MZ@ !L!This program cannot be run in DOS mode. $SR=R=R=RS=RA=RP=R_=R<=RJ=RS=RS=RichR=PEdQPT"  T$W@`  `d'.textST `.dataXpX@.pdataZ@@.idata ^@@.rsrc`l@@.relocdt@BU@(@(@)@ )@T@X@(( ))**+@55 6@66G0IpJpLPNTUWPXXXP\\__ `p`QPT%t(t"bb$c p@`q@_~_I\AuditShowDesktopEventFailed to get the current user name; dwRet = 0x%XCould not allocate memory for current user nameFailed to get the build-in administrator SID; dwRet = 0x%XFailed to get the build-in administrator name from SID; dwRet = 0x%XFailed to check whether this is audit mode; dwRet = 0x%XCurrent user name is [%s], while built-in administrator name is [%s]; will not show desktopThis is not audit mode; will not show desktopShellDesktopSwitchEventFailed to open the shell desktop switch event; hr = 0x%XWaiting for the shell desktop switch eventFailed to wait for the shell desktop switch event; hr = 0x%XThe shell desktop switch event was signaledThe wait for start screen expired; still proceedingSending 'Win+D' to show the desktopSendInput failed to send 'Win+D', hr = 0x%X; %d retries left...Failed to enable calls to SetForegroundWindow, hr = 0x%XSendInput succeeded in sending 'Win+D'Failed to show the desktopGetAppVisibilityInterface: CoCreateInstance succeeded in creating IAppVisibility instanceGetAppVisibilityInterface: CoCreateInstance failed, hr = 0x%X; %d retries left...WaitForStartScreen: Waiting for the start screen to come upWaitForStartScreen: Start screen is up nowWaitForStartScreen: Start screen not up yet; will wait via IAppVisibilityEventsWaitForStartScreen: Failed to open the app visibility event; hr = 0x%XWaitForStartScreen: Waiting for the app visibility eventWaitForStartScreen: App visibility event was signaled; start screen must be upWaitForStartScreen: Timed out while waiting for the app visibility eventWaitForStartScreen: Failed to wait for app visibility event; hr = 0x%xWaitForStartScreen: Failed to get IsLauncherVisible property from IAppVisible interface; hr = 0x%xWaitForStartScreen: Failed to unadvise receiving notification from IAppVisibility; hr = 0x%xWaitForStartScreen: Failed when advising to receive notification from IAppVisibility; hr = 0x%xWaitForStartScreen: Failed to instantiate IAppVisibilityEvents; hr = 0x%xWaitForStartScreen: Failed to get