MZ@ !L!This program cannot be run in DOS mode. $d>=E8<9 :?RichPEdR"  n``!S`XR@< `@,P.text `.data0@.pdata< @ @@.idataP*@@.rsrcXR`T:@@.reloc@B;;l< ;;R(, =L9o<{Oyz" " ",4 ",` hAstring too longinvalid string position88Invalid parameter passed to C runtime function. FCLSIDAppIDSMDBValForceRemoveNoRemoveDeleteComponent CategoriesFileTypeInterfaceHardwareMimeSAMSECURITYSYSTEMSoftwareTypeLibbad allocationTrueFalsesecuritymsscwConfigureFilesRollbackFilesTransformFiles\vector too longF.@hH@FFF-ChAC~i i yf {g p$ y+0xf zg (.BhAAFNM p FFF#Fp(@(wӶAÞvAPI-MS-Win-Core-LocalRegistry-L1-1-0.dllRegDeleteKeyExWadvapi32.dllRegDeleteKeyWHKCRHKCUHKLMHKUHKPDHKDDHKCCHKEY_CLASSES_ROOTHKEY_CURRENT_USERHKEY_LOCAL_MACHINEHKEY_USERSHKEY_PERFORMANCE_DATAHKEY_DYN_DATAHKEY_CURRENT_CONFIGModuleModule_RawREGISTRY.tlbCLSID\\Required Categories\Implemented CategoriesAPPID0ONNNNtOtOOO2(Ė,|P`7dW|WW`6Q!2Q!3)6{O>`3)6{O>`3Q!vMς"8 "Tt(" "< | "X" "0 "0H " " " "Td "( " " " " "dl "l   "l t  "   ("@ X  ("   "   " ,  T ("x   " @ 0"D  "   "l |  "\p"8"X`"(@ "("DL "H"  T"(" h" h""`p8"(` x" "4 \X" " "lH"08 "p" " "$, "  "` "x" "E?" "l\ "l "l| "d X" "8 `@" "`"dl 0RSDS 9JC`ksScwAuditExt.pdb.1@h..(----X1@.81@-1.--p-1h.(.(--P.P-X1..1@. 4432h:@:3@6H2:H/H2@:5(328`1P55(3h28P6H9 / 9 4@6p/2 0@:432h:@:16p90(323`1P55(3h28P6H9 / 92 @1:33@1 9p4@865@h36h8@25Bh3 /322 1324@5 5@758(53 @2213p3@04@:6@h852H432p41@6x556@p9p3@02/@5@ 62@072(2@8532 4@6795Bh352x60:p072P30H74:831`7X6@(8P55(3241x554@568@8.2@P81685 @23@62@P8 4@671x55`1P55(3h28P6H9 / 9 3@783@6 3@7H017221:5@WH0HD$ 3DB(H %H%%H=H=7H%H /y  l8H]HVH=H H0_ƜH(H H H(韜H(H @H H(xH(3H DB(H%2%3%0H%H HRy%H 9H(H(3H DB(蔟%HpHHH HHHy  HH H(邛H(L$0HHL$0HHXHhHpHx ATAVAWH LH DI&H a33TDcHAHHAύSE3fADHoHHu3`HH_HtHqHHtHHEA׋HσvH;sHH\$@Hl$HHt$PH|$XH A_A^A\HHXHhHpHx ATAVAWH E3LHHHHfD9$ZuH Ht9LcA,A;3?HHH t4LMHcMHHNt t{"tvPufHcJ vMHLt t}tm"thPuXJ3fD$FHH7H\$@Hl$HHt$PHH|$XH A_A^A\ù@r̹Wg̹\̹@Q̹WF̹;̹0H H%fH%AHL$H8HD$ H H8H%0HL$H8HD$ HHH8H%)HHHD$ HHL$(HHD$(HiHL$(QHL$WH0HD$ H\$HHHHtHzHH\$HH0_HL$SH0HD$ H\HLHHH0[HL$SH0HD$ HHHHy8r HI HC8Hc0C HH0[H%Hy8rHA HA @SHHD$ HwH3HD$pHHHL$0HnHD$0HD$hHd$`D$PHSIE3HL$H HHL$0ؚHL$WH0HD$ H\$HHHHHy8r HI HC8Hc0C H@tHًHH\$HH0_HL$WH0HD$ H\$HHHHHHOHA HaAHSIE3(HH\$HH0_HL$WH0HD$ H\$HHHXHHHOHA HaAIE3HHYHHH\$HH0_HL$SH0HD$ HH#HHHHy8r HI 誊HC8Hc0C HH0[H%HxHMH3HD$`HHL$ HHL$ HL$WH0HD$ H\$HHHHH HHy8r HI HC8Hc0C H@tHHH\$HH0_HL$WH0HD$ H\$HHHHHHOHA HaAHSIE30HHHH\$HH0_DL$ USVWAVAWHHxHEEDH3H]H!]HUPHMH]HHEXHEHEHD$0d$(HEHD$ E3E3Hӹ HeHMHtDt HHEHu fHLEAHP8H HM H} HxA_A^_^[]HLH L@VWAVH0H@HXLHH`H` HHH  HHD$`Hu HLD$hHHH H|$hHt{H Zt HHD$`Hu eHHHH x8IHT$PIx!HL$PHtHE3HT$hP@WHL$hHtHPHL$PHtHPH\$XH0A^_^HL$H8HD$ H HtHPH8@SH@HH3H$0HHL$  u  NdHD$ H;tH  HL$ 9 HHtWHJHHHH,HpHHa3H$0H3胎H@[ù@SH 3HA HHAAIIB8u$HH [@SH Hy Hr HI迅HcHC CH [@SH Hy Hr HI臅3HC HCfCH [H(H HtHPH(HHXHhHpHx