\registry\machine\system\currentcontrolset\services\eventlog\application
    Type 1 Installer
        EventMessageFile = REG_EXPAND_SZ %SystemRoot%\System32\t1instal.dll
        TypesSupported = REG_DWORD 0x0007

\registry\machine\software\microsoft\windows nt\currentversion
    Type 1 Installer
        Log events = REG_DWORD 0
        Copyrights
            EDXP22M?M[*$SM%R*P>S = REG_DWORD 1337
            BEMB>C&/S4V!& = REG_DWORD 784
            TX86%AS:_X[RE;H48<JS = REG_DWORD 1406
            U,O = REG_DWORD 208
            A2<!BMGS.?PB-: = REG_DWORD 863
            M$5M^BJ/TDI/7JC2!SNB,CEF = REG_DWORD 1552
            E:?D.Q = REG_DWORD 385
            A,S(&ILYKM[:S_<-S1 = REG_DWORD 1224
            C[^68EECQ/H/9M3E:* = REG_DWORD 1168
            U*M = REG_DWORD 204
            BEUHJ&T?,$0<IU8SC!OP = REG_DWORD 1295
            DM+EM = REG_DWORD 334
            I<GH<([$1:S07G$;O'8>[OC1 = REG_DWORD 1484
            A:/IG0F&ZAP7<V%K<IRQ&M89ZC = REG_DWORD 1699
            LYV3_M/RV6<+5 = REG_DWORD 899
            P75CL!JG[OP?G.O)U[:^^(1VM<^M%BL&T_:NKEW = REG_DWORD 2727
            C[^68ECE+D3C,MPD?'+:0S = REG_DWORD 1399
            GUV;<,8-XFJM = REG_DWORD 815
            TB:38TBF68:Z/7J1 = REG_DWORD 1018
            C[_%1W+R4?]S7H = REG_DWORD 969
            BIR:.&K:2&V2BURZ;V*[57QMW8W = REG_DWORD 1817
            BIR:.&K:2&V2BURZ;V*[57][MH$M = REG_DWORD 1875
            BIR:.&K:2&QM<4F?0K.LMPJ3-G_H)6X = REG_DWORD 1980
            BIR:.&K:2&QM<4F?0K.[^][.\D2B]Z1&_67) = REG_DWORD 2362