IAppVisible interface; hr = 0x%xWaitForStartScreen: Failed to CoInitializeEx; hr = 0x%xFk΄e}IƼ85@ 6@@6@PX@PX@6@-F"DDm'C5@ 6@@6@*@*@+@WdsSetupLogInitWdsSetupLogDestroyWdsSetupLogMessageAWdsSetupLogMessageWConstructPartialMsgVAConstructPartialMsgVWCurrentIP%windir%\Panther\UnattendGCwdscore.dll<unknown>[%S] %SUnattendLogWVbase\ntsetup\lib\unattendlog\src\unattendlog.cppDAuditBootSystem\Setup\Status\\?\UNCCreatePath: Unable to create [%s]; GLE = 0x%xCreatePath: Unable to create parent directory for [%s]; GLE = 0x%x\\ntdll.dlladvapi32.dllapi-ms-win-eventing-provider-l1-1-0.dllEventWriteEventRegisterEventUnregisterڹ_>Ob<u%s%s%sEtwEventRegisterEtwEventUnregisterEtwEventEnabledEtwEventWrite9j Cu&}p@@X@5RSDS f;XbVC)jAuditShD.pdbH(H NhH 6H(G3H(Hu#Htk#H 6H(3@WH H=MHtPH=Mt(H=MHiH MH%MH=MHiL MH ME33H 6H _2H(Hd$0LD$0HfHL$0HHgHL$0HHMgHL$0HHMrgHL$0HHLYgH=LHLtH=LtH=LtHu H%LH%LH%LH%LH 5H(13@SH uEHI#f3ۅu7eȁNȅye؁N @3ۋH [H\$WH HWHًHHIHAHwkeC @t H5gHH\$0H _H\$UVWATAUAVAWHH@E3H WKAEELeDePDeXeEl$D-JD9%JL%JSHHtHSH eH[JHt?ux/H5vJHt#HgLú3D--JD-VJHJD9%JuHt HeHtdL3HdH xJ eHIHIHt#HIH HHEH IHIHUP3PcutdzuM]PHdVHLdLHuHA͍~qHUPHbu&cHrADHMLe H]uncH6HtHUH, LuWcAąu6cHODA͋Ht7cL3HAcHUX$yHAͅDDuUAMADL$( Lt$ btHMM3D9eXuH3tMtbM3HbMt}bM3HbHGHt#HGH GL%GHIEHGH 9HbGA+D9%GGtRuNH xGHtBD9%GtHGHtH%dH LG^bL%?GD%@GD%iGH GTbH$H@A_A^A]A\_^]HHXHpHxUAVAWHhHH@H3HE7L3ҹ+aAAHHu9!aA υNȅy aDE DžDNA@Hp2H3 HatDH%E DžDNA H3 uHAx H53j HM3A3.FDN[fEfEFDufMDuEEDuDufM~A(HUAH$a `A υNȅy_DE DžDNA@HDA `u?_A υNȅy_DE DžDNA@H Ao _Ho3AQ A+!uHA3 HCHw H_HM7H3&L$I[ Is(I{0IA_A^]@SVWATAWH@d$pH3 3a&H$A@AH$AHu W;~cH$HD$ L +E3H `؅xH3I DDHA2 S^A+x\$09H$*H$8HH H$HtH$HHxH7`HH$HHx(H`LD$xHH׉D$0sH$HHx H_HT$pH׉D$03D9|$puHR H:A L3ҹ1]HHu;3]Ⱦ ΅Nȅy]DD DNEHABH3`H]t7A=tDADNH!HD|$pH+3HGHwHi\DHAYH$HHx0H^T$xH׉D$0y Hm HADHtHHxHg^HDD$0HDH5AH$HtHHXH^HH$]DHD$pH@A_A\_^[MЋt3ҹ=EMIfH\$Ht$WH 3HI89:u!s9Bul9Bu e9B t):k΄eu;Z9Bu0S9Bu%L9B uIHHXH ]H@H\$0Ht$8H _̸A H\$Ht$WH Hy u>HtHHX(H\WHH5?HtHHZH\HH\$0Ht$8H _@SH HA t[HH [HHXHpHx AVH H`HHPB!HHuH!HD$8H;H!L5>@ HHMtIHxH[IHL E333H-YHCHHuE3E3AQJYH&HD$8H;tH3HtHHxHC[HH\$0H|$HHHt$@H A^H\$Ht$ UWATAVAWHHPE33HL!e0HuNW$Y3;H!9H!}!}H!}H!}H!}LM8HUA3E0 XHM8LE0DWHM0HIWLHWDt|XEǺH*XHHt]HM0HIdWDtHHU0HHR%HdWHHt'AЈ+H_WHt H>33HM0HtVEt HM8WHtzWL3HWL\$PI[@IsHIA_A^A\_]HSUVWAVH@3HL!h!hHuJWW3H!