* added user-mode rundown support * [bugfix] EVENT_TRACE_FLAG_DISK_FILE_IO enables events for the FileIo provider * added examples for kernel rundown events (#138) * added user-mode rundown support to C++/CLI API