PECMD (перевод хелпа)

pecmd

LOGS %WinDir%\System32\Pecmd.log
DISP W1024 H768 B32 F60
logo %SystemRoot%\logo.jpg
TEXT System configuration 8PEx86, Please Wait ......#0xFFFFFF L60 T30 $20*
REGI HKLM\SYSTEM\CurrentControlSet\Control\Windows\ErrorMode=#2
TEAM EXEC =*winpeshl.exe|INIT IU,1000|FONT %SystemRoot%\Fonts,0
EXEC !%windir%\system32\firadisk.cmd
`------ RAM_DISK
TEAM IFEX MEM=?,MemA|IFEX X:\native.ini,CALL ImDskRD!CALL PrimoRD
IFEX X:\TEMP,TEAM ENVI PT=X:\TEMP|FILE --force B:\Temp!TEAM ENVI PT=B:\TEMP|PATH %PT%
FORX* Temp Tmp,TEnvi,TEAM EXEC =*setx.exe -m %TEnvi% %PT%|ENVI $%TEnvi%=%PT%
TEAM REGI HKCU\Environment\TEMP=%PT%|REGI HKCU\Environment\TMP=%PT%
REGI HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\TEMP=%PT%
REGI HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\TMP=%PT%
//REGI HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Cookies=%PT%\Cookies
//REGI HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Cache=%PT%\Temporary Internet Files
_SUB ImDskRD
TEAM ENVI TEnvi=NTFS|CALC #NEnvi=(%MemA%-64)*6/10
IFEX $%NEnvi%<256,TEAM ENVI TEnvi=FAT|CALC NEnvi=4|PATH X:\Temp
IFEX $%NEnvi%>1536,CALC NEnvi=1536
RAMD ImDisk,L%NEnvi%,%TEnvi%,B:,RAMDisk
//FORX /S %USERPROFILE%\Primo*RamDisk.lnk,DEnvi,0,FILE --force %DEnvi%
_END
_SUB PrimoRD
TEAM EXEC* TEnvi=*cpu64.exe Y|LPOS TEnvi=CPU is 64,1,%TEnvi%
FIND MEM>2560,IFEX $%TEnvi%=5,REGI HKLM\system\ControlSet001\Services\FancyRd\Parameters\EnableIM=#1
@THRD+$ -wait DEVI %windir%\System32\drivers\fancyrd.inf
EXEC* --hide DEnvi=rxprd.exe mem
FIND $%DEnvi%=,TEAM WAIT 1000|EXEC* --hide DEnvi=rxprd.exe mem
FIND $%DEnvi%=,TEAM CALL ImDskRD|EXIT _SUB
TEAM SED DEnvi=0,/, ,%DEnvi%|TEAM MSTR DEnvi=<7> %DEnvi%|CALC DEnvi=%DEnvi%
IFEX $%DEnvi%<%MemA%,CALC MemA=%MemA%-%DEnvi%!CALC MemA=128
TEAM ENVI TEnvi=NTFS|CALC #NEnvi=(%MemA%-128)*6/10+%DEnvi%
IFEX $%NEnvi%<256,TEAM ENVI TEnvi=FAT|CALC NEnvi=4|PATH X:\Temp
@THRD+$ -wait EXEC =*rxprd.exe add -n %NEnvi% -t SCSI -d B -v -i -dmm=COMPACT -f %TEnvi% -c 32KB -l RAMDisk -X -N -T -s
IFEX B:\,!WAIT 1000
IFEX B:\,!CALL ImDskRD
_END
`=============================== U ===============================
MOUN-udm -findboot -w -mhide \\.\PhysicalDrive* C-
REGI $HKLM\SYSTEM\CurrentControlSet\Control\SystemStartOptions,&&udm
SED &&T=?,UDMBOOT,,%&udm%
ifex $0=%&T%,SHOW U:-1
RECY *:\,0
IFEX %WinDir%\system32\NvMe.wcs,EXEC %WinDir%\system32\NvME.wcs
EXEC =!%SystemRoot%\system32\RecycleOff.cmd
DEVI %SystemRoot%\inf\hd*.inf
TEXT Если хотите повернуть экран, нажмите (Alt+P) .....#0xFFFFFF L60 T60 $20*
FORX *.ocx,Regocx,0,CALL $%Regocx%
FORX msxml*.dll,Regdll,0,CALL $%Regdll%
TEAM FORX msi*.dll,TEnvi,0,CALL $%TEnvi%|EXEC *msiexec.exe /register
EXEC =!%SystemRoot%\system32\Autorun.cmd
EXEC !reg.exe import VC886.reg
EXEC !%ProgramFiles%\REGDOC.CMD
EXEC %Windir%\System32\AutoNumlock.EXE
FILE X:\Users\Public\Desktop\desktop.ini
FILE X:\Users\Default\Desktop\desktop.ini
FILE %Desktop%\desktop.ini
EXEC !reg.exe import Cmd.reg
TEXT Снимок экрана, нажмите (F9)...#0xFFFFFF L60 T90 $20*
REGI HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess=#1
REGI HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Audit\!
EXEC %ProgramFiles%\Classic Shell\ClassicStartMenu.exe
EXEC !X:\Program Files\Imagine\Imagine.EXE /assocext /regcontextmenu
REGI HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Icons\29=X:\WINDOWS\SYSTEM32\Empty.ico,0
TEAM HOTK Ctrl + Alt + C,CMD.EXE|HOTK Alt + R,PECMD.EXE SHUT R|HOTK #112,PECMD.EXE|HOTK #0x78,pecmd.exe load %windir%\snap.wcs
EXEC !%windir%\system32\ctfmon.exe
EXEC =!autoit3.exe LetterSwap.au3 /auto /log %temp%\LetterSwap.log
SHOW -1:-1
PINT %Windir%\explorer.exe,TaskBand
PINT %WinDir%\System32\Cmd.exe,TaskBand
TEAM SHEL %WinDir%\EXPLORER.EXE|LOGO|TEXT
//EXEC !%windir%\Sh.cmd
EXEC !autoit3.exe %windir%\PsMgr.a3x
//EXEC %WinDir%\system32\Ud+.wcs //for FBA
//CALC #TEnvi=6
//LOOP %TEnvi%>0,
//{
//FORX \XMPE\Programs\Sh.exe,XEnvi,1,TEAM EXEC --hide %XEnvi%|EXIT LOOP
//TEAM CALC TEnvi=%TEnvi%-1|WAIT 1000
//FIND #%TEnvi%=5,EXEC --hide bootpart.exe -mount -driveletter U:
//FIND #%TEnvi%=2,EXEC --hide ShowDrive.exe ALL
//}
FORX \SSTR\MInst\MInst.exe,Exefile,0,LINK %Desktop%\MInst(SSTR),"%Exefile%"
DEVI %WinDir%\inf\usbvideo.inf
//LINK %Desktop%\PPPoE,X:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk
SERV AudioSrv
//KILL Explorer.exe
//REGI HKLM\SYSTEM\Setup\SystemSetupInProgress=#1
EXEC @Pecmd Load %WinDir%\system32\PecmdNet.ini
//EXEC %WinDir%\system32\pics.wcs
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////