MZ@ !L!This program cannot be run in DOS mode. $PEL%[J! P0^l 9E {@lK4 Tk  H.textdL P `.rsrc4 `@@.reloc @B@lH4 HP WS~ئ!];xLX4z:ltzlg ":  O)HGJl R:JL(kY"_ɮ("aqرX N0IZ{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*2{ ( *6( } *z\V40rp( s }"( o o /,{"r%po s r%p s ( s rYpo rqps o rps o! 6% (# o$ (% !4 {"rpo  s& rp s ( *SU4;0G(' % ,<rp(( -rp(( -rp(( -*(!*(&*("*0(' % 9~-as) %rp(* %r p(* %rp(* %rp(* %r-p(* %rp(* %rGp(* ~(+ ,UE %,+1(#*($*(*( *('*(*(%*(, r_p (' (- (. *J{&{o/ *J{'{o/ *J{({o/ *0(( {&(?{$o0 -*{$o0 1(* s1 o2 +{$o3 {s1 o4 { o5 s6 , ()*0(( {(@{#o7 -* {#o7 1(* s1 o2 +s{#o8 o9 +F(: {# o; (;s1 (, rp (- (< (= -o> o4 { o5 s6 ,()*^S0u(( { 8R   o? o@ 8oA sB (C -(D oE (D oE (( -  oF 9 sG ((H -!(C ,oI . oI 3D oJ sK oL rpoM sN oO oL rpoP sN oO oL rpoQ sN oO oL rpoR sN oO oL r/poS sN oO oL rUpoT sN oO (U  Y(, {"rmpo  oV (-   sW   rmps (X oY :2 ,o> -S{"rpo  (,  {(- s   rp s (X X i?*A4t&Y0, 0f(( {  8C   oZ o@  8 oA sB (C -(D oE (D oE (( -  oF ,s (D s[ (U  Y(, {"rpo  oV (- sW rps (X  oY :A  , o> -S(, {"rpo {(-   s   rp s (X  X   i?*qYO, 01(( (  (H :{o\ r%po] o^  8 o_ tQ o` oa  +L o_ tUob rEpoc ,*od rOpoe ,(4(5& oY - u  , o>  oY :h u  , o> {of s1 o4 { o5 s6 ,()*^Y;0 ((  +v{(9 og +9oh {% oi &(, r_p (- (< oj -u  , o> X {i?|{%o0 -*{%o0 1(*s1 o2 +{%o3 {s1 o4 { o5 s6 ,()*"Fh0V (:(( (* ok -*s1 o4 o2 { o5 s6 , ()*0  {~l (( ,r}p}{(m 3sn *{(m 3 {so *{(p {oq or {os st rpou *0 j  ov  oV s (X ,y{j. {/fsK {"rpo ow oV s (X oL rpsN oO  (x jX 8dj30{"rpo s rp s (X * 0T ^00 rp (' % 9u~-Us) %rp(* %r p(* %rp(* %rp(* %rp(* %r-p(* ~  (+ 9 E  88rp  {#o8 o9 +W(: {#o; (; (, rp%X \ (- (y (= -o> rp(y 8jrp {$og +Moh (, rp%X\{(- (y oj -u,o> rp(y 8rp {%og +[oh  rOp (y  (, rp%X\ {(-   (y oj -u,o> rp(y +3(+ +)(, r_p(' (- (. (, {"rpo (- (< *(d)^Zh\0 = rp rp  {8  rp (3sz rpo{ 9s| rpo} u9,Prpo} t9o~ +o_ o o oY -,u,o> rpo} o o (?{$og  +I oh (, oE (, rp!!%X \!!(- o  oj - u"","o> r*po{ 9r*po} u99r*po} t9o~ #8#o_ o (9  og $+]$oh  rOp (, oE (y (, rp%%%X \%rOp (y %(- o $oj -$u&&,&o> #oY :Tݵ#u'','o> r*po} o (9  og (+](oh  rOp (, oE (y (, rp))%X \)rOp (y )(- o (oj -(u**,*o> r4po{ 9s|  r4po} u9,Pr4po} t9o~ +++o_  o o +oY -,+u,,,,o>  r4po} o o  (@r*po{ :rpo{ :{#o8 o9 -+n-(: {#o; (<(, rp..%X \..(- (, oE rNp( o -(= -f-o> o s o /8/( rOpoe ,-%0%101o rNp(=( o 8{#o ,;{#o; (<%2%323o rNp( o +=(, {"rRpo 444(- (< o &/( :(/ o> ,Mo -D(, {"rpo (- s rps (X 8o 9so o 585o_ t<rp(, oE %69E~: s) %rp(* %r*p(* %r4p(* %rp(* %rp(* %rp(* %rp(* %rp(* %rp(* %rp (* ~67(+ 97E 8kA8io} (,ok >(6 (y 8po} (-ok >S(6 (y 8=o} (.ok > (6 (y 8 :o} (0ok 1(6 (y 8:o} (1ok 1(6 (y 8o} (2ok 1z(6 (y +go} (/ok 1M(6 (y +:(6 (, r,p888o} 8(- (y 5oY :L5u99,9o> o o :+j:( (y rpo , ok ,5rNp rp( +! ok , rp ( rp(y rp(y :( -:o> Xi?rp(y *Ax$V4j;qj0$T~9a@vw 0rp u9,ft9 rp(y  +8rpo o r p( o Y/ rp(y X o 2r p(y +.  rpr p( *0rp u9,ft9 rp(y  +8rpo o r p( o Y/ rp(y X o 2r p(y +.  rpr p( *0j j u9,Gt9o~ + o_ o (7,` oY -. u,o> o (7-rp*` (, r9pa(- *'A0 o s 2&(, {"ropo (- (. ( ,zo s b( o tb V (, {"rpo o (- sW rps (X rp$(, rpo (- **2gK$oVg07rp o (8-rp*( rp(, ( rp( rp(, ( rp( rpo{ 9rpo} o (8-rp*( rp(, ( rp( rp(, ( rp( (, rp(- (y +%(, rp(- (y *07rp o (8-rp*( rp(, ( rp( rp(, ( rp( rpo{ 9rpo} o (8-rp*( rp(, ( rp( rp(, ( rp( (, rp(- (y +%(, rp(- (y *0rp u9,vt9 rp(y  +H(, r@ p o o (- (y o Y/ rp(y X o 2r p(y +%(, r@ p(- (y *0[rpo{ r*po{ r4po{ -3-0--{"rn po s rn ps ( *0x( (H -g( r poc -( r poc ,A{"r po (,   (- s r ps ( *0.sG ݱ&{"rpo (,   {  (- s rp s (X  (, {"rmpo     oV  (-  sW rmps (X m(  (H -ZoI . oI 3H{"r po (,    (- s r ps ( ** Xj eY0bPok ,%Prp(y Q*0](, ( UJ {"r po (, (- sW r ps (X  * *J00a(D ( J {"r0 po (, (- sW r0 ps (X  * *Jl0s  ( o o ݗ rp s (X    rp s (X  ݿrp s (X  ݠrp s (X  ݁rp s (X  bo  89 o o o rR p( ,M{"rh po (, (- s   rh ps (X 8o ( r poc :o ( r poc -qo ( r poc -X(C -u{"r po  (,  o (- s   r ps (X +%o (4o (, oE oi & oY :  , o> * *Ar<sYtxu0L  0O{ 83 o o  8 o_ t< o} -K{"r po (,    (- s r ps ( 8u99t9o~  +U o_ -H{"r po (,    (- s r ps (  oY - u,o>  oY : u,o>  X  i?*A4b#(0o0 -{*{ (< {rpoc ,rNprp( +9{]o 3rNprp( +rp(y o *0bo0 -rp*r p  +3r po3 r p( o0 Y/ rp(y X o0 2rp(y *0{#o7 -rp*r p s| {#o8 o9 +T(:  +4{#o; o3 (, oE o -o X {#o; o0 2(= -o> +7r po r p( o Y/ rp(y Xo 2rp(y *1a0(D s[ o o  8] o_ tw {#o (, oE o :o sG oI . oI 3"(  (H 9o (5&(, {"r po    o  (- (< s (, oE oi &{#o (, oE o +}{#o (, oE o; (, oE o -L(, {"r po    o  (- (< (, oE oi & oY : u  , o> Y(, {"rpo oV (- sW rps (X *A4pYO0{$- s }$+ {$o o@  8 oA  o? o@  8 oA sB (C - oc - oF 9sG Y(, {"rmpo    oV  (- sW rmps (X goI . oI 3"(C ,(  (H ,:(5&{$(, oE o -{$(, oE oi &  oY :  , o> -S{"rpo (, {(- s   rp s (X  oY :o  , o> *ALw Y0D P ( 0 {#o o@ 8oA  oZ o@ +YoA sB (C - oc - oF ,.