KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/winevt/Logs/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/winevt/Logs/Microsoft-Windows-Perflib%4Operational.evtx
ElfFile�����ElfChnk�����H����sj��q
!
�=�����f 	�m��F��F$��:�m��Z5�xVf���&Q�9���մ	�Bb�=�!��5�m��]5�**����J4O2���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J!@��J4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t���.t�@�X�
7k��4�A���D�	EventDataA=BackupPerfRegistryToFile-EndA��5���oData=Status
,����,�����.Q��aO��A����M��
RenderingInfo' 	?�Culturezxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��Uf��H!
IKeyword4611686018427387904��tq
��Message)BackupPerfRegistryToFile-End



Status: 0b�**��e#K4O2���1�&
2J�!@e#K4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
CntrtextUpdateEachLanguageAddCounter 014�!ہ��
!ہ�_
H^�Sb��#=)A��� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350at�**�4'K4O2���1�&
2J�!@4'K4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%�,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�ۦ�PS�Q��+v0�ϯ
A��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat�1�&**���qK4O2���1�&
2JO!@�qK4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6����6����U���i�b;�A��w� 	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Vq
&PerfGetNames-Update-End



Status: 0x0�**���sK4O2���1�&
2J�!@�sK4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#�=Reason
A��%�=Command
A��#�=Status
CntrtextUpdateEachLanguageAddCounter 014�N��!��N��ǕS>
<tg��BA��� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**���sK4O2���1�&
2J�!@�sK4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddExplain 014��;�=�;�	sR'�#f���+A��� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194Save�**��wK4O2���1�&
2J�!@�wK4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J)#g�J�p.P>�)y��A��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.datry-**p���K4O2���1�&
2J%!@��K4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��ip**��O�K4O2���1�&
2J�!@O�K4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�Ot(^2�O��T�2��E�Y�A��� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0
Pa�**���9L4O2���1�&
2J�!@�9L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddCounter 009^�3��\,3��p�UMa.�	|)�+A��� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374Save�**�H@L4O2���1�&
2J�!@H@L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�0��߅[{*VhcaݰX_yA��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat
**p�wL4O2���1�&
2J%!@wL4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6����p**��TyL4O2���1�&
2J�!@TyL4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QF�5�QF�͂V��b�EϡwA��� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0U�**��fyL4O2���1�&
2J�!@fyL4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddExplain 009�
4W~�9�
4W~�iW�RmׂJ�+A��� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568**�**�%}L4O2���1�&
2J�!@%}L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�=�#�{�I]���p���A��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat�**p�f�L4O2���1�&
2J%!@f�L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��$p**����L4O2���1�&
2J�!@��L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B��$CB��q��_x?��W�A��� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0�**x�2�L4O2���1�&
2J,!@2�L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�F�/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K����G���bb�P/P*$Ht��A���� 	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 15x**x�9�L4O2���1�&
2J-!@9�L4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�-K�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I���K�I��;ԬS�l�[E@.kA��_� 	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Hq
UpdateRegistry-End



Status: 0�s�x**���M4O2���1�&
2J]!@�M4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�N�0(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��lPOt(��lH�b^G��2
�A��� 	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Xq
'LpReleaseInstallationMutex



status: 1!C�**x��M4O2���1�&
2J-!@�M4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�MR��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1�R$C��1��X����4kA��_� 	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Hq
InstallPerfDll-End



Status: 0MPx**���M4O2���1�&
2Ju!@�M4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�U�K�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�BxV�9�f�B�%�Z�-E��0�A���� 	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��`q
+LoadPerfCounterTextStrings-End



Status: 0�**`��p�2���1�&
2J!@�p�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���Y(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~�Z)#��~�DV��WE�sg�A���� 	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true5`**���Jq�2���1�&
2J]!@�Jq�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�]�N��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
��^����_�w��t���A��� 	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Xq
'LpAcquireInstallationMutex



status: 0�**�� Lq�2���1�&
2Jm!@ Lq�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����a�R����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�JBbd.�J�rM_���s�)��A���� 	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��bq
,UnloadCounterNames-Begin



Driver: WmiApRplll�**���%r�2���1�&
2Jq!@�%r�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddCounter 014����n`�e�U��n`��]�p���RaA���� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**��'r�2���1�&
2J�!@�'r�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 014��\SystemRoot\system32\perfTMP.dat��i=���^��[o��H
A��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p��pr�2���1�&
2J%!@�pr�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**��sr�2���1�&
2Je!@sr�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I��n�i��I�;�Q�W~.�5
�A���� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**��sr�2���1�&
2Js!@sr�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddExplain 014���R�jr\,�R�I��V?��fu�A���� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**�>vr�2���1�&
2J�!@>vr�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTiv�G�CT�!^�ȯ<p�A��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datM**p�m�r�2���1�&
2J%!@m�r�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**����r�2���1�&
2Je!@��r�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:�{MR�F:�A�[��1|�T'�A���� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0�**��D.s�2���1�&
2Js!@D.s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddCounter 009�����\RPO���\�D�\Ƹ���.�A���� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 1253146�**��0s�2���1�&
2J�!@�0s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�Q�耒�	��_1u�Q4��:A��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datcro**p�ys�2���1�&
2J%!@ys�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**��b{s�2���1�&
2Je!@b{s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ��-K�:ߑ���RP'���e�A���� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0�**��t{s�2���1�&
2Js!@t{s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddExplain 009�	�8I:�jr�8I���Y��_C�j�A���� 	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 6533166�**��}s�2���1�&
2J�!@�}s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�9��{�&@�w]W
�I�Z�JA��� 	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.datcro**p�E�s�2���1�&
2J%!@E�s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**����s�2���1�&
2Je!@��s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009���r�����KX���b{;"�A���� 	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0�**��^�s�2���1�&
2JD!@^�s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��ݘr��j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL���	�L����Z�WX6d���A���� 	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1-B�**��l�s�2���1�&
2JE!@l�s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�m��^%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
����ݘ�����']�U�>,�{A��o� 	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Pq
#UnloadCounterNames-End



Status: 018�**p���s�2���1�&
2J%!@��s�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�N��lPO2p**���t�2���1�&
2J�!@�t�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��sm��h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{�$�%%�{�#Y� [�J�T�A���� 	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��dq
-UnloadPerfCounterTextStrings-End



Status: 0686�**��st�2���1�&
2J�!@st�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,=��aW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���ivYF��:RL䡠�{o#/A��#� 	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: truest�**���t�2���1�&
2JG!@�t�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��5��nC^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�f�Rp+����R4���$��A���� 	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**p�˦t�2���1�&
2J%!@˦t�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�]��^p**����t�2���1�&
2JU!@��t�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��5��Y�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DA��=��DA�+2U��v�r�1�A��u� 	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904��Zq
(UpdateRegistry-Begin



Driver: WmiApRpl�**��Uv�2���1�&
2JS!@Uv�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�մ�e�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW����W���2PFG5�����A���� 	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0!
4611686018427387904���q
\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: �**p��z�2���1�&
2J%!@�z�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�,����INp**��ƛz�2���1�&
2Jf!@ƛz�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddCounter 014�!ہ��
o�**���z�2���1�&
2J�!@�z�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ��**p�Q�z�2���1�&
2J%!@Q�z�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��ckp**����z�2���1�&
2Jf!@��z�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N��!�?�**����z�2���1�&
2Jf!@��z�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddExplain 014��;��?�**����z�2���1�&
2J�!@��z�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J)#���?�**p�*{�2���1�&
2J%!@*{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6����?p**���{�2���1�&
2Jf!@�{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�Ot(�?�**��u{�2���1�&
2Jf!@u{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddCounter 009^�3��\,�?�**��?w{�2���1�&
2J�!@?w{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�0k��?�**p���{�2���1�&
2J%!@��{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6����?p**���{�2���1�&
2Jf!@�{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QF�5�?�**���{�2���1�&
2Jf!@�{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=CntrtextUpdateEachLanguageAddExplain 009�
4W~�9�?�**��2�{�2���1�&
2J�!@2�{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�=�N�?�**p�t�{�2���1�&
2J%!@t�{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��P�?p**����{�2���1�&
2Jf!@��{�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B��$C�?�**��"|�2���1�&
2J2!@"|�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�F�K����G009�**p�*|�2���1�&
2J%!@*|�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�-K�I���Kp**p�]&|�2���1�&
2J%!@]&|�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�N��lPOflp**p�e&|�2���1�&
2J%!@e&|�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�MR��1�Rflp**p�j&|�2���1�&
2J%!@j&|�2���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�U�f�BxVp**��7���2���1�&
2JA!@7���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���Y
xx WmiApRpl��~�Z�**p����2���1�&
2J%!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�]��^p**�����2���1�&
2J3!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����aWmiApRpld.�JBboso�**��"���2���1�&
2JT!@"���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddCounter 014����n`�eK��Y�**������2���1�&
2J�!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 014��\SystemRoot\system32\perfTMP.dat��iWmi�**p����2���1�&
2J%!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��lp**������2���1�&
2JT!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I��n�**�����2���1�&
2JT!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddExplain 014���R�jr�**������2���1�&
2J�!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTiv�**p��@��2���1�&
2J%!@�@��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**���B��2���1�&
2JT!@�B��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:�{�**��m���2���1�&
2JT!@m���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddCounter 009�����\R�**��҂��2���1�&
2J�!@҂��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�Q��**p�����2���1�&
2J%!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**��!���2���1�&
2JT!@!���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ���**��8���2���1�&
2JT!@8���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/=	unlodctrAddExplain 009�	�8I:��**�� ���2���1�&
2J�!@ ���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�%BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�9��**p�.��2���1�&
2J%!@.��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=��6��p**�����2���1�&
2JT!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009���r��**���-��2���1�&
2J2!@�-��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��ݘ>KL���	�xpl�**p��-��2���1�&
2J%!@�-��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�m�����lp**p�?/��2���1�&
2J%!@?/��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�N��lPOdop-Perflib����|N��1�&
2J���@%`��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalElfChnk�L�L���H��	&�F�����
1
�=�����f(	�m��F��_e*WB�u��s…�oZ�q�&Y�A����|�JyT�xa4�O�!t"�g�r**	�%`��2���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J!@%`��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�h��s�	lPx�� Y
�A���D�	EventDataI= UnloadPerfCounterTextStrings-EndA��5���oData=Status
%�{��%�{�#Y� [�J�TA���M��
RenderingInfo'(	?�Culturezxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��Uf��H1
IKeyword4611686018427387904��|�
��Message-UnloadPerfCounterTextStrings-End



Status: 0#K4	**��f��2���1�&
2J�!@f��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,UW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��
YF��:RL䡠�{o#/A��#�(	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�&�**���q��2���1�&
2JG!@�q��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��MC^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�~p+����R4���$��A����(	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**�����2���1�&
2J]!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
������_�w��t���A���(	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��X�
'LpAcquireInstallationMutex



status: 0r�**��YB��2���1�&
2JU!@YB��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څ�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DA2��DA�+2U��v�r�1�A��u�(	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��Z�
(UpdateRegistry-Begin



Driver: WmiApRpl���**��D���2���1�&
2JS!@D���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���TW���2PFG5�����A����(	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: xt�**�����2���1�&
2Ji!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�!��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,���t"�,�����.Q��aO��A����(	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��\�
)BackupPerfRegistryToFile-End



Status: 0��=�**������2���1�&
2J�!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%�
Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
CntrtextUpdateEachLanguageAddCounter 014�!ہ��&!ہ�_
H^�Sb��#=)A���(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350is�**�<���2���1�&
2J�!@<���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*��,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�+ۦ�PS�Q��+v0�ϯ
A���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.datpd**������2���1�&
2JO!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/M�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6�"0��6����U���i�b;�A��w�(	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��V�
&PerfGetNames-Update-End



Status: 0x0��**��.���2���1�&
2J�!@.���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#�=Reason
A��%�=Command
A��#�=Status
CntrtextUpdateEachLanguageAddCounter 014�N��a4"0�N��ǕS>
<tg��BA���(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**��@���2���1�&
2J�!@@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddExplain 014��;�D8}%�;�	sR'�#f���+A���(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194Micr�**�����2���1�&
2J�!@����2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 014�\SystemRoot\system32\perfTMP.datg�Ji<g�J�p.P>�)y��A���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat**p�`��2���1�&
2J%!@`��2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0p**�����2���1�&
2J�!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddExplain 014^2�O�A~^2�O��T�2��E�Y�A���(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0�**�����2���1�&
2J�!@���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddCounter 009^�3��E3��p�UMa.�	|)�+A���(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374/P*$Ht�**�I���2���1�&
2J�!@I���2������t�N�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�I���߅[{*VhcaݰX_yA���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat**p#���2���1�&
2J%!@#���2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0p**�C���2���1�&
2J�!@C���2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddCounter 009�QFO�QF�͂V��b�EϡwA���(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0�**�U���2���1�&
2J�!@U���2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddExplain 009�
4W~�R�&4W~�iW�RmׂJ�+A���(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568ft-W�**0���2���1�&
2J�!@0���2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{W2�#�{�I]���p���A���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.datind**p���2���1�&
2J%!@���2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0 	p**����2���1�&
2J�!@���2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddExplain 009B��d\UB��q��_x?��W�A���(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0�t���**x�=��2���1�&
2J,!@�=��2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�_3/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K���aD8���bb�P/P*$Ht��A����(	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1t-x**x�=��2���1�&
2J-!@�=��2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�md�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I��e%�I��;ԬS�l�[E@.kA��_�(	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��H�
UpdateRegistry-End



Status: 0ibx**�Vl��2���1�&
2J]!@Vl��2������t�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�g�I(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l�h�A��lH�b^G��2
�A���(	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��X�
'LpReleaseInstallationMutex



status: 1�**x	`l��2���1�&
2J-!@`l��2������t�N	Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��k��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1(ld\��1��X����4kA��_�(	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��H�
InstallPerfDll-End



Status: 0��x**�
el��2���1�&
2Ju!@el��2������t�N
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Foe�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�B�o�R�f�B�%�Z�-E��0�A����(	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��`�
+LoadPerfCounterTextStrings-End



Status: 0��**`
dڨ�4���1�&
2J!@
dڨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���r�(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~�si<��~�DV��WE�sg�A����(	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: truet`**p2�ڨ�4���1�&
2J%!@2�ڨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���b/p**�
>�ڨ�4���1�&
2Jm!@>�ڨ�4������\xdt
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����x(l����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�JJyd.�J�rM_���s�)��A����(	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��b�
,UnloadCounterNames-Begin



Driver: WmiApRplMi�**���ܨ�4���1�&
2Jq!@��ܨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddCounter 014����n`�|o��n`��]�p���RaA����(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160o�**%�ܨ�4���1�&
2J�!@%�ܨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 014��\SystemRoot\system32\perfTMP.dat���}/���^��[o��H
A���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p
�ܨ�4���1�&
2J%!@
�ܨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0t-p**���ܨ�4���1�&
2Je!@��ܨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddCounter 014��I�…����I�;�Q�W~.�5
�A����(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**���ܨ�4���1�&
2Js!@��ܨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddExplain 014���R�r��E�R�I��V?��fu�A����(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690lo�**��ܨ�4���1�&
2J�!@��ܨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTq�a�CT�!^�ȯ<p�A���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat651**p�4ݨ�4���1�&
2J%!@�4ݨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0t-p**�7ݨ�4���1�&
2Je!@7ݨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddExplain 014�F:��k�F:�A�[��1|�T'�A����(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0o�**���ݨ�4���1�&
2Js!@��ݨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddCounter 009�����\Z��h���\�D�\Ƹ���.�A����(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314tr�**�ݨ�4���1�&
2J�!@�ݨ�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�Y�耒�	��_1u�Q4��:A���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat90,**p8ި�4���1�&
2J%!@8ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0t-p**��ި�4���1�&
2Je!@�ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddCounter 009�:ߑ��md�:ߑ���RP'���e�A����(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0o�**�ި�4���1�&
2Js!@ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddExplain 009�	�8IB�r��8I���Y��_C�j�A����(	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316tr�**?
ި�4���1�&
2J�!@?
ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�A����&@�w]W
�I�Z�JA���(	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat14,**p��ި�4���1�&
2J%!@��ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0t-p**�5�ި�4���1�&
2Je!@5�ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddExplain 009���z��+���KX���b{;"�A����(	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0o�**���ި�4���1�&
2JD!@��ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j���z��j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL����L����Z�WX6d���A����(	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904����
SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1J�**��ި�4���1�&
2JE!@�ި�4������\xdtMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�u��%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
����������']�U�>,�{A��o�(	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��01
4611686018427387904��P�
#UnloadCounterNames-End



Status: 0�**p Ѷި�4���1�&
2J%!@Ѷި�4������\xdt Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�g��l�hp**p!ߨ�4���1�&
2J%!@ߨ�4������\xdt!Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�%�{��dctp**�"ߨ�4���1�&
2J�!@ߨ�4������\xdt"Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,Uj
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��
�1�&�**�#sߨ�4���1�&
2J�!@sߨ�4������\xdt#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��MdC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�~���**p$ѯߨ�4���1�&
2J%!@ѯߨ�4������\xdt$Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�����p**�%�ߨ�4���1�&
2J3!@�ߨ�4������\xdt%Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څWmiApRpl��DA2��**�&�ᨭ4���1�&
2Jy!@�ᨭ4������\xdt&Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%RC:\WINDOWS\system32\PerfStringBackup.TMPW���T@%�**p'��娭4���1�&
2J%!@��娭4������\xdt'Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�!,���t"p**�(,,樭4���1�&
2Jf!@,,樭4������\xdt(Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddCounter 014�!ہ��&�**�)�.樭4���1�&
2J�!@�.樭4������\xdt)Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�+Mic�**p*m樭4���1�&
2J%!@m樭4������\xdt*Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"02p**�+p樭4���1�&
2Jf!@p樭4������\xdt+Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddCounter 014�N��a4`�**�,4p樭4���1�&
2Jf!@4p樭4������\xdt,Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddExplain 014��;�D8a�**�-|s樭4���1�&
2J�!@|s樭4������\xdt-Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 014�\SystemRoot\system32\perfTMP.datg�Ji<b�**p.R�樭4���1�&
2J%!@R�樭4������\xdt.Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0cp**�/��樭4���1�&
2Jf!@��樭4������\xdt/Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddExplain 014^2�O�Ad�**�0[A稭4���1�&
2Jf!@[A稭4������\xdt0Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddCounter 009^�3��Ee�**�1�C稭4���1�&
2J�!@�C稭4������\xdt1Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�If�**p2�|稭4���1�&
2J%!@�|稭4������\xdt2Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0gp**�3:稭4���1�&
2Jf!@:稭4������\xdt3Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddCounter 009�QFOh�**�4I稭4���1�&
2Jf!@I稭4������\xdt4Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%CntrtextUpdateEachLanguageAddExplain 009�
4W~�Ri�**�5�稭4���1�&
2J�!@�稭4������\xdt5Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{Wj�**p6�I設4���1�&
2J%!@�I設4������\xdt6Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0kp**�7XL設4���1�&
2Jf!@XL設4������\xdt7Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3CntrtextUpdateEachLanguageAddExplain 009B��d\l�**�8Ns設4���1�&
2J2!@Ns設4������\xdt8Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�_�K���a�!�**p9Vs設4���1�&
2J%!@Vs設4������\xdt9Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�md�I��e*p**p:�設4���1�&
2J%!@�設4������\xdt:Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�g��l�h*p**p;�設4���1�&
2J%!@�設4������\xdt;Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��k��1(lngup**p<��設4���1�&
2J%!@��設4������\xdt<Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Fo�f�B�oerp**�=��C)6���1�&
2JA!@��C)6������ȇ@�=Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���r
xx WmiApRpl��~�snal�**p>ID)6���1�&
2J%!@ID)6������ȇ@�>Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���lp**�?kD)6���1�&
2J3!@kD)6������ȇ@�?Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����xWmiApRpld.�JJy�**�@��D)6���1�&
2JT!@��D)6������ȇ@�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddCounter 014����n`�|؀��**�A�D)6���1�&
2J�!@�D)6������ȇ@�AMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 014��\SystemRoot\system32\perfTMP.dat���2�**pB�\E)6���1�&
2J%!@�\E)6������ȇ@�BMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"02p**�C_E)6���1�&
2JT!@_E)6������ȇ@�CMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddCounter 014��I�…@~k�**�D)_E)6���1�&
2JT!@)_E)6������ȇ@�DMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddExplain 014���R�r�@�m�**�E�aE)6���1�&
2J�!@�aE)6������ȇ@�EMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTq�@K|�**pF'�E)6���1�&
2J%!@'�E)6������ȇ@�FMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0@�~p**�GN�E)6���1�&
2JT!@N�E)6������ȇ@�GMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddExplain 014�F:�@�~�**�H�F)6���1�&
2JT!@�F)6������ȇ@�HMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddCounter 009�����\Z�@ہ�**�IF)6���1�&
2J�!@F)6������ȇ@�IMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�e*BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�Y�@=~�**pJ�bF)6���1�&
2J%!@�bF)6������ȇ@�JMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���}/��6�"0@�p**�K�dF)6���1�&
2JT!@�dF)6������ȇ@�KMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@3	unlodctrAddCounter 009�:ߑ��@5נ**�L�dF)6���1�&
2JT!@�dF)6������ȇ@�LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/}%	unlodctrAddExplain 009�	�8IB��HU(T���1�&
2Jft-Windows-Perflib/Operational�,p��ElfChnkM�M��`��M�#�b�>��S}=�����f
�m��	F��td"l��/����x��1�&�j�R�R�
�|7U�TIDd�:�;�^��**X
MwgF)6���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2Jg!@wgF)6������ȇ@�MMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q()A��D�	EventData;=PerfGetNames-Update-BeginA��A}��oData!=Query_Length
A��!}=Query
A��}=Size
A��}=Path
BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ٴ	�&@�w]W
�I�Z�J{A��o�	M��
RenderingInfo'
?�Culturezxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��Uf��HIKeyword4611686018427387904���S��MessagejPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.datW�,UX
**�Na�F)6���1�&
2JO!@a�F)6������ȇ@�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#}=Status
��6�J��6����U���i�b;�A��w�	
zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��VS&PerfGetNames-Update-End



Status: 0x0�**�OƿF)6���1�&
2JZ!@ƿF)6������ȇ@�OMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#}=Reason
A��%}=Command
A��#}=Status
	unlodctrAddExplain 009���w���KX���b{;"�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0**�**�P��F)6���1�&
2JD!@��F)6������ȇ@�PMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j���w�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
>KL���L����Z�WX6d���A����	
zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SSUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1����**�Q��F)6���1�&
2JE!@��F)6������ȇ@�QMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�u%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#}=Status
���������']�U�>,�{A��o�	
zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��PS#UnloadCounterNames-End



Status: 0-P�**�Ru�F)6���1�&
2J]!@u�F)6������ȇ@�RMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#}=status
��l���lH�b^G��2
�A���	
zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpReleaseInstallationMutex



status: 1m�**�Sg�G)6���1�&
2J�!@g�G)6������ȇ@�SMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�!h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#}=Status
%�{�d"�%�{�#Y� [�J�T�A����	
zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��dS-UnloadPerfCounterTextStrings-End



