Jump to content

Command Line REG question


roontoon

Recommended Posts

Hi,

I manage a network at a local middle school that has 400+ machines on it. Our county has a Hardware Independent Image (alt iris) with the basic productivity software that they provide. Since this setup is installed without any local configuration or software that we might want I have been trying to understand how to make registry tweaks to the default user registry hive. I have been doing some testing with only one of the tweaks that we apply locally which is to change the windows theme to the classic windows theme. Attached is the reg file that we use. But since that is only applied to the current users hive and not the default user's hive I started to check out REG. I have executed the following script along with the attached .reg but it is not working as expected. The goal is to have a set of configuration tweaks that will be applied to every user that may login to this machine. Can anyone point me in the correct direction? This is the last thing I need to figure out to have a fully unattended install of our county's Hardware Independent Image. Much thanks!!!

REG LOAD HKU\TempHive "C:\Documents and Settings\Default User\ntuser.dat"

timeout /T 1 /NOBREAK

RegEdit.exe /s "C:\test.reg"

timeout /T 1 /NOBREAK

REG UNLOAD HKU\TempHive

TEST.reg file


Windows Registry Editor Version 5.00
; Comparing: 1/14/2013 12:44:08 P - 1/14/2013 12:45:21 P

; DELETE section

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\swmidi\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sysaudio\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swmidi\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sysaudio\Enum]
"0" = -
[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"ColorName" = -
"DllName" = -
"LastUserLangID" = -
"LoadedBefore" = -
"SizeName" = -
[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Program Files\ElcomSoft\Advanced Registry Tracer\Art.exe" = -

; ADD section

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed"=hex(03):e8,53,eb,84,9c,95,c8,96,04,ca,4e,9f,e5,6a,b6,9d,e6,b0,5a,50,\
23,8f,0c,07,da,dc,11,86,3f,8c,66,55,90,4f,45,4f,fa,49,6d,6f,0e,f3,a4,7d,1b,\
a1,3c,94,1a,d7,9e,60,24,73,d0,ac,06,01,9e,1d,ae,15,bf,06,0f,9f,80,cb,76,1b,\
19,17,e0,c8,f0,a1,bd,7e,ae,d3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS]
"StateIndex"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"DownloadExpirationTime"="2013-01-16 17:44:39"
"NextDetectionTime"="2013-01-15 11:32:22"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect]
"LastSuccessTime"="2013-01-14 17:44:29"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download]
"LastSuccessTime"="2013-01-14 17:45:26"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\#SAD0\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\#SAD1\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\#SAD2\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BITS\0000\Control]
"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS]
"Start"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parameters]
"{749ED02F-B864-41C7-977F-DFFA405B05CD}"=hex(03):2e,00,00,00,00,00,00,00,01,\
00,00,00,00,00,00,00,b8,bf,fe,50,08,00,00,00,2c,00,00,00,00,00,00,00,08,00,\
00,00,00,00,00,00,b8,bf,fe,50,a8,fe,01,66,a8,fe,01,68,06,00,00,00,00,00,00,\
00,08,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,a8,fe,01,65,03,00,00,00,\
00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,01,0f,00,00,00,00,\
00,00,00,0b,00,00,00,00,00,00,00,b8,bf,fe,50,6d,79,73,64,68,63,2e,6e,65,74,\
00,00,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,ff,ff,e0,\
00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,\
35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,b8,bf,fe,50,05,00,00,00,fc,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,af,43,f4,50,51,00,00,00,00,00,\
00,00,03,00,00,00,00,00,00,00,b8,bf,fe,50,00,ff,ff,00,33,00,00,00,00,00,00,\
00,04,00,00,00,00,00,00,00,b8,bf,fe,50,00,0a,8c,00,3b,00,00,00,00,00,00,00,\
04,00,00,00,00,00,00,00,b8,bf,fe,50,00,09,3a,80,3a,00,00,00,00,00,00,00,04,\
00,00,00,00,00,00,00,b8,bf,fe,50,00,05,46,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\swmidi\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sysaudio\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\#SAD0\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\#SAD1\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\#SAD2\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BITS\0000\Control]
"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS]
"Start"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Parameters]
"{749ED02F-B864-41C7-977F-DFFA405B05CD}"=hex(03):2e,00,00,00,00,00,00,00,01,\
00,00,00,00,00,00,00,b8,bf,fe,50,08,00,00,00,2c,00,00,00,00,00,00,00,08,00,\
00,00,00,00,00,00,b8,bf,fe,50,a8,fe,01,66,a8,fe,01,68,06,00,00,00,00,00,00,\
00,08,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,a8,fe,01,65,03,00,00,00,\
00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,01,0f,00,00,00,00,\
00,00,00,0b,00,00,00,00,00,00,00,b8,bf,fe,50,6d,79,73,64,68,63,2e,6e,65,74,\
00,00,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,ff,ff,e0,\
00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,\
35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,b8,bf,fe,50,05,00,00,00,fc,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,af,43,f4,50,51,00,00,00,00,00,\
00,00,03,00,00,00,00,00,00,00,b8,bf,fe,50,00,ff,ff,00,33,00,00,00,00,00,00,\
00,04,00,00,00,00,00,00,00,b8,bf,fe,50,00,0a,8c,00,3b,00,00,00,00,00,00,00,\
04,00,00,00,00,00,00,00,b8,bf,fe,50,00,09,3a,80,3a,00,00,00,00,00,00,00,04,\
00,00,00,00,00,00,00,b8,bf,fe,50,00,05,46,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swmidi\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sysaudio\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes]
@=".current"

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\.Default\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,44,00,69,00,6e,00,67,00,2e,00,77,00,\
61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\DeviceConnect\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\
72,00,65,00,20,00,49,00,6e,00,73,00,65,00,72,00,74,00,2e,00,77,00,61,00,76,\
00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\
72,00,65,00,20,00,52,00,65,00,6d,00,6f,00,76,00,65,00,2e,00,77,00,61,00,76,\
00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\DeviceFail\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\
72,00,65,00,20,00,46,00,61,00,69,00,6c,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\LowBatteryAlarm\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,42,00,61,00,74,00,74,00,65,00,72,00,\
79,00,20,00,4c,00,6f,00,77,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\MailBeep\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,4e,00,6f,00,74,00,69,00,66,00,79,00,\
2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\SystemAsterisk\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,45,00,72,00,72,00,6f,00,72,00,2e,00,\
77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\SystemExclamation\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,45,00,78,00,63,00,6c,00,61,00,6d,00,\
61,00,74,00,69,00,6f,00,6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\SystemExit\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,53,00,68,00,75,00,74,00,64,00,6f,00,\
77,00,6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\SystemHand\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,43,00,72,00,69,00,74,00,69,00,63,00,\
61,00,6c,00,20,00,53,00,74,00,6f,00,70,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\SystemNotification\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,42,00,61,00,6c,00,6c,00,6f,00,6f,00,\
6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\SystemStart\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,53,00,74,00,61,00,72,00,74,00,75,00,\
70,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\WindowsLogoff\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,4c,00,6f,00,67,00,6f,00,66,00,66,00,\
20,00,53,00,6f,00,75,00,6e,00,64,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\.Default\WindowsLogon\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,4c,00,6f,00,67,00,6f,00,6e,00,20,00,\
53,00,6f,00,75,00,6e,00,64,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,52,00,65,00,63,00,79,00,63,00,6c,00,\
65,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\AppEvents\Schemes\Apps\Explorer\Navigating\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,4e,00,61,00,76,00,69,00,67,00,61,00,74,00,69,00,6f,00,\
6e,00,20,00,53,00,74,00,61,00,72,00,74,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Control Panel\Appearance]
"Current"="Windows Standard"
"CustomColors"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"NewCurrent"="Windows Standard"

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Control Panel\Appearance\New Schemes\Current Settings SaveAll\Sizes\0]
"Color #1"=dword:00984E00
"Color #13"=dword:00C56A31
"Color #15"=dword:00D8E9EC
"Color #16"=dword:0099A8AC
"Color #17"=dword:0099A8AC
"Color #19"=dword:00F8E4D8
"Color #2"=dword:00E35400
"Color #21"=dword:00646F71
"Color #22"=dword:00E2EFF1
"Color #27"=dword:00FF953D
"Color #28"=dword:00EBB99D
"Color #29"=dword:00C56A31
"Color #3"=dword:00DF967A
"Color #30"=dword:00D8E9EC
"Color #4"=dword:00FFFFFF
"Flat Menus"=dword:00000001
"Font #0"=hex(03):f3,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,\
00,00,00,00,01,00,00,00,00,54,00,72,00,65,00,62,00,75,00,63,00,68,00,65,00,\
74,00,20,00,4d,00,53,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #1"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #2"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #3"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #4"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #5"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Size #1"=hex(0b):11,00,00,00,00,00,00,00
"Size #2"=hex(0b):11,00,00,00,00,00,00,00
"Size #4"=hex(0b):19,00,00,00,00,00,00,00
"Size #5"=hex(0b):11,00,00,00,00,00,00,00
"Size #6"=hex(0b):11,00,00,00,00,00,00,00
"Size #8"=hex(0b):13,00,00,00,00,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Control Panel\Colors]
"ActiveTitle"="10 36 106"
"Background"="58 110 165"
"ButtonDkShadow"="64 64 64"
"ButtonFace"="212 208 200"
"ButtonLight"="212 208 200"
"ButtonShadow"="128 128 128"
"GradientActiveTitle"="166 202 240"
"GradientInactiveTitle"="192 192 192"
"GrayText"="128 128 128"
"Hilight"="10 36 106"
"InactiveTitle"="128 128 128"
"InactiveTitleText"="212 208 200"
"Menu"="212 208 200"

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Control Panel\Cursors]
@="Windows default"
"Scheme Source"=dword:00000002

