cd \Objects
add {7203c58e-ed11-43fe-9771-5fd22564ba7a}
cd {7203c58e-ed11-43fe-9771-5fd22564ba7a}
add Description
cd Description
setval 1
Type
dword:0x10200004
cd ..
add Elements
cd Elements
add 11000001
cd 11000001
setval 1
Element
hex:3:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,48,00,00,00,00,00,00,00,00,00,b0,7a,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,84,47,bb,ee,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
cd ..
add 12000002
cd 12000002
setval 1
Element
string:\Windows\system32\winresume.exe
cd ..
add 12000004
cd 12000004
setval 1
Element
string:Windows Resume Application
cd ..
add 12000005
cd 12000005
setval 1
Element
string:en-US
cd ..
add 14000006
cd 14000006
setval 1
Element
hex:7:7b,00,31,00,61,00,66,00,61,00,39,00,63,00,34,00,39,00,2d,00,31,00,36,00,61,00,62,00,2d,00,34,00,61,00,35,00,63,00,2d,00,39,00,30,00,31,00,62,00,2d,00,32,00,31,00,32,00,38,00,30,00,32,00,64,00,61,00,39,00,34,00,36,00,30,00,7d,00,00,00,00,00
cd ..
add 17000077
cd 17000077
setval 1
Element
hex:3:75,00,00,15,00,00,00,00
cd ..
add 21000001
cd 21000001
setval 1
Element
hex:3:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,48,00,00,00,00,00,00,00,00,00,b0,7a,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,84,47,bb,ee,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
cd ..
add 22000002
cd 22000002
setval 1
Element
string:\hiberfil.sys
cd ..
add 25000008
cd 25000008
setval 1
Element
hex:3:01,00,00,00,00,00,00,00
cd ..
add 26000006
cd 26000006
setval 1
Element
hex:3:00
cd ..\..\..
add {0ac245c6-ec81-4da2-a745-b147e8c4fe05}
cd {0ac245c6-ec81-4da2-a745-b147e8c4fe05}
add Description
cd Description
setval 1
Type
dword:0x10200003
cd ..
add Elements
cd Elements
add 11000001
cd 11000001
setval 1
Element
hex:3:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,48,00,00,00,00,00,00,00,00,00,b0,7a,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,84,47,bb,ee,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
cd ..
add 12000002
cd 12000002
setval 1
Element
string:\Windows\system32\winload.exe
cd ..
add 12000004
cd 12000004
setval 1
Element
string:Windows 10
cd ..
add 12000005
cd 12000005
setval 1
Element
string:en-US
cd ..
add 14000006
cd 14000006
setval 1
Element
hex:7:7b,00,36,00,65,00,66,00,62,00,35,00,32,00,62,00,66,00,2d,00,31,00,37,00,36,00,36,00,2d,00,34,00,31,00,64,00,62,00,2d,00,61,00,36,00,62,00,33,00,2d,00,30,00,65,00,65,00,35,00,65,00,66,00,66,00,37,00,32,00,62,00,64,00,37,00,7d,00,00,00,00,00
cd ..
add 17000077
cd 17000077
setval 1
Element
hex:3:75,00,00,15,00,00,00,00
cd ..
add 21000001
cd 21000001
setval 1
Element
hex:3:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,48,00,00,00,00,00,00,00,00,00,b0,7a,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,84,47,bb,ee,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
cd ..
add 22000002
cd 22000002
setval 1
Element
string:\Windows
cd ..
add 23000003
cd 23000003
setval 1
Element
string:{7203c58e-ed11-43fe-9771-5fd22564ba7a}
cd ..
add 25000020
cd 25000020
setval 1
Element
hex:3:00,00,00,00,00,00,00,00
cd ..
add 250000c2
cd 250000c2
setval 1
Element
hex:3:01,00,00,00,00,00,00,00
cd ..\..\..
cd {9dea862c-5cdd-4e70-acc1-f32b344d4795}
cd Elements
cd 11000001
setval 1
Element
hex:3:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,48,00,00,00,00,00,00,00,00,50,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,84,47,bb,ee,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
cd ..
cd 12000005
setval 1
Element
string:en-US
cd ..
cd 23000003
setval 1
Element
string:{0ac245c6-ec81-4da2-a745-b147e8c4fe05}
cd ..
cd 23000006
setval 1
Element
string:{7203c58e-ed11-43fe-9771-5fd22564ba7a}
cd ..
cd 24000001
setval 1
Element
hex:7:7b00300061006300320034003500630036002d0065006300380031002d0034006400610032002d0061003700340035002d006200310034003700650038006300340066006500300035007d0000000000
cd ..\..\..
cd {b2721d73-1db4-4c62-bf78-c548a880142d}
cd Elements
cd 11000001
setval 1
Element
hex:3:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,00,00,00,00,00,00,48,00,00,00,00,00,00,00,00,50,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,84,47,bb,ee,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
cd ..
cd 12000002
setval 1
Element
string:\Boot\memtest.exe
cd ..
cd 12000005
setval 1
Element
string:en-US
cd \ 
cd Description
setval 2
KeyName
string:BCD00000000
System
dword:1
commit
unload
