MZ@ !L!This program cannot be run in DOS mode. $Uu]333c3c3Rich3PEd5O"  TXpX@(SVX<.rsrc(ST@@  0H ` x          0 @ P ` pX * p6x<TD,LT [aZGlobally Unique IDEvent schema version ETW ChannelZDefault package. Contains all standard types, maps, compare operators, actions and targets The NULL typeSigned 8-bit integerSigned 16-bit integerSigned 32-bit integerSigned 64-bit integerUnsigned 8-bit integerUnsigned 16-bit integerUnsigned 32-bit integerUnsigned 64-bit integer32-bit floating pointPA64-bit floating point64-bit CPU cycle count (RDTSC)64-bit time units (100ns) Pointer valueANSI string pointer valueUnicode string pointer valueGUID pointer value8-bit ANSI character16-bit unicode characterANSI string (counted)Unicode string (counted)GUID Binary data16-frame callstackActivity ID of an eventTransfer of an activity IDPA Boolean valueWell formed XML fragment ETW levels ETW channelsStandard ETW opcodesNull event in package 0.XE engine initializedXE engine finalized Out of memoryFCustomizable attribute at index %I64d is not of type %I64d.%I64d.%I64dDDuplicate customizable attributes %I64d, %I64d on object %I64d.%I64dPCustomizable attribute at index %I64d does not exist on object %I64d.%I64d.%I64d*Target parameter at index %I64d is invalid9File Target encountered synchronization error, mode=%I64dOThe operating system returned error %I32u: '%ws' while creating the file '%ws'.:File Target could not serialize metadata, package Id=%I64dVFile Target could not write to a log file with offset=%I64d, length=%I64d, error=%I64dtFile Target has been paused because the disk is full. It will resume after enough space to hold a file is available.8File Target could not operate on a log file, error=%I64dkFailed to canonicalize the paths specified by the filename and metadatafile parameters for the file target.kThe %I32u KB buffer size specified is too low for the ETW target. Increase the size and retry your command.The log file path '%ws' to the ETW target is invalid. Verify that the path exists and that the process startup account has access to the log file.YAn error occurred while creating the log file '%ws'. Operating system error %I32u: '%ws'.The default ETW session has already been started with the name '%ws'. Either stop the existing ETW session or specify the same name for the default ETW session and try your command again.The operating system returned error 5 (ACCESS_DENIED) while creating an ETW tracing session. ErrorFormat: Ensure that the SQL Server startup account is a member of the 'Performance Log Users' group and then retry your command.JThe session name specified exceeds the maximum length of %I32u characters.5Default session not found or does not have ETW targethThe field '%ws' is invalid for the event '%ws'. Verify that the field exists and try your command again.ZThe action '%ws' does not exist. Verify that the action exists and try your command again.bThe filtering event '%ws' does not exist. Verify that the event exists and try your command again.XThe source type, %I32u, is invalid. Valid types are 0 for event fields or 1 for actions.|The slot count, %I32u, exceeds the maximum slot count size of %I32u. Reduce the slot count value and try your command again.PASA value is required for the parameter 'filtering_event_name' when source type is 0.SThe column or action name specified exceeds the maximum length of %I32u characters.The event '%ws' was not found.The column '%ws' was not found.The action %ws was not found.nThe number of begin and end columns must match. Specify the same number of columns for begin and end matching.nThe number of begin and end actions must match. Specify the same number of actions for begin and end matching.The begin and end columns at position %I64u are not of the same type. Specify matching columns that are the same type and try your command again.The begin and end action at postition %I64u are not of the same type. Specify matching actions that are the same type and try your command again.'Begin and end events must be different.