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Control Panel\Desktop]
"ScreenSaveActive"="1"
"SCRNSAVE.EXE"="C:\\WINDOWS\\System32\\logon.scr"
"UserPreferencesMask"=hex(03):9e,3e,05,80

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Control Panel\Desktop\WindowMetrics]
"BorderWidth"="-15"
"CaptionFont"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,\
00,00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,65,\
00,74,00,20,00,4d,00,53,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"CaptionHeight"="-270"
"IconFont"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,07,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4c,00,00,00,8b,00,00,00,8b,\
00,00,00,01,00,00,00,f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00
"MenuHeight"="-270"
"ScrollHeight"="-240"
"ScrollWidth"="-240"
"SmCaptionHeight"="-225"
"SmCaptionWidth"="-180"

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\SessionInformation]
"ProgramCount"=dword:00000004

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Position"=hex(03):2c,00,00,00,9c,00,00,00,00,00,00,00,64,03,00,00,e4,02,00,\
00,00,00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\MediaPlayer\Player\Skins]
"CurrentSkin"="C:\\Program Files\\Windows Media Player\\Skins\\Windows Classic.wmz"

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\MediaPlayer\Preferences]
"ShellStyleFile"=" "

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Plus!\Themes\Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,00,54,\
00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,\
73,00,20,00,43,00,6c,00,61,00,73,00,73,00,69,00,63,00,2e,00,74,00,68,00,65,\
00,6d,00,65,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew]
"~reserved~"=hex(03):18,00,00,00,01,00,01,00,dd,07,01,00,01,00,0e,00,0c,00,\
2c,00,33,00,4b,01
"Bitmap Image"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,69,00,\
74,00,6d,00,61,00,70,00,20,00,49,00,6d,00,61,00,67,00,65,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,\
00,62,00,6d,00,70,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,00,61,00,69,00,\
6e,00,74,00,2e,00,50,00,69,00,63,00,74,00,75,00,72,00,65,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00
"Briefcase"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,72,00,69,\
00,65,00,66,00,63,00,61,00,73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,00,\
62,00,66,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,72,00,69,00,65,\
00,66,00,63,00,61,00,73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,\
00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"Compressed (zipped) Folder"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,43,00,6f,00,6d,00,70,00,72,00,65,00,73,00,73,00,65,00,64,00,20,00,28,00,\
7a,00,69,00,70,00,70,00,65,00,64,00,29,00,20,00,46,00,6f,00,6c,00,64,00,65,\
00,72,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,2e,00,7a,00,69,00,70,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,43,\
00,6f,00,6d,00,70,00,72,00,65,00,73,00,73,00,65,00,64,00,46,00,6f,00,6c,00,\
64,00,65,00,72,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Language"=dword:00000409
"Microsoft Office Access 2007 Database"=hex(03):00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,\
4f,00,66,00,66,00,69,00,63,00,65,00,20,00,41,00,63,00,63,00,65,00,73,00,73,\
00,20,00,32,00,30,00,30,00,37,00,20,00,44,00,61,00,74,00,61,00,62,00,61,00,\
73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,2e,00,61,00,63,00,63,00,64,00,62,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,41,00,63,00,63,00,65,00,73,00,73,00,2e,00,41,00,70,00,70,00,6c,00,\
69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,2e,00,31,00,32,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office Excel Worksheet"=hex(03):00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,\
66,00,66,00,69,00,63,00,65,00,20,00,45,00,78,00,63,00,65,00,6c,00,20,00,57,\
00,6f,00,72,00,6b,00,73,00,68,00,65,00,65,00,74,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,2e,00,78,00,6c,00,73,00,78,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,45,00,78,00,63,00,65,00,6c,00,2e,00,53,00,68,00,65,00,65,00,74,00,2e,00,\
31,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office PowerPoint Presentation"=hex(03):00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,\
00,4f,00,66,00,66,00,69,00,63,00,65,00,20,00,50,00,6f,00,77,00,65,00,72,00,\
50,00,6f,00,69,00,6e,00,74,00,20,00,50,00,72,00,65,00,73,00,65,00,6e,00,74,\
00,61,00,74,00,69,00,6f,00,6e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,2e,00,70,00,70,00,74,00,78,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,50,00,6f,00,77,00,65,00,72,00,50,00,6f,00,69,00,6e,00,74,00,2e,\
00,53,00,68,00,6f,00,77,00,2e,00,31,00,32,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office Publisher Document"=hex(03):00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,\
00,66,00,66,00,69,00,63,00,65,00,20,00,50,00,75,00,62,00,6c,00,69,00,73,00,\
68,00,65,00,72,00,20,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,2e,00,70,00,75,00,62,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,50,00,75,00,62,00,6c,00,69,00,73,00,68,00,65,00,72,00,2e,00,44,00,6f,\
00,63,00,75,00,6d,00,65,00,6e,00,74,00,2e,00,31,00,32,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office Word Document"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,66,\
00,66,00,69,00,63,00,65,00,20,00,57,00,6f,00,72,00,64,00,20,00,44,00,6f,00,\
63,00,75,00,6d,00,65,00,6e,00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,2e,00,64,00,6f,00,63,00,78,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
57,00,6f,00,72,00,64,00,2e,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,\
00,2e,00,31,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Text Document"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,00,65,\
00,78,00,74,00,20,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
2e,00,74,00,78,00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,74,00,78,00,74,\
00,66,00,69,00,6c,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
"Wave Sound"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,57,00,61,00,\
76,00,65,00,20,00,53,00,6f,00,75,00,6e,00,64,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,\
00,77,00,61,00,76,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,73,00,6f,00,75,00,\
6e,00,64,00,72,00,65,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count]
"HRZR_EHAPCY"=hex(03):3d,00,00,00,06,00,00,00,c0,2b,e4,da,7e,f2,cd,01
"HRZR_EHAPCY:qrfx.pcy"=hex(03):3d,00,00,00,06,00,00,00,c0,2b,e4,da,7e,f2,cd,01

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"ThemeActive"="0"

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme]
"DisplayName of Modified"=""
"ThemeFile"=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,\
5c,00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,43,00,6c,00,61,00,73,00,73,00,69,00,63,00,2e,00,74,00,\
68,00,65,00,6d,00,65,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\Shell\Bags\1\Desktop]
"ItemPos1024x768(1)"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
17,00,00,00,02,00,00,00,14,00,1f,48,ba,8f,0d,45,25,ad,d0,11,98,a8,08,00,36,\
1b,11,03,17,00,00,00,54,00,00,00,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\
08,00,2b,30,30,9d,17,00,00,00,a6,00,00,00,14,00,1f,58,60,2c,8d,20,ea,3a,69,\
10,a2,d7,08,00,2b,30,30,9d,17,00,00,00,f8,00,00,00,14,00,1f,60,40,f0,5f,64,\
81,50,1b,10,9f,08,00,aa,00,2f,95,4e,17,00,00,00,4a,01,00,00,14,00,1f,68,80,\
53,1c,87,a0,42,69,10,a2,ea,08,00,2b,30,30,9d,17,00,00,00,9c,01,00,00,50,00,\
3a,00,5f,06,00,00,2b,41,55,61,20,00,46,49,52,53,54,43,7e,31,2e,4c,4e,4b,00,\
00,34,00,03,00,04,00,ef,be,2b,41,55,61,2e,42,8b,8c,14,00,00,00,46,00,69,00,\
72,00,73,00,74,00,43,00,6c,00,61,00,73,00,73,00,2e,00,6c,00,6e,00,6b,00,00,\
00,1c,00,17,00,00,00,ee,01,00,00,40,00,3a,00,e2,07,00,00,71,3d,7d,79,20,00,\
48,43,50,53,2e,6c,6e,6b,00,00,28,00,03,00,04,00,ef,be,71,3d,7d,79,2e,42,8b,\
8c,14,00,00,00,48,00,43,00,50,00,53,00,2e,00,6c,00,6e,00,6b,00,00,00,18,00,\
17,00,00,00,40,02,00,00,64,00,3a,00,16,03,00,00,ab,3c,b9,8d,20,00,57,49,4e,\
44,4f,57,7e,31,2e,4c,4e,4b,00,00,48,00,03,00,04,00,ef,be,5c,3d,62,80,2e,42,\
8b,8c,14,00,00,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,20,00,4d,00,65,\
00,64,00,69,00,61,00,20,00,50,00,6c,00,61,00,79,00,65,00,72,00,2e,00,6c,00,\
6e,00,6b,00,00,00,1c,00,87,02,00,00,02,00,00,00,48,00,31,00,00,00,00,00,2e,\
42,af,8c,12,00,44,45,46,41,55,4c,7e,31,00,00,30,00,03,00,04,00,ef,be,2e,42,\
ab,8c,2e,42,af,8c,14,00,00,00,44,00,65,00,66,00,61,00,75,00,6c,00,74,00,20,\
00,55,00,73,00,65,00,72,00,00,00,18,00,b3,00,00,00,9c,01,00,00,3c,00,32,00,\
65,95,1c,00,2e,42,66,8d,20,00,61,72,74,2e,7a,69,70,00,26,00,03,00,04,00,ef,\
be,2e,42,61,8d,2e,42,66,8d,14,00,00,00,61,00,72,00,74,00,2e,00,7a,00,69,00,\
70,00,00,00,16,00,4f,01,00,00,54,00,00,00,30,00,31,00,00,00,00,00,2e,42,6a,\
8d,10,00,61,72,74,00,1e,00,03,00,04,00,ef,be,2e,42,69,8d,2e,42,6a,8d,14,00,\
00,00,61,00,72,00,74,00,00,00,12,00,17,00,00,00,92,02,00,00,6c,00,32,00,7f,\
03,00,00,2e,42,75,8d,20,00,41,44,56,41,4e,43,7e,31,2e,4c,4e,4b,00,00,50,00,\
03,00,04,00,ef,be,2e,42,75,8d,2e,42,75,8d,14,00,00,00,41,00,64,00,76,00,61,\
00,6e,00,63,00,65,00,64,00,20,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,\
79,00,20,00,54,00,72,00,61,00,63,00,65,00,72,00,2e,00,6c,00,6e,00,6b,00,00,\
00,1c,00,17,00,00,00,92,02,00,00,00,00,00,00

