| Server IP : 180.180.241.3 / Your IP : 216.73.216.127 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Windows/System32/ |
Upload File : |
MZ @ !L!This program cannot be run in DOS mode.
$ wL_ _ _ Vϝ ^ Vό ^ _ Vϊ @ VϚ F Vύ ^ Vψ ^ Rich_ PE L [J . - @ @ |2 @ P p ( @ p t p .text &- . `.data @ 4 @ .rsrc P 6 @ @.reloc h p N @ Bo[J [J [J [J [J [J [J( [JQ [Jz [J [J [J [J [J [J [J+ [J [JQ msvcrt.dll ntdll.dll RPCRT4.dll API-MS-Win-Core-ErrorHandling-L1-1-0.dll API-MS-Win-Core-Heap-L1-1-0.dll API-MS-Win-Core-Interlocked-L1-1-0.dll API-MS-Win-Core-LibraryLoader-L1-1-0.dll API-MS-Win-Core-LocalRegistry-L1-1-0.dll API-MS-Win-Core-Misc-L1-1-0.dll API-MS-Win-Core-ProcessThreads-L1-1-0.dll API-MS-Win-Core-Profile-L1-1-0.dll API-MS-Win-Core-Synch-L1-1-0.dll API-MS-Win-Core-SysInfo-L1-1-0.dll API-MS-Win-Core-ThreadPool-L1-1-0.dll API-MS-WIN-Service-Core-L1-1-0.dll oλoo|No7oouo6oQoowo'o'o(ooo'>oao Uw`UwUwUw6wZw1 w ww:wIwTw`Rwnw + , . [J % p p {|
N,5> }O 5+wB1wvw !0
i
i
kk
i
[l
2m
)www&ww
w#
wPw w A$w w k
@g
=mw9owq
hλw2w}w ~wwmw@&wow{w;wsw>twBw%мw oλoo|No7oouo6oQoowo'o'o(ooo'>oao Uw`UwUwUw6wZw1 w ww:wIwTw`Rwnw + , . [J % p p {|
N,5>
] +H` 2 2 2 T % " V# 0 %\0M \ )T )T [ 0 % % p + h 2 @ FA p h 0L @ @ GC P! D p h 0 8 @ DA R p . p t 2 D ;ơ}[Nko ] +H` d PerfpSetServiceState PerfpServiceMain P e r f H o s t wmain PerfpOpenProvider PerfCollectData E x p o r t L i n k a g e Collect Query Close Open L i b r a r y P e r f o r m a n c e PerfpRpcIfCallback S O F T W A R E \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ P e r f l i b n c a l r p c PerfpCleanupServer PerfpGetClientAuthId S Y S T E M \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ % s \ % s @ @ H (@ RSDSyڱOLqmu PerfHost.pdb / U} VWP@ t&V@ E @ E @ EV@ < V8 h@ 5D@ V4 _^u* jh< EjEPjh E3] B
j j jjZ5H@ %D@ %H@ ̋USV@@ V@ 38 L@ t >EHttHtjx[+SSSS SSjjL@ 5H@ V< ^[] ̋UQS3Sh} hh L@ D@ ;u E4SSjjE;u"SShI H@ ;t E;tkjhT jEPjh
9 D@ tSV@@ V@ VL@ < uSjjH@ D@ ^;tP H@ Sjjj[ ̋UV3VVjVEh E uu hC VVh H ;ƉE^uLEP u* jh| EjEPjh
E5C 5C D 3̋UVuv4@ f4 F0 ^] ̋UVu~0 t3kWj j v< F4t1v=D PF8t v v4F@tv v4F<u F4t P@ f4 F03_^] ̋UQQSVuF WH@u+EFHf@@fuV +ȋxf@@fu+Nj}GWv L QvD PRjh0 V@~ EǍH@u+EFHf@@fuV +ȋX]f@@fu+E]CSWL QvD PRjEPjh Q (VF1 g_^[ ̋UEP E S]VW8C1t"jY{(u3tU SS0E@ P E. Cp@u+ƉECHf@@fu+K Qf1AAfus+t ֍z}f:BBfu+UTjZu }GWsD PsD Ps RVjh <
(sS8jh E
