#pragma classflags(64)
#pragma namespace("\\\\.\\Root\\WMI")

[Dynamic,Guid("{08ab3b7f-de13-445e-8331-745fd7183ecb}"),HttpGlobalRawEtw,locale("MS\\0x409")] 
class FtpServiceProvider : EventTrace
{
  [DefineValues{"ETW_FTP_CONNECTION", "ETW_FTP_COMMANDS", "ETW_FTP_PROCESSING", "ETW_FTP_AUTHENTICATION", "ETW_FTP_SECURITY", "ETW_FTP_FILE_SYSTEM_INFOETW_FTP_EXTENSIBILITY", "ETW_FTP_SSL_INFO", "ETW_FTP_SSL_CLEARTEXT_DATA", "ETW_FTP_SSL_SCHANNEL_CALLS"},Values{"FtpConnection", "FtpCommands", "FtpProcessing", "FtpAuthentication", "FtpSecurity", "FtpFileSystemAccess", "FtpExtensibility", "FtpSslInfo", "FtpSslShowCleartextData", "FtpSslSchannelCalls"},ValueMap{"0x00000001", "0x00000002", "0x00000004", "0x00000008", "0x00000010", "0x00000011", "0x00000012", "0x00000014", "0x00000018", "0x00000020"}] uint32 Flags;
  [DefineValues{"TRACE_LEVEL_FATAL", "TRACE_LEVEL_ERROR", "TRACE_LEVEL_WARNING", "TRACE_LEVEL_INFORMATION", "TRACE_LEVEL_VERBOSE"},Values{"Fatal", "Error", "Warning", "Information", "Verbose"},ValueMap{"0x1", "0x2", "0x3", "0x4", "0x5"},ValueType("index")] uint32 Level;
};

[Dynamic,Guid("{431de49e-2184-4104-a0c1-e70bb34f8f00}"),EventVersion(1),DisplayName("FtpConnection"),locale("MS\\0x409")] 
class FtpConnection : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(4)] 
class FtpConnection_StartCtrlChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string PreliminarySiteName;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string ClientIPAddress;
  [WmiDataId(4),read] uint16 ClientPort;
  [WmiDataId(5),StringTermination("NullTerminated"),format("a"),read] string ServerIPAddress;
  [WmiDataId(6),read] uint16 ServerPort;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpConnection_EndFtpChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(3),EventLevel(4)] 
class FtpConnection_CloseCtrlChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(4),EventLevel(2)] 
class FtpConnection_CloseCtrlChannelFail : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
  [WmiDataId(3),DefineValues{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"},Values{"NONE", "DENIED_BY_AUTHORIZATION", "DENIED_BY_FILE_SYSTEM", "ERROR_FROM_FILE_SYSTEM", "DENIED_BY_IP_RULES", "DENIED_WRITE_TO_VDIR_ROOT", "FAILED_TO_CHECK_SHORT_NAME", "DENIED_FOR_SHORT_NAME", "DENIED_HIDDEN_SEGMENT", "DENIED_URL_SEQUENCE", "DENIED_HIGH_BIT_CHARACTERS", "DENIED_FILE_EXTENSION", "DENIED_LONG_URL", "DENIED_NOT_A_DISK_FILE", "CTRL_IDLE_TIMEOUT", "DATA_IDLE_TIMEOUT", "CTRL_NEW_CONN_TIMEOUT", "INVALID_SITE_CONFIGURATION", "INVALID_CONFIGURATION", "CTRL_REFUSED_CONN_LIMIT", "DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "DATA_ABORTED_SERVER_ERROR", "DATA_ABORTED_BY_CLIENT", "SSL_REQ_FOR_DATA", "SSL_REQ_FOR_CTRL", "SSL_REQ_FOR_CREDS", "SSL_DENIED_FOR_DATA", "SSL_DENIED_FOR_CTRL", "SSL_DENIED_FOR_CREDS", "SSL_DENIED_FOR_CMDS", "NO_SSL_CERT", "SSL_INIT_FAILED", "HOME_DIR_LOOKUP_FAILED", "CUSTOM_AUTH_CALL_FAILED", "FAILED_TO_AUTHENTICATE", "NO_AUTH_METHOD_ALLOWED", "UNKNOWN_HOSTNAME", "CLIENT_IP_MISMATCH_ON_DATA", "MAXIMUM_FILE_SIZE_EXCEEDED", "AD_ISOLATION_NEEDS_BASIC_AUTH", "ERROR_DURING_AUTHENTICATION", "ANONYMOUS_AUTH_NOT_ALLOWED", "PROTECTION_NEGOTIATION_FAILED", "SSL_CERT_NOT_FOUND", "SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SSL_CERT_INVALID_HASH_LENGTH", "SSL_CLIENT_CERT_REQUIRED", "SSL_CLIENT_CERT_INVALID", "SSL_CLIENT_CERT_MISMATCH", "DATA_MIN_BANDWIDTH_TIMEOUT", "DENIED_BY_COMMAND_FILTERING_RULES", "DISCONNECTED_BY_ADMINISTRATOR", "CONNECTION_ERROR", "CLOSED_ON_CONFIG_CHANGE", "SSL_128_BIT_REQUIRED"},ValueMap{"0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "50", "51", "52", "53", "54", "55"},ValueType("index")] uint32 SubStatus;
};

