�����JFIF��XX����������    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222�����"����4���������������������������� ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������,�PG"Z_�4�˷����kjز�Z�,F+��_z�,�© �����zh6�٨�ic�fu������������������������������������#ډb���_�N��?�����������wQ���5-�~�I���8���������������������������������TK<5o�Iv-������������������k�_U_������������������������������~b�M��d��������Ӝ�U�Hh��?]��E�w��Q���k�{��_}qFW7HTՑ��Y��F�����?_�'ϔ��_�Ջt������������������������=||I �����6�έ"�����D���/[�k�9����Y�8������ds|\���Ҿp6�Ҵ���]��.����6���z<�v��@]�i%������������������������$j��~����g��J>��no����pM[me�i$[�����������s�o�ᘨ�˸ nɜG-�ĨU�ycP���3.DB�li�;���������������������hj���x����7Z^�N�h��������N3u{�:j�����x�힞��#M��&��jL P@��_���� P�������������������&��o8��������9������@Sz���6�t7#O�ߋ �����s}Yf�T������lmr����Z)'N��k�۞p�����w\�T���������������ȯ?�8`���O��i{wﭹW�[�r�� ��Q4F�׊������3m&L�=��h3�������z~��#����\�l :�F,j@�� ʱ�wQT����8�"kJO����6�֚l������������������}����R�>ډK���]��y����&����p�}b������;N�1�m�r$����|��7�>e�@���B�TM*-i�H��g�D�)� E�m�|�ؘbҗ�a���Ҿ����������������t4�����o���G��*oCN�rP���Q��@z,|?W[0���������:�n,j���WiE��W������$~/�hp\��?��{(�0���+�Y8rΟ�+����>S-S���������������VN;���}�s?.����� w��9��˟<���Mq4�Wv'������{)0�1mB����V����W[��������8�/<� �%���wT^�5���b��)iM� p�g�N�&ݝ������������VO~��q���u���9��� ����!��J27�����$����O-���! �:���%H��� ـ�������y�ΠM=t{!S�� �oK8�������t<����è��������:a��������[������ա�H���~��w��Qz`�p����o�^ ������Q��n����� �,uu�C��$ ^���,�������8�#��:�6��e�|~�����������!�3��3.�\0�����q��o�4`.|� ����y�Q�`~;�d�ׯ,��O�Zw�������`73�v�܋�<�����Ȏ�� ـ4k��5�K�a�u�=9Yd��$>x�A�&�� j0� ���vF��� Y���|�y��� ~�6�@c��1vOp��������Ig�����4��l�OD�����L����� R���c���j�_�uX�6��3?nk��Wy�f;^*B� ��@���~a�`��Eu�������+�����6�L��.ü>��}y���}_�O�6�͐�:�Yr���G�X��kG������l^w����������~㒶sy���Iu�!���� W ��X��N�7BV��O��!X�2����wvG�R�f�T#�����t�/?���%8�^�W�aT����G�cL�M���I��(J����1~�8�?aT ���]����AS�E��(��*E}� 2������#I/�׍qz��^t�̔���������b�Yz4x����t�){ OH�����+(E��A&�N�������XT��o��"�XC����'���)}�J�z�p� ����~5�}�^����+�6����w��c��Q�|�Lp�d�H��}�(�.|����k��c4^�����"�����Z?ȕ ��a<�������L�!0�39C� �Eu�����C�F�Ew�ç ;�n?�*o���B�8�bʝ���'#Rqf����M}7����]�������s2tcS{�\icTx;�\��7K���P������ʇ Z O-��~�������c>"��?��������P�����E��O�8��@�8��G��Q�g�a�Վ���󁶠��䧘��_%#r�>�����1�z�a���eb��qcP��ѵ��n���#L��� =��׀t� L�7�`�����V����A{�C:�g���e@�����w1 Xp�3�c3�ġ�������p��M"'-�@n4���fG���B3�DJ�8[Jo�ߐ���gK)ƛ��$���� �������8�3�����+���� �����6�ʻ���� ���S�kI�*KZlT _`�������?��K�����QK�d���������B`�s}�>���`������*�>��,*@J�d�oF*�����弝��O}�k��s��]��y�ߘ�������c1G�V���<=�7��7����6��q�PT��tXԀ�!9*4�4Tހ���3XΛex�46�������Y��D ����� ����BdemDa����\�_l,����G�/���֌7���Y�](�xTt^%�GE�����4�}bT����ڹ�����;��Y)���B�Q��u��>J/J ���⮶.�XԄ��j�ݳ������+E��d ���r�5�_D�����1 ���o�� �B�x�΢�#����<��W�����8���R6�@���g�M�.��� dr�D��>(otU��@�x=��~v���2� ӣ�d�oBd�����3�eO�6�㣷����������ݜ�6��6Y��Qz`����S��{���\P��~z m5{J/L��1������<�e�ͅPu���b�]�ϔ��������'�������f�b� Zpw��c`"��i���BD@:)ִ�:�]��h���v�E��w���T�l�������P����"Ju�}��وV ��J��G6��. J/�Qgl߭�e�����@�z�Zev2u����)]կ���������7x�������s�M�-<ɯ�c��r��v�����@��$�ޮ}lk���a����'����>x��O\�Z������Fu>������ck#��&:��`�$��ai�>2Δ����l���oF[h�������lE�ܺ�Π���k:)���`������� $[6�����9�����kOw�\|�����8}������ބ:��񶐕��������I�A1/���=�2[�,�!��.}gN#�u����b���� ~���������݊��}34q�����d�E��L��������c��$���"�[q�U�硬g^��%B ��z���r�p�������J�ru%v\h�����1Y�ne`������ǥ:g����pQM~�^��Xi� ��`S�:V2������9.�P���V������?B�k�� ��������AEvw%�_�9C�Q����wKekP�ؠ�\������;Io d�{ ߞo�c1eP�����\� `����E=���@K<�Y��������eڼ�J����w����{av�F�'�M�@��������������/J��+9p����|]���������Iw &`���8���&�M�hg���[�{�������Xj���%��Ӓ�������������������$��(�����ʹN�������<>�I���RY�����K2�NPlL�ɀ�)��&e��������B+ь����(������������������� � �JTx����_?EZ� }@���� 6�U���뙢ط�z��dWI��n` D����噥�[��uV��"�G&�����Ú����2�g�}&m���������������������?ċ���"����Om#�������������������������� ��{���������������������ON��"S�X���Ne��ysQ���@�������������Fn��Vg�����dX�~nj����������������������]J�<�K]:����FW���b�������62����������=��5f����JKw����bf�X������������������������55��~J �%^�������:�-�QIE��P��v�nZum� z � ~ə ���� ���ة����;�f��\v�������g�8�1��f2�������������������������4;�V���ǔ�)�������������������9���1\������������������������������c��v�/'Ƞ�w������������������$�4�R-��t����������������������������������� e�6�/�ġ �̕Ecy�J���u�B���<�W�ַ~�w[B1L۲�-JS΂�{���΃�������������������������������������������A��20�c#���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������@���� 0!1@AP"#2Q`$3V�%45a6�FRUq����� ������^7ׅ,$n��������+��F�`��2X'��0vM��p�L=�������5��8������u�p~���.�`r�����\����O��,ư�0oS ��_�M�����l���4�kv\JSd���x���SW�<��Ae�IX����������$I���w�:S���y���›R��9�Q[���,�5�;�@]�%���u�@ *ro�lbI �� ��+���%m:�͇ZV�����u�̉����θau<�fc�.����{�4Ա� �Q����*�Sm��8\ujqs]{kN���)qO�y�_*dJ�b�7���yQqI&9�ԌK!�M}�R�;�������S�T���1���i[U�ɵz�]��U)V�S6���3$K{��ߊ<�(� E]Զ[ǼENg�����'�\?#)Dkf��J���o��v���'�%ƞ�&K�u��!��b�35LX�Ϸ��63$K�a�;�9>,R��W��3�3� d�JeTYE.Mϧ��-�o�j3+y��y^�c�������VO�9NV\nd�1 ��!͕_)a�v;����թ�M�lWR1��)El��P;��yوÏ�u 3�k�5Pr6<�⒲l�!˞*��u־�n�!�l:����UNW ��%��Chx8vL'��X�@��*��)���̮��ˍ��� ����D-M�+J�U�kvK����+�x8��cY������?�Ԡ��~3mo��|�u@[XeY�C�\Kp�x8�oC�C�&����N�~3-H���� ��MX�s�u<`���~"WL��$8ξ��3���a�)|:@�m�\���^�`�@ҷ)�5p+��6���p�%i)P M���ngc�����#0Aruz���RL+xSS?���ʮ}()#�t��mˇ!��0}}y����<�e� �-ή�Ԩ��X������ MF���ԙ~l L.3���}�V뽺�v������멬��Nl�)�2����^�Iq��a��M��qG��T�����c3#������3U�Ǎ���}��לS�|qa��ڃ�+���-��2�f����/��bz��ڐ�� �ݼ[2�ç����k�X�2�* �Z�d���J�G����M*9W���s{��w���T��x��y,�in�O�v��]���n����P�$��JB@=4�OTI�n��e�22a\����q�d���%�$��(���:���: /*�K[PR�fr\nڙdN���F�n�$�4��[�� U�zƶ����� �mʋ���,�ao�u 3�z� �x��Kn����\[��VFmbE;�_U��&V�Gg�]L�۪&#n%�$ɯ��dG���D�TI=�%+AB�Ru#��b4�1�»x�cs�YzڙJG��f��Il���d�eF'T� iA��T���uC�$����Y��H?����[!G`}���ͪ� �纤Hv\������j�Ex�K���!���OiƸ�Yj�+u-<���'q����uN�*�r\��+�]���<�wOZ.fp�ێ��,-*)V?j-kÊ#�`�r��dV����(�ݽBk�����G�ƛk�QmUڗe��Z���f}|����8�8��a���i��3'J�����~G_�^���d�8w������ R�`(�~�.��u���l�s+g�bv���W���lGc}��u���afE~1�Ue������Z�0�8�=e�� f@/�jqEKQQ�J���oN��J���W5~M>$6�Lt�;$ʳ{���^��6�{����v6���ķܰg�V�cnn �~z�x�«�,2�u�?cE+Ș�H؎�%�Za�)���X>uW�Tz�Nyo����s���FQƤ��$��*�&�LLXL)�1�" L��eO��ɟ�9=���:t��Z���c��Ž���Y?�ӭV�wv�~,Y��r�ۗ�|�y��GaF�����C�����.�+� ���v1���fήJ�����]�S��T��B��n5sW}y�$��~z�'�c ��8 ��� ,! �p��VN�S��N�N�q��y8z˱�A��4��*��'������2n<�s���^ǧ˭P�Jޮɏ�U�G�L�J�*#��<�V��t7�8����TĜ>��i}K%,���)[��z�21z ?�N�i�n1?T�I�R#��m-�����������������1����lA�`��fT5+��ܐ�c�q՝��ʐ��,���3�f2U�եmab��#ŠdQ�y>\��)�SLY����w#��.���ʑ�f��� ,"+�w�~�N�'�c�O�3F�������N<���)j��&��,-� �љ���֊�_�zS���TǦ����w�>��?�������n��U仆�V���e�����0���$�C�d���rP �m�׈e�Xm�Vu� �L��.�bֹ��� �[Դaզ���*��\y�8�Է:�Ez\�0�Kq�C b��̘��cө���Q��=0Y��s�N��S.����3.���O�o:���#���v7�[#߫ ��5�܎�L���Er4���9n��COWlG�^��0k�%<���ZB���aB_���������'=��{i�v�l�$�uC���mƎҝ{�c㱼�y]���W�i ��ߧc��m�H� m�"�"�����;Y�ߝ�Z�Ǔ�����:S#��|}�y�,/k�Ld� TA�(�AI$+I3��;Y*���Z��}|��ӧO��d�v��..#:n��f>�>���ȶI�TX��� 8��y����"d�R�|�)0���=���n4��6ⲑ�+��r<�O�܂~zh�z����7ܓ�HH�Ga롏���nCo�>������a ���~]���R���̲c?�6(�q�;5%� |�uj�~z8R�=X��I�V=�|{v�Gj\gc��q����z�؋%M�ߍ����1y��#��@f^���^�>N������#x#۹��6�Y~�?�dfPO��{��P�4��V��u1E1J �*|���%����JN��`eWu�zk M6���q t[�� ��g�G���v��WIG��u_ft����5�j�"�Y�:T��ɐ���*�;� e5���4����q$C��2d�}���� _S�L#m�Yp��O�.�C�;��c����Hi#֩%+) �Ӎ��ƲV���SYź��g |���tj��3�8���r|���V��1#;.SQ�A[���S������#���`n�+���$��$�I �P\[�@�s��(�ED�z���P��])8�G#��0B��[ى��X�II�q<��9�~[Z멜�Z�⊔IWU&A>�P~�#��dp<�?