403WebShell

403Webshell
Server IP : 209.209.40.120 / Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF
Directory : /Program Files (x86)/Windows Kits/10/Lib/10.0.19041.0/um/x64/
Upload File :
[ Back ]
Current File : /Program Files (x86)/Windows Kits/10/Lib/10.0.19041.0/um/x64/elfapi.lib
!<arch>
/               1606894316              0       4365      `
�#4#4#4#4#4#4#4#4#4D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|D|r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$r$R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�^^^^^^^??_C@_13JOFGPIOO@?$AA?4@??_C@_17KDPFNGJO@?$AA?2?$AA?2?$AA?4@??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc@??_C@_1BC@HHBDFEGK@?$AAE?$AAV?$AAE?$AAN?$AAT?$AAL?$AAO?$AAG@??_C@_1BC@PJIKPPIJ@?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg@EVENTLOG_HANDLE_A_bindEVENTLOG_HANDLE_A_unbindEVENTLOG_HANDLE_W_bindEVENTLOG_HANDLE_W_unbind??_C@_08EDKKPLCC@Security@??_C@_0M@NJALGCHB@Application@??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy@CHANNEL_POLICY_APPLICATION_ERROREVENTLOGEVENTLOG_ContextEVENT_ABNORMAL_SHUTDOWNEVENT_AUDIT_AUTO_BACKUPEVENT_AUDIT_EVENTS_DROPPEDEVENT_AUDIT_FAILUREEVENT_AUDIT_LOG_CLEAREDEVENT_AUDIT_LOG_EXCEEDS_WARNING_LEVELEVENT_AUDIT_LOG_FULLEVENT_AUDIT_PROCESSINGEVENT_AUDIT_PUBLISHER_META_DATAEVENT_AUTO_BACKUPEVENT_ENABLE_CHANNEL_PROGRAMMATICALLYEVENT_EVENTS_DROPPEDEVENT_LOG_CLEAREDEVENT_LOG_FULLEVENT_OPENEVENTLOGEVENT_PROCESSINGEVENT_PUBLISHER_META_DATAEVENT_PUBLISHER_TLG_INVALID_META_DATAEVENT_PULLSUB_CREATEEVENT_PUSHSUB_CREATEEVENT_REGISTEREVENTSOURCEEVENT_REPORTEVENTEVENT_REPORTEVENT_ANSIEVENT_SHUTDOWNElfAssertThreadPrivilegeElfBackupEventLogFileAElfBackupEventLogFileWElfChangeNotifyElfClearEventLogFileAElfClearEventLogFileWElfCloseEventLogElfCreateReconnInfoElfDeregisterClusterSvcElfDeregisterEventSourceElfDestroyReconnectionInfoElfFlushEventLogElfGetLogInformationElfGetModuleNameElfGetTheRpcHandleElfGetUseLegacyReportEventElfNumberOfRecordsElfOldestRecordElfOpenBackupEventLogAElfOpenBackupEventLogWElfOpenEventLogAElfOpenEventLogWElfReadEventLogAElfReadEventLogWElfReconnectElfRegisterClusterSvcElfRegisterEventSourceAElfRegisterEventSourceWElfReportEventAElfReportEventAndSourceWElfReportEventWElfRevertThreadPrivilegeElfSetUseLegacyReportEventElfWriteClusterEventsEventDataDescCreateINIT_CHANNELINIT_CHANNEL_CONFIG_ERRORINIT_CHANNEL_LOGFILE_WARNINGINIT_CHANNEL_LOGFILTER_WARNINGINIT_CHANNEL_LOGGINGINIT_CHANNEL_MOVED_CORRUPT_LOGINIT_CHANNEL_MOVED_UNSUPPORTED_VERSION_LOGINIT_CHANNEL_PUBLISHER_ENABLE_FAILUREINIT_CHANNEL_PUBLISHINGLOG_DROPPED_CHUNKMcGenControlCallbackV2McGenEventRegister_EtwEventRegisterMcGenEventUnregister_EtwEventUnregisterMcGenEventWrite_EtwEventWriteTransferMcGenLevelKeywordEnabledMcTemplateU0usr0_EtwEventWriteTransferMcTemplateU0uzr0_EtwEventWriteTransferMicrosoft_Windows_EventlogEnableBitsMicrosoft_Windows_EventlogKeywordsMicrosoft_Windows_EventlogLevelsNtCurrentTebPRIMARY_CHANNEL_CONFIGURATION_WARNINGPRIMARY_CHANNEL_FATAL_ERRORWevtInitializeBackupEventLogABackupEventLogWBaseSetLastNTErrorCheckEventLogBufferClearEventLogAClearEventLogWCloseEventLogDeregisterEventSourceGetEventLogInformationGetNumberOfEventLogRecordsGetOldestEventLogRecordInitAnsiStringInitUnicodeStringNotifyChangeEventLogOpenBackupEventLogAOpenBackupEventLogWOpenEventLogAOpenEventLogWReadEventLogAReadEventLogWRegisterEventSourceARegisterEventSourceWReportEventAReportEventWStringCheckElfrBackupELFAElfrBackupELFWElfrChangeNotifyElfrClearELFAElfrClearELFWElfrCloseELElfrDeregisterClusterSvcElfrDeregisterEventSourceElfrFlushELElfrGetLogInformationElfrNumberOfRecordsElfrOldestRecordElfrOpenBELAElfrOpenBELWElfrOpenELAElfrOpenELWElfrReadELAElfrReadELWElfrRegisterClusterSvcElfrRegisterEventSourceAElfrRegisterEventSourceWElfrReportEventAElfrReportEventAndSourceWElfrReportEventExAElfrReportEventExWElfrReportEventWElfrWriteClusterEventseventlog_ClientIfHandle??_C@_13CGOKJPIL@?$AA?1@??_C@_13FPGAJAPJ@?$AA?2@??_C@_15MNCACJLI@?$AA?2?$AA?1@RtlAlternateDosPathSeperatorStringRtlDosPathSeperatorsStringRtlNtPathSeperatorString__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi
/               1606894316              0       4073      `
4#|D$r�R^�??_C@_08EDKKPLCC@Security@??_C@_0M@NJALGCHB@Application@??_C@_13CGOKJPIL@?$AA?1@??_C@_13FPGAJAPJ@?$AA?2@??_C@_13JOFGPIOO@?$AA?4@??_C@_15MNCACJLI@?$AA?2?$AA?1@??_C@_17KDPFNGJO@?$AA?2?$AA?2?$AA?4@??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc@??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy@??_C@_1BC@HHBDFEGK@?$AAE?$AAV?$AAE?$AAN?$AAT?$AAL?$AAO?$AAG@??_C@_1BC@PJIKPPIJ@?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg@BackupEventLogABackupEventLogWBaseSetLastNTErrorCHANNEL_POLICY_APPLICATION_ERRORCheckEventLogBufferClearEventLogAClearEventLogWCloseEventLogDeregisterEventSourceEVENTLOGEVENTLOG_ContextEVENTLOG_HANDLE_A_bindEVENTLOG_HANDLE_A_unbindEVENTLOG_HANDLE_W_bindEVENTLOG_HANDLE_W_unbindEVENT_ABNORMAL_SHUTDOWNEVENT_AUDIT_AUTO_BACKUPEVENT_AUDIT_EVENTS_DROPPEDEVENT_AUDIT_FAILUREEVENT_AUDIT_LOG_CLEAREDEVENT_AUDIT_LOG_EXCEEDS_WARNING_LEVELEVENT_AUDIT_LOG_FULLEVENT_AUDIT_PROCESSINGEVENT_AUDIT_PUBLISHER_META_DATAEVENT_AUTO_BACKUPEVENT_ENABLE_CHANNEL_PROGRAMMATICALLYEVENT_EVENTS_DROPPEDEVENT_LOG_CLEAREDEVENT_LOG_FULLEVENT_OPENEVENTLOGEVENT_PROCESSINGEVENT_PUBLISHER_META_DATAEVENT_PUBLISHER_TLG_INVALID_META_DATAEVENT_PULLSUB_CREATEEVENT_PUSHSUB_CREATEEVENT_REGISTEREVENTSOURCEEVENT_REPORTEVENTEVENT_REPORTEVENT_ANSIEVENT_SHUTDOWNElfAssertThreadPrivilegeElfBackupEventLogFileAElfBackupEventLogFileWElfChangeNotifyElfClearEventLogFileAElfClearEventLogFileWElfCloseEventLogElfCreateReconnInfoElfDeregisterClusterSvcElfDeregisterEventSourceElfDestroyReconnectionInfoElfFlushEventLogElfGetLogInformationElfGetModuleNameElfGetTheRpcHandleElfGetUseLegacyReportEventElfNumberOfRecordsElfOldestRecordElfOpenBackupEventLogAElfOpenBackupEventLogWElfOpenEventLogAElfOpenEventLogWElfReadEventLogAElfReadEventLogWElfReconnectElfRegisterClusterSvcElfRegisterEventSourceAElfRegisterEventSourceWElfReportEventAElfReportEventAndSourceWElfReportEventWElfRevertThreadPrivilegeElfSetUseLegacyReportEventElfWriteClusterEventsElfrBackupELFAElfrBackupELFWElfrChangeNotifyElfrClearELFAElfrClearELFWElfrCloseELElfrDeregisterClusterSvcElfrDeregisterEventSourceElfrFlushELElfrGetLogInformationElfrNumberOfRecordsElfrOldestRecordElfrOpenBELAElfrOpenBELWElfrOpenELAElfrOpenELWElfrReadELAElfrReadELWElfrRegisterClusterSvcElfrRegisterEventSourceAElfrRegisterEventSourceWElfrReportEventAElfrReportEventAndSourceWElfrReportEventExAElfrReportEventExWElfrReportEventWElfrWriteClusterEventsEventDataDescCreateGetEventLogInformationGetNumberOfEventLogRecordsGetOldestEventLogRecordINIT_CHANNELINIT_CHANNEL_CONFIG_ERRORINIT_CHANNEL_LOGFILE_WARNINGINIT_CHANNEL_LOGFILTER_WARNINGINIT_CHANNEL_LOGGINGINIT_CHANNEL_MOVED_CORRUPT_LOGINIT_CHANNEL_MOVED_UNSUPPORTED_VERSION_LOGINIT_CHANNEL_PUBLISHER_ENABLE_FAILUREINIT_CHANNEL_PUBLISHINGInitAnsiStringInitUnicodeStringLOG_DROPPED_CHUNKMcGenControlCallbackV2McGenEventRegister_EtwEventRegisterMcGenEventUnregister_EtwEventUnregisterMcGenEventWrite_EtwEventWriteTransferMcGenLevelKeywordEnabledMcTemplateU0usr0_EtwEventWriteTransferMcTemplateU0uzr0_EtwEventWriteTransferMicrosoft_Windows_EventlogEnableBitsMicrosoft_Windows_EventlogKeywordsMicrosoft_Windows_EventlogLevelsNotifyChangeEventLogNtCurrentTebOpenBackupEventLogAOpenBackupEventLogWOpenEventLogAOpenEventLogWPRIMARY_CHANNEL_CONFIGURATION_WARNINGPRIMARY_CHANNEL_FATAL_ERRORReadEventLogAReadEventLogWRegisterEventSourceARegisterEventSourceWReportEventAReportEventWRtlAlternateDosPathSeperatorStringRtlDosPathSeperatorsStringRtlNtPathSeperatorStringStringCheckWevtInitialize__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapieventlog_ClientIfHandle
//              1606894316              0       384       `
d:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\rpcbind.objd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\apistub.objd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\eventapi.objd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\elf_client.objd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\precomp.obj/0              1606894316              100666  8459      `
d��B�_�B.debug$S�\@B.rdata@@@@.rdataH@0@.rdataL@@@.rdata^@@@.rdatan@@@.text$mnV�� 0`.debug$S$�"@B.text$mn�� 0`.debug$S4�
@B.text$mn�l
 	 0`.debug$STz�
@B.text$mn�� 0`.debug$S4�,@B.xdata|@0@.pdata��@0@.xdata�@0@.pdata��@0@.debug$T��@B.chks64�t
.drectvend
��Rd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\rpcbind.obj:<��kk
Microsoft (R) Optimizing Compiler�`:s ����o�}�+4qt*Y lռ��́dq�X� N~ط �K����h��-l��A��D����onecore\admin\wmi\events\advapi\objfre\amd64\pch_hdr.srconecore\admin\wmi\events\advapi\objfre\amd64\precomp.pchonecore\admin\wmi\events\advapi\precomp.honecore\admin\wmi\events\advapi\rpcbind.c�L�^\\..eventlogncalrpcEVENTLOG@SH��@H��H�L$0�H�d$(H�T$0A�H�L$ ���xH�L$(�H�L$ H��H���3�H��@[�)7.E��<GVP�^�EVENTLOG_HANDLE_A_bind>pServerNameAJ>:ServerNameUD >bindingHandleAICAIP>@ServerNameAD0>StatusA-#
Z�^@B!PpOServerName :OServerNameU0@OServerNameA9�^9'�^9C�^O�hV8
\��������-��1��;��I��N��P��,,0,
g,k,
�,�,
�,�,
�,,
�,�,
�,�,
�,�,
�,�,
H�����>G�^�EVENTLOG_HANDLE_A_unbind>pServerNameAJD>BindingHandleAK
Z�^B!pOServerNameOBindingHandleO�(8����,+0+
i+m+
�+�+
++
H�\$WH��03�H��H�|$@H��t:H����t*f9;t%f�;.uf9{tL�L$@E3�H�H����MH�D$HE3�H�D$(L�
H�H�|$ 3���u(H�L$HH�T$@�H�L$H����uH�D$@�3�H�\$PH��0_�!/EMcjw����<G�
��^�EVENTLOG_HANDLE_W_bind>qServerNameAI�AJAI�>bindingHandleB@�>statusA{A�
A�A�>qsbBH{9
Z�^0B!@qOServerName@ObindingHandleHqOsb9u�^9��^9��^O���8
t9�
:�A�:\�Qa�SF�{M�O��Q��S��b��Y��b�,.0.
g.k.
w.{.
