PE和正常系统离线添加WimFltr驱动所需的文件和注册表片段挂载wim包不消耗丝毫内存

sairen139

PE和正常系统离线添加WimFltr驱动所需的文件和注册表片段尤其适合把pe放硬盘上使用，优势是挂载wim工具包不会消耗丝毫内存！
离线给PE和正常系统添加wimfltr驱动的通用system注册表片段如下所示（需要把system注册表配置文件挂载成sys离线导入）：
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\sys\ControlSet001\Services\WimFltr]
"Type"=dword:00000002
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"Tag"=dword:00000002
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,77,00,69,00,6d,00,66,00,6c,00,74,\
  00,72,00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="@wimfltr.inf,%WimFltrServiceName%;WimFltr"
"Group"="FSFilter Compression"
"DependOnService"=hex(7):46,00,6c,00,74,00,4d,00,67,00,72,00,00,00,00,00
"Description"="@wimfltr.inf,%WimFltrServiceDescription%;Windows Image Mini-Filter Driver"
"DebugFlags"=dword:00000001

[HKEY_LOCAL_MACHINE\sys\ControlSet001\Services\WimFltr\Instances]
"DefaultInstance"="WimFltr Instance"

[HKEY_LOCAL_MACHINE\sys\ControlSet001\Services\WimFltr\Instances\WimFltr Instance]
"Altitude"="170500"
"Flags"=dword:00000000

然后把wimfltr.sys文件放到\Windows\System32\drivers文件夹里。把df.exe和wimgapi.dll放到\Windows\文件夹里，主要是避免wimgapi.dll覆盖System32里的同名文件引起dism功能的不正常！
重启进入pe或者正常系统，然后cmd命令行窗口输入df wim mount E:\petools.wim E:\666666 这样的类似语句即可发现挂载pe的wim工具包成功了！

sairen139

wimfltr驱动挂载wim包之所以不会消耗丝毫内存，因为它的原理是转向，也就是直接读取wim里的文件！