*H$HHD$0HD$xL$HD$(H!l$ E33kV$9l$xHVLHȺVHH\$xHVLHȺVHHt>H$L$LHD$0HD$xIHD$(3H\$ UuH>3Ht+VL3H5VHtVL3HVH@A^_^][LD$LL$ SVWH 3HBHH=WGx5HZLL$XHH3mWxHH;wu@<3@<3zHtH _^[@SH H :3HHUH:HH :H UH:HH |:HUH:HH X:HUH\:Ht`H 8:HkUHD:Ht@H :HKUH:Ht H 9H+UH,:Hu3QTȁNȅy9T؁N@H [HHPL@LH H(L@ H(HSUVWATAVAWHH3H3H$pE3MHMHL$d3ADd$`!HT$`A3HQ;Tt#AT$\HL$`?UHHtHH\$`HHHfD9$OuHT$`HfD9$BuH,JSLEHȺXSLH LHULHH|$ !΅tt u L9%a8L9%L8L9%w8RHd8HˋTH8HHTMI֋H58HHTDd$PLd$Hl$@H|$8H-HD$0HALHD$(E33HD$ -RM3H7RH$pH3OHĀA_A^A\_^][@SH HHuWWYO3HMH3H$HPA_A^A]A\_^]@SUVWATAVAWH03LDcH\$xHf;HT$x}HHwL$HT$pHH$\$pD{\D9d$pL$HHfA9OuHD$xHIMtAHt)JL3HJAMtE>HtL>Hl$PHt$XH\$HH A_A^_LD$LL$ SUVWH(3HBHH=WGx5HZLL$hHHӋKxHH;wuf,^f,^zHtf.H(_^][H\$Ht$WH H 3E33ҋWItXHIVHLIHHt6H DHItf;3uUIL3H_IHEHt$8HH\$0H _H\$Hl$Ht$WAVAWH E3HEE8tBt AGWIAAfD9z*vVB*HK0ș3LcI1IHHHGH@GADHs@k({ Ds$EfD;{*sUD8=$.HC8EJ HC@AC(tQ:vuitK t`LC0AɺIC C*AD;r3H\$@Hl$HHt$PH A_A^_:vuHtHKt HCH#H;CtLC0AɺIC!H\$WH LT$`3M HD$PMJDOEJ$EB(DIBfA;z*@8=-IB8AH IB@AB(t8:vuPtAJ tFMB0AAуHA AB*ED;r~:vuHtIJt IBH#I;BtMB0AAуHA!Az$Az(IzIzfA9z*v,AB*IJ0AA+3ALcIH\$0H _@SUVWATAVAWHH%H3H$p3MMHLMuCWI98 ,HL$PD$PFt+L$T+w u |$XvH EHHut[H EHHtFHHBFH[+Ht*HH&FH$HuHH$+"HHEH3+Ht̊*+*u.HV$HgHHHD?GMMHITMuA^WKLt$8HHHDHD$@H\$0AMIHH\$(M7HD$ Ld$@H\$HC؋H$pH3 HĀA_A^A\_^][H\$WHH#H3H$pH=*3@8="*HL$PD$PDt+L$T)w u |$XvH DHHut[H CHHtFHH\DHu)Ht*HH@DH"HuHH"6)"HH DHM)Ht̊)3))u0Hp"HgEL (La"HjH sQHd$HHB"H[HT$8Hd$0Hd$(HL$@ALHL$ H H(HD$@AH$pH3 H$HĀ_H\$Ht$WH 3@85`(tsH='(Htg@85#(uHJ(HDH@HAw @w(Hwf9w*v#G*HO0ș3LcIH7H5'H\$0Ht$8H _HHXHpL@WH03HHXHuKW9B3Ht)HD$PAE3HD$ @uTHL$PHuHHL$PHHt%E3E3H\$(H\$ @HL$P@Htn@3AH\$@Ht$HH0_LD$USWHH@Hee0e8HE HuWfA3Ht)HEAE3HD$ ?u HMHuHMHE LM8HHD$(HE0E3HD$ ?u } tx e0Ht HM?@E0H@_[]H\$Hl$Ht$WAVAWH0E3HHAHHHLIfF9 DD>L3H>> W>3H\$0Ht$8H _H\$Hl$Ht$WH 3HHueH%0@hW3HHf9,AueH %`HI0L?HHHKAI;ȸWGxAHʋHt)L+H+IHtft fHHuHu Hzf)Htf*y*eH %`L3HI0n?eH%0ωHhHHH\$0Hl$8Ht$@H _H\$Hl$Ht$WAVAWH 3MIHLHHHf9,AuMH;H;H;eH %`H+ںHI0HL>HIHtoHCAI;WLCGxHM;vDIvHt)L+H+IHt ft fHHuHuHzHtf)WH\$@Hl$HHt$PH A_A^_H(MZf9t3OHc ?HHȁ9PEuA= t= u3v93ytv 9P =H <HH!H!8H <=gu H <3H(H8D LHHH HD$ r<H8HHXHpHxL` AVH0eH%0HXE33H tH;u Dx:׻ ;u )i uY L%H=H|$(D$ I;s)u)H7HtHHY<։D$ HH|$(҅t\ ;uH9H g; Eu 3H% H=- t.H $ tH HH;E3AP3L>H/ !='u:=u :-=u :̃=u :H\$@Ht$HH|$PLd$XH0A^H(H(ffH; uHfuHb%::H8HD$ HD$PH8H(H8csmu#xuH lv@uO93H(H(H '83H(%9H3HAHw8LcA/`D/1`1:5`56a@66a66`67 a794a9:La:c;\al;<`<<pa<>xa>C?