<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-OneCore-DeviceAssociationFramework" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <instrumentation xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events">
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{56c71c31-cfbd-4cdd-8559-505e042bbbe1}" message="$(string.EventProviderName)" messageFileName="%SystemRoot%\system32\das.dll" name="Microsoft-Windows-DeviceAssociationService" resourceFileName="%SystemRoot%\system32\das.dll" symbol="das">
        <channels>
          <channel chid="DAS_PERFORMANCE" name="Microsoft-Windows-DeviceAssociationService/Performance" symbol="MS_DAS_PERFORMANCE" type="Analytic" />
          <importChannel chid="SYSTEM_EVENT" name="System" />
        </channels>
      </provider>
      <cmi />
    </events>
  </instrumentation>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="event_2500" value="Device Association (Pairing) Succeeded." />
        <string id="event_2501" value="Device Disassociation (Unpairing) Succeeded." />
        <string id="event_3500" value="Device Association Service detected a fatal hang." />
        <string id="event_3501" value="Device Association Failed." />
        <string id="event_3502" value="Device Disassociation (Unpairing) Failed." />
        <string id="event_3503" value="Device Association Service detected an endpoint discovery failure." />
        <string id="event_3504" value="Device Association Failed - Initialize OOB." />
        <string id="event_3505" value="Device Association Failed - Enumerate Ceremonies." />
        <string id="event_3506" value="Device Association Failed - Read Ceremony Data." />
        <string id="event_3507" value="Device Association Failed - Write Ceremony Data." />
        <string id="event_3508" value="Device Association Failed - Initialize Association." />
        <string id="event_3509" value="Device Association Failed - Select Ceremony." />
        <string id="event_3510" value="Device Association Failed - Finalize." />
        <string id="event_4500" value="Device Association Service dispatched thread timed out." />
        <string id="EventProviderName" value="Microsoft-Windows-OneCore-DeviceAssociationService" />
        <string id="event_5500" value="Device Association Service RPC create query has started." />
        <string id="event_5501" value="Device Association Service RPC create query has exited." />
        <string id="event_5502" value="Device Association Service create query has started (provider queries inclusive)." />
        <string id="event_5503" value="Device Association Service create query has exited (provider queries inclusive)." />
        <string id="event_5504" value="Device Association provider create query has started." />
        <string id="event_5505" value="Device Association provider create query has exited." />
        <string id="event_5700" value="Device Association Service create association context has started (provider inclusive)." />
        <string id="event_5701" value="Device Association Service create association context has exited (provider inclusive)." />
        <string id="event_5702" value="Device Association Service create association context has started (provider only)." />
        <string id="event_5703" value="Device Association Service create association context has exited (provider only)." />
        <string id="event_5704" value="Device Association Service enum association ceremonies has started (provider inclusive)." />
        <string id="event_5705" value="Device Association Service enum association ceremonies has exited (provider inclusive)." />
        <string id="event_5706" value="Device Association Service enum association ceremonies has started (provider only)." />
        <string id="event_5707" value="Device Association Service enum association ceremonies has exited (provider only)." />
        <string id="event_5708" value="Device Association Service select ceremony has started (provider inclusive)." />
        <string id="event_5709" value="Device Association Service select ceremony has exited (provider inclusive)." />
        <string id="event_5710" value="Device Association Service select ceremony ceremonies has started (provider only)." />
        <string id="event_5711" value="Device Association Service select ceremony has exited (provider only)." />
        <string id="event_5712" value="Device Association Service read ceremony data has started (provider inclusive)." />
        <string id="event_5713" value="Device Association Service read ceremony data has exited (provider inclusive)." />
        <string id="event_5714" value="Device Association Service read ceremony data ceremonies has started (provider only)." />
        <string id="event_5715" value="Device Association Service read ceremony data has exited (provider only)." />
        <string id="event_5716" value="Device Association Service write ceremony data has started (provider inclusive)." />
        <string id="event_5717" value="Device Association Service write ceremony data has exited (provider inclusive)." />
        <string id="event_5718" value="Device Association Service write ceremony data ceremonies has started (provider only)." />
        <string id="event_5719" value="Device Association Service write ceremony data has exited (provider only)." />
        <string id="event_5720" value="Device Association Service finalize ceremony has started (provider inclusive)." />
        <string id="event_5721" value="Device Association Service finalize ceremony has exited (provider inclusive)." />
        <string id="event_5722" value="Device Association Service finalize ceremony ceremonies has started (provider only)." />
        <string id="event_5723" value="Device Association Service finalize ceremony has exited (provider only)." />
        <string id="event_5724" value="Device Association Service remove association has started (provider inclusive)." />
        <string id="event_5725" value="Device Association Service remove association has exited (provider inclusive)." />
        <string id="event_5726" value="Device Association Service remove association ceremonies has started (provider only)." />
        <string id="event_5727" value="Device Association Service remove association has exited (provider only)." />
        <string id="event_5728" value="Device Association Service close association has started (provider inclusive)." />
        <string id="event_5729" value="Device Association Service close association has exited (provider inclusive)." />
