<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-User32" version="10.0.10586.306" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-User32.Resources" version="10.0.10586.306" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <file name="user32.dll" destinationPath="$(runtime.system32)\" sourceName="user32.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <signatureInfo xmlns="urn:schemas-microsoft-com:asm.v3">
      <signatureDescriptor PETrust="true" pageHash="true" />
    </signatureInfo>
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">F5oPPQ8tazNDDG7LNKJKZiAtilLnMV4SsLBDWYPygIA=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
    </categoryMembership>
  </memberships>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="User experience OS modules" />
        <string id="displayName" value="User experience OS modules" />
        <string id="ErrorInstrument.ProviderName" value="Error Instrument" />
        <string id="event_0x40000430" value="Error Instrument: ProcessName: %1  WindowTitle: %2  MsgCaption: %3  MsgText: %4  CallerModuleName: %5  BaseAddr: %6  ImageSize: %7   ReturnAddr: %8" />
        <string id="event_0x80000431" value="The attempt by user %2 to restart/shutdown computer %1 failed" />
        <string id="event_0x80000432" value="The process %1 has initiated the %5 of computer %2 on behalf of user %7 for the following reason: %3%n Reason Code: %4%n Shutdown Type: %5%n Comment: %6" />
        <string id="event_0x80000433" value="The last restart/shutdown request of computer %1 was aborted by user %2%n" />
        <string id="event_0x80000434" value="The reason supplied by user %6 for the last unexpected shutdown of this computer is: %1%n Reason Code: %2%n Problem ID: %3%n Bugcheck String: %4%n Comment: %5" />
        <string id="event_0x80000435" value="The attempt by user %2 to logoff computer %1 failed" />
        <string id="User32.ProviderName" value="User32" />
      </stringTable>
    </resources>
  </localization>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" message="$(string.User32.ProviderName)" messageFileName="%SystemRoot%\system32\user32.dll" name="User32" resourceFileName="%SystemRoot%\system32\user32.dll" symbol="User32ControlGuid">
        <channels>
          <importChannel chid="System" name="System" />
        </channels>
        <templates>
          <template tid="T_1">
            <data inType="win:UnicodeString" name="param1" />
            <data inType="win:UnicodeString" name="param2" />
          </template>
          <template tid="T_2">
            <data inType="win:UnicodeString" name="param1" />
            <data inType="win:UnicodeString" name="param2" />
            <data inType="win:UnicodeString" name="param3" />
            <data inType="win:UnicodeString" name="param4" />
            <data inType="win:UnicodeString" name="param5" />
            <data inType="win:UnicodeString" name="param6" />
            <data inType="win:UnicodeString" name="param7" />
          </template>
          <template tid="T_3">
            <data inType="win:UnicodeString" name="param1" />
            <data inType="win:UnicodeString" name="param2" />
          </template>
          <template tid="T_4">
            <data inType="win:UnicodeString" name="param1" />
            <data inType="win:UnicodeString" name="param2" />
            <data inType="win:UnicodeString" name="param3" />
            <data inType="win:UnicodeString" name="param4" />
            <data inType="win:UnicodeString" name="param5" />
            <data inType="win:UnicodeString" name="param6" />
          </template>
          <template tid="T_5">
            <data inType="win:UnicodeString" name="param1" />
            <data inType="win:UnicodeString" name="param2" />
          </template>
        </templates>
        <events>
          <event keywords="win:EventlogClassic" level="win:Warning" message="$(string.event_0x80000431)" symbol="WARNING_EW_SHUTDOWN_CANCELLED" template="T_1" value="0x80000431" />
          <event keywords="win:EventlogClassic" level="win:Warning" message="$(string.event_0x80000432)" symbol="STATUS_SHUTDOWN_CLEAN" template="T_2" value="0x80000432" />
          <event keywords="win:EventlogClassic" level="win:Warning" message="$(string.event_0x80000433)" symbol="WARNING_ISSE_SHUTDOWN_CANCELLED" template="T_3" value="0x80000433" />
          <event keywords="win:EventlogClassic" level="win:Warning" message="$(string.event_0x80000434)" symbol="WARNING_DIRTY_REBOOT" template="T_4" value="0x80000434" />
          <event keywords="win:EventlogClassic" level="win:Warning" message="$(string.event_0x80000435)" symbol="WARNING_EW_LOGOFF_CANCELLED" template="T_5" value="0x80000435" />
        </events>
      </provider>
      <provider guid="{cd7cf0d0-02cc-4872-9b65-0dba0a90efe8}" message="$(string.ErrorInstrument.ProviderName)" messageFileName="%SystemRoot%\system32\user32.dll" name="Error Instrument" resourceFileName="%SystemRoot%\system32\user32.dll" symbol="ErrorInstrumentControlGuid">
        <channels>
          <importChannel chid="Application" name="Application" />
        </channels>
        <templates>
          <template tid="LogErrorTemplate">
            <data inType="win:UnicodeString" name="ProcessName" />
            <data inType="win:UnicodeString" name="WindowTitle" />
            <data inType="win:UnicodeString" name="MsgCaption" />
            <data inType="win:UnicodeString" name="MsgText" />
            <data inType="win:UnicodeString" name="CallerModuleName" />
            <data inType="win:Pointer" name="BaseAddress" />
            <data inType="win:UInt32" name="ImageSize" />
            <data inType="win:Pointer" name="ReturnAddress" />
            <binary />
          </template>
        </templates>
        <events>
          <event keywords="win:EventlogClassic" level="win:Informational" message="$(string.event_0x40000430)" symbol="STATUS_LOG_ERROR_MSG" template="LogErrorTemplate" value="0x40000430" />
        </events>
      </provider>
    </events>
  </instrumentation>
</assembly>