(, r< p(- (< (> oY - ,o> -S{"rpo (,   {  (- s rp s (X oY : ,o> */f  0!< rp}< rp}< rp}j}~l }(m }rp}s }#s }%s| }&s| }'s| }(( *0"< rv p})( *r p*r p*r p*r$ p*r p*{)*6~ ( *F{ ~ ( *B{ (Z*6~ ( *F{ ~ ( *>{ (Y*6~ ( *F{ ~ ( *B{ (Z*}s }s }( }*0g{,{o - {o {,{o - {o {,{o - {o ( *0[# rp +"q( ,ь( X ZY1 o Po o *0$ TTjUs ~ (j n n.*( (  (j - ~ ( , ( T ( T ( (k ,**D0t04%{,{o - {o |(S ,**01%{,{o - {o |(S &*0k&o0 3o3 (s*rp og +oh ( oj -u , o> ( (s*$!E0%{~ |(T &*0;'  -+ ` -+` {|([ *0(~ ( ,( 3( ( ~ ( - ( +j}~ ( ,( 3( ( ~ ( - ( + !}}{(m*0j)s {~ (a n n.*( Z( { (a -( (p ( *=$a0x)s {~  (b n n.*( Z( {  (b -( (p ( *D+o0 H*s s {~ ~  (c n n3 Po *n n3 Po *n n.*( 0~ + Z(  / s ( 0~ + Z(  / s { (c -/( (p~ ( ,( (p+~ ( ,( ~ ( ,( *P+0+s (x ,*og 8oh s (y ,ݓ og  +D oh s s (z ,\( ,E oj - u  , o> oj :cu  , o> **LQ0, rpQs ~ (d n n.*( Z( (d -/( Q{-{P(g + P(h ( *C@{-{(g*(h*0)rpQs ,}rp}}~ (d n n.*( Z(  (d - ( Q ( *`y0$-Q( ,*(~*0l.s ~ (e n n.,*( ( (e -( ( ( *8+c0/ rpQ( ,*{(, oE \o {(, oE {(, oE ~ r) po r po t 8   (, oE (( ,# Y(, ( B&  ݮ (, oE (( ,  Y(, (  &  y.3 X  nij?o.3 *{ ( ,* }{ ( ,* }(~ * * 0  00]0  Z( rpQ (n n n3( Z( (n -( Q( * oj :eu  , o> *d>#02, {o   Pog 8oh {~ (U : }}( -!{,{(, oE }{(, oE o -{(, oE o  oj :Ru,o> -**03 s o8 o( :{(, oE {(, oE {(, oE <r pr pr p( o ,o o +s   o  o Xi? o o 8a(   o o o  o o 1" o o o ( :{  o o o o o o o o o (V : o o 8(   o( -n }{,{(, oE }{ o(, oE o -{ o(, oE o ( :bo> ( :o> {o o 0**A4]ty04 o8 o( :{oooo(V -k }{,{(, oE }{o(, oE o -{o(, oE o Xi?8{o o 0**05{,~l *(i ( *06 Q{(X ,*, n n.*{o    ( {o o 8( s  @ j {o {    (q &  (` n n. n n3^%X {o {#jj @  ( ( (  {s X 8,X |{ j b |{ nX  ( ( s  (_ n n. n n3Y%X {o {# { { {   {s X +^,ݗ%X {o {{ { { {(    {s(  :o> {sQ} nij3 + **AVO07{, (* Qj {(W ,*, n n.*( n n.( ( ( {o  {o o 8( s  @  j {o {     (q &  (` ,c %X{o {#jj @  (  {,  {+sX8  |{ j b |{ nX( ( (  (_ ,i %X{o {# { { {   {,  {+sX+U %X{o {{ { { {(   {s(  :/o>  {sQ}n ij3 + *Af08s (  s {(l , sQ *{( ( s {( ( s {sQ *0u)s Qs {~ (f n n.*( Z( { (f -( (p ( *F&l2{(\*0!9{( s ( (^*0:Ro(, oE {o -R*o}o}o}|o ( s (  cn_i} |o( s ( n_i} o}{o {{o {(]*rp}rp}~ }( *0rp}rp}~ }( }}}}}}}} } } } }*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*~ }( rp( s }*V(}}*{*"}*{*"}*0rp}rp}rp}( },ok - rp+0}{r poe -r p{(y }}}P}*{*{*{*{*{*0&;s (o  o  8(  (o i,g{rp(( -<<{r p{r p( +r p{r p( +e{rp(( -<<{r p{r p( +r p{r p( oi &( :o> *0<s (o  o  8(  (o 8 {rp(( -J<{r p{rpr p( +><r p{rpr p(  oi &Xi?F( :o> *{*"}*{*>}}*{*"}*{*>}}*2{( *6( }*{*"}*0=rp( s }( o o sR}{or , (*( (H ,A{,9(D {r po (- s r ps ( *(' rp(( ,({oo*b{o &{oo*0M>(' % ,*rp(( -rp(( - +(+( r3ps ( *660J{{o/ *03?{i-(*{  + (X i2*0@s {oy ,O(, {rSpo \(- s  rSps (X *s &{8DsB og 8oh oF 9s s  { oz n n3N(, {rpo (-   s   rps (X 8 , (8 o0 <   og +oh   %X oj -u,o>  i3 ok -  rps og +oh o -  o oj -u,o>  o0 1+{os(U oj :Wu,o> -Y{rpo (,   ,+r}p  (- s rp s (X Xi?*ALX"z,I0bA(  s o 8>( {,b{ o ,P(D {rpo \(- s rps (X {o ,r)p(y (. (8og +loh {o}-K(D {rWpo (-   s   rWps (X + oi &oj -u,o> ( : o> o0 -*{ou ,({o , (*  ((H ,j}{  o - - ( X  +0n n. n n3(  X + (*{j.  n{2*{{ Zo 9o*A4yEQh0oBrp(  ,,(, {r3po  \ (- s ,r3ps ( *r3ps (X *0Cs| {i-{o/ *{o +y( r poe , o +Z{+E r poe ,r p( o +r pr p( o Xi2( :{ o> **0kDo +P  o,=(, {rpo (- s r3ps (X + X i2(U *0E< rp}< rprprWprprprp}}s| }}j}<}s }( *{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*J{{o/ *rp( s }( o o sR}*0d(-*((' % ,?rp(( -rp(( -rop(( -+(+(+({oo*N}{oo*(*0@F{{ot , (*{o , (*(U *0{G{{ot , (*s {ox , (*og 8 oh s {oy , s &{8sB  og 8oh oF 9s s  { oz , (8 o0 <   og +oh    %X  oj -u,o> s  og +oh   o oj -u,o>  o0 1+{o s(U oj :u,o> -Y{rpo (, {((- s rp s (X Xi?/oj :u,o> *Ad "+P!q2Fe0H{~ ( -{~ ( ,O{{( ,<(, {rpo (- s rps ( *{{ot , (*s {i>{ 8 {o ,(. (8og +loh {o}-K(, {rWpo (- s rWps (X + oi &oj -u,o> X i?) o0 -*{o{ ,( o0 -?(, {rpo (-   s   rps ( {ou ,({~ ( -{~ ( ,#{{{ow ,({o ,( +Z{ o n n3*,n n. (+)  ( X {j.  n{2*{,*yf0I{o3 ( {og  8 oh (< ( r#poc -gr-poc -Yr7poc -K(, {rApo    (- s rAps ( oc -M(, {rgpo    (- s rgps ( ݂ oj : u,o> r#poc ,R{o0  >(, {rpo (- s rps ( *{o0 1?(, {rpo (-   s   rps ( *0Js &{o  8X (  ( o o ݈ rp s (X   rp s (X rp s (X rp s (X rp s (X ݯo  8 o o o rR p( ,J{rh po (,    (- s   rh ps (X +{o (, oE oi & oY :l  , o>  ( :  o> {o0 *A"9r"Ss"mt"u"0d k~0oBrp(  ,,(, {r3po  \ (- s ,r3ps ( *r3ps (X *0nD-co +P  o,=(, {rpo (- s r3ps (X + X i2(U *0Ss }s| }<}~ }~ }<}j}( *{*"}*{*"}*{*"}*{*"}*{*"}*{*"}*0#Krp( s }( o o 2$( o o 3>( o o /,{rpo s rp s ( ( o o sR}(((H ,C{-;(, {r po (- s  r ps (X {or, ({ou, (*2{oo*N}{oo*0L( {:{(, oE r=po ,{{o +{{o ,({{{(  (H { Z Z(  (H ov n n3N(, {rEpo {(- s rEps ( 8n n3M(, {ripo {(- s rips ( +dn n3O(, {rpo {(- s rps ( + ,(}{8{oo8 { o  ,Z(, {rpo o{(-   s   rps (X + ,(Xi?l{oo ,({,*Xi?