<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-TimeBroker" version="10.0.10586.122" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-TimeBroker.Resources" version="10.0.10586.122" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <file name="TimeBrokerServer.dll" destinationPath="$(runtime.system32)\" sourceName="TimeBrokerServer.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">MW+UFWRsx6TppfHgcxDUM0V+Yjs+WJVD5KbHPE93cSw=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="TimeBrokerClient.dll" destinationPath="$(runtime.system32)\" sourceName="TimeBrokerClient.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">QotHkXmDUMwkmuLsWFt+elTjCOp1vTtawVK0VdXVFwQ=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.10586.122" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance subcategory="TimeBroker">
        <serviceData name="TimeBroker" displayName="@%windir%\system32\TimeBrokerServer.dll,-1001" errorControl="normal" imagePath="%SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation" start="demand" type="win32ShareProcess" description="@%windir%\system32\TimeBrokerServer.dll,-1002" objectName="NT AUTHORITY\LocalService" sidType="unrestricted" requiredPrivileges="SeChangeNotifyPrivilege,SeCreateGlobalPrivilege">
          <securityDescriptor name="TimeBrokerServiceSecurity" />
          <failureActions resetPeriod="86400">
            <actions>
              <action type="restartService" delay="120000" />
              <action type="restartService" delay="300000" />
              <action type="none" />
            </actions>
          </failureActions>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="a500d4c6-0dd1-4543-bc0c-d5f93486eaf8" />
          </serviceTrigger>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="d09bdeb5-6171-4a34-bfe2-06fa82652568:b5ccd5ef-4238-440b-bba0-999f828f1cfe" />
          </serviceTrigger>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="WNF_STATE_CHANGE" type="WnfStateEvent">
            <triggerData type="binary" value="7508bca33e06830d" />
          </serviceTrigger>
        </serviceData>
      </categoryInstance>
    </categoryMembership>
  </memberships>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost">
      <registryValue name="LocalServiceAndNoImpersonation" valueType="REG_MULTI_SZ" value="&quot;TimeBroker&quot;" operationHint="append" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TimeBroker">
      <registryValue name="ServiceHostSid" valueType="REG_BINARY" value="010100000000000513000000" />
      <securityDescriptor name="TimeBrokerServiceKeySecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TimeBroker\Parameters">
      <registryValue name="ServiceDll" valueType="REG_EXPAND_SZ" value="%SystemRoot%\System32\TimeBrokerServer.dll" />
      <registryValue name="ServiceDllUnloadOnStop" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="MinKeepAliveTolerance" valueType="REG_DWORD" value="0x0000012c" />
      <securityDescriptor name="TimeBrokerServiceKeySecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BackgroundModel\Brokers\{b5ccd5ef-4238-440b-bba0-999f828f1cfe}">
      <registryValue name="ServerAuth" valueType="REG_BINARY" value="0100048000000000000000000000000014000000020030000100000000002800000000E0010600000000000550000000A9550ED4540A74CD3111889A680EC4CAC76DBDFE" />
      <registryValue name="ServerPrincipal" valueType="REG_BINARY" value="010100000000000513000000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="TimeBrokerServiceKeySecurity" sddl="O:SYG:SYD:(A;;0xf003f;;;SY)(A;;0xf003f;;;BA)(A;;0x20019;;;BU)S:(AU;FA;0xf003f;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="TimeBrokerServiceSecurity" sddl="O:SYG:SYD:(A;;0x20085;;;AU)(A;;0xe00ff;;;SY)(A;;0xe00fd;;;BA)(A;;0x95;;;BU)S:(AU;FA;0xf00ff;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
          <securityDescriptorDefinition name="WRP_PARENT_DIR_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;IOCIOI;GA;;;SY)(A;;0x1301bf;;;BA)(A;IOCIOI;GA;;;BA)(A;CIOI;GRGX;;;BU)(A;OICIIO;GA;;;CO)(A;CIOI;GRGX;;;S-1-15-2-1)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="Channel.Debug" value="Debug" />
        <string id="description" value="Coordinates execution of background work for WinRT application." />
        <string id="displayName" value="Time Broker Service" />
        <string id="event.CreateApi" value="TimeBroker CreateEvent called for Event ID %1 with Event Type %2 returned %3" />
