[System]
RegWrite,HKLM,0x4,PE-SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinPE,SkipWaitForNetwork,1

RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP,NextInstance,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,Capabilities,0x0
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,Class,LegacyDriver
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,ClassGUID,{8ECC055D-047F-11D1-A537-0000F8753ED1}
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,ConfigFlags,0x0
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,DeviceDesc,"NativeWifi Filter"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,Legacy,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000,Service,NativeWifiP
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NATIVEWIFIP\0000\Control,ActiveService,NativeWifiP
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO,NextInstance,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,Capabilities,0x0
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,Class,LegacyDriver
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,ClassGUID,{8ECC055D-047F-11D1-A537-0000F8753ED1}
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,ConfigFlags,0x0
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,DeviceDesc,"NDIS Usermode I/O Protocol"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,Legacy,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000,Service,Ndisuio
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_NDISUIO\0000\Control,ActiveService,Ndisuio
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG,NextInstance,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,Service,tcpipreg
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,Legacy,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,ConfigFlags,0x20
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,Class,LegacyDriver
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,ClassGUID,{8ECC055D-047F-11D1-A537-0000F8753ED1}
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,DeviceDesc,"TCP/IP Registry Compatibility"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000,Capabilities,0x0
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_TCPIPREG\0000\Control,ActiveService,tcpipreg
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC\0000,Service,Wlansvc
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC\0000,Legacy,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC\0000,ConfigFlags,0x0
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC\0000,Class,LegacyDriver
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC\0000,ClassGUID,{8ECC055D-047F-11D1-A537-0000F8753ED1}
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC\0000,DeviceDesc,"@#$pSystemRoot#$p\System32\wlansvc.dll#$c-257"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Enum\Root\LEGACY_WLANSVC,NextInstance,0x1

RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\dot3svc,Description,"@#$pSystemRoot#$p\System32\dot3svc.dll#$c-1103"
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\dot3svc,DependOnService,RpcSs,Ndisuio,Eaphost
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\dot3svc,DisplayName,"@#$pSystemRoot#$p\System32\dot3svc.dll#$c-1102"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\dot3svc,ErrorControl,1
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\dot3svc,FailureActions,84,03,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\dot3svc,Group,TDI
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\dot3svc,ImagePath,"#$pSystemRoot#$p\System32\svchost.exe#$s-k#$sLocalSystemNetworkRestricted"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\dot3svc,ObjectName,localSystem
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\dot3svc,RequiredPrivileges,SeChangeNotifyPrivilege,SeImpersonatePrivilege,SeAuditPrivilege,SeTcbPrivilege
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\dot3svc,ServiceSidType,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\dot3svc,Start,3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\dot3svc,Type,32
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\dot3svc\Parameters,ServiceDll,#$pSystemRoot#$p\System32\dot3svc.dll
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\dot3svc\Parameters,ServiceDllUnloadOnStop,1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\dot3svc\Parameters,ServiceMain,Dot3SvcMain
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\eventlog\System\Mup,EventMessageFile,X:\Windows\System32\netevent.dll;X:\Windows\System32\iologmsg.dll
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\eventlog\System\rdbss,EventMessageFile,X:\Windows\System32\netevent.dll
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\eventlog\System\Workstation,EventMessageFile,X:\Windows\System32\netmsg.dll
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\LanmanServer,DependOnService,SamSS,Srv
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\LanmanServer,Description,"@#$pSystemRoot#$p\System32\srvsvc.dll#$c-101"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\LanmanServer,DisplayName,"@#$pSystemRoot#$p\System32\srvsvc.dll#$c-100"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer,ErrorControl,1
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer,FailureActions,80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,c0,d4,01,00,00,00,00,00,00,00,00,00
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\LanmanServer,ImagePath,"#$pSystemRoot#$p\System32\svchost.exe#$s-k#$snetsvcs"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\LanmanServer,ObjectName,LocalSystem
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\LanmanServer,RequiredPrivileges,SeChangeNotifyPrivilege,SeImpersonatePrivilege,SeAuditPrivilege,SeLoadDriverPrivilege
