<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-FAT" version="10.0.10586.306" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="fastfat.sys" destinationPath="$(runtime.drivers)\" sourceName="fastfat.sys" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">JgRN4XYFa39b8qUKZZJDz9fyXP7gNbOjwxZbNpmHKSY=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft-Windows-Base Technologies-File Systems (Core)" version="10.0.10586.306" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.10586.306" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance subcategory="fastfat">
        <serviceData name="fastfat" displayName="FAT12/16/32 File System Driver" errorControl="normal" group="Boot File System" start="demand" type="fileSystemDriver" description="Note - dependance on CDROM.SYS only if required to read/write DVD-RAM media (which appears as CD class device). (Core) (All pieces)" />
      </categoryInstance>
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootCritical" />
    </categoryMembership>
  </memberships>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\SQMLogger\{3e59a529-b0b3-4a11-8129-9ffe6bb46eb9}">
      <registryValue name="LoggerName" valueType="REG_SZ" value="SQMLogger" />
      <registryValue name="Enabled" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="EnableLevel" valueType="REG_DWORD" value="0x00000004" />
      <registryValue name="MatchAnyKeyword" valueType="REG_QWORD" value="0000000000000800" />
      <registryValue name="EnableProperty" valueType="REG_DWORD" value="0x00000002" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="Note - dependance on CDROM.SYS only if required to read/write DVD-RAM media (which appears as CD class device). (Core) (All pieces)" />
        <string id="displayName" value="FAT12/16/32 File System Driver" />
      </stringTable>
    </resources>
  </localization>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events" xmlns:xs="http://www.w3.org/2001/XMLSchema">
      <provider guid="{3e59a529-b0b3-4a11-8129-9ffe6bb46eb9}" messageFileName="%SystemRoot%\system32\drivers\fastfat.sys" name="Microsoft-Windows-Fat-SQM" parameterFileName="%SystemRoot%\system32\drivers\fastfat.sys" resourceFileName="%SystemRoot%\system32\drivers\fastfat.sys" symbol="FatSqmEventProvider">
        <channels>
          <importChannel chid="SYSTEM" name="System" />
        </channels>
        <templates>
          <template tid="tid_SqmSessionStart">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
            <data inType="win:SID" name="SqmSid" outType="xs:string" />
            <data inType="win:UInt32" name="SqmWindowsSessionId" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmSessionFlags" outType="xs:unsignedInt" />
          </template>
          <template tid="tid_SqmSessionEnd">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
          </template>
          <template tid="tid_SqmDWORDDatapoint">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
            <data inType="win:UInt32" name="SqmID" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmDWORDDatapointValue" outType="xs:unsignedInt" />
          </template>
          <template tid="tid_SqmStringDatapoint">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
            <data inType="win:UInt32" name="SqmID" outType="xs:unsignedInt" />
            <data inType="win:UnicodeString" name="SqmStringDatapointValue" outType="xs:string" />
          </template>
          <template tid="tid_SqmStreamRow">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
            <data inType="win:UInt32" name="SqmID" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmStreamRowLength" outType="xs:unsignedInt" />
            <struct count="SqmStreamRowLength" name="SqmStreamRow">
              <data inType="win:UInt32" name="SqmTypeEntry" outType="xs:unsignedInt" />
              <data inType="win:UInt32" name="SqmDWORDEntry" outType="xs:unsignedInt" />
              <data inType="win:UnicodeString" name="SqmStringEntry" outType="xs:string" />
            </struct>
          </template>
          <template tid="tid_SqmDWORD64Datapoint">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
            <data inType="win:UInt32" name="SqmID" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmProcessHashValue" outType="xs:unsignedInt" />
            <data inType="win:UInt64" name="SqmDWORD64DatapointValue" outType="xs:unsignedLong" />
          </template>
          <template tid="tid_SqmStreamRowEx">
            <data inType="win:UInt32" name="SqmType" outType="xs:unsignedInt" />
            <data inType="win:GUID" name="SqmSessionGuid" outType="xs:GUID" />
            <data inType="win:UInt32" name="SqmID" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmProcessHashValue" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmStreamRowLength" outType="xs:unsignedInt" />
            <data inType="win:UInt32" name="SqmStreamEntriesSize" outType="xs:unsignedInt" />
            <data inType="win:Binary" length="SqmStreamEntriesSize" name="SqmStreamEntries" outType="xs:hexBinary" />
            <data inType="win:UInt32" name="SqmStreamFlags" outType="xs:unsignedInt" />
          </template>
        </templates>
        <events>
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_START_SESSION" template="tid_SqmSessionStart" value="3" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_END_SESSION" template="tid_SqmSessionEnd" value="4" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_SET_DWORD" template="tid_SqmDWORDDatapoint" value="5" />
          <event keywords="win:SQM" level="win:Informational" opcode="win:Stop" symbol="SQM_INCREMENT_DWORD" template="tid_SqmDWORDDatapoint" value="6" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_ADDTOAVERAGE_DWORD" template="tid_SqmDWORDDatapoint" value="7" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_SETIFMAX_DWORD" template="tid_SqmDWORDDatapoint" value="8" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_SETIFMIN_DWORD" template="tid_SqmDWORDDatapoint" value="9" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_SET_STRING" template="tid_SqmStringDatapoint" value="10" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_ADD_STREAMROW" template="tid_SqmStreamRow" value="11" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_SET_DWORD64" template="tid_SqmDWORD64Datapoint" value="16" />
          <event keywords="win:SQM" level="win:Informational" symbol="SQM_ADD_STREAMROW_EX" template="tid_SqmStreamRowEx" value="17" />
        </events>
      </provider>
    </events>
  </instrumentation>
</assembly>