{Ǎp@u+ƉECHf@@fuS +ȋpuf0@@fu+EuFVWL QsD PRjEPjh E(uEC(EC1C,3_^[ ̋UEP( ] ̋UV5 @ W @ uv YYt6;u3_^] V̋UQQE VuF$PE@ VEB P E0 F H@u+S؋FWHf@@fu+N Qf9AAfu+ʋU tz}f:BBfu+UTjZ} u CSv D PvD Pv juRWjh _ 0uEuPu V<jh E ~ ǍH@u+NE MAfAAfuv +ыAfAAfu+ȋE @PWDPuD PVjEPjh (} _[tE u< E^ ̋Ud @0SV5L W}w 3Spwd @0Spwd @0Spwd @0Spw d @0Spw d @0Spd @0WSp_^[] ̋U (@ 3ʼnEESVW} h W3P3
; d @0jDSpP ;uDž jDSV
F$P WF PF ; WPh ~
;v PFPP ;X WPh ;2 PFPf ; WPh a ; PF P" ; WPh ;t&WPh ; PF P ;un=\ h P ; SFPSh 9totfPf@@f;u+D PjPjh ;tV9t \ $@ F @ 05$@ 03M_^3[v ̋USVu^W;~WGPS4 ;tl @ F$PEӀ~1 tV ~0 tVT@ WӍFP, Wt5< uNH< V_^[] ̋UQS @ VWT@ Vu}u"uEPEEt V< }'}V5< ֍G$PWEG$Pփ} ttWEE 83_^[ ̋UVu6& 3^] ̋USW3WWEPWEPu E; }s E EPu E; WWWEPWu EEP9}ujVuh YYEPF;^u E >u E;u.EPh Wh( h P jh Ei 9}t!jh jEPjh E u\ 3_[ ̋UQVWj 5X@ 5 @ E tjWjEPjV hX@ j j 5 @ EtjWjEPjVL _^̋W3Wj
h ;uihu# h j)WW5 @ ;uKSVX@ V WW;u!5X@ 5 @ ;tV WW5 @ 3^[_̋UEP] ̋Uud @0j pP ] ̋Uud @0j pL ] ̋UEVuEEPVEPj u uX u$Er|0 u} v
}w3 ^] ̋U W} ;vv*VM ` PPNu^ PWu5C 5C T _̋UQ Etu EujPjh h ̋U@j ulVEPj jjd jh |$EPj8EPj
u` u\ } VX }8sj
XEMȉM̉H3^ ̋UE Pf@@fu+Vt d @0Vj pP MujXVu P 3^] ̋UE P@uV+pd @0Vj pP MujXVu P 3^] ̋UQV5T W3EPWWWu }u;tzued @0SuWpP ;ujXBEPSuWu u;td @0SWpL EE;tM3[_^ ̋UM j XtvW |GES3Vt*UW++Ѝ 7t ftf@@Nu_uHHz 3f^[] ̋UM j XtvW |9SVW}EPuqVW3 |;wu
z 3fw_^[]̋U (@ 3ʼnEVuVh P}jzX?Pf@@fuM j Q+VPPj h } PX 3M3^ ̋U (@ 3ʼnEME VuQPh h P} Vjj Ph P M3^ ̋UVuW}EPWEPj u uuT u0Er#3f;LGuEHtHuVWu 3 _^] ̋UVu3utу;u r^]̡@ hp@ 5|@ p@ h`@ hd@ h\@ l@ jh 2 3ۉ]d p]C SVW4 ;t;u3Fuh d 3FC ;u
j Y;C u,5C h h| #YYtE 5x@ C ;uhx hp % YYC 9]uSW0 9 C thC Yt
SjSC 5`@ 5d@ 5\@ t@ 9 h@ u7P E MPQ YYËeEt@ 39 h@ uP 9 x@ u Et@ ̸MZ f9 t3M< 8PE uH t uՃ v39 xtv39 jh@ % P
C
C YY
@
@ =8@ u h/ YM 3 ;
(@ u % % ̋UE 8csmu+xu%@= t=!t="t= @u, 3] h- 3% ̋UMMZ f9t3]ËA<8PE u3ҹ f9H]̋UEH<ASVq3WDv} H ;r X;r
B(;r3_^[]jh@2 e V\Yt=E+PVYYt+@$ ЃE E 3= ËeE3e % % h/ d5 D$l$l$+SVW(@ 1E3PeuEEEEd ËMd
Y__^[]Q̋Uuuu uh- h(@ L ]h h $ YY3j h`2 L3MtDt?!EMZ f9u+Q<|$ s
E8PE t3@Ëe3EE? ̋Uj H t$Pt@\fujX]fu3@]ËE]̋U(@ e e SWN@ ;t
t У,@ [VEP u3up 3l 3 3EP E3E3;t (@ uO@5(@ ։5,@ ^_[̋U( A
A A A 5A =|A fA f
A f xA ftA f%pA f-lA A E A EA EA @ A @ @ @ (@ ,@ j h h x Pt %( % m, , . / 20 60 4 5 4 r7 4 h4 8 3 9 3 P9 3 9 ( 3 B: < 4 : P 4 : d (4 X; l <4 ; D4 ; L4 < X4 < 3 = < < < 8 8 8 :9 p9 9 9 9 : 9