Status: 0��=�**�T��G)6���1�&
2J�!@��G)6������ȇ@�TMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,}%W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��&YF��:RL䡠�{o#/A��#�	
zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SsLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�**�UY�G)6���1�&
2JG!@Y�G)6������ȇ@�UMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��u*�
C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%}=IniFile
A��!}=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��+�p+����R4���$��A����	
zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**�V_-H)6���1�&
2J]!@_-H)6������ȇ@�VMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb/��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#}=status
��/u����_�w��t���A���	
zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpAcquireInstallationMutex



status: 04�**�W�{H)6���1�&
2JU!@�{H)6������ȇ@�WMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�ڭ2�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#}=Driver
WmiApRpl��DAZ3��DA�+2U��v�r�1�A��u�	
zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��ZS(UpdateRegistry-Begin



Driver: WmiApRple�**�X�I)6���1�&
2JS!@�I)6������ȇ@�XMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�M6�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��}=File
A��%}=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���|7W���2PFG5�����A����	
zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: ���**�Y�M)6���1�&
2Ji!@�M)6������ȇ@�YMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�:��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#}=Status
,����;�!,�����.Q��aO��A����	
zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��\S)BackupPerfRegistryToFile-End



Status: 0ows�**�ZpiN)6���1�&
2J�!@piN)6������ȇ@�ZMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>�&Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#}=Reason
A��%}=Command
A��}=Size
CntrtextUpdateEachLanguageAddCounter 014�!ہ��?!ہ�_
H^�Sb��#=)A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SoCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350ve�**[lN)6���1�&
2J�!@lN)6������ȇ@�[Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�Dۦ�PS�Q��+v0�ϯ
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p\}�N)6���1�&
2J%!@}�N)6������ȇ@�\Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jop**�]��N)6���1�&
2J�!@��N)6������ȇ@�]Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N��TIJ�N��ǕS>
<tg��BA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 074,�**�^��N)6���1�&
2J�!@��N)6������ȇ@�^Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddExplain 014��;�<M�>�;�	sR'�#f���+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194text�**_$�N)6���1�&
2J�!@$�N)6������ȇ@�_Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JaQg�J�p.P>�)y��A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.datgis**p`�N)6���1�&
2J%!@�N)6������ȇ@�`Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jxp**�a`�N)6���1�&
2J�!@`�N)6������ȇ@�aMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 014^2�O�V�+^2�O��T�2��E�Y�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 068,�**�b�XO)6���1�&
2J�!@�XO)6������ȇ@�bMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddCounter 009^�3��Z3��p�UMa.�	|)�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374text�**cq[O)6���1�&
2J�!@q[O)6������ȇ@�cMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�^/��߅[{*VhcaݰX_yA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.datcte**pd�O)6���1�&
2J%!@�O)6������ȇ@�dMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J90p**�e�O)6���1�&
2J�!@�O)6������ȇ@�eMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QFd�QF�͂V��b�EϡwA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0�
�**�f+�O)6���1�&
2J�!@+�O)6������ȇ@�fMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddExplain 009�
4W~�g�?4W~�iW�RmׂJ�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568�**gґO)6���1�&
2J�!@ґO)6������ȇ@�gMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{lZ3�#�{�I]���p���A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat�2���**phl
P)6���1�&
2J%!@l
P)6������ȇ@�hMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jf�Bp**�i�P)6���1�&
2J�!@�P)6������ȇ@�iMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B��\q}%B��q��_x?��W�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0
�**xj�*P)6���1�&
2J,!@�*P)6������ȇ@�jMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�t=/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
�K���v<M���bb�P/P*$Ht��A����	
zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SOUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1-Wx**xk�*P)6���1�&
2J-!@�*P)6������ȇ@�kMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�ey�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#}=Status
�I��zM6�I��;ԬS�l�[E@.kA��_�	
zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSUpdateRegistry-End



Status: 0��x**pl�LP)6���1�&
2J%!@�LP)6������ȇ@�lMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-��l�p**xm�LP)6���1�&
2J-!@�LP)6������ȇ@�mMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�M~�	��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#}=Status
��1�~\q��1��X����4kA��_�	
zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSInstallPerfDll-End



Status: 0erx**�n�LP)6���1�&
2Ju!@�LP)6������ȇ@�nMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FŁz�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#}=Status
�f�Bx��g�f�B�%�Z�-E��0�A����	
zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��`S+LoadPerfCounterTextStrings-End



Status: 0*�**`o�z��.6���1�&
2J!@�z��.6������|��oMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�����2(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet


xx WmiApRpl��~��aQ��~�DV��WE�sg�A����	
zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true�&`**ppٜ��.6���1�&
2J%!@ٜ��.6������|��pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb/��/�&p**�qK���.6���1�&
2Jm!@K���.6������|��qMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���U��~����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#}=Driver
WmiApRpld.�J
�d.�J�rM_���s�)��A����	
zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��bS,UnloadCounterNames-Begin



Driver: WmiApRpl2�**�r$���.6���1�&
2Jq!@$���.6������|��rMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>	unlodctrAddCounter 014����n`R���n`��]�p���RaA����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 651602�**s݌��.6���1�&
2J�!@݌��.6������|��sMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat�Q�u*���^��[o��H
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**ptoї�.6���1�&
2J%!@oї�.6������|��tMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J*p**�u�ӗ�.6���1�&
2Je!@�ӗ�.6������|��uMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I���Q���I�;�Q�W~.�5
�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**�v�ӗ�.6���1�&
2Js!@�ӗ�.6������|��vMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>	unlodctrAddExplain 014���R�2��Z�R�I��V?��fu�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**wNח�.6���1�&
2J�!@Nח�.6������|��wMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT1�v�CT�!^�ȯ<p�A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat****px��.6���1�&
2J%!@��.6������|��xMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J*p**�ys��.6���1�&
2Je!@s��.6������|��yMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 014�F:�j�M~�F:�A�[��1|�T'�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0*�**�z�{��.6���1�&
2Js!@�{��.6������|��zMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>	unlodctrAddCounter 009�����\��V���\�D�\Ƹ���.�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314**�**{�~��.6���1�&
2J�!@�~��.6������|��{Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��耒�	��_1u�Q4��:A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat****p|{���.6���1�&
2J%!@{���.6������|��|Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J*p**�}Ե��.6���1�&
2Je!@Ե��.6������|��}Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 009�:ߑR�ey�:ߑ���RP'���e�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0*�**�~嵘�.6���1�&
2Js!@嵘�.6������|��~Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>	unlodctrAddExplain 009�	�8I�2��8I���Y��_C�j�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316**�**�]���.6���1�&
2J�!@]���.6������|��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ٴ	**�**p����.6���1�&
2J%!@���.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J*p**��M��.6���1�&
2JT!@M��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009���w**�**��	(��.6���1�&
2J2!@	(��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j���>KL���09�**p�(��.6���1�&
2J%!@(��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�u���p**p��(��.6���1�&
2J%!@�(��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-��l�flp**p��W��.6���1�&
2J%!@�W��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�!%�{�d"flp**��?a��.6���1�&
2J�!@?a��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,}%j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��&erf�**��(n��.6���1�&
2J�!@(n��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��u*dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��+�**p�2���.6���1�&
2J%!@2���.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb/��/p**���E��.6���1�&
2J3!@�E��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�ڭ2WmiApRpl��DAZ3�**���ϛ�.6���1�&
2Jy!@�ϛ�.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�M6RC:\WINDOWS\system32\PerfStringBackup.TMPW���|7**�**p�m˟�.6���1�&
2J%!@m˟�.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�:,����;ysp**��[��.6���1�&
2Jf!@[��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddCounter 014�!ہ��?<�**���]��.6���1�&
2J�!@�]��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�D�**p�i���.6���1�&
2J%!@i���.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**������.6���1�&
2Jf!@����.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N��TI&�**������.6���1�&
2Jf!@����.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddExplain 014��;�<M&�**��t���.6���1�&
2J�!@t���.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JaQ�1�&�**p�8ꠉ.6���1�&
2J%!@8ꠉ.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�&p**��`젉.6���1�&
2Jf!@`젉.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 014^2�O�V&�**��qE��.6���1�&
2Jf!@qE��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddCounter 009^�3��Z&�**��H��.6���1�&
2J�!@H��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�^�1�&�**p��w��.6���1�&
2J%!@�w��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�&p**��Kz��.6���1�&
2Jf!@Kz��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QFd&�**��az��.6���1�&
2Jf!@az��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>CntrtextUpdateEachLanguageAddExplain 009�
4W~�g&�**���~��.6���1�&
2J�!@�~��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{l�1�&�**p�aT��.6���1�&
2J%!@aT��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�&p**���V��.6���1�&
2Jf!@�V��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B��\q&�**��D|��.6���1�&
2J2!@D|��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�t�K���vW~�t�**p�M|��.6���1�&
2J%!@M|��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�ey�I��zAp**p�ע��.6���1�&
2J%!@ע��.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-��l���Yp**p�ᢢ�.6���1�&
2J%!@ᢢ�.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�M~��1�~��Yp**p�梢�.6���1�&
2J%!@梢�.6������|���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FŁ�f�Bx�p**���dB��6���1�&
2JA!@�dB��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(����
xx WmiApRpl��~��roso�**p��zB��6���1�&
2J%!@�zB��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb/��/sop**��b}B��6���1�&
2J3!@b}B��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���U�WmiApRpld.�J
�ndo�**����C��6���1�&
2JT!@��C��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>	unlodctrAddCounter 014����n`R�os�**��ьC��6���1�&
2J�!@ьC��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat�Q��**p��E��6���1�&
2J%!@�E��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��~"E��6���1�&
2JT!@~"E��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I���**�**���"E��6���1�&
2JT!@�"E��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�>	unlodctrAddExplain 014���R�2�**�**���2E��6���1�&
2J�!@�2E��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT1�**�**p��E��6���1�&
2J%!@�E��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp�pJ����1�&
2J2JElfChnk�
�
������uy�=���
�=�����f�	�m�~	F�5��7Y�z��D֚ʬ���jy�&t������Q,R��L���]YXLx-P�Ps͙**�	�.F��6���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J�!@.F��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�oc@�c[U#<DA���D�	EventDataG=CntrtextSavePerfDatRegistry-EndA��5���oData=Reason
A��%�=Command
A��#�=Status
	unlodctrAddExplain 014�F:�W	�F:�A�[��1|�T'eA��Y~	M��
RenderingInfo'�	?�Culturezxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904�����MessageYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0S�	**���G��6���1�&
2Jh!@�G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
	unlodctrAddCounter 009�����\g���\�D�\Ƹ���.�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314�**��
G��6���1�&
2J�!@�
G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�t耒�	��_1u�Q4��:A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datt-**��^�G��6���1�&
2JO!@^�G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��������Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6����6����U���i�b;�A��w~	�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V&PerfGetNames-Update-End



Status: 0x0�**��9�G��6���1�&
2Je!@9�G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ��:ߑ���RP'���e�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0�**��f�G��6���1�&
2Js!@f�G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddExplain 009�	�8I��8I���Y��_C�j�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316�**�̑G��6���1�&
2J�!@̑G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ف"W	�&@�w]W
�I�Z�JA��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat@��**p��G��6���1�&
2J%!@�G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��
p**���G��6���1�&
2Je!@�G��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009��̺'���KX���b{;"�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0�**���6H��6���1�&
2JD!@�6H��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��%+�'�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL���Q,L����Z�WX6d���A���~	�	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1�**���6H��6���1�&
2JE!@�6H��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��/%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
���X0%+�����']�U�>,�{A��o~	�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P#UnloadCounterNames-End



Status: 0�**��G8H��6���1�&
2J]!@G8H��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-E3(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l�3g��lH�b^G��2
�A��~	�	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpReleaseInstallationMutex



status: 1ȇ�**����H��6���1�&
2J�!@��H��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�6h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{Ĥ7�%�{�#Y� [�J�T�A���~	�	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d-UnloadPerfCounterTextStrings-End



Status: 0cku�**���H��6���1�&
2J�!@�H��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�:W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�<-
YF��:RL䡠�{o#/A��#~	�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: truet-�**����H��6���1�&
2JG!@��H��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۵?�C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��@�3p+����R4���$��A���~	�	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**���_I��6���1�&
2J]!@�_I��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbEDE3��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
��D�/����_�w��t���A��~	�	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpAcquireInstallationMutex



status: 0�**���I��6���1�&
2JU!@�I��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���G�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DA�H��DA�+2U��v�r�1�A��u~	�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z(UpdateRegistry-Begin



Driver: WmiApRplt-�**��.*K��6���1�&
2JS!@.*K��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��K�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���LW���2PFG5�����A���~	�	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: gi�**���5O��6���1�&
2Ji!@�5O��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t-P��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,����P�6,�����.Q��aO��A���~	�	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\)BackupPerfRegistryToFile-End



Status: 04273�**���P��6���1�&
2J�!@�P��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 014�!ہ�<T!ہ�_
H^�Sb��#=)A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**��!P��6���1�&
2J�!@�!P��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�YXX0ۦ�PS�Q��+v0�ϯ
A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p��ZP��6���1�&
2J%!@�ZP��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��pp**��V^P��6���1�&
2J�!@V^P��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N���]��N��ǕS>
<tg��BA��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0168�**��n^P��6���1�&
2J�!@n^P��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 014��;�a<�;�	sR'�#f���+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194chLangu�**��bP��6���1�&
2J�!@�bP��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�eg�J�p.P>�)y��A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat009**p���P��6���1�&
2J%!@��P��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��pp**��+�P��6���1�&
2J�!@+�P��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O�j�@^2�O��T�2��E�Y�A��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0168�**���Q��6���1�&
2J�!@�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 009^�3���n�3��p�UMa.�	|)�+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374chLangu�**��Q��6���1�&
2J�!@�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅sED��߅[{*VhcaݰX_yA��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dategi**p�mAQ��6���1�&
2J%!@mAQ��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��ep**��8DQ��6���1�&
2J�!@8DQ��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QFLx�QF�͂V��b�EϡwA��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0try�**��IDQ��6���1�&
2J�!@IDQ��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 009�
4W~4|<T4W~�iW�RmׂJ�+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568In�**��FQ��6���1�&
2J�!@�FQ��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{Y��H�#�{�I]���p���A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat-E��0**p�ʨQ��6���1�&
2J%!@ʨQ��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��tp**��
�Q��6���1�&
2J�!@
�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B�Ť��:B��q��_x?��W�A��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0����**x��Q��6���1�&
2J,!@�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z5��/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K���Y��a���bb�P/P*$Ht��A���~	�	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1��x**x��Q��6���1�&
2J-!@�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԭ���I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I��H��K�I��;ԬS�l�[E@.kA��_~	�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HUpdateRegistry-End



Status: 0tSx**p�0�Q��6���1�&
2J%!@0�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-E3��l�3tp**x�?�Q��6���1�&
2J-!@?�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	����"��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��10�����1��X����4kA��_~	�	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HInstallPerfDll-End



Status: 0-Ux**��D�Q��6���1�&
2Ju!@D�Q��6������T�P��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F
�H��F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�B��4|�f�B�%�Z�-E��0�A���~	�	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`+LoadPerfCounterTextStrings-End



Status: 0��**`�>S�h,9���1�&
2J!@>S�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��͙�G(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~֚�e��~�DV��WE�sg�A���~	�	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**p�$��h,9���1�&
2J%!@$��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbED��Dp**�����h,9���1�&
2Jm!@���h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����0�����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�JR�d.�J�rM_���s�)��A���~	�	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b,UnloadCounterNames-Begin



Driver: WmiApRpl�**�����h,9���1�&
2Jq!@���h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddCounter 014����n`��
���n`��]�p���RaA���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**���h,9���1�&
2J�!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat����?���^��[o��H
A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p�{֬h,9���1�&
2J%!@{֬h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**��cجh,9���1�&
2Je!@cجh,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I�ʬ����I�;�Q�W~.�5
�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**��tجh,9���1�&
2Js!@tجh,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddExplain 014���R�z��n�R�I��V?��fu�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**�۬h,9���1�&
2J�!@۬h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTy�Y��CT�!^�ȯ<p�A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat**p����h,9���1�&
2J%!@���h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**��l��h,9���1�&
2JT!@l��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:�W	M�**���h,9���1�&
2JT!@�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddCounter 009�����\gN�**����h,9���1�&
2J�!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�tO�**p��z�h,9���1�&
2J%!@�z�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**��|�h,9���1�&
2JT!@|�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ�Q�**��+|�h,9���1�&
2JT!@+|�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddExplain 009�	�8I�R�**���h,9���1�&
2J�!@�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ف"S�**p�#��h,9���1�&
2J%!@#��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�����h,9���1�&
2JT!@���h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009��̺'U�**����h,9���1�&
2J2!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��%+>KL���Q,in �**p���h,9���1�&
2J%!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��/���X0�p**p�:�h,9���1�&
2J%!@:�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-E3��l�3-Pp**p���h,9���1�&
2J%!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�6%�{Ĥ7-Pp**����h,9���1�&
2J�!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�:j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�<ws-�**��[�h,9���1�&
2J�!@[�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۵?dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��@*�**p�ߒ�h,9���1�&
2J%!@ߒ�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbED��D*p**���رh,9���1�&
2J3!@�رh,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���GWmiApRpl��DA�Hٺ9�**��M�h,9���1�&
2Jy!@M�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��KRC:\WINDOWS\system32\PerfStringBackup.TMPW���Lib/�**p�Ka�h,9���1�&
2J%!@Ka�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t-P,����PWSp**����h,9���1�&
2Jf!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 014�!ہ�<T�**��U�h,9���1�&
2J�!@U�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�YX�**p�?�h,9���1�&
2J%!@?�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��.Tp**��7A�h,9���1�&
2Jf!@7A�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N���]�**��IA�h,9���1�&
2Jf!@IA�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 014��;�a�**���E�h,9���1�&
2J�!@�E�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�e�**p�х�h,9���1�&
2J%!@х�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**��R��h,9���1�&
2Jf!@R��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O�j�**���h,9���1�&
2Jf!@�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 009^�3���n�**����h,9���1�&
2J�!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅s�**p���h,9���1�&
2J%!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**����h,9���1�&
2Jf!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QFLx�**����h,9���1�&
2Jf!@��h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 009�
4W~4|�**��+ �h,9���1�&
2J�!@+ �h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{Y��**p��h�h,9���1�&
2J%!@�h�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**��k�h,9���1�&
2Jf!@k�h,9������(����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B�Ť��**�
���h,9���1�&
2J2!@���h,9������(���
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z5��K���Y��
�**p
���h,9���1�&
2J%!@���h,9������(���
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԭ��I��H�p**p
���h,9���1�&
2J%!@���h,9������(���
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-E3��l�3���p**p
���h,9���1�&
2J%!@���h,9������(���
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�����10����p**p
���h,9���1�&
2J%!@���h,9������(���
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F
��f�B��p**�
��(�;���1�&
2JA!@��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��͙
xx WmiApRpl��~֚Mic�**p
TG�(�;���1�&
2J%!@TG�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbED��Dicp**�
#I�(�;���1�&
2J3!@#I�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����WmiApRpld.�JR�t-W�**�
�L�(�;���1�&
2JT!@�L�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddCounter 014����n`���Mi�osoft-Window��1�&
2Js@,R�(�;�������d�	
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��ElfChnk	
f
	
f
�(�����~������S}=�����f
�m��	F���J��<�PW6�R �T}��&�'��
����>��_���o�j���b<ca�-�**P
	
,R�(�;���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2Je!@,R�(�;�������d�	
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q()A��D�	EventData;=PerfGetNames-Update-BeginA��A}��oData!=Query_Length
A��!}=Query
A��}=Size
A��}=Path
BAddCounter 014��\SystemRoot\system32\perfTMP.dat��	���^��[o��HyA��m�	M��
RenderingInfo'
?�Culturezxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��Uf��HIKeyword4611686018427387904���S��MessageiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.datP
**�

m��(�;���1�&
2JO!@m��(�;�������d�

Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
�	�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#}=Status
��6�B��6����U���i�b;�A��w�	
zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��VS&PerfGetNames-Update-End



Status: 0x0r�**�
.��(�;���1�&
2JZ!@.��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#}=Reason
A��%}=Command
A��#}=Status
	unlodctrAddCounter 014��I�o�
��I�;�Q�W~.�5
�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**�
A��(�;���1�&
2Jh!@A��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#}=Reason
A��%}=Command
A��}=Size
	unlodctrAddExplain 014���R��R�I��V?��fu�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**

-��(�;���1�&
2J�!@-��(�;�������d�

Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT��CT�!^�ȯ<p�A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat**p
��(�;���1�&
2J%!@��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**�
t�(�;���1�&
2Je!@t�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 014�F:�J �F:�A�[��1|�T'�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0er�**�
�H�(�;���1�&
2Js!@�H�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\�#���\�D�\Ƹ���.�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314
�**
RK�(�;���1�&
2J�!@RK�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��'耒�	��_1u�Q4��:A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat**p
3��(�;���1�&
2J%!@3��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Brp**�
���(�;���1�&
2Je!@���(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 009�:ߑ2-�:ߑ���RP'���e�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0fl�**�
ě�(�;���1�&
2Js!@ě�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I�0�8I���Y��_C�j�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316ind�**
n��(�;���1�&
2J�!@n��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@��4J �&@�w]W
�I�Z�JA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat**p
�(�;���1�&
2J%!@�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Brop**�
��(�;���1�&
2Je!@��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 009���:���KX���b{;"�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0��#�**�
R�(�;���1�&
2JD!@R�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j�؅=:�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
>KL���>L����Z�WX6d���A����	
zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SSUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1mi�**�
b�(�;���1�&
2JE!@b�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�B%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#}=Status
����B�=�����']�U�>,�{A��o�	
zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��PS#UnloadCounterNames-End



Status: 0y�**�
�(�;���1�&
2J]!@�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�E(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#}=status
��lPF�#��lH�b^G��2
�A���	
zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpReleaseInstallationMutex



status: 1��Ө**�
���(�;���1�&
2J�!@���(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��sMIh��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#}=Status
%�{�J�%�{�#Y� [�J�T�A����	
zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��dS-UnloadPerfCounterTextStrings-End



Status: 0ckup�**�
��(�;���1�&
2J�!@��(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,MW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�tNYF��:RL䡠�{o#/A��#�	
zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SsLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�**�
���(�;���1�&
2JG!@���(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��RoC^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%}=IniFile
A��!}=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�FSPFp+����R4���$��A����	
zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**�
�$�(�;���1�&
2J]!@�$�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�V�E��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#}=status
�PWB����_�w��t���A���	
zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpAcquireInstallationMutex



status: 0n�**�
�j�(�;���1�&
2JU!@�j�(�;�������d�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��MZ�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#}=Driver
WmiApRpl��DA�Z��DA�+2U��v�r�1�A��u�	
zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��ZS(UpdateRegistry-Begin