AVH MIHHL9BsTH~H+L;IBH;u"H/IH1L3H$Hv踆E3H9{ sLCHHHuH{ LsrHCHCD0HtFH~ rHFHFHS HsHrHHL(Lt H{ H{rH6D4>Hl$8Ht$@H|$HHH\$0H A^H\$Ht$WH IHلt+H9Q r HH1Mt ML HHt$8HC H{D;H\$0H _H\$Hl$Ht$WH Hy IHHHYrHHH;r8Hy rH HHOH;v H rHH+MHLHuIv,H9w sLGHH#HuH!wH rHHHt0HW HrH HLLH HwrH3HH\$0Hl$8Ht$@H _H\$Hl$Ht$WH IHHH9Qs؄LOL+L;IBHtTHW H_HrH HHrHHL)H (L+LH+HGH+H HGrHH\$0Hl$8Ht$@HH _HL@HPHHVWAVH0H@HX IHHHII;vH+LA IHHHHH;s L+M;wJ<HWHLHD$ H\$PHt$`H|$XLt$ Ht!H{ rLCLCHWLIdH{ r HKHHCL0H{ HsHIC0H\$hH0A^_^HHHD$ LHtD3HIHs5Hd$XHT$XHL$(HHD$(HjHL$(RIHHH83D$ D$ H8H(y(t A(H(H(: NH( NH\$Hl$Ht$WH HqH>tkHytHHuVE3E3,HnHtHMUH]HHHuHfHgHO@HtHPHO &H\$0Hl$8Ht$@H _S̸A ̃A ̋A H\$Ht$WH0HHu@AHY@3H9;u%L 4DGH I3H\$ txH HH HRH\$@Ht$HH0_̸@C O#HL$WH0HD$ H\$HHH$HPtHk~HH\$HH0_HL$H8HD$ H8@SH HH Ht H#H [H\$WH HyHHuZHyuSH HtHHHC+H E33HtHHHCHCHtH E3E3HHCHt H HIH\$0H _HUVWHXHHD$pHXHH3HHH3HD$HHD$PHD$XHD$`HD$`HD$ AE3H 3҅HL$HHt3HT$HHL$`HL$HHD$hHD$8HT$0HT$(HT$ 34HUHL$H23҅u\HD$hHD$8HT$0HT$(HT$ HL$HD$@LL$@LE5tHL$HHt Hd$HHHHL$HHt Hd$HHH3OH$HĐ_^]HL$SH0HD$ HH Ht H#HKHt HccH0[HL@HPHHSVWATAUAVAWHPH@MLHE3HjMaEHHHfD94BuH EHL$@Lt$ HH@H}HD$ 'E3HH$L$L$EHD$ Lt$(HHD$(HHfE9tMuHcHHL$8Lt$0HH@HS}HHD$0(E3H$L$L$EH|$(H\$0L$H$HD$ H7H.HT$@LMH>t5 t%t"tPt!@̹W̹LL$8MIHt5 t%t"tPt!@̹Wt̹i̋FHcAEHVHtuHFHcEHN9HtXHFHcF$HHH HL$@HtHD$ HHFH HL$@HtHFILt$(IH$AAE@HyL$HxLt$(3HPA_A^A]A\_^[H\$Ht$WH 3H9y~43Hx;{}zH H x;{}SHKH xH;{|H Ht mH#HKHt ZHccHt$8H\$03H _E3E3AQrE3E3AQ\HIH%iHHXHhHpHx AVH HAHA H; A;{E3;|9?;}ǹHH;wyHKHthHC{D93|\K9 }U+;MHc HcHCH H6HLcLXt tWtG"tBPu23HCHc fD4H3H\$0Hl$8Ht$@H|$HH A^ù@̹W̹MtI @̸3HL$SH0HD$ HHHYHH\$@HH Ht ^H#HKHt KHccH0[H\$WH H|tHvHH\$0H _H8HD$ Ht!MtHd$HHN%WH8HVWAVHHD$XHXHnH3H$MIH3H\$`HL$PH\$HH\$p3DCHuHHD$8Hu +E3LIHHHu HHLHD$@HtHHD$0;s!HD$xH9D$pt HL$p):ȅt23HHHrH HvHL$p<WVHD$xHD$p3Ht$8Lt$@|$0HD$pHuF|$(HD$ DM3ҍJHD$pfHD$HT$pHL$H H*HD$xH9D$pt HL$pS9H$H3H|H$HĐA^_^HHAWH0H@HXHhHpHx HHuqH_HtfpHIHj@ffH3H`f\HHVfR3L=IHHrtHHcHr3HcHALfH\$@Hl$HHt$PH|$XH0A_HHXHhHpHx ATAVAWH HHI&H wIs HE3fD;1*E~'HfD;9HfD;0trHfD;9u fD;8u]HfD;9u zHH7HkH HH+HHPHSH;~H+fHHuHHfD;0H H;sfD3HHiH7 wIrHHH HH+HHPHSH;s6~H+fHHuHfD;0uH H;sfD33 H\$@Hl$HHt$PH|$XH A_A^A\@SVWATAUAVAW!RH+HD$xHH3H$!MLD$@LLHL$hHT$`LD$PLL$p3f\$0H$HT$0H$u lI $ wH&Hs I$H$I,D$0=@H$HHHf9AuH$Hcȅt43HHHrH HvH$ 8WuH$H$3HLd$hLl$`HD$PHD$@H$HL$f9$tEA0IAf\ufD98ufHHL fHIfA9uH$Hu @DLHHfA9HuMHE IuDL$(HT$ DIE3HT$@IMH$H9$hH$3VH\$PLL$0E33H$D$0D$8D$(HD$8HD$ AE3IIMH$HHHf9xu|$8@t @Ǚ+LcDt$0H$I΅uH3HHHs WHvHH$5H$H$Ht$@3ۋ|$8Dt$0Ld$hLl$`Ht$PH$Hu(H$H9$LH$2:Mc3!{DLLc߅~sA0A+LcL$BLA;|&9~@~F~ wW 7A*Aȃ+AAIM;|Dt$(H$HD$ AE3HIMsH$H9$tTH$1EH$HHf9puuD$(H$HD$ AE3IIM t HT$pI]H؋H$!H3ZtHĠ!A_A^A]A\_^[H\$W0 0~H+HH3H$ f:=HHuOxHH  wH&Hs HHT$ HxHHx3H$ H3sH$P H0 _HUVWATAUAVAWHhHHEHXHH3HEMHH3Mu @BIHHf9BudL]EHɸH;vH8HEHtfHu H>f9Hf:%CHHHf8%uH&Hfzf%tHHH]HH+HHCLcL HM t$ "PLnDLA9]~"IEHUJ #tAIE;}|AIIME;}IEJHH]IIfB9BuHMbH9>t*HHH;uAHM2HqHf9@̹W̹E3E3AQ ̻@ HMH]H]I $HMHMH3pH$HĐA_A^A]A\_^]H\$ UVWATAUAVAWP zH+H4H3H$@ E3EHALd$0HtLD$0Hl$0@&H/fD;eL-.HT$@H=؅AIMIHL$@@tHIHcHrIHItHHT$@H؅{f;D$@Dd$ LHT$@HEt.L7E؅y+HT$@E3LHL7Dd$ DE3z؅x6H wH&Hs kHfD;!t H]H$@ H3;oH$ HP A_A^A]A\_^]@USVWH$H#yH+HEHoH3H0"DL$xLEHHHL$p3ɋHMHMHM"MH؅f?