        <string id="event.DeleteApi" value="TimeBroker DeleteEvent called for Event ID %1 and returned %2" />
        <string id="event.StateChange" value="Event ID %1 changed state from %2 to %3" />
        <string id="event.TimeSet" value="Event ID %1 is set to fire between %2 and %3" />
        <string id="EventState.Armed" value="Armed" />
        <string id="EventState.DeletePending" value="DeletePending" />
        <string id="EventState.Disabled" value="Disabled" />
        <string id="EventState.Enabled" value="Enabled" />
        <string id="EventState.Signalled" value="Signalled" />
        <string id="EventTypes.Alarm" value="Alarm" />
        <string id="EventTypes.Calendar" value="Calendar" />
        <string id="EventTypes.Convenient" value="Convenient" />
        <string id="keyword.API" value="API" />
        <string id="keyword.EventState" value="EventState" />
        <string id="Publisher.Name" value="Microsoft-Windows-TimeBroker" />
      </stringTable>
    </resources>
  </localization>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{0657adc1-9ae8-4e18-932d-e6079cda5ab3}" message="$(string.Publisher.Name)" messageFileName="%SystemRoot%\system32\TimeBrokerServer.dll" name="Microsoft-Windows-TimeBroker" resourceFileName="%SystemRoot%\system32\TimeBrokerServer.dll" symbol="TimeBrokerEtwGuid">
        <channels>
          <channel chid="ChDebug" isolation="System" message="$(string.Channel.Debug)" name="TimeBroker" type="Debug" />
        </channels>
        <keywords>
          <keyword mask="0x1" message="$(string.keyword.API)" name="Api" symbol="Api" />
          <keyword mask="0x2" message="$(string.keyword.EventState)" name="EventState" symbol="EventState" />
        </keywords>
        <events>
          <event channel="ChDebug" keywords="EventState" level="win:Verbose" message="$(string.event.StateChange)" symbol="EventStateChange" template="T_StateChange" value="1" version="1" />
          <event channel="ChDebug" keywords="EventState" level="win:Verbose" message="$(string.event.TimeSet)" symbol="EventTimeSet" template="T_TimeSet" value="2" version="1" />
          <event channel="ChDebug" keywords="Api" level="win:Informational" message="$(string.event.CreateApi)" symbol="CreateApi" template="T_CreateApi" value="3" version="1" />
          <event channel="ChDebug" keywords="Api" level="win:Informational" message="$(string.event.DeleteApi)" symbol="DeleteApi" template="T_DeleteApi" value="4" version="1" />
        </events>
        <maps>
          <valueMap name="EventTypes">
            <map message="$(string.EventTypes.Alarm)" value="0" />
            <map message="$(string.EventTypes.Calendar)" value="1" />
            <map message="$(string.EventTypes.Convenient)" value="2" />
          </valueMap>
          <valueMap name="EventStates">
            <map message="$(string.EventState.Disabled)" value="0" />
            <map message="$(string.EventState.Armed)" value="1" />
            <map message="$(string.EventState.Signalled)" value="2" />
            <map message="$(string.EventState.DeletePending)" value="3" />
            <map message="$(string.EventState.Enabled)" value="4" />
          </valueMap>
        </maps>
        <templates>
          <template tid="T_StateChange">
            <data inType="win:GUID" name="BrokeredEventId" outType="xs:GUID" />
            <data inType="win:UInt32" map="EventStates" name="OldState" />
            <data inType="win:UInt32" map="EventStates" name="NewState" />
          </template>
          <template tid="T_CreateApi">
            <data inType="win:GUID" name="BrokeredEventId" outType="xs:GUID" />
            <data inType="win:UInt32" map="EventTypes" name="EventType" />
            <data inType="win:HexInt32" name="Status" outType="win:Win32Error" />
          </template>
          <template tid="T_DeleteApi">
            <data inType="win:GUID" name="BrokeredEventId" outType="xs:GUID" />
            <data inType="win:HexInt32" name="Status" outType="win:Win32Error" />
          </template>
          <template tid="T_TimeSet">
            <data inType="win:GUID" name="BrokeredEventId" outType="xs:GUID" />
            <data inType="win:FILETIME" name="StartTime" outType="win:dateTime" />
            <data inType="win:FILETIME" name="EndTime" outType="win:dateTime" />
          </template>
        </templates>
      </provider>
    </events>
  </instrumentation>
</assembly>