�.�.
�.�.
�.�.
�.�.
�.�.
..
.!.
�.�.
�.�.
�.�.
�.�.
H�����>G�^�EVENTLOG_HANDLE_W_unbind>qServerNameAJD>BindingHandleAK
Z�^B!qOServerNameOBindingHandleO�(8{�~�,-0-
i-m-
�-�-
--
r0V004

4

Rp�11:V	�NB�0(%OBJECT_ROOT%onecore\admin\wmi\events\advapi\objfre\amd64\precomp.obj��q�^&�^EVENTLOG_HANDLE_W_unbind���
�^�^RpcpUnbindRpc��p�^&�^EVENTLOG_HANDLE_A_unbind���
q�^"�^EVENTLOG_HANDLE_W_bind�
qqq�^�^�^RpcpBindRpcqqqqq'Z�^
�^q�^�^
�^
'Z�^
�^
p�^"�^EVENTLOG_HANDLE_A_bind�
>�^�^
�^
=8�^ �^
�^
�
���
���
���
����-FC -MT -c -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -Zo -std:c++17 -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973��
�^F�^ -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X�^�^�^�^�^������V�,k:Qӌ�E��Y7�3dxe�	�}�K�<�>1T�_+�p�Y��ˡ�2��ǽgN��F$�����g`o��W7,� wO�?:���N��F$��G��LQ{$6e<F\�W 9�~&��
t���΀`�s�<�AW�5   -INCLUDE:__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi @comp.idk��@feat.00�I���.debug$S�e.rdata�(9e.rdata
��@e).rdata;�naeB.rdata�֗]e.rdata�d��e��2J X dy�.text$mnVo�{�e.debug$S$e.text$mn	,���e.debug$S
4	e.text$mn�	(�e.debug$STe.text$mn
,���e.debug$S4
e�	 � �
  wcscmp $LN8$LN10.xdatac%C�e.pdataA�I�e:.xdata~�LeX.pdata]ؼRew.debug$T�e.chks64�e�??_C@_17KDPFNGJO@?$AA?2?$AA?2?$AA?4@??_C@_13JOFGPIOO@?$AA?4@??_C@_1BC@PJIKPPIJ@?$AAe?$AAv?$AAe?$AAn?$AAt?$AAl?$AAo?$AAg@??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc@??_C@_1BC@HHBDFEGK@?$AAE?$AAV?$AAE?$AAN?$AAT?$AAL?$AAO?$AAG@__imp_RtlFreeUnicodeString__imp_RtlAnsiStringToUnicodeString__imp_RtlInitAnsiStringRpcpUnbindRpcRpcpBindRpc__imp_RpcStringFreeW__imp_RpcBindingFromStringBindingW__imp_RpcStringBindingComposeWEVENTLOG_HANDLE_A_unbindEVENTLOG_HANDLE_A_bindEVENTLOG_HANDLE_W_unbindEVENTLOG_HANDLE_W_bind$unwind$EVENTLOG_HANDLE_A_bind$pdata$EVENTLOG_HANDLE_A_bind$unwind$EVENTLOG_HANDLE_W_bind$pdata$EVENTLOG_HANDLE_W_bind
/76             1606894316              100666  142699    `
d�F�B�_��.debug$S�3�8@B.rdata9@@@.rdata9@@@.rdata	9@@@.dataH'9o9@P�.rdata
�9@@@.rdatah�9@P@.rdata:@@@.rdata:@@@.rdata":@@@.rdata2:@@@.rdataB:@@@.rdataR:@@@.rdatab:@@@.rdatar:@@@.rdata�:@@@.rdata�:@@@.rdata�:@@@.rdata�:@@@.rdata�:@@@.rdata�:@@@.rdata�:@@@.rdata�:@@@.rdata;@@@.rdata;@@@.rdata";@@@.rdata2;@@@.rdataB;@@@.rdataR;@@@.rdatab;@@@.rdatar;@@@.rdata�;@@@.rdata�;@@@.rdata�;@@@.rdata�;@@@.rdata�;@@@.rdata�;@@@.rdata�;@@@.rdata�;@@@.rdata<@@@.rdata<@@@.rdata"<@@@.rdata2<@@@.rdataB<@@@.rdataR<@@@.text$mnwb<�< 0`.debug$S��<�>@B.text$mn�)?�? 0`.debug$Sh"@�D(@B.text$xF6F `.text$mn�@F�F 0`.debug$Sh9G�K(@B.text$x1MMM `.text$mn�WMN 0`.debug$S�XN S&@B.text$x�T�T `.text$mn��TbU 0`.debug$S �U�Y"@B.text$x[.[ `.text$mn�8[�[ 0`.debug$S \4`"@B.text$x�a�a `.text$mnu�a#b 0`.debug$S�Abf&@B.text$x�g�g `.text$mn��g�i 0`.debug$S$�in,@B.text$mn�o 0`.debug$S��o�p@B.text$mnu�pdq 0`.debug$S��qnu&@B.text$x�vw `.text$mn5wEw 0`.debug$S4Yw�x@B.text$mny 0`.debug$S�yz@B.text$mn�?z{ 0`.debug$S�@{�8@B.text$xD�`� `.text$mnj� 0`.debug$S`�߄
@B.text$mnC� 0`.debug$S0b���@B.text$mn� 0`.debug$S���@B.text$mn�&�Ԉ 0`.debug$S\�l�(@B.text$x��� `.text$mn�"�Џ 0`.debug$S`�l�(@B.text$x��� `.text$mn�"�� 0`.debug$S@*�j�0@B.text$xJ�f� `.text$mn�p�Y� 0`.debug$Shw�ߤ2@B.text$xӦ� `.text$mn�����
 0`.debug$S/�?�2@B.text$x3�O� `.text$mn'Y��� 0`.debug$S� ��6@B.text$x0�L� `.text$mnV�s� 0`.debug$SH����B@B.text$x���� `.text$mn���� 0`.debug$S<�>�@@B.text$x���� `.text$mn\��@� 0`.debug$S$����(@B.text$x:�V� `.text$mn`� 0`.debug$S�f���
@B.text$mnN�]� 0`.debug$S���w�4@B.text$x��� `.text$mn���G�
 0`.debug$Sd���0@B.text$x��� `.text$mnv��� 0`.debug$S�
��n@B.text$x�	�	 `.text$mn	
 0`.debug$S�
�"@B.text$mnK7� 0`.debug$S�6"%�@B.text$x^*z* `.text$mn>�*�* 0`.debug$S(�*�+
@B.text$mn	b, 0`.debug$S@k,�-@B.text$mn�- 0`.debug$S�.�/
@B.text$mn�/ 0`.debug$Sd0i1
@B.text$mn�1�2 0`.debug$S��2�6"@B.text$mn*8@8 0`.debug$S4J8~:@B.text$mn%n;�; 0`.debug$SX�;�<@B.text$mnPm=�= 0`.debug$S��=G@@B.text$mn)#A 0`.debug$SpLA�B
@B.text$mnh C�C 0`.debug$S��C2F@B.text$mnj�F(G 0`.debug$ShFG�I@B.text$mn
&J 0`.debug$S�0J�J@B.text$mnC�J7K 0`.debug$S�}KEM@B/4�M@0@.xdata4�MN@0@.pdataON[N@0@.xdatayN@0@.pdata�N�N@0@/4�N@0@.xdata0�N�N@0@.pdataOO@0@.xdata;O@0@.pdataCOOO@0@/4mO@0@.xdata,qO�O@0@.pdata�O�O@0@.xdata�O@0@.pdataP
P@0@/4+P@0@.xdata(/PWP@0@.pdata�P�P@0@.xdata�P@0@.pdata�P�P@0@/4�P@0@.xdata(�PQ@0@.pdataCQOQ@0@.xdatamQ@0@.pdatauQ�Q@0@/4�Q@0@.xdata(�Q�Q@0@.pdata�Q	R@0@.xdata'R@0@.pdata/R;R@0@/4YR@0@.xdata4]R�R@0@.pdata�R�R@0@.xdata�R@0@.pdata�RS@0@/4S@0@.xdata0#SSS@0@.pdata�S�S@0@.xdata�S@0@.pdata�S�S@0@/4�S@0@.xdata0�ST@0@.pdataGTST@0@.xdataqT@0@.pdatayT�T@0@/4�T@0@.xdata$�T�T@0@.pdata�T	U@0@.xdata'U@0@.pdata/U;U@0@/4YU@0@.xdata$]U�U@0@.pdata�U�U@0@.xdata�U@0@.pdata�U�U@0@/4V@0@.xdata,V?V@0@.pdataqV}V@0@.xdata�V@0@.pdata�V�V@0@/4�V@0@.xdata(�V�V@0@.pdata+W7W@0@.xdataUW@0@.pdata]WiW@0@/4�W@0@.xdata(�W�W@0@.pdata�W�W@0@.xdataX@0@.pdataX#X@0@/4AX@0@.xdata4EXyX@0@.pdata�X�X@0@.xdata�X@0@.pdata�X�X@0@/4Y@0@.xdata4Y?Y@0@.pdataqY}Y@0@.xdata�Y@0@.pdata�Y�Y@0@/4�Y@0@.xdata,�Y�Y@0@.pdata/Z;Z@0@.xdataYZ@0@.pdataaZmZ@0@/4�Z@0@.xdata(�Z�Z@0@.pdata�Z�Z@0@.xdata[@0@.pdata['[@0@/4E[@0@.xdata(I[q[@0@.pdata�[�[@0@.xdata�[@0@.pdata�[�[@0@/4�[@0@.xdata(\+\@0@.pdata]\i\@0@.xdata�\@0@.pdata�\�\@0@.xdata�\@0@.pdata�\�\@0@/4�\@0@.xdata �\]@0@.pdataA]M]@0@.xdatak]@0@.pdatas]]@0@.xdata�]@0@.pdata�]�]@0@.gfids$y�]@0@.xdata�]@0@.pdata�]�]@0@.xdata^@0@.pdata^)^@0@.xdataG^@0@.pdataW^c^@0@.xdata�^�^@0@.pdata�^�^@0@.xdata�^�^@0@.pdata�^�^@0@.xdata	_@0@.pdata__@0@.xdata;_@0@.pdataC_O_@0@.xdatam_@0@.pdatau_�_@0@.xdata�_@0@.pdata�_�_@0@.debug$S,�_�_@B.debug$S<`M`@B.debug$S@a`�`@B.debug$S,�`�`@B.debug$S4�`)a@B.debug$S<=aya@B.debug$S0�a�a@B.debug$S4�ab@B.debug$S0bIb@B.debug$S@]b�b@B.debug$S4�b�b@B.debug$S8�b1c@B.debug$S,Ecqc@B.debug$S4�c�c@B.debug$S,�c�c@B.debug$S4
dAd@B.debug$S0Ud�d@B.debug$S0�d�d@B.debug$S0�d
e@B.debug$S@!eae@B.debug$S@ue�e@B.debug$S4�e�e@B.debug$S,f=f@B.debug$S,Qf}f@B.debug$S,�f�f@B.debug$S0�fg@B.debug$S4gIg@B.debug$S,]g�g@B.debug$S<�g�g@B.debug$S@�g-h@B.debug$S@Ah�h@B.debug$S8�h�h@B.debug$S<�hi@B.debug$S81iii@B.debug$SH}i�i@B.debug$S<�ij@B.debug$S0)jYj@B.debug$S4mj�j@B.debug$S4�j�j@B.debug$S(�j%k@B.debug$S$9k]k@B.debug$T�qk@B.chks640
e�
.drectven��
��Rd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\apistub.obj:<��kk
Microsoft (R) Optimizing Compiler�?� ComputerNameNetBIOS" _ApiElfOpenBackupEventLogA# _ApiElfRegisterEventSourceA _ApiElfOpenEventLogA" _ApiElfOpenBackupEventLogW# _ApiElfRegisterEventSourceW _ApiElfOpenEventLogW�SecurityImpersonation1
�Microsoft_Windows_EventlogEnableBits�B�^MCGEN_TRACE_CONTEXT�_PMCGEN_TRACE_CONTEXT�^_MCGEN_TRACE_CONTEXT _ELF_API_TYPE�^STRING_STORAGE�_PSTRING_STORAGE�^PRIVILEGE_STATUS�_PPRIVILEGE_STATUS�^tagPrivilegeStatus�_PRECONN_INFO _tagElfApiType�^tagStringStorage'_tagReconnInfo��:s G�Qy�(�_ f�ټ�p.�ڤ���~��� ����o�}�+4qt*Y lռ��́dq�X� .�<���5�)ڀ�~B�G?_�M�MZ��{�� �^h����j[�|�-�������0f'�M{Ft+ 4(���+C�h5J$t�J���h8�ϽgX���d�^2�^�'�^`,�^`�^`�^�_��,_�w�Ronecore\admin\wmi\events\advapi\objfre\amd64\pch_hdr.srconecore\admin\wmi\events\advapi\objfre\amd64\precomp.pchonecore\internal\sdk\inc\nxamd64.honecore\admin\wmi\events\advapi\precomp.honecore\admin\wmi\events\advapi\apistub.conecore\admin\wmi\events\manifests\objfre\amd64\EventLogEvents.honecore\external\shared\inc\evntprov.h�L�_�7�7
SecurityApplicationSecurity
078@@=������� @ @p�T
e @S
e @R
e @Q
i @P
e @O
e @N
h @M
e @L
g @�m�m�m�m�m�m�mmell�j�ii�hh�gefede(�d�d��d�d�d�d�d�d�d�d���e���bI��n\���HH�\$H�t$WH�� eH�%03�H����9��tD�������D��A��D�GL�OA��wA�Ћ�H�t$8���AvrP�É_H�\$0H�� _�36U5�->Gwl�^�ElfAssertThreadPrivilege>PrivilegeAA?
