Reg: reg query "hklm\SYSTEM\CurrentControlSet\Services\pylsoxbh"