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer,ServiceSidType,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer,Start,2
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer,Type,32
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanServer\Aliases
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanServer\AutotunedParameters
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,AnonymousDescriptorsUpgraded,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,InteractiveDescriptorsRegenerated,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,PreviousAnonymousRestriction,0
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SessionSecurityDescriptorRegenerated,1
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcConfigInfo,01,00,04,80,a0,00,00,00,ac,00,00,00,00,00,00,00,14,00,00,00,02,00,8c,00,06,00,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,14,00,17,00,0f,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,18,00,03,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcConnection,01,00,04,80,7c,00,00,00,88,00,00,00,00,00,00,00,14,00,00,00,02,00,68,00,04,00,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,01,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,26,02,00,00,00,00,18,00,01,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcFile,01,00,04,80,64,00,00,00,70,00,00,00,00,00,00,00,14,00,00,00,02,00,50,00,03,00,00,00,00,00,18,00,11,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,11,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,11,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcServerDiskEnum,01,00,04,80,4c,00,00,00,58,00,00,00,00,00,00,00,14,00,00,00,02,00,38,00,02,00,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcSessionInfo,01,00,04,80,78,00,00,00,84,00,00,00,00,00,00,00,14,00,00,00,02,00,64,00,04,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,0b,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcShareAdminConnect,01,00,04,80,78,00,00,00,84,00,00,00,00,00,00,00,14,00,00,00,02,00,64,00,04,00,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,27,02,00,00,00,00,14,00,03,00,0f,00,01,01,00,00,00,00,00,05,04,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcShareAdminInfo,01,00,04,80,8c,00,00,00,98,00,00,00,00,00,00,00,14,00,00,00,02,00,78,00,05,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,02,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,02,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcShareChange,01,00,04,80,a4,00,00,00,b0,00,00,00,00,00,00,00,14,00,00,00,02,00,90,00,06,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,22,02,00,00,01,00,14,00,13,00,0f,00,01,01,00,00,00,00,00,05,07,00,00,00,00,00,14,00,13,00,0f,00,01,01,00,00,00,00,00,05,0b,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcShareConnect,01,00,04,80,8c,00,00,00,98,00,00,00,00,00,00,00,14,00,00,00,02,00,78,00,05,00,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,03,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,27,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcShareFileInfo,01,00,04,80,b4,00,00,00,c0,00,00,00,00,00,00,00,14,00,00,00,02,00,a0,00,07,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,00,00,14,00,02,00,00,00,01,01,00,00,00,00,00,05,14,00,00,00,00,00,14,00,02,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcSharePrintInfo,01,00,04,80,cc,00,00,00,d8,00,00,00,00,00,00,00,14,00,00,00,02,00,b8,00,08,00,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,26,02,00,00,00,00,18,00,13,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,01,00,00,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,07,00,00,00,00,00,14,00,02,00,00,00,01,01,00,00,00,00,00,05,14,00,00,00,00,00,14,00,02,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcStatisticsInfo,01,00,04,80,60,00,00,00,6c,00,00,00,00,00,00,00,14,00,00,00,02,00,4c,00,03,00,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,01,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,02,00,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\DefaultSecurity,SrvsvcTransportEnum,01,00,04,80,8c,00,00,00,98,00,00,00,00,00,00,00,14,00,00,00,02,00,78,00,05,00,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,17,00,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,14,00,17,00,0f,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,18,00,03,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,14,00,01,00,00,00,01,01,00,00,00,00,00,05,0b,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanServer\Linkage
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,AdjustedNullSessionPipes,3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,autodisconnect,15
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,EnableAuthenticateUserSharing,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,enableforcedlogoff,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,enablesecuritysignature,0
RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,Guid,91,a8,83,2f,79,0f,27,48,a1,eb,09,25,ec,d8,13,7f
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,Lmannounce,0
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,NullSessionPipes,
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,requiresecuritysignature,0
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,restrictnullsessaccess,1
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,ServiceDll,#$pSystemRoot#$p\System32\srvsvc.dll
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,ServiceDllUnloadOnStop,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\LanmanServer\Parameters,Size,1
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanServer\Shares
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanServer\ShareProviders
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanServer\Shares\Security