>�^pAKAMYM�^	N B!
h�^0OPrivilege8�^Op91�^9S�^O�Xw`L1�2�'5�*6�,:�@=�D>�YC�,�0�
h�l�
x�|�
����
����
��
)�-�
D�H�
H�\$H�t$ WH��PH�H3�H�D$@H��H��W�3�D$(�D$83�H��tbf92t]H�T$(�H���H�C�H���w�;CflEuH�K8H��t H����؉D$ ����؉D$ ���H�L$(�����
�H�L$@H3��H�\$pH�t$xH��P_��G�l|'�����S<G��<_�ElfBackupEventLogFileA>LogHandleAI$|NiAJ$AI�D`>>BackupFileNameAK!AM!WAM�Dh
>�^PrivD(>statusAr)A�D M�^K
>resultAJME#NZ�^=_�^P@C!
h�^
:@O$LN10`OLogHandleh>OBackupFileName(�^OPriv Ostatus9z_O���`���'��2��>�K�c�h�v�x!����'��.��0����1��=CF�ElfBackupEventLogFileA$filt$0
>�^PrivEN(>statusEN  �"$LN11$LN9`NLogHandleh>NBackupFileName(�^NPriv Nstatus9_O� `�,�0�
f�j�
~���
����
����
����
����
#�'�
;�?�
����
����
O�S�
h�l�
 �$�
`�d�
����
����
����
-�1�
H�L�
@UH�� H��H����H�� ]��(H�\$H�t$ WH��PH�H3�H�D$@H��H��W�3�D$(�D$83�H��tbf92t]H�T$(�H���H�C�H���w�;CflEuH�K8H��t H����؉D$ ����؉D$ ���H�L$(�����
�H�L$@H3��H�\$pH�t$xH��P_��G�l|'�����S<G��I_�ElfBackupEventLogFileW>LogHandleAI$|NiAJ$AI�D`>8BackupFileNameAK!AM!WAM�Dh
>�^PrivD(>statusAr)A�D M�^K
>resultAJME#NZ�^L_�^P@C!
h�^
:@O$LN10`OLogHandleh8OBackupFileName(�^OPriv Ostatus9z_O���`�P�'S�2Y�>i�Kp�cq�hu�vx�x{��y�����������[�����=CF�ElfBackupEventLogFileW$filt$0
>�^PrivEN(>statusEN  �"$LN11$LN9`NLogHandleh8NBackupFileName(�^NPriv Nstatus9_O� `y�,�0�
f�j�
~���
����
����
����
����
#�'�
;�?�
����
��
O�S�
h�l�
 �$�
`�d�
����
��
��
-�1�
H�L�
@UH�� H��H����H�� ]��(H�\$WH��PH�H3�H�D$HH��H��W�3�D$0�D$@eH�%0@@f~D$(fs�f~D$,H�T$0��3�H�C�H���w�;CflEuH�K8H��t%D��H�T$(��؉D$ ����؉D$ ���H�L$0���H�L$HH3��H�\$pH��P_�
�V��$�'�����{5G��]_�ElfChangeNotify>LogHandleAI�gAJD`>EventAKAM�pDh
>�^PrivD0>�RpcClientIdD(>6ClientIdA�:>statusA�9D M�^Z
>resultAJ\J(NM�^	-NZ�^`_�^P@C!h�^�^
:HO$LN8`OLogHandlehOEvent0�^OPriv(�ORpcClientId Ostatus9�_O���`�$�"*�-0�:1�@2�K7�Z?�r@�wD��F��I��G��O��R��T��U��p<F�ElfChangeNotify$filt$0
>�^PrivEN0>�RpcClientIdEN(>statusEN  �"$LN9$LN7`NLogHandlehNEvent0�^NPriv(�NRpcClientId Nstatus9_O� `G�,�0�
_�c�
s�w�
����
����
��
0�4�
����
��
w�{�
����
P�T�
����
����
����


����
����
@UH�� H��H����H�� ]��(H�\$WH��PH�H3�H�D$@H��H��W�3�D$(�D$8H�T$(�H�3�H�C�H���w�;CflEuH�K8H��t H����؉D$ ����؉D$ ���H�L$(���H�L$@H3��H�\$pH��P_�
�6�[k'�����;G��8_�ElfClearEventLogFileA>LogHandleAI]BAJD`>>BackupFileNameAKAM�KDh
>�^PrivD(>statusAa9D M�^:
>resultAJ<E#NZ�^;_�^P@C!
h�^
:@O$LN8`OLogHandleh>OBackupFileName(�^OPriv Ostatus9i_O���`
t��"��-��:��R��W��e��g��u��w��|���������;BF�ElfClearEventLogFileA$filt$0
>�^PrivEN(>statusEN  �"$LN9$LN7`NLogHandleh>NBackupFileName(�^NPriv Nstatus9_O� `��,�0�
e�i�
y�}�
����
����
���
N�R�
����
��
4�8�
����
��
@�D�
j�n�
z�~�
����
��
@UH�� H��H����H�� ]��(H�\$WH��PH�H3�H�D$@H��H��W�3�D$(�D$8H�T$(�H�3�H�C�H���w�;CflEuH�K8H��t H����؉D$ ����؉D$ ���H�L$(���H�L$@H3��H�\$pH��P_�
�6�[ k'�����;G��M_�ElfClearEventLogFileW>LogHandleAI]BAJD`>8BackupFileNameAKAM�KDh
>�^PrivD(>statusAa9D M�^:
>resultAJ<E#NZ�^N_�^P@C!
h�^
:@O$LN8`OLogHandleh8OBackupFileName(�^OPriv Ostatus9i_O���`
t�"�-�:�R�W�e!�g$�u"�w*�|-��/��0��;BF�ElfClearEventLogFileW$filt$0
>�^PrivEN(>statusEN  �"$LN9$LN7`NLogHandleh8NBackupFileName(�^NPriv Nstatus9_O� `"�,�0�
e�i�
y�}�
����
����
���
N�R�
�	�	
��
4�8�
����
��
@�D�
jn
z~
����
��
@UH�� H��H����H�� ]��(H�\$H�L$WH��0H��3�H�C�H���w�;CflEuH�K8H�L$HH��t/H�L$H����D$ ������D$ H�\$@H��������H�\$PH��0_�:J']���6Guj_�ElfCloseEventLog>LogHandleAI]4AJD@>RpcHandleBH/F>statusA@AhD M�^
>resultAJT%*AJh
NZ_�^0@B!
h�^$LN8@OLogHandleHORpcHandle Ostatus9H_O�xu`l����2��4��D��F��T��Y��a��c��h��j���G=F�ElfCloseEventLog$filt$0>LogHandleEN@>RpcHandleBH>statusEN  �"$LN9$LN7@NLogHandleHNRpcHandle Nstatus9_O� `��,�0�
`�d�
t�x�
����
����
����
!�%�
5�9�
�
����
����
����
����
����
��
>�B�
NR
����
����
@UH�� H��H����H�� ]��(H�\$H�l$H�t$WAVAWH�� H��E3�E��I����@H��tL9~t�F�H��t
M9xtA�@Ћ�D�úH��H��H���@�hA��eH�%0D9�����K�����~}����H��t3L9~t-H�C@H��H�CH�K�Ff�CfD�9��FHCH�C(H����L9��L9{(uH�C@H�C(�GH�K H��f�C"fD�9��jH��t3L9~t-H�C@H��H�CH�K�Ff�CfD�9��FHCH�C(H��t-L9t'L9{(uH�C@H�C(�GH�K H��f�C"fD�9�H�D$`H�C8H��D�s0D�{4�CflE��L��3�H��3�H�\$@H�l$HH�t$PH�� A_A^_�R2c3�00A11�2�/��9G��$_�ElfCreateReconnInfo> _ApiTypeA&A&�>�^UNCServerNameAKAL�>�^ModuleNameAM$�AP$>tIsSecurityLogAi!An!�>RpcHandleEO(D`>)_recInfoAIjP>"structSizeA++M�^	yN B!
h�^@ _OApiTypeH�^OUNCServerNameP�^OModuleNameXtOIsSecurityLog`ORpcHandle9P�^9a/_^a%_9�2_92_9?5_9}5_9��^9��^O�0�`#$����6��<��G��N��j��s��v�������������������������������������$��(��E��Q��\��b��j��n��r��������������,�0�
a�e�
q�u�
����
����
����
����
�
�
��
>�B�
h�l�
����
Y�]�
i�m�
y�}�
����
����
����
����
����
����
����
�����=G�^�ElfDeregisterClusterSvc>8UNCServerNameAJDB!8OUNCServerNameO�0`$L	�P	�Q	�,�0�
k�o�
����
H�\$H�L$WH��0H��3�H�C�H���w�;CflEuH�K8H�L$HH��t/H�L$H����D$ ������D$ H�\$@H��������H�\$PH��0_�:J']���>Guj�^�ElfDeregisterEventSource>LogHandleAI]4AJD@>RpcHandleBH/F>statusA@AhD M�^
>resultAJT%*AJh
NZ_�^0@B!
h�^$LN8@OLogHandleHORpcHandle Ostatus9H_O�xu`l����2��4��D��F��T��Y��a��c�h�j��OEF�ElfDeregisterEventSource$filt$0>LogHandleEN@>RpcHandleBH>statusEN  �"$LN9$LN7@NLogHandleHNRpcHandle Nstatus9_O� `��,�0�
h�l�
|���
����
����
����
)�-�
=�A�
����
����
����
����
����
���
$�(�
N�R�
^�b�
����
����
@UH�� H��H����H�� ]��(H��t/SH�� �9CflEH��u�CdaB�L��3�H��H�� [�2+/��@G5
5�^�ElfDestroyReconnectionInfo>LogHandleAI!AJAJ4 B!0OLogHandle9�^9)�^O�@5`4��������/��,�0�
j�n�
z�~�
����
����
����
����
�"����6G�^�ElfFlushEventLog>LogHandleAJDB!OLogHandleO�0`$w	�|	��	�,�0�
`�d�
����
@SVWAVAWH��`H�H3�H�D$PE��I���H��L��$�W�3�D$8�D$HH�T$8�H���t�H��L3�H�G�H���w�?CflEuH�O8H��t*L�|$ E��L��3���؉D$0����؉D$0���H�L$8���H�L$PH3��H��`A_A^_^[��E�#�'�����{:G��Q_�ElfGetLogInformation>LogHandleAJ&AM&zeAM�"D�>"InfoLevelA#A#}/bD�>lpBufferAL!jAP!AL�#D�>"cbBufSizeAiAn�mAn�!D�>"pcbBytesNeededAW.r]EO(D�
>�^PrivD8>statusARG17A�$D0M�^T
>resultAJVJ-AJ�NZ�^T_�^`@C!
