和它们对应的X:\Windows\System32\zh-CN文件夹里的6个语言文件d2d1.dll.mui和dwm.exe.mui和dwmcore.dll.mui和dwminit.dll.mui和dwmredir.dll.mui以及uDWM.dll.mui
然后运用本论坛江南一根葱的疯牛病专修工具,挂载19041完整安装镜像ISO,把winre里的software复制出来放到批处理里。接着运行疯牛病注册表精简器WinXshell.bat就能得到一个1.50mb的software!
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\pe-SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost]
"DcomLaunch"=hex(7):50,00,6f,00,77,00,65,00,72,00,00,00,4c,00,53,00,4d,00,00,\
00,42,00,72,00,6f,00,6b,00,65,00,72,00,49,00,6e,00,66,00,72,00,61,00,73,00,\
74,00,72,00,75,00,63,00,74,00,75,00,72,00,65,00,00,00,50,00,6c,00,75,00,67,\
00,50,00,6c,00,61,00,79,00,00,00,44,00,63,00,6f,00,6d,00,4c,00,61,00,75,00,\
6e,00,63,00,68,00,00,00,53,00,79,00,73,00,74,00,65,00,6d,00,45,00,76,00,65,\
00,6e,00,74,00,73,00,42,00,72,00,6f,00,6b,00,65,00,72,00,00,00,44,00,65,00,\
76,00,69,00,63,00,65,00,49,00,6e,00,73,00,74,00,61,00,6c,00,6c,00,00,00,00,\
00
"defragsvc"=hex(7):64,00,65,00,66,00,72,00,61,00,67,00,73,00,76,00,63,00,00,00,\
00,00
"LocalServiceNetworkRestricted"=hex(7):54,00,69,00,6d,00,65,00,42,00,72,00,6f,\
00,6b,00,65,00,72,00,53,00,76,00,63,00,00,00,57,00,61,00,72,00,70,00,4a,00,\
49,00,54,00,53,00,76,00,63,00,00,00,65,00,76,00,65,00,6e,00,74,00,6c,00,6f,\
00,67,00,00,00,41,00,75,00,64,00,69,00,6f,00,53,00,72,00,76,00,00,00,57,00,\
69,00,6e,00,48,00,74,00,74,00,70,00,41,00,75,00,74,00,6f,00,50,00,72,00,6f,\
00,78,00,79,00,53,00,76,00,63,00,00,00,77,00,73,00,63,00,73,00,76,00,63,00,\
00,00,4c,00,6d,00,48,00,6f,00,73,00,74,00,73,00,00,00,41,00,70,00,70,00,49,\
00,44,00,53,00,76,00,63,00,00,00,44,00,75,00,73,00,6d,00,53,00,76,00,63,00,\
00,00,76,00,6d,00,69,00,63,00,74,00,69,00,6d,00,65,00,73,00,79,00,6e,00,63,\
00,00,00,56,00,61,00,63,00,53,00,76,00,63,00,00,00,57,00,46,00,44,00,53,00,\
43,00,6f,00,6e,00,4d,00,67,00,72,00,53,00,76,00,63,00,00,00,69,00,63,00,73,\
00,73,00,76,00,63,00,00,00,52,00,6d,00,53,00,76,00,63,00,00,00,53,00,6d,00,\
73,00,52,00,6f,00,75,00,74,00,65,00,72,00,00,00,77,00,6c,00,70,00,61,00,73,\
00,76,00,63,00,00,00,4e,00,67,00,63,00,43,00,74,00,6e,00,72,00,53,00,76,00,\
63,00,00,00,44,00,48,00,43,00,50,00,00,00,77,00,63,00,6d,00,73,00,76,00,63,\
00,00,00,62,00,74,00,61,00,67,00,73,00,65,00,72,00,76,00,69,00,63,00,65,00,\
00,00,41,00,4a,00,52,00,6f,00,75,00,74,00,65,00,72,00,00,00,00,00
"RPCSS"=hex(7):52,00,70,00,63,00,45,00,70,00,74,00,4d,00,61,00,70,00,70,00,65,\
00,72,00,00,00,52,00,70,00,63,00,53,00,73,00,00,00,00,00
"utcsvc"=hex(7):44,00,69,00,61,00,67,00,54,00,72,00,61,00,63,00,6b,00,00,00,00,\
