			if not defined t (
				rem 对第一行的16个hex，不显示前4个，就相当于丢掉了
				set t=啊
				rem 前四个hex也就是%%a %%b %%c %%d 扔掉,,
				set "prev=%%e %%f %%g %%h %%i %%j %%k %%l %%m %%n %%o %%p"
			) else (
				set "prev=%%a %%b %%c %%d %%e %%f %%g %%h %%i %%j %%k %%l %%m %%n %%o %%p"
			)
		)
		set "lastline=%%."
	)
	rem echo !lastline!
)> newhex.txt
(
	rem 针对最后一行的特殊处理
	rem flag1 -> 读到了第一个非空格的字符
	rem flag2 -> 空格分割的第一个字符串读完了
	:trim
		set "char=!lastline:~,1!"
		rem echo !char!
		rem pause
		if "!char!" == " " (
			if "!flag1!" == "yes" set flag2=yes
			set "lastline=!lastline:~1!"
		) else (
			if "!flag2!" == "yes" goto ok
			set flag1=yes
			set "lastline=!lastline:~1!"
		)
		goto trim
	:ok
	rem  观察certutil输出，hex部分最长48
	rem echo ll: !lastline!
	rem echo lltrim: !lastline:~,48!
	>>newhex.txt echo !lastline:~,48!
)	
rem > newhex.txt
certutil -decodehex newhex.txt new.png
pause
复制代码

' & cls & cscript.exe /nologo /e:vbscript "%~f0" "%~f1" "%~n1.png" & pause & exit
 
Set oStream = CreateObject("ADODB.Stream")
oStream.Type = 1    'adTypeBinary
oStream.Mode = 3    'adModeReadWrite
oStream.Open()
With CreateObject("ADODB.Stream")
    .Type = 1    'adTypeBinary
    .Mode = 3    'adModeReadWrite
    .Open()
    .LoadFromFile WScript.Arguments(0)
    .Position = 4
    .CopyTo oStream
    .Close()
End With
oStream.SaveToFile WScript.Arguments(1), 2    'adSaveCreateOverWrite
oStream.Close()
复制代码

' & cls & cscript.exe /nologo /e:vbscript "%~f0" %* & pause & exit

Set oFSO = CreateObject("Scripting.FileSystemObject")
Set oStream = CreateObject("ADODB.Stream")
oStream.Type = 1
oStream.Mode = 3
For Each i In WScript.Arguments
    oStream.Open()
    With CreateObject("ADODB.Stream")
        .Type = 1
        .Mode = 3
        .Open()
        .LoadFromFile i
        .Position = 4
        .CopyTo oStream
        .Close()
    End With
    oStream.SaveToFile oFSO.GetBaseName(i) & ".png", 2
    oStream.Close()
    WScript.Echo oFSO.GetBaseName(i) & ".png"
Next
复制代码