for those who don't know, the PNG format in WinXP MS Paint is actually extended.
the format is supplied via mfc42u.dll found in system32/
with this in mind, it may be possible to write an exploit to add extended support for even more formats, and quite possibly custom formats.