Lines Matching +full:qemu +full:- +full:1 +full:- +full:setup
2 #------------------------------------------------------------------------------
4 # windows: file(1) magic for Microsoft Windows
23 # v1.0.4/libdbx_1.0.4.tar.gz/FILE-FORMAT
25 # and partly verified by `undbx --verbosity 4 Posteingang.dbx`
27 # skip DROID fmt-838-signature-id-1193.dbx fmt-839-signature-id-1194.dbx by check for valid file si…
29 #!:mime application/octet-stream
30 #!:mime application/vnd.ms-outlook
31 !:mime application/x-ms-dbx
43 # CLSID: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4~Message 6F74FDC6-E366-11D1-9A4E-00C04FA309D4~Folder
44 # 26FE9D30-1A8F-11D2-AABF-006097D474C4~offline
53 >>0xC4 ulelong !1 \bs
68 #!:mime application/octet-stream
69 #!:mime application/vnd.ms-outlook
70 !:mime application/x-ms-nickfile
72 # nick is used by "older" Outlook; dat is used by "newer" Outlook (probably 2010 - 2016); bak is us…
76 # Unknown2; probably a version indicator like: 1 0
82 # value type/property tag: 001Fh~4 bytes for data size of UTF-16 LE string
90 # UTF-16
100 # Modified by (1): Abel Cheung (Avoid match with first 4 bytes only)
103 # https://gitlab.com/qemu-project/qemu/-/blob/master/include/qemu/win_dump_defs.h
105 # and verified by like Windows Kit `Dumpchk.exe 043022-18703-01.dmp`
106 # and partly by NirSoft `BlueScreenView.exe 043022-18703-01.dmp`
111 #!:mime application/octet-stream
112 !:mime application/x-ms-dmp
113 # like: Mini111013-01.dmp
146 >>0x05c byte 1 \b, PAE
162 >>0xf88 lelong 1 \b, full dump
171 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/d/dmp-64.trid.xml113o
175 #!:mime application/octet-stream
176 !:mime application/x-ms-dmp
177 # like: c:\Windows\Minidump\020322-18890-01.dmp c:\Windows\MEMORY.DMP
216 # WinDumpPhyMemRun64 Run[43] BasePage like: 1
236 # https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/memory-dump-file-options
253 # Reference (1): https://web.archive.org/web/20110803085000/
259 #!:mime application/octet-stream
260 !:mime application/x-ms-evtx
263 >0x24 ulelong =0x00030001 Vista-8.1 Event Log
264 >0x24 ulelong !0x00030001 10-11 Event Log, version
269 >0x18 lelong >1 \b, next record no. %d
270 >0x18 lelong =1 \b, empty
271 >0x78 lelong &1 \b, DIRTY
280 # verified by `tracerpt.EXE Wifi.etl -of EVTX`
281 # and by etl-parser `etl2xml --input AMSITrace.etl --output AMSITrace.xml`
284 # look for corresponding encoded as UTF-16 file name extension like in: boot_BASE+CSWITCH_1.etl
287 >>0 use trace-etl
289 0 name trace-etl
291 #!:mime application/x-ms-etl
298 >>&-2 lestring16 x "%s"
306 !:mime application/x-ms-sdi
307 #!:mime application/octet-stream
310 # MDBtype: 0~Unspecified 1~RAM 2~ROM
334 # BLOB alignment value in pages, as specified in sdimgr /pack: 1~4K 2~8k
340 # BLOBtype[8] \0-padded: PART, WIM , BOOT, LOAD, DISK
341 >>0x400 string >\0 \b, type %-3.8s
342 # 0~non-filesystem 7~NTFS 6~BIGFAT
348 # print 1 space after size and then handles NTFS boot sector by ./filesystems
352 >>0x440 string >\0 \b, type %-3.8s
361 >>0x480 string >\0 \b, type %-3.8s
372 >>0 use bootstat-dat
374 0 name bootstat-dat
376 #!:mime application/octet-stream
377 !:mime application/x-ms-dat
391 >(0x4.l-1) ubyte x
392 >>&0 use bootstat-entry
394 >(0x4.l-1) ubyte x
