﻿<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-SystemRestore-Main" version="10.0.10586.71" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly dependencyType="prerequisite">
      <assemblyIdentity name="Microsoft-Windows-SystemRestore-Main.Resources" version="10.0.10586.71" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="srclient.dll" destinationPath="$(runtime.system32)\" sourceName="srclient.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <signatureInfo xmlns="urn:schemas-microsoft-com:asm.v3">
      <signatureDescriptor PETrust="true" />
    </signatureInfo>
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">D7N7c9+w5RYQK++4TqP5TIGWhcXn8CflYoATeR/kWuI=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="srcore.dll" destinationPath="$(runtime.system32)\" sourceName="srcore.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">5dOiIxFXWtyktAWbDofY8Bckqbkc1vJAE2Dz/ae/7qg=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="rstrui.exe" destinationPath="$(runtime.system32)\" sourceName="rstrui.exe" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">2qbpwi5VYRPQeBPxUVU9+XbgLPGxGoTg2SXHCaeVnwo=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\WindowsFeatureCategories">
      <registryValue name="COMMONSTART/Programs/Accessories/System Tools/System Restore.lnk" valueType="REG_SZ" value="SOFTWARE_CATEGORY_UTILITIES" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\SrControl.SrControl.1">
      <registryValue name="" valueType="REG_SZ" value="SrControl Class" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\SrControl.SrControl.1\CLSID">
      <registryValue name="" valueType="REG_SZ" value="{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\SrControl.SrControl">
      <registryValue name="" valueType="REG_SZ" value="SrControl Class" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\SrControl.SrControl\CLSID">
      <registryValue name="" valueType="REG_SZ" value="{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\SrControl.SrControl\CurVer">
      <registryValue name="" valueType="REG_SZ" value="SrControl.SrControl.1" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}">
      <registryValue name="" valueType="REG_SZ" value="SrControl Class" />
      <registryValue name="AppID" valueType="REG_SZ" value="{f32d97df-e3e5-4cb9-9e3e-0eb5b4e49801}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}\ProgID">
      <registryValue name="" valueType="REG_SZ" value="SrControl.SrControl.1" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}\VersionIndependentProgID">
      <registryValue name="" valueType="REG_SZ" value="SrControl.SrControl" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{883FF1FC-09E1-48e5-8E54-E2469ACB0CFD}\InprocServer32">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\srcore.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\System Restore\">
      <registryValue name="TypesSupported" valueType="REG_DWORD" value="0x00000007" />
      <registryValue name="EventMessageFile" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\srcore.dll" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\cfg\">
      <registryValue name="DiskPercent" valueType="REG_DWORD" value="0x0000000f" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description1" value="The main component for System Restore." />
        <string id="description3" value="Default SDDL for Windows Resource Protected file" />
        <string id="description4" value="Restores system to chosen restore point" />
        <string id="description5" value="DisableSR enables or disables System Restore." />
        <string id="description6" value="Default SDDL for Windows Resource Protected registry key" />
        <string id="description7" value="Indicates whether System Restore is enabled" />
        <string id="displayName0" value="System Restore (Main)" />
        <string id="displayName1" value="Disable System Restore" />
        <string id="displayName2" value="WRP_FILE_DEFAULT_SDDL" />
        <string id="displayName3" value="WRP_REGKEY_DEFAULT_SDDL" />
      </stringTable>
    </resources>
  </localization>
  <imaging>
    <sysprepInformation>
      <sysprepProvider xmlns="urn:schemas-microsoft-com:asm.v3" stage="generalize">
        <sysprepOrder order="0x0F00" />
        <sysprepModule methodName="SysprepGeneralize" moduleName="srclient.dll" />
      </sysprepProvider>
      <sysprepProvider xmlns="urn:schemas-microsoft-com:asm.v3" stage="cleanup">
        <sysprepOrder order="0x0800" />
        <sysprepModule methodName="SysprepCleanup" moduleName="srclient.dll" />
      </sysprepProvider>
    </sysprepInformation>
  </imaging>
  <migration settingsVersion="1">
    <supportedComponents>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity xmlns="urn:schemas-microsoft-com:asm.v3" buildType="release" language="*" name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="*" publicKeyToken="31bf3856ad364e35" settingsVersionRange="0" versionScope="nonSxS" />
        <machineSpecific xmlns="urn:schemas-microsoft-com:asm.v3" rules="replace">
          <migXml xmlns="">
            <rules context="System" rules="replace">
              <locationModify script="MigXmlHelper.RelativeMove('HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients','HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\Setup\PreviousOSUpgrade')">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
                </objectSet>
              </locationModify>
              <include>
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
                </objectSet>
              </include>
              <merge script="MigXmlHelper.SourcePriority()">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
                </objectSet>
              </merge>
            </rules>
          </migXml>
        </machineSpecific>
      </supportedComponent>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity xmlns="urn:schemas-microsoft-com:asm.v3" buildType="release" language="*" name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="*" publicKeyToken="31bf3856ad364e35" settingsVersionRange="1" versionScope="nonSxS" />
        <machineSpecific xmlns="urn:schemas-microsoft-com:asm.v3">
          <migXml xmlns="">
            <rules context="System">
              <locationModify script="MigXmlHelper.RelativeMove('HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients','HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\Setup\PreviousOSUpgrade')">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
                </objectSet>
              </locationModify>
              <include>
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
                </objectSet>
              </include>
              <merge script="MigXmlHelper.SourcePriority()">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
                </objectSet>
              </merge>
            </rules>
          </migXml>
        </machineSpecific>
      </supportedComponent>
    </supportedComponents>
    <machineSpecific xmlns="urn:schemas-microsoft-com:asm.v3">
      <migXml xmlns="">
        <rules context="System">
          <locationModify script="MigXmlHelper.RelativeMove('HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients','HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\Setup\PreviousOSUpgrade')">
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
            </objectSet>
          </locationModify>
          <include>
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
            </objectSet>
          </include>
          <merge script="MigXmlHelper.SourcePriority()">
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients [{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}]</pattern>
            </objectSet>
          </merge>
        </rules>
      </migXml>
    </machineSpecific>
  </migration>
  <configuration xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:asmv2="urn:schemas-microsoft-com:asm.v3" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
    <configurationSchema>
      <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="Microsoft-Windows-SystemRestore-Main" targetNamespace="Microsoft-Windows-SystemRestore-Main">
        <xsd:element name="DisableSR" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="DisableSR enables or disables System Restore." wcm:displayName="Disable System Restore" wcm:handler="regkey('HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore\Setup\Unattend')" wcm:legacyType="REG_DWORD" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element name="RPGlobalInterval" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:handler="regkey('HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore')" wcm:legacyType="REG_DWORD" wcm:passes="specialize" wcm:scope="allUsers" />
        <xsd:element name="RPLifeInterval" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:handler="regkey('HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore')" wcm:legacyType="REG_DWORD" wcm:passes="specialize" wcm:scope="allUsers" />
        <xsd:element name="RPSessionInterval" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="Indicates whether System Restore is enabled" wcm:handler="regkey('HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore')" wcm:legacyType="REG_DWORD" wcm:passes="specialize" wcm:scope="allUsers" />
      </xsd:schema>
    </configurationSchema>
    <metadata />
  </configuration>
</assembly>