RegWrite,HKLM,0x0,PE-SYSTEM\ControlSet001\Services\LanmanWorkstation\Linkage
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\LanmanWorkstation\Parameters,OtherDomains,
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\MpsSvc,DisplayName,"Windows Firewall"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\MpsSvc,Start,4
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\NativeWifiP,DisplayName,"NativeWifi Filter"
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\NativeWifiP,ImagePath,system32\drivers\nwifi.sys
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\NativeWifiP,ErrorControl,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\NativeWifiP,Group,NDIS
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\NativeWifiP,Start,0x3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\NativeWifiP,Type,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\NativeWifiP\Enum,0,Root\LEGACY_NATIVEWIFIP\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\NativeWifiP\Enum,Count,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\NativeWifiP\Enum,NextInstance,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\NativeWifiP\Parameters,DefaultFilterSettings,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\NativeWifiP\Parameters\Adapters,"",""
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\NativeWifiP\Parameters\NdisAdapters,"",""
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Ndisuio,DisplayName,"NDIS Usermode I/O Protocol"
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\Ndisuio,ImagePath,system32\drivers\ndisuio.sys
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Ndisuio,ErrorControl,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Ndisuio,Group,NDIS
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Ndisuio,Start,0x3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Ndisuio,Type,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Ndisuio\Enum,0,Root\LEGACY_NDISUIO\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Ndisuio\Enum,Count,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Ndisuio\Enum,NextInstance,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Ndisuio\Parameters,DefaultFilterSettings,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Ndisuio\Parameters\Adapters,"",""
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Ndisuio\Parameters\NdisAdapters,"",""
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System,dot3svc-1,"V2.0|Action=Block|Dir=In|App=#$pSystemRoot#$p\System32\svchost.exe|Svc=dot3svc|Name=Block#$sany#$straffic#$sto#$sand#$sfrom#$sdot3svc|"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System,dot3svc-2,"V2.0|Action=Block|Dir=Out|App=#$pSystemRoot#$p\System32\svchost.exe|Svc=dot3svc|Name=Block#$sany#$straffic#$sto#$sand#$sfrom#$sdot3svc|"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv,Description,"@#$pSystemRoot#$p\System32\srvsvc.dll#$c-103"
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\srv,DependOnService,srv2
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv,DisplayName,"@#$pSystemRoot#$p\System32\srvsvc.dll#$c-102"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv,ErrorControl,1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv,Group,Network
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\srv,ImagePath,System32\DRIVERS\srv.sys
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv,Start,3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv,Type,2
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv\Enum,0,Root\LEGACY_SRV\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv\Enum,Count,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv\Enum,NextInstance,1
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\srv2,DependOnService,srvnet
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv2,Description,"@#$pSystemRoot#$p\System32\srvsvc.dll#$c-105"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv2,DisplayName,"@#$pSystemRoot#$p\System32\srvsvc.dll#$c-104"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv2,ErrorControl,1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv2,Group,Network
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\srv2,ImagePath,System32\DRIVERS\srv2.sys
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv2,Start,3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv2,Type,2
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srv2\Enum,0,Root\LEGACY_SRV2\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv2\Enum,Count,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srv2\Enum,NextInstance,1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srvnet,DisplayName,
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srvnet,ErrorControl,1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srvnet,Group,Network
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\srvnet,ImagePath,System32\DRIVERS\srvnet.sys
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srvnet,Start,3
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srvnet,Type,2
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\srvnet\Enum,0,Root\LEGACY_SRVNET\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srvnet\Enum,Count,1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\srvnet\Enum,NextInstance,1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\tcpipreg,DisplayName,"TCP/IP Registry Compatibility"
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\tcpipreg,ImagePath,"System32\drivers\tcpipreg.sys"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\tcpipreg,Description,"Provides compatibility for legacy applications which interact with TCP/IP through the registry. If this service is stopped, certain applications may have impaired functionality."