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\ShellNoRoam\Bags\212\Shell]
"Col"=dword:FFFFFFFF
"ColInfo"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,\
fd,0f,00,06,00,28,00,10,00,34,00,48,00,00,00,00,00,01,00,00,00,02,00,00,00,\
03,00,00,00,04,00,00,00,05,00,00,00,b4,00,60,00,78,00,78,00,b4,00,b4,00,00,\
00,00,00,01,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00
"Mode"=dword:00000006
"ScrollPos1024x768(1).x"=dword:00000000
"ScrollPos1024x768(1).y"=dword:00000000
"Sort"=dword:00000000
"SortDir"=dword:00000001

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@C:\\WINDOWS\\system32\\ieframe.dll.mui,-880"="Internet Explorer"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-8964"="Recycle Bin"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-9216"="My Computer"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-9217"="My Network Places"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-9227"="My Documents"
"@shell32.dll,-31233"="File and Folder Tasks"
"@shell32.dll,-31236"="Make a new folder"
"@shell32.dll,-31260"="Publish this folder to the Web"
"@shell32.dll,-31272"="Other Places"
"@shell32.dll,-31274"="Details"
"@shell32.dll,-31374"="Share this folder"
"@themeui.dll,-2015"="More themes online..."
"@themeui.dll,-2016"="Windows Classic"
"@themeui.dll,-2017"="Windows XP"
"@themeui.dll,-2019"="Normal"
"@themeui.dll,-2020"="Large"
"@themeui.dll,-2021"="Extra Large"
"@themeui.dll,-2037"="{Tahoma, 8 pt}"
"@themeui.dll,-2038"="{Tahoma, 8 pt}"
"@themeui.dll,-2039"="{Tahoma, 8 pt}"
"@themeui.dll,-2040"="{Tahoma, 8 pt}"
"@themeui.dll,-2041"="{Tahoma, 8 pt}"
"@themeui.dll,-2042"="{Tahoma, 8 pt}"
"@themeui.dll,-2043"="Windows default"
"@themeui.dll,-850"="Brick"
"@themeui.dll,-851"="Desert"
"@themeui.dll,-852"="Eggplant"
"@themeui.dll,-853"="High Contrast #1"
"@themeui.dll,-856"="High Contrast #2"
"@themeui.dll,-859"="High Contrast Black"
"@themeui.dll,-862"="High Contrast White"
"@themeui.dll,-865"="Lilac"
"@themeui.dll,-867"="Maple"
"@themeui.dll,-868"="Marine (high color)"
"@themeui.dll,-869"="Plum (high color)"
"@themeui.dll,-870"="Pumpkin"
"@themeui.dll,-871"="Wheat"
"@themeui.dll,-872"="Rainy Day"
"@themeui.dll,-873"="Red, White, and Blue (VGA)"
"@themeui.dll,-874"="Rose"
"@themeui.dll,-876"="Slate"
"@themeui.dll,-877"="Spruce"
"@themeui.dll,-878"="Storm (VGA)"
"@themeui.dll,-879"="Teal (VGA)"
"@themeui.dll,-880"="Windows Classic"
"@themeui.dll,-883"="Windows Standard"
"LangID"=hex(03):09,04


test 01.reg

Link to comment
Share on other sites


I'm a little confused by this ...

Attached is the reg file that we use. But since that is only applied to the current users hive and not the default user's hive

(1) In your REG script I don't see any non-HKLM that will be applied to the current user. You have coded for a specific user ( HKEY_USERS\S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-500 ) and that -500 usually means it is the built-in administrator account. I'm pretty sure that you might want to change all occurrences of ...

HKEY_USERS\S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-500

... to ...

HKEY_CURRENT_USER

So this ...

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

... becomes this ...

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

(2) You are going to have to define exactly what you mean by "default" user in your question.

(3) For those values that you are deleting ( e.g., "0" = - ), the spaces are superfluous. Actually I can't recall seeing it done that way. It might not matter, but this ...

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

"ColorName" = -

"DllName" = -

"LastUserLangID" = -

"LoadedBefore" = -

"SizeName" = -

... is usually written as this ...

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

"ColorName"=-

"DllName"=-

"LastUserLangID"=-

"LoadedBefore"=-

"SizeName"=-

(4) I am going to guess that your registry script is a result of capturing changes from previous testing. I can easily see quite a few that should not be ported because they are either meaningless, transitory or in at least one case a bad idea ( the random number generator should not be ported unless you are trying to clone systems, but even that won't work ). I suggest you carefully audit this for meaningless or even dangerous items that need not be pushed. Here is what I see at a quick glance. Keys re-grouped by similarity and comments preceding each ...

;####################################################################################

; NOTE: HKEY_USERS\S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-500 changed to HKEY_CURRENT_USER

;####################################################################################

; I'm guessing this is the tool that was used to capture REG. But was it ran on all the users machine? Transitory key anyway

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]

"C:\Program Files\ElcomSoft\Advanced Registry Tracer\Art.exe" = -

; this is a very bad idea IMHO, it is now a random number generator defeater

[HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\RNG]

"Seed"=hex(03):e8,53,eb,84,9c,95,c8,96,04,ca,4e,9f,e5,6a,b6,9d,e6,b0,5a,50,\

23,8f,0c,07,da,dc,11,86,3f,8c,66,55,90,4f,45,4f,fa,49,6d,6f,0e,f3,a4,7d,1b,\

a1,3c,94,1a,d7,9e,60,24,73,d0,ac,06,01,9e,1d,ae,15,bf,06,0f,9f,80,cb,76,1b,\

19,17,e0,c8,f0,a1,bd,7e,ae,d3

; these are inserting a date/time that should only come from WU, you might actually be disabling it for users!

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]

"DownloadExpirationTime"="2013-01-16 17:44:39"

"NextDetectionTime"="2013-01-15 11:32:22"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect]

"LastSuccessTime"="2013-01-14 17:44:29"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download]

"LastSuccessTime"="2013-01-14 17:45:26"

; I don't know what device this is ( looks like Audio/MIDI related ), but these things are inserted by ConfigMgr and probably shouldn't be inserted by hand

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\#SAD0\Control]

"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\Control]

"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\#SAD1\Control]

"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\Control]

"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\#SAD2\Control]

"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\Control]

"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\#SAD0\Control]

"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\Control]

"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\#SAD1\Control]

"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\Control]

"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\#SAD2\Control]

"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\Control]

"ReferenceCount"=dword:00000000

; same as previous comment

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\swmidi\Enum]

"Count"=dword:00000000

"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sysaudio\Enum]

"Count"=dword:00000000

"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swmidi\Enum]

"Count"=dword:00000000

"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sysaudio\Enum]

"Count"=dword:00000000

"NextInstance"=dword:00000000

; if you want to enable the BITS service it can be done from the commandline, but this probably won't hurt it I guess

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BITS\0000\Control]

"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS]

"Start"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BITS\0000\Control]

"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS]

"Start"=dword:00000002

; I don't like the looks of this, it is dynamic and changes with the RNG, though someone more knowledgeable should comment

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parameters]

"{749ED02F-B864-41C7-977F-DFFA405B05CD}"=hex(03):2e,00,00,00,00,00,00,00,01,\

00,00,00,00,00,00,00,b8,bf,fe,50,08,00,00,00,2c,00,00,00,00,00,00,00,08,00,\

00,00,00,00,00,00,b8,bf,fe,50,a8,fe,01,66,a8,fe,01,68,06,00,00,00,00,00,00,\

00,08,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,a8,fe,01,65,03,00,00,00,\

00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,01,0f,00,00,00,00,\

00,00,00,0b,00,00,00,00,00,00,00,b8,bf,fe,50,6d,79,73,64,68,63,2e,6e,65,74,\

00,00,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,ff,ff,e0,\

00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,\

35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,b8,bf,fe,50,05,00,00,00,fc,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,af,43,f4,50,51,00,00,00,00,00,\

00,00,03,00,00,00,00,00,00,00,b8,bf,fe,50,00,ff,ff,00,33,00,00,00,00,00,00,\

00,04,00,00,00,00,00,00,00,b8,bf,fe,50,00,0a,8c,00,3b,00,00,00,00,00,00,00,\

04,00,00,00,00,00,00,00,b8,bf,fe,50,00,09,3a,80,3a,00,00,00,00,00,00,00,04,\

00,00,00,00,00,00,00,b8,bf,fe,50,00,05,46,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Parameters]

"{749ED02F-B864-41C7-977F-DFFA405B05CD}"=hex(03):2e,00,00,00,00,00,00,00,01,\

00,00,00,00,00,00,00,b8,bf,fe,50,08,00,00,00,2c,00,00,00,00,00,00,00,08,00,\

00,00,00,00,00,00,b8,bf,fe,50,a8,fe,01,66,a8,fe,01,68,06,00,00,00,00,00,00,\

00,08,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,a8,fe,01,65,03,00,00,00,\

00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,01,0f,00,00,00,00,\

00,00,00,0b,00,00,00,00,00,00,00,b8,bf,fe,50,6d,79,73,64,68,63,2e,6e,65,74,\

00,00,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,ff,ff,e0,\

00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,\

35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,b8,bf,fe,50,05,00,00,00,fc,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,af,43,f4,50,51,00,00,00,00,00,\

00,00,03,00,00,00,00,00,00,00,b8,bf,fe,50,00,ff,ff,00,33,00,00,00,00,00,00,\

00,04,00,00,00,00,00,00,00,b8,bf,fe,50,00,0a,8c,00,3b,00,00,00,00,00,00,00,\

04,00,00,00,00,00,00,00,b8,bf,fe,50,00,09,3a,80,3a,00,00,00,00,00,00,00,04,\

00,00,00,00,00,00,00,b8,bf,fe,50,00,05,46,00

; not sure, but why push this?

