[Software\Microsoft\Windows NT\CurrentVersion]
"SubVersionNumber"=REG_SZ:
"CurrentBuild"=REG_SZ:1.511.1 () (Obsolete data - do not use)
"InstallDate"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1141999003
"ProductName"=REG_SZ:Microsoft Windows XP
"RegDone"=REG_SZ:
"RegisteredOrganization"=REG_SZ:
"RegisteredOwner"=REG_SZ:XQE
"SoftwareType"=REG_SZ:SYSTEM
"CurrentVersion"=REG_SZ:5.1
"CurrentBuildNumber"=REG_SZ:2600
"BuildLab"=REG_SZ:2600.xpsp_sp2_gdr.050301-1519
"CurrentType"=REG_SZ:Uniprocessor Free
"CSDVersion"=REG_SZ:Service Pack 2
"SystemRoot"=REG_SZ:C:\WINDOWS
"PathName"=REG_SZ:C:\WINDOWS
"ProductId"=REG_SZ:ID要保密
"DigitalProductId"=REG_BINARY:?
"LicenseInfo"=REG_BINARY:
"ProgramFilesDir"=REG_SZ:
"CommonFilesDir"=REG_SZ:
"DevicePath"=REG_SZ:
"OtherDevicePath"=REG_SZ:
"MediaPath"=REG_SZ:
"OldWinDir"=REG_SZ:
"WallPaperDir"=REG_SZ:
"SourcePath"=REG_SZ:
[Software\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"CreateFirstRunRp"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"DSMin"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:200
"DSMax"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:400
"RPSessionInterval"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:0
"RPGlobalInterval"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:86400
"RPLifeInterval"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:7776000
"CompressionBurst"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:60
"TimerInterval"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:120
"DiskPercent"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:12
"ThawInterval"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:900
"DisableSR"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"RestoreDiskSpaceError"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:0
[Software\Microsoft\Windows NT\CurrentVersion\SystemRestore\Cfg]
"DiskPercent"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:12
"MachineGuid"=REG_SZ:
[Software\Microsoft\Windows NT\CurrentVersion\SystemRestore\SnapshotCallbacks]
""=REG_SZ:
[System\CurrentControlSet\Services\SR]
"Type"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:2
"Start"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:4
"ErrorControl"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"Tag"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:4
"ImagePath"=REG_EXPAND_SZ:\SystemRoot\system32\DRIVERS\sr.sys
"DisplayName"=REG_SZ:System Restore Filter Driver
"Group"=REG_SZ:FSFilter System Recovery
[System\CurrentControlSet\Services\SR\Parameters]
"FirstRun"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"DontBackup"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:0
"MachineGuid"=REG_SZ:
[System\CurrentControlSet\Services\SR\Security]
"Security"=REG_BINARY:
[System\CurrentControlSet\Services\SR\Enum]
"0"=REG_SZ:Root\LEGACY_SR\0000
"Count"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"NextInstance"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
[System\CurrentControlSet\Services\SRService]
"Type"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:32
"Start"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:2
"ErrorControl"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"ImagePath"=REG_EXPAND_SZ:%SystemRoot%\system32\svchost.exe -k netsvcs
"DisplayName"=REG_SZ:System Restore Service
"DependOnService"=REG_MULTI_SZ:RpcSs
"DependOnGroup"=REG_MULTI_SZ:
"
ObjectName"=REG_SZ:LocalSystem
"Description"=REG_SZ:
[System\CurrentControlSet\Services\SRService\Parameters]
"ServiceDll"=REG_EXPAND_SZ:C:\WINDOWS\system32\srsvc.dll
[System\CurrentControlSet\Services\SRService\Security]
"Security"=REG_BINARY:
[System\CurrentControlSet\Services\SRService\Enum]
"0"=REG_SZ:Root\LEGACY_SRSERVICE\0000
"Count"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
"NextInstance"=REG_DWORD or REG_DWORD_LITTLE_ENDIAN:1
[Software\Policies\Microsoft\Windows NT\SystemRestore]