the method of modifying the internal registry.
1, first of all the internal registry files extracted:
Wxpesystem32config*.*wxpesystem32setupreg.hi_ (This is the CAB compression package, untie it to Setupreg.hiv)
Regedit/sreg file name
2, run the Registry Editor REGEDIT.EXE, mouse click HKEY_LOCAL_MACHINE, and then point "file"-"Load Configuration Unit", hit the extracted registry file (need to change which on which to load), open, prompted to mount the name of a random input to a name such
Tools to use: WinXP original system ISO image + launch u disk computer store U disk production tools
1, enter the first PE after we have prepared the XP CD-ROM ISO image, right click to load virtual disk (can also use virtual optical drive to load or directly with the right button in the RAR to extract to the local hard disk partition)
2, open the Desktop Windows installation tool, select just loaded virtual disk (if the fron
Everyone knows that Win7 all the files have more than 2 G, it is very troublesome to burn with a DVD.
Here, just tell everyone a no optical drive, do not burn, in PE under the hard disk installation WIN7 Good method:
First, the production of a bootable U disk, which has a PE function; (If your computer has an optical drive, then you can directly use the CD with PE
One, the production of U disk PE, of course, or with PE, no, Baidu, online, there are some ways to download. The first is still the decompression image:
Second, then still run the PE:
Third, make a U disk version to choose 4:
Four, this step must not be wrong, but the software will check:
Five, start making:
Six, this step more to remember, the fir
) V6.5 official version (version number: 6.5.12.188)
=======================
1. Detailed adjustment and handling of known issues
2, partition information list to add disk number display and adjust the next position
3. Add the "Install", "Custom Ghost version" items automatically to "manual Ghost" and "reboot after completion" respectively under PE
4, increase in the check GHO integrity of the advanced item, if there is Ghost32 in the program directory
Development Learning. NetMediumStructure of PE files. After we create source code files using any language that supports CLR, the compiled files are managed modules ), this managed module can run on CLR. Therefore, we call this type of File a Managed Executable File ). The format of the general PE file has been recorded in note 3. Here, only some of the distinctive parts of the hosted file are recorded.
A
[PE format Analysis] 3. IMAGE_NT_HEADER, imagedosheader
The source code is as follows:
Typedef struct _ IMAGE_NT_HEADERS {+ 00 h DWORD Signature; // fixed to 0x00004550 based on small-end storage: "PE .. "+ 04 h IMAGE_FILE_HEADER FileHeader; + 18 h IMAGE_OPTIONAL_HEADER32 OptionalHeader;} IMAGE_NT_HEADERS32, * PIMAGE_NT_HEADERS32;Signature Field
In a valid PE
Now we know how to find the imported table. The VirtualAddress of the second item in the Data Directory array contains the table address. The imported table is actually an array of IMAGE_IMPORT_DESCRIPTOR structures. Each structure contains information about a DLL related to the function introduced by the PE file. For example, if the PE file imports functions from 10 different DLL files, the array has 10 me
PXE started PE successfully
From: http://gaokun163.blog.163.com/blog/static/17689972008101704742668/
Note: PXE (preboot execute environment) is the latest technology developed by Intel. It works in the client/server network mode and supports workstation downloading images from remote servers over the network, this also supports the Startup Process of the operating system from the network. During the startup process, the terminal requires the server
The Portable executeworkflow file is the conforming data format of the executable file under win32. it is also a reverse compilation file. The ultimate file is a. EXE file and A. dll file. This document describes the structure of pe files and how to convert virtual memory addresses to file addresses.
Basic Structure of pe files
The basic pe file mainly includes
Next, let's take a look at the construction of the. inf file in the plug-in.This is an example of WinRAR. inf:========================================================== ====================================; WinRAR. inf; PE builder V3 plug-in INF file for WinRAR v3.30; Created by cybervykHttp://www.nu2.nu/pebuilder/[Version]Signature = " #36; Windows NT #36 ;"[Pebuilder]Name = "WinRAR"Enable = 1Help = "winrar.htm"[Winntdirectories]A = programs/WinRAR,
Hard disk Reload system is of course the most convenient, but there are drawbacks, such as I need to partition the computer, this is the need for the PE system under the format of the hard disk. So it is necessary to reload the system in the PE system.
1
I believe you may have entered the PE system before reading this article.
2
After entering the general
Lenovo, Asus, DELL,HP notebook computer If you do not recognize the local hard disk under the PE can be used in my following this method can be recognized by operation. Then install the computer on the system below.
1, now the new version of the BIOS of the notebook computer has a lot of closed the IDE mode, only ahci this, so there is no way to modify the BIOS to achieve under Win PE view to the hard driv
PE believe that everyone is very familiar with, want to create a belong to "own" PE? Let's take a look at where the PE registration information is placed and then modify it accordingly.
a) WINPE. INI (also may be in Pecmd.ini) in the image behind the LOGO instruction is "login screen"
b) WINPE. INI (also possible in Pecmd.ini) the picture behind the WALL direct
Into the system blue screen, heavy installation system is also this phenomenon, into the PE will be computer blue screen, into the PE is a screen, we often do memory or graphics card problems, but replace the memory and video card, into the PE system or blue screen. If it is a motherboard problem often this kind of problem is more difficult to check, because it i
OSPF metric value Propagation
1) when the PE re-distributes ospf to the MP-IBGP, The MP-IBGP uses the OSPF metric value to set the bgp med.
2) When the PE re-distributes BGP to OSPF. Use the MED of BGP to set the measurement values of OSPF internal or external routes.
Tutorial topology:
650) this. width = 650; "style =" width: 680px; height: 164px "border =" 0 "alt =" "width =" 821 "height =" 160 "src =" h
I wrote this blog a long time ago, because it is now moved to cnblogs, and after sorting it out, I will try again.
I have been engaged in computer security/virus-related things (pure learning, do not do evil) for a few years before my work. The PE file format is required. Some PE files, such as drivers, are checked during loading to ensure the integrity of the driver files. There is a lot of information on
Metadata is stored in one area of the PE file, while msil is stored in another area of the PE file. The metadata section contains a series of tables and heaps. The msil part contains the Il language and metadata tags that point to a row of a table in the metadata part or to a heap.Metadata table and heapA metadata table contains various information about a program, such as a table that describes various cla
/** Description: Simulate the Windows reprinter to load the PE file, which makes it easier to process the PE file. Parameter: szfilename: PE file path return: if the operation succeeds, the first address of the PE file image in the memory is returned. If the operation fails, 0 */ulong mappefile (tchar * szfilename) {ha
First, installMicrosoft Windows AIK. :Www.microsoft.com/downloads/details.aspx? Familyid = 696dd665-9f76-4267-a811-39c26d3b3b34 displaylang = ZH-CN
Then, openMicrosoft Windows AIK-- Deployment tool command prompt
Interface after opening(Note: copy and paste only uncleMarked redCommand Line, modo Mo Shao)
input copype. CMD x86 c: \ winpe_x86 , set x86 copy the file to C: \ winpe_x86 directory
enter copy c: \ winpe_x86 \ winpe. wim C: \ winpe_x86
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.