395 # by 1st entry size jump to 2nd entry and display information
396 >>&(&0x18.l-1) ubyte x
397 >>>&0 use bootstat-entry
399 # >(0x4.l-1) ubyte x
400 # >>&(&0x18.l-1) ubyte x
401 # >>>&(&0x18.l-1) ubyte x
402 # >>>>&0 use bootstat-entry
404 0 name bootstat-entry
416 # severity code: 1~informational 3~errors
417 >0x1C ulelong !1 \b, severity %#x
420 # event identifier 1~log file initialised 11h~boot application launched
422 >0x24 ulelong !1
434 >>0x2A uleshort x \b-%u
436 >>0x2C uleshort x \b-%u
445 # type of start: 0 normally, 1 or 2 maybe in a recovery sequence
447 # pathname of boot application, as null-terminated Unicode string; typically
476 0 name help-ver-date
479 # version Major 1 for right file fragment
480 >>4 leshort 1 Windows
486 !:mime application/x-winhelp
517 …C[].RecordType type of data in record; 1~help file title 2~COPYRIGHT 3~TOPICOFFSET Contents 4~Macr…
521 >>>>12 uleshort 1
527 # "WinHelp help file" by shared MIME-info database from freedesktop.org
536 !:mime application/x-winhelp
542 !:mime application/x-winhelp
552 >>>>>&0 use help-ver-date
553 >>>>>&4 leshort !1
555 >>>>>>&-2 search/0x1c4b6f0/s \x6c\x03
556 >>>>>>>&0 use help-ver-date
557 >>>>>>>&4 leshort !1
560 >>>>>>>>>&0 use help-ver-date
561 >>>>>>>>>&4 leshort !1
563 >>>>>>>>>>>&0 use help-ver-date
564 >>>>>>>>>>>&4 leshort !1
566 >>>>>>>>>>>>>&0 use help-ver-date
567 >>>>>>>>>>>>>&4 leshort !1
569 >>>>>>>>>>>>>>>&0 use help-ver-date
570 >>>>>>>>>>>>>>>&4 leshort !1
573 >>>>>>>>>>>>>>>>>&0 use help-ver-date
574 >>>>>>>>>>>>>>>>>&4 leshort !1
576 >>>>>>>>>>>>>>>>>>>&0 use help-ver-date
577 >>>>>>>>>>>>>>>>>>>&4 leshort !1
579 >>>>>>>>>>>>>>>>>>>>>&0 use help-ver-date
580 >>>>>>>>>>>>>>>>>>>>>&4 leshort !1
582 >>>>>>>>>>>>>>>>>>>>>>>&0 use help-ver-date
583 >>>>>>>>>>>>>>>>>>>>>>>&4 leshort !1
585 >>>>>>>>>>>>>>>>>>>>>>>>>&0 use help-ver-date
586 >>>>>>>>>>>>>>>>>>>>>>>>>&4 leshort !1
588 >>>>>>>>>>>>>>>>>>>>>>>>>>>&0 use help-ver-date
589 >>>>>>>>>>>>>>>>>>>>>>>>>>>&4 leshort !1
591 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>&0 use help-ver-date
592 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>&4 leshort !1
595 !:mime application/x-winhelp
599 # remaining files should be HeLP Bookmark WinHlp32.BMK (XP 32-bit) or WinHlp32 (Windows 7 8.1 64-bi…
602 !:mime application/x-winhelp
621 #>>(4.l+15) string >\0 \b, Structure_"%-.16s"
630 ## TotalPages 1
639 # or DROID fmt-474-signature-id-748.hlp
640 # or for example run file command with higher --parameter bytes=30335189
642 #!:mime application/octet-stream
645 >>12 lelong x (damaged or use higher '-P bytes' option)
653 >>&0 use cnt-name
659 >>>&0 use cnt-name
662 0 name cnt-name
666 >>1 regex/c \^([^\xd>]*|.*\\.hlp) MS Windows help file Content, based "%s"
672 # Note: called "Windows Help Full-Text Search index" by TrID
675 !:mime application/x-winhelp-fts
680 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/f/ftg-winhelp.trid.xml
681 # Note: called "Windows Help Full-Text search Group" by TrID
683 !:mime application/x-winhelp-ftg
696 >14 string 1.0\ --\ HyperTerminal\ data\ file MS Windows HyperTerminal profile
697 #!:mime application/octet-stream
698 !:mime application/x-ms-ht
707 # https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-shllink/