[HKEY_CURRENT_USER\SessionInformation]

"ProgramCount"=dword:00000004

; you should decode these ( ROT13 ) to see what they are before pushing them

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count]

"HRZR_EHAPCY"=hex(03):3d,00,00,00,06,00,00,00,c0,2b,e4,da,7e,f2,cd,01

"HRZR_EHAPCY:qrfx.pcy"=hex(03):3d,00,00,00,06,00,00,00,c0,2b,e4,da,7e,f2,cd,01

; I think this is way too specific to push

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Bags\1\Desktop]

"ItemPos1024x768(1)"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

17,00,00,00,02,00,00,00,14,00,1f,48,ba,8f,0d,45,25,ad,d0,11,98,a8,08,00,36,\

1b,11,03,17,00,00,00,54,00,00,00,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\

08,00,2b,30,30,9d,17,00,00,00,a6,00,00,00,14,00,1f,58,60,2c,8d,20,ea,3a,69,\

10,a2,d7,08,00,2b,30,30,9d,17,00,00,00,f8,00,00,00,14,00,1f,60,40,f0,5f,64,\

81,50,1b,10,9f,08,00,aa,00,2f,95,4e,17,00,00,00,4a,01,00,00,14,00,1f,68,80,\

53,1c,87,a0,42,69,10,a2,ea,08,00,2b,30,30,9d,17,00,00,00,9c,01,00,00,50,00,\

3a,00,5f,06,00,00,2b,41,55,61,20,00,46,49,52,53,54,43,7e,31,2e,4c,4e,4b,00,\

00,34,00,03,00,04,00,ef,be,2b,41,55,61,2e,42,8b,8c,14,00,00,00,46,00,69,00,\

72,00,73,00,74,00,43,00,6c,00,61,00,73,00,73,00,2e,00,6c,00,6e,00,6b,00,00,\

00,1c,00,17,00,00,00,ee,01,00,00,40,00,3a,00,e2,07,00,00,71,3d,7d,79,20,00,\

48,43,50,53,2e,6c,6e,6b,00,00,28,00,03,00,04,00,ef,be,71,3d,7d,79,2e,42,8b,\

8c,14,00,00,00,48,00,43,00,50,00,53,00,2e,00,6c,00,6e,00,6b,00,00,00,18,00,\

17,00,00,00,40,02,00,00,64,00,3a,00,16,03,00,00,ab,3c,b9,8d,20,00,57,49,4e,\

44,4f,57,7e,31,2e,4c,4e,4b,00,00,48,00,03,00,04,00,ef,be,5c,3d,62,80,2e,42,\

8b,8c,14,00,00,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,20,00,4d,00,65,\

00,64,00,69,00,61,00,20,00,50,00,6c,00,61,00,79,00,65,00,72,00,2e,00,6c,00,\

6e,00,6b,00,00,00,1c,00,87,02,00,00,02,00,00,00,48,00,31,00,00,00,00,00,2e,\

42,af,8c,12,00,44,45,46,41,55,4c,7e,31,00,00,30,00,03,00,04,00,ef,be,2e,42,\

ab,8c,2e,42,af,8c,14,00,00,00,44,00,65,00,66,00,61,00,75,00,6c,00,74,00,20,\

00,55,00,73,00,65,00,72,00,00,00,18,00,b3,00,00,00,9c,01,00,00,3c,00,32,00,\

65,95,1c,00,2e,42,66,8d,20,00,61,72,74,2e,7a,69,70,00,26,00,03,00,04,00,ef,\

be,2e,42,61,8d,2e,42,66,8d,14,00,00,00,61,00,72,00,74,00,2e,00,7a,00,69,00,\

70,00,00,00,16,00,4f,01,00,00,54,00,00,00,30,00,31,00,00,00,00,00,2e,42,6a,\

8d,10,00,61,72,74,00,1e,00,03,00,04,00,ef,be,2e,42,69,8d,2e,42,6a,8d,14,00,\

00,00,61,00,72,00,74,00,00,00,12,00,17,00,00,00,92,02,00,00,6c,00,32,00,7f,\

03,00,00,2e,42,75,8d,20,00,41,44,56,41,4e,43,7e,31,2e,4c,4e,4b,00,00,50,00,\

03,00,04,00,ef,be,2e,42,75,8d,2e,42,75,8d,14,00,00,00,41,00,64,00,76,00,61,\

00,6e,00,63,00,65,00,64,00,20,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,\

79,00,20,00,54,00,72,00,61,00,63,00,65,00,72,00,2e,00,6c,00,6e,00,6b,00,00,\

00,1c,00,17,00,00,00,92,02,00,00,00,00,00,00

; I think this is way too specific to push

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\212\Shell]

"Col"=dword:FFFFFFFF

"ColInfo"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,\

fd,0f,00,06,00,28,00,10,00,34,00,48,00,00,00,00,00,01,00,00,00,02,00,00,00,\

03,00,00,00,04,00,00,00,05,00,00,00,b4,00,60,00,78,00,78,00,b4,00,b4,00,00,\

00,00,00,01,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00

"Mode"=dword:00000006

"ScrollPos1024x768(1).x"=dword:00000000

"ScrollPos1024x768(1).y"=dword:00000000

"Sort"=dword:00000000

"SortDir"=dword:00000001

; I think this is way too specific to push, transitory and makes too many assumptions

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]

"@C:\\WINDOWS\\system32\\ieframe.dll.mui,-880"="Internet Explorer"

"@C:\\WINDOWS\\system32\\SHELL32.dll,-8964"="Recycle Bin"

"@C:\\WINDOWS\\system32\\SHELL32.dll,-9216"="My Computer"

"@C:\\WINDOWS\\system32\\SHELL32.dll,-9217"="My Network Places"

"@C:\\WINDOWS\\system32\\SHELL32.dll,-9227"="My Documents"

"@shell32.dll,-31233"="File and Folder Tasks"

"@shell32.dll,-31236"="Make a new folder"

"@shell32.dll,-31260"="Publish this folder to the Web"

"@shell32.dll,-31272"="Other Places"

"@shell32.dll,-31274"="Details"

"@shell32.dll,-31374"="Share this folder"

"@themeui.dll,-2015"="More themes online..."

"@themeui.dll,-2016"="Windows Classic"

"@themeui.dll,-2017"="Windows XP"

"@themeui.dll,-2019"="Normal"

"@themeui.dll,-2020"="Large"

"@themeui.dll,-2021"="Extra Large"

"@themeui.dll,-2037"="{Tahoma, 8 pt}"

"@themeui.dll,-2038"="{Tahoma, 8 pt}"

"@themeui.dll,-2039"="{Tahoma, 8 pt}"

"@themeui.dll,-2040"="{Tahoma, 8 pt}"

"@themeui.dll,-2041"="{Tahoma, 8 pt}"

"@themeui.dll,-2042"="{Tahoma, 8 pt}"

"@themeui.dll,-2043"="Windows default"

"@themeui.dll,-850"="Brick"

"@themeui.dll,-851"="Desert"

"@themeui.dll,-852"="Eggplant"

"@themeui.dll,-853"="High Contrast #1"

"@themeui.dll,-856"="High Contrast #2"

"@themeui.dll,-859"="High Contrast Black"

"@themeui.dll,-862"="High Contrast White"

"@themeui.dll,-865"="Lilac"

"@themeui.dll,-867"="Maple"

"@themeui.dll,-868"="Marine (high color)"

"@themeui.dll,-869"="Plum (high color)"

"@themeui.dll,-870"="Pumpkin"

"@themeui.dll,-871"="Wheat"

"@themeui.dll,-872"="Rainy Day"

"@themeui.dll,-873"="Red, White, and Blue (VGA)"

"@themeui.dll,-874"="Rose"

"@themeui.dll,-876"="Slate"

"@themeui.dll,-877"="Spruce"

"@themeui.dll,-878"="Storm (VGA)"

"@themeui.dll,-879"="Teal (VGA)"

"@themeui.dll,-880"="Windows Classic"

"@themeui.dll,-883"="Windows Standard"

"LangID"=hex(03):09,04

; these are just assigned sounds to events, do you want all users to have them the same?

; also note that those hex bytes ( @=hex(02):25,00,53... ) are Expand_SZ encoded full paths, do you know what they are and do they even exist on other computers?