}D$hH\H3ɋمÉ\$`HHvtHHL$p93҅@9T$xHUHUHUHf\tHfu HHHHt,HH?H;|HEHEHHM3HE39D$`t-HHL$p؅2HHL$pR3H:H3ɅuL$hHHL$pN؅WHHX3҅ H0HL$p؅"HHL$p3҅ f?=9T$xt9HUHUHUHEHELL0HUHL$pf3HU 9"uv9T$htpHUHUHUHT$hHD$hHD$ AE33HM+1H\$hH]H0HHtH3HEHHL$pHf\tH3fu H9T$xHT$hHD$hHD$ AE3HH]H{3Ʌu'HtHM3HMHt$hHuHL$hHD$hHD$ AE3HH*3Ʌu#HtH3HMHt$hHutjHL$hHEHD$@HD$hHD$8HL$0D$(L$ E3E3HH3ۅHt HH]Ht$hHuHHL$p3҅f?=u$LE3HUHL$pT3Huf?{HHf9GuH;T$ DL$xLHHL$pV؅cHHL$p"uUHUHEHD$ AE3HHMD$`3҅u3‰T$`HtHD$`3HUHuHu D$`E؉"ILǺHM yt$ "}PiHHL$p؅HHL$p=3҅pf?{uaHHf9GuH;uJ"D$ E3LHHL$p3҅y 9""HHL$p3҅ E"L$`Nt =T$`HT$XHT$PHT$HHT$@HT$8HT$0HT$(HD$`HD$ E3E33Ha3҅ug9T$`tZHHEHHM ~3҅HEHHEH H;|9T$hHU HMHuT$`HT$XHT$PHT$HHT$@HT$8HT$0HT$(HD$`HD$ E3E33H3҅tT$` 9T$`D$`HtHS3ҋHU9T$h9T$`HUHUHUHEHEHU HM"3HMȅuj.jHL$h3HtUH}I> 7@̹W̹ s3Ht HH}H0"H3fHH#_^[]HUVWAVAWHH HD$hHXHH3H IEHHHHD$@HD$HHD$8E3L|$HL|$PD|$XMt2I(LCHtMtL|$8HHL$HTHHHuHHT$@HP(؅L|$8H+DHT$pHu 0;u zwHT$pAA'DfEt2fDEfE;us fDMHrċfDEHt<34H;t/L|$0LH̦HL$Hjӿ#"fHHHHfD9u uH\$`Hl$hHt$pH@A^A\_HHHAVH@H@HXHpHx L3HuW~H|$ LHHD$ 3Lt$PHt$ HuKHHHHFI^H\$0@|$8HMD$8IVHVIvH @|$8H\$XHt$`H|$hH@A^H\$Hl$Ht$WAVAWH 3MIHLHHMu @I9A98u/A9xu)AxuAx FuHZHHHPIH9zt]H H@Ņu9u=F9Au5F9Au-F 9A u%HCHt0LKMHIЅtuxHH9{u@H[IxWH\$@Hl$HHt$PH A_A^_H պHH`LIKH8ICH>HHAICHHIKy(t A(H8H(L3ILA@Mt;I Ht#9u9Huxu x FtAMHIAS@DAH(H(H HtPP3H(HL$HH$H!aI HHLISIKVWATAVAWH@ICHHISHP3Ht$0H$H0 H!5Lc5ڬLt$pFIHNH@HHBHLHD$pHt,D0HpHHD$ L 'EƺHcT3Ht$0 H|$xHt$0HuHH$H EE3LAfAf HLD$pAHP(Hd$xLHd$(Hd$ E3LD$xHD$pHAR`x4Ld$xHd$xM9&t I M&IAFHD$pAN HHT$pHHL$xAID;=IH5qHH$H3H@A_A^A\_^HtYH\$WH HHIHtHPHO(HgHt HYL DPH=HHg(H\$0H _HUAVAWHHHHD$pHXHpHx HƩH3HE3L9=tL9=t3L5ILt$`D|$hID$h@HGHAL|$8H "D$9urA9ugA9u\A 9uQf;uGfD;uADHUH W;L|$HHT$8HMHD$8HD$ DL|$@HL$8HLD$@HYP0BHL$@HL$0HtHPL|$PHL$@HLD$PH͌H\$PL9|$0u HutHtjL|$HL|$XHL$0HLD$HHjHLD$XHYHHD$XH9D$H@HL$XHtHPHL$HHtHPH\$PA@u1Ht$0L|$0HtHLD$0HHHt HHPHD$0L|$0H\HHHHuIHL$PHtHPHL$0HtHPHL$8HPHL$@HtHPHAHtL9=uI\D|$hHH3nML$I[ Is0I{8IA_A^]E3DH AQfH\$Ht$WH A HڃttWH33@2!IHHH@Ct HKHHEH{@sC3H\$0Ht$8H _H\$Hl$Ht$WHPH3HH=HH5HHHqH=zLHGH\$HHD$8HD$@H\$0LD$@H AHH\$(HvHD$ LG H?HucH=̲HtH9wH=htW@HHH9uH=HHHt R@HHH;rH3ۅH= Ht#HO HtHP3H_ W@HHH9uH=%H&HHt 3R@HHH;rH hH=<H55H;t$HOHt _H_H?HuH5 H\$`Hl$hHt$pHP_39HAUAVAWH@H@HXHhHpHx MLHMu @I 3H=HHHH9_t9EuA9EuA9EuA 9E tHHHw H9uFL-Ll$(\$0ID$03H9uLHHOWID$0HHt HMII>uuMMH؋H\$`Hl$hHt$pH|$xH@A_A^A]@SVWH@HD$0H=Ht6.W8HE3H\؅3W؅ HHH?uHHt Ћ؅3H=ةH٩H;sJH7Ht1V8HE3H؅3V؅HHH;rH sHd$pHd$`LL$`LD$p؅xHHL$`HHT$hP8؅x2HL$hAD$ DIDAQHL$`HHT$hP`HL$`HtHPHL$pH@_^[@SH H9HtH HHH;uH [HHLHH`@SH HH Ht EH#HKHt 2HccH [@SH HH ?H#H [H(HAH9t6H(HL$H8HD$ HHL$@y(t A(H8Hu@3@SH Iمt @Hu@4H 3HuA.H H H HtHP3H [HHXHhHp L@WATAUAVAWH H53EHt HHuT$pHH5~LD$`3Ht~HtcAu]M MuHHfA9lu=_x9LcMIILA;/uMcIOIMO3҅t>IIyHLL$xHT$`EHPPH\$PHl$XHt$hH A_A^A]A\_HcHL HD$xH\$WH@HH 3Ht H9uAH HtDH$LDL$pHD$8H$DHD$0H$HHD$(HD$xHD$ ARXH\$PH@_HL@HPHHSVWATAUAVAWHPH@ML3Mu @5I0AD$Ht$ H;HHD$0HtHuHL$h-H\$hEz3Ht03HHHEHu 腞HuHM؟