jamiedevsandbox

Edit key using (mnemonic: win+r) regedit

Registry key:
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\MoveImages

jamiedevsandbox

Interesting information on the engineer and file structure (headers/realloc table)

https://wiki.osdev.org/MZ

jamiedevsandbox

/* endian.c (conforms to C89/90 standards) */
/* use valgrind to test for memory leaks/performance issue/code bottlenecks etc.. */
#include <stdio.h>

void test_endian();
unsigned short cpu_endian_test();
unsigned short cpu_endian(const int); /* supply custom address as argument */

unsigned short cpu_endian(const int addr)
{

jamiedevsandbox

Debug/Extract MSI/EXE (PE Header):

https://stackoverflow.com/questions/1547809/extract-msi-from-exe/24987512
https://superuser.com/questions/307678/how-do-i-extract-files-from-an-msi-package

ACL (Microsoft Access Control Lists, grant file permissions/set group):
icacls
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls

View/Extract contents/internal files of MSI:

jamiedevsandbox

Edit/Remove/Read image metadata (contains GPS coordinate location info)

https://exiftool.org/

jamiedevsandbox

Without having to traverse through the GUI.

mnemonic: 

shift + f10

jamiedevsandbox

C:\Windows\system32>wmic /?

[global switches] <command>

The following global switches are available:
/NAMESPACE           Path for the namespace the alias operate against.
/ROLE                Path for the role containing the alias definitions.
/NODE                Servers the alias will operate against.
/IMPLEVEL            Client impersonation level.
/AUTHLEVEL           Client authentication level.

jamiedevsandbox

Launch windows 7 on a bootable DVD.

Spawn terminal with Shift + F10.

Inside cmd prompt:

bootrec.exe /fixmbr
bootrec.exe /fixboot
bootrec.exe /rebuildbcd

jamiedevsandbox

Expose Windows Product Key

https://www.magicaljellybean.com/keyfinder/

jamiedevsandbox

slmgr.vbs

When your copy of Windows is not genuine and you don't want to activate (with product key).

slmgr /rearm

^ The above command will reset the licensing status of the machine.
Now you will not receiveve messages stating your system is not genuine.
This is temporary, ephemeral fix.
After some time elapses, it will notify you again that it's not genuine.