*0M{(, oE % ,Ar=p(( -rp(( -rp(( -+}*}*}*(, {rpo  { (- s rps ( *0N ( o {o o 1I(, {r)po {(- s r)ps ( o +o  o }oY - ,o> o }*s! u0oBrp(  ,,(, {r3po  \ (- s ,r3ps ( *r3ps (X *rYp}}}( *~ }~ }( }}}*v~ }~ }( *{*{*{*( *0iOrp o +o_ t< rap( oY -u , o> o ,o * %20P ~l Q~ ~ ( ~ ( ,( *  ( ( , s  o ~ (-( ++o QP( o ,PPok Yo Q(&*/wlSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet2PADPADP$EڦLiĩ\&QWz9BQ4~K)}m@䫩Dpj2ksD Su < W1# rK*&-0P/`$2[= ??DE F~H>IP`QQ]Qv$XPX$\㦍a-hPb$i_'kCt^wZ4y t#m~EMEg.Dfl  hZu.C1m0 CookedValues"Counter1FileLimit$Counter32FileLimitCounterApiError0CounterCircularNoMaxSize:CounterContinuousOrMaxSampleshDCounterExportSampleNotInInitialSet"CounterFileExists4.CounterInvalidDateRange(CounterInvalidFormat,CounterNoMixedLogTypes~$CounterNotALogFile:CounterPathInvalidOrNotInFile(CounterPathIsInvalid8CounterPathTranslationFailed&4CounterPathsInFilesInvalidb0CounterSampleDataInvalid4CounterSetEnumAccessDenied= DateTimeExpectedDescription*ExportCtrWin7Required4.ExportDestPathAmbiguouss FileCreateFailedFileOpenFailed0GetEventDotNet35Required2GetEventVistaPlusRequired]InvalidContext InvalidSIDFormat&KeywordLongExpectedj $LogInfoUnavailable .LogProviderOrPathNeeded 6LogsAndProvidersDontOverlap .NoCounterSetsOnComputere NoEventMessageO 4NoMatchingCounterSetsFoundt 6NoMatchingCounterSetsInFile *NoMatchingEventsFound+ &NoMatchingLogsFoundn 0NoMatchingProvidersFound $NotAFileSystemPath NotALogFileV 2NullNotAllowedInHashtable ProviderLogLink-6ProviderMetadataUnavailable]QueryTrace@SpecifiedProvidersDontWriteToLog,SpecifyOldestForEtlEvt&SpecifyOldestForLogTimestamp Vendor Cooked ValuesyYou cannot import more than one comma-separated (.csv) or tab-separated (.tsv) performance counter file in each command.FYou cannot import more than 32 .blg counter log files in each command. Q! ")"2"XC"p~"" "X"XD_"r ##v Q! clp"/$R$)"s$T" D_"r |$Xc$$ %c5% Tb%TD_"r |$Xl%X~%%%&cQD&cQc&cQ&cQ&cQ&c:1 1] 6] 6]      !! !2!Q!Z%!i-!w6!>!G!O!X! `! i!6( q!D- z!y7 != !I !N !I !N !1w"Aw#Ow $]w3$xwF$w\$w$w%w(wD*w+ w, w4-e {- . 1  < < = 0> D? @7 AN Bb B pC D D `E !E #H w$,J1 $JO %(Kg &8L &xN (P *Q w,R w,R~ ,R ,R ,R ,R ,R ,R w,R ,S- ,S w,'S ,9S- ,IS w,WS ,iS- ,zS , }- / 2 6 < > ? @ B  I 3J FM Z!O v,S 6V ?Y K_ [h fl op zu w !x 3{ E [ v SwT)T<,UOlUOUO4Vc\VmV`WW|XYZ#[,[1T\:\A ] :^&I@_<QD`J`LaVh,dgh,enXethtj|hkkw l76^7i A6^I7Y8 8y w C8iQq82, 2 8~ 8S Q8L9lX9q_992I2i q}91l y_9,y9w9w w w w w    w w  w: %:1%  %! % w! w1  w9;%A5;%6%D;%L;%y@2 m R;i AZ;%8%Ag;%6%s;8&;&; &1&;;A;T&A;g&;%YMicrosoft.PowerShell.Commands.Diagnostics.dllGetWinEventCommandMicrosoft.PowerShell.CommandsGetEventPSSnapInPdhSafeDataSourceHandleMicrosoft.Powershell.Commands.GetCounter.PdhNativePdhSafeQueryHandlePdhSafeLogHandlePdhResultsPerfDetailSYSTEMTIMEPdhFormatPdhLogAccessPdhLogOpenModePdhLogOpenOptionPdhLogFileTypeCounterHandleNInstancePdhHelperPDH_COUNTER_PATH_ELEMENTSPDH_FMT_COUNTERVALUE_LARGEPDH_FMT_COUNTERVALUE_DOUBLEPDH_FMT_COUNTERVALUE_UNICODEPDH_RAW_COUNTERPDH_TIME_INFOPerformanceCounterSampleMicrosoft.PowerShell.Commands.GetCounterPerformanceCounterSampleSetCounterSetGetCounterCommandImportCounterCommandExportCounterCommandCounterFileInfoCommonUtilitiesMicrosoft.PowerShell.Commands.Diagnostics.CommonSystem.Management.AutomationPSCmdletPSSnapInmscorlibSystem.Runtime.InteropServicesSafeHandleSystemObjectValueTypeEnumIDisposablequeryListOpenqueryListClosequeryTemplatequeryOpenerTemplatequeryCloserpropOpenpropClosefilePrefixMAX_EVENT_BATCHhashkey_logname_lchashkey_providername_lchashkey_path_lchashkey_keywords_lchashkey_id_lchashkey_level_lchashkey_starttime_lchashkey_endtime_lchashkey_userid_lchashkey_data_lcget_ListLogset_ListLog_listLogget_LogNameset_LogName_logNameget_ListProviderset_ListProvider_listProviderget_ProviderNameset_ProviderName_providerNameget_Pathset_Path_pathget_MaxEventsset_MaxEvents_maxEventsget_ComputerNameset_ComputerName_computerNamePSCredentialget_Credentialset_Credential_credentialget_FilterXPathset_FilterXPath_filterSystem.XmlXmlDocumentget_FilterXmlset_FilterXml_xmlQuerySystem.CollectionsHashtableget_FilterHashtableset_FilterHashtable_selectorSwitchParameterget_Forceset_Force