$Event does not have specified action|Counter target could not add package '%I32u' to the list of packages to count. Events from this package will not be counted.zCounter target could not add package '%ws' to the list of packages to count. Events from this package will not be counted.Ring Buffer target could not add package '%I32u' to the package occurrence list. Events from this package will not be kept based on occurrence number.Ring Buffer target could not add package '%ws' to the package occurrence list. Events from this package will not be kept based on occurrence number.\Either 'max_memory' or 'max_events_limit' parameter must be set to a value different than 0.PA''divides_by_uint64' cannot divide by 0.Collect the current call stack!Attach an activity ID to an event*Attach an activity ID transfer to an event)Break the process in the default debugger\Collect the current system time with 100 microsecond precision and interrupt tick resolution%Collect the current CPU's cycle count%Collect the current Windows thread IDCollect the Windows process IDgCollects the value of the thread's last Windows error code. This is equivalent to the GetLastError API.Collect event sequence number2Event Tracing for Windows (ETW) Synchronous Target'Path to the default sessions's log file0Default ETW session in-memory buffer size, in KB'Default ETW session logfile size, in MBBNumber of times to retry publishing the event to the ETW subsystemPADefault XE session nameUse the histogram target to aggregate event data based on a specific event data field or action associated with the event. The histogram allows you to analyze distribution of the event data over the period of the event session."Number of buckets in the histogram"The name of the event to filter on8The source type: 0: filtering event name, 1: action nameThe name of the sourceUse the event_file target to save the event data to an XEL file, which can be archived and used for later analysis and review. You can merge multiple XEL files to view the combined data from separate event sessions./Specifies the location and file name of the logMaximum file size in MB!Maximum number of files to retainSize in MB to grow the fileNot usedPairing target>Event name specifying the beginning event in a paired sequenceRColumns to perform matching on. Ordered list of column names, comma separated listRActions to perform matching on. Ordered list of action names, comma separated listPA;Event name specifying the ending event in a paired sequenceqRespond to memory events. 0: do not respond, 1: stop adding new orphans to the list when there is memory pressure"Maximum number of orphans to storecUse the event_counter target to count the number of occurrences of each event in the event session. Asynchronous ring buffer target.lMaximum amount of memory in KB to use. Old events are dropped when this value is reached. 0 means unbounded.0Preferred number of events of each type to keep.hMaximum number of events to store. Old events are dropped when this value is reached. 0 means unbounded. Asynchronous live stream target.!Get the current Windows thread ID#Count the number of times evaluated@Per-CPU partitioned counter. Value is aggregated and approximatebGet the value of the thread's last Windows error code. This is equivalent to the GetLastError API.8Equality operator between two 64-bit unsigned int values:Inequality operator between two 64-bit unsigned int values9Less than operator between two 64-bit unsigned int valuesBLess than or Equal operator between two 64-bit unsigned int values<Greater than operator between two 64-bit unsigned int valuesEGreater than or Equal operator between two 64-bit