由于人在疆内，无法搜索，如果有知道的朋友，帮忙搜索下，将不胜感激~~~

原文如下：
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"1"=hex:01,02,01,00,00,00,00,00,f2,12,97,dc,49,3f,ca,01,00,00,00,00,00,00,00,\
  00,26,35,1e,3e,03,3d,ca,01,00,00,00,00,00,00,00,00,d8,74,4d,d9,49,3f,ca,01
"2"=hex:00,00,00,00,bc,00,00,00,02,00,01,00,bc,00,00,00,0a,00,00,00,00,00,00,\
  00,c8,00,00,00,00,00,00,00,00,00,00,00,c8,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce]
"1"=hex:11,12,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,d8,95,88,b3,72,3f,ca,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"2"=hex:00,00,00,00,bc,00,00,00,02,00,01,00,bc,00,00,00,0a,00,00,00,00,00,00,\
  00,c8,00,00,00,00,00,00,00,00,00,00,00,c8,00,00,00,00,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Disallow\one]
@=hex(Run):
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Disallow\two]
@=hex(Runonce):
以下是要求：
1、复制CurrentVersion\Run项下"1"的值（不要把2的值也复制进去），即复制：
"1"=hex:01,02,01,00,00,00,00,00,f2,12,97,dc,49,3f,ca,01,00,00,00,00,00,00,00,\
  00,26,35,1e,3e,03,3d,ca,01,00,00,00,00,00,00,00,00,d8,74,4d,d9,49,3f,ca,01
2、根据查找Disallow\two项下的Runonce值，定位到CurrentVersion\Runonce项（这里的两个Runonce是一致的），并将刚复制的值替换到CurrentVersion\Runonce项下，最终变成：
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runonce]
"1"=hex:01,02,01,00,00,00,00,00,f2,12,97,dc,49,3f,ca,01,00,00,00,00,00,00,00,\
  00,26,35,1e,3e,03,3d,ca,01,00,00,00,00,00,00,00,00,d8,74,4d,d9,49,3f,ca,01
需要怎么实现？？？谢谢高手指点....