[HKEY_CURRENT_USER\AppEvents\Schemes]

@=".current"

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\.Default\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,44,00,69,00,6e,00,67,00,2e,00,77,00,\

61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceConnect\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\

72,00,65,00,20,00,49,00,6e,00,73,00,65,00,72,00,74,00,2e,00,77,00,61,00,76,\

00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\

72,00,65,00,20,00,52,00,65,00,6d,00,6f,00,76,00,65,00,2e,00,77,00,61,00,76,\

00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceFail\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\

72,00,65,00,20,00,46,00,61,00,69,00,6c,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\LowBatteryAlarm\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,42,00,61,00,74,00,74,00,65,00,72,00,\

79,00,20,00,4c,00,6f,00,77,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\MailBeep\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,4e,00,6f,00,74,00,69,00,66,00,79,00,\

2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemAsterisk\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,45,00,72,00,72,00,6f,00,72,00,2e,00,\

77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemExclamation\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,45,00,78,00,63,00,6c,00,61,00,6d,00,\

61,00,74,00,69,00,6f,00,6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemExit\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,53,00,68,00,75,00,74,00,64,00,6f,00,\

77,00,6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemHand\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,43,00,72,00,69,00,74,00,69,00,63,00,\

61,00,6c,00,20,00,53,00,74,00,6f,00,70,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemNotification\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,42,00,61,00,6c,00,6c,00,6f,00,6f,00,\

6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\SystemStart\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,53,00,74,00,61,00,72,00,74,00,75,00,\

70,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\WindowsLogoff\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,4c,00,6f,00,67,00,6f,00,66,00,66,00,\

20,00,53,00,6f,00,75,00,6e,00,64,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\WindowsLogon\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,4c,00,6f,00,67,00,6f,00,6e,00,20,00,\

53,00,6f,00,75,00,6e,00,64,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,58,00,50,00,20,00,52,00,65,00,63,00,79,00,63,00,6c,00,\

65,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_CURRENT_USER\AppEvents\Schemes\Apps\Explorer\Navigating\.Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,4e,00,61,00,76,00,69,00,67,00,61,00,74,00,69,00,6f,00,\

6e,00,20,00,53,00,74,00,61,00,72,00,74,00,2e,00,77,00,61,00,76,00,00,00

; shellnew is the new document choice when right-clicking, there are assumptions here that these programs exist on all these computers

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew]

"~reserved~"=hex(03):18,00,00,00,01,00,01,00,dd,07,01,00,01,00,0e,00,0c,00,\

2c,00,33,00,4b,01

"Bitmap Image"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,69,00,\

74,00,6d,00,61,00,70,00,20,00,49,00,6d,00,61,00,67,00,65,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,\

00,62,00,6d,00,70,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,00,61,00,69,00,\

6e,00,74,00,2e,00,50,00,69,00,63,00,74,00,75,00,72,00,65,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00

"Briefcase"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,72,00,69,\

00,65,00,66,00,63,00,61,00,73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,00,\

62,00,66,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,72,00,69,00,65,\

00,66,00,63,00,61,00,73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,\

00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00

"Compressed (zipped) Folder"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,43,00,6f,00,6d,00,70,00,72,00,65,00,73,00,73,00,65,00,64,00,20,00,28,00,\

7a,00,69,00,70,00,70,00,65,00,64,00,29,00,20,00,46,00,6f,00,6c,00,64,00,65,\

00,72,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,2e,00,7a,00,69,00,70,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,43,\

00,6f,00,6d,00,70,00,72,00,65,00,73,00,73,00,65,00,64,00,46,00,6f,00,6c,00,\

64,00,65,00,72,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Language"=dword:00000409

"Microsoft Office Access 2007 Database"=hex(03):00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,\

4f,00,66,00,66,00,69,00,63,00,65,00,20,00,41,00,63,00,63,00,65,00,73,00,73,\

00,20,00,32,00,30,00,30,00,37,00,20,00,44,00,61,00,74,00,61,00,62,00,61,00,\

73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,2e,00,61,00,63,00,63,00,64,00,62,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,41,00,63,00,63,00,65,00,73,00,73,00,2e,00,41,00,70,00,70,00,6c,00,\

69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,2e,00,31,00,32,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Microsoft Office Excel Worksheet"=hex(03):00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,\

66,00,66,00,69,00,63,00,65,00,20,00,45,00,78,00,63,00,65,00,6c,00,20,00,57,\

00,6f,00,72,00,6b,00,73,00,68,00,65,00,65,00,74,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,2e,00,78,00,6c,00,73,00,78,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,45,00,78,00,63,00,65,00,6c,00,2e,00,53,00,68,00,65,00,65,00,74,00,2e,00,\

31,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Microsoft Office PowerPoint Presentation"=hex(03):00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,\

00,4f,00,66,00,66,00,69,00,63,00,65,00,20,00,50,00,6f,00,77,00,65,00,72,00,\

50,00,6f,00,69,00,6e,00,74,00,20,00,50,00,72,00,65,00,73,00,65,00,6e,00,74,\

00,61,00,74,00,69,00,6f,00,6e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,2e,00,70,00,70,00,74,00,78,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,50,00,6f,00,77,00,65,00,72,00,50,00,6f,00,69,00,6e,00,74,00,2e,\

00,53,00,68,00,6f,00,77,00,2e,00,31,00,32,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Microsoft Office Publisher Document"=hex(03):00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,\

00,66,00,66,00,69,00,63,00,65,00,20,00,50,00,75,00,62,00,6c,00,69,00,73,00,\

68,00,65,00,72,00,20,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,2e,00,70,00,75,00,62,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,50,00,75,00,62,00,6c,00,69,00,73,00,68,00,65,00,72,00,2e,00,44,00,6f,\

00,63,00,75,00,6d,00,65,00,6e,00,74,00,2e,00,31,00,32,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Microsoft Office Word Document"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,66,\

00,66,00,69,00,63,00,65,00,20,00,57,00,6f,00,72,00,64,00,20,00,44,00,6f,00,\

63,00,75,00,6d,00,65,00,6e,00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,2e,00,64,00,6f,00,63,00,78,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

57,00,6f,00,72,00,64,00,2e,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,\

00,2e,00,31,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Text Document"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,00,65,\

00,78,00,74,00,20,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

2e,00,74,00,78,00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,74,00,78,00,74,\

00,66,00,69,00,6c,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00

"Wave Sound"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,57,00,61,00,\

76,00,65,00,20,00,53,00,6f,00,75,00,6e,00,64,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,\

00,77,00,61,00,76,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,73,00,6f,00,75,00,\

6e,00,64,00,72,00,65,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00

;####################################################################################

; below here looks like mostly theme and desktop related choices

; but there are many assumptions on existing programs, no time to look at them in detail

;####################################################################################

[HKEY_CURRENT_USER\Control Panel\Appearance]

"Current"="Windows Standard"

"CustomColors"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"NewCurrent"="Windows Standard"

[HKEY_CURRENT_USER\Control Panel\Appearance\New Schemes\Current Settings SaveAll\Sizes\0]

"Color #1"=dword:00984E00

"Color #13"=dword:00C56A31

"Color #15"=dword:00D8E9EC

"Color #16"=dword:0099A8AC

"Color #17"=dword:0099A8AC

"Color #19"=dword:00F8E4D8

"Color #2"=dword:00E35400

"Color #21"=dword:00646F71

"Color #22"=dword:00E2EFF1

"Color #27"=dword:00FF953D

"Color #28"=dword:00EBB99D

"Color #29"=dword:00C56A31

"Color #3"=dword:00DF967A

"Color #30"=dword:00D8E9EC

"Color #4"=dword:00FFFFFF

"Flat Menus"=dword:00000001

"Font #0"=hex(03):f3,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,\

00,00,00,00,01,00,00,00,00,54,00,72,00,65,00,62,00,75,00,63,00,68,00,65,00,\

74,00,20,00,4d,00,53,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Font #1"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,\

00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Font #2"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\

00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Font #3"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\

00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Font #4"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\

00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Font #5"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\

00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"Size #1"=hex(0b):11,00,00,00,00,00,00,00

"Size #2"=hex(0b):11,00,00,00,00,00,00,00

"Size #4"=hex(0b):19,00,00,00,00,00,00,00

"Size #5"=hex(0b):11,00,00,00,00,00,00,00

"Size #6"=hex(0b):11,00,00,00,00,00,00,00

"Size #8"=hex(0b):13,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Control Panel\Colors]

"ActiveTitle"="10 36 106"

"Background"="58 110 165"

"ButtonDkShadow"="64 64 64"

"ButtonFace"="212 208 200"

"ButtonLight"="212 208 200"

"ButtonShadow"="128 128 128"

"GradientActiveTitle"="166 202 240"

"GradientInactiveTitle"="192 192 192"

"GrayText"="128 128 128"

"Hilight"="10 36 106"

"InactiveTitle"="128 128 128"

"InactiveTitleText"="212 208 200"

"Menu"="212 208 200"

[HKEY_CURRENT_USER\Control Panel\Cursors]

@="Windows default"

"Scheme Source"=dword:00000002

[HKEY_CURRENT_USER\Control Panel\Desktop]

"ScreenSaveActive"="1"

"SCRNSAVE.EXE"="C:\\WINDOWS\\System32\\logon.scr"

"UserPreferencesMask"=hex(03):9e,3e,05,80

[HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]

"BorderWidth"="-15"

"CaptionFont"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,\

00,00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,65,\

00,74,00,20,00,4d,00,53,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

"CaptionHeight"="-270"

"IconFont"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\

00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,07,00,\

00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4c,00,00,00,8b,00,00,00,8b,\

00,00,00,01,00,00,00,f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00

"MenuHeight"="-270"

"ScrollHeight"="-240"

"ScrollWidth"="-240"

"SmCaptionHeight"="-225"

"SmCaptionWidth"="-180"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]

"Position"=hex(03):2c,00,00,00,9c,00,00,00,00,00,00,00,64,03,00,00,e4,02,00,\

00,00,00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Skins]

"CurrentSkin"="C:\\Program Files\\Windows Media Player\\Skins\\Windows Classic.wmz"

[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences]

"ShellStyleFile"=" "

[HKEY_CURRENT_USER\Software\Microsoft\Plus!\Themes\Current]

@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\

25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,00,54,\

00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,\

73,00,20,00,43,00,6c,00,61,00,73,00,73,00,69,00,63,00,2e,00,74,00,68,00,65,\

00,6d,00,65,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

"ThemeActive"="0"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme]

"DisplayName of Modified"=""

"ThemeFile"=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\

00,74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,\

5c,00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,\

00,77,00,73,00,20,00,43,00,6c,00,61,00,73,00,73,00,69,00,63,00,2e,00,74,00,\

68,00,65,00,6d,00,65,00,00,00

Link to comment
Share on other sites

First I need to state that I am pretty much a rookie with trying to do this type of installation. Second this is nowhere near my production environment, strictly bench testing.

I'm a little confused by this ...

