As vitamin said, this registry entry represents the LOGFONTW (http://msdn.microsoft.com/en-us/library/dd145037%28v=vs.85%29.aspx) structure. You can hardcode the beginning part: Code: "f8,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,90,01,00,00,00,00,00,00,00,00,00,22," in your script. It contains font properties like size and charset. They will probably be the same for different fonts. Font name is in the end of the structure and has the length 64 bytes (32 characters). You should pad it with zeros using -n option of hexdump: Code: printf '%s\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0' "Arial Black" | hexdump -v -n 32 -e '1/1 "%02x,00,"' ; echo P.S. In my previous post I forgot the important '-v' option for hexdump