Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the KERNEL-PNP-EVENTS.H header at
d:\th.public.fre\internal\minwin\priv_sdk\inc
and draws from it the following type definition:
Line Number | Type |
---|---|
33 | struct _MCGEN_TRACE_CONTEXT |
The header KERNEL-PNP-EVENTS.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK). Presumably, it is generated by the Message Compiler from an instrumentation manifest written as XML.