_forceget_Oldestset_Oldest_oldestSystem.ReflectionAssembly_systemCoreAssemblySystem.ResourcesResourceManager_resourceMgrSystem.Collections.GenericDictionary`2System.Collections.SpecializedStringCollection_providersByLogMap_logNamesMatchingWildcard_resolvedPathsList`1_accumulatedLogNames_accumulatedProviderNames_accumulatedFileNamesBeginProcessingEndProcessingProcessRecordAccumulatePipelineLogNamesAccumulatePipelineProviderNamesAccumulatePipelineFileNamesProcessGetLogProcessGetProviderProcessListLogProcessListProviderProcessFilterXmlProcessFileProcessHashQuerySystem.CoreSystem.Diagnostics.Eventing.ReaderEventLogSessionCreateSessionEventLogReaderReadEventsBuildStructuredQueryBuildStructuredQueryFromHashTableHandleEventIdHashValueHandleLevelHashValueHandleKeywordHashValueHandleContextHashValueHandleStartTimeHashValueHandleEndTimeHashValueHandleDataHashValueCheckHashTableForQueryPathPresenceTerminateForNonEvtxFileWithoutOldestValidateLogNameExtendPredicateKeywordStringToInt64DateTimeStringToDateTimeValidateAndResolveFilePathCheckHashTablesForNullValuesAddProviderPredicatesToFilterBuildProvidersPredicateBuildAllProvidersPredicateAddLogsForProviderToInternalMapIEnumerable`1FindLogNamesMatchingWildcardsFindProvidersByLogForWildcardPatterns.ctorListLogLogNameListProviderProviderNamePathMaxEventsComputerNameCredentialFilterXPathFilterXmlFilterHashtableForceOldestget_Nameget_Vendorget_VendorResourceget_Descriptionget_DescriptionResourceget_Types_typesNameVendorVendorResourceDescriptionDescriptionResourceTypesget_IsInvalidReleaseHandleIsInvalidPDH_CSTATUS_VALID_DATAPDH_CSTATUS_NEW_DATAPDH_CSTATUS_NO_MACHINEPDH_CSTATUS_NO_INSTANCEPDH_MORE_DATAPDH_CSTATUS_ITEM_NOT_VALIDATEDPDH_RETRYPDH_NO_DATAPDH_CALC_NEGATIVE_DENOMINATORPDH_CALC_NEGATIVE_TIMEBASEPDH_CALC_NEGATIVE_VALUEPDH_DIALOG_CANCELLEDPDH_END_OF_LOG_FILEPDH_ASYNC_QUERY_TIMEOUTPDH_CANNOT_SET_DEFAULT_REALTIME_DATASOURCEPDH_UNABLE_MAP_NAME_FILESPDH_PLA_VALIDATION_WARNINGPDH_CSTATUS_NO_OBJECTPDH_CSTATUS_NO_COUNTERPDH_CSTATUS_INVALID_DATAPDH_MEMORY_ALLOCATION_FAILUREPDH_INVALID_HANDLEPDH_INVALID_ARGUMENTPDH_FUNCTION_NOT_FOUNDPDH_CSTATUS_NO_COUNTERNAMEPDH_CSTATUS_BAD_COUNTERNAMEPDH_INVALID_BUFFERPDH_INSUFFICIENT_BUFFERPDH_CANNOT_CONNECT_MACHINEPDH_INVALID_PATHPDH_INVALID_INSTANCEPDH_INVALID_DATAPDH_NO_DIALOG_DATAPDH_CANNOT_READ_NAME_STRINGSPDH_LOG_FILE_CREATE_ERRORPDH_LOG_FILE_OPEN_ERRORPDH_LOG_TYPE_NOT_FOUNDPDH_NO_MORE_DATAPDH_ENTRY_NOT_IN_LOG_FILEPDH_DATA_SOURCE_IS_LOG_FILEPDH_DATA_SOURCE_IS_REAL_TIMEPDH_UNABLE_READ_LOG_HEADERPDH_FILE_NOT_FOUNDPDH_FILE_ALREADY_EXISTSPDH_NOT_IMPLEMENTEDPDH_STRING_NOT_FOUNDPDH_UNKNOWN_LOG_FORMATPDH_UNKNOWN_LOGSVC_COMMANDPDH_LOGSVC_QUERY_NOT_FOUNDPDH_LOGSVC_NOT_OPENEDPDH_WBEM_ERRORPDH_ACCESS_DENIEDPDH_LOG_FILE_TOO_SMALLPDH_INVALID_DATASOURCEPDH_INVALID_SQLDBPDH_NO_COUNTERSPDH_SQL_ALLOC_FAILEDPDH_SQL_ALLOCCON_FAILEDPDH_SQL_EXEC_DIRECT_FAILEDPDH_SQL_FETCH_FAILEDPDH_SQL_ROWCOUNT_FAILEDPDH_SQL_MORE_RESULTS_FAILEDPDH_SQL_CONNECT_FAILEDPDH_SQL_BIND_FAILEDPDH_CANNOT_CONNECT_WMI_SERVERPDH_PLA_COLLECTION_ALREADY_RUNNINGPDH_PLA_ERROR_SCHEDULE_OVERLAPPDH_PLA_COLLECTION_NOT_FOUNDPDH_PLA_ERROR_SCHEDULE_ELAPSEDPDH_PLA_ERROR_NOSTARTPDH_PLA_ERROR_ALREADY_EXISTSPDH_PLA_ERROR_TYPE_MISMATCHPDH_PLA_ERROR_FILEPATHPDH_PLA_SERVICE_ERRORPDH_PLA_VALIDATION_ERRORPDH_PLA_ERROR_NAME_TOO_LONGPDH_INVALID_SQL_LOG_FORMATPDH_COUNTER_ALREADY_IN_QUERYPDH_BINARY_LOG_CORRUPTPDH_LOG_SAMPLE_TOO_SMALLPDH_OS_LATER_VERSIONPDH_OS_EARLIER_VERSIONPDH_INCORRECT_APPEND_TIMEPDH_UNMATCHED_APPEND_COUNTERPDH_SQL_ALTER_DETAIL_FAILEDPDH_QUERY_PERF_DATA_TIMEOUTPERF_DETAIL_NOVICEPERF_DETAIL_ADVANCEDPERF_DETAIL_EXPERTPERF_DETAIL_WIZARDyearmonthdayOfWeekdayhourminutesecondmillisecondsPDH_FMT_RAWPDH_FMT_ANSIPDH_FMT_UNICODEPDH_FMT_LONGPDH_FMT_DOUBLEPDH_FMT_LARGEPDH_FMT_NOSCALEPDH_FMT_1000PDH_FMT_NODATAPDH_FMT_NOCAP100PERF_DETAIL_COSTLYPERF_DETAIL_STANDARDPDH_LOG_READ_ACCESSPDH_LOG_WRITE_ACCESSPDH_LOG_UPDATE_ACCESSPDH_LOG_ACCESS_MASKPDH_LOG_CREATE_NEWPDH_LOG_CREATE_ALWAYSPDH_LOG_OPEN_ALWAYSPDH_LOG_OPEN_EXISTINGPDH_LOG_CREATE_MASKPDH_LOG_OPT_USER_STRINGPDH_LOG_OPT_CIRCULARPDH_LOG_OPT_MAX_IS_BYTESPDH_LOG_OPT_APPENDvalue__PDH_LOG_TYPE_UNDEFINEDPDH_LOG_TYPE_CSVPDH_LOG_TYPE_TSVPDH_LOG_TYPE_TRACE_KERNELPDH_LOG_TYPE_TRACE_GENERICPDH_LOG_TYPE_PERFMONPDH_LOG_TYPE_SQLPDH_LOG_TYPE_BINARYhCounterInstanceNamem_isPreVistaPdhBindInputDataSourcePdhOpenQueryHPdhAddCounterPdhAddRelogCounterPdhCollectQueryDataWithTimePdhCollectQueryDataPdhCloseQueryPdhCloseLogPdhOpenLogPdhResetRelogCounterValuesPdhSetCounterValuePdhWriteRelogSamplePdhGetFormattedCounterValuePdhGetRawCounterValuePdhEnumMachinesHPdhEnumObjectsHPdhEnumObjectItemsHPdhMakeCounterPathPdhParseCounterPathPdhExpandWildCardPathHPdhValidatePathExPdhValidatePathPdhGetExplainTextPdhGetCounterInfoPdhGetCounterTimeBasePdhGetDataSourceTimeRangeHPdhSetQueryTimeRangePdhLookupPerfNameByIndexm_hDataSourcem_hQuerym_firstReadingm_hOutputLogDisposem_ConsumerPathToHandleAndInstanceMapm_ReloggerPathToHandleAndInstanceMapReadPdhMultiStringGetCounterInfoPlusConnectToDataSourceOpenQueryOpenLogForWritingSetQueryTimeRangeEnumBlgFilesMachinesEnumObjectsEnumObjectItemsGetValidPathsFromFilesIsPathValidMakePathMakeAllInstancePathParsePathTranslateLocalCounterPathLookupPerfNameByIndexGetValidPathsAddCountersAddRelogCountersAddRelogCountersPreservingPathsGetCounterSetHelpReadNextSetPreVistaReadNextSetGetFilesSummaryExpandWildCardPathResetRelogValuesWriteRelogSampleSetCounterValueMachineNameObjectNameParentInstanceInstanceIndexCounterNameCStatuslargeValuedoubleValueWideStringValueSystem.Runtime.InteropServices.ComTypesFILETIMETimeStampFirstValueSecondValueMultiCountStartTimeEndTimeSampleCountSystem.DiagnosticsPerformanceCounterTypeget_InstanceNameset_InstanceName_instanceNameget_CookedValueset_CookedValue_cookedValueget_RawValueset_RawValue_rawValueget_SecondValueset_SecondValue_secondValueget_MultipleCountset_MultipleCount_multiCountget_CounterTypeset_CounterType_counterTypeget_Timestampset_Timestamp_timeStampget_Timestamp100NSecset_Timestamp100NSec_timeStamp100nSecget_Statusset_Status_statusget_DefaultScaleset_DefaultScale_defaultScaleget_TimeBaseset_TimeBase_timeBaseCookedValueRawValueMultipleCountCounterTypeTimestampTimestamp100NSecStatusDefaultScaleTimeBaseget_CounterSamplesset_CounterSamples_counterSamplesCounterSamplesPerformanceCounterCategoryTypeget_CounterSetName_counterSetNameget_MachineName_machineNameget_CounterSetType_counterSetType_descriptionget_CounterInstanceMapping_counterInstanceMappingget_Pathsget_PathsWithInstancesCounterSetNameCounterSetTypeCounterInstanceMappingPathsPathsWithInstancesKEEP_ON_SAMPLINGget_ListSetset_ListSet_listSetget_Counterset_Counter_counter_defaultCounters_accumulatedCountersget_SampleIntervalset_SampleInterval_sampleIntervalget_MaxSamplesset_MaxSamples_maxSamples_maxSamplesSpecifiedget_Continuousset_Continuous_continuous_pdhHelperSystem.ThreadingEventWaitHandle_cancelEventArrivedStopProcessingAccumulatePipelineCountersProcessListSetProcessListSetPerMachineProcessGetCounterReportPdhErrorCombineMachinesAndCounterPathsWriteSampleSetObjectListSetCounterSampleIntervalMaxSamplesContinuousget_StartTimeset_StartTime_startTimeget_EndTimeset_EndTime_endTimeget_Summaryset_Summary_summary_stoppingProcessSummaryValidateFilePathsResolveFilePathsSummary_resolvedPathget_FileFormatset_FileFormat_formatget_MaxSizeset_MaxSize_maxSizeget_InputObjectset_InputObject_counterSampleSetsget_Circularset_Circular_circular_queryInitialized_outputFormatValidateFormatResolvePathFileFormatMaxSizeInputObjectCircularget_OldestRecord_oldestRecordget_NewestRecord_newestRecordget_SampleCount_sampleCountOldestRecordNewestRecordFORMAT_MESSAGE_ALLOCATE_BUFFERFORMAT_MESSAGE_IGNORE_INSERTSFORMAT_MESSAGE_FROM_SYSTEMLOAD_LIBRARY_AS_DATAFILEFORMAT_MESSAGE_FROM_HMODULEIEnumerableStringArrayToStringSystem.TextStringBuilderFormatMessageLoadLibraryExFreeLibraryGetUserDefaultLangIDFormatMessageFromModulevaluereaderObjeventLogSessionhashfileNamelogNamexpathStringkeyStringkeyLongdtStringdtpathprovidersproviderNamelogPatternsproviderPatternsisPreVistaphDataSourceOutAttributeszLogFileNameListhDataSourcedwUserDataphQueryqueryHandlecounterPathuserDatacounterHandlecounterTypecounterDefaultScaletimeBasepllTimeStamplogHandledwFlagsszLogFileNamedwAccessFlagslpdwLogTypehQuerydwMaxSizeszUserCaptionphLogLogHandleCounterHandleValuedwFormatlpdwTypepValuemszMachineNameListpcchBufferLengthszMachineNamemszObjectListdwDetailLevelbRefreshszObjectNamemszCounterListpcchCounterListLengthmszInstanceListpcchInstanceListLengthpCounterPathElementsszFullPathBufferpcchBufferSizepdwBufferSizeszWildCardPathmszExpandedPathListpcchPathListLengthszCounterNamebRetrieveExplainTextMarshalAsAttributeUnmanagedTypelpBufferpTimeBasepdwNumEntriespInfodwNameIndexszNameBufferpcchNameBufferSizestrNativestrSizestrColldefaultScaledataSourceNameblgFileNameslogFileTypebOverwritemaxSizebCircularcaptionstartTimeendTimemachineNamesmachineNameobjectNamesobjectNamecounterNamesinstanceNamesvalidPathspathEltsoutPathbWildcardInstancesorigPathunifiedPathfullPathenglishPathlocalizedPathindexlocNamecountersinstancesbFlushOldCounterssampleSetnextSetbSkipReadingsummaryexpandedPathstimeStampsamplebUnknownPathinstanceNamecookedValuerawValuesecondValuemultiCounttimeStamp100nSecstatuscounterSamplesfirstSetsetNamecategoryTypesetHelpcounterInstanceMappingmachineresbTerminatesetoldestRecordnewestRecordsampleCountinputlpSourcedwMessageIddwLanguageIdnSizeArgumentslpFileNamehFilehModulelastErrormoduleNamemsgNeutralResourcesLanguageAttributeComVisibleAttributeAssemblyVersionAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeAssemblyFileVersionAttributeAssemblyKeyFileAttributeAssemblyDelaySignAttributeCLSCompliantAttributeDebuggableAttributeDebuggingModesSystem.Runtime.CompilerServicesCompilationRelaxationsAttributeRuntimeCompatibilityAttributeMicrosoft.PowerShell.Commands.DiagnosticsCmdletAttributeop_ImplicitGetExecutingAssemblyEnvironmentOperatingSystemget_OSVersionVersionget_Versionget_MajorGetStringExceptionErrorRecordErrorCategoryCmdletThrowTerminatingErrorAssemblyNameset_Nameset_VersionSystem.GlobalizationCultureInfoset_CultureInfoByte{79F6BBEC-07DE-4F9A-A7CE-DF48D649CE93}CompilerGeneratedAttribute$$method0x600001b-1RuntimeHelpersArrayRuntimeFieldHandleInitializeArraySetPublicKeyTokenLoadSystem.IOFileNotFoundExceptionget_ParameterSetNameStringop_Equality$$method0x600001d-1AddTryGetValueget_InvariantCultureIFormatProviderFormatWriteDebugAddRangeget_CountEventLogQueryPathTypeset_TolerateQueryErrorsget_Itemset_Sessionset_ReverseDirectionKeyCollectionget_KeysEnumeratorGetEnumeratorget_CurrentWriteVerboseMoveNextGetLogNamesIEnumerator`1WildcardPatternWildcardOptionsContainsWildcardCharactersget_CurrentCultureToLowerIsMatchEventLogConfigurationget_IsPresentEventLogTypeget_LogTypeEventLogInformationGetLogInformationPSObjectPSMemberInfoCollection`1PSPropertyInfoget_PropertiesNullable`1get_FileSizePSNotePropertyget_IsLogFullget_LastAccessTimeget_LastWriteTimeget_OldestRecordNumberget_RecordCountWriteObjectget_MessageWriteErrorIEnumeratorGetProviderNamesProviderMetadataEventLogExceptionXmlElementget_DocumentElementXmlNodeXmlNodeListSelectNodesXmlAttributeCollectionget_AttributesXmlNamedNodeMapXmlAttributeStringComparisonEqualsget_ValueStartsWithget_InnerXmlStringEnumeratorget_LengthEmptyget_EmptySystem.NetNetworkCredentialop_Explicitget_Domainget_UserNameSystem.SecuritySecureStringget_PasswordSessionAuthenticationset_PasswordEventRecordReadEventFormatDescription$$method0x600002a-1UInt32ConcatContainsKeyToStringset_ItemRemoveICollection$$method0x600002b-1ValueCollectionget_ValuesEndsWithGetValueInt64System.Security.PrincipalSecurityIdentifierNTAccountTypeRuntimeTypeHandleGetTypeFromHandleIdentityReferenceTranslateArgumentExceptionToUniversalTimeget_MillisecondInt32GetExtensionEventLogNotFoundExceptionConvertToInt64ParseFormatExceptionSessionStateget_SessionStatePathIntrinsicsSystem.Collections.ObjectModelCollection`1PathInfoGetResolvedPSPathFromPSPathProviderInfoget_Providerop_Inequalityget_ProviderPathPSNotSupportedExceptionDriveNotFoundExceptionProviderNotFoundExceptionItemNotFoundExceptionLastIndexOfInsertContainsIList`1EventLogLinkget_LogLinksClearParameterAttributeAllowEmptyCollectionAttributeSystem.Diagnostics.CodeAnalysisSuppressMessageAttributeAliasAttributeValidateRangeAttributeValidateNotNullAttributeCredentialAttributeSystem.ComponentModelRunInstallerAttributeIntPtrZerohandleSystem.Runtime.ConstrainedExecutionReliabilityContractAttributeConsistencyCerStructLayoutAttributeLayoutKindDllImportAttributepdh.dllGCSuppressFinalizeMarshalReadInt32CharTrimEndSplitToInt32AllocHGlobalFreeHGlobalMinValueDateTimeKindget_Kindget_TicksToFileTimeUtcMaxValuePtrToStringUniPtrToStructureTrimStartMicrosoft.Win32RegistryRegistryKeyLocalMachineOpenSubKeyget_NowToFileTimedwHighDateTimedwLowDateTimeFromFileTimeUtcSizeOfSetWaitHandleWaitOneEventResetModeop_GreaterThanOrEqualget_MinorSessionStateExceptionget_ItemNamekernel32.dllGetLastWin32Errorget_Capacityget_NewLineSubstringGetEventResources.resources#GetEventResources3GetEventVistaPlusRequiredSystem.Core3.5.0.01GetEventDotNet35RequiredGetLogSetFileSetGetProviderSetListLogSetListProviderSetHashQuerySetXmlQuerySet?Invalid parameter set name: {0}/Log {0} will be queriedFileSizeIsLogFullLastAccessTimeLastWriteTime%OldestRecordNumberRecordCount%LogInfoUnavailable'NoMatchingLogsFound7ProviderMetadataUnavailable1NoMatchingProvidersFound//Query//Select Pathfile://Found file {0}localhostNoEventMessageMessage+NoMatchingEventsFound<QueryList><Query Id="{0}" Path="{1}"><Select Path="{1}">{2}</Select></Query></QueryList>QueryTracelogname_<Query Id="{0}" Path="{1}"><Select Path="{1}">* pathprovidername[ASpecifiedProvidersDontWriteToLog7LogsAndProvidersDontOverlapid levelkeywordsstarttimeendtime data userid([EventData[Data[@Name='{0}']='{1}']] or [UserData/*/{0}='{1}'])*] and #</Select></Query>(!