����7���c��'~���5 ��+$���lx@�M�dm��n<=e�dyX��?{�|Aef ,|n3�<~z�ƃ�uۧ�����P��Y,�ӥQ�*g�#먙R�\���;T��i,��[9Qi歉����c>]9�� ��"�c��P�� �Md?٥��If�ت�u��k��/����F��9�c*9��Ǎ:�ØF���z�n*�@|I�ށ9����N3{'��[�'ͬ�Ҳ4��#}��!�V� Fu��,�,mTIk���v C�7v���B�6k�T9��1�*l� '~��ƞF��lU��'�M ����][ΩũJ_�{�i�I�n��$����L�� j��O�dx�����kza۪��#�E��Cl����x˘�o�����V���ɞ�ljr��)�/,�߬h�L��#��^��L�ф�,íMƁe�̩�NB�L�����iL����q�}��(��q��6IçJ$�W�E$��:������=#����(�K�B����zђ <��K(�N�۫K�w��^O{!����)��H���>x�������lx�?>Պ�+�>�W���,Ly!_�D���Ō�l���Q�!�[ �S����J��1��Ɛ�Y}��b,+�Lo�x�ɓ)����=�y�oh�@�꥟/��I��ѭ=��P�y9��� �ۍYӘ�e+�p�Jnϱ?V\SO%�(�t� ���=?MR�[Ș�����d�/ ��n�l��B�7j� ��!�;ӥ�/�[-���A�>��dN�sLj ��,ɪv��=1c�.SQ�O3�U���ƀ�ܽ�E����������̻��9G�ϷD�7(�}��Ävӌ\��y�_0[w ���<΍>����a_��[0+�L��F.�޺��f�>oN�T����q;���y\��bՃ��y�jH�<|q-eɏ�_?_9+P���Hp$�����[ux�K w�Mw��N�ی'$Y2�=��q���KB��P��~�������Yul:�[<����F1�2�O���5=d����]Y�sw:���Ϯ���E��j,_Q��X��z`H1,#II ��d�wr��P˂@�ZJV����y$�\y�{}��^~���[:N����ߌ�U�������O��d�����ؾe��${p>G��3c���Ė�lʌ�� ת��[��`ϱ�-W����dg�I��ig2��� ��}s ��ؤ(%#sS@���~���3�X�nRG�~\jc3�v��ӍL��M[JB�T��s3}��j�Nʖ��W����;7���ç?=X�F=-�=����q�ߚ���#���='�c��7���ڑW�I(O+=:uxq�������������e2�zi+�kuG�R��������0�&e�n���iT^J����~\jy���p'dtG��s����O��3����9* �b#Ɋ�� p������[Bws�T�>d4�ۧs���nv�n���U���_�~,�v����ƜJ1��s�� �QIz���)�(lv8M���U=�;����56��G���s#�K���MP�=��LvyGd��}�VwWBF�'�à �?MH�U�g2�� ����!�p�7Q��j��ڴ����=��j�u��� Jn�A s���uM������e��Ɔ�Ҕ�!)�'��8Ϣ�ٔ���ޝ(��Vp���צ֖d=�IC�J�Ǡ{q������kԭ�߸���i��@K����u�|�p=..�*+����x�����z[Aqġ#s2a�Ɗ���RR�)*HRsi�~�a &f��M��P����-K�L@��Z��Xy�'x�{}��Zm+���:�)�) IJ�-i�u���� ���ܒH��'��L(7�y�GӜq���� j��� 6ߌg1�g�o���,kر���tY�?W,���p���e���f�OQS��!K�۟cҒA�|ս�j�>��=⬒��˧L[�� �߿2JaB~R��u�:��Q�] �0H~���]�7��Ƽ�I���(�}��cq '�ήET���q�?f�ab���ӥvr� �)o��-Q��_'����ᴎo��K������;��V���o��%���~OK ����*��b�f:���-ťIR��`B�5!RB@���ï�� �u �̯e\�_U�_������� g�ES��3��������QT��a�����x����U<~�c?�*�#]�MW,[8O�a�x��]�1bC|踤�P��lw5V%�)�{t�<��d��5���0i�XSU��m:��Z�┵�i�"��1�^B�-��P�hJ��&)O��*�D��c�W��vM��)����}���P��ܗ-q����\mmζZ-l@�}��a��E�6��F�@��&Sg@���ݚ�M����� ȹ 4����#p�\H����dYDo�H���"��\��..R�B�H�z_�/5˘����6��KhJR��P�mƶi�m���3��,#c�co��q�a)*P�t����R�m�k�7x�D�E�\Y�閣_X�<���~�)���c[[�BP����6�Yq���S��0����%_����;��Àv�~�| VS؇ ��'O0��F0��\���U�-�d@�����7�SJ*z��3n��y��P����O����������m�~�P�3|Y��ʉr#�C�<�G~�.,! ���bqx���h~0=��!ǫ�jy����l��O,�[B��~��|9��ٱ����Xly�#�i�B��g%�S��������tˋ���e���ې��\[d�t)��.+u�|1 ������#�~Oj����hS�%��i.�~X���I�H�m��0n���c�1uE�q��cF�RF�o���7� �O�ꮧ� ���ۛ{��ʛi5�rw?׌#Qn�TW��~?y$��m\�\o����%W� ?=>S�N@�� �Ʈ���R����N�)�r"C�:��:����� �����#��qb��Y�. �6[��2K����2u�Ǧ�HYR��Q�MV��� �G�$��Q+.>�����nNH��q�^��� ����q��mM��V��D�+�-�#*�U�̒ ���p욳��u:�������IB���m����PV@O���r[b= �� ��1U�E��_Nm�yKbN�O���U�}�the�`�|6֮P>�\2�P�V���I�D�i�P�O;�9�r�mAHG�W�S]��J*�_�G��+kP�2����Ka�Z���H�'K�x�W�MZ%�O�YD�Rc+o��?�q��Ghm��d�S�oh�\�D�|:W������UA�Qc yT�q��������~^�H��/��#p�CZ���T�I�1�ӏT����4��"�ČZ�����}��`w�#�*,ʹ�� ��0�i��課�Om�*�da��^gJ݅{���l�e9uF#T�ֲ��̲�ٞC"�q���ߍ ոޑ�o#�XZTp����@ o�8��(jd��xw�]�,f���`~��|,s��^����f�1���t��|��m�򸄭/ctr��5s��7�9Q�4�H1꠲BB@�l9@���C�����+�wp�xu�£Yc�9��?`@#�o�mH�s2��)�=��2�.�l����jg�9$�Y�S�%*L������R�Y������7Z���,*=�䷘$�������arm�o�ϰ���UW.|�r�uf����IGw�t����Zwo��~5 ��YյhO+=8fF�)�W�7�L9lM�̘·Y���֘YLf�큹�pRF���99.A �"wz��=E\Z���'a� 2��Ǚ�#;�'}�G���*��l��^"q��+2FQ� hj��kŦ��${���ޮ-�T�٭cf�|�3#~�RJ����t��$b�(R��(����r���dx� >U b�&9,>���%E\� Ά�e�$��'�q't��*�א���ެ�b��-|d���SB�O�O��$�R+�H�)�܎�K��1m`;�J�2�Y~9��O�g8=vqD`K[�F)k�[���1m޼c��n���]s�k�z$@��)!I �x՝"v��9=�ZA=`Ɠi �:�E��)`�7��vI��}d�YI�_ �o�:ob���o ���3Q��&D&�2=�� �Ά��;>�h����y.*ⅥS������Ӭ�+q&����j|UƧ�����}���J0��WW< ۋS�)jQR�j���Ư��rN)�Gű�4Ѷ(�S)Ǣ�8��i��W52���No˓� ۍ%�5brOn�L�;�n��\G����=�^U�dI���8$�&���h��'���+�(������cȁ߫k�l��S^���cƗjԌE�ꭔ��gF���Ȓ��@���}O���*;e�v�WV���YJ\�]X'5��ղ�k�F��b 6R�o՜m��i N�i�����>J����?��lPm�U��}>_Z&�KK��q�r��I�D�Չ~�q�3fL�:S�e>���E���-G���{L�6p�e,8��������QI��h��a�Xa��U�A'���ʂ���s�+טIjP�-��y�8ۈZ?J$��W�P� ��R�s�]��|�l(�ԓ��sƊi��o(��S0���Y� 8�T97.�����WiL��c�~�dxc�E|�2!�X�K�Ƙਫ਼�$((�6�~|d9u+�qd�^3�89��Y�6L�.I�����?���iI�q���9�)O/뚅����O���X��X�V��ZF[�یgQ�L��K1���RҖr@v�#��X�l��F���Нy�S�8�7�kF!A��sM���^rkp�jP�DyS$N���q���nxҍ!U�f�!eh�i�2�m����`�Y�I�9r�6� �TF���C}/�y�^���Η���5d�'��9A-��J��>{�_l+�`��A���[�'��յ�ϛ#w:݅�%��X�}�&�PSt�Q�"�-��\縵�/����$Ɨh�Xb�*�y��BS����;W�ջ_mc�����vt?2}1�;qS�d�d~u:2k5�2�R�~�z+|HE!)�Ǟl��7`��0�<�,�2*���Hl-��x�^����'_TV�gZA�'j� ^�2Ϊ��N7t�����?w�� �x1��f��Iz�C-Ȗ��K�^q�;���-W�DvT�7��8�Z�������� hK�(P:��Q- �8�n�Z���܃e貾�<�1�YT<�,�����"�6{�/ �?�͟��|1�:�#g��W�>$����d��J��d�B���=��jf[��%rE^��il:��B���x���Sּ�1հ��,�=��*�7 fcG��#q� �eh?��2�7�����,�!7x��6�n�LC�4x��},Geǝ�tC.��vS �F�43��zz\��;QYC,6����~;RYS/6���|2���5���v��T��i����������mlv��������&� �nRh^ejR�LG�f���? �ۉҬܦƩ��|��Ȱ����>3����!v��i�ʯ�>�v��オ�X3e���_1z�Kȗ\<������!�8���V��]��?b�k41�Re��T�q��mz��TiOʦ�Z��Xq���L������q"+���2ۨ��8}�&N7XU7Ap�d�X��~�׿��&4e�o�F��� �H�����O���č�c�� 懴�6���͉��+)��v;j��ݷ�� �UV�� i��� j���Y9GdÒJ1��詞�����V?h��l�����l�cGs�ځ�������y�Ac������\V3�? �� ܙg�>qH�S,�E�W�[�㺨�uch�⍸�O�}���a��>�q�6�n6�����N6�q��������N� ���! 1AQaq�0@����"2BRb�#Pr���3C`��Scst���$4D���%Td���� ?�����N����a��3��m���C���w��������xA�m�q�m����m������$����4n淿t'��C"w��zU=D�\R+w�p+Y�T�&�պ@��ƃ��3ޯ?�Aﶂ��aŘ���@-�����Q�=���9D��ռ�ѻ@��M�V��P��܅�G5�f�Y<�u=,EC)�<�Fy'�"�&�չ�X~f��l�KԆV��?�� �W�N����=(� �;���{�r����ٌ�Y���h{�١������jW����P���Tc�����X�K�r��}���w�R��%��?���E��m�� �Y�q|����\lEE4����r���}�lsI�Y������f�$�=�d�yO����p�����yBj8jU�o�/�S��?�U��*������ˍ�0�������u�q�m [�?f����a�� )Q�>����6#������� ?����0UQ����,IX���(6ڵ[�DI�MNލ�c&���υ�j\��X�R|,4��� j������T�hA�e��^���d���b<����n�� �즇�=!���3�^�`j�h�ȓr��jẕ�c�,ٞX����-����a�ﶔ���#�$��]w�O��Ӫ�1y%��L�Y<�wg#�ǝ�̗`�x�xa�t�w��»1���o7o5��>�m뭛C���Uƃߜ}�C���y1Xνm�F8�jI���]����H���ۺиE@I�i;r�8ӭ�����V�F�Շ| ��&?�3|x�B�MuS�Ge�=Ӕ�#BE5G������Y!z��_e��q�р/W>|-�Ci߇�t�1ޯќd�R3�u��g�=0 5��[?�#͏��q�cf���H��{ ?u�=?�?ǯ���}Z��z���hmΔ�BFTW�����<�q��(v� ��!��z���iW]*�J�V�z��gX֧A�q�&��/w���u�gYӘa���; �i=����g:��?2�dž6�ى�k�4�>�Pxs����}������G�9���3 ���)gG�R<>r h�$��'nc�h�P��Bj��J�ҧH� -��N1���N��?��~��}-q!=��_2hc�M��l�vY%UE�@|�v����M2�.Y[|y�"Eï��K�ZF,�ɯ?,q�?v�M 80jx�"�;�9vk�����+ ֧�� �ȺU��?�%�vcV��mA�6��Qg^M�����A}�3�nl� QRN�l8�kkn�'�����(��M�7m9و�q���%ޟ���*h$Zk"��$�9��: �?U8�Sl��,,|ɒ��xH(ѷ����Gn�/Q�4�P��G�%��Ա8�N��!� �&�7�;���eKM7�4��9R/%����l�c>�x;������>��C�:�����t��h?aKX�bhe�ᜋ^�$�Iհ �hr7%F$�E��Fd���t��5���+�(M6�t����Ü�UU|zW�=a�Ts�Tg������dqP�Q����b'�m���1{|Y����X�N��b �P~��F^F:����k6�"�j!�� �I�r�`��1&�-$�Bevk:y���#y�w��I0��x��=D�4��tU���P�ZH��ڠ底taP��6����b>�xa�����Q�#� WeF��ŮNj�p�J* mQ�N�����*I�-*�ȩ�F�g�3 �5��V�ʊ�ɮ�a��5F���O@{���NX��?����H�]3��1�Ri_u��������ѕ�� ����0��� F��~��:60�p�͈�S��qX#a�5>���`�o&+�<2�D����: �������ڝ�$�nP���*)�N�|y�Ej�F�5ټ�e���ihy�Z �>���k�bH�a�v��h�-#���!�Po=@k̆IEN��@��}Ll?j�O������߭�ʞ���Q|A07x���wt!xf���I2?Z��<ץ�T���cU�j��]���陎Ltl �}5�ϓ��$�,��O�mˊ�;�@O��jE��j(�ا,��LX���LO���Ц�90�O �.����a��nA���7������j4 ��W��_ٓ���zW�jcB������y՗+EM�)d���N�g6�y1_x��p�$Lv�:��9�"z��p���ʙ$��^��JԼ*�ϭ����o���=x�Lj�6�J��u82�A�H�3$�ٕ@�=Vv�]�'�qEz�;I˼��)��=��ɯ���x �/�W(V���p�����$ �m�������u�����񶤑Oqˎ�T����r��㠚x�sr�GC��byp�G��1ߠ�w e�8�$⿄����/�M{*}��W�]˷.�CK\�ުx���/$�WP�w���r� |i���&�}�{�X� �>��$-��l���?