├── README.md └── SAB.ps1 /README.md: -------------------------------------------------------------------------------- 1 | # StartAllBack activator (for educational purpose only) 2 | 3 | ## How to use 4 | 5 | 1. Download the `SAB.ps1` script to your computer. 6 | 7 | 2. Open Windows Terminal as an administrator. 8 | 9 | 3. Navigate to the directory where you saved the `SAB.ps1` script. 10 | 11 | 4. Run the following command: 12 | 13 | ```powershell 14 | .\SAB.ps1 15 | ``` 16 | 17 | 5. Follow the prompts to complete the activation process. 18 | -------------------------------------------------------------------------------- /SAB.ps1: -------------------------------------------------------------------------------- 1 | # Stop-Process -Name explorer -ErrorAction SilentlyContinue 2 | cmd /c taskkill /f /im explorer.exe | Out-Null 3 | Stop-Process -Name StartAllBackCfg -ErrorAction SilentlyContinue 4 | 5 | $DLL = "StartAllBack\StartAllBackX64.dll" 6 | $UserDLL = "$Env:LocalAppData\$DLL" 7 | $SystemDLL64 = "$Env:ProgramFiles\$DLL" 8 | $SystemDLL32 = "${Env:ProgramFiles(x86)}\$DLL" 9 | $Paths = @() 10 | if(Test-Path -Path $UserDLL) { $Paths += ,$UserDLL } 11 | if(Test-Path -Path $SystemDLL64) { $Paths += ,$SystemDLL64 } 12 | if(Test-Path -Path $SystemDLL32) { $Paths += ,$SystemDLL32 } 13 | 14 | foreach($Path in $Paths) { 15 | $Backup = "$Path.bak" 16 | if(Test-Path -Path $Backup) { 17 | Remove-Item -Path $Path -Force 18 | Rename-Item -Path $Backup -NewName $Path 19 | } else { 20 | Copy-Item -Path $Path -Destination $Backup 21 | $Bytes = Get-Content $Path -Raw -Encoding Byte # Read as ByteStream 22 | $String = $Bytes.ForEach('ToString', 'X') -join ' ' 23 | 24 | # Replace 25 | $String = $String -replace '\b48 89 5C 24 8 55 56 57 48 8D AC 24 70 FF FF FF\b(.*)', '67 C7 1 1 0 0 0 B8 1 0 0 0 C3 90 90 90$1' 26 | 27 | [byte[]]$ModifiedBytes = -split $String -replace '^', '0x' 28 | Set-Content -Path $Path -Value $ModifiedBytes -Encoding Byte # Save as ByteStream 29 | } 30 | } 31 | 32 | Start-Process explorer 33 | --------------------------------------------------------------------------------