`L??a?%Ba,BDa DsD`|D#Ea,EFaFGbGGaG"Ib0IaJ`pJcL0bpLCNPbPNNaNOhbOPxbPQbQRaRSaSTbTUhaU VbVWbWXha\X{XbXXhaXXhaXPYdcXYY`ZMZcZd[c["\c(\?\ha\\\`\^cT^q^hax^^`_#_a)_G_cM_m_Tc__c__c_`` `a`bȖؚĚhRB2Й~n^L:2 (BXnțܛ&>Tf~М ,rҗԘƘx`V>2 |ė .:D`RfRޘP\@ؖHlxFȑxȒȖؚĚhRB2Й~n^L:2 (BXnțܛ&>Tf~М ,rҗԘƘx`V>2 |ė .:D`RfRޘzGetUserNameWADVAPI32.dll8HeapAlloc<HeapFreeWaitForSingleObjectSetEventGetProcessHeapaSleepCompareStringWDRaiseExceptionVGetLastErrorCreateEventWOpenEventWCloseHandleKERNEL32.dll_purecall??3@YAXPEAX@ZV_XcptFilter_amsg_exit__wgetmainargs__set_app_type3exit_exit_cexit__setusermatherr~_inittermX__C_specific_handler(_fmode_commodemsvcrt.dll??2@YAPEAX_K@Z\__CxxFrameHandler30?terminate@@YAXXZ_lockB_unlock|__dllonexit_onexitCoCreateInstanceCoUninitializeTCoInitializeExole32.dllSendInput5LockSetForegroundWindowUSER32.dllRtlCaptureContext]RtlLookupFunctionEntrylRtlVirtualUnwindntdll.dllkGetSidSubAuthorityLsaQueryInformationPolicyLsaOpenPolicylGetSidSubAuthorityCountLookupAccountSidWLsaClosejGetSidLengthRequiredJGetLengthSidLsaFreeMemorypGetTraceEnableFlagsrGetTraceLoggerHandle,UnregisterTraceGuidsqGetTraceEnableLevelRegisterTraceGuidsWRegQueryValueExWRegOpenKeyExWTRegCloseKeyRSetUnhandledExceptionFiltermGetModuleHandleW0QueryPerformanceCounterGetCurrentProcessIdGetCurrentThreadIdGetSystemTimeAsFileTimeGetTickCountUnhandledExceptionFilterGetCurrentProcesspTerminateProcessSetLastErrorFreeLibraryPInitializeCriticalSectionLoadLibraryWLeaveCriticalSectioniGetModuleFileNameWGetProcAddress)EnterCriticalSectionDeleteCriticalSectionGetVersionExW<GetFileAttributesWPGetFullPathNameWCreateDirectoryW[ExpandEnvironmentStringsWlGetModuleHandleExWwcsrchrd_vsnprintf_wcsnicmpwcschrj_vsnwprintfRtlFreeHeapRtlAllocateHeapmemcpymemset 8Ph   AuditShD.exe to switch from immersive shell to classic shell in Audit mode. 4VS_VERSION_INFOD%D%?StringFileInfo040904B0LCompanyNameMicrosoft Corporationl"FileDescriptionAudit Mode Desktop Switch Utilityp(FileVersion6.3.9600.17415 (winblue_r4.141028-1500): InternalNameAuditShD.exe.LegalCopyright Microsoft Corporation. All rights reserved.B OriginalFilenameAuditShD.exej%ProductNameMicrosoft Windows Operating SystemBProductVersion6.3.9600.17415DVarFileInfo$Translation  (@H08 (08@HPXx8P`pPX`h