00
"LocalService"=hex(7):6e,00,73,00,69,00,00,00,57,00,64,00,69,00,53,00,65,00,72,\
00,76,00,69,00,63,00,65,00,48,00,6f,00,73,00,74,00,00,00,77,00,33,00,32,00,\
74,00,69,00,6d,00,65,00,00,00,45,00,76,00,65,00,6e,00,74,00,53,00,79,00,73,\
00,74,00,65,00,6d,00,00,00,52,00,65,00,6d,00,6f,00,74,00,65,00,52,00,65,00,\
67,00,69,00,73,00,74,00,72,00,79,00,00,00,53,00,73,00,74,00,70,00,53,00,76,\
00,63,00,00,00,6e,00,65,00,74,00,70,00,72,00,6f,00,66,00,6d,00,00,00,6c,00,\
6c,00,74,00,64,00,73,00,76,00,63,00,00,00,46,00,6f,00,6e,00,74,00,43,00,61,\
00,63,00,68,00,65,00,00,00,66,00,64,00,70,00,68,00,6f,00,73,00,74,00,00,00,\
62,00,74,00,68,00,73,00,65,00,72,00,76,00,00,00,43,00,44,00,50,00,53,00,76,\
00,63,00,00,00,62,00,74,00,68,00,61,00,76,00,63,00,74,00,70,00,73,00,76,00,\
63,00,00,00,43,00,61,00,70,00,74,00,75,00,72,00,65,00,53,00,65,00,72,00,76,\
00,69,00,63,00,65,00,00,00,57,00,70,00,63,00,4d,00,6f,00,6e,00,53,00,76,00,\
63,00,00,00,77,00,6f,00,72,00,6b,00,66,00,6f,00,6c,00,64,00,65,00,72,00,73,\
00,73,00,76,00,63,00,00,00,74,00,7a,00,61,00,75,00,74,00,6f,00,75,00,70,00,\
64,00,61,00,74,00,65,00,00,00,53,00,45,00,4d,00,67,00,72,00,53,00,76,00,63,\
00,00,00,57,00,69,00,6e,00,48,00,74,00,74,00,70,00,41,00,75,00,74,00,6f,00,\
50,00,72,00,6f,00,78,00,79,00,53,00,76,00,63,00,00,00,4c,00,69,00,63,00,65,\
00,6e,00,73,00,65,00,4d,00,61,00,6e,00,61,00,67,00,65,00,72,00,00,00,53,00,\
68,00,61,00,72,00,65,00,64,00,52,00,65,00,61,00,6c,00,69,00,74,00,79,00,53,\
00,76,00,63,00,00,00,44,00,69,00,73,00,70,00,42,00,72,00,6f,00,6b,00,65,00,\
72,00,44,00,65,00,73,00,6b,00,74,00,6f,00,70,00,53,00,76,00,63,00,00,00,50,\
00,68,00,6f,00,6e,00,65,00,53,00,76,00,63,00,00,00,57,00,65,00,62,00,43,00,\
6c,00,69,00,65,00,6e,00,74,00,00,00,00,00
"netsvcs"=hex(7):43,00,65,00,72,00,74,00,50,00,72,00,6f,00,70,00,53,00,76,00,\
63,00,00,00,53,00,43,00,50,00,6f,00,6c,00,69,00,63,00,79,00,53,00,76,00,63,\
00,00,00,6c,00,61,00,6e,00,6d,00,61,00,6e,00,73,00,65,00,72,00,76,00,65,00,\
72,00,00,00,67,00,70,00,73,00,76,00,63,00,00,00,49,00,4b,00,45,00,45,00,58,\
00,54,00,00,00,69,00,70,00,68,00,6c,00,70,00,73,00,76,00,63,00,00,00,73,00,\
65,00,63,00,6c,00,6f,00,67,00,6f,00,6e,00,00,00,6d,00,73,00,69,00,73,00,63,\
00,73,00,69,00,00,00,45,00,61,00,70,00,48,00,6f,00,73,00,74,00,00,00,73,00,\
63,00,68,00,65,00,64,00,75,00,6c,00,65,00,00,00,77,00,69,00,6e,00,6d,00,67,\
00,6d,00,74,00,00,00,50,00,72,00,6f,00,66,00,53,00,76,00,63,00,00,00,53,00,\