(System/EventID=) or (System/Level=5System[band(Keywords,{0})]!InvalidSIDFormatInvalidContextA(System/Security[@UserID='{0}'])s.d3Z(System/TimeCreated[@SystemTime&gt;='{0}' and @SystemTime&lt;='{1}'])W(System/TimeCreated[@SystemTime&gt;='{0}'])W(System/TimeCreated[@SystemTime&lt;='{0}'])-(EventData/Data='{0}')/LogProviderOrPathNeeded .etl .evt-SpecifyOldestForEtlEvt'SpecifyOldestForLog'KeywordLongExpected!DateTimeExpectedFileSystem%NotAFileSystemPath .evtxNotALogFile3NullNotAllowedInHashtable!System/Provider[@Name=''ProviderLogLink9Found matching provider: {0}+getevent.types.ps1xml;Microsoft.Powershell.GetEventMicrosoft1GetEventResources,VendorThis PS snap-in contains Get-WinEvent cmdlet used to read Windows event log data and configuration.;GetEventResources,DescriptionqSOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009Counter\\\ (*)\)\;CounterContinuousOrMaxSamplesGetCounterSetListSetSetCounterApiError/NoCounterSetsOnComputer5CounterSetEnumAccessDenied5NoMatchingCounterSetsFound9CounterPathTranslationFailed-Could not expand path )CounterPathIsInvalidpdh.dll1CounterSampleDataInvalidK\network interface(*)\bytes total/secG\processor(_total)\% processor timeA\memory\% committed bytes in use1\memory\cache faults/secC\physicaldisk(_total)\% disk time_\physicaldisk(_total)\current disk queue lengthSummarySet7NoMatchingCounterSetsInFile/CounterInvalidDateRange5CounterPathsInFilesInvalid .blg .csv .tsv%CounterNotALogFile-CounterNoMixedLogTypes%Counter32FileLimit#Counter1FileLimit+ExportCtrWin7Required1CounterCircularNoMaxSizeblg#CounterFileExists!FileCreateFailedFileOpenFailedECounterExportSampleNotInInitialSetcsvtsv)CounterInvalidFormat/ExportDestPathAmbiguousBLG, yOHIΓ18V6N5z\V4<QueryList></QueryList><Query Id="{0}" Path="{1}"><Select Path="{1}">{2}</Select></Query>^<Query Id="{0}" Path="{1}"><Select Path="{1}">*"</Select></Query>[]file:// dlognameprovidernamepathkeywordsid levelstarttimeendtime useriddata         ! !! % %% ) )) - --159==A  E I E  ) ) E    M = = E EQ(( ((!(%()(- (                                                                       , @ @8                 8  T    L  T       D           X X  9< =          =  8   MM  =  =  == D   D    D     ===  =  `   `  t  M  \ U  Y M           Y YY M MM( ( ( (Y(M M\ \ \\(\ ]9 ]] 99 =(] (9(=  @a   A `( ` ` ``(` MM e   i    u $$RSA1gw:މ8e `Y>Ēe??1 3`!g-1 /%}oY5L9EC;&=oGP\dEk*+Ge+] 5GetWinEventTDefaultParameterSetName GetLogSet--1 1        1 99   A Q   E  EI9= = =  EI= QQ      E    %) - -  %)  -- -M-M-E ! - E%E 9=  A I 5  M Y%EAIEMUI-55 ]  E=I] EI!a! e eiEa m  m!,   =]]9   uu  y }}  ; )9A==AA)5]5]]5=u995    5     MM   - -  M      4== !))55   A= %9e===5-(   -    TPositionT MandatoryTParameterSetName ListLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdListLogParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget.Microsoft.PowerShell.Commands.GetEvent.ListLogT JustificationHA string[] is required here because that is the type Powershell supportsTPositionTParameterSetName GetLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdGetLogParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget.Microsoft.PowerShell.Commands.GetEvent.LogNameT JustificationHA string[] is required here because that is the type Powershell supportsTPositionT MandatoryTParameterSetNameListProviderSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdListProviderParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget3Microsoft.PowerShell.Commands.GetEvent.ListProviderT JustificationHA string[] is required here because that is the type Powershell supportsTPositionT MandatoryTParameterSetNameGetProviderSetTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdGetProviderParamHelpMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget3Microsoft.PowerShell.Commands.GetEvent.ProviderNameT JustificationHA string[] is required here because that is the type