Attached is the reg file that we use. But since that is only applied to the current users hive and not the default user's hive

C:/Documents and Settings/Default User/ntuser.dat

The file that I included was from a registry compare before I changed themes and then after. Really hadn't looked for trash yet. Right now I am trying to learn the mechanics of doing this type of settings change considering the environment/tools that I have to work in/with. The goal being that I want to setup all of the configurations, some require registry entries others do not, make them so I do not have to touch the machine and have them apply to every user that logs on to that machine. The primary issues that I am having (besides my newbieness to this) is learning how to apply registry edits that are found in the HKEY_CURRENT_USER section of the registry and having them apply to the next user that logs in. I understand that HKEY_CURRENT_USER applies only to the current user logged in but I was under the impression that if the C:/Documents and Settings/Default User/ntuser.dat was loaded into the registry, with the changes to the registry made at that time, and then unloading the hive that the changes to the registry would then be returned to the C:/Documents and Settings/Default User/ntuser.dat file and there after those changes would be applied to the next user that logged into the machine. I do not have the ability to do an unattended install of Windows from the original installers I must do it from the Altiris Hardware Independent Image that our county has developed. Thanks.

d

Edited by roontoon
Link to comment
Share on other sites

Your usage of reg load is good but you're missing the basis. Windows use many registry hives for the different sections of the registry as explained there.

As your reg file contains sections going in the different hives you need to load each needed hives the edit the reg to make it point to the right sections:

For example, if you need to set/delete reg entries in the system hive, the software hive and the default user hive of the image, you'll have to do the following (the image would be mounted c:\prep_image so the windows dir of the image would be c:\prep_image\windows):

(i'll use HKLM as mount point because it's more logical from my personal point of view).


rem mounting system hive
reg load HKLM\mounted_sys c:\prep_image\windows\system32\config\system
rem mounting software hive
reg load HKLM\mounted_soft c:\prep_image\windows\system32\config\software
rem mounting default user hive
reg load HKLM\mounted_def_u c:\prep_image\windows\system32\config\default

I didn't add the rest of the batch that you'll figure easily.

Your reg file would then look like:


Windows Registry Editor Version 5.00
; Comparing: 1/14/2013 12:44:08 P - 1/14/2013 12:45:21 P

; DELETE section

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Services\swmidi\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Services\sysaudio\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Services\swmidi\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Services\sysaudio\Enum]
"0" = -
[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"ColorName" = -
"DllName" = -
"LastUserLangID" = -
"LoadedBefore" = -
"SizeName" = -
[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\Program Files\ElcomSoft\Advanced Registry Tracer\Art.exe" = -

; ADD section

[HKEY_LOCAL_MACHINE\Mounted_soft\Microsoft\Cryptography\RNG]
"Seed"=hex(03):e8,53,eb,84,9c,95,c8,96,04,ca,4e,9f,e5,6a,b6,9d,e6,b0,5a,50,\
23,8f,0c,07,da,dc,11,86,3f,8c,66,55,90,4f,45,4f,fa,49,6d,6f,0e,f3,a4,7d,1b,\
a1,3c,94,1a,d7,9e,60,24,73,d0,ac,06,01,9e,1d,ae,15,bf,06,0f,9f,80,cb,76,1b,\
19,17,e0,c8,f0,a1,bd,7e,ae,d3

[HKEY_LOCAL_MACHINE\Mounted_soft\Microsoft\Windows\CurrentVersion\BITS]
"StateIndex"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_soft\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"DownloadExpirationTime"="2013-01-16 17:44:39"
"NextDetectionTime"="2013-01-15 11:32:22"

[HKEY_LOCAL_MACHINE\Mounted_soft\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect]
"LastSuccessTime"="2013-01-14 17:44:29"

[HKEY_LOCAL_MACHINE\Mounted_soft\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Download]
"LastSuccessTime"="2013-01-14 17:45:26"

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\#SAD0\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\#SAD1\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\#SAD2\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Enum\Root\LEGACY_BITS\0000\Control]
"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Services\BITS]
"Start"=dword:00000002

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Services\Dhcp\Parameters]
"{749ED02F-B864-41C7-977F-DFFA405B05CD}"=hex(03):2e,00,00,00,00,00,00,00,01,\
00,00,00,00,00,00,00,b8,bf,fe,50,08,00,00,00,2c,00,00,00,00,00,00,00,08,00,\
00,00,00,00,00,00,b8,bf,fe,50,a8,fe,01,66,a8,fe,01,68,06,00,00,00,00,00,00,\
00,08,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,a8,fe,01,65,03,00,00,00,\
00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,01,0f,00,00,00,00,\
00,00,00,0b,00,00,00,00,00,00,00,b8,bf,fe,50,6d,79,73,64,68,63,2e,6e,65,74,\
00,00,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,ff,ff,e0,\
00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,\
35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,b8,bf,fe,50,05,00,00,00,fc,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,af,43,f4,50,51,00,00,00,00,00,\
00,00,03,00,00,00,00,00,00,00,b8,bf,fe,50,00,ff,ff,00,33,00,00,00,00,00,00,\
00,04,00,00,00,00,00,00,00,b8,bf,fe,50,00,0a,8c,00,3b,00,00,00,00,00,00,00,\
04,00,00,00,00,00,00,00,b8,bf,fe,50,00,09,3a,80,3a,00,00,00,00,00,00,00,04,\
00,00,00,00,00,00,00,b8,bf,fe,50,00,05,46,00

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Services\swmidi\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\ControlSet001\Services\sysaudio\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\#SAD0\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Control\DeviceClasses\{d6c5066e-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\#SAD1\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Control\DeviceClasses\{d6c50671-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\#SAD2\Control]
"Linked"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Control\DeviceClasses\{d6c50674-72c1-11d2-9755-0000f8004788}\##?#SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}\Control]
"ReferenceCount"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Enum\Root\LEGACY_BITS\0000\Control]
"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Services\BITS]
"Start"=dword:00000002

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Services\Dhcp\Parameters]
"{749ED02F-B864-41C7-977F-DFFA405B05CD}"=hex(03):2e,00,00,00,00,00,00,00,01,\
00,00,00,00,00,00,00,b8,bf,fe,50,08,00,00,00,2c,00,00,00,00,00,00,00,08,00,\
00,00,00,00,00,00,b8,bf,fe,50,a8,fe,01,66,a8,fe,01,68,06,00,00,00,00,00,00,\
00,08,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,a8,fe,01,65,03,00,00,00,\
00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,01,0f,00,00,00,00,\
00,00,00,0b,00,00,00,00,00,00,00,b8,bf,fe,50,6d,79,73,64,68,63,2e,6e,65,74,\
00,00,01,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,ff,ff,e0,\
00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,b8,bf,fe,50,0a,05,60,19,\
35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,b8,bf,fe,50,05,00,00,00,fc,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,af,43,f4,50,51,00,00,00,00,00,\
00,00,03,00,00,00,00,00,00,00,b8,bf,fe,50,00,ff,ff,00,33,00,00,00,00,00,00,\
00,04,00,00,00,00,00,00,00,b8,bf,fe,50,00,0a,8c,00,3b,00,00,00,00,00,00,00,\
04,00,00,00,00,00,00,00,b8,bf,fe,50,00,09,3a,80,3a,00,00,00,00,00,00,00,04,\
00,00,00,00,00,00,00,b8,bf,fe,50,00,05,46,00

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Services\swmidi\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\Mounted_sys\CurrentControlSet\Services\sysaudio\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes]
@=".current"

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\.Default\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,44,00,69,00,6e,00,67,00,2e,00,77,00,\
61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\DeviceConnect\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\
72,00,65,00,20,00,49,00,6e,00,73,00,65,00,72,00,74,00,2e,00,77,00,61,00,76,\
00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\
72,00,65,00,20,00,52,00,65,00,6d,00,6f,00,76,00,65,00,2e,00,77,00,61,00,76,\
00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\DeviceFail\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,48,00,61,00,72,00,64,00,77,00,61,00,\
72,00,65,00,20,00,46,00,61,00,69,00,6c,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\LowBatteryAlarm\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,42,00,61,00,74,00,74,00,65,00,72,00,\
79,00,20,00,4c,00,6f,00,77,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\MailBeep\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,4e,00,6f,00,74,00,69,00,66,00,79,00,\
2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\SystemAsterisk\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,45,00,72,00,72,00,6f,00,72,00,2e,00,\
77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\SystemExclamation\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,45,00,78,00,63,00,6c,00,61,00,6d,00,\
61,00,74,00,69,00,6f,00,6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\SystemExit\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,53,00,68,00,75,00,74,00,64,00,6f,00,\
77,00,6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\SystemHand\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,43,00,72,00,69,00,74,00,69,00,63,00,\
61,00,6c,00,20,00,53,00,74,00,6f,00,70,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\SystemNotification\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,42,00,61,00,6c,00,6c,00,6f,00,6f,00,\
6e,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\SystemStart\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,53,00,74,00,61,00,72,00,74,00,75,00,\
70,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\WindowsLogoff\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,4c,00,6f,00,67,00,6f,00,66,00,66,00,\
20,00,53,00,6f,00,75,00,6e,00,64,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\.Default\WindowsLogon\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,4c,00,6f,00,67,00,6f,00,6e,00,20,00,\
53,00,6f,00,75,00,6e,00,64,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,58,00,50,00,20,00,52,00,65,00,63,00,79,00,63,00,6c,00,\
65,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\AppEvents\Schemes\Apps\Explorer\Navigating\.Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,6d,00,65,00,64,00,69,00,61,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,4e,00,61,00,76,00,69,00,67,00,61,00,74,00,69,00,6f,00,\
6e,00,20,00,53,00,74,00,61,00,72,00,74,00,2e,00,77,00,61,00,76,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Control Panel\Appearance]
"Current"="Windows Standard"
"CustomColors"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"NewCurrent"="Windows Standard"