65,00,73,00,73,00,69,00,6f,00,6e,00,45,00,6e,00,76,00,00,00,77,00,65,00,72,\
00,63,00,70,00,6c,00,73,00,75,00,70,00,70,00,6f,00,72,00,74,00,00,00,49,00,\
6e,00,73,00,74,00,61,00,6c,00,6c,00,53,00,65,00,72,00,76,00,69,00,63,00,65,\
00,00,00,50,00,75,00,73,00,68,00,54,00,6f,00,49,00,6e,00,73,00,74,00,61,00,\
6c,00,6c,00,00,00,54,00,72,00,6f,00,75,00,62,00,6c,00,65,00,73,00,68,00,6f,\
00,6f,00,74,00,69,00,6e,00,67,00,53,00,76,00,63,00,00,00,4c,00,78,00,70,00,\
53,00,76,00,63,00,00,00,73,00,68,00,70,00,61,00,6d,00,73,00,76,00,63,00,00,\
00,58,00,62,00,6c,00,47,00,61,00,6d,00,65,00,53,00,61,00,76,00,65,00,00,00,\
44,00,6d,00,45,00,6e,00,72,00,6f,00,6c,00,6c,00,6d,00,65,00,6e,00,74,00,53,\
00,76,00,63,00,00,00,57,00,4d,00,61,00,6e,00,53,00,76,00,63,00,00,00,54,00,\
68,00,65,00,6d,00,65,00,73,00,00,00,55,00,73,00,65,00,72,00,4d,00,61,00,6e,\
00,61,00,67,00,65,00,72,00,00,00,4e,00,65,00,74,00,53,00,65,00,74,00,75,00,\
70,00,53,00,76,00,63,00,00,00,77,00,6c,00,69,00,64,00,73,00,76,00,63,00,00,\
00,54,00,6f,00,6b,00,65,00,6e,00,42,00,72,00,6f,00,6b,00,65,00,72,00,00,00,\
6c,00,66,00,73,00,76,00,63,00,00,00,4e,00,61,00,74,00,75,00,72,00,61,00,6c,\
00,41,00,75,00,74,00,68,00,65,00,6e,00,74,00,69,00,63,00,61,00,74,00,69,00,\
6f,00,6e,00,00,00,46,00,61,00,73,00,74,00,55,00,73,00,65,00,72,00,53,00,77,\
00,69,00,74,00,63,00,68,00,69,00,6e,00,67,00,43,00,6f,00,6d,00,70,00,61,00,\
74,00,69,00,62,00,69,00,6c,00,69,00,74,00,79,00,00,00,49,00,61,00,73,00,00,\
00,49,00,72,00,6d,00,6f,00,6e,00,00,00,4e,00,6c,00,61,00,00,00,4e,00,74,00,\
6d,00,73,00,73,00,76,00,63,00,00,00,4e,00,57,00,43,00,57,00,6f,00,72,00,6b,\
00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,00,00,4e,00,77,00,73,00,61,00,\
70,00,61,00,67,00,65,00,6e,00,74,00,00,00,52,00,61,00,73,00,61,00,75,00,74,\
00,6f,00,00,00,52,00,61,00,73,00,6d,00,61,00,6e,00,00,00,52,00,65,00,6d,00,\
6f,00,74,00,65,00,61,00,63,00,63,00,65,00,73,00,73,00,00,00,53,00,45,00,4e,\
00,53,00,00,00,53,00,68,00,61,00,72,00,65,00,64,00,61,00,63,00,63,00,65,00,\
73,00,73,00,00,00,53,00,52,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,\
00,54,00,61,00,70,00,69,00,73,00,72,00,76,00,00,00,57,00,6d,00,69,00,00,00,\
57,00,6d,00,64,00,6d,00,50,00,6d,00,53,00,70,00,00,00,77,00,75,00,61,00,75,\
00,73,00,65,00,72,00,76,00,00,00,42,00,49,00,54,00,53,00,00,00,53,00,68,00,\
65,00,6c,00,6c,00,48,00,57,00,44,00,65,00,74,00,65,00,63,00,74,00,69,00,6f,\
00,6e,00,00,00,4c,00,6f,00,67,00,6f,00,6e,00,48,00,6f,00,75,00,72,00,73,00,\