[Dynamic,EventType(5),EventLevel(4)] 
class FtpConnection_StartDataChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string ClientIPAddress;
  [WmiDataId(3),read] uint16 ClientPort;
  [WmiDataId(4),StringTermination("NullTerminated"),format("a"),read] string ServerIPAddress;
  [WmiDataId(5),read] uint16 ServerPort;
};

[Dynamic,EventType(6),EventLevel(4)] 
class FtpConnection_EndDataChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(7),EventLevel(4)] 
class FtpConnection_StartListenerDataChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string ServerIPAddress;
  [WmiDataId(3),read] uint16 ServerPort;
};

[Dynamic,EventType(8),EventLevel(4)] 
class FtpConnection_CloseDataChannelListener : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(9),EventLevel(2)] 
class FtpConnection_CloseDataChannelListenerFail : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
  [WmiDataId(3),DefineValues{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"},Values{"NONE", "DENIED_BY_AUTHORIZATION", "DENIED_BY_FILE_SYSTEM", "ERROR_FROM_FILE_SYSTEM", "DENIED_BY_IP_RULES", "DENIED_WRITE_TO_VDIR_ROOT", "FAILED_TO_CHECK_SHORT_NAME", "DENIED_FOR_SHORT_NAME", "DENIED_HIDDEN_SEGMENT", "DENIED_URL_SEQUENCE", "DENIED_HIGH_BIT_CHARACTERS", "DENIED_FILE_EXTENSION", "DENIED_LONG_URL", "DENIED_NOT_A_DISK_FILE", "CTRL_IDLE_TIMEOUT", "DATA_IDLE_TIMEOUT", "CTRL_NEW_CONN_TIMEOUT", "INVALID_SITE_CONFIGURATION", "INVALID_CONFIGURATION", "CTRL_REFUSED_CONN_LIMIT", "DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "DATA_ABORTED_SERVER_ERROR", "DATA_ABORTED_BY_CLIENT", "SSL_REQ_FOR_DATA", "SSL_REQ_FOR_CTRL", "SSL_REQ_FOR_CREDS", "SSL_DENIED_FOR_DATA", "SSL_DENIED_FOR_CTRL", "SSL_DENIED_FOR_CREDS", "SSL_DENIED_FOR_CMDS", "NO_SSL_CERT", "SSL_INIT_FAILED", "HOME_DIR_LOOKUP_FAILED", "CUSTOM_AUTH_CALL_FAILED", "FAILED_TO_AUTHENTICATE", "NO_AUTH_METHOD_ALLOWED", "UNKNOWN_HOSTNAME", "CLIENT_IP_MISMATCH_ON_DATA", "MAXIMUM_FILE_SIZE_EXCEEDED", "AD_ISOLATION_NEEDS_BASIC_AUTH", "ERROR_DURING_AUTHENTICATION", "ANONYMOUS_AUTH_NOT_ALLOWED", "PROTECTION_NEGOTIATION_FAILED", "SSL_CERT_NOT_FOUND", "SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SSL_CERT_INVALID_HASH_LENGTH", "SSL_CLIENT_CERT_REQUIRED", "SSL_CLIENT_CERT_INVALID", "SSL_CLIENT_CERT_MISMATCH", "DATA_MIN_BANDWIDTH_TIMEOUT", "DENIED_BY_COMMAND_FILTERING_RULES", "DISCONNECTED_BY_ADMINISTRATOR", "CONNECTION_ERROR", "CLOSED_ON_CONFIG_CHANGE", "SSL_128_BIT_REQUIRED"},ValueMap{"0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "50", "51", "52", "53", "54", "55"},ValueType("index")] uint32 SubStatus;
};