HuHMȟL}I/Ht03HYH6HEHu #H3uHMvH+HMfH|$0D$(D$ E3E3H}HLHEHHHHEHE3Ht)HMHHE3Hu 艝̉EHlD3HD$ LMHI!u'DADNH|$ ArIeE3Ht03eH,H HEHu H&~HMILuIȱu AGLl$@Ll$8Ll$0D$(D$ MMH3rDADNEyAH=H 6H;tAt ELDHIH|$ At#H II=DADNH|$ AoOAmDH|AlAkH]|AhH+|HD$ AhEźHL$P肣HMHAHwAvE3HL$PYHL$PHt HHP@)HHsHL$PHtHPIoIeH[HQHGHM$I2HL$`HtHPHMHtHPHL$pHtHPHL$xHtHRAL$0I[0Is8I{HIA_A^A]A\]HLH L@UVWATAUAVAWHHHDžHX3f|$pH}H}H}H}H\$@HMh)DH}HDH}DH}HDH}H}H}GfE0E8H}H|$`H}HHHH}HH}H|$PH}H|$hH}H|$HpHHqHD$HHD$ L pr3DGH q%3 HL$HH DNwE33)HEHD$ L e}3DFH 8}گ3\ H9ER HEHD$ L <}3DFH }3 H9E HD$PHD$ L }3DFH |g3 H9D$P HEHD$ L |3DFH |-3 H9E H yHEHu'HxDNiHD$ DǺHL$H y LxHxHHEHu4HxHD$(HxHD$ AjDAQHL$H跟% HHMɫHtH۫HD$xHtHUHMtPHL$xH}HHD$@HrHMHLD$XH3| f9D$Xq HMHLD$XH3: f9D$X/ HMHHUP8yAmDǺHL$HО> HMHHUPH3҅H9UB fEPHMHMXHtHPEP)EM`M HMHHUP8HMPpHMHHT$pPx3Uf9D$pJHMHHUhPp2f}h'HMrx H%mHMhHlHMX3HuE3Ht03HHHEHu 讕HlHMHvHMLmIXHt03HH_HEHu LH\lHM蟖HvHM菖H|$0D$(D$ E3E3LuIΩHEHHHH}pHt*3#HʩLHEH3Hu 躔̉}IDH|$ LMIH}HPu$NLt$ Ar7H3H}Ht03H[H8HEHu %HuHMxH|$0D$(D$ MLeMI3BNyLd$ AoLEغI3tNH|$ LL$h.AHMuH|$PH (uRHHD$xHu CHLEHHxHlvHUHiHL$PHpQH]HU3HuHuxH\$@:Hti3HUHUHMHLEH jHLEHjHHEH9ED$\HMHtHPHMHtHPH]HUD$\u@HHT$x3HEHtHLEHLvHHUHL$xHt HPHUHxHL$PdE0)EM@M H|$PH sަHHD$xHu ϑHHMHL$ E3LHUHHHUHHMHE3E0)EM@M H|$PH sSHHD$xHu DHHL$`HL$ E3LHUHH`jHT$`H\HMHE3BH|$PH sΥHHD$xHu 运HLEHHEHH}HH rsHHD$xHu dHHHHHL$`HHUHMHrHE3HUP@[HJrHD$ HD$hDLD$`HT$P *H)rHD$ HD$hDLD$`HT$P HrHD$ HD$hDLD$`HT$PP HqHD$ HD$hDLD$`HT$P HqHD$ HD$hDLD$`HT$P fHqHD$ HD$hDLD$`HT$P 5HqHD$ HD$hDLD$`HT$P HqHD$ HD$hDLD$`HT$P[ HqHD$ HD$hDLD$`HT$P* HMHHIIIg/NLt$ #AmDHnAlAkHUnAh|H#n}H\$@3H9Et HMHL$hHtHMHAHwAxD3HL$HBHL$HHt HHP@HHeHL$HHtHPHL$PHtHPHMHtHPHMHtHPHMHtHPHL$`HtHPHMHtHPHM0ݡHMHtHPHۡIѡIǡI3IHMhHHMHtHPHMHtHPHMHtHPHMHtHPH$HİA_A^A]A\_^]HL@UATAUAVAWHhHHEHXHpHx E3fDd$LLd$pLd$`Ld$XLd$PALeHMELd$xLeALeLeAH\$hELd$@6 HH cHD$@HD$ L 6d3ED$H cDEL$yE33HL$@HD$pHD$ L 2o3ED$H oDxL9d$pmHD$XHD$ L oEl$E3H nhD#L9d$XHD$`HD$ L nE3H n/DL9d$`L- kILHu Ll$ DKiEǺHL$@LjHjHžLHu4HjHD$(HjHD$ AjEAQHL$@近HIҝHtHHEHtIIE3tPHMHHHEHuHL$`HLD$HHDfD9d$HHL$XHLD$HHUPDfD9d$HHL$pHHT$`P8DyAmDHL$@ِHL$pHHT$PPHDxL9d$PtŸ fEHL$XHMHtHPE)EMMHL$PHHUP8DHMEyAmEoHL$PHHT$LPxDKfD9d$L?HL$PHHUPpD%f}HL$hm؅x"H _HL$hbH^HL$hQDH\$hHt13HߜHHD$xHu 訇H^HL$xHjHL$xLd$0D$(D$ E3E3Lt$xI'LHHHLeMt+3}I$HHEE3Hu DeHDLd$ LMHIDADNLt$ AroDADNLt$ AoKHgHD$ AlMAk{H gHD$ Ah+HfHD$ AhEǺHL$@+IEHw IdAzE3HL$@HL$@Ht HHU`P@HH]k HL$@HtHPH3H 3IHMӚHHL$PHtHPHL$XHtHPHL$`HtHPHL$pHtHPAL$I[0Is8I{HIA_A^A]A\]HHHUWATAVAWHhHHEHXHpMLHeHeHeHe_fEEHe3H]3H}E3E'AAteA3H [HHEHu