00,00,50,00,43,00,41,00,75,00,64,00,69,00,74,00,00,00,68,00,65,00,6c,00,70,\
00,73,00,76,00,63,00,00,00,75,00,70,00,6c,00,6f,00,61,00,64,00,6d,00,67,00,\
72,00,00,00,64,00,6d,00,77,00,61,00,70,00,70,00,75,00,73,00,68,00,73,00,65,\
00,72,00,76,00,69,00,63,00,65,00,00,00,77,00,69,00,73,00,76,00,63,00,00,00,\
57,00,70,00,6e,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,41,00,70,\
00,70,00,49,00,6e,00,66,00,6f,00,00,00,58,00,62,00,6f,00,78,00,4e,00,65,00,\
74,00,41,00,70,00,69,00,53,00,76,00,63,00,00,00,55,00,73,00,6f,00,53,00,76,\
00,63,00,00,00,58,00,62,00,6f,00,78,00,47,00,69,00,70,00,53,00,76,00,63,00,\
00,00,4e,00,63,00,61,00,53,00,76,00,63,00,00,00,58,00,62,00,6c,00,41,00,75,\
00,74,00,68,00,4d,00,61,00,6e,00,61,00,67,00,65,00,72,00,00,00,44,00,73,00,\
6d,00,53,00,76,00,63,00,00,00,41,00,70,00,70,00,4d,00,67,00,6d,00,74,00,00,\
00,42,00,44,00,45,00,53,00,56,00,43,00,00,00,00,00
"LocalSystemNetworkRestricted"=hex(7):48,00,76,00,48,00,6f,00,73,00,74,00,00,\
00,57,00,64,00,69,00,53,00,79,00,73,00,74,00,65,00,6d,00,48,00,6f,00,73,00,\
74,00,00,00,53,00,63,00,44,00,65,00,76,00,69,00,63,00,65,00,45,00,6e,00,75,\
00,6d,00,00,00,57,00,69,00,61,00,52,00,70,00,63,00,00,00,74,00,72,00,6b,00,\
77,00,6b,00,73,00,00,00,41,00,75,00,64,00,69,00,6f,00,45,00,6e,00,64,00,70,\
00,6f,00,69,00,6e,00,74,00,42,00,75,00,69,00,6c,00,64,00,65,00,72,00,00,00,\
68,00,69,00,64,00,73,00,65,00,72,00,76,00,00,00,64,00,6f,00,74,00,33,00,73,\
00,76,00,63,00,00,00,55,00,6d,00,52,00,64,00,70,00,53,00,65,00,72,00,76,00,\
69,00,63,00,65,00,00,00,44,00,73,00,53,00,76,00,63,00,00,00,66,00,68,00,73,\
00,76,00,63,00,00,00,76,00,6d,00,69,00,63,00,6b,00,76,00,70,00,65,00,78,00,\
63,00,68,00,61,00,6e,00,67,00,65,00,00,00,76,00,6d,00,69,00,63,00,73,00,68,\
00,75,00,74,00,64,00,6f,00,77,00,6e,00,00,00,76,00,6d,00,69,00,63,00,67,00,\
75,00,65,00,73,00,74,00,69,00,6e,00,74,00,65,00,72,00,66,00,61,00,63,00,65,\
00,00,00,76,00,6d,00,69,00,63,00,76,00,6d,00,73,00,65,00,73,00,73,00,69,00,\
6f,00,6e,00,00,00,73,00,76,00,73,00,76,00,63,00,00,00,53,00,74,00,6f,00,72,\
00,53,00,76,00,63,00,00,00,57,00,77,00,61,00,6e,00,53,00,76,00,63,00,00,00,\
76,00,6d,00,69,00,63,00,76,00,73,00,73,00,00,00,44,00,65,00,76,00,51,00,75,\
00,65,00,72,00,79,00,42,00,72,00,6f,00,6b,00,65,00,72,00,00,00,4e,00,67,00,\
63,00,53,00,76,00,63,00,00,00,73,00,79,00,73,00,6d,00,61,00,69,00,6e,00,00,\
00,4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00,54,00,61,00,62,00,6c,00,65,00,\
74,00,49,00,6e,00,70,00,75,00,74,00,53,00,65,00,72,00,76,00,69,00,63,00,65,\