: .: z: : : l: : ; ; 0; D; ; ; < ; Z< D< r< 7 8 $8 <8 7 `8 x8 8 8 7 7 N8 |7 7 85 B5 P5 Z5 l5 v5 ~5 5 5 5 5 5 5 5 ,5 ,6 6 5 :6 T6 n6 6 6 6 6 6 6 7 7 &7 @7 T7 _wcsicmp memset _vsnwprintf memcpy __wgetmainargs _cexit b_exit j _XcptFilter exit _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type msvcrt.dll 7 ?terminate@@YAXXZ Y_except_handler4_common '_controlfp VRtlReleaseSRWLockShared ERtlAcquireSRWLockShared URtlReleaseSRWLockExclusive DRtlAcquireSRWLockExclusive 8 EtwEventUnregister 7 EtwEventRegister GRtlFreeHeap cRtlAllocateHeap 9 EtwEventWrite RtlNtStatusToDosError NtClose NtQueryInformationToken kNtOpenThreadToken RtlExpandEnvironmentStrings ntdll.dll NdrServerCall2 RpcImpersonateClient RpcStringFreeW RpcStringBindingParseW sRpcBindingToStringBindingW cRpcBindingInqAuthClientW RpcServerUnregisterIf uRpcBindingVectorFree RpcEpUnregister ~RpcEpRegisterW RpcServerInqBindings RpcServerRegisterIfEx RpcServerUseProtseqW RpcRevertToSelf RPCRT4.dll GetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter API-MS-Win-Core-ErrorHandling-L1-1-0.dll
HeapSetInformation API-MS-Win-Core-Heap-L1-1-0.dll InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange API-MS-Win-Core-Interlocked-L1-1-0.dll FreeLibrary GetProcAddress LoadLibraryExW GetModuleHandleA API-MS-Win-Core-LibraryLoader-L1-1-0.dll RegCloseKey RegOpenKeyExW RegQueryValueExA RegQueryValueExW API-MS-Win-Core-LocalRegistry-L1-1-0.dll Sleep API-MS-Win-Core-Misc-L1-1-0.dll
GetCurrentThreadId GetCurrentProcessId * TerminateProcess
GetCurrentProcess API-MS-Win-Core-ProcessThreads-L1-1-0.dll QueryPerformanceCounter API-MS-Win-Core-Profile-L1-1-0.dll InitializeSRWLock API-MS-Win-Core-Synch-L1-1-0.dll GetTickCount GetSystemTimeAsFileTime API-MS-Win-Core-SysInfo-L1-1-0.dll CloseThreadpoolWork # SubmitThreadpoolWork CreateThreadpoolWork API-MS-Win-Core-ThreadPool-L1-1-0.dll SetServiceStatus RegisterServiceCtrlHandlerExW StartServiceCtrlDispatcherW API-MS-WIN-Service-Core-L1-1-0.dll @ @ N@D L 0 0 H ` x e W
T `Q
W E V T _ T E M P L A T E M U I <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="5.1.0.0"
processorArchitecture="x86"
name="Microsoft.Windows.Diagnosis.PerfHost"
type="win32"
/>
<description>Performance Counter DLL Host</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
4 V S _ V E R S I O N _ I N F O @ @ ? S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n b F i l e D e s c r i p t i o n x 8 6 P e r f o r m a n c e C o u n t e r H o s t l & F i l e V e r s i o n 6 . 1 . 7 6 0 0 . 1 6 3 8 5 ( w i n 7 _ r t m . 0 9 0 7 1 3 - 1 2 5 5 ) :