u3H ZWHHEHE3H Z'HHEHu 3XH yZHHEH3(H IZ˘HHEHu 轃3H -ZHHEHuc葃3ИH ZsHHEHu e3H YGHHEHu 9E)EMMH fHHEHu I$HMHL$ E3LHUIDHEHUH IE3IDHMHHU_DH}_H 8fjHHEHu \I$LEHIDHE}LuMpHMHu3HuHHEHu IHIDH$EHM_HE3HUP@DH eHHEHu 蔁I$LEHIDHEHMHHHDHM_HE3HUP@DxyH eHHEHu  I$LEHIDH2Ex0HMHt'HHDxHM_HE3HUP@DHHHMHtHPHMHM_HtHPHMHtHPHMHtHPHMHtHPAL$I[8Is@IA_A^A\_]̸ ;wutmw9t1t*t tt APø øøW3øzÃt$ttuPAøøøøoÃw;t3 t(ttt u(ø~ø2ø øø4Ãt(ttt u߸[øøøøHHHD$ HHuFVHHu5D@H#rHL$(H0VHD$(HbHL$(HBHHHUHhHHEHXHx H=H}gHH3H8tj{H}H]]DCH^HMċHMHaVHEH}OH]G]7IE3HUHM/ HaHMHEoHt HHHWH T;HL$I[ I{(I]H%HL$H8HD$ H H8H%H\$WH H~HD$0HD$0HD$0HD$0HH\$0H qH=qH;tAtHI z{tFH DADNEy'H pH;tAtHILHa rHH\$8H>~/~H _H8Hd$ DL`+H8LEK HXIcIC(AMCICMCIC DL`+ICHHXH\$WH H!HAH oH=oH;tAtHI HH SLE33SDADNExC'H oH;tAtHIL ` 4HH\$0H _@WH@HD$ H\$PHHH+oH $oH;tAtHI*HD$0Hd$8LD$(HHHL$(H\$PH@_@USVWATAVAWHHpHEMLLH=nH nH;tAtHIH {nA|$u5H;4A*DL^HI II $u:H !nH;AE\$ HII~v)WH mH;AjHeHeHeIVHM`IFHLUHuH;HC(H=H{0rHKHKEHMEeHt8IH+HHEH+HH;sIzLEILH}LMIHMpLUHuHI;^kH=l\HkH 6\HH 5ZHx%w%v%vH(MA8HIH(@SH EHLAALtA@McPLHcL#IcJHCHHKAt AHLL3IH [%FTFFFFF b!L$G H00020 t dT42d42 pdT42p##4 Rp`!^8H(LLL^ks  2P!  BP0! p!(McMoM b"MMM2Pd 4R p4 Rp)O bh)O  4 2p2!4XRp`P@)*P1QR R0)<\RrRxR&p`0(iN8u8RS3SaSSSSTTU U4UDUN  2P( R0(WWWWW b(($6p ` P* ,8DP\ht (4@LXdp| ""$$&&((( (,$,0,<(H(T(`(l(x&$"  ,8|¢Ƣ͢آ ߢ  '.59 @"D$I&[(X)z(*˩(*,..b,r(*1K(2׫(:3R(4(ί&߯$" 1AL\f p z ̰ܰ/ /t++d)'4(" P*JVbnz  ".:FRMRW\cn v z Lp  % . 8 A KV`q* *d&4 pP0*dp|  $ 0<HT`lз $) / 5    e|  C M Wgr *нt4P)~Dx . b)T  4 2pb  4 rp,t p`0P+sd T 4 Rp+4 p`+*6LDH|KWzDQ  RP+ bp+j8jw  2Pp+( (h$d% 4$ pH+HH$ n  RPH+ b +8DQv  2P +b*8  2P* b*p!8!.  2P*r0"PP"xd 4 Rp>4 Rp Lp t T 424/(p`" b#= =ap^pc/FFmVbp`0"= 4 rp`";ToT20" Od 4 Rp" 0    4 2p"00  4 2P 0008Xx 1@LXCx 81 ! 1@xB 1@pDP  AX1@@8 1IR!!!!ԋ$!!!!ScwAuditExt.DLLDllCanUnloadNowDllGetClassObjectDllRegisterServerDllUnregisterServer2-+] fXHDWW0@.?AVout_of_range@std@@.?AVexception@@.?AVbad_alloc@std@@.?AVlength_error@std@@.?AVlogic_error@std@@.?AVCAtlException@ATL@@.?AVCComClassFactory@ATL@@.?AUIAudit@@.?AV?$CComAggObject@VAudit@@@ATL@@.?AVCAtlModule@ATL@@.?AVAudit@@.?AV?$CComCoClass@VAudit@@$1?CLSID_Audit@@3U_GUID@@B@ATL@@.?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@.?AU_ATL_MODULE70@ATL@@.?AV?$CComObject@VAudit@@@ATL@@.?AVCComObjectRootBase@ATL@@.?AVCRegObject@ATL@@.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@.?AV?$CAtlModuleT@VCComModule@ATL@@@ATL@@.?AUIClassFactory@@.?AUISupportErrorInfo@@.?AUIUnknown@@.?AUIDispatch@@.?AV?$IDispatchImpl@UIAudit@@$1?IID_IAudit@@3U_GUID@@B$1?LIBID_SCWAUDITEXTLib@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@.?AV?$CComContainedObject@VAudit@@@ATL@@.?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@.?AUIRegistrarBase@@.?AVCComModule@ATL@@ ;;\ ;;0;;0;d<0l<<0<=0=U>8\>?8?@T@?