h�^
:PO$LN12�OLogHandle�"OInfoLevel�OlpBuffer�"OcbBufSize�"OpcbBytesNeeded8�^OPriv0Ostatus9�_O���`�_�1b�<g�Im�M��Tp�lq�qu��w��z��x���������������AF�ElfGetLogInformation$filt$0
>�^PrivEN8>statusEN00�"$LN13$LN11�NLogHandle�"NInfoLevel�NlpBuffer�"NcbBufSize�"NpcbBytesNeeded8�^NPriv0Nstatus9_O� `x�,�0�
d�h�
t�x�
����
����
����
����
��
��
G�K�
W�[�
k�o�
����
����
����
��
T�X�
h�l�
��
w�{�
����
H�L�
����
����
��
��
����
����
@UH��0H��H����H��0]��(3�H��t
�y���H�A ��6G�^�ElfGetModuleName>LogHandleAJ">tModuleNameIsUnicodeStringAK>�^resultAHJ!OLogHandle&tOModuleNameIsUnicodeStringO�8`,5�9�I�L�,�0�
`�d�
����
����
(�,�
3�H�A�H���w�9CflEuH�Q8H���3����8G�^�ElfGetTheRpcHandle>LogHandleAJ>resultAKJ!OLogHandleO�``	T��
�����
��,�0�
b�f�
����
����
H��u3�ËA4���@G�^�ElfGetUseLegacyReportEvent>LogHandleAJJ!OLogHandleO�H`<���%�$�%�,�0�
j�n�
����
H�\$WH��PH�H3�H�D$@H��H��W�3�D$(�D$8H��u�
��]H�T$(��3�H�C�H���w�;CflEuH�K8H��t H����؉D$ ����؉D$ ���H�L$(���H�L$@H3��H�\$pH��P_�
�D�i&y'�����L8G��a_�ElfNumberOfRecords>LogHandleAIkPAJAI�D`>"NumberOfRecordsAKAMzYAM�Dh
>�^PrivD(>statusAo'A�D M�^H
>resultAJJE#NZ�^b_�^P@C!
h�^
:@O$LN9`OLogHandleh"ONumberOfRecords(�^OPriv Ostatus9w_O���`���"��-��2��9��H��`��e��s��u������������������:?F�ElfNumberOfRecords$filt$0
>�^PrivEN(>statusEN  �"$LN10$LN8`NLogHandleh"NNumberOfRecords(�^NPriv Nstatus9_O� `��,�0�
b�f�
v�z�
����
����
����
����
� �
4�8�
|���
�%�%
H�L�
`�d�
��
T�X�
y�}�
�#�#
�$�$
"�&�
<�@�
@UH�� H��H����H�� ]��(H�\$WH��PH�H3�H�D$@H��H��W�3�D$(�D$8H��u�
��]H�T$(��3�H�C�H���w�;CflEuH�K8H��t H����؉D$ ����؉D$ ���H�L$(���H�L$@H3��H�\$pH��P_�
�D�i%y'�����O5G��W_�ElfOldestRecord>LogHandleAIkPAJAI�D`>"OldestRecordNumberAKAMzYAM�Dh
>�^PrivD(>statusAo'A�D M�^H
>resultAJJE#NZ�^Z_�^P@C!
h�^
:@O$LN9`OLogHandleh"OOldestRecordNumber(�^OPriv Ostatus9w_O���`���"��-��2��9�H�`�e�s�u������������:<F�ElfOldestRecord$filt$0
>�^PrivEN(>statusEN  �"$LN10$LN8`NLogHandleh"NOldestRecordNumber(�^NPriv Nstatus9_O� `�,�0�
_�c�
s�w�
����
����
����
����
� �
4�8�
|���
�!�!
K�O�
d�h�
� �
U�Y�
z�~�
��
� � 
&�*�
@�D�
@UH�� H��H����H�� ]��(L�D$H�T$H�L$SVWAVAWH��@M��L��H��3�M����H����f9��H��tf9tH�I�H��H��$�H��$�H�D$ A�E������D$0�"�����D$03�L��$�L�t$xH�t$p��x.H��$�H�D$ E3�M��H��A�I�I�H��u
���I�����
�H��@A_A^_^[�r�'���l<G��e_�ElfOpenBackupEventLogA>>UNCServerNameAJ#AL#�["Dp>>FileNameAK AV �^Dx>*WLogHandleAPAW�aD�>RpcHandleB�[�#~>statusAxZDA�D0>pServerNameStringAJN(Zh_$_@@B!$LN13p>OUNCServerNamex>OFileName�*WOLogHandle�ORpcHandle0Ostatus9�_O���`�[�#d�@i�Jk�Nl�Po�Sr�[v�||�~��}�����������������������f������CF�ElfOpenBackupEventLogA$filt$0>>UNCServerNameENp>>FileNameENx>*WLogHandleEN�>RpcHandleB�>statusEN00�"$LN14$LN12p>NUNCServerNamex>NFileName�*WNLogHandle�NRpcHandle0Nstatus9_O� `}�,�0�
j�n�
z�~�
����
����
����
����
)�-�
R�V�
j�n�
����
����
h�l�
����
`�d�
����
����
����
� �
A�E�
k�o�
|���
�	�
 �$�
@UH��0H��H����H��0]��(L�D$H�T$H�L$SVWAVAWH��@M��L��H��3�M����H����f9��D�CH��tfD9vH�I�H��H��$�H��$�H�D$ E������D$0�"�����D$03�L��$�L�t$xH�t$p��x.H��$�H�D$ E3�M��H��A�I�I�H��u
���I�����
�H��@A_A^_^[�q!�'����<G��t_�ElfOpenBackupEventLogW>8UNCServerNameAJ#AL#�Z"Dp>8BackupFileNameAK AV �]Dx>*WLogHandleAPAW�`D�>RpcHandleAH�B�`�x>statusAwZDA�D0>qServerNameStringAJS"Z�_$_@@B!$LN13p8OUNCServerNamex8OBackupFileName�*WOLogHandle�ORpcHandle0Ostatus9_O���`���#��@��O��S��U��X��`��{��}����������������������������������CF�ElfOpenBackupEventLogW$filt$0>8UNCServerNameENp>8BackupFileNameENx>*WLogHandleEN�>RpcHandleB�>statusEN00�"$LN14$LN12p8NUNCServerNamex8NBackupFileName�*WNLogHandle�NRpcHandle0Nstatus9_O� `��,�0�
j�n�
z�~�
����
����
����
���
/�3�
?�C�
h�l�
����
����
�
�

����
����
|���
����
����
��
>�B�
c�g�
��
��
-�1�
H�L�
@UH��0H��H����H��0]��(L��SVWATAUAVAWH��H�H3�H��$�M��L��H��H�L$HH�T$PL�D$XW�3�AC�A�C�W�L$pA�C�3�M���(H���f9�H��tf9tH�y�H��H�H�L$`�H�\$@I�VH�
�D��A��E��D�d$4��uH��$��H�H�T$p���H�D$@H�D$(A�D�L$ L�D$`I��H������D$0�'�����D$03�D�l$4H�t$HL�t$PL�|$XE��H�L$p�E��t
H��$����x,H�D$@H�D$ E��M��H�ֹ�I�H��u
���I�����
�H��$�H3��H�İA_A^A]A\_^[���	�-������*'?�Q�r�����6G�'�j_�ElfOpenEventLogA>>UNCServerNameDHAJ0AL0��D�>>LogNameDPAK-AV-�D�>*WLogHandleDXAP*AW*��$D>tfIsSecurityLogAm�}fD4>RpcHandleD@>@RegModuleNameD`>�^BackPrivDp>statusAycA�)D0>�^SecPrivD�>pServerNameStringAM��"Zm_�^�^_�^�^$_�@C!
:�O$LN15�>OUNCServerName�>OLogName*WOLogHandle4tOfIsSecurityLog@ORpcHandle`@ORegModuleNamep�^OBackPriv0Ostatus��^OSecPriv9�_9_O��`�s�By�Pz�Y��v������������������������������������ ��9��C��H��U��Y��y��~������������������6=F�ElfOpenEventLogA$filt$0>RpcHandleEN@>@RegModuleNameEN`>�^BackPrivENp>statusEN0>�^SecPrivEN�0�"$LN16$LN14�>NUNCServerName�>NLogName*WNLogHandle4tNfIsSecurityLog@NRpcHandle`@NRegModuleNamep�^NBackPriv0Nstatus��^NSecPriv9_O� `��,�0�
l�p�
|���
����
����
����

��
?�C�
����
����
,�0�
����
x�|�
����
����
����
��
;�?�
b�f�
����
����
����
����
����
����
@UH��0H��H����H��0]��(@SVWATAUAVAWH���H�H3�H��$�M��H��L��H�L$PH�T$XL�D$`W�3��$���$�W�L$x��$�3�M����H�����f����{H��tf99vL�i�L��thH�Jf�����D$0H�T$0H��$�HǄ$��H��$���$���$�H��$�H�D$ A�E3�H�H�
�3�H�L$h�H�\$HH�VH�
�D��A��D�d$<D�d$@��uH��$��H�H�T$x���H�D$HH�D$(�|$ D��L�D$hH��I������D$8�$�����D$83�L�t$PH�t$XL�|$`D�d$<H�L$x�E��t
H��$����x+H�D$HH�D$ D�L$@L��I��3��I�H��u
���I�����
�H��$�H3��H���A_A^A]A\_^[���7�j�:�. %"L�[�},�'��������f6G'%�_�ElfOpenEventLogW>8UNCServerNameDPAJ.AV.�[D >8LogNameDXAK+AL+�^D(>*WLogHandleD`AP(AW(�aD0>tfIsSecurityLogD@>RpcHandleAH�DH>:RegModuleNameDh>�^BackPrivDx>statusA�u_A�)D8>�^SecPrivD�>qServerNameStringAU��AU�tRM_��)
Z�^>
_Arg0D0>�%_Arg1AJ�_>_EventDataD�M�^��(NM�^��
NN"Z�_�^�^_�^�^$_�@C!h�^_
:�O$LN17 8OUNCServerName(8OLogName0*WOLogHandle@tOfIsSecurityLogHORpcHandleh:ORegModuleNamex�^OBackPriv8Ostatus��^OSecPriv9_9�_O�'`��@��T��`�����������������������<��@��P��`��������������������
����������������6=F�ElfOpenEventLogW$filt$0>RpcHandleENH>:RegModuleNameENh>�^BackPrivENx>statusEN8>�^SecPrivEN�0�"$LN18$LN16 8NUNCServerName(8NLogName0*WNLogHandle@tNfIsSecurityLogHNRpcHandleh:NRegModuleNamex�^NBackPriv8Nstatus��^NSecPriv9_O� `��,�0�
l�p�
|���
����
����
����

��
[�_�
����
����
(�,�
<�@�
����
dh
R�V�
b�f�
|���
����
����
�#�
F�J�
k�o�
����
��
��
����
����
@UH��0H��H����H��0]��(@SVWATAVAWH��xH�H3�H�D$`M��E��H��H��$�L��$�W�3�D$H�D$XM����H����M������������������t|��txH�T$H��3�H�C�H���w�;CflEuH�K8H��t9L�t$0H�t$(L�|$ D��$�E�ċ���؉D$@����؉D$@���H�L$H�����
�H�L$`H3��H��xA_A^A\_^[������'�����6G@_�ElfReadEventLogA>LogHandleAI(���AJ(AID�>"ReadFlagsA%A%��AD�>"RecordNumberAh#Al#��AlD�>BufferAQ AW ��AWD�>"NumberOfBytesToReadEO(D�>"NumberOfBytesReadAL0��EO0D�>"MinNumberOfBytesNeededAV8��EO8D�
>�^PrivDH>"FlagBitsAc1A�>statusA�)AD@M�^��
>resultAJ�^<NZ�^C_�^x@C!
h�^
:`O$LN14�OLogHandle�"OReadFlags�"ORecordNumber�OBuffer �"ONumberOfBytesToRead�"ONumberOfBytesRead#�"OMinNumberOfBytesNeededH�^OPriv@Ostatus9�_O��`�N�;R�FX�aa�fd�wi�|l��t��v��w��{��������������������Z�����=F�ElfReadEventLogA$filt$0
>�^PrivENH>statusEN@@�"$LN15$LN13�NLogHandle�"NReadFlags�"NRecordNumber�NBuffer �"NNumberOfBytesToRead�"NNumberOfBytesRead#�"NMinNumberOfBytesNeededH�^NPriv@Nstatus9_O� `��,�0�
`�d�
x�|�
����
����
����
����
��
��
+�/�
T�X�
d�h�
x�|�
����
����
���
7�;�
O�S�
����
����
����
����
#�'�
����
����
����
t�x�
����
����
���
��
��
(�,�
@UH��@H��H����H��@]��(@SVWATAVAWH��xH�H3�H�D$`M��E��H��H��$�L��$�W�3�D$H�D$XM����H����M�������ȃ������ȃ�wxH�T$H��3�H�C�H���w�;CflEuH�K8H��t9L�t$0H�t$(L�|$ D��$�E�ċ���؉D$@����؉D$@���H�L$H�����
�H�L$`H3��H��xA_A^A\_^[������'����y6G�E_�ElfReadEventLogW>LogHandleAI(���AJ(AI�D�>"ReadFlagsA%A%��A�D�>"RecordNumberAh#Al#��Al�D�>BufferAQ AW ��AW�D�>"NumberOfBytesToReadEO(D�>"NumberOfBytesReadAL0��EO0D�>"MinNumberOfBytesNeededAV8��EO8D�
>�^PrivDH>"FlagBitsAc>statusA�)A�D@M�^��
>resultAJ�^<NZ�^F_�^x@C!
