archive
/
windows-xp
mirror of https://github.com/tongzx/nt5src
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
Source code of Windows XP (NT5)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
6 Commits
1 Branch
0 Tags
2.0 GiB
 
 
 
 
 
 
Branch: master
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'master'
${ noResults }
windows-xp/Source/XPSP1/NT/base/ntos/se/embedded/auditing_{cbd79e8a-8504-443...

5313 lines
371 KiB
Raw Permalink Blame History

<?xml version="1.0" encoding="UTF-16"?>
<!DOCTYPE DCARRIER SYSTEM "Mantis.DTD">
<DCARRIER
CarrierRevision="1"
DTDRevision="16"
>
<TASKS
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </TASKS>
<PLATFORMS
Context="1"
> </PLATFORMS>
<REPOSITORIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </REPOSITORIES>
<GROUPS
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </GROUPS>
<COMPONENTS
Context="0"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<COMPONENT
ComponentVSGUID="{1D1AF45D-AA2E-48C7-8A76-D401F1AA86AB}"
ComponentVIGUID="{57451AE9-CEED-424C-938D-ADED2EBD8F24}"
Revision="620"
RepositoryVSGUID="{8E0BE9ED-7649-47F3-810B-232D36C430B4}"
Visibility="1000"
MultiInstance="False"
Released="False"
Editable="True"
HTMLFinal="False"
IsMacro="False"
Opaque="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </PROPERTIES>
<RESOURCES
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;NETAPI32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NETAPI32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;MSVCRT.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MSVCRT.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;ntdll.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ntdll.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;cryptdll.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>cryptdll.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;RPCRT4.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RPCRT4.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;KERNEL32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>KERNEL32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;Secur32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Secur32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;USER32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>USER32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;ADVAPI32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ADVAPI32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;SAMSRV.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAMSRV.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;MSASN1.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MSASN1.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;SAMLIB.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAMLIB.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;MPR.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MPR.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;NTDSA.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NTDSA.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;DNSAPI.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DNSAPI.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;NTDSETUP.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NTDSETUP.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;CRYPT32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CRYPT32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;CRYPTUI.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CRYPTUI.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;USERENV.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>USERENV.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;certcli.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>certcli.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="File(819):&quot;%11%&quot;,&quot;msaudite.dll&quot;"
ResTypeVSGUID="{E66B49F6-4A35-4246-87E8-5C1A468315B5}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="DstPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%11%</PROPERTY>
<PROPERTY
Name="DstName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>msaudite.dll</PROPERTY>
<PROPERTY
Name="NoExpand"
Format="Boolean"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>False</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;HAL.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HAL.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;BOOTVID.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>BOOTVID.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;KDCOM.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>KDCOM.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="File(819):&quot;%11%&quot;,&quot;msobjs.dll&quot;"
ResTypeVSGUID="{E66B49F6-4A35-4246-87E8-5C1A468315B5}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="DstPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%11%</PROPERTY>
<PROPERTY
Name="DstName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>msobjs.dll</PROPERTY>
<PROPERTY
Name="NoExpand"
Format="Boolean"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>False</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;WS2_32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>WS2_32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RawDep(819):&quot;RawFile&quot;,&quot;ole32.dll&quot;"
ResTypeVSGUID="{90D8E195-E710-4AF6-B667-B1805FFC9B8F}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="RawType"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>RawFile</PROPERTY>
<PROPERTY
Name="Value"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ole32.dll</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA&quot;,&quot;CrashOnAuditFail&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CrashOnAuditFail</PROPERTY>
<PROPERTY
Name="RegValue"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>0</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA&quot;,&quot;auditbaseobjects&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>auditbaseobjects</PROPERTY>
<PROPERTY
Name="RegValue"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>0</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA&quot;,&quot;fullprivilegeauditing&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>fullprivilegeauditing</PROPERTY>
<PROPERTY
Name="RegValue"
Format="Binary"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>00</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>3</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;DisplayNameFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DisplayNameFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\system32\els.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;DisplayNameID&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DisplayNameID</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>257</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;File&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>File</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\config\SecEvent.Evt</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;MaxSize&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MaxSize</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5046272</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;PrimaryModule&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>PrimaryModule</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;Retention&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Retention</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>0</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;Security&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Security</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>01001480A8000000B4000000140000003000000002001C000100000002801400FF010F000101000000000001000000000200780005000000000014008D01020001010000000000050B000000000018009D0102000102000000000005200000002302000000001800FF010F000102000000000005200000002002000000001800FF010F000102000000000005200000002502000000001400FD010200010100000000000512000000010100000000000512000000010100000000000512000000</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>3</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security&quot;,&quot;Sources&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Sources</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>01001480A8000000B4000000140000003000000002001C000100000002801400FF010F000101000000000001000000000200780005000000000014008D01020001010000000000050B000000000018009D0102000102000000000005200000002302000000001800FF010F000102000000000005200000002002000000001800FF010F000102000000000005200000002502000000001400FD010200010100000000000512000000010100000000000512000000010100000000000512000000Spooler
Security Account Manager
SC Manager
NetDDE Object
LSA
DS
Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames&quot;,&quot;Directory Service Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\DS\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Directory Service Object</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7680</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;PolicyObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>PolicyObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5632</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;SecretObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SecretObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5648</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;TrustedDomainObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>TrustedDomainObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5664</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames&quot;,&quot;UserAccountObject&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\LSA\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>UserAccountObject</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5680</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames&quot;,&quot;DDE Share&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\NetDDE Object\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>DDE Share</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7424</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames&quot;,&quot;SC_MANAGER Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SC_MANAGER Object</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7168</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames&quot;,&quot;SERVICE Object&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\SC Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SERVICE Object</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>7184</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;CategoryCount&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CategoryCount</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>9</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;CategoryMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>CategoryMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsAuditE.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;EventMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>EventMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsAuditE.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;GuidMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>GuidMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\NtMarta.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security&quot;,&quot;TypesSupported&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>TypesSupported</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>28</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Channel&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Channel</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5120</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Desktop&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Desktop</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6672</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Device&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Device</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4352</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Directory&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Directory</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4368</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Event&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Event</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4384</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;EventPair&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>EventPair</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4400</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;File&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>File</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4416</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;IoCompletion&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>IoCompletion</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4864</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Job&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Job</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5136</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Key&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Key</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4432</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;MailSlot&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>MailSlot</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4416</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Mutant&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Mutant</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4448</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;NamedPipe&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>NamedPipe</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4416</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Port&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Port</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4464</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Process&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Process</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4480</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Profile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Profile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4496</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Section&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Section</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4512</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Semaphore&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Semaphore</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4528</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;SymbolicLink&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SymbolicLink</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4544</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Thread&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Thread</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4560</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Timer&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Timer</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4576</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Token&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Token</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4592</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;Type&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Type</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4608</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;WaitablePort&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>WaitablePort</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4464</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames&quot;,&quot;WindowStation&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>WindowStation</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6656</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_ALIAS&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_ALIAS</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5424</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_DOMAIN&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_DOMAIN</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5392</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_GROUP&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_GROUP</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5408</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_SERVER&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_SERVER</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5376</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames&quot;,&quot;SAM_USER&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Security Account Manager\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>SAM_USER</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>5440</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler&quot;,&quot;ParameterMessageFile&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>ParameterMessageFile</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>%SystemRoot%\System32\MsObjs.dll</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>2</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;,&quot;Document&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Document</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6944</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;,&quot;Printer&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Printer</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6928</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
<RESOURCE
Name="RegKey(819):&quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames&quot;,&quot;Server&quot;"
ResTypeVSGUID="{2C10DB69-39AB-48A4-A83F-9AB3ACBA7C45}"
BuildTypeMask="819"
BuildOrder="1000"
Localize="False"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>
<PROPERTY
Name="KeyPath"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security\Spooler\ObjectNames</PROPERTY>
<PROPERTY
Name="ValueName"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>Server</PROPERTY>
<PROPERTY
Name="RegValue"
Format="String"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>6912</PROPERTY>
<PROPERTY
Name="RegType"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>4</PROPERTY>
<PROPERTY
Name="RegOp"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
<PROPERTY
Name="RegCond"
Format="Integer"
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
>1</PROPERTY>
</PROPERTIES>
</RESOURCE>
</RESOURCES>
<GROUPMEMBERS
>
<GROUPMEMBER
GroupVSGUID="{E01B4103-3883-4FE8-992F-10566E7B796C}"
></GROUPMEMBER>
<GROUPMEMBER
GroupVSGUID="{D7523171-4196-45C3-BA4A-46ECD881D49B}"
></GROUPMEMBER>
</GROUPMEMBERS>
<DEPENDENCIES
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<DEPENDENCY
Class="Include"
Type="All"
DependOnGUID="{7AF53B2D-CD38-4C6F-A40F-066874548AA6}"
MinRevision="0"
Disabled="False"
Context="1"
PlatformGUID="{B784E719-C196-4DDB-B358-D9254426C38D}"
>
<PROPERTIES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </PROPERTIES>
</DEPENDENCY>
</DEPENDENCIES>
<DISPLAYNAME>Auditing</DISPLAYNAME>
<VERSION>1.0</VERSION>
<DESCRIPTION>Kernel Auditing</DESCRIPTION>
<COPYRIGHT>2000 Microsoft Corp.</COPYRIGHT>
<VENDOR>Microsoft Corp.</VENDOR>
<OWNERS>robertre;kumarp;jhamblin;maxa</OWNERS>
<AUTHORS>robertre</AUTHORS>
<DATECREATED>8/23/2000</DATECREATED>
<DATEREVISED>8/23/2000</DATEREVISED>
</COMPONENT>
</COMPONENTS>
<RESTYPES
Context="1"
PlatformGUID="{00000000-0000-0000-0000-000000000000}"
> </RESTYPES>
</DCARRIER>