Driver: WmiApRpl��**� 
��(�;���1�&
2JS!@��(�;�������d� 
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��]�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��}=File
A��%}=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���_W���2PFG5�����A����	
zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: �**�!
w�(�;���1�&
2Ji!@w�(�;�������d�!
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�b��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#}=Status
,���<cMI,�����.Q��aO��A����	
zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��\S)BackupPerfRegistryToFile-End



Status: 0ows-�**�"
G��(�;���1�&
2J�!@G��(�;�������d�"
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ��f!ہ�_
H^�Sb��#=)A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SoCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350s�**#
2��(�;���1�&
2J�!@2��(�;�������d�#
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�j�Bۦ�PS�Q��+v0�ϯ
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p$
���(�;���1�&
2J%!@���(�;�������d�$
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bs-p**�%
%��(�;���1�&
2J�!@%��(�;�������d�%
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 014�N���oB�N��ǕS>
<tg��BA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0ft-�**�&
6��(�;���1�&
2J�!@6��(�;�������d�&
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;��stN�;�	sR'�#f���+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194L�t�Mi�**'
���(�;���1�&
2J�!@���(�;�������d�'
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J	xg�J�p.P>�)y��A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat
Co**p(
})�(�;���1�&
2J%!@})�(�;�������d�(
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bs-p**�)
�,�(�;���1�&
2J�!@�,�(�;�������d�)
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 014^2�OT}FS^2�O��T�2��E�Y�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0ft-�**�*
��(�;���1�&
2J�!@��(�;�������d�*
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3��<��03��p�UMa.�	|)�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374L�t�Mi�**+
�(�;���1�&
2J�!@�(�;�������d�+
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅a��V��߅[{*VhcaݰX_yA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat
Co**p,
���(�;���1�&
2J%!@���(�;�������d�,
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bs-p**�-
J��(�;���1�&
2J�!@J��(�;�������d�-
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 009�QF���QF�͂V��b�EϡwA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 06����**�.
Z��(�;���1�&
2J�!@Z��(�;�������d�.
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~���f4W~�iW�RmׂJ�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568oft-�**/
���(�;���1�&
2J�!@���(�;�������d�/
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{���Z�#�{�I]���p���A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat**p0
��(�;���1�&
2J%!@��(�;�������d�0
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Btep**�1
H�(�;���1�&
2J�!@H�(�;�������d�1
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 009B���MB��q��_x?��W�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0gin�**x2
�5�(�;���1�&
2J,!@�5�(�;�������d�2
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z��5/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
�K����s���bb�P/P*$Ht��A����	
zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SOUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1Jx**x3
�5�(�;���1�&
2J-!@�5�(�;�������d�3
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�
�2-�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#}=Status
�I�����]�I��;ԬS�l�[E@.kA��_�	
zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSUpdateRegistry-End



Status: 0x**p4
mU�(�;���1�&
2J%!@mU�(�;�������d�4
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�E��lPF`�p**x5
xU�(�;���1�&
2J-!@xU�(�;�������d�5
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	����4��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#}=Status
��1�����1��X����4kA��_�	
zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSInstallPerfDll-End



Status: 0x**�6
}U�(�;���1�&
2Ju!@}U�(�;�������d�6
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Fm����F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#}=Status
�f�B ����f�B�%�Z�-E��0�A����	
zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��`S+LoadPerfCounterTextStrings-End



Status: 0nd�**`7
�3H)=���1�&
2J!@�3H)=�������D
7
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��-�MZ(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet


xx WmiApRpl��~6�	x��~�DV��WE�sg�A����	
zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: trueU`**p8
�.4H)=���1�&
2J%!@�.4H)=�������D
8
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�V�PWrfp**�9
�44H)=���1�&
2Jm!@�44H)=�������D
9
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����������!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#}=Driver
WmiApRpld.�J��d.�J�rM_���s�)��A����	
zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��bS,UnloadCounterNames-Begin



Driver: WmiApRpl�**�:
��5H)=���1�&
2Jq!@��5H)=�������D
:
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 014����n`��m���n`��]�p���RaA����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 651600�**�;
��5H)=���1�&
2J�!@��5H)=�������D
;
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��	2�**p<
�6H)=���1�&
2J%!@�6H)=�������D
<
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Blp**�=
86H)=���1�&
2JT!@86H)=�������D
=
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 014��I�oow�**�>
J6H)=���1�&
2JT!@J6H)=�������D
>
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 014���R��**�?
�
6H)=���1�&
2J�!@�
6H)=�������D
?
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�**p@
>C6H)=���1�&
2J%!@>C6H)=�������D
@
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Be�p**�A
�E6H)=���1�&
2JT!@�E6H)=�������D
A
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 014�F:�J ws�**�B
��6H)=���1�&
2JT!@��6H)=�������D
B
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\�#���**�C
��6H)=���1�&
2J�!@��6H)=�������D
C
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��'C���**pD
X�6H)=���1�&
2J%!@X�6H)=�������D
D
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�B-Pp**�E
��6H)=���1�&
2JT!@��6H)=�������D
E
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 009�:ߑ2-���**�F
��6H)=���1�&
2JT!@��6H)=�������D
F
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I�0�**�G
Q�6H)=���1�&
2J�!@Q�6H)=�������D
G
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@��4�**pH
"(7H)=���1�&
2J%!@"(7H)=�������D
H
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Be�p**�I
�*7H)=���1�&
2JT!@�*7H)=�������D
I
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 009���:ws�**�J
ZR7H)=���1�&
2J2!@ZR7H)=�������D
J
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j�؅=>KL���>ib/�**pK
iR7H)=���1�&
2J%!@iR7H)=�������D
K
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�B����Bicp**pL
+S7H)=���1�&
2J%!@+S7H)=�������D
L
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�E��lPFp**pM
��7H)=���1�&
2J%!@��7H)=�������D
M
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��sMI%�{�Jflp**�N
F�7H)=���1�&
2J�!@F�7H)=�������D
N
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,Mj
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�tNrfl�**�O
��7H)=���1�&
2J�!@��7H)=�������D
O
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��RdC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�FS\P�**pP
Jg8H)=���1�&
2J%!@Jg8H)=�������D
P
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�V�PWlp**�Q
��8H)=���1�&
2J3!@��8H)=�������D
Q
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��MZWmiApRpl��DA�Z0�**�R
�6:H)=���1�&
2Jy!@�6:H)=�������D
R
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��]RC:\WINDOWS\system32\PerfStringBackup.TMPW���_��**pS
�]>H)=���1�&
2J%!@�]>H)=�������D
S
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�b,���<c=p**�T
�6?H)=���1�&
2Jf!@�6?H)=�������D
T
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ��fa�**�U
>9?H)=���1�&
2J�!@>9?H)=�������D
U
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�jft\�**pV
�i?H)=���1�&
2J%!@�i?H)=�������D
V
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bicp**�W
0l?H)=���1�&
2Jf!@0l?H)=�������D
W
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 014�N���on�**�X
Bl?H)=���1�&
2Jf!@Bl?H)=�������D
X
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;��s�**�Y
�p?H)=���1�&
2J�!@�p?H)=�������D
Y
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J	x�**pZ
h�?H)=���1�&
2J%!@h�?H)=�������D
Z
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�B^��p**�[
��?H)=���1�&
2Jf!@��?H)=�������D
[
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 014^2�OT}e�**�\
�M@H)=���1�&
2Jf!@�M@H)=�������D
\
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3��<�o�**�]
aP@H)=���1�&
2J�!@aP@H)=�������D
]
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅a�per�**p^
ʎ@H)=���1�&
2J%!@ʎ@H)=�������D
^
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Berp**�_
E�@H)=���1�&
2Jf!@E�@H)=�������D
_
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 009�QF���**�`
[�@H)=���1�&
2Jf!@[�@H)=�������D
`
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~��J�**�a
��@H)=���1�&
2J�!@��@H)=�������D
a
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{���**pb
��@H)=���1�&
2J%!@��@H)=�������D
b
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Batp**�c
:�@H)=���1�&
2Jf!@:�@H)=�������D
c
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 009B���&�**�d
�AH)=���1�&
2J2!@�AH)=�������D
d
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z���K���**�**pe
�AH)=���1�&
2J%!@�AH)=�������D
e
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�
��I����lp**pf
�*AH)=���1�&
2J%!@�*AH)=�������D
f
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�E��lPFlp��BElfChnkg
�
g
�
���@�4<�RR��
��I
�	o=�����f	�m��F���`A�ĕ�X���h�ܑA�&�>�K��0�qU��s����A4�w�w��n**�g
�*AH)=���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J�!@�*AH)=�������D
g
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	����	����R�U@��VQ�A���D�	EventData-=InstallPerfDll-EndA��5o��oData=Status
��1���1��X����4�A����M��
RenderingInfo'	?�Culturezxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��Uf��H�	IKeyword4611686018427387904��`I
��MessageInstallPerfDll-End



Status: 0�**�h
�*AH)=���1�&
2Ju!@�*AH)=�������D
h
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#o=Status
�f�B��f�B�%�Z�-E��0�A����	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��`I
+LoadPerfCounterTextStrings-End



Status: 0�**`i
tet=���1�&
2J!@tet=���d��nti
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-o=CommandLine
A��!o=Quiet


xx WmiApRpl��~���~�DV��WE�sg�A����	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**�j
֙	et=���1�&
2J]!@֙	et=���d��ntj
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb%��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#o=status
������_�w��t���A���	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��XI
'LpAcquireInstallationMutex



status: 0s�**�k
 �	et=���1�&
2Jm!@ �	et=���d��ntk
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���������!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#o=Driver
WmiApRpld.�J�d.�J�rM_���s�)��A����	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��bI
,UnloadCounterNames-Begin



Driver: WmiApRpl����**�l
�o
et=���1�&
2Jf!@�o
et=���d��ntl
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#o=Reason
A��%o=Command
A��o=Size
	unlodctrAddCounter 014����n`���n`��]�p���RaA����	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160&�**m
�q
et=���1�&
2J�!@�q
et=���d��ntm
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 �,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/o!=Query_Length
A��!o=Query
A��o=Size
A��o=Path
BAddCounter 014��\SystemRoot\system32\perfTMP.dat��!���^��[o��H
A���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat�**�n
��
et=���1�&
2JO!@��
et=���d��ntn
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%�!�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#o=Status
��6��%��6����U���i�b;�A��w�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��VI
&PerfGetNames-Update-End



Status: 0x0A�**�o
��
et=���1�&
2JZ!@��
et=���d��nto
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#o=Reason
A��%o=Command
A��#o=Status
	unlodctrAddCounter 014��I�*M%��I�;�Q�W~.�5
�A����	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0��**�p
��
et=���1�&
2Js!@��
et=���d��ntp
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 014���R��-�R�I��V?��fu�A����	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690!��**q
��
et=���1�&
2J�!@��
et=���d��ntq
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�1��CT�!^�ȯ<p�A���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat�**pr
$Get=���1�&
2J%!@$Get=���d��ntr
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%adp**�s
tIet=���1�&
2Je!@tIet=���d��nts
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddExplain 014�F:�
7��F:�A�[��1|�T'�A����	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0nM�**�t
O�et=���1�&
2Js!@O�et=���d��ntt
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\�:���\�D�\Ƹ���.�A����	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314dA��**u
T�et=���1�&
2J�!@T�et=���d��ntu
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��>耒�	��_1u�Q4��:A���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datA��!**pv
�et=���1�&
2J%!@�et=���d��ntv
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%p**�w
�
et=���1�&
2Je!@�
et=���d��ntw
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddCounter 009�:ߑ�C�:ߑ���RP'���e�A����	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0s�**�x
�
et=���1�&
2Js!@�
et=���d��ntx
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I�G�-�8I���Y��_C�j�A����	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316��g�**y
�
et=���1�&
2J�!@�
et=���d��nty
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@١K
7�&@�w]W
�I�Z�JA���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat}**pz
9Fet=���1�&
2J%!@9Fet=���d��ntz
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%3p**�{
�Het=���1�&
2Je!@�Het=���d��nt{
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddExplain 009����P���KX���b{;"�A����	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0�**�|
�`et=���1�&
2JD!@�`et=���d��nt|
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��ET�P�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-o=LastCounter
A��#o=Status
A��+o=
Transacted
>KL���qUL����Z�WX6d���A����	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 116�**�}
aet=���1�&
2JE!@aet=���d��nt}
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��X�%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#o=Status
���xYET�����']�U�>,�{A��o�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��PI
#UnloadCounterNames-End



Status: 0S�**�~
�aet=���1�&
2J]!@�aet=���d��nt~
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-e\%(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#o=status
��l]�:��lH�b^G��2
�A���	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��XI
'LpReleaseInstallationMutex



status: 1n�**�
ąet=���1�&
2J�!@ąet=���d��nt
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s
`h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#o=Status
%�{��`5 %�{�#Y� [�J�T�A����	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��dI
-UnloadPerfCounterTextStrings-End



Status: 0Wind�**��
��et=���1�&
2J�!@��et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�c�W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-o=CommandLine
A��!o=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�4e�1YF��:RL䡠�{o#/A��#�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: truext�**��
��et=���1�&
2JG!@��et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^���h*C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%o=IniFile
A��!o=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�j]p+����R4���$��A����	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**p�
w
et=���1�&
2J%!@w
et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb%���&p**��
.]
et=���1�&
2JU!@.]
et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���n��s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#o=Driver
WmiApRpl��DA�o��DA�+2U��v�r�1�A��u�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��ZI
(UpdateRegistry-Begin



Driver: WmiApRpld�**��
�et=���1�&
2JS!@�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�ur��|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��o=File
A��%o=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���sW���2PFG5�����A����	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: tr�**��
eKet=���1�&
2Ji!@eKet=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tw��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#o=Status
,����w
`,�����.Q��aO��A����	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��\I
)BackupPerfRegistryToFile-End



Status: 0lib�**��
*�et=���1�&
2J�!@*�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ�${�!ہ�_
H^�Sb��#=)A���	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**�
Q�et=���1�&
2J�!@Q�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�AxYۦ�PS�Q��+v0�ϯ
A���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p�
�et=���1�&
2J%!@�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%p**��
"et=���1�&
2J�!@"et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddCounter 014�N�����%�N��ǕS>
<tg��BA���	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0ws�**��
-"et=���1�&
2J�!@-"et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;�l�4e�;�	sR'�#f���+A���	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194atio�**�
U$et=���1�&
2J�!@U$et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J���g�J�p.P>�)y��A���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat�YZ�**p�
b^et=���1�&
2J%!@b^et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%p**��
�`et=���1�&
2J�!@�`et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddExplain 014^2�Oܑj^2�O��T�2��E�Y�A���	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0���**��
�et=���1�&
2J�!@�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3��ĕ�G3��p�UMa.�	|)�+A���	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374��	���**�
�et=���1�&
2J�!@�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�e\��߅[{*VhcaݰX_yA���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.datSta**p�
��et=���1�&
2J%!@��et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%�p**��
�et=���1�&
2J�!@�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddCounter 009�QF4��QF�͂V��b�EϡwA���	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0��0�**��
#�et=���1�&
2J�!@#�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~�${4W~�iW�RmׂJ�+A���	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568terN�**�
G�et=���1�&
2J�!@G�et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{A��o�#�{�I]���p���A���	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat?**p�
,4et=���1�&
2J%!@,4et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%rp**��
}6et=���1�&
2J�!@}6et=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddExplain 009B���cB��q��_x?��W�A���	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0014�**x�
Ket=���1�&
2J,!@Ket=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z��(/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-o=LastCounter
A��#o=Status
A��+o=
Transacted
�K���A�l����bb�P/P*$Ht��A����	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904���I
OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1-Px**x�
!Ket=���1�&
2J-!@!Ket=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԕ��C�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#o=Status
�I��0�ur�I��;ԬS�l�[E@.kA��_�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�	4611686018427387904��HI
UpdateRegistry-End



Status: 0x**p�
�ket=���1�&
2J%!@�ket=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-e\��l]*p**p�
�ket=���1�&
2J%!@�ket=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	����1�aip**p�
�ket=���1�&
2J%!@�ket=���d��nt�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�f�B�osp**��
�@���=���1�&
2JA!@�@���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���
xx WmiApRpl��~�Perf�**p�
Mr���=���1�&
2J%!@Mr���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb%����Yp**��
>x���=���1�&
2J3!@>x���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����WmiApRpld.�J�ndo�**��
�?���=���1�&
2JT!@�?���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 014����n`��**��
�A���=���1�&
2J�!@�A���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 014��\SystemRoot\system32\perfTMP.dat��!ros�**p�
����=���1�&
2J%!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%dop**��
�����=���1�&
2JT!@�����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddCounter 014��I�*do�**��
�����=���1�&
2JT!@�����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 014���R��-�**��
����=���1�&
2J�!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�1ros�**p�
$
���=���1�&
2J%!@$
���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%dop**��
����=���1�&
2JT!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddExplain 014�F:�
7K��Y�**��
�>���=���1�&
2JT!@�>���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\�:rf�**��
eA���=���1�&
2J�!@eA���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��>�1�&�**p�
2����=���1�&
2J%!@2����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%Pep**��
�����=���1�&
2JT!@�����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddCounter 009�:ߑ�Cd�**��
b����=���1�&
2JT!@b����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I�Gs-�**��
u����=���1�&
2J�!@u����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@١K��**p�
F
���=���1�&
2J%!@F
���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%m3p**��
����=���1�&
2JT!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(	unlodctrAddExplain 009����P�**��
�(���=���1�&
2J2!@�(���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��ET>KL���qUntrtex�**p�
�(���=���1�&
2J%!@�(���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��X���xYrfp**p�
;)���=���1�&
2J%!@;)���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-e\��l]p**p�
�R���=���1�&
2J%!@�R���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s
`%�{��`p**��
DW���=���1�&
2J�!@DW���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�cj
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�4erfl�**��
Mb���=���1�&
2J�!@Mb���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^���hdC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�jt-�**p�
�깣�=���1�&
2J%!@�깣�=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb%��$p**��
�4���=���1�&
2J3!@�4���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���nWmiApRpl��DA�o�**��
|����=���1�&
2Jy!@|����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�urRC:\WINDOWS\system32\PerfStringBackup.TMPW���sroso�**p�
�j���=���1�&
2J%!@�j���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tw,����w@7�p**��
0��=���1�&
2Jf!@0��=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ�${�**��
�����=���1�&
2J�!@�����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�Aoso�**p�
<0���=���1�&
2J%!@<0���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%@q?p**��
�2���=���1�&
2Jf!@�2���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddCounter 014�N�����C�**��
�2���=���1�&
2Jf!@�2���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;�l��**��
7���=���1�&
2J�!@7���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J��oso�**p�
�r���=���1�&
2J%!@�r���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%@p**��
�t���=���1�&
2Jf!@�t���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddExplain 014^2�Oܑ�**��
����=���1�&
2Jf!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3��ĕ�Y�**��
.���=���1�&
2J�!@.���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�5 BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅����**p�
Q���=���1�&
2J%!@Q���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���M%��6��%p**��
����=���1�&
2Jf!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�(CntrtextUpdateEachLanguageAddCounter 009�QF4�Q�**��
����=���1�&
2Jf!@����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~��2J��1�&
2JElfChnk�
"�
"�����A��I���S}=�����f
�m��	F�ts2�t��mA��{̵���&�S�`�X%�Yj�1T��v4���ʼnt�����**X
�

���=���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2Jg!@
���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q()A��D�	EventData;=PerfGetNames-Update-BeginA��A}��oData!=Query_Length
A��!}=Query
A��}=Size
A��}=Path
BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�	�#�{�I]���p���{A��o�	M��
RenderingInfo'
?�Culturezxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��Uf��HIKeyword4611686018427387904���S��MessagejPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.datunteX
**��
�O���=���1�&
2JO!@�O���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#}=Status
��6�J��6����U���i�b;�A��w�	
zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��VS&PerfGetNames-Update-End



Status: 0x0�**��
R���=���1�&
2J�!@R���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#}=Reason
A��%}=Command
A��#}=Status
CntrtextUpdateEachLanguageAddExplain 009B�ʼnB��q��_x?��W�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0�**x�
{l���=���1�&
2J,!@{l���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z=/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
�K���9���bb�P/P*$Ht��A����	
zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SOUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1��x**x�
�l���=���1�&
2J-!@�l���=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԍ�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#}=Status
�I��(�I��;ԬS�l�[E@.kA��_�	
zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSUpdateRegistry-End



Status: 0��x**��
��=���1�&
2J]!@��=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#}=status
��l���lH�b^G��2
�A���	
zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpReleaseInstallationMutex



status: 1�**x�
�����=���1�&
2J-!@�����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��!��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#}=Status
��1H"���1��X����4kA��_�	
zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSInstallPerfDll-End



Status: 03x**��
�����=���1�&
2Ju!@�����=���d��n;;�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F%%(�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#}=Status
�f�B�%�f�B�%�Z�-E��0�A����	
zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��`S+LoadPerfCounterTextStrings-End



Status: 0A�**`�
�ҭ>���1�&
2J!@�ҭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���((���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet


xx WmiApRpl��~�)��~�DV��WE�sg�A����	
zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: truert`**��
[�ҭ>���1�&
2J]!@[�ҭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbE-��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#}=status
��-����_�w��t���A���	
zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpAcquireInstallationMutex



status: 0�**��
,�ҭ>���1�&
2Jm!@,�ҭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����0H"����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#}=Driver
WmiApRpld.�J�1d.�J�rM_���s�)��A����	
zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��bS,UnloadCounterNames-Begin



Driver: WmiApRpl�**��

�ӭ>���1�&
2Jf!@
�ӭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�49Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#}=Reason
A��%}=Command
A��}=Size
	unlodctrAddCounter 014����n`�5%%��n`��]�p���RaA����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160r�**�
j�ӭ>���1�&
2J�!@j�ӭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��9�
���^��[o��H
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p�
<�ӭ>���1�&
2J%!@<�ӭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J
p**��
=�ӭ>���1�&
2Je!@=�ӭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I�
?�9��I�;�Q�W~.�5
�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0s-�**��
]�ӭ>���1�&
2Js!@]�ӭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddExplain 014���R�B�R�I��V?��fu�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690ib/�**�
c�ӭ>���1�&
2J�!@c�ӭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�F�4�CT�!^�ȯ<p�A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datdh�**p�
H#ԭ>���1�&
2J%!@H#ԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�p**��
�%ԭ>���1�&
2Je!@�%ԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 014�F:��K�!�F:�A�[��1|�T'�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0�**��
Q�ԭ>���1�&
2Js!@Q�ԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddCounter 009�����\�O����\�D�\Ƹ���.�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314�**�
�ԭ>���1�&
2J�!@�ԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��S耒�	��_1u�Q4��:A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datmiA**p�
ܺԭ>���1�&
2J%!@ܺԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�p**��
żԭ>���1�&
2Je!@żԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 009�:ߑ�X��:ߑ���RP'���e�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0&	�**��
�ԭ>���1�&
2Js!@�ԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddExplain 009�	�8I�\�B�8I���Y��_C�j�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316s
�**�
�ԭ>���1�&
2J�!@�ԭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ى`�K�&@�w]W
�I�Z�JA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat��**p�
�խ>���1�&
2J%!@�խ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��
�խ>���1�&
2Je!@�խ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009����e���KX���b{;"�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 08�**��
�6խ>���1�&
2JD!@�6խ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��-i�e�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
>KL���YjL����Z�WX6d���A����	
zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SSUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1�**��
�6խ>���1�&
2JE!@�6խ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��m�-%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#}=Status
���`n-i�����']�U�>,�{A��o�	
zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��PS#UnloadCounterNames-End



