|
uwf可以离线导入注册表来启动。win10已经自带uwf,启用它,把注册表导出来,文件拷贝出来导入PE
wim不知道,但vhd很容易的,导入类似下面这样的注册表,就可以保护对应的卷,
- Windows Registry Editor Version 5.00
- [HKEY_LOCAL_MACHINE\1\ControlSet001\Services\uwfvol\Parameters\Static\Copy0]
- "UwfEnabled"=dword:00000001
- [HKEY_LOCAL_MACHINE\1\ControlSet001\Services\uwfvol\Parameters\Static\Copy0\Volumes]
- "NumVolumes"=dword:00000001
- [HKEY_LOCAL_MACHINE\1\ControlSet001\Services\uwfvol\Parameters\Static\Copy0\Volumes\0]
- "VolumeName"="Volume{49991a5d-0000-0000-0000-100000000000}"
- "DriveLetter"="C:"
- "VolumeEnabled"=dword:00000001
- "Binding"=dword:00000001
- "PartitionStyle"=dword:00000000
- "PartitionOffset"=hex(b):00,00,10,00,00,00,00,00
- "DiskSignature"=dword:49991a5d
- "FileExceptionsUserDefined"=hex(7):00,00,00,00
- "NumFileExceptionsUserDefined"=dword:00000000
复制代码
VolumeName、DiskSignature都很容易得到,挂载vhd,运行mountvol就可以看到VolumeName了,DiskSignature就是VolumeName的第一段。
其它的好像只要是vhd的都差不多 |
|