[Dynamic,EventType(10),EventLevel(4)] 
class FtpConnection_CloseDataChannel : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(11),EventLevel(2)] 
class FtpConnection_CloseDataChannelFail : FtpConnection
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
  [WmiDataId(3),DefineValues{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"},Values{"NONE", "DENIED_BY_AUTHORIZATION", "DENIED_BY_FILE_SYSTEM", "ERROR_FROM_FILE_SYSTEM", "DENIED_BY_IP_RULES", "DENIED_WRITE_TO_VDIR_ROOT", "FAILED_TO_CHECK_SHORT_NAME", "DENIED_FOR_SHORT_NAME", "DENIED_HIDDEN_SEGMENT", "DENIED_URL_SEQUENCE", "DENIED_HIGH_BIT_CHARACTERS", "DENIED_FILE_EXTENSION", "DENIED_LONG_URL", "DENIED_NOT_A_DISK_FILE", "CTRL_IDLE_TIMEOUT", "DATA_IDLE_TIMEOUT", "CTRL_NEW_CONN_TIMEOUT", "INVALID_SITE_CONFIGURATION", "INVALID_CONFIGURATION", "CTRL_REFUSED_CONN_LIMIT", "DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "DATA_ABORTED_SERVER_ERROR", "DATA_ABORTED_BY_CLIENT", "SSL_REQ_FOR_DATA", "SSL_REQ_FOR_CTRL", "SSL_REQ_FOR_CREDS", "SSL_DENIED_FOR_DATA", "SSL_DENIED_FOR_CTRL", "SSL_DENIED_FOR_CREDS", "SSL_DENIED_FOR_CMDS", "NO_SSL_CERT", "SSL_INIT_FAILED", "HOME_DIR_LOOKUP_FAILED", "CUSTOM_AUTH_CALL_FAILED", "FAILED_TO_AUTHENTICATE", "NO_AUTH_METHOD_ALLOWED", "UNKNOWN_HOSTNAME", "CLIENT_IP_MISMATCH_ON_DATA", "MAXIMUM_FILE_SIZE_EXCEEDED", "AD_ISOLATION_NEEDS_BASIC_AUTH", "ERROR_DURING_AUTHENTICATION", "ANONYMOUS_AUTH_NOT_ALLOWED", "PROTECTION_NEGOTIATION_FAILED", "SSL_CERT_NOT_FOUND", "SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SSL_CERT_INVALID_HASH_LENGTH", "SSL_CLIENT_CERT_REQUIRED", "SSL_CLIENT_CERT_INVALID", "SSL_CLIENT_CERT_MISMATCH", "DATA_MIN_BANDWIDTH_TIMEOUT", "DENIED_BY_COMMAND_FILTERING_RULES", "DISCONNECTED_BY_ADMINISTRATOR", "CONNECTION_ERROR", "CLOSED_ON_CONFIG_CHANGE", "SSL_128_BIT_REQUIRED"},ValueMap{"0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "50", "51", "52", "53", "54", "55"},ValueType("index")] uint32 SubStatus;
};

[Dynamic,Guid("{ffed7bb7-5015-4f07-b3bc-2bcc08e246b9}"),EventVersion(1),DisplayName("FtpSslInfo"),locale("MS\\0x409")] 
class FtpSslInfo : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(4)] 
class FtpSslInfo_SslStartHandshake : FtpSslInfo
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),read] boolean NegotiateClientCerts;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpSslInfo_SslEndHandshake : FtpSslInfo
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),read] uint16 CipherStrength;
};

[Dynamic,EventType(3),EventLevel(5)] 
class FtpSslInfo_ClientCertInfo : FtpSslInfo
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string Subject;
  [WmiDataId(3),StringTermination("NullTerminated"),format("w"),read] string Issuer;
  [WmiDataId(4),format("x"),read] uint32 VerificationStatus;
  [WmiDataId(5),read] boolean MappedToken;
};

[Dynamic,EventType(4),EventLevel(5)] 
class FtpSslInfo_HandshakeInfo : FtpSslInfo
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string Subject;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string Issuer;
  [WmiDataId(4),read] uint32 PublicKeySize;
  [WmiDataId(5),read] boolean HardwareAcceleratorPresent;
};

[Dynamic,EventType{100, 101, 102, 103, 104, 105, 106, 107, 108},EventLevel(2)] 
class FtpSslInfo_SslErrorEvents : FtpSslInfo
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string Param1;
  [WmiDataId(4),StringTermination("NullTerminated"),format("a"),read] string Param2;
};