Status: 0L�**p�
s:խ>���1�&
2J%!@s:խ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-��l�osp**��
xjխ>���1�&
2J�!@xjխ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�rh��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#}=Status
%�{�ts�%�{�#Y� [�J�T�A����	
zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��dS-UnloadPerfCounterTextStrings-End



Status: 0indo�**��
`qխ>���1�&
2J�!@`qխ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�v�0W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��w�FYF��:RL䡠�{o#/A��#�	
zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SsLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�**��
�}խ>���1�&
2JG!@�}խ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�ۅ{
?C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%}=IniFile
A��!}=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��|�Op+����R4���$��A����	
zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0-�**p�
�֭>���1�&
2J%!@�֭>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbE-��-p**��
�N֭>���1�&
2JU!@�N֭>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څ��(�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#}=Driver
WmiApRpl��DA2��	��DA�+2U��v�r�1�A��u�	
zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��ZS(UpdateRegistry-Begin



Driver: WmiApRpl�**��
�׭>���1�&
2JS!@�׭>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%��5�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��}=File
A��%}=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���T�W���2PFG5�����A����	
zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: �**��
�ۭ>���1�&
2Ji!@�ۭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tʼn��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#}=Status
,���t��r,�����.Q��aO��A����	
zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��\S)BackupPerfRegistryToFile-End



Status: 0ows-�**��
T�ܭ>���1�&
2J�!@T�ܭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4CntrtextUpdateEachLanguageAddCounter 014�!ہ�ԍ�%!ہ�_
H^�Sb��#=)A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SoCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350s�**�
��ܭ>���1�&
2J�!@��ܭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ��`nۦ�PS�Q��+v0�ϯ
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p�
B�ܭ>���1�&
2J%!@B�ܭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Js-p**��
c�ܭ>���1�&
2J�!@c�ܭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N��4�J�N��ǕS>
<tg��BA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0ft-�**��
��ܭ>���1�&
2J�!@��ܭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4CntrtextUpdateEachLanguageAddExplain 014��;���w�;�	sR'�#f���+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194L�t�Mi�**�
3�ܭ>���1�&
2J�!@3�ܭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JA��)g�J�p.P>�)y��A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat
Co**p�
�ݭ>���1�&
2J%!@�ݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Js-p**��
aݭ>���1�&
2J�!@aݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 014^2�O���|^2�O��T�2��E�Y�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0	����**��
�xݭ>���1�&
2J�!@�xݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4CntrtextUpdateEachLanguageAddCounter 009^�3��t��\3��p�UMa.�	|)�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374oft-�**�
�{ݭ>���1�&
2J�!@�{ݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅��E-��߅[{*VhcaݰX_yA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat**p�
��ݭ>���1�&
2J%!@��ݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jtep**��
3�ݭ>���1�&
2J�!@3�ݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QF��QF�͂V��b�EϡwA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0gin�**��
E�ݭ>���1�&
2J�!@E�ݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4CntrtextUpdateEachLanguageAddExplain 009�
4W~̵ԍ4W~�iW�RmׂJ�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568�**��
��ݭ>���1�&
2J�!@��ݭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�	�**p�
�ޭ>���1�&
2J%!@�ޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��
@ޭ>���1�&
2Jf!@@ޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B�ʼn���**��
tޭ>���1�&
2J2!@tޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�K���9at�**p�
{ޭ>���1�&
2J%!@{ޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԍ�I��(dp**p�
�=ޭ>���1�&
2J%!@�=ޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-��l�iop**p�
>ޭ>���1�&
2J%!@>ޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��!��1H"t-p**p�

>ޭ>���1�&
2J%!@
>ޭ>���d��n�@�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F%%�f�B�%4p**��
��r�?���1�&
2JA!@��r�?���r��?`#�
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���(
xx WmiApRpl��~�)Mic�**p�0s�?���1�&
2J%!@�0s�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbE-��-��p**��5s�?���1�&
2J3!@�5s�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����0WmiApRpld.�J�1J�**���t�?���1�&
2JT!@��t�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddCounter 014����n`�5�**�w�t�?���1�&
2J�!@w�t�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��94�**p��t�?���1�&
2J%!@��t�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�JJp**���t�?���1�&
2JT!@��t�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I�
?J�**���t�?���1�&
2JT!@��t�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddExplain 014���R�B�**�=�t�?���1�&
2J�!@=�t�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�F4�**p�du�?���1�&
2J%!@�du�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�JJp**�	rgu�?���1�&
2JT!@rgu�?���r��?`#	Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 014�F:��K����**�
��u�?���1�&
2JT!@��u�?���r��?`#
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddCounter 009�����\�Oic�**���u�?���1�&
2J�!@��u�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��Sib/�**pAv�?���1�&
2J%!@Av�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jb/p**�
tDv�?���1�&
2JT!@tDv�?���r��?`#
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 009�:ߑ�X����**��Dv�?���1�&
2JT!@�Dv�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4	unlodctrAddExplain 009�	�8I�\�**��Gv�?���1�&
2J�!@�Gv�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ى`erf�**pD�v�?���1�&
2J%!@D�v�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jndp**��v�?���1�&
2JT!@�v�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009����e����**�B�v�?���1�&
2J2!@B�v�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��-i>KL���Yj�t�Mi�**pb�v�?���1�&
2J%!@b�v�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��m���`nicp**p�v�?���1�&
2J%!@�v�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-��l�p**p,�v�?���1�&
2J%!@,�v�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�r%�{�tsp**��w�?���1�&
2J�!@�w�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�vj
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��w�**��w�?���1�&
2J�!@�w�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�ۅ{dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��|?�**po�w�?���1�&
2J%!@o�w�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbE-��-p**�;x�?���1�&
2J3!@;x�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څ�WmiApRpl��DA2��**��ny�?���1�&
2Jy!@�ny�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%�RC:\WINDOWS\system32\PerfStringBackup.TMPW���T��**pxU}�?���1�&
2J%!@xU}�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tʼn,���t�p**���}�?���1�&
2Jf!@��}�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4CntrtextUpdateEachLanguageAddCounter 014�!ہ�ԍ�߰**���}�?���1�&
2J�!@��}�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ���**p�~�?���1�&
2J%!@�~�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��~�?���1�&
2Jf!@�~�?���r��?`#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N��4��**� �~�?���1�&
2Jf!@�~�?���r��?`# Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�4CntrtextUpdateEachLanguageAddExplain 014��;��#ٰ**�!\"~�?���1�&
2J�!@\"~�?���r��?`#!Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JA��**p"�x~�?���1�&
2J%!@�x~�?���r��?`#"Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp1�&��1�&
2J�@wz~�?���r��?`##Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=ElfChnk#�#�����ݩ���S���
�=�����f�	�m��	F�=,��j��q��y�����T�&�h�un]���G��ŋl�)�T����mC��**
#wz~�?���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J*!@wz~�?���r��?`##Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�oc@�c[U#<DA���D�	EventDataG=CntrtextSavePerfDatRegistry-EndA��5���oData=Reason
A��%�=Command
A��#�=Status
CntrtextUpdateEachLanguageAddExplain 014^2�Oi	^2�O��T�2��E�Y��A��}�	M��
RenderingInfo'�	?�Culturezxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904�����MessagekCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0mR
**�$��~�?���1�&
2J�!@��~�?���r��?`#$Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
CntrtextUpdateEachLanguageAddCounter 009^�3��3��p�UMa.�	|)�+A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374-�**%@�~�?���1�&
2J�!@@�~�?���r��?`#%Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�M�,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅���߅[{*VhcaݰX_yA���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat**�&Z	�?���1�&
2JO!@Z	�?���r��?`#&Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6�
��6����U���i�b;�A��w�	�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V&PerfGetNames-Update-End



Status: 0x0�**�'�
�?���1�&
2J�!@�
�?���r��?`#'Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QFT�QF�͂V��b�EϡwA���	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0s-P�**�(��?���1�&
2J�!@��?���r��?`#(Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddExplain 009�
4W~<4W~�iW�RmׂJ�+A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568lib/�**)��?���1�&
2J�!@��?���r��?`#)Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{a#�#�{�I]���p���A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.datEnd**p*u��?���1�&
2J%!@u��?���r��?`#*Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
6p**�+��?���1�&
2J�!@��?���r��?`#+Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B�Ŭ(B��q��_x?��W�A���	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0ws-�**x,Ӵ�?���1�&
2J,!@Ӵ�?���r��?`#,Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z=,�/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K���a-e
���bb�P/P*$Ht��A����	�	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1lax**x-ڴ�?���1�&
2J-!@ڴ�?���r��?`#-Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�IԵ0�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I��P1�I��;ԬS�l�[E@.kA��_�	�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HUpdateRegistry-End



Status: 00x**�.���?���1�&
2J]!@���?���r��?`#.Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--4�(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l�4i	��lH�b^G��2
�A���	�	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpReleaseInstallationMutex



status: 1r�**x/���?���1�&
2J-!@���?���r��?`#/Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��7��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1p8�(��1��X����4kA��_�	�	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HInstallPerfDll-End



Status: 0x**�0���?���1�&
2Ju!@���?���r��?`#0Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FM;P1�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�B<<�f�B�%�Z�-E��0�A����	�	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`+LoadPerfCounterTextStrings-End



Status: 0�**`1�a�n?���1�&
2J!@�a�n?���r�AF1Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��
?(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~@��~�DV��WE�sg�A����	�	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**�2o�a�n?���1�&
2J]!@o�a�n?���r�AF2Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbmC-4��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
�D����_�w��t���A���	�	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpAcquireInstallationMutex



status: 0MP�**�3K�a�n?���1�&
2Jm!@K�a�n?���r�AF3Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���Gp8����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�J�Gd.�J�rM_���s�)��A����	�	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b,UnloadCounterNames-Begin



Driver: WmiApRpl����**�49�b�n?���1�&
2Jq!@9�b�n?���r�AF4Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddCounter 014����n`KM;��n`��]�p���RaA����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160^�**5�b�n?���1�&
2J�!@�b�n?���r�AF5Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 014��\SystemRoot\system32\perfTMP.dat�Oe���^��[o��H
A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p6�0c�n?���1�&
2J%!@�0c�n?���r�AF6Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
MPp**�73c�n?���1�&
2Je!@3c�n?���r�AF7Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I�BTO��I�;�Q�W~.�5
�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**�8'3c�n?���1�&
2Js!@'3c�n?���r�AF8Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddExplain 014���R��W��R�I��V?��fu�A����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690**�**9]6c�n?���1�&
2J�!@]6c�n?���r�AF9Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�[a-�CT�!^�ȯ<p�A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datast**p:�oc�n?���1�&
2J%!@�oc�n?���r�AF:Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
���p**�;;rc�n?���1�&
2Je!@;rc�n?���r�AF;Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:�*a�7�F:�A�[��1|�T'�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0t-�**�<L�c�n?���1�&
2Js!@L�c�n?���r�AF<Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddCounter 009�����\�d�4���\�D�\Ƹ���.�A����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314I
�**=��c�n?���1�&
2J�!@��c�n?���r�AF=Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��h耒�	��_1u�Q4��:A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datWin**p>�
d�n?���1�&
2J%!@�
d�n?���r�AF>Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
p**�?
d�n?���1�&
2Je!@
d�n?���r�AF?Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑn�0�:ߑ���RP'���e�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0I�**�@%
d�n?���1�&
2Js!@%
d�n?���r�AF@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddExplain 009�	�8I�q�W�8I���Y��_C�j�A����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316=�**Aod�n?���1�&
2J�!@od�n?���r�AFAMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�u*a�&@�w]W
�I�Z�JA���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat
**pB�d�n?���1�&
2J%!@�d�n?���r�AFBMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
icp**�C��d�n?���1�&
2Je!@��d�n?���r�AFCMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009���z���KX���b{;"�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0�**�D��d�n?���1�&
2JD!@��d�n?���r�AFDMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��e~�z�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL���L����Z�WX6d���A����	�	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1y-�**�E��d�n?���1�&
2JE!@��d�n?���r�AFEMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th���D%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
�����e~�����']�U�>,�{A��o�	�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P#UnloadCounterNames-End



Status: 0���**pFz�d�n?���1�&
2J%!@z�d�n?���r�AFFMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--4��l�4p**�G��d�n?���1�&
2J�!@��d�n?���r�AFGMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s��h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{Ĭ�M%�{�#Y� [�J�T�A����	�	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d-UnloadPerfCounterTextStrings-End



Status: 0lib�**�H}�d�n?���1�&
2J�!@}�d�n?���r�AFHMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,ŋGW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���[YF��:RL䡠�{o#/A��#�	�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: truei�**�I;�d�n?���1�&
2JG!@;�d�n?���r�AFIMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۽�BTC^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+���dp+����R4���$��A����	�	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**pJB~e�n?���1�&
2J%!@B~e�n?���r�AFJMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbmC�Dp**�KA�e�n?���1�&
2JU!@A�e�n?���r�AFKMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�ڽ�
?�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DAj�a#��DA�+2U��v�r�1�A��u�	�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z(UpdateRegistry-Begin



Driver: WmiApRpl*�**�L�g�n?���1�&
2JS!@�g�n?���r�AFLMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�]�K�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���W���2PFG5�����A����	�	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: �**�M�k�n?���1�&
2Ji!@�k�n?���r�AFMMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t����.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,�������,�����.Q��aO��A����	�	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\)BackupPerfRegistryToFile-End



Status: 0�**�Nۮk�n?���1�&
2J�!@ۮk�n?���r�AFNMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddCounter 014�!ہ��<!ہ�_
H^�Sb��#=)A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**O`�k�n?���1�&
2J�!@`�k�n?���r�AFOMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�)���ۦ�PS�Q��+v0�ϯ
A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**pPF�k�n?���1�&
2J%!@F�k�n?���r�AFPMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
Jp**�Q��k�n?���1�&
2J�!@��k�n?���r�AFQMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N��l�
�N��ǕS>
<tg��BA���	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**�R��k�n?���1�&
2J�!@��k�n?���r�AFRMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddExplain 014��;�T���;�	sR'�#f���+A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194168�**S��k�n?���1�&
2J�!@��k�n?���r�AFSMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 014�\SystemRoot\system32\perfTMP.datg�Jy�@g�J�p.P>�)y��A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.datReg**pT�&l�n?���1�&
2J%!@�&l�n?���r�AFTMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
: p**�U+*l�n?���1�&
2Jf!@+*l�n?���r�AFUMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�Oi	�**�V�l�n?���1�&
2Jf!@�l�n?���r�AFVMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddCounter 009^�3��J�**�W��l�n?���1�&
2J�!@��l�n?���r�AFWMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�s-P�**pX��l�n?���1�&
2J%!@��l�n?���r�AFXMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
-Pp**�Yܷl�n?���1�&
2Jf!@ܷl�n?���r�AFYMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QFTi�**�Z�l�n?���1�&
2Jf!@�l�n?���r�AFZMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddExplain 009�
4W~<o�**�[��l�n?���1�&
2J�!@��l�n?���r�AF[Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{a#�**p\�2m�n?���1�&
2J%!@�2m�n?���r�AF\Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
Cop**�]U4m�n?���1�&
2Jf!@U4m�n?���r�AF]Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B�Ŭ(o�**�^Om�n?���1�&
2J2!@Om�n?���r�AF^Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z=,�K���a-c@0�**p_Om�n?���1�&
2J%!@Om�n?���r�AF_Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�IԵ0�I��P1s-p**p`=nm�n?���1�&
2J%!@=nm�n?���r�AF`Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--4��l�4���p**paKnm�n?���1�&
2J%!@Knm�n?���r�AFaMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��7��1p8p**pbPnm�n?���1�&
2J%!@Pnm�n?���r�AFbMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FM;�f�B<p**�c~��0LH���1�&
2JA!@~��0LH���r�����cMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��
?
xx WmiApRpl��~@J�**pd��0LH���1�&
2J%!@��0LH���r�����dMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbmC�Dp**�e��0LH���1�&
2J3!@��0LH���r�����eMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���GWmiApRpld.�J�GTMP�**�f��0LH���1�&
2JT!@��0LH���r�����fMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddCounter 014����n`K��**�g���0LH���1�&
2J�!@���0LH���r�����gMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 014��\SystemRoot\system32\perfTMP.dat�O�**ph#�0LH���1�&
2J%!@#�0LH���r�����hMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
p**�iB%�0LH���1�&
2JT!@B%�0LH���r�����iMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I�BTMP�**�jS%�0LH���1�&
2JT!@S%�0LH���r�����jMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddExplain 014���R��W��**�k)�0LH���1�&
2J�!@)�0LH���r�����kMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�[�**pli�0LH���1�&
2J%!@i�0LH���r�����lMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
p**�mbk�0LH���1�&
2JT!@bk�0LH���r�����mMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:�*aJ�**�n!�0LH���1�&
2JT!@!�0LH���r�����nMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddCounter 009�����\�dD�**�o��0LH���1�&
2J�!@��0LH���r�����oMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��hft-�**pp��0LH���1�&
2J%!@��0LH���r�����pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
Dp**�qt�0LH���1�&
2JT!@t�0LH���r�����qMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑn2�**�r��0LH���1�&
2JT!@��0LH���r�����rMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddExplain 009�	�8I�q�**�sU"�0LH���1�&
2J�!@U"�0LH���r�����sMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�uNK��Y�**pt���0LH���1�&
2J%!@���0LH���r�����tMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
Dp**�u��0LH���1�&
2JT!@��0LH���r�����uMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009���z-W�**�vo�0LH���1�&
2J2!@o�0LH���r�����vMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��e~>KL���;D�**pw��0LH���1�&
2J%!@��0LH���r�����wMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��������p**pxC�0LH���1�&
2J%!@C�0LH���r�����xMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--4��l�4p**pyjD1LH���1�&
2J%!@jD1LH���r�����yMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s��%�{Ĭ�p**�zJ1LH���1�&
2J�!@J1LH���r�����zMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,ŋj
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���**�{`Y1LH���1�&
2J�!@`Y1LH���r�����{Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۽�dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��� ��**p|R1LH���1�&
2J%!@R1LH���r�����|Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbmC�D� �p**�}W1LH���1�&
2J3!@W1LH���r�����}Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�ڽ�WmiApRpl��DAj�14�**�~�1LH���1�&
2Jy!@�1LH���r�����~Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�]�RC:\WINDOWS\system32\PerfStringBackup.TMPW����**p �1LH���1�&
2J%!@ �1LH���r�����Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t��,�����Cop**��z`1LH���1�&
2Jf!@z`1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddCounter 014�!ہ��o�l���m,��1�&
2J@�b1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBElfChnk�������ڡɰ�5��S}=�����f
�m��	F�?t�2������R��Ե���&�{��ڀ%�Y��ZT����`�.űt�5V��**P
��b1LH���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2Je!@�b1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q()A��D�	EventData;=PerfGetNames-Update-BeginA��A}��oData!=Query_Length
A��!}=Query
A��}=Size
A��}=Path
BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�	ۦ�PS�Q��+v0�ϯyA��m�	M��
RenderingInfo'
?�Culturezxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��Uf��HIKeyword4611686018427387904���S��MessageiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.datP
**��,�1LH���1�&
2JO!@,�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#}=Status
��6�B��6����U���i�b;�A��w�	
zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��VS&PerfGetNames-Update-End



Status: 0x08�**��s�1LH���1�&
2J�!@s�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#}=Reason
A��%}=Command
A��#}=Status
CntrtextUpdateEachLanguageAddCounter 014�N���B�N��ǕS>
<tg��BA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**����1LH���1�&
2J�!@��1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#}=Reason
A��%}=Command
A��}=Size
CntrtextUpdateEachLanguageAddExplain 014��;�Y
�;�	sR'�#f���+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194�**���1LH���1�&
2J�!@��1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�Jyg�J�p.P>�)y��A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat��**p�T�1LH���1�&
2J%!@T�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bpp**���1LH���1�&
2J�!@�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 014^2�O� ^2�O��T�2��E�Y�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0lai�**���_1LH���1�&
2J�!@�_1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
CntrtextUpdateEachLanguageAddCounter 009^�3��$3��p�UMa.�	|)�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 1293746�
�**�gb1LH���1�&
2J�!@gb1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�(��߅[{*VhcaݰX_yA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.datӴ�**p��1LH���1�&
2J%!@�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�BUpp**��B�1LH���1�&
2J�!@B�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 009�QF.�QF�͂V��b�EϡwA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0NK��Y�**��S�1LH���1�&
2J�!@S�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
CntrtextUpdateEachLanguageAddExplain 009�
4W~24W~�iW�RmׂJ�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568�**��1LH���1�&
2J�!@�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{)6�#�{�I]���p���A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat**p��1LH���1�&
2J%!@�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Blp**��<�1LH���1�&
2J�!@<�1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 009B��t;B��q��_x?��W�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0�**x�=	1LH���1�&
2J,!@=	1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z?5/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
�K���)@Y���bb�P/P*$Ht��A����	
zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SOUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 12x**x�F	1LH���1�&
2J-!@F	1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�}C�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#}=Status
�I��D�I��;ԬS�l�[E@.kA��_�	
zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSUpdateRegistry-End



Status: 0
x**��(	1LH���1�&
2J]!@(	1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�F�((�-\X�����e��}A��q==LpReleaseInstallationMutexA��#}=status
��l�G� ��lH�b^G��2
�A���	
zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpReleaseInstallationMutex



status: 1
�**x�(	1LH���1�&
2J-!@(	1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��J��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#}=Status
��18Kt;��1��X����4kA��_�	
zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSInstallPerfDll-End



Status: 0sx**��(	1LH���1�&
2Ju!@(	1LH���r������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FND�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#}=Status
�f�B�N2�f�B�%�Z�-E��0�A����	
zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��`S+LoadPerfCounterTextStrings-End



Status: 0at�**`�x[\YNH���1�&
2J!@x[\YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���Q(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet


xx WmiApRpl��~�Ry��~�DV��WE�sg�A����	
zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: truef`**���~\YNH���1�&
2J]!@�~\YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb5V�F��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#}=status
��V����_�w��t���A���	
zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpAcquireInstallationMutex



status: 0ib�**����\YNH���1�&
2Jm!@��\YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����Y8K����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#}=Driver
WmiApRpld.�J�Zd.�J�rM_���s�)��A����	
zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��bS,UnloadCounterNames-Begin