-z���g����lΆ���(F���h�vS*���b���߲ڡn,|)mrH[���a�3�ר�[1��3o_�U�3�TC�$��(�=�)0�kgP���� ��u�^=��4 �WYCҸ:��vQ�ר�X�à��tk�m,�t*��^�,�}D*�� �"(�I��9R����>`�`��[~Q]�#af��i6l��8���6�:,s�s�N6�j"�A4���IuQ��6E,�GnH��zS�HO�uk�5$�I�4��ؤ�Q9�@��C����wp��BGv[]�u�Ov����0I4���\��y�����Q�Ѹ��~>Z��8�T��a��q�ޣ;z��a���/��S��I:�ܫ_�|������>=Z����8:�S��U�I�J��"IY���8%b8���H��:�QO�6�;7�I�S��J��ҌAά3��>c���E+&jf$eC+�z�;��V����� �r���ʺ������my�e���aQ�f&��6�ND���.:��NT�vm�<- u���ǝ\MvZY�N�NT��-A�>jr!S��n�O 1�3�Ns�%�3D@���`������ܟ 1�^c<���� �a�ɽ�̲�Xë#�w�|y�cW�=�9I*H8�p�^(4���՗�k��arOcW�tO�\�ƍR��8����'�K���I�Q�����?5�>[�}��yU�ײ -h��=��% q�ThG�2�)���"ו3]�!kB��*p�FDl�A���,�eEi�H�f�Ps�����5�H:�Փ~�H�0Dت�D�I����h�F3�������c��2���E��9�H��5�zԑ�ʚ�i�X�=:m�xg�hd(�v����׊�9iS��O��d@0ڽ���:�p�5�h-��t�&���X�q�ӕ,��ie�|���7A�2���O%P��E��htj��Y1��w�Ѓ!����  ���� ࢽ��My�7�\�a�@�ţ�J ��4�Ȼ�F�@o�̒?4�wx��)��]�P��~�����u�����5�����7X ��9��^ܩ�U;Iꭆ 5 �������eK2�7(�{|��Y׎ �V��\"���Z�1� Z�����}��(�Ǝ"�1S���_�vE30>���p;� ΝD��%x�W�?W?v����o�^V�i�d��r[��/&>�~`�9Wh��y�;���R���� ;;ɮT��?����r$�g1�K����A��C��c��K��l:�'��3 c�ﳯ*"t8�~l��)���m��+U,z��`(��>yJ�?����h>��]��v��ЍG*�{`��;y]��I�T� ;c��NU�fo¾h���/$���|NS���1�S�"�H��V���T���4��uhǜ�]�v;���5�͠x��'C\�SBpl���h}�N����� A�Bx���%��ޭ�l��/����T��w�ʽ]D�=����K���ž�r㻠l4�S�O?=�k �M:� ��c�C�a�#ha���)�ѐxc�s���gP�iG���{+���x���Q���I= �� z��ԫ+ �8"�k�ñ�j=|����c ��y��CF��/���*9ж�h{ �?4�o� ��k�m�Q�N�x��;�Y��4膚�a�w?�6�>�e]�����Q�r�:����g�,i"�����ԩA��*M�<�G��b�if��l^M��5�� �Ҩ�{����6J��ZJ�����P�*�����Y���ݛu�_4�9�I8�7���������,^ToR���m4�H��?�N�S�ѕw��/S��甍�@�9H�S�T��t�ƻ���ʒU��*{Xs�@����f������֒Li�K{H�w^���������Ϥm�tq���s� ���ք��f:��o~s��g�r��ט� �S�ѱC�e]�x���a��) ���(b-$(�j>�7q�B?ӕ�F��hV25r[7 Y� }L�R��}����*sg+��x�r�2�U=�*'WS��ZDW]�WǞ�<��叓���{�$�9Ou4��y�90-�1�'*D`�c�^o?(�9��u���ݐ��'PI&� f�Jݮ�������:wS����jfP1F:X �H�9dԯ����˝[�_54 �}*;@�ܨ�� ð�yn�T���?�ןd�#���4rG�ͨ��H�1�|-#���Mr�S3��G�3�����)�.᧏3v�z֑��r����$G"�`j �1t��x0<Ɔ�Wh6�y�6��,œ�Ga��gA����y��b��)���h�D��ß�_�m��ü �gG;��e�v��ݝ�nQ� ��C����-�*��o���y�a��M��I�>�<���]obD��"�:���G�A��-\%LT�8���c�)��+y76���o�Q�#*{�(F�⽕�y����=���rW�\p���۩�c���A���^e6��K������ʐ�cVf5$�'->���ՉN"���F�"�UQ@�f��Gb~��#�&�M=��8�ט�JNu9��D��[̤�s�o�~������� G��9T�tW^g5y$b��Y'��س�Ǵ�=��U-2 #�MC�t(�i� �lj�@Q 5�̣i�*�O����s�x�K�f��}\��M{E�V�{�υ��Ƈ�����);�H����I��fe�Lȣr�2��>��W��I�Ȃ6������i��k�� �5�YOxȺ����>��Y�f5'��|��H+��98pj�n�.O�y�������jY��~��i�w'������l�;�s�2��Y��:'lg�ꥴ)o#'Sa�a�K��Z� �m��}�`169�n���"���x��I ��*+� }F<��cГ���F�P�������ֹ*�PqX�x۩��,� ��N�� �4<-����%����:��7����W���u�`����� $�?�I��&����o��o��`v�>��P��"��l���4��5'�Z�gE���8���?��[�X�7(��.Q�-��*���ތL@̲����v��.5���[��=�t\+�CNܛ��,g�SQnH����}*F�G16���&:�t��4ُ"A��̣��$�b �|����#rs��a�����T�� ]�<�j��B�S�('$�ɻ� �wP;�/�n��?�ݜ��x�F��yUn�~mL*-�������Xf�wd^�a�}��f�,=t�׵i�.2/wpN�Ep8�OР���•��R�FJ� 55TZ��T �ɭ�<��]��/�0�r�@�f��V��V����Nz�G��^���7hZi����k��3�,kN�e|�vg�1{9]_i��X5y7� 8e]�U����'�-2,���e"����]ot�I��Y_��n�(JҼ��1�O ]bXc���Nu�No��pS���Q_���_�?i�~�x h5d'�(qw52] ��'ޤ�q��o1�R!���`ywy�A4u���h<קy���\[~�4�\ X�Wt/� 6�����n�F�a8��f���z �3$�t(���q��q�x��^�XWeN'p<-v�!�{�(>ӽDP7��ո0�y)�e$ٕv�Ih'Q�EA�m*�H��RI��=:��� ���4牢) �%_iN�ݧ�l]� �Nt���G��H�L��� ɱ�g<���1V�,�J~�ٹ�"K��Q�� 9�HS�9�?@��k����r�;we݁�]I�!{ �@�G�[�"��`���J:�n]�{�cA�E����V��ʆ���#��U9�6����j�#Y�m\��q�e4h�B�7��C�������d<�?J����1g:ٳ���=Y���D�p�ц� ׈ǔ��1�]26؜oS�'��9�V�FVu�P�h�9�xc�oq�X��p�o�5��Ա5$�9W�V(�[Ak�aY錎qf;�'�[�|���b�6�Ck��)��#a#a˙��8���=äh�4��2��C��4tm^ �n'c����]GQ$[Wҿ��i���vN�{Fu ��1�gx��1┷���N�m��{j-,��x�� Ūm�ЧS�[�s���Gna���䑴�� x�p 8<������97�Q���ϴ�v�aϚG��Rt�Һ׈�f^\r��WH�JU�7Z���y)�vg=����n��4�_)y��D'y�6�]�c�5̪��\� �PF�k����&�c;��cq�$~T�7j ���nç]�<�g ":�to�t}�159�<�/�8������m�b�K#g'I'.W������6��I/��>v��\�MN��g���m�A�yQL�4u�Lj�j9��#44�t��l^�}L����n��R��!��t��±]��r��h6ٍ>�yҏ�N��fU�� ���� Fm@�8}�/u��jb9������he:A�y�ծw��GpΧh�5����l}�3p468��)U��d��c����;Us/�֔�YX�1�O2��uq�s��`hwg�r~�{ R��mhN��؎*q 42�*th��>�#���E����#��Hv�O����q�}������6�e��\�,Wk�#���X��b>��p}�դ��3���T5��†��6��[��@��P�y*n��|'f�֧>�lư΂�̺����SU�'*�q�p�_S�����M�� '��c�6������m�� ySʨ;M��r���Ƌ�m�Kxo,���Gm�P��A�G�:��i��w�9�}M(�^�V��$ǒ�ѽ�9���|���� �a����J�SQ�a���r�B;����}���ٻ֢�2�%U���c�#�g���N�a�ݕ�'�v�[�OY'��3L�3�;,p�]@�S��{ls��X�'���c�jw��k'a�.��}�}&�� �dP�*�bK=ɍ!����;3n�gΊU�ߴmt�'*{,=SzfD� A��ko~�G�aoq�_mi}#�m�������P�Xhύ�����mxǍ�΂���巿zf��Q���c���|kc�����?���W��Y�$���_Lv����l߶��c���`?����l�j�ݲˏ!V��6����U�Ђ(A���4y)H���p�Z_�x��>���e���R��$�/�`^'3qˏ�-&Q�=?��CFVR �D�fV�9��{�8g�������n�h�(P"��6�[�D���< E�����~0<@�`�G�6����Hг�cc�� �c�K.5��D��d�B���`?�XQ��2��ٿyqo&+�1^� DW�0�ꊩ���G�#��Q�nL3��c���������/��x ��1�1�[y�x�პCW��C�c�UĨ80�m�e�4.{�m��u���I=��f�����0QRls9���f���������9���~f�����Ǩ��a�"@�8���ȁ�Q����#c�ic������G��$���G���r/$W�(��W���V�"��m�7�[m�A�m����bo��D� j����۳� l���^�k�h׽����� ��#� iXn�v��eT�k�a�^Y�4�BN���ĕ���0������� !01@Q"2AaPq3BR�������?�����@4�Q�����T3,���㺠�W�[=JK�Ϟ���2�r^7��vc�:�9 �E�ߴ�w�S#d���Ix��u��:��Hp��9E!�� V 2;73|F��9Y���*ʬ�F��D����u&���y؟��^EA��A��(ɩ���^��GV:ݜDy�`��Jr29ܾ�㝉��[���E;Fzx��YG��U�e�Y�C���� ����v-tx����I�sם�Ę�q��Eb�+P\ :>�i�C'�;�����k|z�رn�y]�#ǿb��Q��������w�����(�r|ӹs��[�D��2v-%��@;�8<a���[\o[ϧw��I!��*0�krs)�[�J9^��ʜ��p1)� "��/_>��o��<1����A�E�y^�C��`�x1'ܣn�p��s`l���fQ��):�l����b>�Me�jH^?�kl3(�z:���1ŠK&?Q�~�{�ٺ�h�y���/�[��V�|6��}�KbX����mn[-��7�5q�94�������dm���c^���h� X��5��<�eޘ>G���-�}�دB�ޟ� ��|�rt�M��V+�]�c?�-#ڛ��^ǂ}���Lkr���O��u�>�-D�ry� D?:ޞ�U��ǜ�7�V��?瓮�"�#���r��չģVR;�n���/_� ؉v�ݶe5d�b9��/O��009�G���5n�W����JpA�*�r9�>�1��.[t���s�F���nQ� V 77R�]�ɫ8����_0<՜�IF�u(v��4��F�k�3��E)��N:��yڮe��P�`�1}�$WS��J�SQ�N�j��ٺ��޵�#l���ј(�5=��5�lǏmoW�v-�1����v,W�mn��߀$x�<����v�j(����c]��@#��1������Ǔ���o'��u+����;G�#�޸��v-lη��/(`i⣍Pm^����ԯ̾9Z��F��������n��1��� ��]�[��)�'�������:�֪�W��FC����� �B9،!?���]��V��A�Վ�M��b�w��G F>_DȬ0¤�#�QR�[V��kz���m�w�"��9ZG�7'[��=�Q����j8R?�zf�\a�=��O�U����*oB�A�|G���2�54 �p��.w7� �� ���&������ξxGHp� B%��$g�����t�Џ򤵍z���HN�u�Я�-�'4��0���;_���3������� !01"@AQa2Pq#3BR�������?����ʩca��en��^��8���<�u#��m*08r��y�N"�<�Ѳ0��@\�p��� �����Kv�D��J8�Fҽ� �f�Y��-m�ybX�NP����}�!*8t(�OqѢ��Q�wW�K��ZD��Δ^e��!� ��B�K��p~�����e*l}z#9ң�k���q#�Ft�o��S�R����-�w�!�S���Ӥß|M�l޶V��!eˈ�8Y���c�ЮM2��tk���� ������J�fS����Ö*i/2�����n]�k�\���|4yX�8��U�P.���Ы[���l��@"�t�<������5�lF���vU�����W��W��;�b�cД^6[#7@vU�xgZv��F�6��Q,K�v��� �+Ъ��n��Ǣ��Ft���8��0��c�@�!�Zq s�v�t�;#](B��-�nῃ~���3g������5�J�%���O������n�kB�ĺ�.r��+���#�N$?�q�/�s�6��p��a����a��J/��M�8��6�ܰ"�*������ɗud"\w���aT(����[��F��U՛����RT�b���n�*��6���O��SJ�.�ij<�v�MT��R\c��5l�sZB>F��<7�;EA��{��E���Ö��1U/�#��d1�a�n.1ě����0�ʾR�h��|�R��Ao�3�m3 ��%�� ���28Q�� ��y��φ���H�To�7�lW>����#i`�q���c����a��� �m,B�-j����݋�'mR1Ήt�>��V��p���s�0IbI�C.���1R�ea�����]H�6�����������4B>��o��](��$B���m�����a�!=���?�B� K�Ǿ+�Ծ"�n���K��*��+��[T#�{�E�J�S����Q�����s�5�:�U�\wĐ�f�3����܆&�)�����I���Ԇw��E T�lrTf6Q|R�h:��[K�� �z��c֧�G�C��%\��_�a��84��HcO�bi��ؖV��7H �)*ģK~Xhչ0��4?�0��� �E<���}3���#���u�?�� ��|g�S�6ꊤ�|�I#Hڛ� �ա��w�X��9��7���Ŀ%�SL��y6č��|�F�a 8���b���$�sק�h���b9RAu7�˨p�Č�_\*w��묦��F ����4D~�f����|(�"m���NK��i�S�>�$d7SlA��/�²����SL��|6N�}���S�˯���g��]6��; �#�.��<���q'Q�1|KQ$�����񛩶"�$r�b:���N8�w@��8$�� �AjfG|~�9F ���Y��ʺ��Bwؒ������M:I岎�G��`s�YV5����6��A �b:�W���G�q%l�����F��H���7�������Fsv7���k�� 403WebShell
403Webshell
Server IP : 103.30.72.248  /  Your IP : 216.73.216.144
Web Server : Microsoft-IIS/10.0
System : Windows NT WIN-CARKG80MF9A 10.0 build 17763 (Windows Server 2019) AMD64
User : IUSR ( 0)
PHP Version : 8.2.7
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Windows/System32/en-US/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Windows/System32/en-US/microsoft-windows-system-events.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$�<ߵ�R���R���R�Ы����R�ЫP���R�Rich��R�PEL�!
&