@tH@@@@@AA`AAA@BqB|xBBBPCXCC CC`CgDppDDDEEG$$GIGPG!H(H]HdHHHHHH0HJ JqJxJoK(xKL((L M<(MM(MMPMM0MM0NN(NkOxOOOP P-P4PPPTR\RR RgUPpU%V@V[WWW|X3X X ē̓X xd( lx Ė X P Pș u |Ƿзмн;PDLxTt|G4Pu@|HntP@Ht|$;@D{\L (((06LL18y`qx0x9@z<bdbh0@DX 0M0T{=Tg ^pNilulppRms  H Ddj0LL<!8bp p ^p^ppcpcpp7p=ipoppp0p8c 0t^^^^^^^^_b^J^6^ ^^___J]:] ] ]\\\\\x\d\J\6\.\>ZPZ`ZrZZZZZZZZZ [&[>[T[j[|[[[[[[[\\ \ __,_>_r_Z_]]YYYZZYPYFYZ ZYYtYhY&YYYYXXXXXXXjXLX*Z4Z@X_]]]|]]WYRU`]PPVn]QX]SV^RpT_PV_PRt^^^^^^^^_b^J^6^ ^^___J]:] ] ]\\\\\x\d\J\6\.\>ZPZ`ZrZZZZZZZZZ [&[>[T[j[|[[[[[[[\\ \ __,_>_r_Z_]]YYYZZYPYFYZ ZYYtYhY&YYYYXXXXXXXjXLX*Z4Z@X_]]]|]]memmove_s2?what@exception@@UEBAPEBDXZ??1exception@@UEAA@XZ ??0exception@@QEAA@XZ ??0exception@@QEAA@AEBQEBD@Z ??0exception@@QEAA@AEBV0@@Zmemcpy_swcsncpy_sMfreemalloc_purecallwcscat_swcscpy_s ??0exception@@QEAA@AEBQEBDH@ZmemsetX__C_specific_handler_callnewhL_CxxThrowException\__CxxFrameHandler3V_XcptFilter_amsg_exit~_inittermmsvcrt.dll0?terminate@@YAXXZ??1type_info@@UEAA@XZ_lockB_unlock|__dllonexit_onexit_errnoreallocFindResourceExWLoadResource^SizeofResourceFormatMessageWVGetLastErrorLockResourceCloseHandleGetWindowsDirectoryWLocalFreeFreeLibraryLoadLibraryExWmGetModuleHandleWPInitializeCriticalSectionLeaveCriticalSectioniGetModuleFileNameWMultiByteToWideCharCRaiseExceptionGetProcAddress)EnterCriticalSectionDisableThreadLibraryCallslstrcmpiWDeleteCriticalSectionFindResourceWWriteFileLoadLibraryWCreateFileW DeleteFileW_SleepRtlCaptureContextRtlLookupFunctionEntryRtlVirtualUnwindUnhandledExceptionFilterPSetUnhandledExceptionFilterGetCurrentProcessnTerminateProcess0QueryPerformanceCounterGetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountOutputDebugStringAKERNEL32.dllOLEAUT32.dllCoCreateInstanceCoTaskMemReallocStringFromGUID2CoTaskMemFree~CoTaskMemAllocole32.dll1CharNextWPUnregisterClassAUSER32.dll]RegCreateKeyExWpGetTraceEnableFlagsRegQueryInfoKeyWrGetTraceLoggerHandlelRegDeleteValueW,UnregisterTraceGuidsRegOpenKeyExWqGetTraceEnableLevelsRegEnumKeyExWTRegCloseKeyRegisterTraceGuidsWRegSetValueExWTraceMessageADVAPI32.dllSceConfigureSystem+SceOpenProfile$SceGetSecurityProfileInfoSceFreeProfileMemory SceCloseProfileSceGenerateRollbackSCECLI.dll EventRegister"EventUnregisterEventEnabled#EventWritememcmp@Xpgf0H ` p    Xz@hإbR. WEVT_TEMPLATEREGISTRYFILETYPELIBMUICRIMP.p$ y+0$WEVT,.d CHAN$4|Microsoft-Windows-Security-Configuration-Wizard/Diagnostic|Microsoft-Windows-Security-Configuration-Wizard/OperationalTTBLBTEMPP ygػ$<[7J.D EventDataTEMPP\ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPLygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP<ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP,ygػ$<[7J.D EventDataTEMPP|ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPlygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP\ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPLygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP< ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP, ygػ$<[7J.D EventDataTEMPP| ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPPl ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP\ ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPPL ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP<ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP,ygػ$<[7J.D EventDataTEMPP|ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPlygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP ygػ$<[7J.D EventDataTEMPP\ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPLygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPP<ygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPPygػ$<[7J.D EventDataTEMPtRWE9eϰbD EventDataAAoData)KName LogFilePath LogFilePathTEMP<RWE9eϰbD EventDataAAoData)KName LogFilePath PLogFilePathTEMPRWE9eϰbD EventDataAAoData)KName LogFilePath LogFilePathTEMPRWE9eϰbD EventDataAAoData)KName LogFilePath LogFilePathTEMPTC-JiW/+ЬC :D EventDataAKoData3KNameRollbackFilePath AAoData)KName LogFilePath  4(RollbackFilePathLogFilePathTEMPRWE9eϰbD EventDataAAoData)KName LogFilePath LogFilePathTEMPXXK̻{U%KD EventDataAAoData)KName MachineName AMoData5KNameAnalysisExtension ,HMachineName(AnalysisExtensionTEMPX\XK̻{U%KD EventDataAAoData)KName MachineName AMoData5KNameAnalysisExtension MachineName(AnalysisExtensionOPCOT00win:Startwin:StopLEVLPLPdPwin:Errorwin:Warning(win:InformationalTASK d e4fLglhijklmno pDStartupShutdown ConfigurationRollbackAnalysisTransformServiceScanMergeRolesTasks ActiveSockets$CustomFunction CmdOperationKEYWp   , @ X t @   ScwScwUIScwCmdScwViewerPreProcessAuditServiceRegistry SceFirewallEVNTx Bdjd@\H-eje@\L-fkf@xP-gkg@xT-hlh@X-ili@\-jmj@`-kmk@d-lnl@h-mnm@l-non@p-ooo@t-xf x@x-yf y@|-zg z@-{g {@-|h |@$-}h }@$-~i ~@@-i @@-f@@-f@@-g@@-g@@-h@@$-h@@$-i@@@-i@@@-f@-f@-g@-g@-h@$-h@$-i@@-i@@-f@-f@-g@-g@-h@$-h@$-i@@-i@@-f@-f@-g@.g@.h@$.h@$ .i@@.i@@.d@.d@.d@ .d@$.p@(.p@,.,f@,@0.-f@-(4..g@.l@8./g@/4(<.0g@0@@.1g@1P(D.6h@64$H.7h@7p($L. ppppppppHKCR { ScwAuditExt.Audit.1 = s 'Audit Class' { CLSID = s '{3FA18119-F466-45FE-BA23-FFF9C133DA0B}' } ScwAuditExt.Audit = s 'Audit Class' { CLSID = s '{3FA18119-F466-45FE-BA23-FFF9C133DA0B}' } NoRemove CLSID { ForceRemove {3FA18119-F466-45FE-BA23-FFF9C133DA0B} = s 'Audit Class' { ProgID = s 'ScwAuditExt.Audit.1' VersionIndependentProgID = s 'ScwAuditExt.Audit' InprocServer32 = s '%MODULE%' { val ThreadingModel = s 'both' } } } } <?xml version="1.0" encoding="UTF-16"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" xmlns:ssr="http://microsoft.com/sce/ssr" > <msxsl:script xmlns:msxsl="urn:schemas-microsoft-com:xslt" language="VBScript" implements-prefix="ssr"> Function