MZ@ !L!This program cannot be run in DOS mode. $PELnR"!  j>  %`O   H.textDh j `.rsrcl@@.reloc @B H P 8bYFJ|D{/xhh@HvRv^wDq#W)a/3̊a0MR-8{{ o4BKpR6J0Bxv2gJ :{ F6g[t{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*2{ ( *6( } *z\V40rp( s }"( o o /,{"r%po s r%p s ( s rYpo rqps o rps o! ;%(# o$ (% !4 {"rpo  s& rp s ( *SU4@0G(' % ,<rp(( -rp(( -rp(( -*(!*(&*("*0(' % 9~-as) %rp(* %r p(* %rp(* %rp(* %r-p(* %rp(* %rGp(* ~(+ ,UE %,+1(#*($*(*( *('*(*(%*(, r_p (' (- (. *J{&{o/ *J{'{o/ *J{({o/ *0(( {&(?{$o0 -*{$o0 1(* s1 o2 +{$o3 {s1 o4 { o5 s6 , ()*0(( {(@{#o7 -* {#o7 1(* s1 o2 +s{#o8 o9 +F(: {# o; (;s1 (, rp (- (< (= -o> o4 { o5 s6 ,()*^S0u(( { 8R   o? o@ 8oA sB (C -(D oE (D oE (( -  oF 9 sG ((H -!(C ,oI . oI 3D oJ sK oL rpoM sN oO oL rpoP sN oO oL rpoQ sN oO oL rpoR sN oO oL r/poS sN oO oL rUpoT sN oO (U  Y(, {"rmpo  oV (-   sW   rmps (X oY :2 ,o> -S{"rpo  (,  {(- s   rp s (X X i?*A4t&Y, 0f(( {  8C   oZ o@  8 oA sB (C -(D oE (D oE (( -  oF ,s (D s[ (U  Y(, {"rpo  oV (- sW rps (X  oY :A  , o> -S(, {"rpo {(-   s   rp s (X  X   i?*qYR, 01(( (  (H :{o\ r%po] o^  8 o_ tT o` oa  +L o_ tXob rEpoc ,*od rOpoe ,(4(5& oY - u  , o>  oY :h u  , o> {of s1 o4 { o5 s6 ,()*^Y;0 ((  +v{(9 og +9oh {% oi &(, r_p (- (< oj -u  , o> X {i?|{%o0 -*{%o0 1(*s1 o2 +{%o3 {s1 o4 { o5 s6 ,()*"Fh0V (:(( (* ok -*s1 o4 o2 { o5 s6 , ()*0  {~l (( ,r}p}{(m 3sn *{(m 3 {so *{(p {oq or {os st rpou *0 j  ov  oV s (X ,y{j. {/fsK {"rpo ow oV s (X oL rpsN oO  (x jX 8dj30{"rpo s rp s (X * T ^0 rp (' % 9u~ -Us) %rp(* %r p(* %rp(* %rp(* %rp(* %r-p(*  ~   (+ 9 E  88rp  {#o8 o9 +W(: {#o; (; (, rp%X _ (- (y (= -o> rp(y 8jrp {$og +Moh (, rp%X_{(- (y oj -u,o> rp(y 8rp {%og +[oh  rOp (y  (, rp%X_ {(-   (y oj -u,o> rp(y +3(+ +)(, r_p(' (- (. (, {"rpo (- (< *(d)^Zh\0 = rp rp  {8  rp (3sz rpo{ 9s| rpo} u>,Prpo} t>o~ +o_ o o oY -,u,o> rpo} o o (?{$og  +I oh (, oE (, rp!!%X _!!(- o  oj - u"","o> r*po{ 9r*po} u>9r*po} t>o~ #8#o_ o (9  og $+]$oh  rOp (, oE (y (, rp%%%X _%rOp (y %(- o $oj -$u&&,&o> #oY :Tݵ#u'','o> r*po} o (9  og (+](oh  rOp (, oE (y (, rp))%X _)rOp (y )(- o (oj -(u**,*o> r4po{ 9s|  r4po} u>,Pr4po} t>o~ +++o_  o o +oY -,+u,,,,o>  r4po} o o  (@r*po{ :rpo{ :{#o8 o9 -+n-(: {#o; (<(, rp..%X _..(- (, oE rNp( o -(= -f-o> o s o /8/( rOpoe ,-%0%101o rNp(=( o 8{#o ,;{#o; (<%2%323o rNp( o +=(, {"rRpo 444(- (< o &/( :(/ o> ,Mo -D(, {"rpo (- s rps (X 8o 9so o 585o_ tArp(, oE %69E~!: s) %rp(* %r*p(* %r4p(* %rp(* %rp(* %rp(* %rp(* %rp(* %rp(* %rp (* !~!67(+ 97E 8kA8io} (,ok >(6 (y 8po} (-ok >S(6 (y 8=o} (.ok > (6 (y 8 :o} (0ok 1(6 (y 8:o} (1ok 1(6 (y 8o} (2ok 1z(6 (y +go} (/ok 1M(6 (y +:(6 (, r,p888o} 8(- (y 5oY :L5u99,9o> o o :+j:( (y rpo , ok ,5rNp rp( +! ok , rp ( rp(y rp(y :( -:o> Xi?rp(y *Ax$V4j;qj0$T~9a@vw 0rp u>,ft> rp(y  +8rpo o r p( o Y/ rp(y X o 2r p(y +.  rpr p( *0rp u>,ft> rp(y  +8rpo o r p( o Y/ rp(y X o 2r p(y +.  rpr p( *0j j u>,Gt>o~ + o_ o (7,` oY -. u,o> o (7-rp*` (, r9pd(- *'A0 o s 2&(, {"ropo (- (. ( ,zo s e( o te V (, {"rpo o (- sW rps (X rp$(, rpo (- **2jK$oVj07rp o (8-rp*( rp(, ( rp( rp(, ( rp( rpo{ 9rpo} o (8-rp*( rp(, ( rp( rp(, ( rp( (, rp(- (y +%(, rp(- (y *07rp o (8-rp*( rp(, ( rp( rp(, ( rp( rpo{ 9rpo} o (8-rp*( rp(, ( rp( rp(, ( rp( (, rp(- (y +%(, rp(- (y *0rp u>,vt> rp(y  +H(, r@ p o o (- (y o Y/ rp(y X o 2r p(y +%(, r@ p(- (y *0[rpo{ r*po{ r4po{ -3-0--{"rn po s rn ps ( *0x( (H -g( r poc -( r poc ,A{"r po (,   (- s r ps ( *0.sG ݱ&{"rpo (,   {  (- s rp s (X  (, {"rmpo     oV  (-  sW rmps (X m(  (H -ZoI . oI 3H{"r po (,    (- s r ps ( ** Xm eYbPok ,%Prp(y Q*0](, ( UJ {"r po (, (- sW r ps (X  * *J0a(D ( J {"r0 po (, (- sW r0 ps (X  * *Jo0s  ( o o ݗ rp s (X    rp s (X  ݿrp s (X  ݠrp s (X  ݁rp s (X  bo  89 o o o rR p( ,M{"rh po (, (- s   rh ps (X 8o ( r poc :o ( r poc -qo ( r poc -X(C -u{"r po  (,  o (- s   r ps (X +%o (4o (, oE oi & oY :  , o> * *Au<vYwxxL  0O{ 83 o o  8 o_ tA o} -K{"r po (,    (- s r ps ( 8u>9t>o~  +U o_ -H{"r po (,    (- s r ps (  oY - u,o>  oY : u,o>  X  i?*A4b#(0o0 -{*{ (< {rpoc ,rNprp( +9{]o 3rNprp( +rp(y o *0bo0 -rp*r p  +3r po3 r p( o0 Y/ rp(y X o0 2rp(y *0{#o7 -rp*r p s| {#o8 o9 +T(:  +4{#o; o3 (, oE o -o X {#o; o0 2(= -o> +7r po r p( o Y/ rp(y Xo 2rp(y *1a0(D s[ o o  8] o_ tz {#o (, oE o :o sG oI . oI 3"(  (H 9o (5&(, {"r po    o  (- (< s (, oE oi &{#o (, oE o +}{#o (, oE o; (, oE o -L(, {"r po    o  (- (< (, oE oi & oY : u  , o> Y(, {"rpo oV (- sW rps (X *A4pYR0{$- s }$+ {$o o@  8 oA  o? o@  8 oA sB (C - oc - oF 9sG Y(, {"rmpo    oV  (- sW rmps (X goI . oI 3"(C ,(  (H ,:(5&{$(, oE o -{$(, oE oi &  oY :  , o> -S{"rpo (, {(- s   rp s (X  oY :o  , o> *ALw YD P ( 0 {#o o@ 8oA  oZ o@ +YoA sB (C - oc - oF ,.(, r< p(- (< (> oY - ,o> -S{"rpo (,   {  (- s rp s (X oY : ,o> */f  0!A rp}A rp}A rp}j}~l }(m }rp}s }#s }%s| }&s| }'s| }(( *03"A rv p})A r p}*( *r p*r p*r p*rL p*r p*{)*{**6~ ( *F{ ~ ( *B{ ([*6~ ( *F{ ~ ( *>{ (Z*6~ ( *F{ ~ ( *B{ ([*}s }s }( }*0g{,{o - {o {,{o - {o {,{o - {o ( *0[# rp +"q( ,ь( X ZY1 o Po o *0$ TTjUs ~ (k n n.*( (  (k - ~ ( , ( T ( T ( (l ,**D0t04%{,{o - {o |(T ,**01%{,{o - {o |(T &*0k&o0 3o3 (t*rp og +oh ( oj -u , o> ( (t*$!E0%{~ |(U &*0;'  -+ ` -+` {|(\ *0(~ ( ,( 3( ( ~ ( - ( +j}~ ( ,( 3( ( ~ ( - ( + !