<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-Services-ServiceController-MinWin" version="10.0.10586.71" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-Services-ServiceController.Resources" version="10.0.10586.71" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <file name="services.exe" destinationPath="$(runtime.system32)\" sourceName="services.exe" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">kHexqgr7jbMp/e0OUQhd4cUbIqmGFi8pA3/KQEqA1RI=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <directories>
    <directory destinationPath="$(runtime.system32)\LogFiles\Scm\" owner="false">
      <securityDescriptor name="WRP_PARENT_DIR_DEFAULT_SDDL" />
    </directory>
  </directories>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog">
      <securityDescriptor name="WINEVT-LOG-SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Service Control Manager">
      <registryValue name="ProviderGuid" valueType="REG_SZ" value="{555908D1-A6D7-4695-8E1E-26931D2012F4}" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control">
      <registryValue name="PreshutdownOrder" valueType="REG_MULTI_SZ" value="&quot;gpsvc&quot;,&quot;trustedinstaller&quot;" />
      <registryValue name="EarlyStartServices" valueType="REG_MULTI_SZ" value="&quot;RpcSs&quot;,&quot;Power&quot;,&quot;BrokerInfrastructure&quot;,&quot;SystemEventsBroker&quot;,&quot;DcomLaunch&quot;,&quot;RpcEpMapper&quot;,&quot;LSM&quot;,&quot;AppIdSvc&quot;" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ScEvents">
      <securityDescriptor name="ScEventsRegistryKeyACL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceAggregatedEvents">
      <securityDescriptor name="ScAggregateTriggerRegistryKeyACL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SQMServiceList">
      <registryValue name="SQMServiceList" valueType="REG_SZ" value="netprofm,netman,dcomlaunch" />
      <securityDescriptor name="SQMServiceListRegistryKeyACL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Security">
      <registryValue name="0063715b-eeda-4007-9429-ad526f62696e" valueType="REG_BINARY" value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
      <registryValue name="06184c97-5201-480e-92af-3a3626c5b140" valueType="REG_BINARY" value="01000480140000002400000000000000340000000102000000000005200000002002000001020000000000052000000020020000020000020400000000001400FF0F120001010000000000051200000000001800FF0F12000102000000000005200000002002000000001400FF0F120001010000000000051400000000001400FF0F12000101000000000005130000000000000003000000708C34000000000048243300000033000A00010B0D5E617730013300EC5D6177216AF47300000000200000000000330000000000ECF720000D5E617730013300EC5D6177056AF47300000000000033005024330000003300902A3300A800000048010101902A330003000003589934004801330081000000000033004801330003000000000000004801330003000003195761771200001205000000AE65F47588AF340003000000C465F4750500000012000000B42A33000C02000E050000001A00000088AF340074F72000708C3400A09A3400050000006C01330000000000000000000D0101014801330010F820005024330058993400218EB504FEFFFF000000000028000000000101010CF72000F454617784FD2000E4465B77218EB504FEFFFFFFEC5D6177E35961770000000050243300F45461774CF8200020FB20001CF82000385561770000330000000000482433002CF820000B556177502433001957617774F82000C42BBE754CF820001957617738565F77000000001A001C00708C3400000000000000000000000000000000000D00000208F92000" />
      <securityDescriptor name="WMI-SECURITY-SDDL" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="ScAggregateTriggerRegistryKeyACL" sddl="O:BAG:SYD:P(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KAKRWDWO;;;BA)(A;CI;KR;;;BU)(A;CI;KR;;;AC)" operationHint="replace" />
          <securityDescriptorDefinition name="ScEventsRegistryKeyACL" sddl="O:BAG:SYD:P(A;OI;KA;;;SY)(A;;KA;;;BA)(A;;KR;;;BU)(A;;KA;;;S-1-5-87-632797755-2961095303-2128297780-1054304204-672148691)" operationHint="replace" />
          <securityDescriptorDefinition name="SQMServiceListRegistryKeyACL" sddl="D:P(A;OI;KA;;;SY)(A;;KR;;;BU)(A;;KRKW;;;S-1-5-87-1990970548-589041977-4026041562-2928935477-2389476198)" operationHint="replace" />
          <securityDescriptorDefinition name="WINEVT-LOG-SDDL" sddl="O:BAG:SYD:P(A;CI;GR;;;AU)(A;CI;GR;;;SO)(A;CI;GA;;;BA)(A;CI;GA;;;SY)" operationHint="replace" />