Pd�@ P"8.rdata�@@.rsrc0 $@@��I
T88��I$��8.rdata8x.rdata$zzzdbg �.rsrc$01� h!.rsrc$02 ���Pɑ
�(�E���``�BÏ�D]A�q��I��(�@�X�p�����	�	�	�� ���!��,>$�MUI�����q�ČR�
��O�PO .�ĀV9m	?����MUIen-US�H,0|
36���X[��,  �%RV�%��,'���-���1��2���2��3���D���DL~dE��X�_xx8`��x`@@�`��a
`al�0c��dq��Lt���t�	�	�v�w
�{�}t
�2
2
��a
d
\�r
r
d�

�T�p�  ,�st��||@������t�����		��x�

p�Ԛ!"�44����
��11�@�|�
00�11�22�5"5,�;$;4�PPT�UU��UU��	p
pԪss<�uu� u#uT�{{P���ذ�� �������г�����`������l���ȵ��H���|������(���\�����	�Ĺ��� �*�����H�������4���h�����
�����(�����������0�����p��	��	���������'�'�X�'�'���'��'�T�'��'���'��'��'��'�X<(�<(��2��2���p��	�	����p��4����p��������������L �����#����8%���%��t&!�-�'1�3�09�<��6>�>�$9I�K��9����|=����<>�����>�����?����4@����PA�����A����|B����PC�����C�����F��`G���G#�$�LI2�3�J���T��@V���^�P��ae���$�����x��
�0����ܪ����P��x�
���Possible detection of CVE: %1%nAdditional Information: %2%n%nThis Event is generated when an attempt to exploit a known vulnerability (%1) is detected.%nThis Event is raised by a User mode process.%n

�Possible detection of CVE: %1%nAdditional Information: %2%n%nThis Event is generated when an attempt to exploit a known vulnerability (%1) is detected.%nThis Event is raised by a kernel mode driver.%n

PMicrosoft-Windows-Kernel-AppCompat

4Microsoft-Windows-AIT

TMicrosoft-Windows-Kernel-ApphelpCache

HMicrosoft-Windows-AeSwitchBack

\Microsoft-Windows-AeLookupServiceTrigger

%1

%1

%1

�The executable %2 received an access denied error when trying to modify the registry key %4.

LMicrosoft-Windows-Kernel-Network

 Data sent.

(Data received.

4Connection attempted.

0Disconnect issued.

0Data retransmitted.

4Connection accepted.

4Reconnect attempted.

HTCP connection attempt failed.

XProtocol copied data on behalf of user.

DData sent over UDP protocol.

LData received over UDP protocol.

HUDP connection attempt failed.

lTCPv4: %2 bytes transmitted from %4:%6 to %3:%5.

dTCPv4: %2 bytes received from %4:%6 to %3:%5.

tTCPv4: Connection attempted between %4:%6 and %3:%5.

lTCPv4: Connection closed between %4:%6 and %3:%5.

pTCPv4: %2 bytes retransmitted from %4:%6 to %3:%5.

xTCPv4: Connection established between %4:%6 and %3:%5.

lTCPv4: Reconnect attempt between %4:%6 and %3:%5.

tTCPv4: Connection attempt failed with error code %2.

�TCPv4: %2 bytes copied in protocol on behalf of user for connection between %4:%6 and %3:%5.

lUDPv4: %2 bytes transmitted from %4:%6 to %3:%5.

dUDPv4: %2 bytes received from %4:%6 to %3:%5.

tUDPv4: Connection attempt failed with error code %2.

lTCPv6: %2 bytes transmitted from %4:%6 to %3:%5.

dTCPv6: %2 bytes received from %4:%6 to %3:%5.

tTCPv6: Connection attempted between %4:%6 and %3:%5.

lTCPv6: Connection closed between %4:%6 and %3:%5.

pTCPv6: %2 bytes retransmitted from %4:%6 to %3:%5.

xTCPv6: Connection established between %4:%6 and %3:%5.

lTCPv6: Reconnect attempt between %4:%6 and %3:%5.

�TCPv6: %2 bytes copied in protocol on behalf of user for connection between %4:%6 and %3:%5.

lUDPv6: %2 bytes transmitted from %4:%6 to %3:%5.

dUDPv6: %2 bytes received from %4:%6 to %3:%5.

DMicrosoft-Windows-Kernel-Disk

L%3 bytes read from disk %1 at %5.

P%3 bytes written to disk %1 at %5.

@Buffers flushed to disk %1.

DMicrosoft-Windows-Kernel-Boot

LSystem was booted in %1x%2@%3bpp.

`BootUX screen was displayed in %1x%2@%3bpp.

`Video bit transfer rate is %1 bytes per ms.

�Boot library accessed file %2 on Device %1. Read %3 bytes and wrote %4 bytes.

�File IO for boot application %1: Total Bytes Read = %2, Total Bytes Written = %3.

�Image %1 failed IntegrityCheck reason is %3. Image flags are %2. Error ignored due to debugger %4.

TBootmgr duration is %1 milliseconds.

DImage %1 is not self-signed.

�A device (%1) that was enumerated by the BIOS was inaccessible to the boot environment.

|Variable %1 requires %2 bytes and was set with status %3.

hElement %2 of application %1 was not in policy.

pA Secure Boot Policy update resulted in status %1.

�A Secure Boot Revocation List update resulted in status %1.

lRetrieving the driver list took %1 milliseconds.

\Loading the drivers took %1 milliseconds.

TLoading hive %1 took %2 milliseconds.

XThe time elapsed loading %1 was %2 ms.

\The time elapsed executing %1 was %2 ms.

�Building chunk table for WIM compressed file %2 failed with status: %1

�Soft Restart failed to prepare target Operating System. Operation status: %1 failure point: %2

�Boot application failed to process persistent data with status: %1

DMicrosoft-Windows-Kernel-File

hError setting traits on Provider %1. Error: %2

�A registration for Provider %1 has joined Provider Group %2

 Enable Info

0Set Provider Traits

0Join Provider Group

TMicrosoft-Windows-Kernel-EventTracing

�Session "%1" failed to write to log file "%2" with the following error: %3

<The backing-file for the real-time session "%1" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.

|Session "%1" failed to start with the following error: %3

pSession "%1" stopped due to the following error: %3

`The maximum file size for session "%1" has been reached. As a result, events might be lost (not logged) to file "%2". The maximum files size is currently set to %5 bytes.

�An error was encountered while tracing session "%2" was switching to the "%1" event log file. Error: %3

�Provider %1 was registered with Event Tracing for Windows.

�Provider %1 was unregistered from Event Tracing for Windows.

<Session "%3" was started.

<Session "%3" was stopped.

tThe configuration of session "%3" has been modified.

hThe events from session "%3" have been flushed.

dProvider %1 has been enabled to session "%2".

lProvider %1 is no longer enabled to session "%2".

�The security settings of provider %1 have been modified from %2 to %3.

�The security descriptor for session "%3" has been updated.

Provider

Session

Logging

Stop

Start

Disable

Enable

 Unregister

Register

Flush

Configure

$Write Buffer

 File Switch

Provider

Session

Stack correlation event. This event contains a call stack which is associated with a prior event which is correlated by the MatchId.

 Stack Trace

4User Mode Stack Trace

hMicrosoft-Windows-Kernel-EventTracing/Analytic

`Microsoft-Windows-Kernel-EventTracing/Admin

 Lost Event

 Lost Event

\Logger mode incompatible with Append mode

0OS version mismatch

4Pointer size mismatch

8Unsupported BufferSize

0BufferSize mismatch

lPreallocate mode is incompatible with Append mode

8File size query failed

<Maximum file size reached

LNumber of buffers written is zero

HNumberf of processors mismatch

xError saving soft restart persisted log "%1" Error: %5

 GUID Entry

4Provider Group Entry

LMicrosoft-Windows-Kernel-StoreMgr

dMicrosoft-Windows-Kernel-StoreMgr/Operational

�%5%n%nVirtual Address: %2%nPhysical Address: %3%nCorruption Window Size: %4

0A memory corruption was detected and handled. Memory diagnostics should be run on this machine and, if necessary, memory chips should be replaced.

�A data corruption was detected and handled in a ReadyBoost cache. This corruption was most likely caused by faulty hardware. While ReadyBoost will always detect and handle these errors, seeing a lot of these may mean that the ReadyBoost device has worn out which reduces its performance. You should consider replacing the ReadyBoost cache device.

tA ReadyBoost cache failed to persist across boot. This may happen if the cache device was modified on another computer or if this computer was booted into another operating system.

T%1%n%nDevice name: %4%nCache path: %6

�A ReadyBoost cache was deleted due to repeated data corruption instances on the associated device that have been detected and handled. While ReadyBoost will always detect and handle these errors, repeated corruption instances may mean that the ReadyBoost device has worn out which reduces its performance. You should consider replacing the ReadyBoost device.

�A ReadyBoost cache was deleted due to repeated I/O failures on the associated device. This typically happens when the device (e.g. an SD card) is removed, but it may also indicate faulty hardware.

hMicrosoft-Windows-LicensingStartServiceTrigger

hMicrosoft-Windows-WSServiceStartServiceTrigger

LMicrosoft-Windows-Kernel-LiveDump

`Microsoft-Windows-Kernel-LiveDump/Analytic

HLive Dump Capture Dump Data API

(Sizing Workflow

8Capture Pages Workflow

XLive Dump Write Deferred Dump Data API

\Live Dump Discard Deferred Dump Data API

PSizing Workflow: Mirroring started.

\Sizing Workflow: Mirroring Phase 0 ended.

\Sizing Workflow: Mirroring Phase 1 ended.

\Sizing Workflow: System Quiesce started.

XSizing Workflow: System Quiesce ended.

`Capture Pages Workflow: Mirroring started.

lCapture Pages Workflow: Mirroring Phase 0 ended.

lCapture Pages Workflow: Mirroring Phase 1 ended.

hCapture Pages Workflow: System Quiesce started.

dCapture Pages Workflow: System Quiesce ended.

pCapture Pages Workflow: Copy memory pages started.

lCapture Pages Workflow: Copy memory pages ended.

\Live Dump Capture Dump Data API started.

tLive Dump Capture Dump Data API ended. NT Status: %1.

@Writing dump file started.

�Writing dump file ended. NT Status: %1. Total %2 bytes (Header|Primary|Secondary: %3|%4|%5 bytes).

API Start

API End

4Dump File Write Start

0Dump File Write End

(Mirroring Start

4Mirroring Phase 0 End

4Mirroring Phase 1 End

4System Quiesce Start

0System Quiesce End

@Copying Memory Pages Start

<Copying Memory Pages End

hLive Dump Write Deferred Dump Data API started.

�Live Dump Write Deferred Dump Data API ended. NT Status: %1.

\Write deferred dump data to file started.

�Write deferred dump data to file ended. NT Status: %1. Total %2 bytes (Header|Primary|Secondary: %3|%4|%5 bytes).

lLive Dump Discard Deferred Dump Data API started.

�Live Dump Discard Deferred Dump Data API ended. NT Status: %1.

�Sizing Workflow: Estimation. NT: %2 bytes (Minimum %1 bytes). Hypervisor: Primary %3 bytes. Secondary %4 bytes.

�Sizing Workflow: Allocation. NT: %1 bytes. Hypervisor: Primary %2 bytes. Secondary %3 bytes.

8Buffer Estimation Data

8Buffer Allocation Data

hSizing Workflow: RemovePages Callbacks started.

dSizing Workflow: RemovePages Callbacks ended.

lSizing Workflow: RemovePages Callback %1 started.

hSizing Workflow: RemovePages Callback %1 ended.

�Sizing Workflow: RemovePages Callback %1 failed. NT Status: %2.

8Remove Pages Callbacks

�Live Dump request aborted due to memory pressure on system

�Windows has started processing the volume mount request.%n%n           Volume GUID: %1%n           Volume Name: %3%n

�The volume has been successfully mounted.%n%n           Volume GUID: %1%n           Volume Name: %3%n

�Windows failed to mount the volume.%n%n           Status: %4%n           Volume GUID: %1%n           Volume Name: %3%n

@Microsoft-Windows-Kernel-IO

XMicrosoft-Windows-Kernel-IO/Operational

�Windows is configured to block legacy file system filters.%n%n           Filter name: %2%n

Legacy file system filters cannot attach to byte addressable volumes.%n%n           Filter name: %2%n           Volume name: %4%n

�Dumps are disabled on the machine since there was an error enabling dump encryption: %1.

                 %nSee http://go.microsoft.com/fwlink/?LinkId=824149 for more information on dump encryption

@An internal error occurred

\Public Key or Thumbprint registry missing

0Invalid Public Key

@Unsupported Public Key Size

\Microsoft-Windows-Kernel-Audit-API-Calls

@Microsoft-Windows-Audit-CVE

LMicrosoft-Windows-User-Diagnostic

HMicrosoft-Windows-Heap-Snapshot

TMicrosoft-Windows-Threat-Intelligence

�Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational

tMicrosoft-Windows-Security-LessPrivilegedAppContainer

�Access to the a resource has been denied for a less privileged app container at %1 (StackHash: %2).

XMicrosoft-Windows-Security-Mitigations

 Kernel Mode

User Mode

�Process '%2' (PID %5) would have been blocked from generating dynamic code.

�Process '%2' (PID %5) was blocked from generating dynamic code.

�Process '%2' (PID %5) would have been blocked from creating a child process '%14' with command line '%16'.