[HKEY_LOCAL_MACHINE\mounted_def_u\Control Panel\Appearance\New Schemes\Current Settings SaveAll\Sizes\0]
"Color #1"=dword:00984E00
"Color #13"=dword:00C56A31
"Color #15"=dword:00D8E9EC
"Color #16"=dword:0099A8AC
"Color #17"=dword:0099A8AC
"Color #19"=dword:00F8E4D8
"Color #2"=dword:00E35400
"Color #21"=dword:00646F71
"Color #22"=dword:00E2EFF1
"Color #27"=dword:00FF953D
"Color #28"=dword:00EBB99D
"Color #29"=dword:00C56A31
"Color #3"=dword:00DF967A
"Color #30"=dword:00D8E9EC
"Color #4"=dword:00FFFFFF
"Flat Menus"=dword:00000001
"Font #0"=hex(03):f3,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,\
00,00,00,00,01,00,00,00,00,54,00,72,00,65,00,62,00,75,00,63,00,68,00,65,00,\
74,00,20,00,4d,00,53,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #1"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #2"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #3"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #4"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Font #5"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Size #1"=hex(0b):11,00,00,00,00,00,00,00
"Size #2"=hex(0b):11,00,00,00,00,00,00,00
"Size #4"=hex(0b):19,00,00,00,00,00,00,00
"Size #5"=hex(0b):11,00,00,00,00,00,00,00
"Size #6"=hex(0b):11,00,00,00,00,00,00,00
"Size #8"=hex(0b):13,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Control Panel\Colors]
"ActiveTitle"="10 36 106"
"Background"="58 110 165"
"ButtonDkShadow"="64 64 64"
"ButtonFace"="212 208 200"
"ButtonLight"="212 208 200"
"ButtonShadow"="128 128 128"
"GradientActiveTitle"="166 202 240"
"GradientInactiveTitle"="192 192 192"
"GrayText"="128 128 128"
"Hilight"="10 36 106"
"InactiveTitle"="128 128 128"
"InactiveTitleText"="212 208 200"
"Menu"="212 208 200"

[HKEY_LOCAL_MACHINE\mounted_def_u\Control Panel\Cursors]
@="Windows default"
"Scheme Source"=dword:00000002

[HKEY_LOCAL_MACHINE\mounted_def_u\Control Panel\Desktop]
"ScreenSaveActive"="1"
"SCRNSAVE.EXE"="C:\\WINDOWS\\System32\\logon.scr"
"UserPreferencesMask"=hex(03):9e,3e,05,80

[HKEY_LOCAL_MACHINE\mounted_def_u\Control Panel\Desktop\WindowMetrics]
"BorderWidth"="-15"
"CaptionFont"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,bc,02,\
00,00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,65,\
00,74,00,20,00,4d,00,53,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"CaptionHeight"="-270"
"IconFont"=hex(03):f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,\
00,00,00,00,01,00,00,00,00,54,00,61,00,68,00,6f,00,6d,00,61,00,00,00,07,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4c,00,00,00,8b,00,00,00,8b,\
00,00,00,01,00,00,00,f5,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00
"MenuHeight"="-270"
"ScrollHeight"="-240"
"ScrollWidth"="-240"
"SmCaptionHeight"="-225"
"SmCaptionWidth"="-180"

[HKEY_LOCAL_MACHINE\mounted_def_u\SessionInformation]
"ProgramCount"=dword:00000004

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Position"=hex(03):2c,00,00,00,9c,00,00,00,00,00,00,00,64,03,00,00,e4,02,00,\
00,00,00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\MediaPlayer\Player\Skins]
"CurrentSkin"="C:\\Program Files\\Windows Media Player\\Skins\\Windows Classic.wmz"

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\MediaPlayer\Preferences]
"ShellStyleFile"=" "

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Plus!\Themes\Current]
@=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,\
25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,00,54,\
00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,\
73,00,20,00,43,00,6c,00,61,00,73,00,73,00,69,00,63,00,2e,00,74,00,68,00,65,\
00,6d,00,65,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew]
"~reserved~"=hex(03):18,00,00,00,01,00,01,00,dd,07,01,00,01,00,0e,00,0c,00,\
2c,00,33,00,4b,01
"Bitmap Image"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,69,00,\
74,00,6d,00,61,00,70,00,20,00,49,00,6d,00,61,00,67,00,65,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,\
00,62,00,6d,00,70,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,50,00,61,00,69,00,\
6e,00,74,00,2e,00,50,00,69,00,63,00,74,00,75,00,72,00,65,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00
"Briefcase"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,72,00,69,\
00,65,00,66,00,63,00,61,00,73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,00,\
62,00,66,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,42,00,72,00,69,00,65,\
00,66,00,63,00,61,00,73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,01,00,\
00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"Compressed (zipped) Folder"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,43,00,6f,00,6d,00,70,00,72,00,65,00,73,00,73,00,65,00,64,00,20,00,28,00,\
7a,00,69,00,70,00,70,00,65,00,64,00,29,00,20,00,46,00,6f,00,6c,00,64,00,65,\
00,72,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,2e,00,7a,00,69,00,70,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,43,\
00,6f,00,6d,00,70,00,72,00,65,00,73,00,73,00,65,00,64,00,46,00,6f,00,6c,00,\
64,00,65,00,72,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Language"=dword:00000409
"Microsoft Office Access 2007 Database"=hex(03):00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,\
4f,00,66,00,66,00,69,00,63,00,65,00,20,00,41,00,63,00,63,00,65,00,73,00,73,\
00,20,00,32,00,30,00,30,00,37,00,20,00,44,00,61,00,74,00,61,00,62,00,61,00,\
73,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,2e,00,61,00,63,00,63,00,64,00,62,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,41,00,63,00,63,00,65,00,73,00,73,00,2e,00,41,00,70,00,70,00,6c,00,\
69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,2e,00,31,00,32,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office Excel Worksheet"=hex(03):00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,\
66,00,66,00,69,00,63,00,65,00,20,00,45,00,78,00,63,00,65,00,6c,00,20,00,57,\
00,6f,00,72,00,6b,00,73,00,68,00,65,00,65,00,74,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,2e,00,78,00,6c,00,73,00,78,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,45,00,78,00,63,00,65,00,6c,00,2e,00,53,00,68,00,65,00,65,00,74,00,2e,00,\
31,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office PowerPoint Presentation"=hex(03):00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,\
00,4f,00,66,00,66,00,69,00,63,00,65,00,20,00,50,00,6f,00,77,00,65,00,72,00,\
50,00,6f,00,69,00,6e,00,74,00,20,00,50,00,72,00,65,00,73,00,65,00,6e,00,74,\
00,61,00,74,00,69,00,6f,00,6e,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,2e,00,70,00,70,00,74,00,78,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,50,00,6f,00,77,00,65,00,72,00,50,00,6f,00,69,00,6e,00,74,00,2e,\
00,53,00,68,00,6f,00,77,00,2e,00,31,00,32,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office Publisher Document"=hex(03):00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,\
00,66,00,66,00,69,00,63,00,65,00,20,00,50,00,75,00,62,00,6c,00,69,00,73,00,\
68,00,65,00,72,00,20,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,2e,00,70,00,75,00,62,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,50,00,75,00,62,00,6c,00,69,00,73,00,68,00,65,00,72,00,2e,00,44,00,6f,\
00,63,00,75,00,6d,00,65,00,6e,00,74,00,2e,00,31,00,32,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Microsoft Office Word Document"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,20,00,4f,00,66,\
00,66,00,69,00,63,00,65,00,20,00,57,00,6f,00,72,00,64,00,20,00,44,00,6f,00,\
63,00,75,00,6d,00,65,00,6e,00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,2e,00,64,00,6f,00,63,00,78,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
57,00,6f,00,72,00,64,00,2e,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,\
00,2e,00,31,00,32,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"Text Document"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,54,00,65,\
00,78,00,74,00,20,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
2e,00,74,00,78,00,74,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,74,00,78,00,74,\
00,66,00,69,00,6c,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00
"Wave Sound"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,57,00,61,00,\
76,00,65,00,20,00,53,00,6f,00,75,00,6e,00,64,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,2e,\
00,77,00,61,00,76,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,73,00,6f,00,75,00,\
6e,00,64,00,72,00,65,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count]
"HRZR_EHAPCY"=hex(03):3d,00,00,00,06,00,00,00,c0,2b,e4,da,7e,f2,cd,01
"HRZR_EHAPCY:qrfx.pcy"=hex(03):3d,00,00,00,06,00,00,00,c0,2b,e4,da,7e,f2,cd,01

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\CurrentVersion\ThemeManager]
"ThemeActive"="0"