708 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/l/lnk-shortcut.trid.xml
709 # https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-SHLLINK/%5bMS-SHLLINK%…
710 # Note: called "Windows Shortcut" by TrID, "Microsoft Windows Shortcut" by DROID via PUID x-fmt/42…
713 # HeaderSize + LinkCLSID 00021401-0000-0000-C000-000000000046
715 !:mime application/x-ms-shortcut
719 >20 lelong&1 1 \b, Item id list present
729 # IsUnicode; If set then StringData section contains Unicode-encoded strings
737 # TargetAnsi (260 bytes); NULL-terminated path to environment variable encoded with system default …
739 # TargetUnicode (520 bytes): optional NULL-terminated path to same environment variable Unicode enc…
742 # RunInSeparateProcess; run in a separate virtual machine when launching a 16-bit application; no e…
750 # DarwinDataAnsi (260 bytes); NULL-terminated application identifier encoded with system default co…
752 # DarwinDataUnicode (520 bytes); NULL-terminated application identifier Unicode encoded
760 # TargetAnsi (260 bytes); NULL-terminated path to environment icon variable encoded with system def…
762 # TargetUnicode (520 bytes); optional NULL-terminated path to same icon environment variable Unicod…
776 # MachineID (16 bytes); a NULL-terminated NetBIOS name encoded with system default code page of the…
793 # look for BlockSize 1Ch and KnownFolderDataBlock BlockSignature A000000Bh
795 # https://learn.microsoft.com/en-us/dotnet/desktop/winforms/controls/known-folder-guids-for-file-di…
797 # ProgramFiles 905E63B6-C1BF-494E-B29C-65B732D3D21A
798 # ProgramFilesX86 7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E
811 >24 lelong&1 1 \b, Read-Only
840 # ShowCommand; 1~SW_SHOWNORMAL 3~SW_SHOWMAXIMIZED HerzlichMEDION.lnk 7~SW_SHOWMINNOACTIVE YaCy.lnk …
851 >>65 ubyte&1 1 \b+SHIFT
861 >20 lelong&1 1
864 # 1st item
865 >>78 use lnk-item
868 >>>(78.s+78) use lnk-item
870 >>>&(&-2.s-2) uleshort >0
871 >>>>&-2 use lnk-item
873 >>>>&(&-2.s-2) uleshort >0
874 >>>>>&-2 use lnk-item
878 >>20 lelong&1 =0
879 >>>76 use lnk-info
881 >>20 lelong&1 =1
883 #>>>>(76.s+78) use lnk-info
886 >>>>>&-8 ubelong x
890 0 name lnk-item
898 # like: "26EE0668-A00A-44D7-9371-BEB064C98683" Control Panel
899 # "20D04FE0-3AEA-1069-A2D8-08002B30309D" My Computer
900 # "871C5380-42A0-1069-A2EA-08002B30309D" Internet Explorer
908 0 name lnk-info
911 # LinkInfoHeaderSize; if 1C no optional fields; >=24 optional fields are specified
915 >8 ulelong&1 1 \b, VolumeIDAndLocalBasePath
937 # Reference: https://interoperability.blob.core.windows.net/files/MS-PST/%5bMS-PST%5d.pdf
941 # skip DROID x-fmt-75-signature-id-472.pab x-fmt-248-signature-id-260.pst x-fmt-249-signature-id-26…
944 #!:mime application/octet-stream
946 !:mime application/vnd.ms-outlook
947 # dwCRCPartial; 32-bit cyclic redundancy check (CRC) value of followin 471 bytes; zero for 64-bit
953 # "Microsoft Outlook Personal Address Book" by DROID via x-fmt/75
955 #!:mime application/x-ms-pab
958 # http://mark0.net/download/triddefs_xml.7z/defs/p/pst-unicode.trid.xml
960 # by DROID via x-fmt/248 for ANSI and via x-fmt/249 for Unicode
964 #!:mime application/x-ms-pst
969 #!:mime application/x-ms-ost
979 # bPlatformCreate; This value MUST be set to 1 but also found 2