�Process '%2' (PID %5) was blocked from creating a child process '%14' with command line '%16'.

�Process '%2' (PID %5) would have been blocked from loading the low-integrity binary '%14'.

�Process '%2' (PID %5) was blocked from loading the low-integrity binary '%14'.

�Process '%2' (PID %5) would have been blocking from loading a binary from a remote share.

�Process '%2' (PID %5) was blocked from loading a binary from a remote share.

�Process '%2' (PID %5) would have been blocked from making system calls to Win32k.sys.

�Process '%2' (PID %5) was blocked from making system calls to Win32k.sys.

�Process '%2' (PID %5) would have been blocked from loading the non-Microsoft-signed binary '%16'.

�Process '%2' (PID %5) was blocked from loading the non-Microsoft-signed binary '%16'.

�Process '%2' (PID %3) would have been blocked from accessing the Export Address Table for module '%8'.

�Process '%2' (PID %3) was blocked from accessing the Export Address Table for module '%8'.

�Process '%2' (PID %3) would have been blocked from accessing the Import Address Table for API '%10'.

�Process '%2' (PID %3) was blocked from accessing the Import Address Table for API '%10'.

Process '%2' (PID %3) would have been blocked from calling the API '%4' due to return-oriented programming (ROP) exploit indications.

�Process '%2' (PID %3) was blocked from calling the API '%4' due to return-oriented programming (ROP) exploit indications.

�Process '%2' (PID %5) would have been blocked from following an untrusted redirection: %n%nBinary path: %2%nArguments: %4%nRedirection Type: %11%nOperation Path: %13%nImpersonating: %14%n

hProcess '%2' (PID %5) was blocked from following an untrusted redirection: %n%nBinary path: %2%nArguments: %4%nRedirection Type: %11%nOperation Path: %13%nImpersonating: %14%n

@Unknown redirection type%n

0NTFS mount point%n

(NTFS symlink%n

lMicrosoft-Windows-Security-Adminless/Operational

TMicrosoft-Windows-Security-Adminless

�Access to a resource would have been denied if run with the adminless restriction at %1 (StackHash: %2).

H{Remote Registy Service} Access Denied to key: %2 under parent key: %4 as the parent is mentioned under AllowedExactPaths and hence subkey cannot be accessed.

�The system time has changed to %1 from %2.%n%nChange Reason: %3.%nProcess: '%4' (PID %5).

\License policy-cache corruption detected.

hLicense policy-cache corruption has been fixed.

�License policy-cache has expired because it was not updated within expected duration.

{Registry Hive Recovered} Registry hive (file): '%3' was corrupted and it has been recovered. Some data might have been lost.

�An I/O operation initiated by the Registry failed unrecoverably.The Registry could not flush hive (file): '%3'.

�TxR init phase for hive %2 (TM: %3, RM: %4) finished with result=%5 (Internal code=%6).

hThe operating system started at system time %7.

|The operating system is shutting down at system time %1.

�Hive %2 was reorganized with a starting size of %3 bytes and an ending size of %4 bytes.

�The access history in hive %2 was cleared updating %3 keys and creating %4 modified pages.

tThe operating system is starting after soft restart.

 The leap second configuration has been updated.%nReason: %1%nLeap seconds enabled: %2%nNew leap second count: %3%nOld leap second count: %4

�Failed to update leap second data from the registry. Reason: %1

�Error status code %1 returned when %3 attempted to load dependency %2.

�Loading dependency %2 from the current directory was not allowed when attempted by %1. Another DLL was found: %3. For more information, see http://go.microsoft.com/fwlink/?LinkId=718136.

�Loading dependency %2 from the current directory was not allowed when attempted by %1. No other DLL was found and the dependency resolution failed. For more information, see http://go.microsoft.com/fwlink/?LinkId=718136.

dAccess to %1 is monitored by policy rule %2.

�Access to %1 has been restricted by your Administrator by the default software restriction policy level.

�Access to %1 has been restricted by your Administrator by location with policy rule %2 placed on path %3.

�Access to %1 has been restricted by your Administrator by software publisher policy.

�Access to %1 has been restricted by your Administrator by policy rule %2.

�Access to %1 has been restricted by your Administrator by policy rule %2.

TThe system firmware has allocated a memory region previously determined to be unreliable. This has the potential to cause system instability and/or data corruption.

�Windows failed to resume from hibernate with error status %1.

|The boot manager multi OS selection screen was displayed.

\There are %1 boot options on this system.

hThere are %1 boot tool options on this system.

�The last shutdown's success status was %1. The last boot's success status was %2.

�The OS loader advanced options menu was displayed and the user selected option %1.

hThe OS loader edit options menu was displayed.

\The Windows key was pressed during boot.

PThe F8 key was pressed during boot.

DThe boot menu policy was %1.

pA one-time boot sequence was used during this boot.

4The boot type was %1.

lWindows failed fast startup with error status %1.

PThe firmware reported boot metrics.

hThe bootmgr spent %1 ms waiting for user input.

TSoft reboot cancellation started: %1

XSoft reboot cancellation finished: %1.

�The virtualization-based security enablement policy check at phase %1 failed with status: %2

pVirtualization-based security (policies: %3) is %2.

�Virtualization-based security (policies: %3) is %2 with status: %1

tSoft reboot prepare started (complete requested: %1).

LSoft reboot prepare finished: %1.

TSoft reboot complete prepare started.

`Soft reboot complete prepare finished: %1.

pSoft reboot call to %1 failed: %2 (checkpoint: %3).

�Bootmgr Security Version Number check failed. Svn Value: %1, Previous SVN Value: %2.

�App %1 was terminated with error %2 because of an issue with Windows binary %3. This could be because the binary is unsigned, contains an untrusted signature, or has been corrupted or tampered with. Refresh your PC to fix this issue.

,Structured State

0Unstructured Reset

$Out Of Memory

$Apiset Error

WinRT

@Low-level Data Store Error

�Failure to load the application settings for package %1. Error Code: %2

�Failure to read an application setting for package %1. Error Code: %2

�Failure to write an application setting for package %1. Error Code: %2

�Failure to instantiate storage folder %1 for package %2 with Error Code: %3

�Triggered repair because operation %1 against package %2 hit error %3.

�Repair for operation %1 against package %2 with error %3 returned Error Code: %4

pFolder path %1 failed access check: Error Code: %2

�Triggered repair of state locations because operation %1 against package %2 hit error %3.

�Repair of state locations for operation %1 against package %2 with error %3 returned Error Code: %4

8Verbose context events

8Scenario trigger events

SQM

Time

(Deprecated dlls

DFatal user callback exception

4A dll failed to load.

<Launch 16bit application

DWindows component on demand.

TThe Loader encountered a fatal error.

$Response Time

<Deprecated COM interfaces

Process

$AppContainer

0DesktopAppXProcess

4DesktopAppXContainer

�Scenario start enables context providers to the WDI context logger.

�Scenario end disables context providers to the WDI context logger.

�When a scenario has remained in-flight beyond the maximum time window it is automatically terminated by the SEM.

`A scenario start attempt failed in the SEM.

\A scenario end attempt failed in the SEM.

�The SEM received a request to start a new scenario, but the maximum number of scenarios were already in-flight.

�There is an invalid configuration parameter in the SEM registry namespace.

�The SEM is configured with more scenarios than the maximum allowed count.

�The SEM is configured with a scenario with too many context providers.

�The SEM is configured with a scenario that has too many end events.

�The number of providers specified across all scenarios is above the maximum allowed amount.

Info

Start

Stop

<NLS data table operations

0NLS initialization

<NLS configuration changes

(NLS operations

8NLS clean-up operations

Start

<Invoke callback function

0Disable live cache

HUpdate resource cache manifest

4Build resource cache

Start

End

Error

Warning

 Information

Critical

Verbose

8SEM Scenario Lifecycle

0SEM Initialization

�This group of events tracks the performance of mounting hives from existing files.

�This group of events tracks the performance of unloading hives.

�This group of events tracks the performance of flushing hives.

�This group of events tracks the performance of registry shutdown.

�This group of events tracks the performance of loading hives.

�This group of events tracks the performance of restoring hives.

�This group of events tracks the performance of exporting hives.

8NLS code page functions

8NLS date/time functions

dNLS Unattended Regional and Language Options

,NLS group policy

4NLS locale functions

HMUI NotifyUILanguageChange task

@MUI resource cache builder

DMicrosoft-Windows-Kernel-WDI

TMicrosoft-Windows-Kernel-WDI/Analytic

PMicrosoft-Windows-Kernel-WDI/Debug

\Microsoft-Windows-Kernel-WDI/Operational

LMicrosoft-Windows-AppModel-State

XMicrosoft-Windows-AppModel-State/Debug

`Microsoft-Windows-AppModel-State/Diagnostic

LMicrosoft-Windows-Kernel-General

System

LMicrosoft-Windows-Kernel-Process

LMicrosoft-Windows-Kernel-Registry

DMicrosoft-Windows-Kernel-Acpi

HMicrosoft-Windows-International

`Microsoft-Windows-International/Operational

DMicrosoft-Windows-User-Loader

 Application

\Microsoft-Windows-Kernel-BootDiagnostics

4Microsoft-Windows-UAC

LMicrosoft-Windows-UAC/Operational

4Microsoft-Windows-COM

dMicrosoft-Windows-SoftwareRestrictionPolicies

4Microsoft-Windows-MUI

LMicrosoft-Windows-MUI/Operational

@Microsoft-Windows-MUI/Admin

HMicrosoft-Windows-MUI/Analytic

@Microsoft-Windows-MUI/Debug

4Microsoft-Windows-PCI

PMicrosoft-Windows-Kernel-ShimEngine

hMicrosoft-Windows-Kernel-ShimEngine/Operational

PMicrosoft-Windows-AppModel-Runtime

`Microsoft-Windows-AppModel-Runtime/Analytic

dError while deleting file: %1. Error Code: %2

pError while deleting directory: %1. Error Code: %2

DError while allocating memory

lApiSet Function: %1 returned with Error Code: %2

�Low-level data store access error. Function: %1 returned with Error Code: %2

�Cleanup of temporary state has been skipped due to low disk usage.

\Cleanup of temporary state has completed.

�Cleanup of temporary state was unable to enumerate the user profiles.  Object: %1, Error Code: %2.

tCleanup of temporary state has aborted unexpectedly.

�Need to update state locations of package %1 for user %2 because the schema is not found. Error Code: %3

�Need to update state locations of package %1 for user %2 because the package is not found. Error Code: %3

�Need to update state locations of package %1 for user %2 because the package full name has changed. Error Code: %3

�Need to update state locations of package %1 for user %2 because the schema version has changed. Error Code: %3

lSucceeded to fix state locations for package %1.

�Failure to fix state locations for package %1. Error Code: %2

4The Scenario Event Mapper started a scenario for provider %1 (event ID %2) with %4 context providers.  The context logger dropped event count was %3.

4The Scenario Event Mapper stopped a scenario for provider %1 (event ID %2) with %4 context providers.  The context logger dropped event count was %3.

An in-flight scenario from provider %1 (event ID %2) timed out and was stopped automatically by the Scenario Event Mapper.

<The Scenario Event Mapper was unable to start a new scenario for provider %1 (event ID %2) because the maximum number of scenarios are already in flight.

�The Scenario Event Mapper was unable to start a scenario for provider %1 (event ID %2).  The error code was %3.

�The Scenario Event Mapper was unable to stop a scenario for provider %1 (event ID %2).  The error code was %3.

4The Scenario Event Mapper is configured with more than the maximum number of scenarios.  The scenario for provider %1 (event ID %2) will be ignored.

hThe Scenario Event Mapper is configured with more than the maximum number of context providers for the scenario with provider %1 (event ID %2).  The scenario will be ignored.

XThe Scenario Event Mapper is configured with more than the maximum number of end events for the scenario with provider %1 (event ID %2).  The scenario will be ignored.

�The Scenario Event Mapper is configured with more than the maximum number of providers.  The provider %1 will be ignored.

HThe Scenario Event Mapper is configured with an unsupported scenario. The scenario for provider %1 (event ID %2) encountered error code %3 and will be ignored.

`The system time has changed to %1 from %2.

�The system time has changed to %1 from %2.%n%nChange Reason: %3.

�Process %1 started at time %2 by parent %3 running in session %4 with name %5.

�Process %1 (which started at time %2) stopped at time %3 with exit code %4.

PThread %2 (in Process %1) started.

PThread %2 (in Process %1) stopped.

dProcess %3 had an image loaded with name %7.

hProcess %3 had an image unloaded with name %7.

�Base CPU priority of thread %2 in process %1 was changed from %3 to %4.

�CPU priority of thread %2 in process %1 was changed from %3 to %4.

�Page priority of thread %2 in process %1 was changed from %3 to %4.

�I/O priority of thread %2 in process %1 was changed from %3 to %4.

hExecution of the process %1 has been suspended.

dExecution of the process %1 has been resumed.

PJob %1 started with status code %2.

XJob %1 terminated with status code %2.

�Enumerated process %1 had started at time %2 by parent %3 running in session %4 with name %6.

�Process %1 started at time %2 by parent %3 running in session %4 with name %6.

�Process %1 started at time %2 by parent %3 running in session %4 with name %6.

xA memory range descriptor has been marked as reserved.

�Unexpected GPE event was fired on GPE bits that should be disabled.

�A temperature change notification (Notify(thermal_zone, 0x80)) for ACPI thermal zone %2 has been received.             %n_TMP = %3K             %n_PSV = %4K             %n_AC0 = %5K             %n_AC1 = %6K             %n_AC2 = %7K             %n_AC3 = %8K             %n_AC4 = %9K             %n_AC5 = %10K             %n_AC6 = %11K             %n_AC7 = %12K             %n_AC8 = %13K             %n_AC9 = %14K             %n_HOT = %15K             %n_CRT = %16K

�A trip point change notification (Notify(thermal_zone, 0x81)) for ACPI thermal zone %2 has been received.             %n_TMP = %3K             %n_PSV = %4K             %n_AC0 = %5K             %n_AC1 = %6K             %n_AC2 = %7K             %n_AC3 = %8K             %n_AC4 = %9K             %n_AC5 = %10K             %n_AC6 = %11K             %n_AC7 = %12K             %n_AC8 = %13K             %n_AC9 = %14K             %n_HOT = %15K             %n_CRT = %16K

lThe active cooling device %6 has been turned %8.             %nThermal zone device instance: %2             %nActive cooling package: _AC%3             %nNamespace object: _AL%4

lThe active cooling device %6 has been turned %7.             %nThermal zone device instance: %2             %nActive cooling package: _AC%3             %nNamespace object: _AL%4

LACPI method %2 evaluation has %3.

lThe active cooling device %2 has been turned %3.