00,00,00,50,00,63,00,61,00,53,00,76,00,63,00,00,00,44,00,69,00,73,00,70,00,\
6c,00,61,00,79,00,45,00,6e,00,68,00,61,00,6e,00,63,00,65,00,6d,00,65,00,6e,\
00,74,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,49,00,50,00,78,00,\
6c,00,61,00,74,00,43,00,66,00,67,00,53,00,76,00,63,00,00,00,44,00,65,00,76,\
00,69,00,63,00,65,00,41,00,73,00,73,00,6f,00,63,00,69,00,61,00,74,00,69,00,\
6f,00,6e,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,4e,00,63,00,62,\
00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,45,00,6d,00,62,00,65,00,\
64,00,64,00,65,00,64,00,4d,00,6f,00,64,00,65,00,00,00,53,00,65,00,6e,00,73,\
00,6f,00,72,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,77,00,6c,00,\
61,00,6e,00,73,00,76,00,63,00,00,00,43,00,73,00,63,00,53,00,65,00,72,00,76,\
00,69,00,63,00,65,00,00,00,57,00,50,00,44,00,42,00,75,00,73,00,45,00,6e,00,\
75,00,6d,00,00,00,4d,00,69,00,78,00,65,00,64,00,52,00,65,00,61,00,6c,00,69,\
00,74,00,79,00,4f,00,70,00,65,00,6e,00,58,00,52,00,53,00,76,00,63,00,00,00,\
00,00
"WerSvcGroup"=hex(7):77,00,65,00,72,00,73,00,76,00,63,00,00,00,00,00
"swprv"=hex(7):73,00,77,00,70,00,72,00,76,00,00,00,00,00
"smphost"=hex(7):73,00,6d,00,70,00,68,00,6f,00,73,00,74,00,00,00,00,00
"LocalServiceNoNetwork"=hex(7):44,00,50,00,53,00,00,00,50,00,4c,00,41,00,00,00,\
4e,00,63,00,64,00,41,00,75,00,74,00,6f,00,53,00,65,00,74,00,75,00,70,00,00,\
00,43,00,6f,00,72,00,65,00,4d,00,65,00,73,00,73,00,61,00,67,00,69,00,6e,00,\
67,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,61,00,72,00,00,00,00,00
"LocalServiceNoNetworkFirewall"=hex(7):42,00,46,00,45,00,00,00,6d,00,70,00,73,\
00,73,00,76,00,63,00,00,00,00,00
"NetworkServiceNetworkRestricted"=hex(7):50,00,6f,00,6c,00,69,00,63,00,79,00,\
41,00,67,00,65,00,6e,00,74,00,00,00,00,00
"NetworkService"=hex(7):43,00,72,00,79,00,70,00,74,00,53,00,76,00,63,00,00,00,\
6e,00,6c,00,61,00,73,00,76,00,63,00,00,00,6c,00,61,00,6e,00,6d,00,61,00,6e,\
00,77,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,00,00,\
57,00,69,00,6e,00,52,00,4d,00,00,00,57,00,45,00,43,00,53,00,56,00,43,00,00,\
00,64,00,6f,00,73,00,76,00,63,00,00,00,4d,00,61,00,70,00,73,00,42,00,72,00,\
6f,00,6b,00,65,00,72,00,00,00,44,00,48,00,43,00,50,00,00,00,54,00,65,00,72,\
00,6d,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,44,00,4e,00,53,00,\
43,00,61,00,63,00,68,00,65,00,00,00,54,00,61,00,70,00,69,00,73,00,72,00,76,\
00,00,00,00,00
"smbsvcs"=hex(7):6c,00,61,00,6e,00,6d,00,61,00,6e,00,73,00,65,00,72,00,76,00,\