I n t e r n a l N a m e p e r f h o s t . e x e . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . B
O r i g i n a l F i l e n a m e p e r f h o s t . e x e j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 1 . 7 6 0 0 . 1 6 3 8 5 D V a r F i l e I n f o $ T r a n s l a t i o n CRIM
{|
N,5>$ WEVT
CHAN| ` M i c r o s o f t - W i n d o w s - D i a g n o s i s - P e r f h o s t / A n a l y t i c TTBL
TEMP \0vJm D E v e n t D a t a A5 o D a t a K N a m e E r r o r
A; o D a t a # K N a m e F u n c t i o n
E r r o r F u n c t i o n TEMP, A5K/ pe~A D E v e n t D a t a A5 o D a t a K N a m e E r r o r
AC o D a t a + K N a m e P r o v i d e r N a m e
, < E r r o r P r o v i d e r N a m e TEMP % z{#˵w . D E v e n t D a t a AA o D a t a ) K N a m e R e t u r n V a l u e
A; o D a t a # K N a m e P r o v i d e r
AA o D a t a ) K N a m e P r o v i d e r D l l
A; o D a t a # K N a m e F u n c t i o n
, D ` R e t u r n V a l u e P r o v i d e r P r o v i d e r D l l F u n c t i o n TEMP$ Z g/; | 2 D E v e n t D a t a AE o D a t a - K N a m e
F i r s t A r g u m e n t
A; o D a t a # K N a m e P r o v i d e r
AA o D a t a ) K N a m e P r o v i d e r D l l
A; o D a t a # K N a m e F u n c t i o n
0 P h F i r s t A r g u m e n t P r o v i d e r P r o v i d e r D l l F u n c t i o n TEMP` , l+ *F2'{ \ D E v e n t D a t a A5 o D a t a K N a m e Q u e r y
A3 o D a t a K N a m e S i z e
A; o D a t a # K N a m e P r o v i d e r
AA o D a t a ) K N a m e P r o v i d e r D l l
A; o D a t a # K N a m e F u n c t i o n
Q u e r y S i z e P r o v i d e r P r o v i d e r D l l F u n c t i o n TEMP x
O]n`L D E v e n t D a t a A; o D a t a # K N a m e P r o v i d e r
AA o D a t a ) K N a m e P r o v i d e r D l l
A; o D a t a # K N a m e F u n c t i o n
T l P r o v i d e r P r o v i d e r D l l F u n c t i o n OPCO LEVL TASK KEYWX
e r r o r s c a l l o u t s EVNT
0
\
x
D/n]]qW$r0%_q-Bif * W E V T _ T E M P L A T E M U I M U I e n - U S t111T2X2\2h2p2t2x2|22222 33333$444 6$6d6h66666666667
77 7-7]7c7j7p7777777778 888 8<8B8G8^8k8y888888888889999&90979G9Z9`9f99999:::u;; < <<<<<<6=N===>s>>>K?^??? @ 0D0000-141_11111 2F2W222222233333333 464A4H4\4i444444444445 5(575=5H5O5]5c5i5v5~5555666666 77 7<7G7R77 848i88l999:):?:u:: ;";(;-;2;7;<;B;J;W;r;{;;;;;;;;;;; << <'<;<A<G<M<Z<`<i<<<<<<<<<<$=0=6===F=L=T=Z=g=o=u===== >> >>>,?8?E?b????? 0 h [000000001113191?1E1K1Q1X1_1f1m1t1{111111111111111122 24282T2X2t2x2 @ 0 0$0