For a good read on WinPE, check out the Microsoft Docs
Winlogon.exe is executed on startup. This will read the WinPE Registry at HKLM\System\Setup for the CmdLine value. By default this is winpeshl.exe. When winpeshl.exe executes, it reads values from winpeshl.ini
<Does not exist>
<Does not exist>
[LaunchApp]
AppPath=X:\sources\recovery\recenv.exe
[LaunchApps]
%SYSTEMROOT%\System32\bddrun.exe,/bootstrap
[LaunchApps]
%SYSTEMDRIVE%\sms\bin\x64\TsBootShell.exe
[Shell]OrgName=OSDeployEnableDebugShell=trueRun=X:\sms\bin\x64\TsmBootstrap.exe /env:WinPE /configpath:%CONFIGPATH%
wpeinit
wpeinit
wpeinit
wpeinit
wpeinit
​
​