}}{(n*0j)s {~ (b n n.*( Z( { (b -( (q ( *=$a0x)s {~  (c n n.*( Z( {  (c -( (q ( *D+o0 H*s s {~ ~  (d n n3 Po *n n3 Po *n n.*( 0~ + Z(  / s ( 0~ + Z(  / s { (d -/( (q~ ( ,( (q+~ ( ,( ~ ( ,( *P+0+s (y ,*og 8oh s (z ,ݓ og  +D oh s s ({ ,\( ,E oj - u  , o> oj :cu  , o> **LQ0, rpQs ~ (e n n.*( Z( (e -/( Q{-{P(h + P(i ( *C@{-{(h*(i*0)rpQs ,}rp}}~ (e n n.*( Z(  (e - ( Q ( *`y0$-Q( ,*(*0l.s ~ (f n n.,*( ( (f -( ( ( *8+c0/ rpQ( ,*{(, oE \o {(, oE {(, oE ~ rQ po r po t 8   (, oE (( ,# Y(, ( B&  ݮ (, oE (( ,  Y(, (  &  y.3 X  nij?o.3 *{ ( ,* }{ ( ,* }( * *   0]0  Z( rpQ (o n n3( Z( (o -( Q( * oj :eu  , o> *d>#02, {o   Pog 8oh {~ (V : }}( -!{,{(, oE }{(, oE o -{(, oE o  oj :Ru,o> -**03 s o8 o( :{(, oE {(, oE {(, oE Ar pr pr p( o ,o o +s   o  o Xi? o o 8a(   o o o  o o 1" o o o ( :{  o o o o o o o o o (W : o o 8(   o( -n }{,{(, oE }{ o(, oE o -{ o(, oE o ( :bo> ( :o> {o o 0**A4]ty04 o8 o( :{oooo(W -k }{,{(, oE }{o(, oE o -{o(, oE o Xi?8{o o 0**05{,~l *(j ( *06 Q{(Y ,*, n n.*{o    ( {o o 8( s  @ j {o {    (r &  (a n n. n n3^%X {o {#jj @  ( ( (  {s X 8,X |{ j b |{ nX  ( ( s  (` n n. n n3Y%X {o {# { { {   {s X +^,ݗ%X {o {{ { { {(    {s(  :o> {sQ} nij3 + **AVO07{, (* Qj {(X ,*, n n.*( n n.( ( ( {o  {o o 8( s  @  j {o {     (r &  (a ,c %X{o {#jj @  (  {,  {+sX8  |{ j b |{ nX( ( (  (` ,i %X{o {# { { {   {,  {+sX+U %X{o {{ { { {(   {s(  :/o>  {sQ}n ij3 + *Af08s (  s {(m , sQ *{( ( s {( ( s {sQ *0u)s Qs {~ (g n n.*( Z( { (g -( (q ( *F&l2{(]*0!9{( s ( (_*0:Ro(, oE {o -R*o}o}o}|o ( s (  cn_i} |o( s ( n_i} o}{o {{o {(^*rp}rp}~ }( *0rp}rp}~ }( }}}}}}}} } } } }*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*~ }( rp( s }*V(}}*{*"}*{*"}*0rp}rp}rp}( },ok - rp+0}{r poe -r p{(y }}}P}*{*{*{*{*{*0&;s (o  o  8(  (o i,g{rp(( -<A{r p{r p( +r p{r p( +e{rp(( -<A{r p{r p( +r p{r p( oi &( :o> *0<s (o  o  8(  (o 8 {rp(( -JA{r p{rpr p( +>Ar p{rpr p(  oi &Xi?F( :o> *{*"}*{*>}}*{*"}*{*>}}*2{( *6( }*{*"}*0=rp( s }( o o sS}{os , (*( (H ,A{,9(D {r po (- s r ps ( *(' r)p(( ,({op*b{o &{op*0M>(' % ,*rEp(( -r)p(( - +(+( r[ps ( *66J{{o/ *03?{i-(*{  + (X i2*0<@s {oz ,O(, {r{po _(- s  r{ps (X *( o s &{o o &{8,Do + (   o  o o ( - o> sB  og 8oh    oF 9s  s  {   o{ n n3N(, {rpo  (- s rps (X 8 , (8 o0 A og  + oh %X oj - u!!,!o> i3ok - rps  og "+"oh o - o "oj -"u##,#o>  o0 1+{ o s(U oj :Wu$$,$o> -X{rpo (, %%%-&r}p%%(- s rp s (X Xi?f*Ad-"*,V 0A( o  (  {-{o o &s o 8( {,i{o 9(D {rpo  _(- s rps (X +F,Co + (   o  o o ( - o> { o ,rQp(y (.  (8 og +moh  { o~-K(D {rpo (-   s   rps (X +  oi &oj -u,o> ( :f o> o0 -*{ov , ({o ,  (*((H ,j}{o --(X+0 n n. n n3 (X+  (*{j. n{2*{{ Zo 9o*AL-EzA0oBrp(  ,,(, {r[po  _ (- s ,r[ps ( *r[ps (X *0Cs| {i-{o/ *{o +y( r poe , o +Z{+E r poe ,r p( o +r pr p( o Xi2( :{ o> **0kDo +P  o,=(, {rpo (- s r[ps (X + X i2(U *0EA rp}A rp r7p rp rp rp r7p }}s| }}j}A}s }s   s! '  s" o#    s" o#  \'  s" o# o$ }( *{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*J{{o/ *rp( s }( o o sS}*0d(-*((' % ,?rEp(( -r)p(( -rp(( -+(+(+({op*N}{op*(*0@F{{ou , (*{o , (*(U *0{G{{ou , (*s {oy , (*og 8 oh s {oz , s &{8sB  og 8oh oF 9s s  { o{ , (8 o0 A   og +oh    %X  oj -u,o> s  og +oh   o oj -u,o>  o0 1+{o s(U oj :u,o> -Y{rpo (, {((- s rp s (X Xi?/oj :u,o> *Ad "+P!q2Fe0H{~ ( -{~ ( ,O{{(% ,<(, {rpo (- s rps ( *{{ou , (*s {i>{ 8 {o ,(. (8og +loh {o~-K(, {rpo (- s rps (X + oi &oj -u,o> X i?) o0 -*{o| ,( o0 -?(, {rpo (-   s   rps ( {ov ,({~ ( -{~ ( ,#{{{ox ,({o ,( +Z{ o n n3*,n n. (+)  ( X {j.  n{2*{,*yf0I{o3 ( {og  8 oh (< ( rKpoc -grUpoc -Yr_poc -K(, {ripo    (- s rips ( oc -M(, {rpo    (- s rps ( ݂ oj : u,o> rKpoc ,R{o0  >(, {rpo (- s rps ( *{o0 1?(, {rpo (-   s   rps ( *0Js &{o  8X (  ( o o ݈ rp s (X   rp s (X rp s (X rp s (X rp s (X ݯo  8 o o o rR p( ,J{rh po (,    (- s   rh ps (X +{o (, oE oi & oY :l  , o>  ( :  o> {o0 *A"9u"Sv"mw"x"d k~0oBrp(  ,,(, {r[po  _ (- s ,r[ps ( *r[ps (X *0nD-co +P  o,=(, {rpo (- s r[ps (X + X i2(U *0Ss }s| }A}~ }~ }A}j}( *{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*0#Krp( s }( o o 2$( o o 3>( o o& /,{rpo s rp s ( ( o o sS}(((H ,C{-;(, {r3po (- s  r3ps (X {os, ({ov, (*2{op*N}{op*0L( { :{(, oE repo' ,{{o +{{o ,({{{ (  (H { Z Z(  (H ow n n3N(, {rmpo {(- s rmps ( 8n n3M(, {rpo {(- s rps ( +dn n3O(, {rpo {(- s rps ( + ,(} {8{oo8 { o  ,Z(, {rpo o{(-   s   rps (X + ,(Xi?l{oo ,({,*Xi?*0M{(, oE % ,Arep(( -rp(( -rp(( -+} *} *} *(, {r'po  { (- s r'ps ( *0N ( o {o o( 1I(, {rQpo {(- s rQps ( o +o  o }oY - ,o> o) }*s! x0oBrp(  ,,(, {r[po  _ (- s ,r[ps ( *r[ps (X *rp}}} ( *~ } ~ } ( } } } *v~ } ~ } ( *{ *{ *{ *( *0iOrp o +o_ tA rp( oY -u , o> o ,o * %20P ~l Q~ ~ ( ~ ( ,(* *  (  (* , s+  o, ~ (-(* ++o QP(- o ,PPok Yo. Q(&*/w{*"}*{*>}}*{*>}}*{*"}*N(((/ *0Q{(0 ,+(, {rpo (- rps1 zsn oZ o@ +boA {(2 ,Ks3 }F (, {rpo oV (- sW zoY - ,o> ,o> {-8(, {rpo {(- s4 z*(dr=RKo > 0R{9s5 {o6 o7 +o8 o9 {j3o: oY - ,o> o; -E(, {rpo {k{(- sz {-o; 3 o< 8{9o=  + (> o? {3 +  (@ - %o> :(, {rpo   {; {k { (- sz(, {rApo   {k { (- sz (&{ (sA }*(, {ripo (- rps1 z#+N *0SoB 9sC oD oE oF joG oH oI   oB sJ (K rpoL ,!rpoM +X rpoL - ,o> {--{,T{i.I(, {rpo {koB (- (N **Z0 0Tj oO oP +oQ oR ` oY - ,o>  o oS +&oT o oU o (2 -X oY - ,o> o9 io? oV oW oX oY oZ o[ s\ *. I3| 0U{o] s^ |(_ {,F{i1; +{- {~l X {i2{o` &+o` & ,o> (a *k| j{, {ob (c *rrp( s }( *&(W *"( *lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet9PADPADP$EڦLiĩ\&QW=@z9BQ4~K)}m@䫩DpO!j2ksD Su < W1# r~%JZ,K*&-0P/`$2[= ??DE F~H>IP`QQ]Qv$XPX$\㦍a-hPb$ik_'kCt^wZ4yKt m~ EMpPq{N r. D"QZ Ym! CookedValues"Counter1FileLimit$Counter32FileLimitCounterApiError0CounterCircularNoMaxSize:CounterContinuousOrMaxSampleshDCounterExportSampleNotInInitialSet"CounterFileExists4.CounterInvalidDateRange(CounterInvalidFormat,CounterNoMixedLogTypes~$CounterNotALogFile:CounterPathInvalidOrNotInFile(CounterPathIsInvalid8CounterPathTranslationFailed&4CounterPathsInFilesInvalidb0CounterSampleDataInvalid4CounterSetEnumAccessDenied= DateTimeExpectedDescription&EventIdNotSpecified4*ExportCtrWin7RequiredY.ExportDestPathAmbiguous FileCreateFailedFileOpenFailed0GetEventDotNet35Required;2GetEventVistaPlusRequired IncorrectEventId*IncorrectEventVersionb InvalidContext InvalidSIDFormat> &KeywordLongExpected $LogInfoUnavailable .LogProviderOrPathNeeded 6LogsAndProvidersDontOverlape .NoCounterSetsOnComputer NoEventMessage 4NoMatchingCounterSetsFound 6NoMatchingCounterSetsInFile *NoMatchingEventsFoundv &NoMatchingLogsFound 0NoMatchingProvidersFound NoProviderFoundD$NotAFileSystemPathfNotALogFile2NullNotAllowedInHashtableBPayloadMismatchProviderLogLink6ProviderMetadataUnavailableM(ProviderNotSpecifiedQueryTrace@SpecifiedProvidersDontWriteToLog,SpecifyOldestForEtlEvt.&SpecifyOldestForLogTimestamp Vendor&VersionNotSpecified Cooked ValuesyYou cannot import more than one comma-separated (.csv) or tab-separated (.tsv) performance counter file in each command.FYou cannot import more than 32 .blg counter log files in each command.4s4s 4s ?44 *585*H5*5s 5s 5s 5*6*6*F6* 66s 7` 7`(7`@7`f7`v7` 7777 :8*8T8s w8s 8G4 8?94 39 S999 f999 p9 u9 999 9 9 e 39s : *:::*X:* :g::*:*:* ;* ;*:;* l;t;s ;*;* ;;;* <*$<*=<*g# ># >#>*?`?`@` ?@3L@` V@3@s @s @s @s @Au(8KiK )Bz +J +M +P+SSS SS!S0SASPS`SwS       &O&k&vKKK& K K!2QQQQQQ QQQ(cQ8QKQcQsQQQQQQ)T ,$X3DT-XP[_cll-pBp\p + V V V V V V  V+ V5 VA V_ Vz V V V V V V V3 VI V` Vy V V V V V V  V  V8 VS Vd Vy V V V V V V V V. VJ Vg V V V V V V V V# V9 VH VZ Vq V V V V V V V V V; VR Vf V V V V V V V5 VQ Vh V~ V V V V V V V0 VG Va V~ V VcVcVcVc ")0V=cVIcVVcVfcVscVcVcVcVcVcVcVcVcV cVcV4cVHcV[cVqcVcVcVcVcVcVcVV'V8VIVcV~VVVcVcVc XAOXXg|cc cc cKU ` lcw  c6`c C cm c ,! _}!!!0 !!> Q|" Q""""X"p+#Y# e#X#X_#w #{ !# Q|" l\p"%&%"G%TY# _#w P%X%%%c & T6&T_#w P%X@&XR&&&&cQ'cQ7'cQU'cQp'cQ'cQ4(Q@(Y( ( _(((X(% (X$)3 Z3 4 8 8     2 C!b !s!!%!-!6!>!G!O!X!8 `!H i!w( q!- z!7 != !I !N !I !"N !rw"w#w $w3$wF$w\$w$ w% w(% wD*9 w+J w,V w4- {- . 1  < < =1 0>H D?_ @x A B B pC D D `E) !E: #HU w$,Jr $J %(K &8L &xN (P *Q5 w,R5 w,R ,R ,R ,R ,R ,R ,R ,S5 w,S} ,&S ,7S5 w,ES} ,WS ,gS5 w,uS} ,S ,S5 , - 1/ ?2 M6 `< |> ? @ B  I J M !O ,S )6V :?Y JK_ ^[h qfl op zu w x {    (Stw8TTHUUUPVxV V|W.XCXOY_[v#[v,[1p\:\A(]:^I\_Q```hahHdhHe$nte6t$hJtjV|kflyw(lXlNm5 wxm5  nnn"n+n3n w `w {5 w 5 Q 5 "))))))))))))))))))))))))))))))))))))))()*)****D*V*b*m*u****u******u**u*u*****+++%+3+9+C+Q+9+ *W+`+i+`+i+V*p++V*+++++V*+++++ ,+ * ,5,F,*5, ,U,*V*c,r,,*V*5,5,++, ,U,,,V*,,U,+,+---0-:-B-*J-*W-f-)s--------------. ..) ...0.9.E. ,N.Z.-h.n.--v.......++.....)....)..///*J- * . '/ 8/)))))))))))).?/N/))W/-_/l/t/))))))////)))))))///N/))))))//////*/// ,// 00*00'020))))60:06020K020 5 w5 X !5 )5 15 95 A5 I5 Q5 Y5 a5 i5 q5 c 5 r 5 w5 a2 a2 i$2 q5 U2 ( c2n qm2 A5 5 2 5 w25 ( 5 2 5 w3 3 i3 5 Q 3 3 5 r 4 4 )4 N4! U4`48 i4n 5 B 44K 4P 45 V i4n 4p $4 ,4 4 5,59tw5 44 <4 A5 AX5 s5 5 A5,Q5 a5Q5 5 i5  i*6 a96 5 $ L43 aU69 ac6G av6G a6 a6 6 A6A5 Q 6 56 5 Q 7 47 4 4 W7 4   7 7 7 74 445 7n 7I7&5 w5 I8+88IG835 9j88N86T 8ld5 wY85 wY44 !843 d4 8d4p 5 8 4l4 d4 d8 8d8l5di4n Y44 d9t4|4 !9 8|5*97n 8)5 )315 99I9989n Y8a9q:A$:T5 w G:io:u4 4 :  : : P; \;c;4i4n ;4 c;,;w;w5 w 5 w5 w5 w5 5 5 J5 w 5 w5 5 w<5 &<3 &!5 &95 )&5 w!5 wI5 } twQ =8&Y9==& 8C& H=I& P=O&`45 r V=n Y^=`&: &Yk=e& 8u&w=:&=&=5 &3&==Y=&Y=& =I&q>&y>&y*9&qV=';w84 5 w 8Y'4 4 43 5 w4 4p 4 4 4i4n 44 554p i4n i4n >'4 4 4 $>/>>>L>'5Y\>G(4p 4 4 4 5c>n>:*>@*>n 4 44 > > >t*55 w84 >*5 S+5 w5 w 5 43 4 >&>n 7,i4n ?Y,?65 r >?n K?6 W?6rw a? Q5 765 Q5 5 wo?74 $4 (43 i4n 44,4 ( ,545 3 z?5 w???? @t7*@{75 a@7h@,x@,@@7<4 D4 7L4 T4 @7@77n @77n @77n 5 7( 85 847 A8wtww- F+NQ T $f(k,z048<@DHL     & / 8 A J S \ e n w                 $ ( ," 0+ 44 8= <F @O DX Ha Lj Ps T| X \ ` d h l p t x |          ' 0 9 B K T ] f o x                f     4 8 <$ @) D. H3 L8 P= TB XG \L `Q dL hV l[ p` te xj |o t y ~   ejt e j t ` i ` 8) <. @8 Dj H L P)_))e.[%.s:.{:.S:.c:.k:.3:.K:.#:.9.;6:.Cu:C IIBc%iieiV>;PgH bS e  |  e 1! T  !  ) e)Q!)!)Y"I}#I"i%il$|      !| 1! c)/036Cek(,{+e-,e$.- P -)3.IY.I eIeIH I.ii,i11e,22e2,  3)P)-II4io4i e45544i(8o88e859 K& K&@ K&_ va xa za |a a a a %a  + ] W FZr 'I]'Kq%V&j&q&|&&&&&&&&& '#')'='''''!