65,00,72,00,00,00,00,00
"LocalServiceAndNoImpersonation"=hex(7):53,00,53,00,44,00,50,00,53,00,52,00,56,\
00,00,00,75,00,70,00,6e,00,70,00,68,00,6f,00,73,00,74,00,00,00,53,00,43,00,\
61,00,72,00,64,00,53,00,76,00,72,00,00,00,42,00,74,00,68,00,48,00,46,00,53,\
00,72,00,76,00,00,00,51,00,57,00,41,00,56,00,45,00,00,00,66,00,64,00,72,00,\
65,00,73,00,70,00,75,00,62,00,00,00,77,00,63,00,6e,00,63,00,73,00,76,00,63,\
00,00,00,53,00,65,00,6e,00,73,00,72,00,53,00,76,00,63,00,00,00,00,00
"rdxgroup"=hex(7):52,00,65,00,74,00,61,00,69,00,6c,00,44,00,65,00,6d,00,6f,00,\
00,00,00,00
"sdrsvc"=hex(7):73,00,64,00,72,00,73,00,76,00,63,00,00,00,00,00
"WepHostSvcGroup"=hex(7):57,00,65,00,70,00,48,00,6f,00,73,00,74,00,53,00,76,00,\
63,00,00,00,00,00
"Camera"=hex(7):46,00,72,00,61,00,6d,00,65,00,53,00,65,00,72,00,76,00,65,00,72,\
00,00,00,00,00
"NetworkServiceAndNoImpersonation"=hex(7):4b,00,74,00,6d,00,52,00,6d,00,00,00,\
00,00
"diagnostics"=hex(7):44,00,69,00,61,00,67,00,53,00,76,00,63,00,00,00,00,00
"AxInstSVGroup"=hex(7):41,00,78,00,49,00,6e,00,73,00,74,00,53,00,56,00,00,00,\
00,00
"AarSvcGroup"=hex(7):41,00,61,00,72,00,53,00,76,00,63,00,00,00,00,00
"PrintWorkflow"=hex(7):50,00,72,00,69,00,6e,00,74,00,57,00,6f,00,72,00,6b,00,\
66,00,6c,00,6f,00,77,00,55,00,73,00,65,00,72,00,53,00,76,00,63,00,00,00,00,\
00
"wusvcs"=hex(7):57,00,61,00,61,00,53,00,4d,00,65,00,64,00,69,00,63,00,53,00,76,\
00,63,00,00,00,00,00
"imgsvc"=hex(7):53,00,74,00,69,00,53,00,76,00,63,00,00,00,00,00
"BcastDVRUserService"=hex(7):42,00,63,00,61,00,73,00,74,00,44,00,56,00,52,00,\
55,00,73,00,65,00,72,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,00,\
00
"AppReadiness"=hex(7):41,00,70,00,70,00,52,00,65,00,61,00,64,00,69,00,6e,00,65,\
00,73,00,73,00,00,00,00,00
"WbioSvcGroup"=hex(7):57,00,62,00,69,00,6f,00,53,00,72,00,76,00,63,00,00,00,00,\
00
"UnistackSvcGroup"=hex(7):50,00,69,00,6d,00,49,00,6e,00,64,00,65,00,78,00,4d,\
00,61,00,69,00,6e,00,74,00,65,00,6e,00,61,00,6e,00,63,00,65,00,53,00,76,00,\
63,00,00,00,43,00,44,00,50,00,55,00,73,00,65,00,72,00,53,00,76,00,63,00,00,\
00,57,00,70,00,6e,00,55,00,73,00,65,00,72,00,53,00,65,00,72,00,76,00,69,00,\
63,00,65,00,00,00,55,00,6e,00,69,00,73,00,74,00,6f,00,72,00,65,00,53,00,76,\
00,63,00,00,00,4d,00,65,00,73,00,73,00,61,00,67,00,69,00,6e,00,67,00,53,00,\
65,00,72,00,76,00,69,00,63,00,65,00,00,00,55,00,73,00,65,00,72,00,44,00,61,\
00,74,00,61,00,53,00,76,00,63,00,00,00,4f,00,6e,00,65,00,53,00,79,00,6e,00,\
63,00,53,00,76,00,63,00,00,00,00,00
"GraphicsPerfSvcGroup"=hex(7):47,00,72,00,61,00,70,00,68,00,69,00,63,00,73,00,\
50,00,65,00,72,00,66,00,53,00,76,00,63,00,00,00,00,00
"autoTimeSvc"=hex(7):61,00,75,00,74,00,6f,00,54,00,69,00,6d,00,65,00,53,00,76,\
00,63,00,00,00,00,00
"appmodel"=hex(7):53,00,74,00,61,00,74,00,65,00,52,00,65,00,70,00,6f,00,73,00,\
69,00,74,00,6f,00,72,00,79,00,00,00,45,00,6e,00,74,00,41,00,70,00,70,00,53,\
00,76,00,63,00,00,00,57,00,61,00,6c,00,6c,00,65,00,74,00,53,00,65,00,72,00,\
76,00,69,00,63,00,65,00,00,00,63,00,61,00,6d,00,73,00,76,00,63,00,00,00,00,\
00
"ICService"=hex(7):76,00,6d,00,69,00,63,00,68,00,65,00,61,00,72,00,74,00,62,00,\
65,00,61,00,74,00,00,00,76,00,6d,00,69,00,63,00,72,00,64,00,76,00,00,00,00,\
00
"wsappx"=hex(7):63,00,6c,00,69,00,70,00,73,00,76,00,63,00,00,00,41,00,70,00,70,\
00,58,00,53,00,76,00,63,00,00,00,00,00
"ClipboardSvcGroup"=hex(7):63,00,62,00,64,00,68,00,73,00,76,00,63,00,00,00,00,\
00
"BthAppGroup"=hex(7):42,00,6c,00,75,00,65,00,74,00,6f,00,6f,00,74,00,68,00,55,\
00,73,00,65,00,72,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00,00,00
"UdkSvcGroup"=hex(7):55,00,64,00,6b,00,55,00,73,00,65,00,72,00,53,00,76,00,63,\
00,00,00,00,00
"DevicesFlow"=hex(7):44,00,65,00,76,00,69,00,63,00,65,00,41,00,73,00,73,00,6f,\
00,63,00,69,00,61,00,74,00,69,00,6f,00,6e,00,42,00,72,00,6f,00,6b,00,65,00,\
72,00,53,00,76,00,63,00,00,00,44,00,65,00,76,00,69,00,63,00,65,00,73,00,46,\
00,6c,00,6f,00,77,00,55,00,73,00,65,00,72,00,53,00,76,00,63,00,00,00,43,00,\
6f,00,6e,00,73,00,65,00,6e,00,74,00,55,00,78,00,55,00,73,00,65,00,72,00,53,\
00,76,00,63,00,00,00,44,00,65,00,76,00,69,00,63,00,65,00,50,00,69,00,63,00,\
6b,00,65,00,72,00,55,00,73,00,65,00,72,00,53,00,76,00,63,00,00,00,00,00
"termsvcs"=hex(7):54,00,65,00,72,00,6d,00,53,00,65,00,72,00,76,00,69,00,63,00,\
65,00,00,00,00,00
"LocalServicePeerNet"=hex(7):50,00,4e,00,52,00,50,00,53,00,76,00,63,00,00,00,\
70,00,32,00,70,00,69,00,6d,00,73,00,76,00,63,00,00,00,70,00,32,00,70,00,73,\
00,76,00,63,00,00,00,50,00,6e,00,72,00,70,00,41,00,75,00,74,00,6f,00,52,00,\
65,00,67,00,00,00,00,00
"PeerDist"=hex(7):50,00,65,00,65,00,72,00,44,00,69,00,73,00,74,00,53,00,76,00,\
63,00,00,00,00,00
"AssignedAccessManagerSvc"=hex(7):41,00,73,00,73,00,69,00,67,00,6e,00,65,00,64,\
00,41,00,63,00,63,00,65,00,73,00,73,00,4d,00,61,00,6e,00,61,00,67,00,65,00,\
72,00,53,00,76,00,63,00,00,00,00,00
"print"=hex(7):50,00,72,00,69,00,6e,00,74,00,4e,00,6f,00,74,00,69,00,66,00,79,\
00,00,00,00,00
这样就能得到修复dwm功能的software!