        <string id="event_5730" value="Device Association Service close association ceremonies has started (provider only)." />
        <string id="event_5731" value="Device Association Service close association has exited (provider only)." />
        <string id="event_5732" value="Device Association Service association has started (provider inclusive, entire association)." />
        <string id="event_5733" value="Device Association Service association has exited (provider inclusive, entire association)." />
      </stringTable>
    </resources>
  </localization>
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly dependencyType="prerequisite">
      <assemblyIdentity name="Microsoft-Windows-OneCore-DeviceAssociationFramework.Resources" version="10.0.26100.8521" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="das.dll" destinationPath="$(runtime.system32)\" sourceName="das.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>Bw5CnTAtw7pCvOTV5ipEuLe2EdXF5ejqJYF1yIqpc9I=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="dasHost.exe" destinationPath="$(runtime.system32)\" sourceName="dasHost.exe" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>dcqE3vfMEiIYR22y/xPiJ+rAiDL2iMQyZP0hUjWfxmM=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="deviceassociation.dll" destinationPath="$(runtime.system32)\" sourceName="deviceassociation.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>b9qZwACbiOWhy+yjLExpnmNJ1sYm3tGhmndlKhuiaw0=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Device Association Framework\">
      <securityDescriptor name="SYSTEM_ADMIN_WRITE" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DeviceAssociationService\Parameters">
      <registryValue name="ServiceDll" valueType="REG_EXPAND_SZ" value="%SystemRoot%\system32\das.dll" />
      <registryValue name="WatchdogTimeout" valueType="REG_DWORD" value="0x000927C0" />
      <registryValue name="DispatchingDisabled" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Device Association Framework\Providers">
      <securityDescriptor name="SYSTEM_ADMIN_WRITE_NSLS_READ" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Device Association Framework\InboxProviders">
      <securityDescriptor name="SYSTEM_WRITE_ADMIN_READ_NSLS_READ_AUTHUSER_READ" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DevQuery\5">
      <registryValue name="" valueType="REG_SZ" value="AEP" />
      <registryValue name="IdType" valueType="REG_SZ" value="String" />
      <registryValue name="Transport" valueType="REG_SZ" value="LRPC" />
      <registryValue name="UUID" valueType="REG_SZ" value="289e5e0f-414a-4de9-8d17-244507fffc07" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DevQuery\6">
      <registryValue name="" valueType="REG_SZ" value="AEPContainer" />
      <registryValue name="IdType" valueType="REG_SZ" value="Uuid" />
      <registryValue name="Transport" valueType="REG_SZ" value="LRPC" />
      <registryValue name="UUID" valueType="REG_SZ" value="289e5e0f-414a-4de9-8d17-244507fffc07" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DevQuery\10">
      <registryValue name="" valueType="REG_SZ" value="AEPService" />
      <registryValue name="IdType" valueType="REG_SZ" value="String" />
      <registryValue name="Transport" valueType="REG_SZ" value="LRPC" />
      <registryValue name="UUID" valueType="REG_SZ" value="289e5e0f-414a-4de9-8d17-244507fffc07" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DevQuery\12">
      <registryValue name="" valueType="REG_SZ" value="AEPProtocol" />
      <registryValue name="IdType" valueType="REG_SZ" value="String" />
      <registryValue name="Transport" valueType="REG_SZ" value="LRPC" />
      <registryValue name="UUID" valueType="REG_SZ" value="289e5e0f-414a-4de9-8d17-244507fffc07" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
  </registryKeys>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.26100.8521" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance subcategory="DeviceAssociationService">
        <serviceData name="DeviceAssociationService" displayName="@%SystemRoot%\system32\das.dll,-100" errorControl="normal" start="demand" type="win32ShareProcess" description="@%SystemRoot%\system32\das.dll,-101" imagePath="%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p" objectName="LocalSystem" requiredPrivileges="SeAssignPrimaryTokenPrivilege,SeRestorePrivilege,SeImpersonatePrivilege,SeTcbPrivilege,SeDebugPrivilege,SeLoadDriverPrivilege" sidType="unrestricted">
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="bd84cd86-9825-4376-813d-334c543f89b1" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="850cee52-3038-4277-b9b4-e05db8b2c35c" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="2e7d4935-59d2-4312-a2c8-41900aa5495f" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="a1d4eae7-39f8-4bca-8e72-832767f5082a" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="6319e220-2fd5-48bc-a92f-ba70384e4d24" />
          </serviceTrigger>
          <failureActions resetPeriod="3600">
            <actions>
              <action delay="60000" type="restartService" />
              <action delay="120000" type="restartService" />
              <action delay="0" type="none" />
            </actions>
          </failureActions>
        </serviceData>
      </categoryInstance>
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="SvcHost" />
      <categoryInstance subcategory="LocalSystemNetworkRestricted">
        <serviceGroup position="last" serviceName="DeviceAssociationService" />
      </categoryInstance>
    </categoryMembership>
  </memberships>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="SYSTEM_ADMIN_WRITE" sddl="O:BAG:BAD:P(A;;KA;;;BA)(A;CIOI;GA;;;BA)(A;;KA;;;SY)(A;CIOI;GA;;;SY)" operationHint="replace" />
          <securityDescriptorDefinition name="SYSTEM_WRITE_ADMIN_READ" sddl="O:SYG:SYD:P(A;;KR;;;BA)(A;CIOI;GR;;;BA)(A;;KA;;;SY)(A;CIOI;GA;;;SY)" operationHint="replace" />
          <securityDescriptorDefinition name="SYSTEM_ADMIN_WRITE_NSLS_READ" sddl="O:BAG:BAD:P(A;;KA;;;BA)(A;CIOI;GA;;;BA)(A;;KA;;;SY)(A;CIOI;GA;;;SY)(A;;KR;;;NS)(A;CIOI;GR;;;NS)(A;;KR;;;LS)(A;CIOI;GR;;;LS)" operationHint="replace" />
          <securityDescriptorDefinition name="SYSTEM_WRITE_ADMIN_READ_NSLS_READ_AUTHUSER_READ" sddl="O:SYG:SYD:P(A;;KR;;;BA)(A;CIOI;GR;;;BA)(A;;KA;;;SY)(A;CIOI;GA;;;SY)(A;;KR;;;NS)(A;CIOI;GR;;;NS)(A;;KR;;;LS)(A;CIOI;GR;;;LS)(A;CIOI;KR;;;AU)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>