(L(X(]())%*-*3*z**++4+G+[+R0X00003333667H7778$&-3:@ C; C K X e j t       4 9 @ O [ o u    e   `        Microsoft.PowerShell.Commands.Diagnostics.dllGetWinEventCommandMicrosoft.PowerShell.CommandsGetEventPSSnapInPdhSafeDataSourceHandleMicrosoft.Powershell.Commands.GetCounter.PdhNativePdhSafeQueryHandlePdhSafeLogHandlePdhResultsPerfDetailSYSTEMTIMEPdhFormatPdhLogAccessPdhLogOpenModePdhLogOpenOptionPdhLogFileTypePdhWildCardFlagCounterHandleNInstancePdhHelperPDH_COUNTER_PATH_ELEMENTSPDH_FMT_COUNTERVALUE_LARGEPDH_FMT_COUNTERVALUE_DOUBLEPDH_FMT_COUNTERVALUE_UNICODEPDH_RAW_COUNTERPDH_TIME_INFOPerformanceCounterSampleMicrosoft.PowerShell.Commands.GetCounterPerformanceCounterSampleSetCounterSetGetCounterCommandImportCounterCommandExportCounterCommandCounterFileInfoCommonUtilitiesMicrosoft.PowerShell.Commands.Diagnostics.CommonNewWinEventCommandEventWriteExceptionSystem.Management.AutomationPSCmdletPSSnapInmscorlibSystem.Runtime.InteropServicesSafeHandleSystemObjectValueTypeEnumIDisposableExceptionqueryListOpenqueryListClosequeryTemplatequeryOpenerTemplatequeryCloserpropOpenpropClosefilePrefixMAX_EVENT_BATCHhashkey_logname_lchashkey_providername_lchashkey_path_lchashkey_keywords_lchashkey_id_lchashkey_level_lchashkey_starttime_lchashkey_endtime_lchashkey_userid_lchashkey_data_lcget_ListLogset_ListLog_listLogget_LogNameset_LogName_logNameget_ListProviderset_ListProvider_listProviderget_ProviderNameset_ProviderName_providerNameget_Pathset_Path_pathget_MaxEventsset_MaxEvents_maxEventsget_ComputerNameset_ComputerName_computerNamePSCredentialget_Credentialset_Credential_credentialget_FilterXPathset_FilterXPath_filterSystem.XmlXmlDocumentget_FilterXmlset_FilterXml_xmlQuerySystem.CollectionsHashtableget_FilterHashtableset_FilterHashtable_selectorSwitchParameterget_Forceset_Force_forceget_Oldestset_Oldest_oldestSystem.ReflectionAssembly_systemCoreAssemblySystem.ResourcesResourceManager_resourceMgrSystem.Collections.GenericDictionary`2System.Collections.SpecializedStringCollection_providersByLogMap_logNamesMatchingWildcard_resolvedPathsList`1_accumulatedLogNames_accumulatedProviderNames_accumulatedFileNamesBeginProcessingEndProcessingProcessRecordAccumulatePipelineLogNamesAccumulatePipelineProviderNamesAccumulatePipelineFileNamesProcessGetLogProcessGetProviderProcessListLogProcessListProviderProcessFilterXmlProcessFileProcessHashQuerySystem.CoreSystem.Diagnostics.Eventing.ReaderEventLogSessionCreateSessionEventLogReaderReadEventsBuildStructuredQueryBuildStructuredQueryFromHashTableHandleEventIdHashValueHandleLevelHashValueHandleKeywordHashValueHandleContextHashValueHandleStartTimeHashValueHandleEndTimeHashValueHandleDataHashValueCheckHashTableForQueryPathPresenceTerminateForNonEvtxFileWithoutOldestValidateLogNameExtendPredicateKeywordStringToInt64DateTimeStringToDateTimeValidateAndResolveFilePathCheckHashTablesForNullValuesAddProviderPredicatesToFilterBuildProvidersPredicateBuildAllProvidersPredicateAddLogsForProviderToInternalMapIEnumerable`1FindLogNamesMatchingWildcardsFindProvidersByLogForWildcardPatterns.ctorListLogLogNameListProviderProviderNamePathMaxEventsComputerNameCredentialFilterXPathFilterXmlFilterHashtableForceOldestget_Nameget_Vendorget_VendorResourceget_Descriptionget_DescriptionResourceget_Types_typesget_Formats_formatsNameVendorVendorResourceDescriptionDescriptionResourceTypesFormatsget_IsInvalidReleaseHandleIsInvalidPDH_CSTATUS_VALID_DATAPDH_CSTATUS_NEW_DATAPDH_CSTATUS_NO_MACHINEPDH_CSTATUS_NO_INSTANCEPDH_MORE_DATAPDH_CSTATUS_ITEM_NOT_VALIDATEDPDH_RETRYPDH_NO_DATAPDH_CALC_NEGATIVE_DENOMINATORPDH_CALC_NEGATIVE_TIMEBASEPDH_CALC_NEGATIVE_VALUEPDH_DIALOG_CANCELLEDPDH_END_OF_LOG_FILEPDH_ASYNC_QUERY_TIMEOUTPDH_CANNOT_SET_DEFAULT_REALTIME_DATASOURCEPDH_UNABLE_MAP_NAME_FILESPDH_PLA_VALIDATION_WARNINGPDH_CSTATUS_NO_OBJECTPDH_CSTATUS_NO_COUNTERPDH_CSTATUS_INVALID_DATAPDH_MEMORY_ALLOCATION_FAILUREPDH_INVALID_HANDLEPDH_INVALID_ARGUMENTPDH_FUNCTION_NOT_FOUNDPDH_CSTATUS_NO_COUNTERNAMEPDH_CSTATUS_BAD_COUNTERNAMEPDH_INVALID_BUFFERPDH_INSUFFICIENT_BUFFERPDH_CANNOT_CONNECT_MACHINEPDH_INVALID_PATHPDH_INVALID_INSTANCEPDH_INVALID_DATAPDH_NO_DIALOG_DATAPDH_CANNOT_READ_NAME_STRINGSPDH_LOG_FILE_CREATE_ERRORPDH_LOG_FILE_OPEN_ERRORPDH_LOG_TYPE_NOT_FOUNDPDH_NO_MORE_DATAPDH_ENTRY_NOT_IN_LOG_FILEPDH_DATA_SOURCE_IS_LOG_FILEPDH_DATA_SOURCE_IS_REAL_TIMEPDH_UNABLE_READ_LOG_HEADERPDH_FILE_NOT_FOUNDPDH_FILE_ALREADY_EXISTSPDH_NOT_IMPLEMENTEDPDH_STRING_NOT_FOUNDPDH_UNKNOWN_LOG_FORMATPDH_UNKNOWN_LOGSVC_COMMANDPDH_LOGSVC_QUERY_NOT_FOUNDPDH_LOGSVC_NOT_OPENEDPDH_WBEM_ERRORPDH_ACCESS_DENIEDPDH_LOG_FILE_TOO_SMALLPDH_INVALID_DATASOURCEPDH_INVALID_SQLDBPDH_NO_COUNTERSPDH_SQL_ALLOC_FAILEDPDH_SQL_ALLOCCON_FAILEDPDH_SQL_EXEC_DIRECT_FAILEDPDH_SQL_FETCH_FAILEDPDH_SQL_ROWCOUNT_FAILEDPDH_SQL_MORE_RESULTS_FAILEDPDH_SQL_CONNECT_FAILEDPDH_SQL_BIND_FAILEDPDH_CANNOT_CONNECT_WMI_SERVERPDH_PLA_COLLECTION_ALREADY_RUNNINGPDH_PLA_ERROR_SCHEDULE_OVERLAPPDH_PLA_COLLECTION_NOT_FOUNDPDH_PLA_ERROR_SCHEDULE_ELAPSEDPDH_PLA_ERROR_NOSTARTPDH_PLA_ERROR_ALREADY_EXISTSPDH_PLA_ERROR_TYPE_MISMATCHPDH_PLA_ERROR_FILEPATHPDH_PLA_SERVICE_ERRORPDH_PLA_VALIDATION_ERRORPDH_PLA_ERROR_NAME_TOO_LONGPDH_INVALID_SQL_LOG_FORMATPDH_COUNTER_ALREADY_IN_QUERYPDH_BINARY_LOG_CORRUPTPDH_LOG_SAMPLE_TOO_SMALLPDH_OS_LATER_VERSIONPDH_OS_EARLIER_VERSIONPDH_INCORRECT_APPEND_TIMEPDH_UNMATCHED_APPEND_COUNTERPDH_SQL_ALTER_DETAIL_FAILEDPDH_QUERY_PERF_DATA_TIMEOUTPERF_DETAIL_NOVICEPERF_DETAIL_ADVANCEDPERF_DETAIL_EXPERTPERF_DETAIL_WIZARDyearmonthdayOfWeekdayhourminutesecondmillisecondsPDH_FMT_RAWPDH_FMT_ANSIPDH_FMT_UNICODEPDH_FMT_LONGPDH_FMT_DOUBLEPDH_FMT_LARGEPDH_FMT_NOSCALEPDH_FMT_1000PDH_FMT_NODATAPDH_FMT_NOCAP100PERF_DETAIL_COSTLYPERF_DETAIL_STANDARDPDH_LOG_READ_ACCESSPDH_LOG_WRITE_ACCESSPDH_LOG_UPDATE_ACCESSPDH_LOG_ACCESS_MASKPDH_LOG_CREATE_NEWPDH_LOG_CREATE_ALWAYSPDH_LOG_OPEN_ALWAYSPDH_LOG_OPEN_EXISTINGPDH_LOG_CREATE_MASKPDH_LOG_OPT_USER_STRINGPDH_LOG_OPT_CIRCULARPDH_LOG_OPT_MAX_IS_BYTESPDH_LOG_OPT_APPENDvalue__PDH_LOG_TYPE_UNDEFINEDPDH_LOG_TYPE_CSVPDH_LOG_TYPE_TSVPDH_LOG_TYPE_TRACE_KERNELPDH_LOG_TYPE_TRACE_GENERICPDH_LOG_TYPE_PERFMONPDH_LOG_TYPE_SQLPDH_LOG_TYPE_BINARYPDH_NOEXPANDCOUNTERSPDH_NOEXPANDINSTANCESPDH_REFRESHCOUNTERShCounterInstanceNamem_isPreVistaPdhBindInputDataSourcePdhOpenQueryHPdhAddCounterPdhAddRelogCounterPdhCollectQueryDataWithTimePdhCollectQueryDataPdhCloseQueryPdhCloseLogPdhOpenLogPdhResetRelogCounterValuesPdhSetCounterValuePdhWriteRelogSamplePdhGetFormattedCounterValuePdhGetRawCounterValuePdhEnumMachinesHPdhEnumObjectsHPdhEnumObjectItemsHPdhMakeCounterPathPdhParseCounterPathPdhExpandWildCardPathHPdhValidatePathExPdhValidatePathPdhGetExplainTextPdhGetCounterInfoPdhGetCounterTimeBasePdhGetDataSourceTimeRangeHPdhSetQueryTimeRangePdhLookupPerfNameByIndexm_hDataSourcem_hQuerym_firstReadingm_hOutputLogDisposem_ConsumerPathToHandleAndInstanceMapm_ReloggerPathToHandleAndInstanceMapReadPdhMultiStringGetCounterInfoPlusConnectToDataSourceOpenQueryOpenLogForWritingSetQueryTimeRangeEnumBlgFilesMachinesEnumObjectsEnumObjectItemsGetValidPathsFromFilesIsPathValidMakePathMakeAllInstancePathParsePathTranslateLocalCounterPathLookupPerfNameByIndexGetValidPathsAddCountersAddRelogCountersAddRelogCountersPreservingPathsGetCounterSetHelpReadNextSetPreVistaReadNextSetGetFilesSummaryExpandWildCardPathResetRelogValuesWriteRelogSampleSetCounterValueMachineNameObjectNameParentInstanceInstanceIndexCounterNameCStatuslargeValuedoubleValueWideStringValueSystem.Runtime.InteropServices.ComTypesFILETIMETimeStampFirstValueSecondValueMultiCountStartTimeEndTimeSampleCountSystem.DiagnosticsPerformanceCounterTypeget_InstanceNameset_InstanceName_instanceNameget_CookedValueset_CookedValue_cookedValueget_RawValueset_RawValue_rawValueget_SecondValueset_SecondValue_secondValueget_MultipleCountset_MultipleCount_multiCountget_CounterTypeset_CounterType_counterTypeget_Timestampset_Timestamp_timeStampget_Timestamp100NSecset_Timestamp100NSec_timeStamp100nSecget_Statusset_Status_statusget_DefaultScaleset_DefaultScale_defaultScaleget_TimeBaseset_TimeBase_timeBaseCookedValueRawValueMultipleCountCounterTypeTimestampTimestamp100NSecStatusDefaultScaleTimeBaseget_CounterSamplesset_CounterSamples_counterSamplesCounterSamplesPerformanceCounterCategoryTypeget_CounterSetName_counterSetNameget_MachineName_machineNameget_CounterSetType_counterSetType_descriptionget_CounterInstanceMapping_counterInstanceMappingget_Pathsget_PathsWithInstancesCounterSetNameCounterSetTypeCounterInstanceMappingPathsPathsWithInstancesKEEP_ON_SAMPLINGFrenchCultureIdget_ListSetset_ListSet_listSetget_Counterset_Counter_counter_defaultCounters_accumulatedCountersget_SampleIntervalset_SampleInterval_sampleIntervalget_MaxSamplesset_MaxSamples_maxSamples_maxSamplesSpecifiedget_Continuousset_Continuous_continuous_pdhHelperSystem.ThreadingEventWaitHandle_cancelEventArrivedTuple`2_cultureAndSpecialCharacterMapStopProcessingAccumulatePipelineCountersProcessListSetProcessListSetPerMachineProcessGetCounterReportPdhErrorCombineMachinesAndCounterPathsWriteSampleSetObjectListSetCounterSampleIntervalMaxSamplesContinuousget_StartTimeset_StartTime_startTimeget_EndTimeset_EndTime_endTimeget_Summaryset_Summary_summary_stoppingProcessSummaryValidateFilePathsResolveFilePathsSummary_resolvedPathget_FileFormatset_FileFormat_formatget_MaxSizeset_MaxSize_maxSizeget_InputObjectset_InputObject_counterSampleSetsget_Circularset_Circular_circular_queryInitialized_outputFormatValidateFormatResolvePathFileFormatMaxSizeInputObjectCircularget_OldestRecord_oldestRecordget_NewestRecord_newestRecordget_SampleCount_sampleCountOldestRecordNewestRecordFORMAT_MESSAGE_ALLOCATE_BUFFERFORMAT_MESSAGE_IGNORE_INSERTSFORMAT_MESSAGE_FROM_SYSTEMLOAD_LIBRARY_AS_DATAFILEFORMAT_MESSAGE_FROM_HMODULEIEnumerableStringArrayToStringSystem.TextStringBuilderFormatMessageLoadLibraryExFreeLibraryGetUserDefaultLangIDFormatMessageFromModuleTemplateTagDataTagProviderMetadataproviderMetadataNullable`1System.Diagnostics.EventingEventDescriptoreventDescriptorproviderNameget_Idset_IdididSpecifiedget_Versionset_VersionversionversionSpecifiedget_Payloadset_PayloadpayloadLoadProviderLoadEventDescriptorEventMetadataVerifyTemplateCreateEventDescriptorIdVersionPayloadvaluereaderObjeventLogSessionhashfileNamelogNamexpathStringkeyStringkeyLongdtStringdtpathproviderslogPatternsproviderPatternsisPreVistaphDataSourceOutAttributeszLogFileNameListhDataSourcedwUserDataphQueryqueryHandlecounterPathuserDatacounterHandlecounterTypecounterDefaultScaletimeBasepllTimeStamplogHandledwFlagsszLogFileNamedwAccessFlagslpdwLogTypehQuerydwMaxSizeszUserCaptionphLogLogHandleCounterHandleValuedwFormatlpdwTypepValuemszMachineNameListpcchBufferLengthszMachineNamemszObjectListdwDetailLevelbRefreshszObjectNamemszCounterListpcchCounterListLengthmszInstanceListpcchInstanceListLengthpCounterPathElementsszFullPathBufferpcchBufferSizepdwBufferSizeszWildCardPathmszExpandedPathListpcchPathListLengthszCounterNamebRetrieveExplainTextMarshalAsAttributeUnmanagedTypelpBufferpTimeBasepdwNumEntriespInfodwNameIndexszNameBufferpcchNameBufferSizestrNativestrSizestrColldefaultScaledataSourceNameblgFileNameslogFileTypebOverwritemaxSizebCircularcaptionstartTimeendTimemachineNamesmachineNameobjectNamesobjectNamecounterNamesinstanceNamesvalidPathspathEltsoutPathbWildcardInstancesorigPathunifiedPathfullPathenglishPathlocalizedPathindexlocNamecountersinstancesbFlushOldCounterssampleSetnextSetbSkipReadingsummaryexpandedPathstimeStampsamplebUnknownPathinstanceNamecookedValuerawValuesecondValuemultiCounttimeStamp100nSecstatuscounterSamplesfirstSetsetNamecategoryTypesetHelpcounterInstanceMappingmachineresbTerminatesetoldestRecordnewestRecordsampleCountinputlpSourcedwMessageIddwLanguageIdnSizeArgumentslpFileNamehFilehModulelastErrormoduleNamemsgemdproviderMetaDatainnerExceptionNeutralResourcesLanguageAttributeComVisibleAttributeAssemblyVersionAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeAssemblyFileVersionAttributeAssemblyKeyFileAttributeAssemblyDelaySignAttributeCLSCompliantAttributeDebuggableAttributeDebuggingModesSystem.Runtime.CompilerServicesCompilationRelaxationsAttributeRuntimeCompatibilityAttributeMicrosoft.PowerShell.Commands.DiagnosticsCmdletAttributeop_ImplicitGetExecutingAssemblyEnvironmentOperatingSystemget_OSVersionget_MajorGetStringErrorRecordErrorCategoryCmdletThrowTerminatingErrorAssemblyNameset_NameSystem.GlobalizationCultureInfoset_CultureInfoByte{EA7319F0-2576-4773-88CD-38E44B025607}CompilerGeneratedAttribute$$method0x600001b-1RuntimeHelpersArrayRuntimeFieldHandleInitializeArraySetPublicKeyTokenLoadSystem.IOFileNotFoundExceptionget_ParameterSetNameStringop_Equality$$method0x600001d-1AddTryGetValueget_InvariantCultureIFormatProviderFormatWriteDebugAddRangeget_CountEventLogQueryPathTypeset_TolerateQueryErrorsget_Itemset_Sessionset_ReverseDirectionKeyCollectionget_KeysEnumeratorGetEnumeratorget_CurrentWriteVerboseMoveNextGetLogNamesIEnumerator`1WildcardPatternWildcardOptionsContainsWildcardCharactersget_CurrentCultureToLowerIsMatchEventLogConfigurationget_IsPresentEventLogTypeget_LogTypeEventLogInformationGetLogInformationPSObjectPSMemberInfoCollection`1PSPropertyInfoget_Propertiesget_FileSizePSNotePropertyget_IsLogFullget_LastAccessTimeget_LastWriteTimeget_OldestRecordNumberget_RecordCountWriteObjectget_MessageWriteErrorIEnumeratorGetProviderNamesEventLogExceptionXmlElementget_DocumentElementXmlNodeXmlNodeListSelectNodesXmlAttributeCollectionget_AttributesXmlNamedNodeMapXmlAttributeStringComparisonEqualsget_ValueStartsWithget_InnerXmlStringEnumeratorget_LengthEmptyget_EmptySystem.NetNetworkCredentialop_Explicitget_Domainget_UserNameSystem.SecuritySecureStringget_PasswordSessionAuthenticationset_PasswordEventRecordReadEventFormatDescription$$method0x600002a-1UInt32ConcatContainsKeyToStringset_ItemRemoveICollection$$method0x600002b-1ValueCollectionget_ValuesEndsWithGetValueInt64System.Security.PrincipalSecurityIdentifierNTAccountTypeRuntimeTypeHandleGetTypeFromHandleIdentityReferenceTranslateArgumentExceptionToUniversalTimeget_MillisecondInt32GetExtensionEventLogNotFoundExceptionConvertToInt64ParseFormatExceptionSessionStateget_SessionStatePathIntrinsicsSystem.Collections.ObjectModelCollection`1PathInfoGetResolvedPSPathFromPSPathProviderInfoget_Providerop_Inequalityget_ProviderPathPSNotSupportedExceptionDriveNotFoundExceptionProviderNotFoundExceptionItemNotFoundExceptionLastIndexOfInsertContainsIList`1EventLogLinkget_LogLinksClearParameterAttributeAllowEmptyCollectionAttributeSystem.Diagnostics.CodeAnalysisSuppressMessageAttributeAliasAttributeValidateRangeAttributeValidateNotNullAttributeCredentialAttributeSystem.ComponentModelRunInstallerAttributeIntPtrZerohandleSystem.Runtime.ConstrainedExecutionReliabilityContractAttributeConsistencyCerStructLayoutAttributeLayoutKindDllImportAttributepdh.dllGCSuppressFinalizeMarshalReadInt32CharTrimEndSplitToInt32AllocHGlobalFreeHGlobalMinValueDateTimeKindget_Kindget_TicksToFileTimeUtcMaxValuePtrToStringUniPtrToStructureTrimStartMicrosoft.Win32RegistryRegistryKeyLocalMachineOpenSubKeyget_NowToFileTimedwHighDateTimedwLowDateTimeFromFileTimeUtcSizeOfSetThreadget_CurrentThreadget_CurrentUICultureget_LCIDget_Item1get_Item2ReplaceWaitHandleWaitOneEventResetModeop_GreaterThanOrEqualget_MinorSessionStateExceptionget_ItemNamekernel32.dllGetLastWin32Errorget_Capacityget_NewLineSubstringIsNullOrEmptyget_Eventsget_TemplateXmlReaderSettingsset_CheckCharactersset_IgnoreCommentsset_IgnoreProcessingInstructionsset_MaxCharactersInDocumentXmlResolverset_XmlResolverConformanceLevelset_ConformanceLevelStringReaderXmlReaderTextReaderCreateReadToFollowingReadToDescendantWriteWarningEventKeywordget_Keywordsget_LogLinkEventLevelget_LevelEventOpcodeget_OpcodeEventTaskget_TaskGuidEventProviderWriteEventGetEventResources.resources#GetEventResources3GetEventVistaPlusRequiredSystem.Core3.5.0.01GetEventDotNet35RequiredGetLogSetFileSetGetProviderSetListLogSetListProviderSetHashQuerySetXmlQuerySet?Invalid