admin/repnz-etw-providers-docs
1
0
Fork 0
mirror of https://github.com/repnz/etw-providers-docs synced 2026-06-08 17:06:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
repnz-etw-providers-docs/Manifests-Win10-17134/Microsoft-Windows-EventSystem.xml
T
repnz 31246a5c11 Document the dumper
2019-06-24 19:32:07 +03:00

115 lines
8.5 KiB
XML
Raw Permalink Blame History

<instrumentationManifest xmlns="http://schemas.microsoft.com/win/2004/08/events">
<instrumentation xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
<events>
<provider name="Microsoft-Windows-EventSystem" guid="{899daace-4868-4295-afcd-9eb8fb497561}" resourceFileName="Microsoft-Windows-EventSystem" messageFileName="Microsoft-Windows-EventSystem" symbol="MicrosoftWindowsEventSystem" source="Xml" >
<keywords>
</keywords>
<tasks>
<task name="task_0" message="$(string.task_task_0)" value="0">
>
<opcodes>
<opcode name="opcode_64" message="$(string.opcode_task_0opcode_64)" value="64"/>
<opcode name="opcode_128" message="$(string.opcode_task_0opcode_128)" value="128"/>
<opcode name="opcode_192" message="$(string.opcode_task_0opcode_192)" value="192"/>
</opcodes>
</task>
</tasks>
<events>
<event value="512" symbol="task_0" version="0" task="task_0" level="win:Always" template="task_0Args"/>
<event value="4354" symbol="task_0PCODE_128pcode_128" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_128Args"/>
<event value="4355" symbol="task_0PCODE_128pcode_1284355" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4356" symbol="task_0PCODE_128pcode_1284356" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4357" symbol="task_0PCODE_128pcode_1284357" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284357Args"/>
<event value="4358" symbol="task_0PCODE_128pcode_1284358" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284358Args"/>
<event value="4359" symbol="task_0PCODE_128pcode_1284359" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284359Args"/>
<event value="4361" symbol="task_0PCODE_128pcode_1284361" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284358Args"/>
<event value="4362" symbol="task_0PCODE_128pcode_1284362" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0Args"/>
<event value="4609" symbol="task_0PCODE_128pcode_1284609" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4610" symbol="task_0PCODE_192pcode_192" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4611" symbol="task_0PCODE_128pcode_1284611" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284358Args"/>
<event value="4612" symbol="task_0PCODE_192pcode_1924612" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284358Args"/>
<event value="4613" symbol="task_0PCODE_128pcode_1284613" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284357Args"/>
<event value="4614" symbol="task_0PCODE_128pcode_1284614" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4615" symbol="task_0PCODE_192pcode_1924615" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284357Args"/>
<event value="4616" symbol="task_0PCODE_192pcode_1924616" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284357Args"/>
<event value="4619" symbol="task_0PCODE_192pcode_1924619" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4620" symbol="task_0PCODE_192pcode_1924620" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284359Args"/>
<event value="4621" symbol="task_0PCODE_192pcode_1924621" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284357Args"/>
<event value="4622" symbol="task_0PCODE_192pcode_1924622" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284358Args"/>
<event value="4623" symbol="task_0PCODE_192pcode_1924623" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284359Args"/>
<event value="4624" symbol="task_0PCODE_192pcode_1924624" version="0" task="task_0" opcode="opcode_192" level="win:Always" template="task_0PCODE_128pcode_1284357Args"/>
<event value="4625" symbol="task_0PCODE_64pcode_64" version="0" task="task_0" opcode="opcode_64" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4626" symbol="task_0PCODE_64pcode_644626" version="0" task="task_0" opcode="opcode_64" level="win:Always" template="task_0PCODE_128pcode_128Args"/>
<event value="4627" symbol="task_0PCODE_128pcode_1284627" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284627Args"/>
<event value="4628" symbol="task_0PCODE_128pcode_1284628" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284355Args"/>
<event value="4629" symbol="task_0PCODE_128pcode_1284629" version="0" task="task_0" opcode="opcode_128" level="win:Always" template="task_0PCODE_128pcode_1284629Args"/>
</events>
<templates>
<template tid="task_0Args">
<data name="param1" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_128Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
<data name="param3" inType="win:UnicodeString"/>
<data name="param4" inType="win:UnicodeString"/>
<data name="param5" inType="win:UnicodeString"/>
<data name="param6" inType="win:UnicodeString"/>
<data name="param7" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_1284355Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
<data name="param3" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_1284357Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
<data name="param3" inType="win:UnicodeString"/>
<data name="param4" inType="win:UnicodeString"/>
<data name="param5" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_1284358Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_1284359Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
<data name="param3" inType="win:UnicodeString"/>
<data name="param4" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_1284627Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
<data name="param3" inType="win:UnicodeString"/>
<data name="param4" inType="win:UnicodeString"/>
<data name="param5" inType="win:UnicodeString"/>
<data name="param6" inType="win:UnicodeString"/>
<data name="param7" inType="win:UnicodeString"/>
<data name="param8" inType="win:UnicodeString"/>
</template>
<template tid="task_0PCODE_128pcode_1284629Args">
<data name="param1" inType="win:UnicodeString"/>
<data name="param2" inType="win:UnicodeString"/>
<data name="param3" inType="win:UnicodeString"/>
<data name="param4" inType="win:UnicodeString"/>
<data name="param5" inType="win:UnicodeString"/>
<data name="param6" inType="win:UnicodeString"/>
</template>
</templates>
</provider>
</events>
</instrumentation>
<localization>
<resources culture="en-US">
<stringTable>
<string id="task_task_0" value="task_0"/>
<string id="opcode_task_0opcode_64" value="opcode_64"/>
<string id="opcode_task_0opcode_128" value="opcode_128"/>
<string id="opcode_task_0opcode_192" value="opcode_192"/>
</stringTable>
</resources>
</localization>
</instrumentationManifest>
Reference in New Issue View Git Blame Copy Permalink