[Dynamic,Guid("{a7a4abb3-e0b4-48cb-9595-385d14e145d7}"),EventVersion(1),DisplayName("FtpSslShowCleartextData"),locale("MS\\0x409")] 
class FtpSslShowCleartextData : FtpServiceProvider
{
};

[Dynamic,EventType(4),EventLevel(5)] 
class FtpSslShowCleartextData_DecryptedData : FtpSslShowCleartextData
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),read] string DataFragmentVisibleChars;
  [WmiDataId(3),StringTermination("NullTerminated"),read] string DataFragmentInHex;
  [WmiDataId(4),read] uint32 ToBeEncryptedCount;
};

[Dynamic,EventType(5),EventLevel(5)] 
class FtpSslShowCleartextData_ToBeEncryptedData : FtpSslShowCleartextData
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),read] string DataFragmentVisibleChars;
  [WmiDataId(3),StringTermination("NullTerminated"),read] string DataFragmentInHex;
  [WmiDataId(4),read] uint32 ToBeEncryptedCount;
};

[Dynamic,Guid("{75b3cef4-5dc0-419f-8690-881fdbd3ac55}"),EventVersion(1),DisplayName("FtpSslSchannelCalls"),locale("MS\\0x409")] 
class FtpSslSchannelCalls : FtpServiceProvider
{
};

[Dynamic,EventType(4),EventLevel(5)] 
class FtpSslSchannelCalls_SchannelCall : FtpSslSchannelCalls
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string FunctionName;
  [WmiDataId(3),format("x"),read] uint32 ReturnValue;
};

[Dynamic,Guid("{6d010eab-45bc-4848-8c75-6a67036786fe}"),EventVersion(1),DisplayName("FtpAuthentication"),locale("MS\\0x409")] 
class FtpAuthentication : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(4)] 
class FtpAuthentication_StartAuthentication : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpAuthentication_EndAuthentication : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string AuthType;
  [WmiDataId(3),StringTermination("NullTerminated"),format("w"),read] string RemoteUserName;
  [WmiDataId(4),StringTermination("NullTerminated"),format("w"),read] string AuthUserName;
  [WmiDataId(5),DefineValues{"IMPERSONATION_LEVEL_ANONYMOUS", "IMPERSONATION_LEVEL_IDENTIFY", "IMPERSONATION_LEVEL_IMPERSONATE", "IMPERSONATION_LEVEL_DELEGATE", "IMPERSONATION_LEVEL_UNKNOWN", "IMPERSONATION_LEVEL_NONE"},ValueMap{"0x0", "0x1", "0x2", "0x3", "0x4", "0x5"},ValueType("index"),format("x"),read] uint32 TokenImpersonationLevel;
};

[Dynamic,EventType(3),EventLevel(4)] 
class FtpAuthentication_StartAnonymousLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string UserName;
};

[Dynamic,EventType(4),EventLevel(4)] 
class FtpAuthentication_EndAnonymousLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(5),EventLevel(3)] 
class FtpAuthentication_FailAnonymousLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
};

[Dynamic,EventType(6),EventLevel(4)] 
class FtpAuthentication_StartCustomLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string LogonProvider;
};

[Dynamic,EventType(7),EventLevel(4)] 
class FtpAuthentication_EndCustomLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(8),EventLevel(3)] 
class FtpAuthentication_FailCustomLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
};

[Dynamic,EventType(9),EventLevel(4)] 
class FtpAuthentication_StartBasicLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string UserName;
};

[Dynamic,EventType(10),EventLevel(4)] 
class FtpAuthentication_EndBasicLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(11),EventLevel(3)] 
class FtpAuthentication_FailBasicLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
};

[Dynamic,EventType(12),EventLevel(2)] 
class FtpAuthentication_FailAnonymousNotAllowed : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(13),EventLevel(2)] 
class FtpAuthentication_InvalidAnonymousAccount : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
};

[Dynamic,EventType(14),EventLevel(3)] 
class FtpAuthentication_PasswordChangeNeeded : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(15),EventLevel(3)] 
class FtpAuthentication_AuthenticationNotConfigured : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(16),EventLevel(4)] 
class FtpAuthentication_StartClientCertLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(17),EventLevel(4)] 
class FtpAuthentication_EndClientCertLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(18),EventLevel(3)] 
class FtpAuthentication_FailClientCertLogon : FtpAuthentication
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ErrorCode;
};