unsigned int valuesBGreater than the maximum 64-bit unsigned int value previously seen?Less than the minimum 64-bit unsigned int value previously seen6Equality operator between two 64-bit signed int values8Inequality operator between two 64-bit signed int values7Less than operator between two 64-bit signed int values@Less than or Equal operator between two 64-bit signed int values:Greater than operator between two 64-bit signed int valuesCGreater than or Equal operator between two 64-bit signed int values@Greater than the maximum 64-bit signed int value previously seen=Less than the minimum 64-bit signed int value previously seen2Equality operator between two 64-bit double values4Inequality operator between two 64-bit double values3Less than operator between two 64-bit double values<Less than or Equal operator between two 64-bit double values6Greater than operator between two 64-bit double values?Greater than or Equal operator between two 64-bit double values<Greater than the maximum 64-bit double value previously seen9Less than the minimum 64-bit double value previously seen0Equality operator between two ANSI string values2Inequality operator between two ANSI string values1Less than operator between two ANSI string values:Less than or Equal operator between two ANSI string values4Greater than operator between two ANSI string values=Greater than or Equal operator between two ANSI string values3Equality operator between two UNICODE string values5Inequality operator between two UNICODE string values4Less than operator between two UNICODE string values=Less than or Equal operator between two UNICODE string values7Greater than operator between two UNICODE string values@Greater than or Equal operator between two UNICODE string values,Equality operator between two Boolean values.Inequality operator between two Boolean values)Equality operator between two GUID values+Inequality operator between two GUID values+Equality operator between two Binary values-Inequality operator between two Binary values4Equality operator between two Generic pointer values6Inequality operator between two Generic pointer values5Less than operator between two Generic pointer values>Less than or Equal operator between two Generic pointer values8Greater than operator between two Generic pointer valuesAGreater than or Equal operator between two Generic pointer values2Whether a uint64 divides another with no remainder<Whether a uint64 has all bits from the specified bitmask set<Whether a uint64 has any bits from the specified bitmask set PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX<00<0 +70 0!0 +Fp *ݣ! g)00 aj0  *H 0y1 0 UUS10U Washington10URedmond10U Microsoft Corporation1#0!UMicrosoft Code Signing PCA0 111101223917Z 130201224917Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR10UMicrosoft Corporation0"0  *H 0 é|#1%uyϓKa%wKZmI17t`N%X N-:e.[]u4P!}9D#fe 6`*dȇE(WY&Jl)2?% oj-:mf16p@v.G+e+_hE xkP5[qa! EeI~7Z߸v Q*P:c܁G00U% 0 +0UqÏv, J(0U0U#0WEt]CT-2H0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0  *H yiȏk`|>8Rϙ-=au8NY?C|Sb֨vuYl?/~9T'X5aymQWcrf9*35 ^15E ]Ǘ*:IHE26m nvUU4y]n̗h}i{ U}M0b{젒*W)HͶ! b 5_kԱwRw?lV\6N^z 1ynr_0W|UplxC 500 a0  *H 0w1 0 UUS10U Washington10URedmond10U Microsoft Corporation1!0UMicrosoft Time-Stamp PCA0 110725204219Z 121025204219Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:9E78-864B-039D1%0#UMicrosoft Time-Stamp Service0"0  *H 0 ;SDzMVqSw7~>Sѱ"unav; CS b83+={EW c4bFٞ9Uw5\HOCX8lKzn`[?:? }m/X}ʊ89h-X#*Z їE7 |ӶSx#!bZjipS4%1UL5[ɫS)_,%d'u 00Uy# U,h)bg68Z0U#0#4RFp @v+50TUM0K0IGEChttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X+L0J0H+03kir|_%D5( Րap-o,ݹ0qxȩg z ¼W?i00&Ԟ{ IERu{".VϩN< :ŭj"#l'~2y%B❅WY/-&)ųׅ`Z{{^4Km'Тѐ }|4lJDyh(" ,Ha#00 +70UWEt]CT-2H0 U0U00U#0`@V'%* SY䤡ca0_10 &,dcom10 &,d microsoft1-0+U$Microsoft Root Certificate AuthorityyJLsX.e0PUI0G0ECA?