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\CurrentVersion\Themes\LastTheme]
"DisplayName of Modified"=""
"ThemeFile"=hex(02):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,\
5c,00,54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,\
00,77,00,73,00,20,00,43,00,6c,00,61,00,73,00,73,00,69,00,63,00,2e,00,74,00,\
68,00,65,00,6d,00,65,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\Shell\Bags\1\Desktop]
"ItemPos1024x768(1)"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
17,00,00,00,02,00,00,00,14,00,1f,48,ba,8f,0d,45,25,ad,d0,11,98,a8,08,00,36,\
1b,11,03,17,00,00,00,54,00,00,00,14,00,1f,50,e0,4f,d0,20,ea,3a,69,10,a2,d8,\
08,00,2b,30,30,9d,17,00,00,00,a6,00,00,00,14,00,1f,58,60,2c,8d,20,ea,3a,69,\
10,a2,d7,08,00,2b,30,30,9d,17,00,00,00,f8,00,00,00,14,00,1f,60,40,f0,5f,64,\
81,50,1b,10,9f,08,00,aa,00,2f,95,4e,17,00,00,00,4a,01,00,00,14,00,1f,68,80,\
53,1c,87,a0,42,69,10,a2,ea,08,00,2b,30,30,9d,17,00,00,00,9c,01,00,00,50,00,\
3a,00,5f,06,00,00,2b,41,55,61,20,00,46,49,52,53,54,43,7e,31,2e,4c,4e,4b,00,\
00,34,00,03,00,04,00,ef,be,2b,41,55,61,2e,42,8b,8c,14,00,00,00,46,00,69,00,\
72,00,73,00,74,00,43,00,6c,00,61,00,73,00,73,00,2e,00,6c,00,6e,00,6b,00,00,\
00,1c,00,17,00,00,00,ee,01,00,00,40,00,3a,00,e2,07,00,00,71,3d,7d,79,20,00,\
48,43,50,53,2e,6c,6e,6b,00,00,28,00,03,00,04,00,ef,be,71,3d,7d,79,2e,42,8b,\
8c,14,00,00,00,48,00,43,00,50,00,53,00,2e,00,6c,00,6e,00,6b,00,00,00,18,00,\
17,00,00,00,40,02,00,00,64,00,3a,00,16,03,00,00,ab,3c,b9,8d,20,00,57,49,4e,\
44,4f,57,7e,31,2e,4c,4e,4b,00,00,48,00,03,00,04,00,ef,be,5c,3d,62,80,2e,42,\
8b,8c,14,00,00,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,20,00,4d,00,65,\
00,64,00,69,00,61,00,20,00,50,00,6c,00,61,00,79,00,65,00,72,00,2e,00,6c,00,\
6e,00,6b,00,00,00,1c,00,87,02,00,00,02,00,00,00,48,00,31,00,00,00,00,00,2e,\
42,af,8c,12,00,44,45,46,41,55,4c,7e,31,00,00,30,00,03,00,04,00,ef,be,2e,42,\
ab,8c,2e,42,af,8c,14,00,00,00,44,00,65,00,66,00,61,00,75,00,6c,00,74,00,20,\
00,55,00,73,00,65,00,72,00,00,00,18,00,b3,00,00,00,9c,01,00,00,3c,00,32,00,\
65,95,1c,00,2e,42,66,8d,20,00,61,72,74,2e,7a,69,70,00,26,00,03,00,04,00,ef,\
be,2e,42,61,8d,2e,42,66,8d,14,00,00,00,61,00,72,00,74,00,2e,00,7a,00,69,00,\
70,00,00,00,16,00,4f,01,00,00,54,00,00,00,30,00,31,00,00,00,00,00,2e,42,6a,\
8d,10,00,61,72,74,00,1e,00,03,00,04,00,ef,be,2e,42,69,8d,2e,42,6a,8d,14,00,\
00,00,61,00,72,00,74,00,00,00,12,00,17,00,00,00,92,02,00,00,6c,00,32,00,7f,\
03,00,00,2e,42,75,8d,20,00,41,44,56,41,4e,43,7e,31,2e,4c,4e,4b,00,00,50,00,\
03,00,04,00,ef,be,2e,42,75,8d,2e,42,75,8d,14,00,00,00,41,00,64,00,76,00,61,\
00,6e,00,63,00,65,00,64,00,20,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,\
79,00,20,00,54,00,72,00,61,00,63,00,65,00,72,00,2e,00,6c,00,6e,00,6b,00,00,\
00,1c,00,17,00,00,00,92,02,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\ShellNoRoam\Bags\212\Shell]
"Col"=dword:FFFFFFFF
"ColInfo"=hex(03):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,\
fd,0f,00,06,00,28,00,10,00,34,00,48,00,00,00,00,00,01,00,00,00,02,00,00,00,\
03,00,00,00,04,00,00,00,05,00,00,00,b4,00,60,00,78,00,78,00,b4,00,b4,00,00,\
00,00,00,01,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00
"Mode"=dword:00000006
"ScrollPos1024x768(1).x"=dword:00000000
"ScrollPos1024x768(1).y"=dword:00000000
"Sort"=dword:00000000
"SortDir"=dword:00000001

[HKEY_LOCAL_MACHINE\mounted_def_u\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@C:\\WINDOWS\\system32\\ieframe.dll.mui,-880"="Internet Explorer"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-8964"="Recycle Bin"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-9216"="My Computer"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-9217"="My Network Places"
"@C:\\WINDOWS\\system32\\SHELL32.dll,-9227"="My Documents"
"@shell32.dll,-31233"="File and Folder Tasks"
"@shell32.dll,-31236"="Make a new folder"
"@shell32.dll,-31260"="Publish this folder to the Web"
"@shell32.dll,-31272"="Other Places"
"@shell32.dll,-31274"="Details"
"@shell32.dll,-31374"="Share this folder"
"@themeui.dll,-2015"="More themes online..."
"@themeui.dll,-2016"="Windows Classic"
"@themeui.dll,-2017"="Windows XP"
"@themeui.dll,-2019"="Normal"
"@themeui.dll,-2020"="Large"
"@themeui.dll,-2021"="Extra Large"
"@themeui.dll,-2037"="{Tahoma, 8 pt}"
"@themeui.dll,-2038"="{Tahoma, 8 pt}"
"@themeui.dll,-2039"="{Tahoma, 8 pt}"
"@themeui.dll,-2040"="{Tahoma, 8 pt}"
"@themeui.dll,-2041"="{Tahoma, 8 pt}"
"@themeui.dll,-2042"="{Tahoma, 8 pt}"
"@themeui.dll,-2043"="Windows default"
"@themeui.dll,-850"="Brick"
"@themeui.dll,-851"="Desert"
"@themeui.dll,-852"="Eggplant"
"@themeui.dll,-853"="High Contrast #1"
"@themeui.dll,-856"="High Contrast #2"
"@themeui.dll,-859"="High Contrast Black"
"@themeui.dll,-862"="High Contrast White"
"@themeui.dll,-865"="Lilac"
"@themeui.dll,-867"="Maple"
"@themeui.dll,-868"="Marine (high color)"
"@themeui.dll,-869"="Plum (high color)"
"@themeui.dll,-870"="Pumpkin"
"@themeui.dll,-871"="Wheat"
"@themeui.dll,-872"="Rainy Day"
"@themeui.dll,-873"="Red, White, and Blue (VGA)"
"@themeui.dll,-874"="Rose"
"@themeui.dll,-876"="Slate"
"@themeui.dll,-877"="Spruce"
"@themeui.dll,-878"="Storm (VGA)"
"@themeui.dll,-879"="Teal (VGA)"
"@themeui.dll,-880"="Windows Classic"
"@themeui.dll,-883"="Windows Standard"
"LangID"=hex(03):09,04

Link to comment
Share on other sites

First I need to state that I am pretty much a rookie with trying to do this type of installation. Second this is nowhere near my production environment, strictly bench testing.

No problem.

No help with the use or REG ? The registry issues while welcome are not the core of my question. Thanks.

Have patience. Speaking for myself, since the time I posted that reply I had to dig out from under the latest blizzard and I'm typing with jello arms. :lol: I've been out of enterprise IT for a long time, and back then during the WinXP era I saw mostly initial setups, sysprep, full image deployment ( with a lot of sneakernet patching as well. Hey, everything was still pretty new ) So I hope some current enterprise IT experts come in here since I guarantee they have an updated bag of tricks that will make your problems go away.

As I understand it, you are using REG.EXE to mount the "default user" hive and are applying edits from your .reg script to this hive and then unloading the hive. But I am still unclear on something. Are you talking about existing users that log into the network or for new users? I could be wrong but I always though that "default user" is applied only when the user is first created, and just once. If that assumption is correct then that registry script ( and my commented one ) are aiming at the wrong keys. Follow this example ...

If you were manually to mount that registry and give it a temporary name ( REGEDIT, select HKEY_USERS, Load Hive, select that default ntuser.dat, prompted to give it a name, enter #_Temp_Default_# ), now you can apply that script if you edit the key names to match that temporary names like this ...

HKEY_USERS\S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-500

... to ...

HKEY_USERS\#_Temp_Default_#

So this ...

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

... becomes this ...

HKEY_USERS\#_Temp_Default_#\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

Those "user" keys would then be imported into the temporary mounted registry hive and it could then be unloaded. What I said earlier about using that specific SID with the -500 is still correct. It was targeting the user hive of a specific user, actually a built-in administrator.

This should be able to be done with REG.EXE ( don't know the commandline options off the top of my head ) but you will need to specify a temp name for the hive and re-use that identical temp name in your script.

But I am still not sure about "default user" at all. I believe this might need to be ALL USERS. But I will step out here and let current sysadmins help you. I can shed some light on lots of registry keys and functions if you need it.

Here are some references that might be of use ...

NOTE: I see that allen2 has explained this as well while I was typing this.

EDIT: note that he showed the commandline parameters ...

REG.EXE LOAD temporary-key-name hive-to-mount

so, that temporary-key-name is what you will need to substitute in your script.

Edited by CharlotteTheHarlot
Link to comment
Share on other sites

HKEY_USERS\S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-500

... to ...

HKEY_USERS\#_Temp_Default_#

So this ...

[HKEY_USERS\S-1-5-21-2382118143-2802985254-1031643562-500\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

... becomes this ...

HKEY_USERS\#_Temp_Default_#\Software\Microsoft\Windows\CurrentVersion\ThemeManager]

LIght bulb goes on and starts to glow..... Wasn't renaming the keys with the temphive name. Will try this first.

In my environment after we image with our hardware independent image we have a clean machine with just the Admin user so the only profiles are the admin profile, the all users profile and the default profile. So I am not concerned with any other profile in terms of changing any settings. My main problem has been with changing the default user's profile to reflect any current_user keys. So with that in mind I will try a single change:

A typical change along with many others is the change of the default website

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.sdhc.k12.fl.us/"

So as I currently understand it I would open the default user hive with

REG LOAD HKU\TempHive "C:\Documents and Settings\Default User\ntuser.dat"

timeout /T 1 /NOBREAK

RegEdit.exe /s "C:\test.reg"

timeout /T 1 /NOBREAK

REG UNLOAD HKU\TempHive

but in my .reg file I will need to edit it so it reads as follows:

Windows Registry Editor Version 5.00

[HKEY_USERS\TempHive\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.sdhc.k12.fl.us/"

THANKS THANKS THANKS!!!!! will report back here later on.

d

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...