PReg[SOFTWARE\Policies\Microsoft\WindowsFirewall;PolicyVersion;;;][SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules;RemoteEventLogSvc-RPCSS-In-TCP;;º;v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252|][SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules;RemoteEventLogSvc-NP-In-TCP;;d;v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-29257|Desc=@FirewallAPI.dll,-29260|EmbedCtxt=@FirewallAPI.dll,-29252|][SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules;RemoteEventLogSvc-In-TCP;;´;v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=Eventlog|Name=@FirewallAPI.dll,-29253|Desc=@FirewallAPI.dll,-29256|EmbedCtxt=@FirewallAPI.dll,-29252|][SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules;WMI-WINMGMT-In-TCP;;ž;v2.20|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251|]