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T+H0F0D+08http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0vU o0m0k +7/0^0\+0PNCopyright 2006 Microsoft Corporation.0U% 0 +0  *H 0 b9&a=ܬƙІ.2e^">ֆ趟ʋ;u >LdtIglfF:FBȑ7$AwO_R/>V[uSTie$%MPO "Y"t E{YL`xѺk~D@ҽKnU8HUz }۔/{kdO,4)] 8/ V1i΅ ֮8 nOL)) \\V#W &6Do阵sx{w@f_@pz\ AYQ'l#Յ8e,YtX`0Cwcb+}F=eEx?CIV%l,rFw)9V;Re4Cr|XYuЄ.f%'r-<~M٬j_Qm#t0 *H  1 000w1 0 UUS10U Washington10URedmond10U Microsoft Corporation1!0UMicrosoft Time-Stamp PCA a0+]0 *H  1  *H 0 *H  1 120211160119Z0# *H  1u#k}cWBV.0  *H Wk\ M#HDNk'ɇK4WTWp/̉Q5!jWlShV( TLS[H9s*E41=+dTN⊥HqSc_"ܛ G0WcQ׶v^2` 3sO2YfHڜ]Ph30W#4RtpHSRHqc쐣lR4@K-y%40!S +71!C0!? *H !00!,10  `He0\ +7N0L0 +70 010  `He k?@> |@sYs>kۛ@4nΠ 00 aIU 0  *H  0~1 0 UUS10U Washington10URedmond10U Microsoft Corporation1(0&UMicrosoft Code Signing PCA 20100 111010204524Z 130110205524Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR10UMicrosoft Corporation0"0  *H 0 Ϥ01QU4`E)_++rC\;*Yqrx ,8[b}ԯaD9βTK&DOW#Jjة6w4O{_u9}aRƲ~:xȔ=G'rpW0'ca(лbd@"+^wrN|U~\~@6tdW$XkUgZ.i;%00U% 0 +0Ui1bqXxa0U#0_{"XrN!t#20VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt0 U00  *H  x[Zm#}u j'EӒNħe݅ JSxA 0 T'Yh8.?iL Lx P:M?+R=Mk&Z\j@K1(|Tp?vY0nm. $X9MRlj[AS{T1 DA~Ri?c2KW8X—@c-mk|+;B+9@"QpA `&ǩc؅0p0X a RL0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100706204017Z 250706205017Z0~1 0 UUS10U Washington10URedmond10U Microsoft Corporation1(0&UMicrosoft Code Signing PCA 20100"0  *H 0 dPyg LVhDXOv|mE9eҏDe,U}.+A+KnILk‰q͵K̈k:&?4W]I*.ՅY?+t+;FFIfTUbWrg% 4]^(ղcӲȊ& Y5LR[ HwօGj-\`ƴ*[#_Eo73jMjfcx0ϕ00 +70U_{"XrN!t#20 +7  SubCA0 U0U00U#0Vˏ\bh=[Κ0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  tWO){xP" 4*,Ͽ4ہ5oywNaZ#bQEg?<09@!)奡i"tGCS0i% moar,iv=Qۦ9H7amS˧a¿⃫k}(QJQlȷJi~IprGc֢DciFz?!{#-A˿Lﱜ"KInv[Sy=s5SP8f3'9x6N_=GS a=*ג,7Z>@B1V$]Qjy{%qDj#u1000~1 0 UUS10U Washington10URedmond10U Microsoft Corporation1(0&UMicrosoft Code Signing PCA 2010 aIU 0  `He0 *H  10 *H  1  +70 +7 10  +70/ *H  1" u]gzn(] j|1\k0R +7 1D0B SQL Server 2012http://www.microsoft.com/sql0  *H Ij_[v Z/D*M+ߙFcPKD&B̨SaFX;yF_5:$kv-Dߊء_H-ms(_țbX;<[[Q@K3u&G8 #l|szL;Jz3l7Ð{ٴ+v_CN"qv-Cʋx.$+>,ŋRfww$,xOIt0 +710 *H 01 0 +0) *H  0 +Y 0!0 +P`6"Df23ݾ@O1&"q20120211160121.16Z001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:936C-7AEE-74AE1%0#UMicrosoft Time-Stamp Service0q0Y a *0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0  w: iktTե |hK,_av>f+[S'1A |a0Y0D`TC M8Bݓs0W&E GͿ$`2X`FXG2tag_TϓLĦ]an(aF'$gr!KdPb]w=WuBM@Q>gfD~Knʱz* 1N5xhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  Q ?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z?yJR8/ye٩kzoK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm8ؔƥ B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰPo1:eGxHr~akow˧ 9؂r*T9[ Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YDǘP5Gj+ἃdPeMsؾHu84YR䇉 ;G+ TH9Hkd~"AH6/S4J&)IaʱX&_" wguaS+ƶwp/%B:2AOTlE {@PFWƀb00U?9v5#[LW70U#0c:\1C{|F3hZmU0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U00U% 0 +0  *H  O)KSQ\\s*8hO9KC54Ud" `΃ ;@|D[ifa?ann!ҲgR*ru1>QI̐Ԉ!kbب"pQØ9X=pD.mLsT&cYNOg~u:TePbɂ%=e?cbӉ_ɩVK@TA%X,O㣏)}Wrxnj] PLv0^0㡁01 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher DSE ESN:936C-7AEE-74AE1%0#UMicrosoft Time-Stamp Service% 0 +^$3+b xc ցs적001 0 UUS10U Washington10URedmond10U Microsoft Corporation1 0 U MOPR1'0%U nCipher NTS ESN:B027-C6F8-1D881+0)U"Microsoft Time Source Master Clock0  *H ϣ0"20120211112939Z20120212112939Z0t0: +Y 1,0*0 ϣ000 !#06 +Y 1(0&0  +Y  0 0 0  *H *Aܚ}kpEK)pin_f\P0a:>uѣ{77y X&2pR"V>zi]s^FxB>c3n*dQ9ΤMpEh Dh-ak8I65΢kvg};du;OJ-(N!vm cPU\d6F!nkBD$>r;,!D]_H7ı!^"z#|RS5]1000|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 2010 aN 0 +0 *H  1  *H  0# *H  1uŸn%gX`V0 *H   1000^$3+b xc ցs00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 2010 aN 0ZǕ. Ԥ@0  *H WHRbVP7{yTsm8lң#^0Wr7il2%3`jR TawN+Ȑb*PD-PN+-b<ٳ!f%ڪ0OBa(n臗 &S*FUi>֝)mI\ )ؔ`jf*424u$?@n&|=v:_ݫ@~kYhQ 2