5 replies to this topic

[VeeDub]

Hi,

 

I have a Win 8 PE ISO that I want to understand what files it loads to create it's environment.

 

I've been able to extract the boot.wim; but the application I'm interested in is loading differently outside of the ISO, so I need to understand the startup process.

 

I'm pretty sure there must be a tutorial here that will help me, but so far I haven't been able to find it.

 

I'm after a tutorial that explains the WinPE boot process, and what tools are needed to review / modify the boot files.

 

Thanks

[erwan.l]

Hi VeeDub,

 

You thought the application was in the iso but found out that it is actually (as expected with a WINPEç in the boot.wim, right?

If I read you correctly then, you are looking for an application that is packaged in the boot.wim.

 

Either use the MS tools (WAIK or ADK) or simpler, use wimlib if you know the folder(s) or file(s) you wish to extract.

Note that the MS tools will help you mount the boot.wim as virtual folder which may be easier for you to browse inside that wim file.

 

Regards,

Erwan

[VeeDub]

Hi Erwan,

 

I've been able to extract the application from the WIM without issue. When I run the application, it loads without error, but not all of the program options are available.

 

I want to review the startup process in greater detail, for instance in the WIM, is the application being called with command-line switches for example.

[erwan.l]

Hi VeedDub,

 

The boot process is quite similar to the standard windows : bootmgr->bcd->winload->ntoskrnl->smss.

 

What you may want to look at is winpeshl.ini (in windows folder) as this is where the shell (or main app) is defined.

 

If not thing interesting in there (command line switches for example), then you may have to search in the registry.

 

Regards,

Erwan

[VeeDub]

Hi,

 

The app is being loaded as the shell, and after studying the app more closely I can see that the options that are not currently being displayed are part of the menu options. So it seems that I will need to study the inner workings of the app itself more closely.

 

Thanks for your help.

[Wonko the Sane]

Is the name of the application a trade secret?

 

Wonko