\registry\machine\SYSTEM\CurrentControlSet\Services\spooler\Performance
        Library = winspool.drv
        Open = PerfOpen
        Collect = PerfCollect
        Close = PerfClose

\registry\machine\SYSTEM\CurrentControlSet\Services\EventLog\Application\SpoolerCtrs
        EventMessageFile = REG_EXPAND_SZ %systemroot%\system32\winspool.drv
        TypesSupported = REG_DWORD 0x7