Driver: WmiApRpl�**���c]YNH���1�&
2Jq!@�c]YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddCounter 014����n`�]N��n`��]�p���RaA����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160ws-P�**�;f]YNH���1�&
2J�!@;f]YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��a�
���^��[o��H
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p���^YNH���1�&
2J%!@��^YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bibp**����^YNH���1�&
2Je!@��^YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 014��I�
g�a��I�;�Q�W~.�5
�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0��**����^YNH���1�&
2Js!@��^YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddExplain 014���R�j�$�R�I��V?��fu�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690ndo�**�,�^YNH���1�&
2J�!@,�^YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�n)@�CT�!^�ȯ<p�A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datib/**p�i_YNH���1�&
2J%!@i_YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**���j_YNH���1�&
2Je!@�j_YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 014�F:��s�J�F:�A�[��1|�T'�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0�**����_YNH���1�&
2Js!@��_YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddCounter 009�����\�w�G���\�D�\Ƹ���.�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314�**�Q�_YNH���1�&
2J�!@Q�_YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��{耒�	��_1u�Q4��:A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat**p�+`YNH���1�&
2J%!@+`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**��[-`YNH���1�&
2Je!@[-`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 009�:ߑڀ}C�:ߑ���RP'���e�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0-P�**��l-`YNH���1�&
2Js!@l-`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddExplain 009�	�8I���j�8I���Y��_C�j�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316��**��0`YNH���1�&
2J�!@�0`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ى��s�&@�w]W
�I�Z�JA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat**p���`YNH���1�&
2J%!@��`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**��9�`YNH���1�&
2Je!@9�`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 009����	���KX���b{;"�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0:�**���`YNH���1�&
2JD!@�`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��-��j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
>KL���Y�L����Z�WX6d���A����	
zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SSUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1�**��#�`YNH���1�&
2JE!@#�`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th����V%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#}=Status
���`�-������']�U�>,�{A��o�	
zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��PS#UnloadCounterNames-End



Status: 0�**p��`YNH���1�&
2J%!@�`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�F��l�GCop**����`YNH���1�&
2J�!@��`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s��h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#}=Status
%�{�t��%�{�#Y� [�J�T�A����	
zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��dS-UnloadPerfCounterTextStrings-End



Status: 0atio�**����`YNH���1�&
2J�!@��`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,���YW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���nYF��:RL䡠�{o#/A��#�	
zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SsLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true-P�**��/�`YNH���1�&
2JG!@/�`YNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�ۅ�
gC^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%}=IniFile
A��!}=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+����wp+����R4���$��A����	
zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0i�**p��aYNH���1�&
2J%!@�aYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb5V��V
p**��X�aYNH���1�&
2JU!@X�aYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څ��Q�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#}=Driver
WmiApRpl��DA2�)6��DA�+2U��v�r�1�A��u�	
zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��ZS(UpdateRegistry-Begin



Driver: WmiApRplt-�**���RcYNH���1�&
2JS!@�RcYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%��]�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��}=File
A��%}=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���T�W���2PFG5�����A����	
zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: A���**���%gYNH���1�&
2Ji!@�%gYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tű��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#}=Status
,���t���,�����.Q��aO��A����	
zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��\S)BackupPerfRegistryToFile-End



Status: 09^��**��.�gYNH���1�&
2J�!@.�gYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
CntrtextUpdateEachLanguageAddCounter 014�!ہ�Ե�N!ہ�_
H^�Sb��#=)A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SoCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**��}�gYNH���1�&
2J�!@}�gYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�	�**p��hYNH���1�&
2J%!@�hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**��%hYNH���1�&
2Jf!@%hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 014�N���\�**��6hYNH���1�&
2Jf!@6hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
CntrtextUpdateEachLanguageAddExplain 014��;�Yc�**���hYNH���1�&
2J�!@�hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�Jy�**p��DhYNH���1�&
2J%!@�DhYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**��]GhYNH���1�&
2Jf!@]GhYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 014^2�O� �**��ϞhYNH���1�&
2Jf!@ϞhYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
CntrtextUpdateEachLanguageAddCounter 009^�3��$�**��Q�hYNH���1�&
2J�!@Q�hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�(ft-�**p�1�hYNH���1�&
2J%!@1�hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bt-p**����hYNH���1�&
2Jf!@��hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddCounter 009�QF./�**����hYNH���1�&
2Jf!@��hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
CntrtextUpdateEachLanguageAddExplain 009�
4W~2.��**����hYNH���1�&
2J�!@��hYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{)6�**p�t"iYNH���1�&
2J%!@t"iYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bt\p**���$iYNH���1�&
2Jf!@�$iYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5CntrtextUpdateEachLanguageAddExplain 009B��t;o�**��xDiYNH���1�&
2J2!@xDiYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z?�K���)@er �**p��DiYNH���1�&
2J%!@�DiYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�}C�I��De
p**p��fiYNH���1�&
2J%!@�fiYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�F��l�Gs-p**p��fiYNH���1�&
2J%!@�fiYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��J��18Kp**p�NgiYNH���1�&
2J%!@NgiYNH�&Ћ?YЋ?�T���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FN�f�B�Np**��E,
^�H���1�&
2JA!@E,
^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���Q
xx WmiApRpl��~�R;�&�**p�uO^�H���1�&
2J%!@uO^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb5V��VJp**���Q^�H���1�&
2J3!@�Q^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����YWmiApRpld.�J�Z��**���9^�H���1�&
2JT!@�9^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddCounter 014����n`�]�**��<^�H���1�&
2J�!@<^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��a�**p���^�H���1�&
2J%!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Bp**��Y�^�H���1�&
2JT!@Y�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 014��I�
g��**��k�^�H���1�&
2JT!@k�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddExplain 014���R�j�**����^�H���1�&
2J�!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�n�**p�yQ^�H���1�&
2J%!@yQ^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�BJp**���S^�H���1�&
2JT!@�S^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 014�F:��s�&�**���^�H���1�&
2JT!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddCounter 009�����\�w-W�**��/�^�H���1�&
2J�!@/�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��{tio�**p��^�H���1�&
2J%!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�B-Wp**���^�H���1�&
2JT!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddCounter 009�:ߑڀ�**���^�H���1�&
2JT!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/
	unlodctrAddExplain 009�	�8I��so�**���^�H���1�&
2J�!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ى�erf�**p�b�^�H���1�&
2J%!@b�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�B-Wp**����^�H���1�&
2JT!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@5	unlodctrAddExplain 009����Mi�**���^�H���1�&
2J2!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��-�>KL���Y�t-W�**p��^�H���1�&
2J%!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th������`�p**p���^�H���1�&
2J%!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�F��l�Gp**p���^�H���1�&
2J%!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s��%�{�t�p**����^�H���1�&
2J�!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,��j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���
2��1�&
2Josoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBElfChnk�<�<��P�I����H���
�
s=�����f�	�m�u	F�5Wl�YN����k}�f��ܵ&����Җ�sQ��p����+X�LF��%_j**�	���^�H���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J�!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^���C^��X��^}s�طL�A���D�	EventData1=InstallPerfDll-BeginA��7s��oData=IniFile
A��!s=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�N	p+����R4���$�[A��Ou	M��
RenderingInfo'�	?�Culturezxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904����
��Message_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0er�	**��Ql^�H���1�&
2J]!@Ql^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb
��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#s=status
��
����_�w��t���A��u	�	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X�
'LpAcquireInstallationMutex



status: 08�**��{�^�H���1�&
2JU!@{�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s����s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#s=Driver
WmiApRpl��DAr��DA�+2U��v�r�1�A��uu	�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z�
(UpdateRegistry-Begin



Driver: WmiApRplD�**���^�H���1�&
2JS!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�e�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��s=File
A��%s=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���W���2PFG5�����A���u	�	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: �**����^�H���1�&
2Ji!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#s=Status
,����,�����.Q��aO��A���u	�	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\�
)BackupPerfRegistryToFile-End



Status: 0.dat�**��^�H���1�&
2J�!@^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#s=Reason
A��%s=Command
A��s=Size
CntrtextUpdateEachLanguageAddCounter 014�!ہ�	!ہ�_
H^�Sb��#=)A��u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350er�**� ^�H���1�&
2J�!@ ^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!�,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/s!=Query_Length
A��!s=Query
A��s=Size
A��s=Path
BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�<#ۦ�PS�Q��+v0�ϯ
A��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**��?^�H���1�&
2JO!@?^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&������Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#s=Status
��6�b'��6����U���i�b;�A��wu	�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V�
&PerfGetNames-Update-End



Status: 0x0�**��b@^�H���1�&
2J�!@b@^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#s=Reason
A��%s=Command
A��#s=Status
CntrtextUpdateEachLanguageAddCounter 014�N���+b'�N��ǕS>
<tg��BA��u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**��v@^�H���1�&
2J�!@v@^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;�/��;�	sR'�#f���+A��u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194chLangu�**�hC^�H���1�&
2J�!@hC^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�3g�J�p.P>�)y��A��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat�
**p�P}^�H���1�&
2J%!@P}^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'68p**���^�H���1�&
2J�!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddExplain 014^2�O�8N	^2�O��T�2��E�Y�A��u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0trtex�**���^�H���1�&
2J�!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3���<3��p�UMa.�	|)�+A��u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374�**�2�^�H���1�&
2J�!@2�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅A
��߅[{*VhcaݰX_yA��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.datros**p��^�H���1�&
2J%!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'ryp**���^�H���1�&
2J�!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddCounter 009�QFLF�QF�͂V��b�EϡwA��u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0ows�**���^�H���1�&
2J�!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~4J	4W~�iW�RmׂJ�+A��u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568sta�**�\^�H���1�&
2J�!@\^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{YNr�#�{�I]���p���A��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat****p��H^�H���1�&
2J%!@�H^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**���J^�H���1�&
2J�!@�J^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddExplain 009B�ŤSB��q��_x?��W�A��u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0t�Mi�**x�c^�H���1�&
2J,!@c^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z5WU*/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-s=LastCounter
A��#s=Status
A��+s=
Transacted
�K���YX�/���bb�P/P*$Ht��A���u	�	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1Dx**x� c^�H���1�&
2J-!@ c^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԭ[�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#s=Status
�I��H\e�I��;ԬS�l�[E@.kA��_u	�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��H�
UpdateRegistry-End



Status: 0��x**��v�^�H���1�&
2J]!@v�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-%_A(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#s=status
��l�_�8��lH�b^G��2
�A��u	�	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X�
'LpReleaseInstallationMutex



status: 1te�**x��^�H���1�&
2J-!@�^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��b��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#s=Status
��1hc�S��1��X����4kA��_u	�	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��H�
InstallPerfDll-End



Status: 0���x**����^�H���1�&
2Ju!@��^�H������Q�x�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FEfH\�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#s=Status
�f�B�f4J�f�B�%�Z�-E��0�A���u	�	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`�
+LoadPerfCounterTextStrings-End



Status: 0s�**`�A�yFI���1�&
2J!@A�yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��j�(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-s=CommandLine
A��!s=Quiet


xx WmiApRpl��~k�3��~�DV��WE�sg�A���u	�	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**p�Ť�yFI���1�&
2J%!@Ť�yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb
��
p**��3��yFI���1�&
2Jm!@3��yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����ohc����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#s=Driver
WmiApRpld.�J�pd.�J�rM_���s�)��A���u	�	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b�
,UnloadCounterNames-Begin



Driver: WmiApRpl�**���l�yFI���1�&
2Jq!@�l�yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 014����n`�sEf��n`��]�p���RaA���u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**��n�yFI���1�&
2J�!@�n�yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 014��\SystemRoot\system32\perfTMP.dat��w�&���^��[o��H
A��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p����yFI���1�&
2J%!@���yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**��Ѷ�yFI���1�&
2Je!@Ѷ�yFI�����f|p�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddCounter 014��I�}�w��I�;�Q�W~.�5
�A���u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**���yFI���1�&
2Js!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 014���R���<�R�I��V?��fu�A���u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**,��yFI���1�&
2J�!@,��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT��YX�CT�!^�ȯ<p�A��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dattat**p���yFI���1�&
2J%!@���yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'erp**�U��yFI���1�&
2Je!@U��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddExplain 014�F:���b�F:�A�[��1|�T'�A���u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0�**��O�yFI���1�&
2Js!@�O�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\���_���\�D�\Ƹ���.�A���u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314d
�**�Q�yFI���1�&
2J�!@�Q�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒���耒�	��_1u�Q4��:A��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat601**p��yFI���1�&
2J%!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**���yFI���1�&
2Je!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddCounter 009�:ߑҖ�[�:ߑ���RP'���e�A���u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0:�**�$��yFI���1�&
2Js!@$��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I�����8I���Y��_C�j�A���u	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316D�**	U��yFI���1�&
2J�!@U��yFI�����f|p	Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ف���&@�w]W
�I�Z�JA��u	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.datIND**p
k��yFI���1�&
2J%!@k��yFI�����f|p
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**����yFI���1�&
2Je!@���yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddExplain 009��̺�<#���KX���b{;"�A���u	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0�**���yFI���1�&
2JD!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��%����j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-s=LastCounter
A��#s=Status
A��+s=
Transacted
>KL���Q�L����Z�WX6d���A���u	�	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1hL�**�
	�yFI���1�&
2JE!@	�yFI�����f|p
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th����
%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#s=Status
���X�%������']�U�>,�{A��ou	�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P�
#UnloadCounterNames-End



Status: 0Pe�**p��yFI���1�&
2J%!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-%_��l�_p**�*�yFI���1�&
2J�!@*�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s���h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#s=Status
%�{�l��!%�{�#Y� [�J�T�A���u	�	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d�
-UnloadPerfCounterTextStrings-End



Status: 0����**�V.�yFI���1�&
2J�!@V.�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,���oW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-s=CommandLine
A��!s=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�ܵ��YF��:RL䡠�{o#/A��#u	�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true	�**�|:�yFI���1�&
2J�!@|:�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^���dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�N	*�**p���yFI���1�&
2J%!@���yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb
��
*p**���yFI���1�&
2J3!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���WmiApRpl��DArxp�**��d�yFI���1�&
2Jy!@�d�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�eRC:\WINDOWS\system32\PerfStringBackup.TMPW���^��**p��yFI���1�&
2J%!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t,����p**�b�yFI���1�&
2Jf!@b�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ�	/�**�6d�yFI���1�&
2J�!@6d�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�<#�**pl��yFI���1�&
2J%!@l��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**����yFI���1�&
2Jf!@���yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddCounter 014�N���+�**�
��yFI���1�&
2Jf!@
��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;�//�**�L��yFI���1�&
2J�!@L��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�3�**p��yFI���1�&
2J%!@��yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**��yFI���1�&
2Jf!@�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddExplain 014^2�O�8�**��j�yFI���1�&
2Jf!@�j�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3���<�**�Im�yFI���1�&
2J�!@Im�yFI�����f|pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅At-W�**p ���yFI���1�&
2J%!@���yFI�����f|p Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'-Wp**�!>��yFI���1�&
2Jf!@>��yFI�����f|p!Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddCounter 009�QFLF���**�"O��yFI���1�&
2Jf!@O��yFI�����f|p"Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~4J/�**�#���yFI���1�&
2J�!@���yFI�����f|p#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{YN���**p$���yFI���1�&
2J%!@���yFI�����f|p$Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**�%^��yFI���1�&
2Jf!@^��yFI�����f|p%Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*CntrtextUpdateEachLanguageAddExplain 009B�ŤS/�**�&��yFI���1�&
2J2!@��yFI�����f|p&Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z5W�K���YXtio�**p'��yFI���1�&
2J%!@��yFI�����f|p'Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԭ[�I��H\t-p**p("�yFI���1�&
2J%!@"�yFI�����f|p(Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-%_��l�_-Pp**p)+�yFI���1�&
2J%!@+�yFI�����f|p)Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��b��1hcJp**p*0�yFI���1�&
2J%!@0�yFI�����f|p*Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FEf�f�B�fJp**�+luԖJ���1�&
2JA!@luԖJ�����f�@tD+Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��j
xx WmiApRpl��~k�**p,6�vԖJ���1�&
2J%!@6�vԖJ�����f�@tD,Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb
��
p**�- �vԖJ���1�&
2J3!@ �vԖJ�����f�@tD-Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����oWmiApRpld.�J�pm32�**�.�qwԖJ���1�&
2JT!@�qwԖJ�����f�@tD.Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 014����n`�sl�**�/�swԖJ���1�&
2J�!@�swԖJ�����f�@tD/Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 014��\SystemRoot\system32\perfTMP.dat��w�**p0��wԖJ���1�&
2J%!@��wԖJ�����f�@tD0Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'	p**�1F�wԖJ���1�&
2JT!@F�wԖJ�����f�@tD1Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddCounter 014��I�}32�**�2Z�wԖJ���1�&
2JT!@Z�wԖJ�����f�@tD2Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 014���R��n�**�37�wԖJ���1�&
2J�!@7�wԖJ�����f�@tD3Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT���**p4[WxԖJ���1�&
2J%!@[WxԖJ�����f�@tD4Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p**�5\xԖJ���1�&
2JT!@\xԖJ�����f�@tD5Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddExplain 014�F:���**�6ڌxԖJ���1�&
2JT!@ڌxԖJ�����f�@tD6Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\������**�7j�xԖJ���1�&
2J�!@j�xԖJ�����f�@tD7Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒���t�Mi�**p8�xԖJ���1�&
2J%!@�xԖJ�����f�@tD8Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'��p**�9��xԖJ���1�&
2JT!@��xԖJ�����f�@tD9Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@U*	unlodctrAddCounter 009�:ߑҖ�**�:��xԖJ���1�&
2JT!@��xԖJ�����f�@tD:Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I��@�c�**�;B�xԖJ���1�&
2J�!@B�xԖJ�����f�@tD;Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��!BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ف�rfl�**p<�TyԖJ���1�&
2J%!@�TyԖJ�����f�@tD<Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���&��6�b'p��1�&
2JElfChnk=�=�� �����_<�����
�=�����f�	�m�~	F�uo�:�f���&�
�}����&����ڬډY���.݅�Cl<�^52�2AY
�**�	=DVyԖJ���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J�!@DVyԖJ�����f�@tD=Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�oc@�c[U#<DA���D�	EventDataG=CntrtextSavePerfDatRegistry-EndA��5���oData=Reason
A��%�=Command
A��#�=Status
	unlodctrAddExplain 009���W	���KX���b{;"eA��Y~	M��
RenderingInfo'�	?�Culturezxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904�����MessageYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0�	**�>�qyԖJ���1�&
2JD!@�qyԖJ�����f�@tD>Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��-
W	�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL���YL����Z�WX6d���A���~	�	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1K��Y�**�?�qyԖJ���1�&
2JE!@�qyԖJ�����f�@tD?Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
���`-
�����']�U�>,�{A��o~	�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P#UnloadCounterNames-End



Status: 0fl�**�@ryԖJ���1�&
2J]!@ryԖJ�����f�@tD@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-M(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l���lH�b^G��2
�A��~	�	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpReleaseInstallationMutex



status: 1:�**�A�yԖJ���1�&
2J�!@�yԖJ�����f�@tDAMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{Ĭ%�{�#Y� [�J�T�A���~	�	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d-UnloadPerfCounterTextStrings-End



Status: 0**�**�BΝyԖJ���1�&
2J�!@ΝyԖJ�����f�@tDBMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�YF��:RL䡠�{o#/A��#~	�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true^�**�C!�yԖJ���1�&
2JG!@!�yԖJ�����f�@tDCMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۽!C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��"�p+����R4���$��A���~	�	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**�D�%zԖJ���1�&
2J]!@�%zԖJ�����f�@tDDMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbM&M��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
��&�����_�w��t���A��~	�	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpAcquireInstallationMutex



status: 0V�**�E�bzԖJ���1�&
2JU!@�bzԖJ�����f�@tDEMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��)�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DA�*��DA�+2U��v�r�1�A��u~	�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z(UpdateRegistry-Begin



Driver: WmiApRplt�**�F4�{ԖJ���1�&
2JS!@4�{ԖJ�����f�@tDFMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��-�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW����.W���2PFG5�����A���~	�	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: p�**�GO�ԖJ���1�&
2Ji!@O�ԖJ�����f�@tDGMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t52��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,����2�,�����.Q��aO��A���~	�	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\)BackupPerfRegistryToFile-End



Status: 0Per�**�H�y�ԖJ���1�&
2J�!@�y�ԖJ�����f�@tDHMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
CntrtextUpdateEachLanguageAddCounter 014�!ہ�97!ہ�_
H^�Sb��#=)A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350rf�**I�|�ԖJ���1�&
2J�!@�|�ԖJ�����f�@tDIMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:��,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�l<`ۦ�PS�Q��+v0�ϯ
A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.datnt**�J:��ԖJ���1�&
2JO!@:��ԖJ�����f�@tDJMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?�!�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6��@��6����U���i�b;�A��w~	�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V&PerfGetNames-Update-End



Status: 0x03�**�K���ԖJ���1�&
2J�!@���ԖJ�����f�@tDKMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N���C�@�N��ǕS>
<tg��BA��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0Langu�**�Lz��ԖJ���1�&
2J�!@z��ԖJ�����f�@tDLMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddExplain 014��;��G�5�;�	sR'�#f���+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194Exp�**M���ԖJ���1�&
2J�!@���ԖJ�����f�@tDMMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�Kg�J�p.P>�)y��A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.datemR**pN��ԖJ���1�&
2J%!@��ԖJ�����f�@tDNMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@73p**�O;��ԖJ���1�&
2J�!@;��ԖJ�����f�@tDOMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O4Q�"^2�O��T�2��E�Y�A��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0Langu�**�PQR�ԖJ���1�&
2J�!@QR�ԖJ�����f�@tDPMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddCounter 009^�3��U3��p�UMa.�	|)�+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374Up�**QW�ԖJ���1�&
2J�!@W�ԖJ�����f�@tDQMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅AYM&��߅[{*VhcaݰX_yA��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.datind**pRL��ԖJ���1�&
2J%!@L��ԖJ�����f�@tDRMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@p**�S틁ԖJ���1�&
2J�!@틁ԖJ�����f�@tDSMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QF�^�QF�͂V��b�EϡwA��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0lib�**�T���ԖJ���1�&
2J�!@���ԖJ�����f�@tDTMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddExplain 009�
4W~tb974W~�iW�RmׂJ�+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568fDl�**U֐�ԖJ���1�&
2J�!@֐�ԖJ�����f�@tDUMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�f�*�#�{�I]���p���A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.datA�y**pV%�ԖJ���1�&
2J%!@%�ԖJ�����f�@tDVMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@Unp**�W��ԖJ���1�&
2J�!@��ԖJ�����f�@tDWMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B���k�B��q��_x?��W�A��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0ft-�**xX4�ԖJ���1�&
2J,!@4�ԖJ�����f�@tDXMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/zuo�/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K��řp�G���bb�P/P*$Ht��A���~	�	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1x**xY4�ԖJ���1�&
2J-!@4�ԖJ�����f�@tDYMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I��s�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I���t�-�I��;ԬS�l�[E@.kA��_~	�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HUpdateRegistry-End



Status: 0n�yx**pZS�ԖJ���1�&
2J%!@S�ԖJ�����f�@tDZMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-M��l���p**x[)S�ԖJ���1�&
2J-!@)S�ԖJ�����f�@tD[Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��x��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1py�k��1��X����4kA��_~	�	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HInstallPerfDll-End



