[教程]给你的WinPE添加imdisk软件,并添加imdisk右键菜单注册表
2021-1-1 3169

下载imdisk

http://www.ltr-data.se/opencode.html/
http://www.ltr-data.se/files/imdiskinst.exe

 

复制imdisk文件

将下载到的压缩包里的文件按需提取:(以X64WinPE为例)

imdisk2.0.10.rar\imdiskinst\cpl\amd64\imdisk.cpl
imdisk2.0.10.rar\imdiskinst\cli\amd64\imdisk.exe
imdisk2.0.10.rar\imdiskinst\svc\amd64\imdsksvc.exe

以上文件放到system32目录;

 

imdisk2.0.10.rar\imdiskinst\awealloc\amd64\awealloc.sys
imdisk2.0.10.rar\imdiskinst\sys\amd64\imdisk.sys

以上文件放到System32\drivers目录;

 

导入注册表

imdisk服务安装

将WinPE的system文件挂载到HKLM\123

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\123\ControlSet001\Services\AWEAlloc]
"Type"=dword:00000001
"Start"=dword:00000002
"ErrorControl"=dword:00000000
"ImagePath"=hex(2):5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
  00,49,00,56,00,45,00,52,00,53,00,5c,00,61,00,77,00,65,00,61,00,6c,00,6c,00,\
  6f,00,63,00,2e,00,73,00,79,00,73,00,00,00
"DisplayName"="AWE Memory Allocation Driver"
"Description"="Driver for physical memory allocation through AWE"

[HKEY_LOCAL_MACHINE\123\ControlSet001\Services\ImDisk]
"Type"=dword:00000001
"Start"=dword:00000002
"ErrorControl"=dword:00000000
"ImagePath"=hex(2):5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
  00,49,00,56,00,45,00,52,00,53,00,5c,00,69,00,6d,00,64,00,69,00,73,00,6b,00,\
  2e,00,73,00,79,00,73,00,00,00
"DisplayName"="ImDisk Virtual Disk Driver"
"Description"="Disk emulation driver"

[HKEY_LOCAL_MACHINE\123\ControlSet001\Services\ImDskSvc]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000000
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,\
  00,6d,00,64,00,73,00,6b,00,73,00,76,00,63,00,2e,00,65,00,78,00,65,00,00,00
"DisplayName"="ImDisk Virtual Disk Driver Helper"
"ObjectName"="LocalSystem"
"Description"="Helper service for ImDisk Virtual Disk Driver."


 

添加imdisk右键菜单

将WinPE的software文件挂载到HKLM\sf

[HKEY_LOCAL_MACHINE\sf\Classes\*\shell\ImDiskMountFile]
@="挂载为 ImDisk 虚拟磁盘"

[HKEY_LOCAL_MACHINE\sf\Classes\*\shell\ImDiskMountFile\command]
@="rundll32.exe imdisk.cpl,RunDLL_MountFile %L"

[HKEY_LOCAL_MACHINE\sf\Classes\Drive\shell]
@="none"

[HKEY_LOCAL_MACHINE\sf\Classes\Drive\shell\ImDiskSaveImage]
@="保存磁盘内容为映像文件"

[HKEY_LOCAL_MACHINE\sf\Classes\Drive\shell\ImDiskSaveImage\command]
@="rundll32.exe imdisk.cpl,RunDLL_SaveImageFile %L"

[HKEY_LOCAL_MACHINE\sf\Classes\Drive\shell\ImDiskUnmount]
@="卸载 ImDisk 虚拟磁盘"

[HKEY_LOCAL_MACHINE\sf\Classes\Drive\shell\ImDiskUnmount\command]
@="rundll32.exe imdisk.cpl,RunDLL_RemoveDevice %L"

 

效果图

image.webp

image.webp

 

附件是 imdisk 2.0.10 中文版

最后于 2024-10-2 被caocaofff编辑 ,原因:
上传的附件:
  • imdiskinst.zip (上传时间:2021-01-01 22:01:17,大小:970.70K,下载次数:105)
收藏
点赞
分享
官方QQ群:872611894(群密码:pecmd.net)
最新回复 (6)
  • avatar image
    cya007 2021-2-5

    学习了,谢谢提供

  • avatar image
    sairen139 2021-3-7

    记得以前用注册表离线集成imdisk驱动只需要往文件夹里添加两个文件就够了。

    人生在世大闹一场
  • avatar image
    铭浩 2021-10-5

    有没有32位的?

    B站UP主,昵称为system32老马,爱好PE和windows系统,欢迎和我讨论,QQ号:2517588842
  • avatar image
    caocaofff 2021-10-5
    楼主   5
    铭浩 有没有32位的?

    x86目录

    官方QQ群:872611894(群密码:pecmd.net)
  • avatar image
    铭浩 2021-10-6

    那么,怎么给PE的自定义内置软件关联后缀名默认打开(要详细过程和示例),谢谢!

    B站UP主,昵称为system32老马,爱好PE和windows系统,欢迎和我讨论,QQ号:2517588842
  • avatar image
    winpe 2024-10-20
    铭浩 那么,怎么给PE的自定义内置软件关联后缀名默认打开(要详细过程和示例),谢谢!

    你可以试试改HKEY_CLASSES_ROOT/*.后缀名

    1
返回