[Dynamic,Guid("{DE9491AE-E011-4b9f-9B02-88C5A6D7A379}"),EventVersion(1),DisplayName("FtpSecurity"),locale("MS\\0x409")] 
class FtpSecurity : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(3)] 
class FtpSecurity_DataConnectionIpAddressMismatch : FtpSecurity
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string ControlChannelIPAddress;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string DataChannelIPAddress;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpSecurity_ImpersonateUser : FtpSecurity
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string UserName;
};

[Dynamic,EventType(3),EventLevel(4)] 
class FtpSecurity_RevertImpersonation : FtpSecurity
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(4),EventLevel(4)] 
class FtpSecurity_IPRestriction : FtpSecurity
{
  [WmiDataId(1),StringTermination("NullTerminated"),format("a"),read] string ClientIPAddress;
  [WmiDataId(2),read] uint16 ClientPort;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string ServerIPAddress;
  [WmiDataId(4),read] uint16 ServerPort;
};

[Dynamic,Guid("{29025f26-e453-4abb-a8a2-7d9241d30674}"),EventVersion(1),DisplayName("FtpFileSystemAccess"),locale("MS\\0x409")] 
class FtpFileSystemAccess : FtpServiceProvider
{
};

[Dynamic,EventType{1, 4, 7, 10, 13},EventLevel(5)] 
class FtpFileSystemAccess_StartCreateOrDelete : FtpFileSystemAccess
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string FileName;
};

[Dynamic,EventType{2, 5, 8, 11, 14},EventLevel(5)] 
class FtpFileSystemAccess_EndCreateOrDelete : FtpFileSystemAccess
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType{3, 6, 9, 12, 15},EventLevel(2)] 
class FtpFileSystemAccess_FailedCreateOrDelete : FtpFileSystemAccess
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string FileName;
  [WmiDataId(3),format("x"),read] uint32 ReturnValue;
};

[Dynamic,Guid("{480e242c-86d3-42fb-8359-602907e61f0e}"),EventVersion(1),DisplayName("FtpCommands"),locale("MS\\0x409")] 
class FtpCommands : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(4)] 
class FtpCommands_StartFtpCommand : FtpCommands
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string Command;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string Parameter;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpCommands_EndFtpCommand : FtpCommands
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(3),EventLevel(2)] 
class FtpCommands_FailFtpCommand : FtpCommands
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ReturnValue;
  [WmiDataId(3),DefineValues{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"},Values{"NONE", "DENIED_BY_AUTHORIZATION", "DENIED_BY_FILE_SYSTEM", "ERROR_FROM_FILE_SYSTEM", "DENIED_BY_IP_RULES", "DENIED_WRITE_TO_VDIR_ROOT", "FAILED_TO_CHECK_SHORT_NAME", "DENIED_FOR_SHORT_NAME", "DENIED_HIDDEN_SEGMENT", "DENIED_URL_SEQUENCE", "DENIED_HIGH_BIT_CHARACTERS", "DENIED_FILE_EXTENSION", "DENIED_LONG_URL", "DENIED_NOT_A_DISK_FILE", "CTRL_IDLE_TIMEOUT", "DATA_IDLE_TIMEOUT", "CTRL_NEW_CONN_TIMEOUT", "INVALID_SITE_CONFIGURATION", "INVALID_CONFIGURATION", "CTRL_REFUSED_CONN_LIMIT", "DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "DATA_ABORTED_SERVER_ERROR", "DATA_ABORTED_BY_CLIENT", "SSL_REQ_FOR_DATA", "SSL_REQ_FOR_CTRL", "SSL_REQ_FOR_CREDS", "SSL_DENIED_FOR_DATA", "SSL_DENIED_FOR_CTRL", "SSL_DENIED_FOR_CREDS", "SSL_DENIED_FOR_CMDS", "NO_SSL_CERT", "SSL_INIT_FAILED", "HOME_DIR_LOOKUP_FAILED", "CUSTOM_AUTH_CALL_FAILED", "FAILED_TO_AUTHENTICATE", "NO_AUTH_METHOD_ALLOWED", "UNKNOWN_HOSTNAME", "CLIENT_IP_MISMATCH_ON_DATA", "MAXIMUM_FILE_SIZE_EXCEEDED", "AD_ISOLATION_NEEDS_BASIC_AUTH", "ERROR_DURING_AUTHENTICATION", "ANONYMOUS_AUTH_NOT_ALLOWED", "PROTECTION_NEGOTIATION_FAILED", "SSL_CERT_NOT_FOUND", "SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SSL_CERT_INVALID_HASH_LENGTH", "SSL_CLIENT_CERT_REQUIRED", "SSL_CLIENT_CERT_INVALID", "SSL_CLIENT_CERT_MISMATCH", "DATA_MIN_BANDWIDTH_TIMEOUT", "DENIED_BY_COMMAND_FILTERING_RULES", "DISCONNECTED_BY_ADMINISTRATOR", "CONNECTION_ERROR", "CLOSED_ON_CONFIG_CHANGE", "SSL_128_BIT_REQUIRED"},ValueMap{"0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23", "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35", "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47", "48", "49", "50", "51", "52", "53", "54", "55"},ValueType("index")] uint32 SubStatus;
};