h�^
:`O$LN14�OLogHandle�"OReadFlags�"ORecordNumber�OBuffer �"ONumberOfBytesToRead�"ONumberOfBytesRead#�"OMinNumberOfBytesNeededH�^OPriv@Ostatus9�_O��`�%�;)�F/�a8�f:�q?�vA�}I��K��L��P��X��[��Y��a��d��f��1��g���=F�ElfReadEventLogW$filt$0
>�^PrivENH>statusEN@@�"$LN15$LN13�NLogHandle�"NReadFlags�"NRecordNumber�NBuffer �"NNumberOfBytesToRead�"NNumberOfBytesRead#�"NMinNumberOfBytesNeededH�^NPriv@Nstatus9_O� `Y�,�0�
`�d�
x�|�
����
����
����
����
��
��
+�/�
T�X�
d�h�
x�|�
����
����
���
7�;�
O�S�
����
����
����
��
u�y�
u�y�
����
h�l�
����
����
����
��
��
� �
@UH��@H��H����H��@]��(H�L$SH��`H��H�d$xH���8�9CflE�,eH�%0�����y�3�H�L$H�3�H�L$8���K������tf��t8��t
���H�S H�D$xH�D$(A�D�L$ L�D$8H�K��yH�S H�D$xH�D$(A�D�L$ L�D$8H�K��PH�S H�D$xH�D$(A�D�L$ L�D$HH�K��'H�S H�D$xH�D$(A�D�L$ L�D$HH�K��D$0����D$0H�\$p��x	H�D$xH�C8H�D$x�3�H��`[�Q.^-�)�*�+%,3'�42G\
V_�ElfReconnect>LogHandleAI
N"AJ
Dp>:RegModuleNameWDH>@RegModuleNameAD8>RpcHandleBxI>statusA��'.'W'�'D0M�^	(NZ____`@B!
h�^$LN18pOLogHandleH:ORegModuleNameW8@ORegModuleNameAxORpcHandle0Ostatus9O_9\_91_O��\`�O�
U�Z�(`�Hh�Ui�cm�}���������������z���p�)��/��;��@��D��M��T\�V����9F�ElfReconnect$filt$0>LogHandleENp>:RegModuleNameWENH>@RegModuleNameAEN8>RpcHandleBx>statusEN00�"$LN19$LN17pNLogHandleH:NRegModuleNameW8@NRegModuleNameAxNRpcHandle0Nstatus9_O� `��,�0�
\�`�
p�t�
����
��
�*�*
��
 �$�
0�4�
H�L�
@�D�
{��
����
����
����
�"�
H(L(
Y)])
����
��
@UH��0H��H����H��0]��(����?;G�^�ElfRegisterClusterSvc>8UNCServerNameAJD>"pulSizeAKD>�^ppPackedEventInfoAPDB!8OUNCServerName"OpulSize�^OppPackedEventInfoO�0`$?	�E	�F	�,�0�
i�m�
����
����
T�X�
L�D$H�T$H�L$SVWAVAWH��PM��L��H��3�M����H����f9��H��tf9tH�y�H��H�H�L$8�H��$�H��$�H�D$(A�D�L$ L�D$8I��H������D$0�(�����D$03�L��$�L��$�H��$���x.H��$�H�D$ E3�M��H��A�I�I�H��u
���I�����
�H��PA_A^_^[�V	a-�)�'����=Gi_�ElfRegisterEventSourceA>>UNCServerNameAJ#AL#�z(D�>>ModuleNameAK AV �} D�>*WLogHandleAPAW��D�>RpcHandleB�e�8�>@RegModuleNameD8>statusA�`JA�D0>pServerNameStringAMNIZ_$_P@B!$LN13�>OUNCServerName�>OModuleName�*WOLogHandle�ORpcHandle8@ORegModuleName0Ostatus9__9�_O��`���#�@�J	�N
�P
�S�e�m����!����&��(��,��.��0��3��6���7��"DF�ElfRegisterEventSourceA$filt$0>>UNCServerNameEN�>>ModuleNameEN�>*WLogHandleEN�>RpcHandleB�>@RegModuleNameEN8>statusEN00�"$LN14$LN12�>NUNCServerName�>NModuleName�*WNLogHandle�NRpcHandle8@NRegModuleName0Nstatus9_O� `�,�0�
k�o�
{��
����
����
����
���
,�0�
u�y�
����
����
��
����
����
����
����
�
�
/�3�
W�[�
{��
����
����
����
��
����
����
@UH��0H��H����H��0]��(H�\$ VWATAVAWH��H�H3�H��$�M��L��L��H�L$HH�T$PL�D$X3�M���,H���#�f����sH��tf91vH�y�H���teH�Jf�����D$0H�T$0H��$�HǄ$��H��$���$���$�H�D$pH�D$ A�E3�H�H�
�3�H�L$`�H�\$@H�D$@H�D$(�t$ D��L�D$`I��H������D$8�"�����D$83ۍsL�|$HL�t$PL�d$X��x*H�D$@H�D$ E3�M��I�׋��I�$H��u���I�$����
�H��$�H3��H��$�H�İA_A^A\_^��v7�g�:���.+!'Y�����=G�&z�_�ElfRegisterEventSourceW>8UNCServerNameDHAJ/AW/l�D�>8ModuleNameDPAK,AV,q�D�>*WLogHandleDXAP)AT)v�"D�>RpcHandleAHHD@>:RegModuleNameD`>statusAV@Aq/D8>qServerNameStringAMo�M_��&
Z�^>
_Arg0D0>�%_Arg1AJ�\>_EventDataDpM�^��(NM�^��
NNZ_$_�@C!h�^_
:�O$LN15�8OUNCServerName�8OModuleName�*WOLogHandle@ORpcHandle`:ORegModuleName8Ostatus9�_9_O���`�A�>K�^P�kR�oS�qV�tY��[��_��h�o�r�+p�?w�Cy�a}�f�k��m��q��uM�z����DF�ElfRegisterEventSourceW$filt$0>RpcHandleEN@>:RegModuleNameEN`>statusEN80�"$LN16$LN14�8NUNCServerName�8NModuleName�*WNLogHandle@NRpcHandle`:NRegModuleName8Nstatus9_O� `p�,�0�
s�w�
����
����
����
��
��
D�H�
����
����
����
@�D�
��
����
����
����
����
����
"�&�
G�K�
qu
��
)�-�
D�H�
@UH��0H��H����H��0]��(@SVWATAUAVAWH��H�H3�H��$D��$�fD�D$rf�T$pH��H��$�f�T$xfD��$�D��$�H��$pH��$�H��$�H��$�H��$�H��$�H��$�H��$�H��$�H��$���$���$���$�H��$�����$�W��$�L��$�H��$�3����L��H��$�H��tH��$�H��3�A��H�O�H���w�?CflEuH�_8H��$�H��u3���w4D��$�D��$���$�H����D�L$rD�D$pH�˅�ukH��$�H�D$`fD�d$XH��$�H�D$PH��$�H�D$HH��$�H�D$@L�|$8D�l$0��$xf�D$(��$��D$ H��$���uH��$�H�D$hH��$�H�D$`fD�d$XH��$�H�D$PH��$�H�D$HH��$�H�D$@L�|$8D�l$0��$xf�D$(��$��D$ ��$����$�D���g��D��$�D��$�D��$���$�L��$�H��$�H��$��D$xf�D$p��$�f�D$r��$���$�A���uH���H��H��$��p���A��.�u0��u,H��$�H��$��H��t�G4��0���3�H��$��(���I���A��H��$H3��H��A_A^A]A\_^[����"-�h
|'��L_���5Gv%Sq_�ElfReportEventA>LogHandleD�AJ;AM;8=BDP>!EventTypeE6up8>@LDxA�A�
DX>!EventCategoryE6ur3CEYD�A�A`�D`>"EventIDD�D�A��g�lAi�Ap�$c����Dh>UserSidD�AHa�PwaEO(Dp>!NumStringsA��lEO0Dx>"DataSizeAmi#EO8D�>n_StringsD�AHq�3PkEO@D�
>DataD�AH��3kEOHD�>!FlagsAlaEOPD�>"RecordNumberD�AH���eEOXD�>"TimeWrittenD�AH�k.0EO`D�>tfUseLegacyReportEventAS�2�UD�>RpcHandleAI�I-C;
Cig�
�
D�>"nSizeD�>�>szComputerNameAD�>>pComputerNameAAW��D�>"EventTimeD�>statusA�~uAn.\;
JAni�sD�
>ITimeD�M�^�DM
NM�^�&
>resultAI(AAIig�
�
NM�^�#
NZu_{_~___@C!h�^�^�^
:O$LN15POLogHandleX!OEventType`!OEventCategoryh"OEventIDpOUserSidx!ONumStrings�"ODataSize�n_OStrings�OData�!OFlags�"ORecordNumber�"OTimeWritten"�tOfUseLegacyReportEvent�ORpcHandle�"OnSize��>OszComputerNameA�>OpComputerNameA�"OEventTime�Ostatus�IOTime9��_9��_9 _9z_9�_O�0v`#$���������������������������&��(��.��D��i��y������	��	�l	�x	��	��	��!	��"	�#	�
)	�#*	�/+	�4,	�90	�C2	�H4	�P6	�S7	��9<F�ElfReportEventA$filt$0>"nSizeEN�>�>szComputerNameAEN�>"EventTimeEN�>statusEN�
>ITimeEN�p�"$LN16$LN14PNLogHandleX!NEventType`!NEventCategoryh"NEventIDpNUserSidx!NNumStrings�"NDataSize�n_NStrings�NData�!NFlags�"NRecordNumber�"NTimeWritten"�tNfUseLegacyReportEvent�NRpcHandle�"NnSize��>NszComputerNameA�>NpComputerNameA�"NEventTime�Nstatus�INTime9_O� `	�,�0�
g�k�
w�{�
����
����
����
��
'�+�
7�;�
q�u�
����
����
����
����
$�(�
<�@�
g�k�
���
����
����
���
��
@�D�
X�\�
����
����
����
����
1�5�
i�m�
����
����
��
U�Y�
i�m�
����
��
��
����
����
����
����
����
����
����
P
�T
�
�
��
�
�
��
�
�
��
�
�	�
(�,�
R�V�
c�g�
Y
�]
�
t
�x
�
@UH��pH��H����H��p]��(�����>G�^�ElfReportEventAndSourceW>LogHandleAJD>"EventTimeAD>8pComputerNameUAPD>!EventTypeAaD >!EventCategoryD(EO(>"EventIDD0EO0>UserSidD8EO8>8UNCSourceNameD@EO@>!NumStringsDHEOH>"DataSizeDPEOP>�^StringsDXEOX
>DataD`EO`>!FlagsDhEOh>"RecordNumberDpEOp>"TimeWrittenDxEOxB!OLogHandle"OEventTime8OpComputerNameU !OEventType(!OEventCategory0"OEventID8OUserSid@8OUNCSourceNameH!ONumStringsP"ODataSizeX�^OStrings`ODatah!OFlagsp"ORecordNumberx"OTimeWrittenO�0`$7�I�J�,�0�
h�l�
����
����
����
-�1�
[�_�
����
����
����
�!�
K�O�
v�z�
����
����
��
����
@SWATAUAVAWH��XH�H3�H��$HD��$�fD�D$zf�T$xL��H��$�f��$�fD��$�D��$�H��$�H��$�H��$�H��$�H��$�H��$�H��$�H��$�H��$�H��$���$���$���$�H��u
���WH��$�����$�W��$(�$8L��$�H��$(3����L��H��$�H����H��$(H����3�I���t
A�>CflEuI�~8H��$�E�f4D��$�A�~w>���I�V(A�F ���ȈL$pH�D$pH��$�H��$H��2�tmI�F(A�N �L$pH�T$pH��$H��$H�H��$���$ H�D$ Ǆ$��$��$$A�E3�H�
�D��$�H����D�L$zD�D$xH��E��uqH��$�H�D$`fD�l$XH��$�H�D$PH��$�H�D$HH��$�H�D$@L�|$8��$��D$0��$�f�D$(��$��D$ H��$���{H��$�H�D$hH��$�H�D$`fD�l$XH��$�H�D$PH��$�H�D$HH��$�H�D$@L�|$8��$��D$0��$�f�D$(��$��D$ ��$����$����b���؉�$�D��$�D��$�L��$�H��$�L��$���$�f�D$x��$�f�D$z��$���$����uI���H��H��$��j�����.�u6E��u1H��$�H��$��A�F4A�D��$��,���3�H��$�����I��������H��$HH3��H��XA_A^A]A\_[���?.z7�d�7�a#:(��:M'���5��
5GK$)�_�ElfReportEventW>LogHandleD�AJ:AV:
:D�>!EventTypeE6ux7GD�A�A�
A)"D�>!EventCategoryE6uz2TD�A�A`�A`)"D�>"EventIDD�D�A��m�fAi�A5�%i����Ai)"D�>UserSidD�AHc�5mEO(D�>!NumStringsA��rEO0D�>"DataSizeA��rEO8D�>�^StringsD�AHs��qEO@D�
>DataD�AH�u��qEOHD�>!FlagsAm5�Am)EOPD�>"RecordNumberD�AH�X��kEOXD�>"TimeWrittenD�AH�5*=�EO`D�>tfUseLegacyReportEventAli��BQD�>�szComputerNameUD(>RpcHandleAM{K0C
"C5b�
�
�D�>"nSizeD�>"EventTimeD�>statusA�x��{AH�
A)"A5�	m�D�>8pComputerNameUAW!�JD�
>ITimeD�M�^�]NM�^�H	>resultAMJ�AM5b�
�
�NM_��M
>
_Arg0Bp�� 2�b�>�%_Arg1AK�+>_EventDataB���2T5�b�M�^��NM�^
��NN&M,_��MH_G	
Z�^>
_Arg0Bp�`>_Arg1AH�%AH�>_EventDataB��SM�^��NM�^
��0NNM�^
��NZu_�_�___X@C!"h�^�^�^�^�^_,_
:HO$LN23�OLogHandle�!OEventType�!OEventCategory�"OEventID�OUserSid�!ONumStrings�"ODataSize��^OStrings�OData�!OFlags�"ORecordNumber�"OTimeWritten"�tOfUseLegacyReportEvent(�OszComputerNameU�ORpcHandle�"OnSize�"OEventTime�Ostatus�8OpComputerNameU�IOTime9��_9�_9=_9K_9��_O�`K`)T����������������������������)��2��C��H��]��q��x��������5��>��R��������>�I�Z����
������������	�� � "�$��)#��9<F�ElfReportEventW$filt$0>�szComputerNameUEN(>"nSizeEN�>"EventTimeEN�>statusEN�
>ITimeEN�p�"$LN24$LN22�NLogHandle�!NEventType�!NEventCategory�"NEventID�NUserSid�!NNumStrings�"NDataSize��^NStrings�NData�!NFlags�"NRecordNumber�"NTimeWritten"�tNfUseLegacyReportEvent(�NszComputerNameU�NRpcHandle�"NnSize�"NEventTime�Nstatus�8NpComputerNameU�INTime9_O� `�,�0�
g�k�
w�{�
����
����
����
����
��
7�;�
G�K�
W�[�
����
����
����
����
��
'�+�
T�X�
l�p�
����
����
����
���
,�0�
H�L�
p�t�
����
����
����
����
!�%�
=�A�
u�y�
����
����
����
d�h�
|���
����
����
����
_�c�
o�s�
����
����

��
����
����
����
����
����
�
��
�
�
��
�
�
��
�
�
��
�
�
�
 �$�
����
����

�
�
8
�<
�
]
�a
�
�
��
�
�
��
�
�
��
�
����
����
@UH��pH��H����H��p]��(@SH�� �9AvrPH��u'�yt�QL�I�IA���{t��#H�� [�&514��>G>8�^�ElfRevertThreadPrivilege
>�^pAI.AJ
Z�^ B!0�^Op9$�^O�X>`LJ�L�N�P�*S�0U�5X�8Y�,�0�
`�d�
p�t�
����
����
H��t�Q4���@G	�^�ElfSetUseLegacyReportEvent>LogHandleAJ	>tUseLegacyReportEventA	J!OLogHandle!tOUseLegacyReportEventO�8	`,(�,�1�2�,�0�
j�n�
����
��
����M;G�^�ElfWriteClusterEvents>8UNCServerNameAJD>"ulEventInfoSizeAD>�^pPackedEventInfoAPDB!8OUNCServerName"OulEventInfoSize�^OpPackedEventInfoO�0`$X	�^	�_	�,�0�
i�m�
����
����
d�h�
�aH�D�A��9G�^�EventDataDescCreate>EventDataDescriptorAJ>DataPtrAK>"DataSizeAh J! OEventDataDescriptorODataPtr"ODataSizeO�0�$&�)�+�,�0�
m�q�
����
����
4�8�
@SH�� L�T$`3�M������������H�D$PE�B(D��I�BM�JA�R$fA;Z*��I�B@A�J(E��A8v��u I�B8J��H��tI�Jt
I�BH#�I;BtD���A�I�B0A�ȃ�I�����J��E��t���#�A��A�B*D;�r�H�� [�A�Z$A�Z(I�ZI�ZfA9Z*v$A�B*I�J0�ș���3����Lc�I���H�� [���><G�D_�McGenControlCallbackV2>8SourceIdAJ�JxAJJ��D0>"ControlCodeA�JxAJ�Pc> LevelAX�3�AX�>#MatchAnyKeywordAQ�JxAQJ��>#MatchAllKeywordEO(DP>�FilterDataEO0DX>CallbackContextAR�EO8D`>"IxAh3�Ah�!M�^J
	>#KeywordAJg'N  B!
h�^08OSourceId8"OControlCode@ OLevelH#OMatchAnyKeywordP#OMatchAllKeywordX�OFilterData`OCallbackContextO����n�v�z�'�0��J��������������������������������������,�0�
e�i�
y�}�
����
����
����
����
!�%�
5�9�
g�k�
����
����
����
��
��
X�\�
T�X�
H��(3�I9u�H��(�
���IG�^�McGenEventRegister_EtwEventRegister>8ProviderIdAJAJ>�^EnableCallbackAKAK>CallbackContextAPAP>#RegHandleAQAQ>"ErrorA( B!08OProviderId8�^OEnableCallback@OCallbackContextH#ORegHandle9�^O�8�,O�R�X�\�,�0�
t�x�
����
����
����
����
����
��
+�/�
K�O�
����
���
@SH�� H��H�	H��u3��
�H�#H�� [����MG%�^�McGenEventUnregister_EtwEventUnregister>#RegHandleAI	AJ	>"ErrorA  B!0#ORegHandle9�^O�P%�Dw�	z�|�}�������,�0�
w�{�
����
����
����
��
@SH��0L�Y3�L�T$`A��M��uI�D���M��E�E�JE3�A�BH�	L�T$(�\$ �H��0[�F��KGPJ�^�McGenEventWrite_EtwEventWriteTransfer>�^ContextAJ;>DescriptorAKJ>8ActivityIdAPJ>"EventDataCountA;Ai>�^EventDataAR9EO(D`>*TraitsAS
@0 B!@�^OContextHODescriptorP8OActivityIdX"OEventDataCount`�^OEventData9D�^O�hP�
\
��
����!�$�-�J#�,�0�
s�w�
����
����
����
����
��
.�2�
W�[�
���
��
�A(:�v��uM��tL�At
H�AI#�H;At2�ð��>G)(�^�McGenLevelKeywordEnabled>�^EnableInfoAJ)> LevelA)>#KeywordAP) J!�^OEnableInfo OLevel#OKeywordO�P)�D��"�#)�%*�&%�(*�,�0�
i�m�
����
����
 �$�
L��E�CH��xH�H3�H�D$`I�CI�Cȃd$LA��E3��D$HM�K�A��d$\�D$XI�C�I�C��H�L$`H3��H��x��R�_��
LGhV,_�McTemplateU0usr0_EtwEventWriteTransfer>�^ContextAJV>DescriptorAKV>
_Arg0AX.D�>_Arg1AQ@>_EventDataD0M�^6
>"DataSizeA+"NM�^N
Z�^x K!
h�^
:`O��^OContext�ODescriptor�
O_Arg0�O_Arg10_OEventDataO�hh�
\r�w�'y�+{�.w�6y�:{�@y�I{�V|�,�0�
t�x�
����
����
����
8�<�
$�(�
L��E�CH��xH�H3�H�D$`I�CI�Cȃd$LA��E3���D$HM�K�A��d$\�D$XI�C�I�C��H�L$`H3��H��x��T�a���LGjX_�McTemplateU0uzr0_EtwEventWriteTransfer>�^ContextAJX>DescriptorAKX>
_Arg0AX.D�>�%_Arg1AQB>_EventDataD0M�^8	
NM�^N
Z�^x K!
h�^
:`O��^OContext�ODescriptor�
O_Arg0��%O_Arg10_OEventDataO�hj�
\����'��+��0��8��<��B��K��X��,�0�
t�x�
����
����
����
��
eH�%0��V2G
	�^�NtCurrentTeb J!O�0
$1�2�	3�,�0�
l�p�
H��(��u#L�
L�H�H�
����uH�
��H��(�::�!�&�3:8��Z4GC>�_�WevtInitialize>DllBaseAJ7%AJ<D0>"ReasonA<A<>�&ContextAP<AP<D@Z�^�^(B!0ODllBase8"OReason@�&OContextO�XC`Lq�u�	w�*x�,y�0{�<~�>�,�0�
\�`�
p�t�
����
����
����
����
p�t�
�%	"�
���p`0yxx� �$�(�,�v��:�P��@��
���p`0���a�� �$�(���IrP��O�d4�phxxA��� �$����X2P��^�
4
�pWggA���� ����g2P��m�	r��p`0[~~��� �$����vRP��|�	���p`0m����� �$����RP����'	��
��p`0��� �$�(�,�����RP����$+�	���p0>III�� �$�(�K����P�����
���p`0���a�� �$�(����rP����	4
Rp4FF���� �u���2P���	4
Rp4FF���� �u���2P���d4�phxxA� �$��2P���	
4
�pWggA�� ��2P���
	r��p`0`}}�

 �$
�

�RP��&	4
��	�p`��� $(�,�RP��%	�
���p`0`���� $(�,'RP��!���p`0q��Q� �$�*RP��0
4
�pw��I�� �92P��?!
4
�peuuA�� �H2P��N%
4
�peuuA�""� "�""W2P��]

205&&c*	

�0c//�''�'\''lRP��r
d
T	42��p�++x�BC,,�20>--�d42pw..��`�j//��`�h00�20%11�B22�R0P33�2044��
�^EVENTLOG_Context::
�/-
�_Microsoft_Windows_EventlogLevels==
�1/
�_Microsoft_Windows_EventlogKeywords@@
�
EVENT_LOG_FULLCC
�%#
EVENT_AUDIT_PROCESSINGFF
�.,
EVENT_AUDIT_PUBLISHER_META_DATAII
�" 
EVENT_AUDIT_FAILURELL
�&$
EVENT_AUDIT_AUTO_BACKUPOO
�#!
EVENT_AUDIT_LOG_FULLRR
�42
EVENT_AUDIT_LOG_EXCEEDS_WARNING_LEVELUU
�&$
EVENT_AUDIT_LOG_CLEAREDXX
�)'
EVENT_AUDIT_EVENTS_DROPPED[[
�
EVENT_SHUTDOWN^^
�%#
EVENT_REPORTEVENT_ANSIaa
� 
EVENT_REPORTEVENTdd
�(&
EVENT_REGISTEREVENTSOURCEgg
�!
EVENT_OPENEVENTLOGjj
�#!
EVENT_PULLSUB_CREATEmm
�#!
EVENT_PUSHSUB_CREATEpp
�42
EVENT_ENABLE_CHANNEL_PROGRAMMATICALLYss
�42
EVENT_PUBLISHER_TLG_INVALID_META_DATAvv
�&$
EVENT_ABNORMAL_SHUTDOWNyy
� 
LOG_DROPPED_CHUNK||
� 
EVENT_AUTO_BACKUP
� 
EVENT_LOG_CLEARED��
�#!
EVENT_EVENTS_DROPPED��
�(&
EVENT_PUBLISHER_META_DATA��
�
EVENT_PROCESSING��
�/-
CHANNEL_POLICY_APPLICATION_ERROR��
�42
PRIMARY_CHANNEL_CONFIGURATION_WARNING��
�42
INIT_CHANNEL_PUBLISHER_ENABLE_FAILURE��
�*(
PRIMARY_CHANNEL_FATAL_ERROR��
�-+
INIT_CHANNEL_LOGFILTER_WARNING��
�+)
INIT_CHANNEL_LOGFILE_WARNING��
�97
INIT_CHANNEL_MOVED_UNSUPPORTED_VERSION_LOG��
�-+
INIT_CHANNEL_MOVED_CORRUPT_LOG��
�#!