�The passive cooling device %2 throttle has changed to %3 percent.

�The device %2 has the following cooling state.             %nActive cooling: %3             %nPassive cooling: %4 percent

`ACPI device %2 is undergoing %3. Status %4.

<ACPI device OverRide - %1

�Error occured while interpreting AML code: scope %1, object %2. Status %3.

TACPI method %2 has high frequency %3.

�The NLS operation failed because the registry key %1 cannot be opened. Error code is %2. Error message: %3

�The NLS operation failed because the registry key %1 cannot be opened. Status code is %2.

LNLS codepage operation failed for the codepage %1 because the file %2 is missing.  To correct this error, replace this file or repair your Windows installation.

LNLS codepage operation failed for the codepage %1 because the file %2 is corrupted. To correct this error, replace this file or repair your Windows installation.

 NLS operation failed for %1 locale because the file %2\globalization\%1.nlp is missing.  To fix this problem, reinstall this custom locale.

$NLS operation failed for %1 locale because the file %2\globalization\%1.nlp is corrupted.  To fix this problem, reinstall this custom locale.

�Group Policy has prevented process number %1 (%2) from changing the standards and format information for the user.

�Group Policy has prevented the geographical location from being changed.

�Group Policy has prevented the user from changing their user locale to "%1".

Group Policy does not allow custom user locales for standards and formats. The user was unable to select "%1" as their user locale.

dNLS operation recreated the registry key %1.

�Windows has detected inconsistencies in NLS internal data. To correct this problem, log off of Windows and log on again.

�Process number %1 (%2) called SetLocaleInfo(%3, %4, "%5")  successfully.

�Process number %1 (%2) called SetCalendarInfo(%3, %4, %5, "%6")  successfully.

�Process number %1 (%2) called SetUserGeoID(%3) successfully.

�The system updated the locale "%1" with flag %2. Process number %3 (%4). Return code is %5.

The user tried to apply an unattended XML file (%1) in an unsupported format. Reason: %3 (Line %2). The system has not been changed.

DUnsupported XML in function.

DThe user locale "%1" (specified by the UserLocale element) is not a supported locale name or is not installed on the system. The user locale was not changed.

LUnsupported alternate sort "%1".

p"%1" is not a supported sort order for locale "%2".

The selected system locale (specified by the SystemLocale element) is not installed on the system. The system locale was not changed.

�Internal error while changing System locale (specified by the SystemLocale element).

tError while changing keyboard/input method for "%1".

�Error while changing location preference (geoid): %1. This error may be caused by an unsupported location preference (geoid) or a Group Policy restriction. Error code is %2. Error message: %3

|Failed to change UI Language to "%1". Status code is: %2.

�Failed to change UI Language fallback order to "%1". Status code is: %2.

�The user tried to apply an unattended XML file %1, but the file does not exist.

Error while the user changed setting "%1" with value "%2" for the current user locale. Error code is: %3. Error message: %4

The selected calendar "%1;" (specified by the Calendar element) is not a supported calendar. The user locale was not changed.

The selected TwoDigitYearMax "%1;" (specified by the TwoDigitYearMax element) is not a supported value. The user locale was not changed.

�The user does not have permission to change the TwoDigitYearMax setting

�The user does not have permission to copy current settings to the Default and/or System Account

�The user does not have permission to change the system locale (specified by the SystemLocale element).

|The user does not have permission to change the calendar.

PUnexpected failure. Stack overflow

TUnexpected failure. Unsupported flag

\Unexpected failure. Unsupported parameter

\Unexpected failure. Unrecoverable error.

|Failed when calling internal function. Error code is: %1

<The operation timed out.

�Group Policy has prevented the user from changing the system locale (specified by the SystemLocale element).

�The user changed their user locale (specified by the UserLocale element) to "%1".

�The user reset all customizations for their user locale "%1" (specified by the UserLocale element) to the system default.

�The user changed their user locale setting "%1" (specified by the UserLocale element) to "%2".

�The locale has to be changed to the current locale in order to make customizations.

hThe user changed their alternate sort to "%1".

\The user changed their calendar to "%1".

dThe user changed their TwoDigitYearMax to %1.

|The user changed their location preference (geoid) to %1.

�The system locale (specified by the SystemLocale element) was changed to "%1".

�The current user settings were copied to the default user account.

�The current user settings were copied to the system accounts.

hThe user has changed their UI Language to "%1".

�The user has changed their UI Language fallback order to "%1".

4Deprecated module %1.

xProcess %2 encountered a fatal user callback exception.

XThe process launches a 16 bit process.

HWindows component on demand %1.

�The Loader encountered a fatal error while loading a thread from process image name %1.

lA fatal error occured during initalization of %1.

�The Loader encountered a fatal error running process image name %1.

�The process failed to handle ERROR_ELEVATION_REQUIRED during the creation of a child process.

<Deprecated COM CLSID %1.

�MUI notify operation failed with status code %1. No callbacks were invoked.

 MUI Callback failed for file %1 because it can not be loaded. To correct this error, replace this file or repair your Windows installation.

`MUI Callback failed for file %1 registered as type %2 because the function %3 does not exist in the dll. To correct this error, replace the file or fix the registry entry.

XMUI Callback failed for file %1 because it is not signed by Microsoft. To correct this error, replace with the original file that came with this Windows installation.

MUI Callback file %1 cannot be found. To correct this error, repair the registry or copy the file to the specified location.

�Wow redirection could not be disabled. New resource cache will not be built.

�Resource cache cannot be opened in writable mode. New resource cache will not be built.

`Live resource cache could not be disabled.

�Unable to retrieve language settings from MUI API. New resource cache will not be built.

�Unable to parse the cacheable file list or write to the resource cache manifest. If configuration file was specified as command-line parameter, check that file exists and has correct format.  New resource cache will not be built.

�Changes made to resource cache manifest cannot be written to disk. New resource cache will not be built.

�New resource cache could not be built due to internal error: %1.

�Newly built resource cache could not be installed on the system.

�Resource cache manifest could not be created. New resource cache will not be built.

pMUI notification for UI Language change has been invoked with flags set to %1 and the new languages set to %2 and the previous languages set to %3. The extended flags is set to %4

�MUI notification callback API %2 in %1 returned with code %3.

�MUI resource cache builder has been called with the following parameters: %1.

�MUI resource cache manifest entry for file %1 has been updated. Affinity: '%2', Sequence: %3, and Priority: %4

Start: %1

End: %1

�New resource cache built and installed on system. New cache index is %1, live cache index is %2 and config is set to %3.

�Resource file %1 will not be cached since it is not used frequently in the system.

�The system is constrained in RAM, total disk space or free disk space, so the MUI resource cache will not be maintained.

�Unable to parse configuration parameters. The configuration parameters will be ignored.

�The time elapsed before Bootmgr, based on the TSC, is %1 ms.

�Initialization of the firmware crypto hash provider resulted in status %1.

�The firmware update capsule (%1) failed to load with status %2.

�The PE/COFF image firmware update capsule (%1) failed to load with status %2.

�The Efi UpdateCapsule failed to apply updates with status %1.

�Firmware update supported status is %3. The BitLocker device flags are %1 and the PCR bitmap is %2.

�The firmware update capsule (%1) code integrity check failed with status %2.

�Windows failed to load the required system file %1 with error status %2.

�Windows failed to load the system registry file %1 with error status %2.

�Windows failed to initialize the ACPI with error status %1.

dWindows failed to load with error status %1.

�Windows failed to load image %2 imported from %1 with error status %3.

�Windows failed to import %2 from image %1 with error status %3.

`Windows failed to provision VSM Identity Key. Unsealing cached copy status: %1. New key generation status: %2. Measuring to PCR status: %3. Sealing and caching status: %4.

DVSM Identity Key Provisioning. Unsealing cached copy status: %1. New key generation status: %2. Measuring to PCR status: %3. Sealing and caching status: %4.

�Windows system integrity policy does not allow to load the required system file %1 with error status %2.

�Windows failed to provision VSM Master Encryption Key. Using cached copy status: %1. Unsealing cached copy status: %2. New key generation status: %3. Sealing status: %4. TPM PCR mask: %5. Protector-assisted unseal status: %6. Protector-assisted re-seal status: %7. Protector update status: %8. Tpm Counter validation status: %9. Tpm Counter creation status: %10.

�VSM Master Encryption Key Provisioning. Using cached copy status: %1. Unsealing cached copy status: %2. New key generation status: %3. Sealing status: %4. TPM PCR mask: %5. Protector-assisted unseal status: %6. Protector-assisted re-seal status: %7. Protector update status: %8. Tpm Counter validation status: %9. Tpm Counter creation status: %10.

�Windows failed to provision the TPM Storage Root Key with error status:%1.

�Windows successfully provisioned the TPM Storage Root Key. This operation took %1 milliseconds.

�Windows failed to provision TPM binding information with error status:%1.

�NFIT ACPI table is not properly formed, and could not be parsed.

�Previous error detected while attempting to execute Measured Launch Environment. TXT error code: %1.

\Firmware provided SINIT ACM not used. %1

�Windows failed to provision DRTM-bound VSM Master Encryption Key . Using cached copy status: %1. New key generation status: %2. Sealing status: %3. UEFI keys provided to Secure Kernel status: %4.

�Windows successfully provisioned DRTM-bound VSM Master Encryption Key. Using cached copy status: %1. New key generation status: %2. Sealing status: %3. UEFI keys provided to Secure Kernel status: %4.

�Soft Restart failed to complete with status: %1 due to %2 outstanding unclaimed allocations

�Soft Restart failed to restore memory partition %1 with status: %2

�Soft Restart failed to register with Soft Restart extension. The versions are not compatible.

�Soft Restart failed to establish connection with secure load with status: %1

�Boot Policy Migration used an authenticated variable.  Status: %1

�Boot Policy Migration used an unauthenticated variable.  Status: %1

0Info: %1 Status: %2

4Error: %1 Status: %2

�A command was submitted to the TPM.%nCommand code: %1.%nResponse code: %2.%nElapsed time: %3ms.

�A command could not be submitted to the TPM.%nCommand code: %1.%nError code: %2.%nElapsed time: %3ms.

�The TPM was found not to be useable for BitLocker. Flags: %1.

�Measured Boot library was initialized. Phase: %1, StatusCode: %2.

HMeasured Boot library encountered a failure and entered insecure state. InitState: %1, StatusCode: %2, Failure Address: %3, Reference Address: %4, Reason: %5.

�DRTM Security Version Number check failed. SvnCounterId: %1, StatusCode: %2, Svn Value: %3, Previous SVN Value: %4.

`File modification detected after load: %1.

hRegistry modification detected after load: %1.

�BCD Option '%1' was not applied due to Secure Boot being enabled.

�Windows boot manager revocation policy version %1 is applied.

�Windows boot manager revocation policy version %1 was not found. It is recommended that it be redeployed.

`Succeeded in updating the SBAT value in FW.

XFailed to update the SBAT value in FW.

�Windows failed to provision VSM Master Encryption Key. Using cached copy status: %1. Primary Blob Unseal Status: %2. Backup Blob Unseal Status: %3. Kickback Backup Blob Unseal Status: %4. Backup Blob Validity Check Status: %5. Backup Blob Validity Check Result: %6. Kickback Backup Blob Validity Check Status: %7. Kickback Backup Blob Validity Check Result: %8. Primary Blob Reseal Status: %9. Backup Blob Reseal Status: %10. Kickback Backup Blob Reseal Status: %11. New key generation status: %12. Sealing status: %13. TPM PCR mask: %14. Tpm Counter validation status: %15. Tpm Counter creation status: %16. Backup sealed blob used: %17. Kickback Backup sealed blob cleaned up post upgrade status: %18.

hVSM Master Encryption Key Provisioning. Using cached copy status: %1. Primary Blob Unseal Status: %2. Backup Blob Unseal Status: %3. Kickback Backup Blob Unseal Status: %4. Backup Blob Validity Check Status: %5. Backup Blob Validity Check Result: %6. Kickback Backup Blob Validity Check Status: %7. Kickback Backup Blob Validity Check Result: %8. Primary Blob Reseal Status: %9. Backup Blob Reseal Status: %10. Kickback Backup Blob Reseal Status: %11. New key generation status: %12. Sealing status: %13. TPM PCR mask: %14. Tpm Counter validation status: %15. Tpm Counter creation status: %16. Backup sealed blob used: %17. Kickback Backup sealed blob clean up post upgrade status: %18.

�%3 shim(s) were applied to driver [%1].%n%nShim(s) source: %2.%n%nShim GUID(s): %4.

�Flags [%4] were applied to device [%1] - class [%2].%n%nFlags source: %3.

�Process %1 started at time %2 by parent %3 running as package %4 with executable %5 is application %6.

�%2: Cannot create the process for package %1 because an error was encountered. %3

�%2: Cannot create the process for package %1 because an error was encountered while querying the fast cache. %3

�%2: Cannot create the process for package %1 because an error was encountered while preparing the App credentials. %3

%2: Cannot create the process for package %1 because an error was encountered while checking the user-level package status. %3

%2: Cannot create the process for package %1 because an error was encountered while checking the machine-level package status. %3

�%2: Cannot create the process for package %1 because an error was encountered while verifying the App credentials. %3

�App %1 was terminated with error %2 because of an issue with application binary %3. This could be because the binary is unsigned, contains an untrusted signature, or has been corrupted or tampered with. Reinstall the application to fix this issue.

|App %1 prevented the load of generated binary %3 due to error %2. This could be because the binary is unsigned, contains an untrusted signature, or has been corrupted or tampered with.

dAn app prevented the load of a binary due to error %1. This could be because the binary is unsigned, contains an untrusted signature, or has been corrupted or tampered with.