980 >>14 ubyte >1 \b, bPlatformCreate=%u
981 # bPlatformAccess; This value MUST be set to 1 but also found 2
982 >>15 ubyte >1 \b, bPlatformAccess=%u
987 # ANSI 32-bit variant Outlook 1997-2002
1005 # bCryptMethod: 0~No encryption 1~encryption with permutation 2~encryption with cyclic 16~encryptio…
1007 # UNICODE 64-bit variant Outlook 2003-2007
1019 # bCryptMethod; Encryption type like: 0 1 2 16
1021 # dwCRC; 32-bit CRC of the of the previous 516 bytes
1038 # Modified by (1): Joerg Jenderek
1049 # Windows 3-9X variant
1052 # L1WMAP.REG with only 1 CRNL or org.gnome.gnumeric.reg with 2 NL
1054 !:mime text/x-ms-regedit
1061 !:mime text/x-ms-regedit
1063 # Windows 2K UTF-16 variant
1065 >0x32 lestring16 Version\ 5.00\r\n\r\n Windows Registry little-endian text (Win2K or above)
1067 #>&0 lestring16 Version\ 5.00\r\n\r\n Windows Registry little-endian text (Win2K or above)
1068 !:mime text/x-ms-regedit
1072 # Reference: https://www.winehq.org/pipermail/wine-cvs/2005-October/018763.html
1078 !:mime text/x-wine-extension-reg
1087 >0 use ini-file
1092 >1 search/3548 END\040CATEGORY
1093 # ADM with remark (by adm-rem.trid.xml) already done by generic ASCII variant
1095 >1 default x
1096 >>0 use ini-file
1099 >0 use ini-file
1101 0 name ini-file
1105 # https://msdn.microsoft.com/en-us/library/windows/desktop/cc144200.aspx
1119 !:mime application/x-setupscript
1121 # https://msdn.microsoft.com/en-us/library/windows/hardware/ff549520(v=vs.85).aspx
1122 # version strings ASCII coded case-independent for Windows setup information script file
1123 >>&0 regex/c \^(version|strings)] Windows setup INFormation
1124 !:mime application/x-setupscript
1125 #!:mime application/x-wine-extension-inf
1128 >>&0 regex/c \^(WinsockCRCList|OEMCPL)] Windows setup INFormation
1129 !:mime application/x-setupscript
1132 # https://msdn.microsoft.com/en-us/library/windows/desktop/cc144102.aspx
1133 # .ShellClassInfo DeleteOnCopy LocalizedFileNames ASCII coded case-independent
1135 !:mime application/x-wine-extension-ini
1139 !:mime application/x-wine-extension-ini
1142 !:mime application/x-wine-extension-ini
1144 # https://technet.microsoft.com/en-us/library/cc722567.aspx
1147 !:mime application/x-wine-extension-ini
1151 !:mime application/x-wine-extension-ini
1155 !:mime application/x-wine-extension-ini
1159 !:mime application/x-wine-extension-ini
1162 >>&0 regex/c \^menu] MS-DOS CONFIG.SYS
1169 >>&0 regex/c \^Paths]\r\n MS-DOS MSDOS.SYS
1183 !:mime text/x-ms-cpx
1188 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/s/scf-exp.trid.xml,scf-exp-old.trid.xml
1192 !:mime text/x-ms-scf
1196 >>>1 search/128 IconFile= \b, icon
1200 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/s/scf-via.trid.xml
1201 # Note: called "VIA setup configuration file" by TrID
1202 >>&0 regex/c \^SCF]\r\n VIA setup configuration
1204 !:mime text/x-via-scf
1205 # like: SETUP.SCF
1209 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/l/lid-is.trid.xml
1213 !:mime text/x-installshield-lid
1214 # like: SETUP.LID
1217 # URL: https://www.file-extensions.org/tag-file-extension
1223 !:mime text/x-ms-tag
1237 # http://mark0.net/download/triddefs_xml.7z/defs/c/cdimage-clonecd-cue.trid.xml
1239 >>&0 string CloneCD] CloneCD CD-image Description
1241 !:mime text/x-ccd