INIT_CHANNEL_LOGGING��
�&$
INIT_CHANNEL_PUBLISHING��
�(&
INIT_CHANNEL_CONFIG_ERROR��
�
INIT_CHANNEL��
�
�EVENTLOG��
V	�NB�0(%OBJECT_ROOT%onecore\admin\wmi\events\advapi\objfre\amd64\precomp.obj��1DNtCurrentTeb���
�Z8"�^�^"�^ElfWriteClusterEvents��
�^�^ElfFlushEventLog���YEventDataDescCreate
�^8"�^�^"�^ElfRegisterClusterSvc���"�^ElfDeregisterClusterSvc
8B"8!!"8!"�^!""�^&�^ElfReportEventAndSourceW���t�^&�^ElfSetUseLegacyReportEvent��^&�^ElfDestroyReconnectionInfo�
p"t�^
�^t�^&�^ElfGetUseLegacyReportEvent�6�tagStringStorage.?ATtagStringStorage@@��
�W
=A6�^tagStringStorage.?ATtagStringStorage@@��2onecore\admin\wmi\events\advapi\apistub.c���^�^
�^t�^�^�^ElfGetModuleName����^�^ElfGetTheRpcHandle�B�tagPrivilegeStatus.?AUtagPrivilegeStatus@@��v
"Asserted�
"Privilege
tNeedsRevert��
tPrivilegeAdjusted
 WasEnabled���B�^tagPrivilegeStatus.?AUtagPrivilegeStatus@@���^�^ 
�^
�^�^&�^ElfRevertThreadPrivilege���t��^RevertToSelf���"   �^
�^
#"�^2�^McGenEventUnregister_EtwEventUnregister
#"�^
�^
�B8�^#"�^.�^McGenEventRegister_EtwEventRegister
�^F�_MCGEN_TRACE_CONTEXT.?AU_MCGEN_TRACE_CONTEXT@@��
#RegistrationHandle���
#Logger���
#MatchAnyKeyword��
#MatchAllKeyword��
" Flags
"$IsEnabled
 (Level
 )Reserve��
!*EnableBitsCount��
"0EnableBitMask
8EnableKeyWords���
@EnableLevel��F�^H_MCGEN_TRACE_CONTEXT.?AU_MCGEN_TRACE_CONTEXT@@��Jonecore\admin\wmi\events\manifests\objfre\amd64\EventLogEvents.h����^�^�
�^�^ # �^&�^McGenLevelKeywordEnabled���
�^8"�^"�^2�^McGenEventWrite_EtwEventWriteTransfer��#88""�^
�^�^�^&�^ElfAssertThreadPrivilege���
��^
�^&�^ElfDeregisterEventSource���
TZ
�^�^&_ElfrDeregisterEventSource��
_
_t&^
_�^ElfReconnect���
i!p__""�^	_&
_ElfrRegisterEventSourceA���
_ElfrOpenELA
�q
_
_""�^_&_ElfrRegisterEventSourceW���_ElfrOpenELW8[_
_
>__
_�^ElfCloseEventLog���_ElfrCloseEL�^
�%"_2_McTemplateU0uzr0_EtwEventWriteTransfer�#0��ApiElfOpenEventLogW��ApiElfRegisterEventSourceW���ApiElfOpenBackupEventLogWApiElfOpenEventLogA��ApiElfRegisterEventSourceA���ApiElfOpenBackupEventLogA2t_tagElfApiType.?AW4tagElfApiType@@� _�^ _�^�^t"_#_ElfCreateReconnInfo6�tagReconnInfo.?AUtagReconnInfo@@�
"Signature
 _ApiType��
tIsImpersonating��
�^UNCServerName
�^ ModuleName���
t0IsSecurityLog
t4UseLegacyReportEvent�
8RpcHandle6&_@tagReconnInfo.?AUtagReconnInfo@@'_�^[
%_�^
"*_2+_McTemplateU0usr0_EtwEventWriteTransfer�"#-_
._�#i=0_
1_83_
4_>6_"7_ElfClearEventLogFileA��TZ_9_:_ElfrClearELFA��"7_ElfBackupEventLogFileA�:_ElfrBackupELFA�"""""">_?_ElfReadEventLogA���"TZ""" ""A_B_ElfrReadELA"�BMcGenControlCallbackV2�?_ElfReadEventLogW���B_ElfrReadELW8G_"H_ElfBackupEventLogFileW�TZ
_J_K_ElfrBackupELFW�"H_ElfClearEventLogFileW��K_ElfrClearELFW��"""O_"P_ElfGetLogInformation���TZ" ""R_"S_ElfrGetLogInformation��"U_V_ElfOldestRecordTZ"X_Y_ElfrOldestRecord���[_\_ElfChangeNotifyTZ�"^___ElfrChangeNotify���V_ElfNumberOfRecords�Y_ElfrNumberOfRecords>>*Wc_"d_ElfOpenBackupEventLogA�p_""�^f_g_ElfrOpenBELA���"d_ElfRegisterEventSourceAd_ElfOpenEventLogA���tk_l__stricmp���
>6!!"!"n_!""o_p_ElfReportEventA88*Wr_"s_ElfOpenBackupEventLogW��MIDL_user_allocate�
6
�,
_:
TZv_!!"!"_w_x_ !"
y_z_ElfrReportEventExA�>TZ"!!"!"_w_x_ !""|_}_ElfrReportEventA����MIDL_user_free�
K�_
�_� p"t�_
�_K" �_
�_q
_""�^�_�_ElfrOpenBELW����[WevtInitialize�"s_ElfRegisterEventSourceWs_ElfOpenEventLogW���_wcsicmp���6!!"!"�^!""�_�_ElfReportEventW

_:
TZv_!!"!"
_w_�_ !"
�_�_ElfrReportEventExW�>TZ"!!"!"
_w_�_ !""�_�_ElfrReportEventW���� q"t�_
�_
#
�#h�
�^
�^
�^
%_
���
���
���
����-FC -MT -c -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -Zo -std:c++17 -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973��
�_F�_ -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X�_�_�_�_�_���n��x]0��')�(��v��f
�ԯ�R7�`,�eW[ᕽ��<[R1A8�F�7n6�+o���j�P��W^gC(��4����k�x|�-�4�X�dHJ��A�U��i�Z�/u!
{9Fl�g�qt��"�
�<~#��w>���0<̩0L`��$��V���
hԹ�:OW�ҥ\�պ-�j��{��	?_�Ef�����.��H���,)\	����_�(V�5w���9ȨZp!'7�Q�z��{�#Cu� ��G��72Om��.�)���s�f#���D�X|��S8����H��^+Կ�0�7�6���t�O����~s�O�^^�{+78����Y�����S0w����Q�Z|ìW�yb�E����M_$���B�)�b{��~z_�N
�1��B�)�\�t�`a��_�N
�1݈�B�_��|
�*�w�r�_�N
�1݁n�C�כ�E�]�؅_�N
�1݁n�C�כ
���Zś_�N
�1��Tp�d��Ujˊ�_�N
�1ݔV�d�:I.y�U?u+���<y�Ab����Tp�d�փ9��;�_�N
�1ݧ{���`393�ˀ^�,��r�t�/����nI�DƦ�e}�ҕe�7J
�j��oT����S�	3~��j�ƒbb�iA�OoXr��uBJ_��CȊZ<k:3R%b&����Rю�_�N
�1�k:3R%b&��l(��Ϗ_�N
�1�3$ͮa�ԏrl[f�q
�j����ę�2
�6V-
�j�.b�|>�8թ�l�)
�j� �Eir�J	`��\
�j��!auIheS`�Ue]H���p�DG�i�S�ff�S]�'�e]H���p3Bo,^�!����Ѽ��R
�j�U?u+���4����������$�.�'C6�
�j�D�yx	�X�*!��+�
�j��������a�[�&LFp*�� U?u+���+�*ȅ"l
�
�c߅�U[Y3ep*�� &�H�+}�u����VfbL��"/�,`3OLU?u+���Lc�P��{��Xh��S���Mc/����'H�?=,A�4z��_�+$䈈�2t����x���(ge����iK �`pz�땶�+2��BU�#�mR�G�]�-��*%�(�T��&�'�/�]WH��t��F�N��&���%f���9EYD�h&0�N�q���}ΐ�G���
��s�Kg��w�g��%��T��R��"~-W�ɓ�Ij|��T���EԴ��N����vْ�T��R��9�����?��j�rRh��:�m���wyQ���T��R�*=��
�2�g>��bEׯE��9���wyQ���T��R�V&��˷o�/��GGm)�O��|�|�\_��_�T��R�.V�WF�X�f�F�v�
1��~��|�\_��_�T��R���䲡�#8�.���%f�(,>�|�\_��_�T��R�~�EM�wTb������Z�3�Z0���%��T��R��O��#��B,i#1,[e�Vz|E��N����vْ�T��R�#���"�dOBgJ�ڱy��E-;}k�;���wyQ���T��R���m��CBgJ�ڱy��E-;}k�;���wyQ���T��R���Q~^�?��j�rRh��:�m���wyQ���T��R��um@�g>��bEׯE��9���wyQ���T��R���k0>L�!�y�^ۓ�wcFEH��|�\_��_�T��R�{.^�(.�l;�¨VQe��H�ٶ>�|�\_��_�T��R��l�g�/]~�k��,S{t3R��|�\_��_�T��R�{"�8vW����bm,=��(_��|�\_��_�T��R�3�Y�_Pz`_�JH��Y=��(_����wyQ���T��R���Gv֑oz��d:����(_88����wyQ���T��R������i���d:����(_88����wyQ���T��R�mY��:�r���q�5v�&��.̊+d[q��V[����h�|�\_��_�T��R��nRP��2D#\�~wH��/z�{�-�g�(��j��p��J-WV8oT��n2�aVc���
��g����y�w�D�p�	�Kivу| �w�D�p�	MG*=¢"��J-WV8o\R�'��r�-�g�(�0]Z�9�$��d���b+N��i�:�J-WV8o��V��@�xzgA���I@��F�"�8zw��k)���u�$CHF	�X4��̐���e��ߦǕ�t�� ���/i�[�W��qZVGS9�Ñp/qi�hתƬחM����R!�
�G-^o"�
g�P'�ow��1��k�beڎ���~��|������g$����]���T��Hע��N_�+U��=ۏ�2�9
>���J�j��.���k�w����u�e�Kn_�!���bm���q�\o�r��
H3pY
��9�����-�Ƥf��q>%���`�:�w���-g&�8]�;��Zd�is�_d�̶�Ϳˣ���D}�~   -INCLUDE:__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi @comp.idk��@feat.00�I���.debug$S�e.rdatai�y�e.rdata�[!]eL.rdata	s\Zek� � �� � � � _stricmp � ( 9 L _x� � � � � � _wcsicmp �   $ 8Rk � � � ����&;K Xq�.dataH)q��e�.rdata
e�.�e�.rdatahT)�}e�.rdata~H��e.rdata	?��e	.rdata
JKie*
.rdata��w�eJ.rdataG+�e^.rdata
���@ev
.rdata�'�e�.rdata���e�.rdata���e�.rdata3g�e�.rdata�K�e�.rdata��*�e
.rdata.�M�e.rdata[Q�Me6.rdata���eI.rdata8t�e^.rdata��|des.rdataݤ�|e�.rdata�SV
e�.rdatarX��e�.rdata��u}e�.rdata~=�<e�.rdata����e
.rdata`�m&e".rdata �͡e< .rdata!�dreM!.rdata"���en".rdata#��e�#.rdata$��e�$.rdata%�(u�e�%.rdata&�1��e�&.rdata'���3e'.rdata(s^%e=(.rdata)8
��e\).rdata*���{eq*.rdata+Mj��e�+.rdata,ʹR�e�,.rdata-2˵oeEVENTLOG-���.text$mn.w{�¼e.debug$S/�.e.text$mn0�N��e.debug$S1h(0e.text$x2GA�0e.text$mn3�N��e.debug$S4h(3e.text$x5GA�3e.text$mn6����$e.debug$S7�&6e.text$x8GA�6e.text$mn9��:/e.debug$S: "9e.text$x;GA�9e.text$mn<��:/e.debug$S= "<e.text$x>GA�<e.text$mn?u^�e.debug$S@�&?e.text$xAGA�?e.text$mnB��N��e.debug$SC$,Be.text$mnD<��Ee.debug$SE�De.text$mnFu^�e.debug$SG�&Fe.text$xHGA�Fe.text$mnI5a2�Ae.debug$SJ4Ie.text$mnK8��e.debug$SL�Ke.text$mnM��S[ne.debug$SN�8Me.text$xO���CMe.text$mnP��Z�e.debug$SQ`
Pe.text$mnR&��e.debug$SS0Re.text$mnT�yYTe.debug$SU�Te.text$mnV��tX�e.debug$SW\(Ve.text$xXGA�Ve.text$mnY��tX�e.debug$SZ`(Ye.text$x[GA�Ye.text$mn\�K��e.debug$S]@0\e.text$x^���C\e.text$mn_�ݕ�	e.debug$S`h2_e.text$xa���C_e.text$mnb�
}�=ke.debug$Sc2be.text$xd���Cbe.text$mne'�]ܕe.debug$Sf�6ee.text$xg���Cee.text$mnhCc"�e.debug$SiHBhe.text$xj죍.he.text$mnk8q��e.debug$Sl<@ke.text$xm죍.ke.text$mnn\=Lg�e.debug$So$(ne.text$xp���Cne.text$mnq<��Ee.debug$Sr�
qe.text$mns�"8e.debug$St�4se.text$xu���Cse.text$mnv�
���ve.debug$Swd0ve.text$xx���Cve.text$mnyv�^Te.debug$Sz�
nye.text$x{��1�ye.text$mn|<��Ee.debug$S}�"|e.text$mn~K&w�:e.debug$S��~e.text$x���1�~e.text$mn�>�!L�e.debug$S�(
�e.text$mn�	5o�e.debug$S�@�e.text$mn�<��Ee.debug$S��
�e.text$mn��J�5e.debug$S�d
�e.text$mn�#/�e.debug$S��"�e.text$mn�f~��e.debug$S�4�e.text$mn�%�l�e.debug$S�X�e.text$mn�P���e.debug$S���e.text$mn�)�鼕e.debug$S�p
�e.text$mn�hJ:�e.debug$S���e.text$mn�j�=^�e.debug$S�h�e.text$mn�
�l�\e.debug$S���e.text$mn�C�le.debug$S���e�� � K .� DD \q ry �h �0 �9 �\ �s �b 	| 	~ )	k :	F S	? d	3 {	< �	_ �	v �	e �	M �	6 �	Y 
V 
I 4
n A
P R
� m
T �
R �
B �
� �
� �
. �
� � >� f� �� �� �� �2 �5 8 3; P> mA �H �O �X �[ �^ 
a .
