MZ@ !L!This program cannot be run in DOS mode. $<թRթRթRԩRPԩRRichթRPEdW"  /` .rdatap@@.rsrc @@W T.rdataT.rdata$zzzdbg .rsrc$01!ؘ.rsrc$02(@Xp   P%!@ WEVT_TEMPLATEMUI04VS_VERSION_INFO 98 98?StringFileInfoj040904B0LCompanyNameMicrosoft Corporation.FileDescriptionMicrosoft-Windows-Kernel-Pnp-Events Resourcesn'FileVersion10.0.14393.0 (rs1_release.160715-1616)p(InternalNamemicrosoft-windows-kernel-pnp-events.dll.LegalCopyright Microsoft Corporation. All rights reserved.x(OriginalFilenamemicrosoft-windows-kernel-pnp-events.dllj%ProductNameMicrosoft Windows Operating System> ProductVersion10.0.14393.0DVarFileInfo$Translation CRIM9Z P}H1)9LTNeƗñ MK"ÊċWEVT\@Hde fnXqCHAN 4lSystem\Microsoft-Windows-Kernel-PnP/Configuration`Microsoft-Windows-Kernel-PnP/Boot Diagnostic|Microsoft-Windows-Kernel-PnP/Device Enumeration DiagnosticpMicrosoft-Windows-Kernel-PnP/Configuration DiagnosticdMicrosoft-Windows-Kernel-PnP/Driver DiagnosticMAPSXVMAP4VMAP,hVMAPl$        DPnp:DpReplace.ExtendedStatusMap,Pnp:Elam.ElamStatus@Pnp:Elam.ImageClassificationTTBLt_-TEMPH`U,dh}bD EventDataAEoData-KName OSLoaderStart AAoData)KName OSLoaderEnd     OSLoaderStartOSLoaderEndTEMP?c%Qx`D EventDataA?oData'KName ElamStatus ElamStatusTEMPthQeMD EventDataASoData;KNameElamDriverNameLength AGoData/KNameElamDriverName  <0ElamDriverNameLength$ElamDriverNameTEMPx (9^y1D EventDataAGoData/KNameClassification A7oDataKNamePolicy A7oDataKNameResult X   $ClassificationPolicyResultTEMPt /{Rb{|D EventDataASoData;KNameDeviceInstanceLength AGoData/KNameDeviceInstance  P 0DeviceInstanceLength$DeviceInstanceTEMP ɈG̈^`D EventDataASoData;KNameDeviceInstanceLength AGoData/KNameDeviceInstance A7oDataKNameStatus   8 0DeviceInstanceLength$DeviceInstanceStatusTEMPT40fS*Y>БD EventDataAKoData3KNameDriverNameLength A?oData'KName DriverName \(DriverNameLengthDriverNameTEMP(S[V3\D EventDataAKoData3KNameDriverNameLength A?oData'KName DriverName A7oDataKNameStatus (D(DriverNameLengthDriverNameStatusTEMP<`EMWD^ X1s(D EventDataASoData;KNameDeviceInstanceLength AGoData/KNameDeviceInstance A7oDataKNameStatus A;oData#KNameVetoType AGoData/KNameVetoNameLength A;oData#KNameVetoName ,@X|0DeviceInstanceLength$DeviceInstanceStatusVetoType$VetoNameLengthVetoNameTEMP(%P]X8:)] D EventDataAMoData5KNameServiceNameLength AAoData)KName ServiceName A7oDataKNameStatus AKoData3KNameDriverNameLength A?oData'KName DriverName A9oData!KNameVersion  4Pd(ServiceNameLengthServiceNameStatus(DriverNameLengthDriverNameVersionTEMP(g$=*^ߥ/-GD EventDataAKoData3KNameDriverNameLength A?oData'KName DriverName A7oDataKNameStatus AMoData5KNameFailureNameLength AAoData)KName FailureName A9oData!KNameVersion 4\x(DriverNameLengthDriverNameStatus(FailureNameLengthFailureNameVersionTEMPTPtO'K\# D EventDataA=oData%KName ProcessId AMoData5KNameProcessNameLength AAoData)KName ProcessName ASoData;KNameDeviceInstanceLength AGoData/KNameDeviceInstance  8`|ProcessId(ProcessNameLengthProcessName0DeviceInstanceLength$DeviceInstanceTEMPt*W(_ $WmpD EventDataAOoData7KNameBlockedDriverEntry ,BlockedDriverEntryTEMPD,͟,Vo9{BD EventDataA9oData!KNameSqmType AGoData/KNameSqmSessionGuid A5oDataKNameSqmID AWoData?KNameSqmDWORDDatapointValue |SqmType$SqmSessionGuidSqmID4SqmDWORDDatapointValueTEMPDp!+_SDD EventDataA9oData!KNameSqmType AGoData/KNameSqmSessionGuid A5oDataKNameSqmID AYoDataAKNameSqmStringDatapointValue !!!"SqmType$SqmSessionGuidSqmID4SqmStringDatapointValueTEMP`$ǍY<D EventDataA9oData!KNameSqmType AGoData/KNameSqmSessionGuid A5oDataKNameSqmID AOoData7KNameSqmStreamRowLength AQZ ComplexData+KName SqmStreamRow $$$$%8%X%x%SqmType$SqmSessionGuidSqmID,SqmStreamRowLength SqmStreamRow SqmTypeEntry SqmDWORDEntry$SqmStringEntryTEMP`'ZK#E^_!MD EventDataA9oData!KNameSqmType AGoData/KNameSqmSessionGuid A7oDataKNameSqmSid AQoData9KNameSqmWindowsSessionId AIoData1KNameSqmSessionFlags '''(<(SqmType$SqmSessionGuidSqmSid,SqmWindowsSessionId$SqmSessionFlagsTEMP<<)[g4lRM)lD EventDataA9oData!KNameSqmType AGoData/KNameSqmSessionGuid d)x)SqmType$SqmSessionGuidTEMP4t*2\ a)D EventDataA?oData'KName TargetPath A=oData%KName SparePath **TargetPathSparePathTEMP(,l'6ZXW$D EventDataA?oData'KName TargetPath A=oData%KName SparePath A7oDataKNameStatus A;oData#KNameLocation x,,,,TargetPathSparePathStatusLocationTEMP.6,kF FSz rD EventDataA?oData'KName TargetPath A=oData%KName SparePath A7oDataKNameStatus A;oData#KNameLocation AGoData/KNameExtendedStatus .//,/D/TargetPathSparePathStatusLocation$ExtendedStatusTEMP ,5!6Yu0W@M³=KD EventDataA?oData'KName TargetPath AGoData/KNameTargetAffinity ASoData;KNameTargetProcessorCount AMoData5KNameTargetMemoryCount AKoData3KNameTargetMemorySize A=oData%KName SparePath AQoData9KNameSpareProcessorCount AKoData3KNameSpareMemoryCount AIoData1KNameSpareMemorySize A=oData%KName TimeTotal AEoData-KName TimeToQuiesce ACoData+KName TimeQuiesced A?oData'KName TimeToWake AYZ ComplexData3KNameTargetProcessors A]Z ComplexData7KNameTargetMemoryRanges AWZ ComplexData1KNameSpareProcessors A[Z ComplexData5KNameSpareMemoryRanges 6787h77777$8H8`88888949\9|9999:TargetPath$TargetAffinity0TargetProcessorCount(TargetMemoryCount(TargetMemorySizeSparePath,SpareProcessorCount(SpareMemoryCount$SpareMemorySizeTimeTotal TimeToQuiesce TimeQuiescedTimeToWake(TargetProcessors,TargetMemoryRanges$SpareProcessors(SpareMemoryRanges TargetApicId0TargetPhysicalAddress TargetLengthSpareApicId0SparePhysicalAddressSpareLengthTEMPT>ZF%Zl#ê<D EventDataAKoData3KNameDeviceInstanceId A?oData'KName DriverName A=oData%KName ClassGuid A?oData'KName DriverDate AEoData-KName DriverVersion AGoData/KNameDriverProvider AAoData)KName DriverInbox  AEoData-KName DriverSection A?oData'KName DriverRank AKoData3KNameMatchingDeviceId AKoData3KNameOutrankedDrivers AEoData-KName DeviceUpdated A7oDataKNameStatus AWoData?KNameParentDeviceInstanceId ??@@4@T@ x@@@@@ A@ATA(DeviceInstanceIdDriverNameClassGuidDriverDate DriverVersion$DriverProviderDriverInbox DriverSectionDriverRank(MatchingDeviceId(OutrankedDrivers DeviceUpdatedStatus4ParentDeviceInstanceIdTEMP D+jfP@U PD EventDataAKoData3KNameDeviceInstanceId A?oData'KName DriverName A=oData%KName ClassGuid AAoData)KName ServiceName ACoData+KName LowerFilters ACoData+KName UpperFilters A9oData!KNameProblem A7oDataKNameStatus DDDE$EDEdExE(DeviceInstanceIdDriverNameClassGuidServiceName LowerFilters UpperFiltersProblemStatusTEMPFt(~iSO_r .D EventDataAKoData3KNameDeviceInstanceId A=oData%KName ClassGuid A9oData!KNameProblem A7oDataKNameStatus @GhGGG(DeviceInstanceIdClassGuidProblemStatusTEMPIq=9S `ϺNAD EventDataAKoData3KNameDeviceInstanceId ASoData;KNameLastDeviceInstanceId A=oData%KName ClassGuid ACoData+KName LocationPath AEoData-KName MigrationRank A9oData!KNamePresent  A7oDataKNameStatus JJJJK 8KLK(DeviceInstanceId0LastDeviceInstanceIdClassGuid LocationPath MigrationRankPresentStatusTEMPL[N@[AǺlD EventDataAKoData3KNameDeviceInstanceId L(DeviceInstanceIdTEMP ,OC6Ql[GD EventDataACoData+KName QueryAddress A=oData%KName ProcessId A?oData'KName ObjectType A=oData%KName QueryType A;oData#KNameObjectId A?oData'KName QueryFlags AOoData7KNamePreferredLanguages AQoData9KNameRequestedProperties AKoData3KNameFilterExpression OPP4PLPdPPPP QueryAddressProcessIdObjectTypeQueryTypeObjectIdQueryFlags,PreferredLanguages,RequestedProperties(FilterExpressionTEMPQӔ~jTQZp¿dD EventDataACoData+KName QueryAddress Q QueryAddressTEMPdRӔ~jTQZp¿dD EventDataACoData+KName QueryAddress xR QueryAddressTEMP0SӔ~jTQZp¿dD EventDataACoData+KName QueryAddress DS QueryAddressTEMP|TtxW]Rݳ[0D EventDataA7oDataKNameFilter A;oData#KNameFilterBy AAoData)KName OnlyPresent  TT TFilterFilterByOnlyPresentTEMPUt34=E\J<XD EventDataA7oDataKNameResult UResultTEMPV6fVjLD EventDataA5oDataKNameClass A7oDataKNameDevice AAoData)KName OnlyPresent  WW $WClassDeviceOnlyPresentTEMPWt34=E\J<XD EventDataA7oDataKNameResult WResultTEMP$Yz_9|D EventDataAYoDataAKNameHardwareConfigurationId A7oDataKNameDriver A=oData%KName StartType `YYY4HardwareConfigurationIdDriverStartTypeTEMP<Z!Sb;D EventDataAIoData1KNameQueryRemoveType A7oDataKNameDevice ZZ$QueryRemoveTypeDeviceTEMP[O*R[i &hfXD EventDataA7oDataKNameDevice [DeviceTEMPD\dKX2R`D EventDataA?oData'KName DeviceNode X\DeviceNodeTEMP\`][ҥ1ZTED EventDataA?oData'KName DeviceNode AOoData7KNameDeviceInstancePath ]]DeviceNode,DeviceInstancePathTEMP^=Քu^3xD EventDataA5oDataKNamePhase A7oDataKNameDevice ^^PhaseDeviceTEMP_=Քu^3xD EventDataA5oDataKNamePhase A7oDataKNameDevice __PhaseDeviceTEMP<`ѩP zA~QD EventDataA7oDataKNameDevice AIoData1KNameReenumerateType `aDevice$ReenumerateTypeTEMP`bׯ|\ TPD EventDataAAoData)KName ServiceType AKoData3KNameDriverNameLength A?oData'KName DriverName AOoData7KNameDeviceInstancePath c$cLchcServiceType(DriverNameLengthDriverName,DeviceInstancePathTEMP d$*QqXD EventDataA7oDataKNameStatus 4dStatusOPCOL0d0d0d0d e 4e Le pewin:Infowin:Startwin:Stopwin:SuspendQueryStartQueryStop$ProcessingStart$ProcessingStopLEVLPePePewin:Errorwin:Warning(win:InformationalTASK!iiijHj`j|jjjjj k,kXkk kkl@lplXlll0m \m#m%m'm*m-(n>XnRxnTnBootStartSystemStartOsLoader4EarlyLaunchAntiMalwareBootInitDriverLoad DriverUnloadDeviceStartDeviceEnumDeviceEjectDriverInit DeviceConfig,SystemStartPnPEnum0SystemStartLegacyEnum(BootDriverReinit4SystemStartDriverReinit,DriverDatabaseLoad0DriverDatabaseUnload0DriverDatabaseLoaded8DevQuery_QueryProcessing$DriverOverride(CfgMgr_DeviceList<CfgMgr_DeviceInterfaceList,CfgMgr_QueryRemove(ProcessNewDevice,ProcessDeviceStart0ProcessDeviceRestartDeviceAdd0ReenumerateDeviceTree0ReenumerateDeviceOnly DeviceRemoval$AssignResourcesRebalanceKEYW oo o@p p>>ZTdeti?>?Z`deti@>@ZldetiHH `deIIXldeRRRZ`deiSRSZldeiTTT `deiUTUt ldeinnnnnnnnnnnnnnnnnnnnnnnononononono0o0on on oooooooooo@o@o@onnnnnnnnPoPoPoPoPoPoPooPoo`o`o`o`opopopopopopoooooooooooooooooooooooooWEVT܊(TTBL|TEMPp0wBO_.b9dKVD EventDataAOoData7KNameInterfaceClassGuid A?oData'KName DeviceName AGoData/KNameHardwareIdList AKoData3KNameCompatibleIdList $@d,InterfaceClassGuidDeviceName$HardwareIdList(CompatibleIdListOPCOPl8Opcode_DeviceArrivalEventLEVL@P(win:InformationalTASKKEYWXD<Keyword_DeviceArrivalEventEVNTDl4WEVT,ĒTTBLTTEMPRXxCD EventDataAQoData9KNameResourceConsumerPdo ACoData+KName ConnectionId AooDataWKName"ResourceConsumerInstancePathLength AcoDataKKNameResourceConsumerInstancePath X,ResourceConsumerPdo ConnectionIdLResourceConsumerInstancePathLength@ResourceConsumerInstancePathTEMPBǶ U͆YTD EventDataA1oDataKNamePdo A=oData%KName ParentPdo $0 PdoParentPdoTEMP8$:ym.2_a|ՎD EventDataA9oData!KNameDevNode AEoData-KName ParentDevNode L`DevNode ParentDevNodeOPCO00win:InfoLEVL@Pȑ(win:InformationalTASKP<ConnectionResourceConsumerParentPdo ParentDevNodeKEYW8SleepStudyEVNT80H4ВВВ%-̥b(z9= Fъ'uDֻmۥ* WEVT_TEMPLATEMUIMUI en-US