4%2: Package runtime information %1 is corrupted (address=%5, size=%3, offset=%4, section=%6, processid=%7). Reinstall the package to fix this issue.

4%2: Package runtime information %1 is missing expected data (address=%4, size=%3, section=%5, processid=%6). Reinstall the package to fix this issue.

L%2: Package runtime information %1 contains conflicting data (address=%5, size=%3, offset=%4, section=%6, processid=%7). Reinstall the package to fix this issue.

L%2: Package runtime information %1 contains unexpected data (address=%5, size=%3, offset=%4, section=%6, processid=%7). Reinstall the package to fix this issue.

�%2: Package runtime information %1 failed to load (processid=%3).

�Package runtime information %1 failed to load because exception %2 occurred.

�%2: Cannot create the process for package %1 because an error was encountered while loading the runtime information. %3

�CreateAppContainerProfile failed for AppContainer %2 with error %1.

�DeleteAppContainerProfile failed for AppContainer %2 with error %1.

�UpdateAppContainerProfile failed for AppContainer %2 with error %1.

�CreateAppContainerProfile failed with error %1 because it was unable to create registry key %2.

�CreateAppContainerProfile failed with error %1 because it was unable to set security on registry key %2.

�AppContainer profile failed with error %1 because it was unable to delete registry key %2.

�CreateAppContainerProfile failed with error %1 because it was unable to create folder %2.

�CreateAppContainerProfile failed with error %1 because it was unable to set attributes on folder %2.

�CreateAppContainerProfile failed with error %1 because it was unable to verify the existence of registry key %2.

�CreateAppContainerProfile failed with error %1 because it was unable to verify the existence of folder %2.

�CreateAppContainerProfile failed with error %1 because it was unable to find the users local app data folder.

�AppContainer profile failed with error %1 because it was unable to delete folder %2 or its contents.

�AppContainer profile failed with error %1 because it was unable to look up the AppContainer name.

�AppContainer profile failed with error %1 because it was unable to look up the AppContainer display name.

�CreateAppContainerProfile failed with error %1 because it was unable to register with the firewall.

�DeleteAppContainerProfile failed with error %1 because it was unable to unregister with the firewall.

�App Container profile failed with error %1 because it was unable to register the AppContainer SID.

�DeleteAppContainerProfile failed with error %1 because it was unable to unregister the AppContainer SID.

TSuccessfully created AppContainer %1.

�AppContainer %1 was not created because it already exists.

TSuccessfully deleted AppContainer %1.

TSuccessfully updated AppContainer %1.

4%2: Package runtime information %1 is missing expected data (address=%4, size=%3, section=%5, processid=%6). Reinstall the package to fix this issue.

�%2: Application identity not accessible while loading package runtime information %1 (address=%4, size=%3, processid=%5).

�Failed with %1 while retrieving AppContainer %2 information during interaction with Restricted AppContainer.

�Failed with %1 while retrieving AppContainer information during interaction with Restricted AppContainer.

�Failed with %1 while retrieving AppContainer information. Call invalid from this process type.

�Failed to create shared context object for Restricted AppContainer %2 with %1.

xFailed to activate Restricted AppContainer %2 with %1.

�Creation of Restricted AppContainer %2 failed with %1 because an invalid capability was specified.

�Opening existing Restricted AppContainer %2 failed with %1 because the capabilities storage value could not be read.

�Failed to create the capabilities storage value for Restricted AppContainer %2 with %1.

PThe package %1 requires validation.

\Modification was detected in package %1.

\Failed to terminate app with package %1.

lValidation of app with package %1 was successful.

�Failed with %1 to retrieve the trust state of the package %2 folder.

tApp Integrity check failed with %1 while checking %2.

�App Integrity terminated an application. Integrity check for %2 returned %1.

TApp Integrity check for %1 timed out.

�%2: Cannot create the process for package %1 because an error was encountered while performing the integrity check. %3

�Deployment server integrity check of package %1 failed with %2.

�Failed with %1 retrieving AppModel Runtime group policy values.

�Failed with %1 validating AppModel Runtime group policy values.

�Failed with %1 retrieving AppModel Runtime status for package %2.

�Failed with %1 retrieving AppModel Runtime status for package %2 for user %3.

�Failed with %1 modifying AppModel Runtime status for package %2 (current status = %4, desired status = %3).

�AppModel Runtime status for package %1 successfully updated to %2 (previous status = %3).

�Failed with %1 modifying AppModel Runtime status for package %2 for user %3 (current status = %5, desired status = %4).

�AppModel Runtime status for package %1 for user %2 successfully updated to %3 (previous status = %4).

�Failed with %1 modifying AppModel Runtime status version (context = %2).

tAppModel Runtime status version successfully updated.

�%2: Cannot create the process for package %1 because an error was encountered while performing the app data creation. %3

�Package runtime information %1 failed to refresh because the following error %2 occurred in operation type %3.

error %2: Cannot register the %1 package because the following error was encountered while opening the HKEY_USERS registry key

8error %4: Cannot register the %1 package because the following error was encountered while enumerating to remove the %2\%3 package family registry key

 error %4 : Cannot register the %1 package because the following error was encountered while creating the %2\%3 package family registry key

error %4: Cannot register the %1 package because the following error was encountered while removing the %2\%3 package family registry key

�%2: Package family %1 runtime information is corrupted. Attempting to correct the issue.

�%2: Package family %1 runtime information is corrupted but we cannot repair it at this time.

<Creating AppContainer %1.

`Finished creating AppContainer %2 with %1.

<Deleting AppContainer %1.

`Finished deleting AppContainer %2 with %1.

<Updating AppContainer %1.

`Finished updating AppContainer %2 with %1.

dCreating firewall rules for AppContainer %1.

�Finished creating firewall rules for AppContainer %2 with %1.

dDeleting firewall rules for AppContainer %1.

�Finished deleting firewall rules for AppContainer %2 with %1.

TCreating Restricted AppContainer %1.

tFinished creating Restricted AppContainer %2 with %1.

TDeleting Restricted AppContainer %1.

tFinished deleting Restricted AppContainer %2 with %1.

POpening Restricted AppContainer %1.

tFinished opening Restricted AppContainer %2 with %1.

lEnumerating all Restricted AppContainers for %1.

�Finished enumerating all Restricted AppContainers for AppContainer %2 with %1.

lLaunching process in Restricted AppContainer %1.

�Finished launching process in Restricted AppContainer %2 with %1.

|Terminating all processes in Restricted AppContainer %1.

�Finished terminating all processes in Restricted AppContainer %2 with %1.

HChecking package graph for %1.

dPackage graph check for %2 finished with %1.

hPerforming app integrity check for package %1.

tApp integrity check for package %2 finished with %1.

xPerforming runtime app integrity check for package %1.

�Runtime app integrity check for package %2 finished with %1.

�Firewall Service not running. Skipping creation of firewall rules for AppContainer %1.

lUpdating Restricted AppContainer Capabilities %1.

�Finished Updating Restricted AppContainer Capabilities %2 with %1.

xCreated process %1 for application %4 in package %2. %5

�%4: Cannot create the process for package %1 because an error was encountered. %5

�%4: Cannot create the process for package %1 because an error was encountered while preparing for activation. %5

�%4: Cannot create the process for package %1 because an error was encountered while elevating the token. %5

�%4: Cannot create the process for package %1 because UI Access is not supported for Desktop AppX processes. %5

�%4: Cannot create the process for package %1 because an error was encountered while adjusting the token. %5

�%4: Cannot create the process for package %1 because an error was encountered while launching. %5

�%4: Cannot create the process for package %1 because an error was encountered while configuring runtime. %5

�%4: Cannot create the process for package %1 because an error was encountered while resuming the thread. %5

lCreated Desktop AppX container %3 for package %1.

�Added process %1 to Desktop AppX container %3 for package %2.

�%1: Cannot add process %2 to Desktop AppX container %4 for package %3 because an error was encountered.

�%1: Cannot create the Desktop AppX container for package %2 because an error was encountered creating the job.

�%1: Cannot create the Desktop AppX container for package %2 because an error was encountered creating the description.

�%1: Cannot create the Desktop AppX container for package %2 because an error was encountered converting the job.

�%1: Cannot create the Desktop AppX container for package %2 because an error was encountered configuring the runtime.

pDestroyed Desktop AppX container %2 for package %1.

|Cannot destroy Desktop AppX container %2 for package %1.

PSystem time initialized during boot

pAn application or system component changed the time

lSystem time synchronized with the hardware clock

\System time adjusted to the new time zone

xLeap second data initialized from registry during boot

XLeap second data updated from registry

TRegistry value invalid format or size

4Too many leap seconds

�Cannot decrease the number of leap seconds while the system is running

LAn invalid leap second was found

tThe list of leap seconds must be strictly increasing

�Cannot modify the existing leap seconds while the system is running

$Other reason

on

off

started

finished

@Platform-level Device Reset

@Function-level Device Reset

LAcpi Override attribute - MpSleep

PAcpi Override attribute - DisableS1

PAcpi Override attribute - DisableS2

PAcpi Override attribute - DisableS3

hAcpi Override attribute - DellMaxUlongBugcheck

lAcpi Override attribute - PciBusNumberTranslation

pAcpi Override attribute - RunRegMethodOnPciDevices

lAcpi Override attribute - RescanPostDependencies

�Acpi Override attribute - PlatformCheckD3ColdOnSurpriseRemoval

�Acpi Override attribute - PlatformCheckFailResetOnOpenHandles

disabled

Hdisabled due to HyperV opt-out

Tdisabled due to opt-out UEFI variable

`disabled due to secure boot being disabled

ldisabled due to DMA protection being unavailable

ldisabled due to the hypervisor being unavailable

`disabled due to VBS initialization failure

pdisabled due to VBS anti-rollback policy is missing

\enabled due to VBS registry configuration

4enabled due to HyperV

Xenabled due to VBS locked configuration

Tenabled due to Code Integrity policy

8enabled due to Velocity

@BL_LOG_INFO_NONE: Info none

�BL_LOG_INFO_BLI_IO_INITED: IO initialized in boot library initialization.

�BL_LOG_INFO_BLI_FINISHED: Finished in boot library initialization.

�BL_LOG_INFO_BM_BL_INITED: The boot library has been initialized for bootmgr.

�BL_LOG_INFO_BM_GET_BOOT_SEQ: Getting boot sequence in bootmgr.

�BL_LOG_INFO_BM_LAUNCH_ENTRY: Launching boot entry in bootmgr.

�BL_LOG_INFO_OSL_PREPARE_ENTERED: Reached prepare target within osloader.

�BL_LOG_INFO_OSL_OPEN_DEVICE: Preparing to open OS device in osloader.

�BL_LOG_INFO_OSL_LAUNCH_HYPERV: Preparing to launch hyper-v if specified within osloader.

�BL_LOG_INFO_OSL_LOAD_MODULES: Preparing to load OS modules within osloader.

�BL_LOG_INFO_OSL_KERNEL_SETUP: Setting up kernel within osloader.

�BL_LOG_INFO_OSL_PRELOAD_HYPERV: Preloading hyper-v if specified within osloader.

�BL_LOG_INFO_TCB_LAUNCH_HYPERV: Preparing to launch hyper-v.

@BL_LOG_ERROR: Generic Error

�BL_LOG_ERROR_BLI_NET_INIT: BlNetInitialize failed in BL initialization.

�BL_LOG_ERROR_BLI_UTL_INIT: BlUtlInitialize failed in BL initialization.

�BL_LOG_ERROR_BLI_SEC_BOOT_INIT: BlSecureBootInitialize failed in BL initialization.

�BL_LOG_ERROR_BLI_PDATA_INIT: BlpPdInitialize failed in BL initialization.

�BL_LOG_ERROR_BLI_RES_INIT: BlpResourceInitialize failed in BL initialization.

�BL_LOG_ERROR_BLI_SEC_LAUNCH_INIT: BlpTcbLaunchInitialize failed in BL initialization.

�BL_LOG_ERROR_BM_INIT_MACH_POL: BmSecureBootInitializeMachinePolicy failed in bootmgr.

�BL_LOG_ERROR_BM_FW_REG_SYSINT: BmFwRegisterSystemIntegrityPolicies failed in bootmgr.

�BL_LOG_ERROR_BM_RES_FIND_HTML: BlResourceFindHtml failed to find BOOTMGR.XSL in bootmgr.

�BL_LOG_ERROR_BM_XMI_INIT: BlXmiInitialize failed in bootmgr.

�BL_LOG_ERROR_BM_OPEN_DATA_STORE: BmOpenDataStore failed in bootmgr.

�BL_LOG_ERROR_BM_SELF_INT_CHK: BmpSelfIntegrityCheck failed in bootmgr.

�BL_LOG_ERROR_BM_FW_REG_REV_LIST: BmFwRegisterRevocationList failed in bootmgr.

�BL_LOG_ERROR_BM_RESUME_HIBER: BmResumeFromHibernate failed in bootmgr.

�BL_LOG_ERROR_BM_PURGE_OPT_START_SEQ: BL_ERROR_BM_PURGE_OPT_START_SEQ failed in bootmgr.

�BL_LOG_ERROR_BM_PURGE_OPT_BOOT_SEQ: BmPurgeOption failed for BCDE_BOOTMGR_TYPE_BOOT_SEQUENCE in bootmgr.

�BL_LOG_ERROR_BM_REOPEN_DATA_STORE: BmOpenDataStore failed on reopen in bootmgr.

�BL_LOG_ERROR_BM_UPDATE_APP_OPTS: BmpUpdateApplicationOptions failed in bootmgr.

�BL_LOG_ERROR_BM_LAUNCH_BOOT_ENTRY: BmpLaunchBootEntry failed in bootmgr.

�BL_LOG_ERROR_BM_CREATE_DEVICES: BmpCreateDevices failed in bootmgr.

�BL_LOG_ERROR_BM_LAUNCH_FLIGHT_BM: BmFwLaunchFlightedBootmgr failed in bootmgr.

�BL_LOG_ERROR_BM_FE_BOOTAPP_LD: Fatal error: failure to load boot app in bootmgr.