Powershell supportsTPositionT MandatoryTParameterSetNameFileSetTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceId PathParamHelpPSPathMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget+Microsoft.PowerShell.Commands.GetEvent.PathT JustificationHA string[] is required here because that is the type Powershell supportsTParameterSetNameFileSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetNameGetProviderSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetName GetLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetName HashQuerySetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelpTParameterSetName XmlQuerySetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdMaxEventsParamHelp   }TParameterSetNameListProviderSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelp|TParameterSetNameGetProviderSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpxTParameterSetName ListLogSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpwTParameterSetName GetLogSetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpzTParameterSetName HashQuerySetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelpyTParameterSetName XmlQuerySetTHelpMessageBaseNameGetEventResourcesTHelpMessageResourceIdComputerNameParamHelp Cn'TParameterSetNameListProviderSet&TParameterSetNameGetProviderSet"TParameterSetName ListLogSet!TParameterSetName GetLogSet$TParameterSetName HashQuerySet#TParameterSetName XmlQuerySetTParameterSetNameFileSetTParameterSetNameFileSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTParameterSetNameGetProviderSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTParameterSetName GetLogSetTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetName XmlQuerySetTHelpMessageBaseNameGetEventResourcesMicrosoft.Design1CA1059:MembersShouldNotExposeCertainConcreteTypesTScopememberTTarget0Microsoft.PowerShell.Commands.GetEvent.FilterXmlT JustificationLAn XmlDocument is required here because that is the type Powershell supportsTPositionT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTParameterSetName HashQuerySetTHelpMessageBaseNameGetEventResourcesMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget6Microsoft.PowerShell.Commands.GetEvent.FilterHashtableT JustificationHA string[] is required here because that is the type Powershell supports     9<      ] MM )  )X   = === ]] D  1 1  D1    D]] <D] 9A\A\ A\ A\u\ExportCounterTDefaultParameterSetNameExportCounterSet  -, `\--`\  kT MandatoryTPositionTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesqT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResources,THelpMessageBaseNameGetEventResourcesqT MandatoryTValueFromPipelineTValueFromPipelineByPropertyNameTHelpMessageBaseNameGetEventResourcesMicrosoft.Performance&CA1819:PropertiesShouldNotReturnArraysTScopememberTTarget>Microsoft.PowerShell.Commands.ExportCounterCommand.InputObjectT Justification]A PerformanceCounterSampleSet[] is required here because Powershell supports arrays natively. 5    i en/*Microsoft (R) Windows (R) Operating System>9Copyright (c) Microsoft Corporation. All rights reserved.Microsoft Corporation6.1.7600.16385D?d:\w7rtm.public.x86fre\internal\strongnamekeys\fake\windows.snkTWrapNonExceptionThrows[JFpkp[RSDS 'Cw|LGMicrosoft.PowerShell.Commands.Diagnostics.pdb8lNl @l_CorDllMainmscoree.dll% 9E 8PhĀP IBC PROFILE_DATA$бyOHIΓdX\l4xL d|   # & @,P L0 12@  powershell`]gEUJNESy powershell<machine,OS>@4PmEUJNESy powershell<machine,OS>powershell_iseȏEUJNESy powershell_ise<machine,OS> ,3"3"##### # # # # ###########"#"#"3"3"3"#"##       !"#$%&'()*+,-./0123456789:;<=>?@AB  9          U G B C B B D E F  #####))))))-"--U-& -;-<- --- -/- -------!-2-Q-Z-i-w-------6-D-y------1-A-O-]-x------- - -e - - - - - - - - -7 -N -b - - - - - - - -1 -O -g - - - -8-K-M:-c:-!-!-"-"-X"-k"-"-"-"-"-7#-F#-a#-p#-#-#-#-#-f-$-!$-:$-F$-[$-g$-$-$-$-x-$-$-$-%-%-%%-H%-U%-%-%---A----0-P---z-q--i-g---[---!-- ----?---/-. /T// / /w/%/9)/./1/ / o5 4VS_VERSION_INFO@@?DVarFileInfo$TranslationStringFileInfo\000004b0LCompanyNameMicrosoft Corporation,FileDescription @FileVersion6.1.7600.16385|.InternalNameMicrosoft.PowerShell.Commands.Diagnostics.dll:LegalCopyrightCopyright (c) Microsoft Corporation. All rights reserved..OriginalFilenameMicrosoft.PowerShell.Commands.Diagnostics.dllx+ProductNameMicrosoft (R) Windows (R) Operating SystemDProductVersion6.1.7600.163858Assembly Version1.0.0.0PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD` `<