Status: 0Mix**�\.S�ԖJ���1�&
2Ju!@.S�ԖJ�����f�@tD\Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FM|�t�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�B}tb�f�B�%�Z�-E��0�A���~	�	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`+LoadPerfCounterTextStrings-End



Status: 0o�**`]+(���J���1�&
2J!@+(���J�����fF�]Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��
��)(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~��K��~�DV��WE�sg�A���~	�	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**p^�S���J���1�&
2J%!@�S���J�����fF�^Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbM&��&��p**�_pX���J���1�&
2Jm!@pX���J�����fF�_Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���݅py����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�J��d.�J�rM_���s�)��A���~	�	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b,UnloadCounterNames-Begin



Driver: WmiApRpl�**�`�����J���1�&
2Jq!@�����J�����fF�`Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddCounter 014����n`ډM|��n`��]�p���RaA���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**ac����J���1�&
2J�!@c����J�����fF�aMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddCounter 014��\SystemRoot\system32\perfTMP.dat�ٍ�?���^��[o��H
A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**pb�b���J���1�&
2J%!@�b���J�����fF�bMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@��p**�c�d���J���1�&
2Je!@�d���J�����fF�cMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I�
�ٍ��I�;�Q�W~.�5
�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0���**�de���J���1�&
2Js!@e���J�����fF�dMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddExplain 014���R��U�R�I��V?��fu�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�Q4��**e(k���J���1�&
2J�!@(k���J�����fF�eMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT���p�CT�!^�ȯ<p�A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.date!**pf�ǣ��J���1�&
2J%!@�ǣ��J�����fF�fMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@��p**�g%ʣ��J���1�&
2Je!@%ʣ��J�����fF�gMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:���x�F:�A�[��1|�T'�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0���**�h*���J���1�&
2Js!@*���J�����fF�hMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddCounter 009�����\��4Q���\�D�\Ƹ���.�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314I�Z��**i�,���J���1�&
2J�!@�,���J�����fF�iMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒���耒�	��_1u�Q4��:A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.date!**pj�����J���1�&
2J%!@�����J�����fF�jMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@��p**�k�����J���1�&
2Je!@�����J�����fF�kMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑڬ�s�:ߑ���RP'���e�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0t�**�l�����J���1�&
2Js!@�����J�����fF�lMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddExplain 009�	�8I�����8I���Y��_C�j�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316ind�**m��J���1�&
2J�!@�ä��J�����fF�mMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@ى���&@�w]W
�I�Z�JA��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat�**pn�b���J���1�&
2J%!@�b���J�����fF�nMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@adp**�o�d���J���1�&
2JT!@�d���J�����fF�oMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009���W	4�**�pD����J���1�&
2J2!@D����J�����fF�pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��-
>KL���Ys-P�**pqR����J���1�&
2J%!@R����J�����fF�qMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�����`yp**prք���J���1�&
2J%!@ք���J�����fF�rMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-M��l��p**ps󰥗�J���1�&
2J%!@󰥗�J�����fF�sMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�%�{Ĭp**�tH����J���1�&
2J�!@H����J�����fF�tMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�\W�**�uN����J���1�&
2J�!@N����J�����fF�uMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۽!dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��"n�**pv�D���J���1�&
2J%!@�D���J�����fF�vMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbM&��&-Wp**�w2����J���1�&
2J3!@2����J�����fF�wMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��)WmiApRpl��DA�*s-P�**�x���J���1�&
2Jy!@���J�����fF�xMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��-RC:\WINDOWS\system32\PerfStringBackup.TMPW����.�**py����J���1�&
2J%!@����J�����fF�yMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t52,����2p**�z:쬗�J���1�&
2Jf!@:쬗�J�����fF�zMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddCounter 014�!ہ�97\�**�{��J���1�&
2J�!@��J�����fF�{Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�l<il�**p|$���J���1�&
2J%!@$���J�����fF�|Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@dop**�}�%���J���1�&
2Jf!@�%���J�����fF�}Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N���Cd�**�~)&���J���1�&
2Jf!@)&���J�����fF�~Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddExplain 014��;��Gd�**��)���J���1�&
2J�!@�)���J�����fF�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�Kind�**p��b���J���1�&
2J%!@�b���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@ndp**��d���J���1�&
2Jf!@d���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O4Qd�**��ݵ���J���1�&
2Jf!@ݵ���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddCounter 009^�3��Ud�**��_����J���1�&
2J�!@_����J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅AYind�**p��ޭ��J���1�&
2J%!@�ޭ��J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@ndp**��?᭗�J���1�&
2Jf!@?᭗�J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QF�^d�**��Q᭗�J���1�&
2Jf!@Q᭗�J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5CntrtextUpdateEachLanguageAddExplain 009�
4W~tbd�**���䭗�J���1�&
2J�!@�䭗�J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�find�**p�'���J���1�&
2J%!@'���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@ndp**��!���J���1�&
2Jf!@!���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B���kd�**��o@���J���1�&
2J2!@o@���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/zuo�K��řprfl�**p�w@���J���1�&
2J%!@w@���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I��s�I���tp**p�y_���J���1�&
2J%!@y_���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-M��l�p**p��_���J���1�&
2J%!@�_���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	��x��1pyp**p��_���J���1�&
2J%!@�_���J�����fF��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�FM|�f�B}p**���hs�K���1�&
2JA!@�hs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��
�
xx WmiApRpl��~�,

�**p�_1hs�K���1�&
2J%!@_1hs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gbM&��&b/p**��
3hs�K���1�&
2J3!@
3hs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���݅WmiApRpld.�J��tio�**���
is�K���1�&
2JT!@�
is�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddCounter 014����n`ډT�**��)
is�K���1�&
2J�!@)
is�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddCounter 014��\SystemRoot\system32\perfTMP.dat�ٍJ�**p��js�K���1�&
2J%!@�js�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@p**��)js�K���1�&
2JT!@)js�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I�
��**��9js�K���1�&
2JT!@9js�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddExplain 014���R��� �**��gjs�K���1�&
2J�!@gjs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��:BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT��s-P�**p���js�K���1�&
2J%!@��js�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����?��6��@Jp**���ks�K���1�&
2JT!@�ks�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:��� �**��X`ks�K���1�&
2JT!@X`ks�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�5	unlodctrAddCounter 009�����\��� ��	M��1�&
2Jindows-Perflib/OperationalMz/=	unlodctrAddExplain 014���R���ElfChnk�����X����V%2ZU[��S}=�����f
�m��	F�́<0�x��=n�b�X����&�	J�E�2��$�TE5�4V�P�p�HtI�ke�**X
��bks�K���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2Jg!@�bks�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q()A��D�	EventData;=PerfGetNames-Update-BeginA��A}��oData!=Query_Length
A��!}=Query
A��}=Size
A��}=Path
BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��	耒�	��_1u�Q4��:{A��o�	M��
RenderingInfo'
?�Culturezxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��Uf��HIKeyword4611686018427387904���S��MessagejPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datD!X
**��:ls�K���1�&
2JO!@:ls�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#}=Status
��6�J��6����U���i�b;�A��w�	
zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��VS&PerfGetNames-Update-End



Status: 0x0t�**��u;ls�K���1�&
2JZ!@u;ls�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#}=Reason
A��%}=Command
A��#}=Status
	unlodctrAddCounter 009�:ߑw�:ߑ���RP'���e�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0��**���;ls�K���1�&
2Jh!@�;ls�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#}=Reason
A��%}=Command
A��}=Size
	unlodctrAddExplain 009�	�8I�8I���Y��_C�j�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316�**��?ls�K���1�&
2J�!@�?ls�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@��&@�w]W
�I�Z�JA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat=**p��ms�K���1�&
2J%!@�ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jinp**��ms�K���1�&
2Je!@ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009���R ���KX���b{;"�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0
�**��3ms�K���1�&
2JD!@3ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j�ؽ#R �j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
>KL����$L����Z�WX6d���A����	
zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SSUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1��**��3ms�K���1�&
2JE!@3ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�M(%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#}=Status
����(�#�����']�U�>,�{A��o�	
zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��PS#UnloadCounterNames-End



Status: 0i�**���3ms�K���1�&
2J]!@�3ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�+(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#}=status
��l�,��lH�b^G��2
�A���	
zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpReleaseInstallationMutex



status: 1��**����ms�K���1�&
2J�!@��ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�/h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#}=Status
%�{�<0�%�{�#Y� [�J�T�A����	
zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��dS-UnloadPerfCounterTextStrings-End



Status: 0ows-�**��j�ms�K���1�&
2J�!@j�ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,U3W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��4�YF��:RL䡠�{o#/A��#�	
zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SsLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: truetUp�**����ms�K���1�&
2JG!@��ms�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��M8�
C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%}=IniFile
A��!}=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�~9�,p+����R4���$��A����	
zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**���ns�K���1�&
2J]!@�ns�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�<�+��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#}=status
��=M(����_�w��t���A���	
zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpAcquireInstallationMutex



status: 0�**���Hns�K���1�&
2JU!@�Hns�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څ@�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#}=Driver
WmiApRpl��DA2A��DA�+2U��v�r�1�A��u�	
zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��ZS(UpdateRegistry-Begin



Driver: WmiApRpl�@�**��r�os�K���1�&
2JS!@r�os�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%D�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��}=File
A��%}=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���TEW���2PFG5�����A����	
zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: �**���0ss�K���1�&
2Ji!@�0ss�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�H��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#}=Status
,���tI�/,�����.Q��aO��A����	
zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��\S)BackupPerfRegistryToFile-End



Status: 0Wind�**��5�ss�K���1�&
2J�!@5�ss�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ��L!ہ�_
H^�Sb��#=)A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SoCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350i�**�\�ss�K���1�&
2J�!@\�ss�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ��P�(ۦ�PS�Q��+v0�ϯ
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p��(ts�K���1�&
2J%!@�(ts�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jndp**���*ts�K���1�&
2J�!@�*ts�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N��4VJ�N��ǕS>
<tg��BA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0ros�**��+ts�K���1�&
2J�!@+ts�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;�Z�4�;�	sR'�#f���+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194�|NK��Y�**�.ts�K���1�&
2J�!@.ts�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JA^g�J�p.P>�)y��A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.datge,**p���ts�K���1�&
2J%!@��ts�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jndp**����ts�K���1�&
2J�!@��ts�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 014^2�O�c~9^2�O��T�2��E�Y�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0ros�**���"us�K���1�&
2J�!@�"us�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3��tg3��p�UMa.�	|)�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374�|NK��Y�**�%us�K���1�&
2J�!@%us�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�k�<��߅[{*VhcaݰX_yA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.datge,**p��us�K���1�&
2J%!@�us�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jndp**��T�us�K���1�&
2J�!@T�us�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QF�p�QF�͂V��b�EϡwA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0@4�**��h�us�K���1�&
2J�!@h�us�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~�t�L4W~�iW�RmׂJ�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568cros�**���us�K���1�&
2J�!@��us�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�x2A�#�{�I]���p���A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat��1�&**p�\gvs�K���1�&
2J%!@\gvs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�JCop**��pivs�K���1�&
2J�!@pivs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B��<~U3B��q��_x?��W�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0s-B�**x�U~vs�K���1�&
2J,!@U~vs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/ź=/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
�K����Z���bb�P/P*$Ht��A����	
zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SOUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 12x**x�\~vs�K���1�&
2J-!@\~vs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�E�w�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#}=Status
�I���%D�I��;ԬS�l�[E@.kA��_�	
zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSUpdateRegistry-End



Status: 0�&x**p���vs�K���1�&
2J%!@��vs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�+��l�,M|p**x���vs�K���1�&
2J-!@��vs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�-���	����R�U@��VQmA��a-=InstallPerfDll-EndA��#}=Status
��1ȋ<~��1��X����4kA��_�	
zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSInstallPerfDll-End



Status: 0�:x**����vs�K���1�&
2Ju!@��vs�K����C�F��
�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F����F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#}=Status
�f�BX��t�f�B�%�Z�-E��0�A����	
zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��`S+LoadPerfCounterTextStrings-End



Status: 0t-�**`�BP�L���1�&
2J!@BP�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��e��@(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet


xx WmiApRpl��~n�A^��~�DV��WE�sg�A����	
zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**p�od�L���1�&
2J%!@od�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�<��=p**���f�L���1�&
2Jm!@�f�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5�ȋ����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#}=Driver
WmiApRpld.�J�d.�J�rM_���s�)��A����	
zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��bS,UnloadCounterNames-Begin



Driver: WmiApRpl�**��l5�L���1�&
2Jq!@l5�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 014����n`2�����n`��]�p���RaA����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**�]8�L���1�&
2J�!@]8�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat�1�M8���^��[o��H
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p����L���1�&
2J%!@���L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�&p**��+��L���1�&
2Je!@+��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I�b�1���I�;�Q�W~.�5
�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**��S��L���1�&
2Js!@S��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 014���R��tg�R�I��V?��fu�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**���L���1�&
2J�!@��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT���CT�!^�ȯ<p�A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat**p�0�L���1�&
2J%!@0�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J*p**��� �L���1�&
2Je!@� �L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 014�F:�J�-��F:�A�[��1|�T'�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0�**��&Y�L���1�&
2Js!@&Y�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 009�����\���c���\�D�\Ƹ���.�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314�**���[�L���1�&
2J�!@�[�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��	�**p����L���1�&
2J%!@���L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��#��L���1�&
2JT!@#��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 009�:ߑw�**��7��L���1�&
2JT!@7��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddExplain 009�	�8I�**����L���1�&
2J�!@��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@��**p���L���1�&
2J%!@��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��W�L���1�&
2JT!@W�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009���R �**����L���1�&
2J2!@��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j�ؽ#>KL����$in �**p���L���1�&
2J%!@��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�M(����(�p**p�B�L���1�&
2J%!@B�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�+��l�,-Pp**p�N;�L���1�&
2J%!@N;�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�/%�{�<0-Pp**���?�L���1�&
2J�!@�?�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,U3j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��4ws-�**���I�L���1�&
2J�!@�I�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��M8dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�~9*�**p����L���1�&
2J%!@���L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�<��=*p**����L���1�&
2J3!@��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�څ@WmiApRpl��DA2ALg��**��W��L���1�&
2Jy!@W��L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�%DRC:\WINDOWS\system32\PerfStringBackup.TMPW���TEws-�**p�,�#�L���1�&
2J%!@,�#�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�H,���tIWSp**���$�L���1�&
2Jf!@�$�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 014�!ہ��L�**��`�$�L���1�&
2J�!@`�$�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ��P�**p���$�L���1�&
2J%!@��$�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J.Tp**����$�L���1�&
2Jf!@��$�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N��4V�**���$�L���1�&
2Jf!@�$�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 014��;�Z�**����$�L���1�&
2J�!@��$�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JA^�**p�s/%�L���1�&
2J%!@s/%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**���1%�L���1�&
2Jf!@�1%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 014^2�O�c�**��ܓ%�L���1�&
2Jf!@ܓ%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddCounter 009^�3��tg�**��K�%�L���1�&
2J�!@K�%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�k�**p��%�L���1�&
2J%!@�%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**����%�L���1�&
2Jf!@��%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QF�p�**����%�L���1�&
2Jf!@��%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�CntrtextUpdateEachLanguageAddExplain 009�
4W~�t�**��]�%�L���1�&
2J�!@]�%�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�x�**p��&&�L���1�&
2J%!@�&&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**��_(&�L���1�&
2Jf!@_(&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B��<~�**��|@&�L���1�&
2J2!@|@&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/ź�K�����
�**p��@&�L���1�&
2J%!@�@&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�E��I���p**p��a&�L���1�&
2J%!@�a&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�+��l�,���p**p��a&�L���1�&
2J%!@�a&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�-���1ȋ���p**p�b&�L���1�&
2J%!@b&�L����C�F�)8)�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F���f�BX�p**�����ML���1�&
2JA!@���ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��e�
xx WmiApRpl��~n�Mic�**p�t��ML���1�&
2J%!@t��ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�<��=icp**�����ML���1�&
2J3!@���ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5�WmiApRpld.�J�t-W�**�����ML���1�&
2JT!@���ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�	unlodctrAddCounter 014����n`2��Mi�**����ML���1�&
2J�!@��ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat�1�pRp�**p��6�ML���1�&
2J%!@�6�ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�Ip�pJ��1�&
2J
2Jperational(�-�E��lPFpElfChnk�V�V��� �+��#_�'���
�=�����f�	�m�~	F���DA��{�Q�������wA�&�"}�����99:��Y���jAe4�]�]���**�	��8�ML���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J�!@�8�ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�oc@�c[U#<DA���D�	EventDataG=CntrtextSavePerfDatRegistry-EndA��5���oData=Reason
A��%�=Command
A��#�=Status
	unlodctrAddCounter 014��I�W	��I�;�Q�W~.�5
eA��Y~	M��
RenderingInfo'�	?�Culturezxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904�����MessageYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0S�	**���8�ML���1�&
2Jh!@�8�ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
	unlodctrAddExplain 014���R�g�R�I��V?��fu�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690�**�.=�ML���1�&
2J�!@.=�ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTt-
�CT�!^�ȯ<p�A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datt-**��K%�ML���1�&
2JO!@K%�ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���W	�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6����6����U���i�b;�A��w~	�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V&PerfGetNames-Update-End



Status: 0x0�**���&�ML���1�&
2Je!@�&�ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:���F:�A�[��1|�T'�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 06,�**�����ML���1�&
2Js!@���ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddCounter 009�����\����\�D�\Ƹ���.�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314?�**�X��ML���1�&
2J�!@X��ML����C�Fl'L�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��"耒�	��_1u�Q4��:A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datans**p�8�ML���1�&
2J%!@�8�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��18p**�1:�ML���1�&
2Je!@1:�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ�'�:ߑ���RP'���e�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0ws�**�D:�ML���1�&
2Js!@D:�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddExplain 009�	�8Ij+g�8I���Y��_C�j�A���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316��**d>�ML���1�&
2J�!@d>�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�i/��&@�w]W
�I�Z�JA��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat-U**pk��ML���1�&
2J%!@k��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��osp**����ML���1�&
2Je!@���ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009��̢4���KX���b{;"�A���~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0\�**�C�ML���1�&
2JD!@C�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��
8�4�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL���99L����Z�WX6d���A���~	�	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1nc�**�T�ML���1�&
2JE!@T�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��<%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
���@=
8�����']�U�>,�{A��o~	�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P#UnloadCounterNames-End



Status: 0L�**�
 �ML���1�&
2J]!@
 �ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--@(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l�@���lH�b^G��2
�A��~	�	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpReleaseInstallationMutex



status: 1e�**�	|k�ML���1�&
2J�!@|k�ML����C�Fl'L	Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�Ch��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{ČD�%�{�#Y� [�J�T�A���~	�	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d-UnloadPerfCounterTextStrings-End



Status: 0erfl�**�
�r�ML���1�&
2J�!@�r�ML����C�Fl'L
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�GW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��HtYF��:RL䡠�{o#/A��#~	�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�**��}�ML���1�&
2JG!@�}�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۝L�C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��M�@p+����R4���$��A���~	�	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0c�**�?�ML���1�&
2J]!@?�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb-Q-@��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
��Q�<����_�w��t���A��~	�	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpAcquireInstallationMutex



status: 02�**�
^�ML���1�&
2JU!@^�ML����C�Fl'L
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���T�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DA�U��DA�+2U��v�r�1�A��u~	�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z(UpdateRegistry-Begin



Driver: WmiApRplnd�**����ML���1�&
2JS!@���ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�uX�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���YW���2PFG5�����A���~	�	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: 

�**�Y��ML���1�&
2Ji!@Y��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t]��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,����]�C,�����.Q��aO��A���~	�	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\)BackupPerfRegistryToFile-End



Status: 08790�**��8�ML���1�&
2J�!@�8�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 014�!ہ�$a!ہ�_
H^�Sb��#=)A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**P;�ML���1�&
2J�!@P;�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�Ae@=ۦ�PS�Q��+v0�ϯ
A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p��ML���1�&
2J%!@��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��rp**�T��ML���1�&
2J�!@T��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N���j��N��ǕS>
<tg��BA��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0018�**�i��ML���1�&
2J�!@i��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 014��;�ln�H�;�	sR'�#f���+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194geAd�**޶�ML���1�&
2J�!@޶�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�rg�J�p.P>�)y��A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat�
**p%��ML���1�&
2J%!@%��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��rp**�b��ML���1�&
2J�!@b��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O�w�M^2�O��T�2��E�Y�A��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0018�**�]�ML���1�&
2J�!@]�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 009^�3���{j+3��p�UMa.�	|)�+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374geAd�**��ML���1�&
2J�!@��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅�-Q��߅[{*VhcaݰX_yA��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dattry**p%��ML���1�&
2J%!@%��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��sp**�h��ML���1�&
2J�!@h��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QF4��QF�͂V��b�EϡwA��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0End�**�y��ML���1�&
2J�!@y��ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 009�
4W~�$a4W~�iW�RmׂJ�+A��~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568stal�**Қ�ML���1�&
2J�!@Қ�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{A��U�#�{�I]���p���A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat**pQ_�ML���1�&
2J%!@Q_�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��gp**��a�ML���1�&
2J�!@�a�ML����C�Fl'LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B���GB��q��_x?��W�A��~	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0S�**x �{�ML���1�&
2J,!@�{�ML����C�Fl'L Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z��/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K���A�ln���bb�P/P*$Ht��A���~	�	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1x**x!�{�ML���1�&
2J-!@�{�ML����C�Fl'L!Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԕ��'�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I��0�uX�I��;ԬS�l�[E@.kA��_~	�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HUpdateRegistry-End



Status: 0ePx**p"���ML���1�&
2J%!@���ML����C�Fl'L"Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--@��l�@0p**x#���ML���1�&
2J-!@���ML����C�Fl'L#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�}�i/��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1�����1��X����4kA��_~	�	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HInstallPerfDll-End



Status: 0atx**�$���ML���1�&
2Ju!@���ML����C�Fl'L$Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F��0��F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�B����f�B�%�Z�-E��0�A���~	�	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`+LoadPerfCounterTextStrings-End



Status: 01��**`%�R�;�M���1�&
2J!@�R�;�M����C�FX�&%Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�����T(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~���r��~�DV��WE�sg�A���~	�	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true
`**p&��;�M���1�&
2J%!@��;�M����C�FX�&&Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb-Q��Q
p**�'��;�M���1�&
2Jm!@��;�M����C�FX�&'Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����������!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�J:�d.�J�rM_���s�)��A���~	�	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b,UnloadCounterNames-Begin



Driver: WmiApRpl�**�(t�;�M���1�&
2Jq!@t�;�M����C�FX�&(Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddCounter 014����n`������n`��]�p���RaA���~	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**)�v�;�M���1�&
2J�!@�v�;�M����C�FX�&)Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat����L���^��[o��H
A��~	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**p*��;�M���1�&
2J%!@��;�M����C�FX�&*Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�+I��;�M���1�&
2JT!@I��;�M����C�FX�&+Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I�W	L
�**�,^��;�M���1�&
2JT!@^��;�M����C�FX�&,Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddExplain 014���R�gM
�**�-?��;�M���1�&
2J�!@?��;�M����C�FX�&-Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTtN
�**p.���;�M���1�&
2J%!@���;�M����C�FX�&.Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��
p**�/@��;�M���1�&
2JT!@@��;�M����C�FX�&/Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:��P
�**�0�$�;�M���1�&
2JT!@�$�;�M����C�FX�&0Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddCounter 009�����\�Q
�**�19'�;�M���1�&
2J�!@9'�;�M����C�FX�&1Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��"R
�**p2��;�M���1�&
2J%!@��;�M����C�FX�&2Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��
p**�37��;�M���1�&
2JT!@7��;�M����C�FX�&3Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ�'T
�**�4H��;�M���1�&
2JT!@H��;�M����C�FX�&4Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
	unlodctrAddExplain 009�	�8Ij+U
�**�5ء�;�M���1�&
2J�!@ء�;�M����C�FX�&5Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�i/V
�**p6lY�;�M���1�&
2J%!@lY�;�M����C�FX�&6Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��
p**�7[�;�M���1�&
2JT!@[�;�M����C�FX�&7Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009��̢4X
�**�8�{�;�M���1�&
2J2!@�{�;�M����C�FX�&8Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��
8>KL���99	��**p9�{�;�M���1�&
2J%!@�{�;�M����C�FX�&9Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��<���@=p**p:0|�;�M���1�&
2J%!@0|�;�M����C�FX�&:Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--@��l�@���p**p;Ǧ�;�M���1�&
2J%!@Ǧ�;�M����C�FX�&;Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�C%�{ČD���p**�<��;�M���1�&
2J�!@��;�M����C�FX�&<Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�Gj
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��Hib/�**�=?��;�M���1�&
2J�!@?��;�M����C�FX�&=Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۝LdC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��M�v��**p>�?�;�M���1�&
2J%!@�?�;�M����C�FX�&>Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb-Q��Q�v�p**�?���;�M���1�&
2J3!@���;�M����C�FX�&?Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s���TWmiApRpl��DA�U�1�&�**�@��;�M���1�&
2Jy!@��;�M����C�FX�&@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�uXRC:\WINDOWS\system32\PerfStringBackup.TMPW���Ya
�**pA��;�M���1�&
2J%!@��;�M����C�FX�&AMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t],����]m3p**�B��;�M���1�&
2Jf!@��;�M����C�FX�&BMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 014�!ہ�$a�**�C,�;�M���1�&
2J�!@,�;�M����C�FX�&CMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�Ae�**pD���;�M���1�&
2J%!@���;�M����C�FX�&DMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6����p**�E���;�M���1�&
2Jf!@���;�M����C�FX�&EMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N���j�**�F���;�M���1�&
2Jf!@���;�M����C�FX�&FMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 014��;�ln�**�G`��;�M���1�&
2J�!@`��;�M����C�FX�&GMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�r�**pHm2�;�M���1�&
2J%!@m2�;�M����C�FX�&HMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�I�4�;�M���1�&
2Jf!@�4�;�M����C�FX�&IMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O�w�**�Jk��;�M���1�&
2Jf!@k��;�M����C�FX�&JMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddCounter 009^�3���{�**�K���;�M���1�&
2J�!@���;�M����C�FX�&KMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅��**pLd�;�M���1�&
2J%!@d�;�M����C�FX�&LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�M�!�;�M���1�&
2Jf!@�!�;�M����C�FX�&MMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QF4��**�N"�;�M���1�&
2Jf!@"�;�M����C�FX�&NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/-
CntrtextUpdateEachLanguageAddExplain 009�
4W~��**�O�+�;�M���1�&
2J�!@�+�;�M����C�FX�&OMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{A��**pP�j�;�M���1�&
2J%!@�j�;�M����C�FX�&PMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�Q�m�;�M���1�&
2Jf!@�m�;�M����C�FX�&QMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B���**�R���;�M���1�&
2J2!@���;�M����C�FX�&RMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z��K���A�W�**pS˞�;�M���1�&
2J%!@˞�;�M����C�FX�&SMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Iԕ��I��0�Exp**pT<��;�M���1�&
2J%!@<��;�M����C�FX�&TMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--@��l�@Mip**pUR��;�M���1�&
2J%!@R��;�M����C�FX�&UMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�}���1�Mip**pV^��;�M���1�&
2J%!@^��;�M����C�FX�&VMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F���f�B��icpsoft-Windows��1�&
2Jperational/z��K���9��ElfChnkW�W��@������j�W���
�
�=�����fz	�m�M	F���Y	����QY��ap���	�&�7E�]���9NJll�L}	x���o�p���g**�	W/Z^}S���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J�!@/Z^}S����^�@�$WMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���(���2/_�E�nf�w�A���D�	EventDataM="UnloadPerfCounterTextStrings-BeginA��?���oData=CommandLine
A��!�=Quiet


xx WmiApRpl��~&	��~�DV��WE�sgQA��EM	M��
RenderingInfo'z	?�Culturezxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904����
��MessageLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: truend: �	**�Xu^}S���1�&
2J]!@u^}S����^�@�$XMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
��
����_�w��t���A��M	z	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X�
'LpAcquireInstallationMutex



status: 0i�**�Y�v^}S���1�&
2Jm!@�v^}S����^�@�$YMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��������!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�JJd.�J�rM_���s�)��A���M	z	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b�
,UnloadCounterNames-Begin



Driver: WmiApRpl�**�Z�H ^}S���1�&
2Jf!@�H ^}S����^�@�$ZMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MMz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
	unlodctrAddCounter 014����n`���n`��]�p���RaA���M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160iϰ**[K ^}S���1�&
2J�!@K ^}S����^�@�$[Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 014��\SystemRoot\system32\perfTMP.dat�����^��[o��H
A��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat 0**�\� ^}S���1�&
2JO!@� ^}S����^�@�$\Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���������Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6����6����U���i�b;�A��wM	z	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V�
&PerfGetNames-Update-End



Status: 0x0�**�][� ^}S���1�&
2JZ!@[� ^}S����^�@�$]Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#�=Reason
A��%�=Command
A��#�=Status
	unlodctrAddCounter 014��I��"��I�;�Q�W~.�5
�A���M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0�**�^l� ^}S���1�&
2Js!@l� ^}S����^�@�$^Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddExplain 014���R�&�R�I��V?��fu�A���M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690b��**_[� ^}S���1�&
2J�!@[� ^}S����^�@�$_Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�*M�CT�!^�ȯ<p�A��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.dat^C**p`4!^}S���1�&
2J%!@4!^}S����^�@�$`Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�al6!^}S���1�&
2Je!@l6!^}S����^�@�$aMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddExplain 014�F:��/�F:�A�[��1|�T'�A���M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0�**�b�!^}S���1�&
2Js!@�!^}S����^�@�$bMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddCounter 009�����\�3���\�D�\Ƹ���.�A���M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314b��**c��!^}S���1�&
2J�!@��!^}S����^�@�$cMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��7耒�	��_1u�Q4��:A��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.datloa**pd��!^}S���1�&
2J%!@��!^}S����^�@�$dMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��

p**�e�!^}S���1�&
2Je!@�!^}S����^�@�$eMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddCounter 009�:ߑ�<�:ߑ���RP'���e�A���M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0�**�f��!^}S���1�&
2Js!@��!^}S����^�@�$fMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddExplain 009�	�8Ij@�&�8I���Y��_C�j�A���M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316	�**g�!^}S���1�&
2J�!@�!^}S����^�@�$gMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�iD�/�&@�w]W
�I�Z�JA��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat**phm6"^}S���1�&
2J%!@m6"^}S����^�@�$hMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��gsp**�i�8"^}S���1�&
2Je!@�8"^}S����^�@�$iMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddExplain 009��̢I���KX���b{;"�A���M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0J�**�j�Q"^}S���1�&
2JD!@�Q"^}S����^�@�$jMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��
M�I�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL���9NL����Z�WX6d���A���M	z	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 1J�**�k�Q"^}S���1�&
2JE!@�Q"^}S����^�@�$kMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��Q�
%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
���@R
M�����']�U�>,�{A��oM	z	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P�
#UnloadCounterNames-End



Status: 0�**�l4R"^}S���1�&
2J]!@4R"^}S����^�@�$lMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--U�(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l�U�3��lH�b^G��2
�A��M	z	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X�
'LpReleaseInstallationMutex



status: 1�**�m3y"^}S���1�&
2J�!@3y"^}S����^�@�$mMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�Xh��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{ČY�%�{�#Y� [�J�T�A���M	z	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d�
-UnloadPerfCounterTextStrings-End



Status: 0C:\�**�n�"^}S���1�&
2J�!@�"^}S����^�@�$nMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�\�W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��]�*YF��:RL䡠�{o#/A��#M	z	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true-W�**�o_�"^}S���1�&
2JG!@_�"^}S����^�@�$oMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۝a�"C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��b�Up+����R4���$��A���M	z	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0o�**pp{
#^}S���1�&
2J%!@{
#^}S����^�@�$pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���
��p**�qsV#^}S���1�&
2JU!@sV#^}S����^�@�$qMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�ڝg��s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DAJh��DA�+2U��v�r�1�A��uM	z	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z�
(UpdateRegistry-Begin



Driver: WmiApRplt-�**�r��$^}S���1�&
2JS!@��$^}S����^�@�$rMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�=k��|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW���llW���2PFG5�����A���M	z	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: A���**�sY(^}S���1�&
2Ji!@Y(^}S����^�@�$sMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�o��.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,����p�X,�����.Q��aO��A���M	z	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\�
)BackupPerfRegistryToFile-End



Status: 04��**�tr�(^}S���1�&
2J�!@r�(^}S����^�@�$tMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddCounter 014�!ہ��s!ہ�_
H^�Sb��#=)A��M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**u��(^}S���1�&
2J�!@��(^}S����^�@�$uMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�	x@Rۦ�PS�Q��+v0�ϯ
A��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**pvM
)^}S���1�&
2J%!@M
)^}S����^�@�$vMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��up**�w�)^}S���1�&
2J�!@�)^}S����^�@�$wMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddCounter 014�N��L}��N��ǕS>
<tg��BA��M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0nte�**�x�)^}S���1�&
2J�!@�)^}S����^�@�$xMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddExplain 014��;�4��]�;�	sR'�#f���+A��M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 3971946���**y�)^}S���1�&
2J�!@�)^}S����^�@�$yMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JY�&	g�J�p.P>�)y��A��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.daty��**pz�v)^}S���1�&
2J%!@�v)^}S����^�@�$zMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��pp**�{�x)^}S���1�&
2J�!@�x)^}S����^�@�${Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddExplain 014^2�O���b^2�O��T�2��E�Y�A��M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0lai�**�|o�)^}S���1�&
2J�!@o�)^}S����^�@�$|Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddCounter 009^�3�񝌎j@3��p�UMa.�	|)�+A��M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 1293746���**}x�)^}S���1�&
2J�!@x�)^}S����^�@�$}Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅��-U��߅[{*VhcaݰX_yA��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat�{�**p~�)^}S���1�&
2J%!@�)^}S����^�@�$~Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��Upp**�]*^}S���1�&
2J�!@]*^}S����^�@�$Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddCounter 009�QF���QF�͂V��b�EϡwA��M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0NK��Y�**��m*^}S���1�&
2J�!@m*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddExplain 009�
4W~��s4W~�iW�RmׂJ�+A��M	z	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568**�**��*^}S���1�&
2J�!@�*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{	�Jh�#�{�I]���p���A��M	z	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat�**p�0D*^}S���1�&
2J%!@0D*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6���p**��G*^}S���1�&
2J�!@G*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddExplain 009B��T��\B��q��_x?��W�A��M	z	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0�**x�hb*^}S���1�&
2J,!@hb*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z��!/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K���	�4����bb�P/P*$Ht��A���M	z	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904����
OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1dox**x�qb*^}S���1�&
2J-!@qb*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�]��<�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I����=k�I��;ԬS�l�[E@.kA��_M	z	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��H�
UpdateRegistry-End



Status: 0x**p���*^}S���1�&
2J%!@��*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--U��l�U!Cp**x���*^}S���1�&
2J-!@��*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�E�iD��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1�T���1��X����4kA��_M	z	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��H�
InstallPerfDll-End



Status: 0MPx**����*^}S���1�&
2Ju!@��*^}S����^�@�$�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�����F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�Bp���f�B�%�Z�-E��0�A���M	z	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`�
+LoadPerfCounterTextStrings-End



Status: 0�**���ۄ6�U���1�&
2JA!@�ۄ6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���
xx WmiApRpl��~&	(��**p�{�6�U���1�&
2J%!@{�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���
p**���	�6�U���1�&
2J3!@�	�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����WmiApRpld.�JJ�**��	�6�U���1�&
2JT!@	�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddCounter 014����n`��**����6�U���1�&
2J�!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat���**p��K�6�U���1�&
2J%!@�K�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**��WN�6�U���1�&
2JT!@WN�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddCounter 014��I��"-W�**��nN�6�U���1�&
2JT!@nN�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddExplain 014���R�&-W�**��jQ�6�U���1�&
2J�!@jQ�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�*t-W�**p���6�U���1�&
2J%!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��-Wp**��%�6�U���1�&
2JT!@%�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddExplain 014�F:��/-W�**��{:�6�U���1�&
2JT!@{:�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddCounter 009�����\�3-W�**���<�6�U���1�&
2J�!@�<�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��7t-W�**p���6�U���1�&
2J%!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��-Wp**�����6�U���1�&
2JT!@���6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddCounter 009�:ߑ�<-W�**�����6�U���1�&
2JT!@���6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/M	unlodctrAddExplain 009�	�8Ij@-W�**�� ��6�U���1�&
2J�!@ ��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�iDt-W�**p��ԇ6�U���1�&
2J%!@�ԇ6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��-Wp**���և6�U���1�&
2JT!@�և6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!	unlodctrAddExplain 009��̢I-W�**��Y�6�U���1�&
2J2!@Y�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��
M>KL���9N�**p�i�6�U���1�&
2J%!@i�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��Q���@Rp**p�H�6�U���1�&
2J%!@H�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�--U��l�Up**p�*�6�U���1�&
2J%!@*�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�X%�{ČY
p**��M0�6�U���1�&
2J�!@M0�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,�\j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��]J�**��;�6�U���1�&
2J�!@;�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^�۝adC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+��bdo�**p�5��6�U���1�&
2J%!@5��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb���
dop**�� ��6�U���1�&
2J3!@ ��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s�ڝgWmiApRpl��DAJhrfl�**��^Y�6�U���1�&
2Jy!@^Y�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�=kRC:\WINDOWS\system32\PerfStringBackup.TMPW���llft-W�**p�Pӎ6�U���1�&
2J%!@Pӎ6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t�o,����p2p**���k�6�U���1�&
2Jf!@�k�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddCounter 014�!ہ��s�
�**���n�6�U���1�&
2J�!@�n�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�	xros�**p���6�U���1�&
2J%!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��p**�����6�U���1�&
2Jf!@���6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddCounter 014�N��L}���**��٦�6�U���1�&
2Jf!@٦�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddExplain 014��;�4����**��婏6�U���1�&
2J�!@婏6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�JY�b����**p�RX�6�U���1�&
2J%!@RX�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6�����p**��^Z�6�U���1�&
2Jf!@^Z�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddExplain 014^2�O�����**��q��6�U���1�&
2Jf!@q��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddCounter 009^�3�񝌎���**��ZÐ6�U���1�&
2J�!@ZÐ6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅��b����**p���6�U���1�&
2J%!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6�����p**����6�U���1�&
2Jf!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�!CntrtextUpdateEachLanguageAddCounter 009�QF�����**����6�U���1�&
2Jf!@��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/MCntrtextUpdateEachLanguageAddExplain 009�
4W~����**��u�6�U���1�&
2J�!@u�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{	�b����**p��c�6�U���1�&
2J%!@�c�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�����6��b/perationaloc@=ElfChnk��������B
���+���
�=�����f�	�m��	F�e
n���Mhљv\����&1N[jS��d�(�qđ��t�U��)�|**
��e�6�U���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2J*!@�e�6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�oc@�c[U#<DA���D�	EventDataG=CntrtextSavePerfDatRegistry-EndA��5���oData=Reason
A��%�=Command
A��#�=Status
CntrtextUpdateEachLanguageAddExplain 009B��i	B��q��_x?��W��A��}�	M��
RenderingInfo'�	?�Culturezxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��Uf��H�
IKeyword4611686018427387904�����MessagekCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0!
**x�.��6�U���1�&
2J,!@.��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/ze
�/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
�K��ʼn���bb�P/P*$Ht��A����	�	zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���OUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1lx**x�7��6�U���1�&
2J-!@7��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I���I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#�=Status
�I��x�I��;ԬS�l�[E@.kA��_�	�	zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HUpdateRegistry-End



Status: 0osx**��Y��6�U���1�&
2J]!@Y��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-U(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#�=status
��l��lH�b^G��2
�A���	�	zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpReleaseInstallationMutex



status: 1iϨ**x�d��6�U���1�&
2J-!@d��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	����	����R�U@��VQmA��a-=InstallPerfDll-EndA��#�=Status
��1�i	��1��X����4kA��_�	�	zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��HInstallPerfDll-End



Status: 0pdx**��l��6�U���1�&
2Ju!@l��6�U����^�@�g�g�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Fux�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#�=Status
�f�B(�f�B�%�Z�-E��0�A����	�	zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��`+LoadPerfCounterTextStrings-End



Status: 0�**`�n6$� W���1�&
2J!@n6$� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(��5 (���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet


xx WmiApRpl��~>!��~�DV��WE�sg�A����	�	zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���LUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: trueer`**���z$� W���1�&
2J]!@�z$� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�$U��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#�=status
�@%����_�w��t���A���	�	zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��X'LpAcquireInstallationMutex



status: 0}�**���}$� W���1�&
2Jm!@�}$� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���=(�����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#�=Driver
WmiApRpld.�J�(d.�J�rM_���s�)��A����	�	zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��b,UnloadCounterNames-Begin



Driver: WmiApRpl�**����%� W���1�&
2Jf!@��%� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+�Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#�=Reason
A��%�=Command
A���=Size
	unlodctrAddCounter 014����n`/-u��n`��]�p���RaA����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160d�**��%� W���1�&
2J�!@�%� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0�,p�-�/Z2a�j>�Q(�A���;=PerfGetNames-Update-BeginA��/�!=Query_Length
A��!�=Query
A���=Size
A���=Path
BAddCounter 014��\SystemRoot\system32\perfTMP.dat�<2���^��[o��H
A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat

**����%� W���1�&
2JO!@��%� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5<2�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#�=Status
��6�b6��6����U���i�b;�A��w�	�	zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��V&PerfGetNames-Update-End



Status: 0x0��**��;�%� W���1�&
2Je!@;�%� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I��9�5��I�;�Q�W~.�5
�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0��b�**��N�%� W���1�&
2Js!@N�%� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+	unlodctrAddExplain 014���R�J=�R�I��V?��fu�A����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690: �**���%� W���1�&
2J�!@��%� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTIA�+�CT�!^�ȯ<p�A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datze:**p���&� W���1�&
2J%!@��&� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6osp**��L�&� W���1�&
2Je!@L�&� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:�F��F:�A�[��1|�T'�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0 �**����'� W���1�&
2Js!@��'� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+	unlodctrAddCounter 009�����\2J���\�D�\Ƹ���.�A����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314lo�**�P�'� W���1�&
2J�!@P�'� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�1N耒�	��_1u�Q4��:A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat383**p�=(� W���1�&
2J%!@=(� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6osp**���(� W���1�&
2Je!@�(� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑjS��:ߑ���RP'���e�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0 �**���(� W���1�&
2Js!@�(� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+	unlodctrAddExplain 009�	�8IWJ=�8I���Y��_C�j�A����	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316lo�**��(� W���1�&
2J�!@�(� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�[�F�&@�w]W
�I�Z�JA���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat125**p���(� W���1�&
2J%!@��(� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6osp**����(� W���1�&
2Je!@��(� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009���R`���KX���b{;"�A����	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���YCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0 �**��
)� W���1�&
2JD!@
)� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j�ؽcR`�j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-�=LastCounter
A��#�=Status
A��+�=
Transacted
>KL����dL����Z�WX6d���A����	�	zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���SUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 12�**��&)� W���1�&
2JE!@&)� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�Mh@%%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#�=Status
����h�c�����']�U�>,�{A��o�	�	zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��P#UnloadCounterNames-End



Status: 0at�**p�)� W���1�&
2J%!@)� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-U��l�p**���Z)� W���1�&
2J�!@�Z)� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��sMmh��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#�=Status
%�{�n�0%�{�#Y� [�J�T�A����	�	zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��d-UnloadPerfCounterTextStrings-End



Status: 0�
�**���c)� W���1�&
2J�!@�c)� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,q=(W�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-�=CommandLine
A��!�=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF�trIAYF��:RL䡠�{o#/A��#�	�	zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���sLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�**���r)� W���1�&
2JG!@�r)� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��v�9C^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%�=IniFile
A��!�=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�Fw2Jp+����R4���$��A����	�	zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**p�?7*� W���1�&
2J%!@?7*� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�$�@%p**����*� W���1�&
2JU!@��*� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��|5 �s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#�=Driver
WmiApRpl��DA�|��DA�+2U��v�r�1�A��u�	�	zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��Z(UpdateRegistry-Begin



Driver: WmiApRpll�**��~�+� W���1�&
2JS!@~�+� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��/-�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA���=File
A��%�=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW����W���2PFG5�����A����	�	zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: b����**����/� W���1�&
2Ji!@��/� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tU���.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#�=Status
,����Mm,�����.Q��aO��A����	�	zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904��\)BackupPerfRegistryToFile-End



Status: 0
q���**��f�0� W���1�&
2J�!@f�0� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+CntrtextUpdateEachLanguageAddCounter 014�!ہ�d�(!ہ�_
H^�Sb��#=)A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���oCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**��0� W���1�&
2J�!@�0� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ���hۦ�PS�Q��+v0�ϯ
A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���iPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**p��0� W���1�&
2J%!@�0� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6Bp**����0� W���1�&
2J�!@��0� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N��đb6�N��ǕS>
<tg��BA���	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**����0� W���1�&
2J�!@��0� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+CntrtextUpdateEachLanguageAddExplain 014��;묕tr�;�	sR'�#f���+A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194e�**��0� W���1�&
2J�!@�0� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddExplain 014�\SystemRoot\system32\perfTMP.datg�Jљ>!g�J�p.P>�)y��A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.dat****p�931� W���1�&
2J%!@931� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6*p**���51� W���1�&
2J�!@�51� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 014^2�O�Fw^2�O��T�2��E�Y�A���	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0**�**���1� W���1�&
2J�!@�1� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+CntrtextUpdateEachLanguageAddCounter 009^�3���W3��p�UMa.�	|)�+A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374**�**��1� W���1�&
2J�!@�1� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅)��$��߅[{*VhcaݰX_yA���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat****p���1� W���1�&
2J%!@��1� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6*p**���1� W���1�&
2J�!@�1� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 009�QFt��QF�͂V��b�EϡwA���	�	zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���kCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0**�**��,�1� W���1�&
2J�!@,�1� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/�+CntrtextUpdateEachLanguageAddExplain 009�
4W~\�d�4W~�iW�RmׂJ�+A���	�	zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���pCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568**�**�I�1� W���1�&
2J�!@I�1� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��0BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{���|�#�{�I]���p���A���	�	zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��0�
4611686018427387904���jPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat****p��i2� W���1�&
2J%!@�i2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���5��6�b6*p**���k2� W���1�&
2Jf!@�k2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddExplain 009B��i	�**��n�2� W���1�&
2J2!@n�2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/ze
�K��ʼnExp�**p�u�2� W���1�&
2J%!@u�2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I���I��xlp**p�A�2� W���1�&
2J%!@A�2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-U��ldop**p�I�2� W���1�&
2J%!@I�2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	����1�dop**p�Q�2� W���1�&
2J%!@Q�2� W���P+���AM�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�Fu�f�B(p���Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z��K���	 eAd�**p
ڤ��,���1�&
2J%!@ڤ��,���������
Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�]#�I���#iop**p�ɣ�,���1�&
2J%!@�ɣ�,���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�&��l�'-Wp**p�ɣ�,���1�&
2J%!@�ɣ�,���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�}*��1+-Wp**p�ɣ�,���1�&
2J%!@�ɣ�,���������Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�-�f�B�.��p**���s*4.���1�&
2JA!@��s*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���1
xx WmiApRpl��~�2�\;�**p#t*4.���1�&
2J%!@#t*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb6��6\;p**��t*4.���1�&
2J3!@�t*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����9WmiApRpld.�Jr:�**�(_u*4.���1�&
2JT!@(_u*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddCounter 014����n`�=-P�**��au*4.���1�&
2J�!@�au*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 014��\SystemRoot\system32\perfTMP.dat��A��
?�**pԗu*4.���1�&
2J%!@ԗu*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
b/p**�"�u*4.���1�&
2JT!@"�u*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 014��I��FiA�**�3�u*4.���1�&
2JT!@3�u*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddExplain 014���R�Jr �**�	�u*4.���1�&
2J�!@	�u*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 014��\SystemRoot\system32\perfTMP.dat�CT�NTMP�**pB�u*4.���1�&
2J%!@B�u*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
ep**���u*4.���1�&
2JT!@��u*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 014�F:��Sr �**�UYv*4.���1�&
2JT!@UYv*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddCounter 009�����\�Wn �**�.\v*4.���1�&
2J�!@.\v*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 009��\SystemRoot\system32\perfTMP.dat耒��[TMP�**p�v*4.���1�&
2J%!@�v*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
ep**��v*4.���1�&
2JT!@�v*4.������H�@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddCounter 009�:ߑ�`n �**� ��v*4.���1�&
2JT!@��v*4.������H�@ Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
	unlodctrAddExplain 009�	�8Ijdr �**�!��v*4.���1�&
2J�!@��v*4.������H�@!Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�ihTMP�**p"��v*4.���1�&
2J%!@��v*4.������H�@"Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
ep**�#�v*4.���1�&
2JT!@�v*4.������H�@#Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�	unlodctrAddExplain 009��̢mr �**�$�w*4.���1�&
2J2!@�w*4.������H�@$Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��
q>KL���9r�**p%�w*4.���1�&
2J%!@�w*4.������H�@%Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th��u���@vb/p**p&�w*4.���1�&
2J%!@�w*4.������H�@&Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�&��l�'icp**p'
9w*4.���1�&
2J%!@
9w*4.������H�@'Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��s�z%�{�T{icp**�(�Bw*4.���1�&
2J�!@�Bw*4.������H�@(Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,m~j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF��t�Mi�**�)Ow*4.���1�&
2J�!@Ow*4.������H�@)Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��e�dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+����**p*��w*4.���1�&
2J%!@��w*4.������H�@*Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb6��6p**�+�x*4.���1�&
2J3!@�x*4.������H�@+Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��e�WmiApRpl��DA����**�,ëy*4.���1�&
2Jy!@ëy*4.������H�@,Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~��RC:\WINDOWS\system32\PerfStringBackup.TMPW���4�pl.i�**p-x�}*4.���1�&
2J%!@x�}*4.������H�@-Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.t��,���T���p**�.�\~*4.���1�&
2Jf!@�\~*4.������H�@.Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddCounter 014�!ہ���f�**�/�_~*4.���1�&
2J�!@�_~*4.������H�@/Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBAddCounter 014�\SystemRoot\system32\perfTMP.datۦ�љ�P���**p0l�~*4.���1�&
2J%!@l�~*4.������H�@0Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���e��6�
Pep**�1|�~*4.���1�&
2Jf!@|�~*4.������H�@1Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@�CntrtextUpdateEachLanguageAddCounter 014�N����**�2��~*4.���1�&
2Jf!@��~*4.������H�@2Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/e
CntrtextUpdateEachLanguageAddExplain 014��;����1�&
2J@^�~*4.������H�@3Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p�MBElfChnk3�3������9��3���S}=�����f
�m��	F��1$��:wm��E5���f�̵&Qn9{�s՟	�BM�=����� u�$��H5�**X
3^�~*4.���1�&��1��a�P��=׆[�A~M�Event�j�xmlns5http://schemas.microsoft.com/win/2004/08/events/event����oTSystemA��Y�{Provider6F=K�NameX)GuidAMz�aEventID'�X)�
Qualifiers"�	Version�d�LevelE{Task ?�Opcode$fj�KeywordsA��P�;�TimeCreated'�j<{
SystemTime
.�F
EventRecordID

A�����Correlation\FF
�
ActivityIDmz5�RelatedActivityID
A��m���	ExecutionHF�F
�	ProcessID��9ThreadID	"�aChannel��6F�;nComputer	Server-PCA��B��.Security�fLUserID!
2Jg!@^�~*4.������H�@3Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p���,p�-�/Z2a�j>�Q()A��D�	EventData;=PerfGetNames-Update-BeginA��A}��oData!=Query_Length
A��!}=Query
A��}=Size
A��}=Path
BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�	g�J�p.P>�)y��{A��o�	M��
RenderingInfo'
?�Culturezxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��Uf��HIKeyword4611686018427387904���S��MessagejPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 397194,

Path: \SystemRoot\system32\perfTMP.datX
**�4K�~*4.���1�&
2JO!@K�~*4.������H�@4Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
�����Z�<c#U�XwA��k7=PerfGetNames-Update-EndA��#}=Status
��6�J��6����U���i�b;�A��w�	
zxx���5��?0��8PerfGetNames-Update-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��VS&PerfGetNames-Update-End



Status: 0x08�**�52�~*4.���1�&
2J�!@2�~*4.������H�@5Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=oc@�c[U#<D�A���G=CntrtextSavePerfDatRegistry-EndA��#}=Reason
A��%}=Command
A��#}=Status
CntrtextUpdateEachLanguageAddExplain 014^2�O�^2�O��T�2��E�Y�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Status: 0�**�6w=*4.���1�&
2J�!@w=*4.������H�@6Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/Mz/�O�Z����~��A���K=!CntrtextSavePerfDatRegistry-BeginA��#}=Reason
A��%}=Command
A��}=Size
CntrtextUpdateEachLanguageAddCounter 009^�3��a3��p�UMa.�	|)�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Size: 129374�**7�@*4.���1�&
2J�!@�@*4.������H�@7Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅���߅[{*VhcaݰX_yA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 129374,

Path: \SystemRoot\system32\perfTMP.dat�**p8>o*4.���1�&
2J%!@>o*4.������H�@8Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jtep**�9�p*4.���1�&
2J�!@�p*4.������H�@9Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QF� �QF�͂V��b�EϡwA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 009,

Status: 0t�Mi�**�:�p*4.���1�&
2J�!@�p*4.������H�@:Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/CntrtextUpdateEachLanguageAddExplain 009�
4W~�$4W~�iW�RmׂJ�+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Size: 657568=�**;Gt*4.���1�&
2J�!@Gt*4.������H�@;Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�(�#�{�I]���p���A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 657568,

Path: \SystemRoot\system32\perfTMP.dat**p<˹*4.���1�&
2J%!@˹*4.������H�@<Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jnp**�=h�*4.���1�&
2J�!@h�*4.������H�@=Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B��$.B��q��_x?��W�A���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 009,

Status: 0eg�**x>��*4.���1�&
2J,!@��*4.������H�@>Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�1=/zC�YZ���'��A���C=UpdateRegistry-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
�K����2���bb�P/P*$Ht��A����	
zxx���5��?0��DUpdateRegistry-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SOUpdateRegistry-SetLastCounter



LastCounter: 19430,

Status: 0,

Transacted: 1ˆ��x**x?��*4.���1�&
2J-!@��*4.������H�@?Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�-6�I�X,YL��8�0mA��a-=UpdateRegistry-EndA��#}=Status
�I���6�I��;ԬS�l�[E@.kA��_�	
zxx���5��?0��.UpdateRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSUpdateRegistry-End



Status: 0ax**�@��*4.���1�&
2J]!@��*4.������H�@@Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�9�(�-\X�����e��}A��q==LpReleaseInstallationMutexA��#}=status
��lP:���lH�b^G��2
�A���	
zxx���5��?0��>LpReleaseInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpReleaseInstallationMutex



status: 1r�**xA�*4.���1�&
2J-!@�*4.������H�@AMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�M=��	����R�U@��VQmA��a-=InstallPerfDll-EndA��#}=Status
��1�=$.��1��X����4kA��_�	
zxx���5��?0��.InstallPerfDll-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��HSInstallPerfDll-End



Status: 0 x**�B�*4.���1�&
2Ju!@�*4.������H�@BMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�@�6�F7"�W�
D�N��A��yE=LoadPerfCounterTextStrings-EndA��#}=Status
�f�BxA�$�f�B�%�Z�-E��0�A����	
zxx���5��?0��FLoadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��`S+LoadPerfCounterTextStrings-End



Status: 0Be�**`C�7��0���1�&
2J!@�7��0������|�CMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���D(���2/_�E�nf�w�A���M="UnloadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet


xx WmiApRpl��~�E�	��~�DV��WE�sg�A����	
zxx���5��?0��N"UnloadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SLUnloadPerfCounterTextStrings-Begin



CommandLine: xx WmiApRpl,

Quiet: true`**�D�j��0���1�&
2J]!@�j��0������|�DMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�H�9��gbґ"PyA�<�-}A��q==LpAcquireInstallationMutexA��#}=status
��I����_�w��t���A���	
zxx���5��?0��>LpAcquireInstallationMutex��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��XS'LpAcquireInstallationMutex



status: 0;�**�Eyl��0���1�&
2Jm!@yl��0������|�EMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����L�=����!@[��	iN�ayA��m9=UnloadCounterNames-BeginA��#}=Driver
WmiApRpld.�JBMd.�J�rM_���s�)��A����	
zxx���5��?0��:UnloadCounterNames-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��bS,UnloadCounterNames-Begin



Driver: WmiApRpl�**�Fu���0���1�&
2Jq!@u���0������|�FMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddCounter 014����n`�P�@��n`��]�p���RaA����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S]CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 014,

Size: 65160�**GI���0���1�&
2J�!@I���0������|�GMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��T�
���^��[o��H
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 65160,

Path: \SystemRoot\system32\perfTMP.dat**pH�-��0���1�&
2J%!@�-��0������|�HMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�p**�I�/��0���1�&
2Je!@�/��0������|�IMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I��Y�T��I�;�Q�W~.�5
�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 014,

Status: 0��b�**�J0��0���1�&
2Js!@0��0������|�JMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddExplain 014���R�j]a�R�I��V?��fu�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 014,

Size: 383690: �**K4��0���1�&
2J�!@4��0������|�KMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTia�2�CT�!^�ȯ<p�A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 014,

Size: 383690,

Path: \SystemRoot\system32\perfTMP.datze:**pL�u��0���1�&
2J%!@�u��0������|�LMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Josp**�M�w��0���1�&
2Je!@�w��0������|�MMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 014�F:�fM=�F:�A�[��1|�T'�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 014,

Status: 0 �**�N���0���1�&
2Js!@���0������|�NMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddCounter 009�����\RjP:���\�D�\Ƹ���.�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddCounter 009,

Size: 125314lo�**O;���0���1�&
2J�!@;���0������|�OMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�Qn耒�	��_1u�Q4��:A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddCounter 009,

Size: 125314,

Path: \SystemRoot\system32\perfTMP.dat383**pP/'��0���1�&
2J%!@/'��0������|�PMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Josp**�Q�(��0���1�&
2Je!@�(��0������|�QMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 009�:ߑ�s-6�:ߑ���RP'���e�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddCounter 009,

Status: 0 �**�R�(��0���1�&
2Js!@�(��0������|�RMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddExplain 009�	�8I:wj]�8I���Y��_C�j�A����	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S^CntrtextSavePerfDatRegistry-Begin



Reason: unlodctr,

Command: AddExplain 009,

Size: 653316lo�**S]+��0���1�&
2J�!@]+��0������|�SMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�9{�f�&@�w]W
�I�Z�JA���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SjPerfGetNames-Update-Begin



Query: AddExplain 009,

Size: 653316,

Path: \SystemRoot\system32\perfTMP.dat125**pT9k��0���1�&
2J%!@9k��0������|�TMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Josp**�U�l��0���1�&
2Je!@�l��0������|�UMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009���r����KX���b{;"�A����	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SYCntrtextSavePerfDatRegistry-End



Reason: unlodctr,

Command: AddExplain 009,

Status: 0 �**�Vb���0���1�&
2JD!@b���0������|�VMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��݃r��j����UHK�M[�$�A���K=!UnloadCounterNames-SetLastCounterA��-}=LastCounter
A��#}=Status
A��+}=
Transacted
>KL���	�L����Z�WX6d���A����	
zxx���5��?0��L!UnloadCounterNames-SetLastCounter��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SSUnloadCounterNames-SetLastCounter



LastCounter: 19262,

Status: 0,

Transacted: 12�**�Ws���0���1�&
2JE!@s���0������|�WMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�m��I%th�[�:R�L�I&���uA��i5=UnloadCounterNames-EndA��#}=Status
����݃�����']�U�>,�{A��o�	
zxx���5��?0��6UnloadCounterNames-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��PS#UnloadCounterNames-End



Status: 0at�**pXd���0���1�&
2J%!@d���0������|�XMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�9��lP:�p**�Y׆�0���1�&
2J�!@׆�0������|�YMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��sm�h��s�	lPx�� Y
�A��}I= UnloadPerfCounterTextStrings-EndA��#}=Status
%�{�$��%�{�#Y� [�J�T�A����	
zxx���5��?0��J UnloadPerfCounterTextStrings-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��dS-UnloadPerfCounterTextStrings-End



Status: 0��**�Zކ�0���1�&
2J�!@ކ�0������|�ZMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,=��LW�,}T?�RF*�A���I= LoadPerfCounterTextStrings-BeginA��-}=CommandLine
A��!}=Quiet

j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���iaYF��:RL䡠�{o#/A��#�	
zxx���5��?0��J LoadPerfCounterTextStrings-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SsLoadPerfCounterTextStrings-Begin



CommandLine: xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Quiet: true�**�[O��0���1�&
2JG!@O��0������|�[Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��5��YC^��X��^}s�طL�A���1=InstallPerfDll-BeginA��%}=IniFile
A��!}=Flags
dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�f�Rjp+����R4���$��A����	
zxx���5��?0��2InstallPerfDll-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S_InstallPerfDll-Begin



IniFile: C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini,

Flags: 0x0�**p\�q��0���1�&
2J%!@�q��0������|�\Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�H��Ip**�]\���0���1�&
2JU!@\���0������|�]Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��5��D�s�ڬrR���诧�qA��e1=UpdateRegistry-BeginA��#}=Driver
WmiApRpl��DA��(��DA�+2U��v�r�1�A��u�	
zxx���5��?0��2UpdateRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��ZS(UpdateRegistry-Begin



Driver: WmiApRpll�**�^x'��0���1�&
2JS!@x'��0������|�^Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�՟�P�|~�	ӆ^9pƼ���A���E=BackupPerfRegistryToFile-BeginA��}=File
A��%}=Comment
RC:\WINDOWS\system32\PerfStringBackup.TMPW����W���2PFG5�����A����	
zxx���5��?0��FBackupPerfRegistryToFile-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���S\BackupPerfRegistryToFile-Begin



File: C:\WINDOWS\system32\PerfStringBackup.TMP,

Comment: b����**�_�7��0���1�&
2Ji!@�7��0������|�_Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��.tu���.t�@�X�
7k��4�A��uA=BackupPerfRegistryToFile-EndA��#}=Status
,���$�m�,�����.Q��aO��A����	
zxx���5��?0��BBackupPerfRegistryToFile-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904��\S)BackupPerfRegistryToFile-End



Status: 0�b^��**�`�э�0���1�&
2J�!@�э�0������|�`Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/CntrtextUpdateEachLanguageAddCounter 014�!ہ���xA!ہ�_
H^�Sb��#=)A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SoCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Size: 69350�**alԍ�0���1�&
2J�!@lԍ�0������|�aMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014�\SystemRoot\system32\perfTMP.datۦ���ۦ�PS�Q��+v0�ϯ
A���	
zxx���5��?0��<PerfGetNames-Update-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SiPerfGetNames-Update-Begin



Query: AddCounter 014,

Size: 69350,

Path: \SystemRoot\system32\perfTMP.dat**pb2��0���1�&
2J%!@2��0������|�bMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�JBp**�c���0���1�&
2J�!@���0������|�cMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 014�N���J�N��ǕS>
<tg��BA���	
zxx���5��?0��HCntrtextSavePerfDatRegistry-End��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SkCntrtextSavePerfDatRegistry-End



Reason: CntrtextUpdateEachLanguage,

Command: AddCounter 014,

Status: 0�**�d���0���1�&
2J�!@���0������|�dMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/CntrtextUpdateEachLanguageAddExplain 014��;�̵���;�	sR'�#f���+A���	
zxx���5��?0��L!CntrtextSavePerfDatRegistry-Begin��16��<Microsoft-Windows-Perflib��=f��04611686018427387904���SpCntrtextSavePerfDatRegistry-Begin



Reason: CntrtextUpdateEachLanguage,

Command: AddExplain 014,

Size: 397194�**�e�!��0���1�&
2J�!@�!��0������|�eMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014�\SystemRoot\system32\perfTMP.datg�J�	�**pf�`��0���1�&
2J%!@�`��0������|�fMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**�g�c��0���1�&
2Jf!@�c��0������|�gMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 014^2�O��**�h^���0���1�&
2Jf!@^���0������|�hMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/CntrtextUpdateEachLanguageAddCounter 009^�3��a�**�iV�0���1�&
2J�!@VÎ�0������|�iMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009^�\SystemRoot\system32\perfTMP.dat��߅��**pj���0���1�&
2J%!@���0������|�jMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**�k���0���1�&
2Jf!@���0������|�kMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddCounter 009�QF� �**�l���0���1�&
2Jf!@���0������|�lMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/CntrtextUpdateEachLanguageAddExplain 009�
4W~�$�**�m���0���1�&
2J�!@���0������|�mMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�
\SystemRoot\system32\perfTMP.dat�#�{�(�**pnBa��0���1�&
2J%!@Ba��0������|�nMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jp**�o�c��0���1�&
2Jf!@�c��0������|�oMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=CntrtextUpdateEachLanguageAddExplain 009B��$.�**�pU���0���1�&
2J2!@U���0������|�pMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational/z�1�K����2eAd�**pq_���0���1�&
2J%!@_���0������|�qMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�I�-6�I���6iop**pr���0���1�&
2J%!@���0������|�rMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�9��lP:-Wp**ps#���0���1�&
2J%!@#���0������|�sMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��	�M=��1�=-Wp**pt(���0���1�&
2J%!@(���0������|�tMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�F�@�f�BxA��p**�u�=?4O2���1�&
2JA!@�=?4O2�������@d�uMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(���D
xx WmiApRpl��~�E�q�**pvP@4O2���1�&
2J%!@P@4O2�������@d�vMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�H��Iqp**�w�Q@4O2���1�&
2J3!@�Q@4O2�������@d�wMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational����LWmiApRpld.�JBM�**�x�RA4O2���1�&
2JT!@�RA4O2�������@d�xMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddCounter 014����n`�P-P�**�y�UA4O2���1�&
2J�!@�UA4O2�������@d�yMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 014��\SystemRoot\system32\perfTMP.dat��T���Q�**pz	�A4O2���1�&
2J%!@	�A4O2�������@d�zMicrosoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�Jb/p**�{�A4O2���1�&
2JT!@�A4O2�������@d�{Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 014��I��YiA�**�|/�A4O2���1�&
2JT!@/�A4O2�������@d�|Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddExplain 014���R�j]r �**�}�A4O2���1�&
2J�!@�A4O2�������@d�}Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 014��\SystemRoot\system32\perfTMP.dat�CTiaTMP�**p~PB4O2���1�&
2J%!@PB4O2�������@d�~Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�
p**��B4O2���1�&
2JT!@�B4O2�������@d�Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 014�F:�fr �**��OpB4O2���1�&
2JT!@OpB4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddCounter 009�����\Rjn �**��sB4O2���1�&
2J�!@sB4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddCounter 009��\SystemRoot\system32\perfTMP.dat耒�QnTMP�**p��B4O2���1�&
2J%!@�B4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�
p**���B4O2���1�&
2JT!@�B4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddCounter 009�:ߑ�sn �**����B4O2���1�&
2JT!@��B4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalMz/	unlodctrAddExplain 009�	�8I:wr �**���B4O2���1�&
2J�!@�B4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�,p��BAddExplain 009�	\SystemRoot\system32\perfTMP.dat�&@�9{TMP�**p��C4O2���1�&
2J%!@�C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational���
��6�J�
p**��C4O2���1�&
2JT!@C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationaloc@=	unlodctrAddExplain 009���r�r �**��21C4O2���1�&
2J2!@21C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�j��݃>KL���	��**p�H1C4O2���1�&
2J%!@H1C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational%th�m�����b/p**p�63C4O2���1�&
2J%!@63C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational(�-�9��lP:icp**p�o�C4O2���1�&
2J%!@o�C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operationalh��sm�%�{�$�icp**��L�C4O2���1�&
2J�!@L�C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalW�,=�j
xx C:\WINDOWS\system32\wbem\Performance\WmiApRpl.iniYF���t�Mi�**����C4O2���1�&
2J�!@��C4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/OperationalC^��5�dC:\WINDOWS\system32\wbem\Performance\WmiApRpl.inip+�f��**p��ND4O2���1�&
2J%!@�ND4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational��gb�H��Ip**����D4O2���1�&
2J3!@��D4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�s��5�WmiApRpl��DA�t��**���>F4O2���1�&
2Jy!@�>F4O2�������@d��Microsoft-Windows-Perflib����|NK��Y1L�t�Microsoft-Windows-Perflib/Operational�|~�՟RC:\WINDOWS\system32\PerfStringBackup.TMPW����pl.i�YF����1�&
2J
2J

Anon7 - 2021