�BL_LOG_ERROR_BM_FE_CONFIG_DATA: Fatal error: failure attempting to read boot config file in bootmgr.

�BL_LOG_ERROR_BM_FE_NO_VALID_OS_ENTRY: Fatal error: no valid os entires found in bootmgr.

�BL_LOG_ERROR_BM_FE_NO_VALID_PXE_ENTRY: Fatal error: no valid entries found from PXE server in bootmgr.

�BL_LOG_ERROR_BM_FE_FAILURE_STATUS: Fatal error: failure status in bootmgr.

�BL_LOG_ERROR_BM_FE_BOOT_DEVICE: Fatal error: boot device inaccessible in bootmgr.

�BL_LOG_ERROR_BM_FE_RAMDISK_MEM: Fatal error: ramdisk device creation had insufficient memory in bootmgr.

�BL_LOG_ERROR_BM_FE_INVALID_BCD_STORE: Fatal error: BCD is invalid in bootmgr.

�BL_LOG_ERROR_BM_FE_INVALID_BCD_ENTRY: Fatal error: Invalid BCD entry in bootmgr.

�BL_LOG_ERROR_BM_FE_NO_SECUREBOOT_POL: Fatal error: Default Secure Boot policy not found in bootmgr.

�BL_LOG_ERROR_BM_FE_NO_PAE_SUPPORT: Fatal error: CPU does not support PAE in bootmgr.

�BL_LOG_ERROR_BM_FE_UNSEAL_NOT_POS: Fatal error: Cannot unseal sensitive data in bootmgr.

�BL_LOG_ERROR_BM_FE_GENERIC: Fatal error: Generic failure in bootmgr.

�BL_LOG_ERROR_BM_FAILED_SVN_CHECK: Bootmgr SVN check failed.

�BL_LOG_ERROR_BM_FAILED_CHAINLOAD_SVN_CHECK: SVN check failed while chainloading bootmgr.

�BL_LOG_ERROR_OSL_REM_INTERN_APP_OPTS: OslpRemoveInternalApplicationOptions failed in osloader.

�BL_LOG_ERROR_OSL_GET_APP_OPT_DEVICE: BlGetApplicationOptionDevice failed for BCDE_OSLOADER_TYPE_OS_DEVICE in osloader.

�BL_LOG_ERROR_OSL_GET_SYSTEM_ROOT: Failed to get SystemRoot in osloader.

�BL_LOG_ERROR_OSL_FORCED_FAIL: OslpCheckForcedFailure failed implying a forced failure in osloader.

BL_LOG_ERROR_OSL_DISABLE_VGA: BlAppendApplicationOptionBoolean for BCDE_OSLOADER_TYPE_DISABLE_VGA_MODE failed in osloader.

�BL_LOG_ERROR_OSL_OPEN_OS_DEVICE: BlDeviceOpen failed for os device in osloader.

�BL_LOG_ERROR_OSL_LOAD_SYS_HIVE: OslpLoadSystemHive failed in osloader.

�BL_LOG_ERROR_OSL_CREATE_OS_LD_OPTS: AhCreateLoadOptionsString failed in osloader.

�BL_LOG_ERROR_OSL_DISPLAY_INIT: OslDisplayInitialize failed in osloader.

�BL_LOG_ERROR_OSL_PROCESS_SI_POLICY: OslpProcessSIPolicy failed in osloader.

�BL_LOG_ERROR_OSL_DISP_ADV_OPT: OslDisplayAdvancedOptionsProcess failed in osloader.

�BL_LOG_ERROR_OSL_ARCH_HV_SETUP: OslArchHypervisorSetup failed in osloader.

�BL_LOG_ERROR_OSL_ARCH_HYPERCALL_SETUP: OslArchHypercallSetup failed in osloader.

�BL_LOG_ERROR_OSL_INIT_RESUME_CONTEXT: OslInitializeResumeContext failed in osloader.

�BL_LOG_ERROR_OSL_INIT_LDR_BLOCK: OslInitializeLoaderBlock failed in osloader.

�BL_LOG_ERROR_OSL_PROC_INIT_MACH_CONFIG: OslpProcessInitialMachineConfiguration failed in osloader.

�BL_LOG_ERROR_OSL_ENUM_DISKS: OslEnumerateDisks failed for the loader block in osloader.

�BL_LOG_ERROR_OSL_REINIT_SYS_HIVE: OslpReinitializeSystemHive failed in osloader.

�BL_LOG_ERROR_OSL_INIT_CODE_INT: OslInitializeCodeIntegrity failed in osloader.

�BL_LOG_ERROR_OSL_INIT_CODE_INT_LD_BLOCK: OslBuildCodeIntegrityLoaderBlock failed in osloader.

�BL_LOG_ERROR_OSL_SECURE_BOOT_VARS: OslFwProtectSecureBootVariables failed in osloader.

�BL_LOG_ERROR_OSL_LD_MODULES: OslpLoadAllModules failed in osloader.

�BL_LOG_ERROR_OSL_LD_FW_DRIVERS: OslFwLoadFirmwareDrivers failed in osloader.

�BL_LOG_ERROR_OSL_VSM_CHK_ENCRYPT_KEY: BlVsmCheckSystemPolicy failed for master sncrupt key provisioning in osloader.

�BL_LOG_ERROR_OSL_VSM_PHASE_0: Fatal VSM Phase 0 initializatin failure in osloader.

�BL_LOG_ERROR_OSL_SET_SEIL_SIGN_POL: OslSetSeILSigningPolicy failed in osloader.

�BL_LOG_ERROR_OSL_CMS_PROV_IDK: BlVsmCheckSystemPolicy failed during VSM Idendity key work in osloader.

�BL_LOG_ERROR_OSL_ARCH_KERNEL_SETUP_0: OslArchKernelSetup failed for 0 in osloader.

�BL_LOG_ERROR_OSL_FW_KERNEL_SETUP: OslFwKernelSetup failed for 0 in osloader.

�BL_LOG_ERROR_OSL_PROC_EV_STORE: OslpProcessEVStore failed in osloader.

�BL_LOG_ERROR_OSL_COPY_BOOT_OPTS: BlCopyBootOptions failed in osloader.

�BL_LOG_ERROR_OSL_FVE_SEC_BOOT_REST_ONE: BlFveSecureBootRestrictToOne failed in osloader.

�BL_LOG_ERROR_OSL_NET_UNDI_CLOSE: BlNetUndiClose failed in osloader.

�BL_LOG_ERROR_OSL_PROC_APP_PDATA: OslProcessApplicationPersistentData failed in osloader.

�BL_LOG_ERROR_OSL_BLD_MEM_CACHE_REQ_LIST: OslFwBuildMemoryCachingRequirementsList failed in osloader.

�BL_LOG_ERROR_OSL_BLD_RT_MEM_MAP: OslFwBuildRuntimeMemoryMap failed in osloader.

�BL_LOG_ERROR_OSL_VSM_SETUP_1: OslVsmSetup failed for 1 in osloader.

�BL_LOG_ERROR_OSL_BLD_KERNEL_MEM_MAP: BlTraceBuildKernelMemoryMapStop failed in osloader.

�BL_LOG_ERROR_OSL_ARCH_KERNEL_SETUP_1: OslArchKernelSetup failed for 1 in osloader.

�BL_LOG_ERROR_OSL_SET_VSM_POL_SYS_HIVE: OslSetVsmPolicy failed in osloader.

�BL_LOG_ERROR_OSL_ENUM_ENCLAVE_PAGES: OslEnumerateEnclavePageRegions failed in osloader.

�BL_LOG_ERROR_OSL_GATHER_ENTROPY: OslGatherEntropy failed in osloader.

�BL_LOG_ERROR_OSL_VSM_SETUP_0: OslVsmSetup failed for 0 in osloader.

�BL_LOG_ERROR_OSL_VSM_CANNOT_BE_DISABLED_BY_KSR: VSM must not be disabled through KSR

lBL_LOG_ERROR_OSL_VSM_PHASE0_ALLOCATE_PAGES_FAILED

hBL_LOG_ERROR_OSL_VSM_PHASE0_LOAD_MODULES_FAILED

hBL_LOG_ERROR_OSL_VSM_PHASE0_LOAD_CIDATA_FAILED

lBL_LOG_ERROR_OSL_VSM_PHASE0_COPY_VSM_KEYS_FAILED

pBL_LOG_ERROR_OSL_VSM_PHASE0_COPY_ACPI_TABLES_FAILED

dBL_LOG_ERROR_OSL_VSM_PHASE0_ARCH_SETUP_FAILED

tBL_LOG_ERROR_OSL_VSM_PHASE0_BUILD_PAGE_TABLES_FAILED

�BL_LOG_ERROR_OSL_BUILD_BSD_LOCATION_FAILED: OslpBuildBsdLogLocation failed in osloader.

BL_LOG_ERROR_OSL_GET_APP_OPT_DEVICE_OSDATA: BlGetApplicationOptionDevice failed for BCDE_OSLOADER_TYPE_OS_DATA_DEVICE in osloader.

�BL_LOG_ERROR_OSL_OPEN_OSDATA_DEVICE: BlDeviceOpen failed for osdata device in osloader.

�BL_LOG_ERROR_OSL_ENUMERATE_PERSISTENT_MEMORY: OslEnumeratePersistentMemory failed in osloader.

�BL_LOG_ERROR_OSL_HVCI_CANNOT_BE_ENABLED_BY_KSR: HVCI must not be enabled through KSR

�BL_LOG_ERROR_OSL_PROCESS_PRESERVED_MEMORY: Error while processing preserved memory.

�BL_LOG_ERROR_OSL_LOAD_DEVICES_HIVE: OslpLoadDevicesHive failed in osloader.

�BL_LOG_ERROR_OSL_LOAD_OSBOOT_HIVE: OslpLoadOsBootHive failed in osloader.

�BL_LOG_ERROR_OSL_LOAD_DRIVER_STORES: OslpLoadDriverStoreNodes failed in osloader.

�BL_LOG_ERROR_OSL_CMS_PROV_HBK: BlVsmCheckSystemPolicy failed during VSM Hibernation key work in osloader.

�BL_LOG_ERROR_OSL_ALLOC_LDR_BLOCK: OslAllocateLoaderBlock failed in osloader.

�BL_LOG_ERROR_OSL_ARCH_TCB_LAUNCH_0: OslTcbLaunch(0) failed in osloader.

�BL_LOG_ERROR_OSL_HVCI_CANNOT_BE_DISABLED_BY_KSR: HVCI must not be disabled through KSR

BL_LOG_ERROR_OSL_GET_APP_OPT_DEVICE_BSP: BlGetApplicationOptionDevice failed for BCDE_OSLOADER_TYPE_BSP_DEVICE in osloader.

�BL_LOG_ERROR_OSL_OPEN_BSP_DEVICE: BlDeviceOpen failed for bsp device in osloader.

pBL_LOG_ERROR_OSL_VSM_PHASE0_VBS_POLICY_NOT_PRESENT

�BL_LOG_ERROR_KSR_KSEG0: InitializeRebootAddressRange failed in SK extension.

�BL_LOG_ERROR_KSR_OUT_OF_MEMORY: Memory allocation failed in SK KSR extension.

�BL_LOG_ERROR_KSR_IMAGE_VALIDATION: Image validation failed in SK KSR extension.

�BL_LOG_ERROR_KSR_IMAGE_RELOCATION: Image relocation failed in SK KSR extension.

�BL_LOG_ERROR_KSR_BIND_IMPORT: Failed to bind imports to image in SK KSR extension.

�BL_LOG_ERROR_KSR_LOADER_ENTRY_POINT: SK loader entry point returned failure.

�BL_LOG_ERROR_TCB_SI_POLICY_CHECK: Failed to validate and measure SI policy.

�BL_LOG_ERROR_TCB_LOAD_TCBLOADER: Failed to load tcbloader.dll.

tBL_LOG_ERROR_TCB_LOAD: Failed to perform load action.

|BL_LOG_ERROR_TCB_RESUME: Failed to perform resume action.

�BL_LOG_ERROR_TCB_INVALID_ATTRIBUTES: Invalid tcblaunch application attributes.

�BL_LOG_ERROR_TCB_REGISTER_EVENT_HANDLER: Failed to register launch notificaiton handler.

�BL_LOG_ERROR_TCB_OPEN_DEVICE: Failed to open application device.

�BL_LOG_ERROR_TCB_GET_DEVICE: Failed to query application device.

�BL_LOG_ERROR_GET_SYSTEM_ROOT: Failed to get SystemRoot value.

None

@Processor is not supported.

4VMX is not supported.

4SMX is not supported.

pTXT is disabled by the BIOS in MSR_FEATURE_CONTROL.

lRequired GETSEC[CAPABILITIES] are not available.

<TPM 2.0 is not available.

dMemory Attributes Table (MAT) not available.

|No SINIT ACM module type found at the SINIT base address.

dThe ACM UUID does not match well known value.

xThe ACM client/server flags do not match the bios data.

`The ACM debug flag does not match platform.

TThe ACM does not support the chipset.

XThe ACM does not support the processor.

lA more up to date ACM is available on the system.

8ACM layout corruption.

(truncatememory

(avoidlowmemory

 testsigning

,nointegritychecks

Undefined

Available

Applied

Rejected

NotFound

<applied through registry

Xapplied through compatibility database

<applied through registry

Xapplied through compatibility database

PackageId

None

 VBS Enabled

$VSM Required

 Secure Boot

,Iommu Protection

Mmio Nx

4Strong MSR Filtering

Mandatory

Hvci

 Hvci Strict

HBoot Chain Signer Soft Enforced

HBoot Chain Signer Hard Enforced

(Measured Launch

$4VS_VERSION_INFO��
�cE
�cE?�StringFileInfo`040904B0LCompanyNameMicrosoft Corporation|*FileDescriptionMicrosoft-Windows-System-Events Resourcesn'FileVersion10.0.17763.7553 (WinBuild.160101.0800)h$InternalNamemicrosoft-windows-system-events.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.x(OriginalFilenamemicrosoft-windows-system-events.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.17763.7553DVarFileInfo$Translation	�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING

Youez - 2016 - github.com/yon3zu
LinuXploit