1249 >>>>&0 string/c version Windows setup INFormation
1250 !:mime application/x-setupscript
1254 # Reference: http://mark0.net/download/triddefs_xml.7z/defs/c/cfp-cdrtfe.trid.xml
1256 !:mime text/x-cfp
1263 >>>>>>&-1 regex/T \^([A-Za-z0-9_\(\)\ ]+)\]\r Generic INItialization configuration [%-.40s
1265 #!:mime application/x-setupscript
1266 !:mime application/x-wine-extension-ini
1269 # samples with only 1 and unknown section name
1270 # XXX: matches a file containing '[1] 2'
1272 #>>>>0 string x \b, 1st line "%s"
1273 # UTF-16 BOM
1275 # look for phrase of Windows policy ADMinistrative template (UTF-16 by adm-uni.trid.xml)
1278 >>0 use windows-adm
1281 # UTF-16 BOM followed by CR~0D00 , comment~semicolon~3B00 , section~bracket~5B00
1285 # keyword without 1st letter which is maybe up-/down-case
1286 >>>>&3 lestring16 ersion] Windows setup INFormation
1287 !:mime application/x-setupscript
1290 >>>>&3 lestring16 trings] Windows setup INFormation
1291 !:mime application/x-setupscript
1294 >>>>&3 lestring16 ourceDisksNames] Windows setup INFormation
1295 !:mime application/x-setupscript
1298 # netnwcli.inf start with ;---[ NetNWCli.INX ]
1303 >>>>>>&3 lestring16 ersion] Windows setup INFormation
1304 !:mime application/x-setupscript
1315 >>0 use windows-adm
1317 >>0 use windows-adm
1319 0 name windows-adm Windows Policy Administrative Template
1320 !:mime text/x-ms-adm
1322 # UTF-16 BOM implies UTF-16 encoded ADM (by adm-uni.trid.xml)
1324 >>2 lestring16 x \b, 1st line "%s"
1325 # look for UTF-16 encoded CarriageReturn LineFeed
1328 # no UTF-16 BOM implies "ASCII" encoded ADM (by adm.trid.xml)
1330 >>0 string x \b, 1st line "%s"
1335 >>>>>&-2 string x "%s"
1338 >>>>&-2 string x "%s"
1341 # http://read.pudn.com/downloads3/sourcecode/windows/248345/win2k/private/windows/setup/setupapi/in…
1345 # check for valid major and minor versions: 101h - 303h
1347 # GRR: line above (strength 50) is too general as it catches also "PDP-11 UNIX/RT ldp" ./pdp
1349 # test for valid InfStyles: 1 2
1354 # skip few Adobe Photoshop Color swatch ("Mac OS.aco" TRUMATCH-Farben.aco Windows.aco) and some
1355 # Targa image (money-256.tga XING_B_UCM8.tga x-fmt-367-signature-id-604.tga) with "invalid low sect…
1360 !:mime application/x-pnf
1362 # major version 1 for older Windows like XP and 3 since about Windows Vista
1363 # 101h~95-XP; 301h~Windows Vista-7 ; 302h~Windows 10 14393; 303h~Windows 10 18362-Windows11
1364 >1 ubyte x \b, version %u
1367 >>4 ulelong&0x00000001 !0x00000001 95-98)
1369 >0 uleshort =0x0301 (Windows Vista-8.1)
1371 >0 uleshort =0x0303 (Windows 10-11)
1372 # 1 ,2 (windows 98 SE)
1397 # many 0, 1 lmouusb.PNF, 2 linkfx10.PNF , f webfdr16.PNF
1411 # FILETIME is number of 100-nanosecond intervals since 1 January 1601
1449 # 1fdh
1451 # https://docs.microsoft.com/en-us/openspecs/office_standards/ms-oe376/6c085406-a698-4e12-9d4d-c3b0…
1482 # language string like: de-DE en-US
1498 # BIT4-BIT15, BIT18-BIT31 of block attributes are unused
1500 #!:mime application/x-ntbackup
1503 >>>>>10 ubyte 1 \b NetWare
1513 # MTF_CONTINUATION Media Sequence Number > 1
1533 >>>>>60 uleshort >1 \b, sequence %u
1539 # Media Based Catalog Type (1,2)
1545 # 0~, 1~ANSI, 2~UNICODE
1546 >>>>>>>48 ubyte 1
1556 >>>>>>48 ubyte 1