parameter set name: {0}/Log {0} will be queriedFileSizeIsLogFullLastAccessTimeLastWriteTime%OldestRecordNumberRecordCount%LogInfoUnavailable'NoMatchingLogsFound7ProviderMetadataUnavailable1NoMatchingProvidersFound//Query//Select Pathfile://Found file {0}localhostNoEventMessageMessage+NoMatchingEventsFound<QueryList><Query Id="{0}" Path="{1}"><Select Path="{1}">{2}</Select></Query></QueryList>QueryTracelogname_<Query Id="{0}" Path="{1}"><Select Path="{1}">* pathprovidername[ASpecifiedProvidersDontWriteToLog7LogsAndProvidersDontOverlapid levelkeywordsstarttimeendtime data userid([EventData[Data[@Name='{0}']='{1}']] or [UserData/*/{0}='{1}'])*] and #</Select></Query>(!(System/EventID=) or (System/Level=5System[band(Keywords,{0})]!InvalidSIDFormatInvalidContextA(System/Security[@UserID='{0}'])s.d3Z(System/TimeCreated[@SystemTime&gt;='{0}' and @SystemTime&lt;='{1}'])W(System/TimeCreated[@SystemTime&gt;='{0}'])W(System/TimeCreated[@SystemTime&lt;='{0}'])-(EventData/Data='{0}')/LogProviderOrPathNeeded .etl .evt-SpecifyOldestForEtlEvt'SpecifyOldestForLog'KeywordLongExpected!DateTimeExpectedFileSystem%NotAFileSystemPath .evtxNotALogFile3NullNotAllowedInHashtable!System/Provider[@Name=''ProviderLogLink9Found matching provider: {0}+getevent.types.ps1xml'Event.format.ps1xml;Microsoft.Powershell.GetEventMicrosoft1GetEventResources,VendorThis PS snap-in contains Get-WinEvent cmdlet used to read Windows event log data and configuration.;GetEventResources,DescriptionqSOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009Counter\\\ (*)\)\;CounterContinuousOrMaxSamplesGetCounterSetListSetSetCounterApiError/NoCounterSetsOnComputer5CounterSetEnumAccessDenied5NoMatchingCounterSetsFound9CounterPathTranslationFailed-Could not expand path )CounterPathIsInvalidpdh.dll1CounterSampleDataInvalidK\network interface(*)\bytes total/secG\processor(_total)\% processor timeA\memory\% committed bytes in use1\memory\cache faults/secC\physicaldisk(_total)\% disk time_\physicaldisk(_total)\current disk queue lengthSummarySet7NoMatchingCounterSetsInFile/CounterInvalidDateRange5CounterPathsInFilesInvalid .blg .csv .tsv%CounterNotALogFile-CounterNoMixedLogTypes%Counter32FileLimit#Counter1FileLimit+ExportCtrWin7Required1CounterCircularNoMaxSizeblg#CounterFileExists!FileCreateFailedFileOpenFailedECounterExportSampleNotInInitialSetcsvtsv)CounterInvalidFormat/ExportDestPathAmbiguousBLG, )ProviderNotSpecifiedProviderNameNoProviderFound!IncorrectEventId+IncorrectEventVersion'VersionNotSpecified'EventIdNotSpecifiedIdtemplatePayloadMismatchsv%sG8KV18V6N5z\V4<QueryList></QueryList><Query Id="{0}" Path="{1}"><Select Path="{1}">{2}</Select></Query>^<Query Id="{0}" Path="{1}"><Select Path="{1}">*"</Select></Query>[]file:// dlognameprovidernamepathkeywordsid levelstarttimeendtime useriddata         % %% ) )) - -- 1 1159=AAE  I M I  - - I    Q A A I IU(( ((%()(-(1 (                                                                       , @ @8                 8  X    P  X       H           \ \  =@ A          A  8   QQ  A  A  AA H   H    H     AAA  A  d   d  x  Q  ` Y  ] Q           ] ]] Q QQ( ( ( (](Q Q` ` ``(` a= aa == A(a (=(A   De=Ei   E d( d d dd(d QQ m   q   templateuy}      }u(( !  $$RSA1gw:މ8e `Y>Ēe??1 3`!g-1 /%}oY5L9EC;&=oGP\dEk*+Ge+] mGetWinEventTDefaultParameterSetName GetLogSetTHelpUri-http://go.microsoft.com/fwlink/?LinkID=138336115 5   !     5!==    E U   I  I M=A A A  I MA UU  %  I - 1  9= y y  9=  yy yQyQ*I!)15!!!1 I"I!uI!! M U E  Y e%IMUQYa M1EE i  IA Mi I M%m% q quIm y  y!5!!,   Aii=        ; -=EAAEE!-EiEiiEA==E    E   !   QQ ! !1 )!!!!1  !!Q !    1A!!!A-!!-EE   EA #um)AAI!E1%!)!!!1 !!TPositionT MandatoryTParameterSetName ListLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdListLogParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget.Microsoft.PowerShell.Commands.GetEvent.ListLogT JustificationHA string[] is required here because that is the type Powershell supportsTPositionTParameterSetName GetLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdGetLogParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget.Microsoft.PowerShell.Commands.GetEvent.LogNameT JustificationHA string[] is required here because that is the type Powershell supportsTPositionT MandatoryTParameterSetNameListProviderSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdListProviderParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget3Microsoft.PowerShell.Commands.GetEvent.ListProviderT JustificationHA string[] is required here because that is the type Powershell supportsTPositionT MandatoryTParameterSetNameGetProviderSetTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdGetProviderParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget3Microsoft.PowerShell.Commands.GetEvent.ProviderNameT JustificationHA string[] is required here because that is the type Powershell supportsTPositionT MandatoryTParameterSetNameFileSetTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceId PathParamHelpPSPathMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget+Microsoft.PowerShell.Commands.GetEvent.PathT JustificationHA string[] is required here because that is the type Powershell supportsTParameterSetNameFileSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetNameGetProviderSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetName GetLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetName HashQuerySetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetName XmlQuerySetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelp   }TParameterSetNameListProviderSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelp|TParameterSetNameGetProviderSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpxTParameterSetName ListLogSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpwTParameterSetName GetLogSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpzTParameterSetName HashQuerySetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpyTParameterSetName XmlQuerySetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelp Cn'TParameterSetNameListProviderSet&TParameterSetNameGetProviderSet"TParameterSetName ListLogSet!TParameterSetName GetLogSet$TParameterSetName HashQuerySet#TParameterSetName XmlQuerySetTParameterSetNameFileSetTParameterSetNameFileSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTParameterSetNameGetProviderSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTParameterSetName GetLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetName XmlQuerySetTHelpMessageBaseNameGetEventResourcesMicrosoft.Design1CA1059:MembersShouldNotExposeCertainConcreteTypesTScopememberTTarget0Microsoft.PowerShell.Commands.GetEvent.FilterXmlT JustificationLAn XmlDocument is required here because that is the type Powershell supportsTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetName HashQuerySetTHelpMessageBaseNameGetEventResourcesMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget6Microsoft.PowerShell.Commands.GetEvent.FilterHashtableT JustificationHA string[] is required here because that is the type Powershell supports    !=@      i QQ 5  5\   A AAA ii H  = =   H=    Hii @Hi =E`E` E` E``@D =E``HE`E``H@`E`` `H@`Q@Q # ` Q X P @QQ% Q`  X QPQ@Q \ QQQ XQQQQMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTargetPMicrosoft.PowerShell.Commands.GetCounter.PerformanceCounterSample.CounterSamplesT JustificationHA string[] is required here because that is the type Powershell supports=A ApGetCounterTDefaultParameterSetName GetCounterSetTHelpUri-http://go.microsoft.com/fwlink/?LinkID=138335 !1!A =Ei Ei ii `&A !Eii!AA!=ah!iiii IEiE A!iA!d ii1 !E `!` I=EiEiTPositionT MandatoryTParameterSetName ListSetSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget7Microsoft.PowerShell.Commands.GetCounterCommand.ListSetT JustificationHA string[] is required here because that is the type Powershell supportsTPositionTParameterSetName GetCounterSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTParameterSetName GetCounterSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResources%TParameterSetName GetCounterSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTargetMicrosoft.PowerShell.Commands.ExportCounterCommand.InputObjectT Justification]A PerformanceCounterSampleSet[] is required here because Powershell supports arrays natively. E    q INewWinEventTHelpUri-http://go.microsoft.com/fwlink/?LinkID=217469eIIE UUy}+ E U Y aeQQaQ UiUiiU  m q u   ii y y }}}FTPositionT MandatoryTParameterSetName__AllParameterSetsFTPositionT MandatoryTParameterSetName__AllParameterSets7T MandatoryTParameterSetName__AllParameterSetsFTPositionT MandatoryTParameterSetName__AllParameterSetsMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTTargetMicrosoft.PowerShell.CommandsT JustificationHA string[] is required here because that is the type Powershell supportsen/*Microsoft (R) Windows (R) Operating System>9Copyright (c) Microsoft Corporation. All rights reserved.Microsoft Corporation6.3.9600.16384D?d:\wbrtm.public.x86fre\internal\strongnamekeys\fake\windows.snkTWrapNonExceptionThrowsnRFІhRSDS{KTL߾Microsoft.PowerShell.Commands.Diagnostics.pdb. _CorDllMainmscoree.dll%  8PhĠ IBC PROFILE_DATA$бsv%sG8KVTX H   # & @,L0L12  ?827!;-) .CWNq(uGHwz8 ?827!;-) l -c!?"=)/%)e-n," ,/*d"e"1yg%-b>>$j;9 w;e=1=v\q,"+!'+i<(01+-.'*%$,)    2"""     """"""" "!"       !"#$%&'()*+,-./0123456789:;<=>?@AB                                C B D E F G  #####))))))$*-Y-`--g -=-?- -5-0-1-1-1-1-G1--]1-0-0-b-|0-d-Z0-,1-0-1---2-5 -8-K-v----. j / //T// /w/ / /)///03/6/ o5 4VS_VERSION_INFO@%@%?DVarFileInfo$TranslationStringFileInfo\000004b0LCompanyNameMicrosoft Corporation,FileDescription @FileVersion6.3.9600.16384|.InternalNameMicrosoft.PowerShell.Commands.Diagnostics.dll:LegalCopyrightCopyright (c) Microsoft Corporation. All rights reserved..OriginalFilenameMicrosoft.PowerShell.Commands.Diagnostics.dllx+ProductNameMicrosoft (R) Windows (R) Operating SystemDProductVersion6.3.9600.163848Assembly Version3.0.0.0PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD @8