MZ@ !L!This program cannot be run in DOS mode. $Di%:%:%:%:%:x;%:x;%:x;%:x;%:xt:%:x;%:Rich%:PEd [" b KD`<``!H78 00.text h.rdata0 @H.data(P2@.pdata``6@HINITCONS4p:@H.gfids<@HPAGE&24> `INITr b.rsrc@B.relocH@BH%$@SH HBL@HL9BtKH BT$HBHXHBH;sH BLL$HH+AB$H{BHDL]DH D H [H(H CHtE3H^EA H(@SHPHO@H3HD$@HH A#3L AHD$8LAHD$0HT$0fD$<s#xjH HWCHH WC! E3H?H CH H€igLcCH CHCGH NAHt#H%;AH%CAH LAHtHd$ H#E3E3f!HL$@H3 HP[H\$H|$UHl$HH?H3HEO3HM'H}dzaE3@u@HHMHEE0WHELEH}E@HME%xMHZHMxHMHEHD$(LM7AD$ HUx};u 9}CEHMHt]HMOH3L$I[I{I]H8z0} H%39HAEHD9HEDHd$(HT$ L PH8Mt,SH HD$PIًAI0H3H4H [f@UHl$H@H{=H3HE0=]<EI LR<HM<I#H;C<zHEpHD$HHExHD$PHD$XHD$`HD$8HEHD$0HEHD$@HEHD$4HEHD$HHEHD$PHEHD$XHEHD$`LD$@E3L$8HfDL$4HEEHT$0EPHEALMHjHELUHEHEHEHEHtHHHD8uHU E(DE,H #H #+HT$h# "D$lH;HEL$hH ;L\$pEH"HEHEDME3HD$(D$ DUEHM0H3H@]@USVWATAUAVAWH$xHH;H3HpHMDHHMD3EqE3DmHtE3H]DHUEH}LMHHD$`DHHD$PHHD$xHHD$XHHEH HEH0HD$hH@HD$pHPHDT$pDD$hLMH]fDd$XL|$xDt$Pt$`HDžHDžHDžHDžHDž(HDž8HDžHHDžXH`HD8,uH ;hDlHt3HA E3HD$ HDLMH|$@ΉT$8ADD$0MLL$(EH\$ HpH3d HĈA_A^A]A\_^[]E3ttA H;H\;HAH\$ UVWATAUAVAWHH`Dq3ҋADI L HUHDDAcA$<VHUH:8WHEE0LEE@HMHEM؅JHbBuNDúHHu "HMHHE@HD$(H7LD$ AyH3~t $DnH^ AHbBuHHuHMHHE@HD$(H:7LD$ AkyHbBuHA3uDgL Dd$(ELL|$ IֹIֹHtHbBuHHtHbBuHHMHHtH$H`A_A^A]A\_^]H\$H|$ UHHH47H3HEA HL$ LMHHUAHЅxVMu DM LEE׋E܉EEE3H9ME3Ѕx H8HMH3q L$I[ I{(I]H\$WH AHbBu3Hu$hL& \@& zdJ$$@1@ @ @ @A @GNs:PoDisableSleepStates@ @!@ @ @@A @@D:P(A;;GA;;;BA)(A;;GA;;;SY)\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Virtualization\HypervisorRetailEventsInternalEventssPOωGvRCWDWOSDGAGRGWGX[&8([ D9)ETW0+  HypervisorMsrAccessMsrIndexIsWriteMsrValue AccessStatusInstructionPointer ImageBase ImageChecksum ImageTimestamp ImageName_l)[FJ(/Z9Microsoft.Windows.HyperV.HypervisorsPOωGvRSDSR2FaKȱHvService.pdbGCTL.text$mn$P.text$mn$00%@.text$mn$21@).text$s0.rdata$brc0.idata$54.00cfg4.rdata7.rdata$zETW08.rdata$zETW18J.rdata$zETW28.rdata$zETW98l.rdata$zzzdbgX;|.xdataP.data$brcQ.dataRh.bss``.pdatap4INITCONST.gfids$y.PAGEPAGE$sINIT8INIT$s(.idata$2.idata$3.idata$4 .idata$6.rsrc$01.rsrc$02B $0 4P$200$@ 0$p% t4 P$ t d 4 Rd 4 r pt d T 4 R  4 2pb  20   d T 4 Rpt d T 42 t4  P$Hd42 p  4rp`$d4 p$P d T 4Rp  4 rp(P$0- Q p`0P$p 4 p`P#t4 P$p 4 p$X T4 R p `$0 4 p$  4 Rp[% td4 P$@& p`P0$0% 4 p`P$X t dT4220 d T 4 Rp  4 p0" 0"p`0Prp`0 dT42p  p`0P t d 42  p`0P d T 4 2pt d4t 4  P 4r p`P* 4' p`P$d4 p d 4 R p P T 4 Rp` t d T 4 r0P 4 p$X08H7p6(77777777@7 =e G ER^LCD2-+WDBASYIUXRCPAUNU`AN BGBULSNSACUD;X;;;UD<XP<z@=|X=|== 4< = =D<=!X>!B!;D!!>!">##<#$@$1$X;4$$@$$@%9(@@(9)@X;d;x;;ߓX;U;Xe<h<H4<Hɚ\<̚|<O<Pǝ<ȝ]<`c<d=v0=x=%X;(D<)X;<أ>أ(>8>x>>9><Ъ>Ъz?|+$?,"$p\Device\HvService H(H %H H%%HtH HtH }HtH%jH sHtȠH%`H QHtH%>H(AupHHHwH3HD$0xCE3HT$ EAAI[ x!|$!tL3H 7yH%HL$0H3HHH\$UHl$HHH3HEGE3HUEA AIZ&M'tHk-H-HMHeHEWD$( LMHELEE0E@H &D$ E[]-3K-A E?H-EC3MHM UHU7E7E] HMH-tHP-HeHEWD$( LMHELEE0E@H pD$ EHMGH3qH$H]@SHHH3HD$pHd$8Hu%uvH HtdLD$8JЉD$0yMd$\HD$0LD$PHD$PD$XH š贊rHd$ E3E33ҹ! JH \>iHL$@FxHL$@LL$HAHH$}3HL$pH3;HĀ[H(Hb8Hʃb033H(H\$Ht$H|$ AVH0LHLY@3AREJtLFLEtLvLAJ?"t. @t uiHFPArLMtGrBMt=ABw2EHHD$@DHD$ IR0I؅xrHD$@Ic \rMtAAwEHDIR0IsAr$MtHL$@؅xD$@A#3HHF8^0{Ht$PH\$HH|$XH0A^LI[IsWH@A"ICICHD$(E3D$ AQNHD$`E3E3D$ HbRlHX@HcHK(HHsCHD$`Ah0 APHD$`D @0HL$`HL$`H HHu*LKHCE3HL9cPu8HCXH9u/HH HCH9YuH9uHHvStHAHӖA ) 3HזٕH\$@H|$XHl$HHt$PH A_A^A\HAH@HAH\$H|$UHHPHH3HE3HًIHEHEtftFt4t"HCHECEC fEt]/CE"CEAHCHEC fEE&HCHEC fEMLK(LEHUx:HME3Hd$ E3FHChHu H3yHHMH3豆H\$hH|$pHP]H\$Ht$WH HY0HLH3H{(L3IHH9?uHK8Ht ʔHc8HN(Ht Hf(H\$0Ht$8H _HHX L@HPHHVWATAVAWH@LH3DL$MtIH9Y7H9Y -HHtHV(HHHL99t HHH;uHQ(AHvSt HH$H3DB(HƉHGHN(HQH9 t)HHPHHALH|$0L?HGH’H D$(\$ E3EAAHN8H)H$H H'3L$Ld$0L|$xHt$pHHuL;IDLIH- MtI H$H@A_A^A\_^H\$Ht$ WH`HH3HD$P3IHMuMHt"H(H HxH9t HHH;uHu0 HL$PH3*L\$`I[Is(I_L;uHuH9_ t,HOHT$ iHV8HO HL$ H_ HOHt %H_H;tHGHHHH9BuH9uHHJHvStH)[)HHXHhHpWH0Hq@L-A@ HHN(#؅y3҉G0H-GCHHHHNUA HN(H׋Hl$HH\$@Ht$PH0_H\$WH@L$HMtYH\$p…t#u"AȸMJEIZEAA"MZ(MtIB0HHD$0HD$xHD$(H\$ AH\$PH@_HHHH3HD$0HL LpHQHL$ @H%H%D$ uLAPH OE͐HL$0H3HHH(H %H%%H(H8L հE33H Ѯ HİE3LxHD$ 3H D LH -H%H %E3qHıH HH)H%H&yH%rH{H8H(H HtH Ht H(HHHH%LH\$WH0M3D IDHH fI;ffACfA{ I{ A{,ES(tIH+HHD0HRIuE3D$( @ |$ fA C 3IEAȎH3H\$@H0_HH3H ;DBpRH C H nd$0LD$ 3D$(3D$ D$$@D$,YyE3H 3HHyH3E3H|H oٌ3H BL STA0uH HHH%.H\$Ht$H|$ UHHPHVH3HEHU؋rEЅxcH]؃{tMH{ tF3TEЅuA39{v׋l;{rLEHE33\u EЅy+eHELEHEEH vxEHMH3s~H\$hHt$pH|$xHP]H\$ UVWATAUAVAWHH`HnH3HEHeDH XID3E2_HUAqH]؉EЅ79{t E &Dk0AHbBuiFDRHC Hu EКM3HFAHbBuDHC(HtE3HƁ9~vHC(H {;~rHKjHMEЅx|H NEЅxhFADNADFD$(F D$ [EЅx?F3CAFC9{v%HELDHD$ AxEЅx;{rH EЅy;Et6AΉ{]eHELEHEEH ^mvEHMH3j|H$H`A_A^A]A\_^]HHXHhHpHx AVH H=@2DHtsH=+titd;>s\HiȠH<9HtJ3HwH9o0v HH;sHuFH;o0rA,_8@t H=H @u AH\$0Hl$8Ht$@H|$HH A^@SH`= Hu[H'HL$PdHL$PHڪHuHzHǪH HL$P-HL$PH$LHD$@A"Hd$8HHD$0HD$(AQND$ ]H`[LD$T$HL$USVWATAUAWHHL3DMHI]MuE`u H9]xt)HLEHMx# D}HuDeԋ}H]HH]DH]D@uNHMpLE3HHuȋMHuH9ExtHMHUHMxHEHum؅xaEDMU`MhEELEPAEרEEHHD$0L$(HM@T$ UH؅x@u23HIE@t 3HHĀA_A]A\_^[]HHU؅yH*@SVWH@HLD$pHHT$hHOx}\$pADEtAtAHD$xE3HD$0H؈D$(HHL$ Hʈx LGHL$xHL$xȅH@_^[H\$Hl$Ht$WH 3AIHLJI;uHIHf9,QurZASeTsIѹHHu H/4DHHSyLHHf,F%3H΋lH\$0Hl$8Ht$@H _̉T$USVWATAVAWHHPE3MM AEHf9 tf9Dt fy:uHf9Pu HLEPHU@؅uHEPHf8 tfD9 tz HM@Ht3HMЋE3HMLƊ fD }LEH3DeHHM҆UHASeSdYHHu Hu@DLEHHHM؅y"Ht 3H"Ht3H3HI>HPA_A^A\_^[]H\$Ht$H|$ATAVAWH MH5HL%sL3DL [IT$ IJtHrH'sCH[A|ADIFIu uH'HIHH H3H\$@Ht$HH|$PH A_A^A\HT$USVWATAUAVAWHHhE3LL"IHLeAEAT$:HHH;u NHuHHfD9$CuHCHHEHHAH;sf;uEf EEHH;rADAB AD;Eu EASeAlAEuAU:IHtKHF4mEAAED;DGAEHHEPH0Hu SMDe`3Hx3ffDvVUXE DUHfA HfD9;tf;(uHfD9;tAH0Hǃ3҅HHfD9;tf;;HfD9;tf;;HfD9;tDL5)EFHIi3҅t-AIE;rLEHH]HUHWHEH;t53LߟAHAL AD MHHCf8;HtfA |DuHDuHHGfA HfD9;tf;;EHHuHfD9;tLEHHUd3ҋH]HtofD9;uHfD9;tH]f;)uUHMHD}XHt)HL$0HU`HMPAA+ljD$(Dt$ w3ҋu,f;(uHAD}XE;sw tH]P3H 3HDe`HEPHfD` HhA_A^A]A\_^[]H\$Hl$Ht$WATAUAVAWH H1LH$L*DFXD<+E;v^\$xASeAl݋DHHuPM3HuI$LHnr3f_HI<$HL$DD$pHE>"H\$PHl$XHt$`H A_A^A]A\_H\$Ht$H|$3H LA8LM Hڍw0f;uABfXfu IWMf+f BFDLf+f w+%u=Afw7Afw#WAA;r0DIA fuM;tLEH\$Ht$H|$3H\$H|$UHHPA HE(I`LM A`IA`HA`AHe(HeHD$ -} uTHM(LMAH HM(|xHMHHM43LK0H}(Iu H HMn؅xMHUH؅HU E 1HMn؅x(H HMn؅xLEHHU؅x;HU HMn؅x(Hq HMln؅xLEHHUrH{H\$`H|$hHP]H\$UVWATAUAVAWHH@HeXLj3Lz!2LbH!rHA!uH A!7LA!4$HMHuHm؅xHEHIHUHD$ HuH؅x"NHEX3HD$ HADB}4uHeX3Ht 3Hi|HMXHt6LEPHUH؅}HtHMX3/| HEXHGMHh I|ؾ4x;uFMHb IV؅x;u%MHq I5؅x/;u3'HOHt3{'HgAeA'A$$H$H@A_A^A]A\_^]H\$UVWATAUAVAWHl$HHH3HELm3DEMLI]MtALMAH 3jAL$AT$ ED$ AD$ET$ E\$ A\$ A|$At$Et$E $D$hL$`HMT$X'DD$PL DT$HD\$@\$8|$0t$(Dt$ {H]HUE3HfDu D9ut!HEHD$0HEHD$(Lt$ uLMA?HˋxxHEIEMtA7HMH3kH$8HA_A^A]A\_^]LI[IsWH`IC E3E3ICHZ3ښHuPH$A3HD$ DFHzx"H$3vy H$HHD$@HD$0HEHt$(H$H\$ H$wxXHOFzLWH3HL$HD j؅x%HL$@HT$HDL$(E3ALT$ yHL$@xwH\$pHt$xH`_H\$Ht$UWAVHH03AILLE(HUHyxy3LE(H9]HUHύCEgyxXH}tLM(HLEHU8Tyx5}8tLM(HLEHU8yx}8tE(A3H\$PHt$`H0A^_]H\$Hl$DL$ VWAVH0:HHt$pLAPpRbH&wHHu HD$hLHD$(AHՉ|$ Ivyi3H`wt #tgT$hAPpRb/wHHtHD$hLHD$(AD$hHIΉD$  vx {t$3HvH3H\$PHl$XH0A^_^LI[IkIsI{ AVH@IAE3HHCA+HI;r5HCEIE3fB$hL& \@& zdJ ZwQuerySystemInformationKdDeregisterPowerHandler IoRegisterDriverReinitializationRtlInitUnicodeStringIoInitializeRemoveLockEx strncmp ZwOpenFileKdRegisterPowerHandlerIoCreateSymbolicLinkV ZwCloseKeSetTimerRIoAllocateWorkItemKeInitializeDpcKeBugCheckExKeEnterCriticalRegionHviIsAnyHypervisorPresentKeInitializeTimerIoQueueWorkItemExObfReferenceObjectHviGetHypervisorFeaturesMmGetSystemRoutineAddress ZwQueryValueKey ZwOpenKeyKeLeaveCriticalRegion%HvlQueryActiveHypervisorProcessorCountIofCompleteRequestEIoAcquireRemoveLockExIoRegisterDeviceInterfaceIoReleaseRemoveLockExIoReleaseRemoveLockAndWaitEx.IoSetDeviceInterfaceStateIoDetachDeviceiRtlFreeUnicodeStringIoDeleteDeviceIoForwardIrpSynchronously PoSetPowerStateWIoAttachDeviceToDeviceStackvIoCreateDeviceIofCallDriverPoCallDriverPoRequestPowerIrpPoStartNextPowerIrpMmBuildMdlForNonPagedPoolObfDereferenceObjectOIoAllocateMdlExAcquirePushLockExclusiveExKeStackAttachProcessIoFreeMdl2PsGetCurrentProcessExAllocatePoolWithTagExFreePoolWithTagMmUnmapLockedPagesMmMapLockedPagesSpecifyCacheKeUnstackDetachProcessExReleasePushLockExKeInsertQueueDpcKeDelayExecutionThreadqEtwSetInformation1 WmiQueryTraceInformationKeInitializeTimerExExReleaseFastMutexKeSetTimerExExQueueWorkItemExInterlockedInsertTailList*ExWaitForRundownProtectionReleaseExReInitializeRundownProtectionKeInitializeSpinLockExInitializeRundownProtectionoEtwRegisterClassicProviderxEtwWriteTransfer(HvlQueryHypervisorProcessorNodeNumberExAcquireRundownProtectionrEtwUnregister~ExAcquireFastMutexsEtwWriteExInterlockedRemoveHeadListnEtwRegisterKeInitializeEventpEtwSendTraceBufferExReleaseRundownProtectionntoskrnl.exebWinHvSetHvDebugProperty5WinHvGetPartitionIdoWinHvUnmapStatsPagerWinHvWithdrawMemory_WinHvSetEventLogCompletedNotificationRoutineXWinHvReportPresentHypervisorIWinHvMapStatsPageeWinHvSetPartitionProperty WinHvConfigureProfiler$WinHvFlushEventLogBuffer#WinHvFinalizeEventLogBufferGroupWinHvDepositMemoryDWinHvMapEventLogBufferVWinHvReleaseEventLogBufferWinHvCreateEventLogBufferaWinHvSetEventLogGroupSourcesmWinHvUnmapEventLogBuffer<WinHvInitializeEventLogBufferGroupWinHvDeleteEventLogBuffer`WinHvSetEventLogGranularSourceswinhvr.sysObOpenObjectByPointerIoDeviceObjectType ZwSetSecurityObject*RtlSetDaclSecurityDescriptorIoIsWdmVersionAvailableRtlLengthSidRtlAddAccessAllowedAceRtlAbsoluteToSelfRelativeSD wcschrW _wcsnicmpRtlCreateSecurityDescriptorSeExportsRtlLengthSecurityDescriptor< _snwprintfSeCaptureSecurityDescriptorRtlGetSaclSecurityDescriptorRtlGetOwnerSecurityDescriptor}RtlGetGroupSecurityDescriptorwRtlGetDaclSecurityDescriptord ZwCreateKey ZwSetValueKey( __C_specific_handler) __chkstk8xPh  ( 8 H X hp6 9oPpA WEVT_TEMPLATEMUI4VS_VERSION_INFO 98 98?StringFileInfo040904B0LCompanyNameMicrosoft CorporationVFileDescriptionHypervisor Boot Drivert*FileVersion10.0.14393.2551 (rs1_release.181004-1309)<InternalNameHvService.sys.LegalCopyright Microsoft Corporation. All rights reserved.DOriginalFilenameHvService.sysj%ProductNameMicrosoft Windows Operating SystemDProductVersion10.0.14393.2551DVarFileInfo$Translation ( d&(*h,06@PU `a&(+x7PP<0= =''D>!!>11?AAp@LHypervisor successfully started. LHypervisor scheduler type is %1. Hypervisor Eventlog for global system events could not be created! Hypervisor launch has been disabled through the hypervisorlaunchtype bcdedit setting. tHypervisor SPT Resizing policy failed to initialize. hHypervisor fails to start ETW tracing session. Hypervisor launch failed; sleep and hibernate could not be disabled (status %1). Hypervisor launch failed; the hypervisor boot loader's internal logic failed (BalStatus %1, sub-status %2). Hypervisor launch failed; the hypervisor boot loader was unable to allocate sufficient resources to perform the launch. Hypervisor launch failed; the hypervisor boot loader does not support the vendor of at least one of the processors in the system. Hypervisor launch failed; at least one of the processors in the system does not appear to support the features required by the hypervisor. (leaf: %1, required features: %2, features available: %3) Hyper-V launch failed; the system does not appear to have a sufficient level of ACPI support to launch the hypervisor. <Hypervisor launch failed; at least one of the processors in the system does not appear to provide a virtualization platform supported by the hypervisor. Hyper-V launch failed; the image %1 could not be accessed (status %2). Hyper-V launch failed; the image %1 could not be loaded (status %2). Hyper-V launch failed; the image %1 could not be read (status %2). Hypervisor launch failed; the image %1 failed code integrity checks, and cannot be used. Hypervisor launch failed; the image %1 does not contain the image description datastructures, and cannot be used. Hyper-V launch failed; at least one of the processors in the system was unable to launch the hypervisor (status %1). \Hypervisor launch failed; the hypervisor image is revision %1, but the currently installed virtualization software only supports launching revision %2 hypervisor images. Hypervisor launch failed; Either VMX not present or not enabled in BIOS. Hypervisor launch failed; Either SVM not present or not enabled in BIOS. Hypervisor launch failed; Either No Execute feature (NX) not present or not enabled in BIOS. Hypervisor launch failed; at least one of the processors in the system is incompatible with the others. @Hypervisor launch failed; Processor does not support the minimum features required to run the hypervisor (MSR index %1, allowed bits %2, required bits %3). Hypervisor launch failed; Processor does not provide the features necessary to run the hypervisor (BalStatus %1, leaf1 EAX %2, VMCR MS EAX %3, SVM CPUID features %4, has working SMM %5). THypervisor launch failed; Processor does not provide the features necessary to run the hypervisor (leaf %1, register %2: features needed %3, features supported %4). Hypervisor launch failed; Hypervisor image does not match the platform being run on. Hypervisor launch failed; Required firmware table not found. Hypervisor launch failed; Encountered invalid firmware information. Hypervisor launch failed; Incompatible SVM features present. Hypervisor launch failed; Incompatible VMX features present. Hypervisor launch failed; Second Level Address Translation is required to launch the hypervisor. 4Hypervisor launch failed; Secure Mode Extensions have been enabled by the BIOS. Please disable Secure Mode Extensions in the BIOS to launch Hyper-V. Hypervisor launch failed; Minimum CPUID leaves required by the hypervisor are not supported on the system. Hypervisor launch failed; The physical address limit supported has been exceeded. 0Hypervisor launch failed; The hypervisor was unable to initialize successfully (phase %1), and was not started. This initialization failure may be the result of a platform configuration or firmware issue. Contact your system vendor for more information or updated firmware. Hypervisor launch failed; Too many runtime services memory ranges described by firmware. Hypervisor launch failed; The operating systems boot loader failed with error %1. Hypervisor launch failed; The operating system boot loader was unable to locate a required resource. Hypervisor launch failed; The operating system boot loader detected a persistent memory failure. Hypervisor launch failed; The operating system boot loader was unable to allocate sufficient memory to complete the operation. Hypervisor launch failed; The operating system boot loader was unable to allocate sufficient resources to complete the operation. Hypervisor launch failed; The operating system boot loader detected a memory map conflict. Hypervisor processor startup failed (APIC ID %1, status %2). Further processors in the system were not started. Hypervisor processor startup failed (APIC ID %1) due to CPUID feature validation error. Further processors in the system were not started. Leaf %2, register %3 feature mismatch: BSP has features %5; AP has features %4 |Hypervisor initialized I/O remapping.%n%nHardware present: %1%nHardware enabled: %2%nPolicy: %3%nEnabled features: %4%nInternal information: %5%nProblems: %6%nAdditional information: %7 Hypervisor I/O remapping is forcibly enabled by policy (the hypervisoriommupolicy BCD option is set to enable). If the system exhibits instability or reduced performance, consider restoring the default policy. A device is operating with reduced performance because of a problem with the system BIOS.%n%nThe device is not reported under the scope of a unique I/O remapping unit.%n%nDevice ID: %1%nPartition ID: %2 A device will not work correctly because of a problem with the system BIOS.%n%nThe Requester IDs reported for the device overlap with those reported for another device.%n%nDevice ID: %1%nPartition ID: %2 A device will not work correctly because the hypervisor does not have enough resources.%n%nDevice ID: %1%nPartition ID: %2 A device will not work correctly because of a problem with the system BIOS.%n%nAn IOAPIC is not correctly reported.%n%nIOAPIC ID: %1 A device could not be used by a child partition because of a limitation of the system hardware and BIOS.%n%nThe I/O remapping unit that controls the device does not have sufficient capabilities.%n%nDevice ID: %1%nI/O remapping unit base address: %2%nPartition ID: %3 A device could not be used by a child partition because of a limitation of the system hardware and BIOS.%n%nThe device cannot be securely used by a child partition.%n%nDevice ID: %1%nPartition ID: %2 hThe image %1 could not be accessed (status %2). dThe image %1 could not be loaded (status %2). `The image %1 could not be read (status %2). The image %1 failed code integrity checks, and cannot be used. Hypervisor failed to properly synchronize TSC across logical processors (Max delta: %1, Min delta: %2). Hypervisor configured mitigations for CVE-2018-3646 for virtual machines.%n%nProcessor not affected: %1%nProcessor family not affected: %2%nProcessor supports cache flush: %3%nHyperThreading enabled: %4%nParent hypervisor applies mitigations: %5%nMitigations disabled by bcdedit: %6%nMitigations enabled: %7%nCache flush needed: %8%n The hypervisor did not enable mitigations for CVE-2018-3646 for virtual machines because HyperThreading is enabled and the hypervisor core scheduler is not enabled. To enable mitigations for CVE-2018-3646 for virtual machines, enable the core scheduler by running "bcdedit /set hypervisorschedulertype core" from an elevated command prompt and reboot. Error Warning Information TMicrosoft-Windows-Hyper-V-Hypervisor System THypervisor Eventlog creation failed! THypervisor Eventlog deletion failed! LHypervisor System Start Options! tHyper-V failed creating a new partition (status %1)! lHyper-V detected access to a restricted MSR (Msr: %1, IsWrite: %2, MsrValue: %3, AccessStatus: %4, Pc: %5, ImageBase: %6, ImageChecksum: %7, ImageTimestamp: %8, ImageName: %9). Hyper-V successfully created a new partition (partition %1). |Hyper-V successfully deleted a partition (partition %1). CRIM9R^LCD$WEVT8X*d***8+CHANHSystem\Microsoft-Windows-Hyper-V-Hypervisor-AdminhMicrosoft-Windows-Hyper-V-Hypervisor-Operational`Microsoft-Windows-Hyper-V-Hypervisor-AnalyticTTBLH(TEMP NI%iR-~bxfD EventDataAEoData-KName SchedulerType  SchedulerTypeTEMPIhs}\kk^D EventDataA=oData%KName ErrorCode ErrorCodeTEMPDloȌ_!3> bbD EventDataAAoData)KName PartitionId  XPartitionIdTEMP[g놂+\X_mlVD EventDataA5oDataKNameError ErrorTEMP mۿUFI0G#D EventDataA1oDataKNameCPU A=oData%KName ErrorCode $ CPUErrorCodeTEMP  wq|Q}c OJD EventDataA=oData%KName BalStatus A5oDataKNameError 4LBalStatusErrorTEMP-el]Y1'D EventDataA3oDataKNameLeaf AKoData3KNameFeaturesRequired AIoData1KNameFeaturesPresent Leaf(FeaturesRequired$FeaturesPresentTEMPl ]E^7P ꪫgD EventDataAMoData5KNameHypervisorVersion AKoData3KNameVersionSupported < d (HypervisorVersion(VersionSupportedTEMP ' gQ#}6UD EventDataA;oData#KNameMSRIndex AEoData-KName AllowedZeroes AAoData)KName AllowedOnes   $ MSRIndex AllowedZeroesAllowedOnesTEMP nٿZ6nG`QD EventDataA=oData%KName BalStatus A;oData#KNameLeaf1Eax ACoData+KName VmCrMsrValue AEoData-KName SvmFeatureEax AEoData-KName HasWorkingSmm \tBalStatusLeaf1Eax VmCrMsrValue SvmFeatureEax HasWorkingSmmTEMP0X̿_28D EventDataA3oDataKNameLeaf A;oData#KNameRegister AGoData/KNameFeaturesNeeded AMoData5KNameFeaturesSupported LeafRegister$FeaturesNeeded(FeaturesSupportedTEMPb.W\x@^D EventDataA=oData%KName BalStatus BalStatusTEMP$@,)TU~n8D EventDataA=oData%KName ImageName A7oDataKNameStatus ImageNameStatusTEMPHQb^D EventDataA=oData%KName ImageName ImageNameTEMPPS(ZVpۜ?@\D EventDataA;oData#KNameNtStatus dNtStatusTEMP8Ȗ\|]"VD EventDataA5oDataKNamePhase PhaseTEMPRh^ nlD EventDataA1oDataKNameCPU A?oData'KName LeafNumber A;oData#KNameRegister ACoData+KName BSPCpuidData AAoData)KName APCpuidData 0<Xp CPULeafNumberRegister BSPCpuidDataAPCpuidDataTEMPK5ʰHQY}$&"D EventDataAIoData1KNameHardwarePresent AIoData1KNameHardwareEnabled  A7oDataKNamePolicy AIoData1KNameEnabledFeatures ACoData+KName InternalInfo A;oData#KNameProblems AGoData/KNameAdditionalInfo   0H$HardwarePresent$HardwareEnabledPolicy$EnabledFeatures InternalInfoProblems$AdditionalInfoTEMPlOZh]Ox:X.M\D EventDataA;oData#KNameIoApicId IoApicIdTEMP4$KUOeۦeD EventDataA;oData#KNameDeviceId AAoData)KName PartitionId  ( @DeviceIdPartitionIdTEMP@PJ){D EventDataA;oData#KNameDeviceId AIoData1KNameUnitBaseAddress AAoData)KName PartitionId   DeviceId$UnitBaseAddressPartitionIdTEMP4$ l=ۓ-W}$KA{ ErrorDataxmlns=http://manifests.microsoft.com/win/2004/08/windows/Hypervisor$ StartOptions 8 OptionsTEMP8 "rGW6OKGvD EventDataA1oDataKNameMsr A9oData!KNameIsWrite A;oData#KNameMsrValue ACoData+KName AccessStatus A/oDataKNamePc A=oData%KName ImageBase AEoData-KName ImageChecksum AGoData/KNameImageTimestamp A=oData%KName ImageName ####$$($H$l$ MsrIsWriteMsrValue AccessStatus PcImageBase ImageChecksum$ImageTimestampImageNameTEMP,X%?{j\V$@MD EventDataA;oData#KNameMaxDelta A;oData#KNameMinDelta   % %MaxDeltaMinDeltaTEMP(/M!Q( b"D EventDataAMoData5KNameNotAffectedRdclNo AIoData1KNameNotAffectedAtom  AQoData9KNameCacheFlushSupported  A?oData'KName SmtEnabled  AYoDataAKNameParentHypervisorFlushes  AOoData7KNameDisabledLoadOption  A9oData!KNameEnabled  AKoData3KNameCacheFlushNeeded   () P) t) ) ) ) * 0*(NotAffectedRdclNo$NotAffectedAtom,CacheFlushSupportedSmtEnabled4ParentHypervisorFlushes,DisabledLoadOptionEnabled(CacheFlushNeededOPCOLEVLP*P*P*win:Errorwin:Warning(win:InformationalTASKKEYW8@+ms:MeasuresEVNT D@*8@* 8@p*8@|*8 @ t*8 @ t*8 @ |* 8 @ |*$8@p*(8@<p*,8@p*08@p*48@\p*88@p*<8 @ p*@8!@!p*D8"@"p*H8#@#p*L8$@$p*P8%@%p*T8&@&p*X8'@'*(@( p*\8)@)p*`8*@*p*d8,@,p*h8-@-p*l8.@. p*p8/@/@ p*t80@0p*x86@6p*|87@7p*88@8p*89@9p*8:@:p*8;@;p*8<@<p*8=@=p*8>@>p*8?@?|p*8@@@p*8P@Pp*8Q@Qp*8R@Rp*8S@Sp*8T@Tp*8U@Up*8`@`$p*8a@a,p*8@*8|*@(|*8@(p*8@(p*8@lp*8@\p*8@(p*8@|*8@|*8@|*8@|*8@$p*8@%*8@|*8!@ !tp*91@ 1L |*9A A*A A*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++)Hypervisor/Virtual Machine Support Driver)Hypervisor/Virtual Machine Support Driverųb$XPa+= jt#J `X*  WEVT_TEMPLATEMUI MUI en-US0xؤP$HXhxРp !0! *H !0!10  `He0\ +7N0L0 +70 010  `He 2:XZdk[dHK#hc 003"y=0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110 180703204550Z 190726204550Z0p1 0 UUS10U Washington10URedmond10U Microsoft Corporation10UMicrosoft Windows0"0  *H 0 pTC:(N,Yf܅eJh8< "o;l`ӜI[N"lO B.9^8|۳Yno& 38U4Qmu F-}~۩E CMŚs Ꞔ-I0o"k()PX"#[nԍ ӆG\dXt$pNzvPc'zY,;7% w0~0U%0 +7 +0Uqr 5o1!A10TUM0KI0G1-0+U $Microsoft Ireland Operations Limited10U 229879+4379540U#0)9ėx͐O|US0TUM0K0IGEChttp://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl0a+U0S0Q+0Ehttp://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt0 U00  *H  gr0j 8րDiSHp6 :Ik~՘zp/c QBv+?rѕm׺@gM,^x֔WGy)CKspfuVtaea [ު{bs z x[j>{Cy~t*&4Ev|^:1nwV*@H#hI$50lzsډPJvje;/kt*00 avV0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 111019184142Z 261019185142Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20110"0  *H 0  . i!i33T ҋ8-|byJ?5 pk6u1ݍp7tF([`#,GgQ'rɹ;S5|'# oFnhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  |qQyn9>\` QfG=*hwLb{Ǻz4KbzJ7-W|=ܸZij:ni!7ށugӓW^)9-Es[zFX^gl5?$5 uVx,Јߺ~,c#!xlX6+̤-@EΊ\k>p* j_Gc 26*pZBYqKW~!<ŹE ŕ]b֠c uw}=EWo3wbY~1>0:001 0 UUS10U Washington10URedmond10U Microsoft Corporation1.0,U%Microsoft Windows Production PCA 20113"y=0  `He0 *H  1  +70 +7 10  +70/ *H  1" b|ڶM%[2Ҳ:w{)3}0Z +7 1L0J$"Microsoft Windows" http://www.microsoft.com/windows0  *H ~qZH+Mcx幨ә#~Rdܓ%_'To;_KCo(vLd9U-vA+ި{@Gc"jd5F(ub+ޒuEhSȶ&l[&20181004232655.406Z0Ф01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:7AB5-2DF2-DA3F1%0#UMicrosoft Time-Stamp Service0q0Y a *0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 100701213655Z 250701214655Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0  w: iktTե |hK,_av>f+[S'1A |a0Y0D`TC M8Bݓs0W&E GͿ$`2X`FXG2tag_TϓLĦ]an(aF'$gr!KdPb]w=WuBM@Q>gfD~Knʱz* 1N5xhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0U 00 +7.00=+1http://www.microsoft.com/PKI/docs/CPS/default.htm0@+042 Legal_Policy_Statement. 0  *H  Q ?q=!o1Wm0fjxǨ%kTW+QDS`v@@A\\^5$VKtBȯ7}Z?yJR8/ye٩kzoK0D$"<Y)p2J'U/3b_W@ΙfjbJ &9Jqc{!mÜ<}jxm8ؔƥ B"8 %d~cY%z.9Wvqa˚Gͧ};q ]t"aڰPo1:eGxHr~akow˧ 9؂r*T9[ Uzs;-3.)/T'!ȬN(ۖBAM*f0ӻt2Kc{/!YDhttp://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0 U00U% 0 +0  *H  9 {1;uW cY%FlAօxJlSb<^6mE9䏅sR++d%Y<X(G蒊8o^՛ wcOӋ3 Sv\#5KyjirW>=΋5 nU00Ф01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1&0$U Thales TSS ESN:7AB5-2DF2-DA3F1%0#UMicrosoft Time-Stamp Service% 0 +%adyXL﶑(0פ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1%0#U Microsoft America Operations1'0%U nCipher NTS ESN:2665-4C3F-C5DE1+0)U"Microsoft Time Source Master Clock0  *H a0"20181004213037Z20181005213037Z0v0< +Y 1.0,0 a0 00 bV}06 +Y 1(0&0  +Y  0` 0 0  *H >'6LN_xtmIhUaA&U  HE?f3Ad3@qN(yOO빓o`B=wEǎ~ Dѩ127pxw :]#|8VsTObSs{ W%!>'Z:h*e͂@]+ݮQ{& RK~(UO,KCjC NxJUUx8r'5?Ǝ-e 5|+1000|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103;ѷ[K0  `He20 *H  1  *H  0/ *H  1" &_Jۣ5#Gl'Wd0 *H   1000%adyXL﶑(00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103;ѷ[K0vpS*託 J-0  *H  $`rкf?>G [GA{ꉇݔA ?\-b gӥVP/c/Nlt#4M-y[oQ!2~3DM!Zi|l44pVjH:om^ͭ~}L*1gpʰ8lOSזtb%~L]$mos"8*5rLiBLޖ>,Jg$}vǗ"99`J'ѵKI..-CМ