1561 # size of password name (0,1Ch)
1567 # offset of Software Name (1C8h,1CAh,1D0h)
1569 # 1~ANSI, 2~UNICODE
1570 >>>>>>>48 ubyte 1
1580 # MTF Major Version (1)
1585 # Reference: https://www.cryer.co.uk/file-types/p/pal.htm
1588 0 string JASC-PAL\r\n PaintShop Pro color palette
1600 # Note: created by like "InnoSetup self-extracting archive" inside ./msdos
1601 # TrID labeles the entry as "Inno Setup Uninstall Log"
1603 0 string Inno\ Setup\ Uninstall\ Log\ (b) InnoSetup Log
1604 !:mime application/x-innosetup
1607 # " 64-bit" variant
1612 # GUID like {4BB0DCDC-BC24-49EC-8937-72956C33A470} start with left brace
1614 >>0x40 string x %-.38s
1635 >>0x1db lestring16 x \b, %-.9s
1639 >>>&0 lestring16 x \b\%-.9s
1642 >>>>&0 lestring16 x \b, %-.42s
1647 0 string Inno\ Setup\ Messages\ (
1650 !:mime application/x-innosetup-msg
1653 # version like 5.1.1 5.1.11 5.5.0 5.5.3 6.0.0
1667 >>>0x1c search/2 (u) (UTF-16),
1678 # fefdc36e-392d-4678-9e4e-771ffa2692ab/Windows%20Imaging%20File%20Format.rtf
1679 # Note: verified by like `7z t boot.wim` `wiminfo install.esd --header`
1681 >0 use wim-archive
1684 >0 use wim-archive
1685 0 name wim-archive
1688 !:mime application/x-ms-wim
1695 # usPartNumber; 1, unless the file was split into multiple parts
1702 # solid WIMs; version 3584; usually contain LZMS-compressed and the .esd extension
1720 >44 ulelong >1 \b, %u images
1722 # 1-based index of the bootable image of the WIM, or 0 if no image is bootable
1737 #define FLAG_HEADER_COMPRESS_XPRESS2 0x00100000 wimlib-1.13.0\include\wimlib\header.h
1774 0 string 1giM Windows Easy Transfer migration data
1775 #!:mime application/octet-stream
1776 !:mime application/x-ms-mig
1779 # data offset with 1 space at end
1783 >>>&-1 indirect x
1789 #>>&0 ulelong x \b, 1st length %u
1791 >>&20 lestring16 x \b, 1st %-s
1807 #!:mime application/octet-stream
1808 # https://www.thoughtco.com/mime-types-by-content-type-3469108
1809 # https://filext.com/file-extension/PAM
1810 !:mime application/x-perfmon
1811 #!:mime application/x-ms-pma
1821 #!:mime application/octet-stream
1822 !:mime application/x-installshield-ins
1823 # like test.ins Setup.ins
1828 # copyright text like: "Stirling Technologies, Inc. (c) 1990-1994"
1829 # "InstallSHIELD Software Corporation (c) 1990-1997"
1832 >1 search/0x121/s SRCDIR \b, variable names:
1833 # 1st like: SRCDIR
1834 >>&-4 leshort x #%u
1835 >>&-2 pstring/h x %s
1860 # URL: https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/rdp…
1865 !:mime text/x-ms-rdp
1867 # Screen mode: 1~session appear in a window 2~session appear full screen
1868 >17 string 1 \b, window mode
1871 0 guid 7B5C52E4-D88C-4DA7-AEB1-5378D02996D3 Microsoft OneNote
1874 0 guid 43FF2FA1-EFD9-4C76-9EE2-10EA5722765F Microsoft OneNote Revision Store File
1895 # URL: https://learn.microsoft.com/en-us/previous-versions/windows/desktop/policy/registry-policy-f…
1901 # Exists in two formats: the original (SLTG aka Type 1) and a newer format (MSFT aka Type 2)
1907 …ndows CreateTypeLib2 API: https://learn.microsoft.com/en-us/windows/win32/api/oleauto/nf-oleauto-c…
1908 …indows CreateTypeLib API: https://learn.microsoft.com/en-us/windows/win32/api/oleauto/nf-oleauto-c…
1914 >-36 string TYPELIB Type Library (legacy SLTG format)