TranslateType (Node) AttribValue = Node.nextNode().attributes.getNamedItem("Type").text TranslateType = "Error" If (AttribValue = "System") Then TranslateType = "AuditSystemEvents" ElseIf (AttribValue = "Logon") Then TranslateType = "AuditLogonEvents" ElseIf (AttribValue = "ObjectAccess") Then TranslateType = "AuditObjectAccess" ElseIf (AttribValue = "PrivilegeUse") Then TranslateType = "AuditPrivilegeUse" ElseIf (AttribValue = "PolicyChange") Then TranslateType = "AuditPolicyChange" ElseIf (AttribValue = "AccountManagement") Then TranslateType = "AuditAccountManage" ElseIf (AttribValue = "DetailedTracking") Then TranslateType = "AuditProcessTracking" ElseIf (AttribValue = "DirectoryServiceAccess") Then TranslateType = "AuditDSAccess" ElseIf (AttribValue = "AccountLogon") Then TranslateType = "AuditAccountLogon" End If End Function Function TranslateValue (Node) Set NodeReal = Node.nextNode() AttribValueSuccess = NodeReal.attributes.getNamedItem("Success").text AttribValueFailure = NodeReal.attributes.getNamedItem("Failure").text TranslateValue = "0" If (AttribValueSuccess = "True") And (AttribValueFailure = "True") Then TranslateValue = "3" ElseIf (AttribValueSuccess = "True") And (AttribValueFailure = "False") Then TranslateValue = "1" ElseIf (AttribValueSuccess = "False") And (AttribValueFailure = "False") Then TranslateValue = "0" ElseIf (AttribValueSuccess = "False") And (AttribValueFailure = "True") Then TranslateValue = "2" End If End Function </msxsl:script> <xsl:output method="text" indent="no"/> <xsl:template match="Rule/Parameters/Parameter"> [Unicode] Unicode=yes [Version] signature="$CHICAGO$" Revision=1 [Event Audit] <xsl:for-each select="Event"> <xsl:variable name="Event" select="."/> <xsl:value-of select="ssr:TranslateType($Event)"/> = <xsl:value-of select="ssr:TranslateValue($Event)"/>, </xsl:for-each> </xsl:template> </xsl:stylesheet> MSFT C Q dL ( xDD$%B 4B`@00P`H0z% BP?fE#3 0FFߕ&KNφ8]5ddH0/stdole2.tlbWWWp\0DSCWAUDITEXTLibWW8AuditWWWd8IAuditWWd a ConfigureWWWoFlagsWWW XmlPolicyWWW QqXmlResultsWWXmlLogWWdRollbackd TransformWWWScwAuditExt 1.0 Type LibraryWW Audit ClassWWWIAudit InterfaceWWmethod ConfigureWWmethod RollbackWWWmethod TransformWW@P8 D\pP@ X\pPH l\pDP4VS_VERSION_INFO@%@%?StringFileInfo040904B0LCompanyNameMicrosoft CorporationNFileDescriptionScwAuditExt Moduler)FileVersion6.3.9600.16384 (winblue_rtm.130821-1623)8 InternalNameScwAuditExt.LegalCopyright Microsoft Corporation. All rights reserved.HOriginalFilenameScwAuditExt.DLLj%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.16384DVarFileInfo$Translation ܚ6N-{;N /@o!B@V  FILEREGISTRYTYPELIBWEVT_TEMPLATEMUIMUI en-US  (0HHPX@HPX (08ȥХإب (08@HPX`hpxة (08@HPX`hpxȪЪت (08@XpȫЫث 0`pЬ 0 0X(08@H`hpРؠ8XС(HТ pȣ pؤ @ХX