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\tcpipreg,ErrorControl,0x00000001
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\tcpipreg,Start,0x2
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\tcpipreg,Type,0x1
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\tcpipreg,DependOnService,tcpip
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\tcpipreg\Enum,0,Root\LEGACY_TCPIPREG\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\tcpipreg\Enum,Count,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\tcpipreg\Enum,NextInstance,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Wlansvc,DisplayName,"@#$pSystemRoot#$p\System32\wlansvc.dll#$c-257"
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\Wlansvc,ImagePath,"#$pSystemRoot#$p\system32\svchost.exe -k LocalSystemNetworkRestricted"
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Wlansvc,Description,"@#$pSystemRoot#$p\System32\wlansvc.dll#$c-258"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Wlansvc,ErrorControl,0x1
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Wlansvc,Group,TDI
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Wlansvc,Start,0x2
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Wlansvc,Type,0x20
RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\Wlansvc,DependOnService,nativewifip,RpcSs,Ndisuio
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Wlansvc,ObjectName,LocalSystem
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Wlansvc\Enum,0,Root\LEGACY_WLANSVC\0000
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Wlansvc\Enum,Count,0x1
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Wlansvc\Enum,NextInstance,0x1
RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\Wlansvc\Parameters,ServiceDll,"#$pSystemRoot#$p\System32\wlansvc.dll"
RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\Wlansvc\Parameters,ServiceDllUnloadOnStop,0x00000001
RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\Wlansvc\Parameters,ServiceMain,WlanSvcMain

If,%OS%,=,WinVista,Then
  RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\EapHost,DisplayName,"@#$psystemroot#$p\system32\eapsvc.dll#$c-1"
  RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\EapHost,ImagePath,"#$pSystemRoot#$p\System32\svchost.exe#$s-k#$snetsvcs"
  RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\EapHost,Description,"@#$psystemroot#$p\system32\eapsvc.dll#$c-2"
  RegWrite,HKLM,0x1,PE-SYSTEM\ControlSet001\Services\EapHost,ObjectName,localSystem
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost,ErrorControl,1
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost,Start,3
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost,Type,32
  RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\EapHost,DependOnService,RPCSS,KeyIso
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost,ServiceSidType,1
  RegWrite,HKLM,0x7,PE-SYSTEM\ControlSet001\Services\EapHost,RequiredPrivileges,SeTcbPrivilege,SeDebugPrivilege,SeImpersonatePrivilege
  RegWrite,HKLM,0x3,PE-SYSTEM\ControlSet001\Services\EapHost,FailureActions,80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,00,01,00,00,00,c0,d4,01,00,01,00,00,00,c0,d4,01,00,00,00,00,00,00,00,00,00
  RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\EapHost\Methods\311\254\14122\1,PeerFriendlyName,WscEapPeerMethod
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost\Methods\311\254\14122\1,Properties,8683520
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost\Methods\311\254\14122\1,PeerInvokeUsernameDialog,0
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost\Methods\311\254\14122\1,PeerInvokePasswordDialog,0
  RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\EapHost\Methods\311\254\14122\1,PeerDllPath,#$pSystemRoot#$p\System32\WscEapPr.dll
  RegWrite,HKLM,0x2,PE-SYSTEM\ControlSet001\Services\EapHost\Parameters,ServiceDll,#$pSystemRoot#$p\System32\eapsvc.dll
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost\Parameters,ServiceDllUnloadOnStop,1
  RegWrite,HKLM,0x4,PE-SYSTEM\ControlSet001\Services\EapHost\Parameters,PeerInstalled,1
End
