<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-Winsrv" version="6.1.7601.17514" processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-Winsrv.Resources" version="6.1.7601.17514" processorArchitecture="x86" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <file name="winsrv.dll" destinationPath="$(runtime.system32)\" sourceName="winsrv.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">8lXctMf0+UG6J3ANZmhK0Lo98RTW8pjiqQkJW3GxHZQ=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="User experience OS modules" />
        <string id="displayName" value="User experience OS modules" />
        <string id="eventProviderName" value="Microsoft-Windows-Winsrv" />
        <string id="winsrv.eventstr1" value="The following application attempted to veto the shutdown: %1." />
        <string id="winsrv.eventstr2" value="The following application was terminated because it was hung: %1." />
      </stringTable>
    </resources>
  </localization>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{9D55B53D-449B-4824-A637-24F9D69AA02F}" message="$(string.eventProviderName)" messageFileName="%SystemRoot%\system32\winsrv.dll" name="Microsoft-Windows-Winsrv" resourceFileName="%SystemRoot%\system32\winsrv.dll" symbol="WinsrvControlGuid">
        <channels>
          <importChannel chid="AppCh" name="Application" />
          <channel chid="defch" name="Microsoft-Windows-Winsrv/Analytic" type="Analytic" />
        </channels>
        <keywords>
          <keyword mask="0x100" name="Perf" />
        </keywords>
        <templates>
          <template tid="appveto_template">
            <data inType="win:UnicodeString" name="AppName" />
            <data inType="win:UInt32" name="ResponseTime" />
            <UserData>
              <VetoAppEvent xmlns="http://manifests.microsoft.com/win/2004/08/windows/winsrv">
                <AppName>%1</AppName>
                <ResponseTime>%2</ResponseTime>
              </VetoAppEvent>
            </UserData>
          </template>
          <template tid="apphung_template">
            <data inType="win:UnicodeString" name="AppName" />
            <UserData>
              <HungAppEvent xmlns="http://manifests.microsoft.com/win/2004/08/windows/winsrv">
                <AppName>%1</AppName>
              </HungAppEvent>
            </UserData>
          </template>
          <template tid="ThreadShutdown_Start">
            <data inType="win:UInt32" name="ThreadId" />
            <data inType="win:UInt32" name="Flags" outType="win:HexInt32" />
          </template>
          <template tid="ThreadShutdown_Stop">
            <data inType="win:UInt32" name="Command" />
          </template>
          <template tid="ThreadShutdown_SentMessage">
            <data inType="win:UInt32" name="MessageId" />
            <data inType="win:UInt32" name="Flags" outType="win:HexInt32" />
          </template>
          <template tid="WaitForProcess_Stop">
            <data inType="win:UInt32" name="WaitStatus" outType="win:HexInt32" />
          </template>
        </templates>
        <tasks>
          <task name="ThreadShutdown" value="12001" />
          <task name="ThreadShutdown_SentMessage" value="12003" />
          <task name="TerminateProcess" value="12005" />
          <task name="WaitForProcess" value="12007" />
        </tasks>
        <events>
          <event channel="AppCh" level="win:Informational" message="$(string.winsrv.eventstr1)" opcode="win:Info" symbol="AppVetoEvent" template="appveto_template" value="10001" />
          <event channel="AppCh" level="win:Informational" message="$(string.winsrv.eventstr2)" opcode="win:Info" symbol="AppHungEvent" template="apphung_template" value="10002" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Start" symbol="WinSrvEvt_ThreadShutdown_Start" task="ThreadShutdown" template="ThreadShutdown_Start" value="12001" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Stop" symbol="WinSrvEvt_ThreadShutdown_Stop" task="ThreadShutdown" template="ThreadShutdown_Stop" value="12002" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Info" symbol="WinSrvEvt_ThreadShutdown_SentMessage" task="ThreadShutdown_SentMessage" template="ThreadShutdown_SentMessage" value="12003" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Start" symbol="WinSrvEvt_TerminateProcess_Start" task="TerminateProcess" value="12005" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Stop" symbol="WinSrvEvt_TerminateProcess_Stop" task="TerminateProcess" value="12006" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Start" symbol="WinSrvEvt_WaitForProcess_Start" task="WaitForProcess" value="12007" />
          <event channel="defch" keywords="Perf" level="win:Informational" opcode="win:Stop" symbol="WinSrvEvt_WaitForProcess_Stop" task="WaitForProcess" template="WaitForProcess_Stop" value="12008" />
        </events>
      </provider>
      <messageTable>
        <message message="$(string.eventProviderName)" value="100" />
      </messageTable>
    </events>
  </instrumentation>
</assembly>