          <securityDescriptorDefinition name="WMI-SECURITY-SDDL" sddl="O:BAG:SYD:P(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CIOI;GA;;;S-1-5-80-880578595-1860270145-482643319-2788375705-1540778122)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
          <securityDescriptorDefinition name="WRP_PARENT_DIR_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;IOCIOI;GA;;;SY)(A;;0x1301bf;;;BA)(A;IOCIOI;GA;;;BA)(A;CIOI;GRGX;;;BU)(A;OICIIO;GA;;;CO)(A;CIOI;GRGX;;;S-1-15-2-1)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <migration settingsVersion="0">
    <supportedComponents>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity xmlns="urn:schemas-microsoft-com:asm.v3" buildType="release" language="neutral" name="Microsoft-Windows-Services-ServiceController-MinWin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" settingsVersionRange="0" versionScope="nonSxS" />
        <migXml xmlns="">
          <rules context="System">
            <merge script="MigXmlHelper.DestinationPriority()">
              <objectSet>
                <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\ServiceAggregatedEvents\* [*]</pattern>
              </objectSet>
            </merge>
          </rules>
        </migXml>
      </supportedComponent>
    </supportedComponents>
    <migXml xmlns="">
      <rules context="System">
        <include>
          <objectSet>
            <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\ServiceAggregatedEvents\* [*]</pattern>
          </objectSet>
        </include>
        <merge script="MigXmlHelper.DestinationPriority()">
          <objectSet>
            <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\ServiceAggregatedEvents\* [*]</pattern>
          </objectSet>
        </merge>
      </rules>
    </migXml>
  </migration>
  <configuration xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
    <configurationSchema>
      <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="Microsoft-Windows-Services" targetNamespace="Microsoft-Windows-Services">
        <xsd:element default="System&amp;#x20;Reserved EMS WdfLoadGroup Boot&amp;#x20;Bus&amp;#x20;Extender System&amp;#x20;Bus&amp;#x20;Extender SCSI&amp;#x20;miniport Port Primary&amp;#x20;Disk SCSI&amp;#x20;Class SCSI&amp;#x20;CDROM&amp;#x20;Class FSFilter&amp;#x20;Infrastructure FSFilter&amp;#x20;System FSFilter&amp;#x20;Bottom FSFilter&amp;#x20;Copy&amp;#x20;Protection FSFilter&amp;#x20;Security&amp;#x20;Enhancer FSFilter&amp;#x20;Open&amp;#x20;File FSFilter&amp;#x20;Physical&amp;#x20;Quota&amp;#x20;Management FSFilter&amp;#x20;Virtualization FSFilter&amp;#x20;Encryption FSFilter&amp;#x20;Compression FSFilter&amp;#x20;Imaging FSFilter&amp;#x20;HSM FSFilter&amp;#x20;Cluster&amp;#x20;File&amp;#x20;System FSFilter&amp;#x20;System&amp;#x20;Recovery FSFilter&amp;#x20;Quota&amp;#x20;Management FSFilter&amp;#x20;Content&amp;#x20;Screener FSFilter&amp;#x20;Continuous&amp;#x20;Backup FSFilter&amp;#x20;Replication FSFilter&amp;#x20;Anti-Virus FSFilter&amp;#x20;Undelete FSFilter&amp;#x20;Activity&amp;#x20;Monitor FSFilter&amp;#x20;Top Filter Boot&amp;#x20;File&amp;#x20;System Base Pointer&amp;#x20;Port Keyboard&amp;#x20;Port Pointer&amp;#x20;Class Keyboard&amp;#x20;Class Video&amp;#x20;Init Video Video&amp;#x20;Save File&amp;#x20;System Streams&amp;#x20;Drivers NDIS&amp;#x20;Wrapper COM&amp;#x20;Infrastructure Event&amp;#x20;Log ProfSvc_Group AudioGroup UIGroup MS_WindowsLocalValidation PlugPlay Cryptography PNP_TDI NDIS TDI iSCSI NetBIOSGroup ShellSvcGroup SchedulerGroup SpoolerGroup SmartCardGroup NetworkProvider MS_WindowsRemoteValidation NetDDEGroup Parallel&amp;#x20;arbitrator Extended&amp;#x20;Base PCI&amp;#x20;Configuration MS&amp;#x20;Transactions" name="List" type="wcm:multiString" wcm:description="d__th.obj.amd64fre_minkernel_screg_sc_mbs_microsoft-windows-services-servicecontroller-minwin_objfre_amd64_services-mw.man.temp1.missingResource.description2" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder')" wcm:legacyName="List" wcm:legacyType="REG_MULTI_SZ" wcm:scope="allUsers" />
      </xsd:schema>
    </configurationSchema>
    <metadata />
  </configuration>
</assembly>