[Dynamic,EventType(4),EventLevel(5)] 
class FtpCommands_QueueFtpCommand : FtpCommands
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("a"),read] string Command;
  [WmiDataId(3),StringTermination("NullTerminated"),format("a"),read] string Parameter;
};

[Dynamic,Guid("{ab7ca890-66b2-4317-b838-6ca8afea43b0}"),EventVersion(1),DisplayName("FtpProcessing"),locale("MS\\0x409")] 
class FtpProcessing : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(4)] 
class FtpProcessing_StartMapPath : FtpProcessing
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string Url;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpProcessing_EndMapPath : FtpProcessing
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string PhysicalPath;
};

[Dynamic,EventType(3),EventLevel(3)] 
class FtpProcessing_FailMapPath : FtpProcessing
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ReturnValue;
};

[Dynamic,EventType(4),EventLevel(4)] 
class FtpProcessing_StartReadUrlConfig : FtpProcessing
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string Url;
};

[Dynamic,EventType(5),EventLevel(4)] 
class FtpProcessing_EndReadUrlConfig : FtpProcessing
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string UniqueConfigPath;
  [WmiDataId(3),read] boolean UseCachedConfig;
};

[Dynamic,EventType(6),EventLevel(3)] 
class FtpProcessing_FailReadUrlConfig : FtpProcessing
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ReturnValue;
};

[Dynamic,Guid("{34ca8a09-6616-4c88-bd35-a3ffff6d0850}"),EventVersion(1),DisplayName("FtpExtensibility"),locale("MS\\0x409")] 
class FtpExtensibility : FtpServiceProvider
{
};

[Dynamic,EventType(1),EventLevel(4)] 
class FtpExtensibility_StartCreateProvider : FtpExtensibility
{
  [WmiDataId(1),StringTermination("NullTerminated"),format("w"),read] string Provider;
};

[Dynamic,EventType(2),EventLevel(4)] 
class FtpExtensibility_EndCreateProvider : FtpExtensibility
{
};

[Dynamic,EventType(3),EventLevel(3)] 
class FtpExtensibility_FailCreateProvider : FtpExtensibility
{
  [WmiDataId(1),format("x"),read] uint32 ReturnValue;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string ErrorDetails;
};

[Dynamic,EventType(4),EventLevel(4)] 
class FtpExtensibility_StartCallProvider : FtpExtensibility
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),StringTermination("NullTerminated"),format("w"),read] string Provider;
};

[Dynamic,EventType(5),EventLevel(4)] 
class FtpExtensibility_EndCallProvider : FtpExtensibility
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
};

[Dynamic,EventType(6),EventLevel(3)] 
class FtpExtensibility_FailCallProvider : FtpExtensibility
{
  [WmiDataId(1),extension("Guid"),ActivityID,read] object SessionId;
  [WmiDataId(2),format("x"),read] uint32 ReturnValue;
  [WmiDataId(3),StringTermination("NullTerminated"),format("w"),read] string ErrorDetails;
};

[Dynamic,EventType(7),EventLevel(4)] 
class FtpExtensibility_StartCreateFtpHost : FtpExtensibility
{
};

[Dynamic,EventType(8),EventLevel(4)] 
class FtpExtensibility_EndCreateFtpHost : FtpExtensibility
{
};

[Dynamic,EventType(9),EventLevel(3)] 
class FtpExtensibility_FailCreateFtpHost : FtpExtensibility
{
  [WmiDataId(1),format("x"),read] uint32 ReturnValue;
};

[Dynamic,EventType(10),EventLevel(3)] 
class FtpExtensibility_TerminateExtensibilityProcess : FtpExtensibility
{
  [WmiDataId(1),format("x"),read] uint32 ProcessID;
};