然后还有一个winre里的system注册表文件也复制出来,挂载成pe-system导入添加下面一个CoreMessagingRegistrar服务:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\pe-SYSTEM\ControlSet001\Services\CoreMessagingRegistrar]
"DependOnService"=hex(7):72,00,70,00,63,00,73,00,73,00,00,00,00,00
"Description"="@%SystemRoot%\\system32\\coremessaging.dll,-2"
"DisplayName"="@%SystemRoot%\\system32\\coremessaging.dll,-1"
"ErrorControl"=dword:00000001
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,14,00,00,\
00,02,00,00,00,30,75,00,00
"FailureActionsOnNonCrashFailures"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6D,00,52,00,6F,00,6F,00,\
74,00,25,00,5C,00,73,00,79,00,73,00,74,00,65,00,6D,00,33,00,32,00,5C,00,73,\
00,76,00,63,00,68,00,6F,00,73,00,74,00,2E,00,65,00,78,00,65,00,20,00,2D,00,\
6B,00,20,00,4C,00,6F,00,63,00,61,00,6C,00,53,00,65,00,72,00,76,00,69,00,63,\
00,65,00,4E,00,6F,00,4E,00,65,00,74,00,77,00,6F,00,72,00,6B,00,20,00,2D,00,\
70,00,00,00
"ObjectName"="NT AUTHORITY\\LocalService"
"ServiceSidType"=dword:00000003
"Start"=dword:00000002
"Type"=dword:00000020
[HKEY_LOCAL_MACHINE\pe-SYSTEM\ControlSet001\Services\CoreMessagingRegistrar\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6D,00,52,00,6F,00,6F,\
00,74,00,25,00,5C,00,73,00,79,00,73,00,74,00,65,00,6D,00,33,00,32,00,5C,00,\
63,00,6F,00,72,00,65,00,6D,00,65,00,73,00,73,00,61,00,67,00,69,00,6E,00,67,\
00,2E,00,64,00,6C,00,6C,00,00,00
[HKEY_LOCAL_MACHINE\pe-SYSTEM\ControlSet001\Services\CoreMessagingRegistrar\Security]
"Security"=hex:01,00,04,80,88,00,00,00,94,00,00,00,00,00,00,00,14,00,00,00,02,\
00,74,00,05,00,00,00,00,00,14,00,FD,01,02,00,01,01,00,00,00,00,00,05,12,00,\
00,00,00,00,18,00,FD,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,\
00,00,00,14,00,9D,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,\
9D,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,18,00,9D,01,02,00,01,\
02,00,00,00,00,00,0F,02,00,00,00,01,00,00,00,01,01,00,00,00,00,00,05,12,00,\
00,00,01,01,00,00,00,00,00,05,12,00,00,00
把这两个文件替换覆盖到88mb骨头网络版pe或者微软原生winre里的原始software和system文件,就能重启进去开机DWM生效的pe了。
注意目前只知道该方法对19041-19045系列生效!