d F
g ^
j v
m �
p �
u �
x �
{ �
�  # 4 I memset $LN44y$LN16{$LN14	{$LN15xy$LN24h$LN15j$LN13	j$LN14�h$LN200$LN112$LN9	2$LN10x0$LN189$LN9;$LN7	;$LN8g9$LN17\$LN14^$LN12	^$LN13~\$LN17s$LN14u$LN12	u$LN13�s$LN19b$LN16d$LN14	d$LN15b$LN71~$LN24�$LN22	�$LN23I~$LN26k$LN15m$LN13	m$LN14�k$LN18F$LN9H$LN7	H$LN8FF$LN18?$LN9A$LN7	A$LN8F?$LN203$LN115$LN9	5$LN10x3$LN18<$LN9>$LN7	>$LN8g<$LN18_$LN14a$LN12	a$LN13}_$LN26v$LN16x$LN14	x$LN15v$LN28e$LN18g$LN16	g$LN17�e$LN22M$LN13O$LN11	O$LN12�M$LN206$LN98$LN7	8$LN8�6$LN19Y$LN10[$LN8	[$LN9uY$LN19V$LN10X$LN8	X$LN9uV$LN7I$LN26n$LN19p$LN17	p$LN18/n$LN21B$LN7�$LN7�$LN8.$LN8�$LN8�$LN6�$LN6�$LN6�$LN27��$��Zyea�.xdata�4���ye��.pdata����[ye��.xdata�[�ye��.pdata�d$+ye���s��he��.xdata�0r�alhe�.pdata�N/�Ahe%�.xdata�;D��he=�.pdata�d$+he]��jLo0e|�.xdata�,jп0e��.pdata�v��M0e��.xdata���k�0e��.pdata�d$+0e��=�c�9e*�.xdata�(,��9eO�.pdata���M�9em�.xdata���k�9e��.pdata�d$+9e����d��\e��.xdata�(�E�\e��.pdata��9\e�.xdata����\e6�.pdata�d$+\e\�����%se��.xdata�(zᕜse��.pdata�Wse��.xdata����se��.pdata�d$+se���?be4�.xdata�4���beT�.pdata�����bem�.xdata����be��.pdata�d$+be�����z�~e��.xdata�0�毶~e��.pdata�����~e��.xdata�[�~e�.pdata�d$+~e1��3��keO�.xdata�0u��keo�.pdata��4,�ke��.xdata�;D��ke��.pdata�d$+ke���M��uFe��.xdata�$��Fe�.pdata���Fe(�.xdata���k�FeH�.pdata�d$+Fep���8�?e��.xdata�$��?e��.pdata���?e��.xdata���k�?e��.pdata�d$+?e��\$Z43e'�.xdata�,jп3eM�.pdata�v��M3el�.xdata���k�3e��.pdata�d$+3e���䛌~<e��.xdata�(,��<e��.pdata���M�<e�.xdata���k�<e5�.pdata�d$+<eZ�����_e~�.xdata�(�Vb_e��.pdata�J>��_e��.xdata����_e��.pdata�d$+_e����!�ve,�.xdata�4��C�veS�.pdata�E�Nves�.xdata����ve��.pdata�d$+ve����sCdee��.xdata�4���ee��.pdata�fz,dee�.xdata����ee0�.pdata�d$+eeP��{̕.Meo�.xdata�,�.&Me��.pdata�SIF2Me��.xdata����Me��.pdata�d$+Me���,[��6e�.xdata�(
&1�6e2�.pdata�SIF26eJ�.xdata���k�6ea�.pdata�d$+6e���5
Ye��.xdata�(�I�Ye��.pdata���ǿYe��.xdata���k�Ye��.pdata�d$+Ye��b�h�Ve)�.xdata�(�I�VeK�.pdata���ǿVef�.xdata���k�Ve��.pdata�d$+Ve��.xdata�k��Ie��.pdata]-�Ie�4��ne.xdata &9_ne$.pdata=�ne9.xdata���neM.pdatad$+nei.xdataO��MBe�.pdata�^[�Be�.gfids$y��
s�e�.xdata	�9��e�	.pdata
���e�
.xdata����e.pdataOAG��e%.xdata
��O�.eE
.pdata����.ef.xdatazӰ�e�.pdatas�+A�e�.xdatazӰ�e�.pdata��e.xdata����e@.pdata2l���ep.xdata�9��e�.pdata�8Ժ�e�.xdata�c��e�.pdata��&U�e$.xdata����eQ.pdataW�(�ep�.debug$S,e.debug$S<e.debug$S@e.debug$S,e.debug$S4	e.debug$S <
e.debug$S!0e.debug$S"4e.debug$S#0
e.debug$S$@e.debug$S%4e.debug$S&8e.debug$S',e.debug$S(4e.debug$S),e.debug$S*4e.debug$S+0e.debug$S,0e.debug$S-0e.debug$S.@e.debug$S/@e.debug$S04e.debug$S1,e.debug$S2,e.debug$S3,e.debug$S40e.debug$S54e.debug$S6, e.debug$S7<!e.debug$S8@"e.debug$S9@#e.debug$S:8$e.debug$S;<%e.debug$S<8&e.debug$S=H'e.debug$S><(e.debug$S?0)e.debug$S@4*e.debug$SA4+e.debug$SB(,e.debug$SC$-e.debug$TD�e.chks64E0
e�.gehcont$y??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy@??_C@_0M@NJALGCHB@Application@??_C@_08EDKKPLCC@Security@ElfrReportEventAElfrReportEventExA__imp_GetComputerNameExAElfrReadELAElfrBackupELFAElfrClearELFAElfrOpenBELAMIDL_user_free__imp_RtlTimeToSecondsSince1970ElfrReportEventWElfrReportEventExWMIDL_user_allocate__imp_GetComputerNameExW__imp_NtQuerySystemTimeElfrReadELWElfrDeregisterEventSourceElfrCloseELElfrBackupELFWElfrClearELFWElfrOpenBELWElfrGetLogInformationElfrChangeNotifyElfrOldestRecordElfrNumberOfRecords__imp_I_RpcMapWin32Status__imp_RpcExceptionFilterElfrRegisterEventSourceAElfrOpenELAElfrRegisterEventSourceWElfrOpenELW__imp_RtlInitAnsiString__imp_RtlInitUnicodeString__imp_HeapFree__imp_RtlCopyString__imp_RtlCopyUnicodeString__imp_GetProcessHeap__imp_HeapAllocRevertToSelf__imp_RtlAdjustPrivilege__imp_RtlImpersonateSelfMicrosoft_Windows_EventlogEnableBitsEVENTLOG_ContextMicrosoft_Windows_EventlogLevelsMicrosoft_Windows_EventlogKeywordsEVENT_LOG_FULLEVENT_AUDIT_PROCESSINGEVENT_AUDIT_PUBLISHER_META_DATAEVENT_AUDIT_FAILUREEVENT_AUDIT_AUTO_BACKUPEVENT_AUDIT_LOG_FULLEVENT_AUDIT_LOG_EXCEEDS_WARNING_LEVELEVENT_AUDIT_LOG_CLEAREDEVENT_AUDIT_EVENTS_DROPPEDEVENT_SHUTDOWNEVENT_REPORTEVENT_ANSIEVENT_REPORTEVENTEVENT_REGISTEREVENTSOURCEEVENT_OPENEVENTLOGEVENT_PULLSUB_CREATEEVENT_PUSHSUB_CREATEEVENT_ENABLE_CHANNEL_PROGRAMMATICALLYEVENT_PUBLISHER_TLG_INVALID_META_DATAEVENT_ABNORMAL_SHUTDOWNLOG_DROPPED_CHUNKEVENT_AUTO_BACKUPEVENT_LOG_CLEAREDEVENT_EVENTS_DROPPEDEVENT_PUBLISHER_META_DATAEVENT_PROCESSINGCHANNEL_POLICY_APPLICATION_ERRORPRIMARY_CHANNEL_CONFIGURATION_WARNINGINIT_CHANNEL_PUBLISHER_ENABLE_FAILUREPRIMARY_CHANNEL_FATAL_ERRORINIT_CHANNEL_LOGFILTER_WARNINGINIT_CHANNEL_LOGFILE_WARNINGINIT_CHANNEL_MOVED_UNSUPPORTED_VERSION_LOGINIT_CHANNEL_MOVED_CORRUPT_LOGINIT_CHANNEL_LOGGINGINIT_CHANNEL_PUBLISHINGINIT_CHANNEL_CONFIG_ERRORINIT_CHANNEL__imp_EtwEventUnregister__imp_EtwEventRegister__imp_EtwEventWriteTransferEventDataDescCreateNtCurrentTebElfFlushEventLogElfWriteClusterEventsElfDeregisterClusterSvcElfRegisterClusterSvcElfReportEventAElfReadEventLogAElfBackupEventLogFileAElfClearEventLogFileAElfOpenBackupEventLogAElfRegisterEventSourceAElfOpenEventLogAElfReportEventAndSourceWElfReportEventWElfReadEventLogWElfDeregisterEventSourceElfCloseEventLogElfBackupEventLogFileWElfClearEventLogFileWElfOpenBackupEventLogWElfRegisterEventSourceWElfOpenEventLogWElfGetLogInformationElfChangeNotifyElfOldestRecordElfNumberOfRecordsElfDestroyReconnectionInfoElfReconnectElfGetModuleNameElfSetUseLegacyReportEventElfGetUseLegacyReportEventElfGetTheRpcHandleElfCreateReconnInfoWevtInitializeElfRevertThreadPrivilegeElfAssertThreadPrivilegeMcTemplateU0uzr0_EtwEventWriteTransferMcTemplateU0usr0_EtwEventWriteTransferMcGenEventUnregister_EtwEventUnregisterMcGenEventRegister_EtwEventRegisterMcGenEventWrite_EtwEventWriteTransferMcGenControlCallbackV2McGenLevelKeywordEnabledElfBackupEventLogFileA$filt$0ElfBackupEventLogFileW$filt$0ElfChangeNotify$filt$0ElfClearEventLogFileA$filt$0ElfClearEventLogFileW$filt$0ElfCloseEventLog$filt$0ElfDeregisterEventSource$filt$0ElfGetLogInformation$filt$0ElfNumberOfRecords$filt$0ElfOldestRecord$filt$0ElfOpenBackupEventLogA$filt$0ElfOpenBackupEventLogW$filt$0ElfOpenEventLogA$filt$0ElfOpenEventLogW$filt$0ElfReadEventLogA$filt$0ElfReadEventLogW$filt$0ElfReconnect$filt$0ElfRegisterEventSourceA$filt$0ElfRegisterEventSourceW$filt$0ElfReportEventA$filt$0ElfReportEventW$filt$0__C_specific_handler__GSHandlerCheck__GSHandlerCheck_SEH__security_check_cookie__guard_ehcont_ElfReportEventA$unwind$ElfReportEventA$pdata$ElfReportEventA$unwind$ElfReportEventA$filt$0$pdata$ElfReportEventA$filt$0__guard_ehcont_ElfReadEventLogA$unwind$ElfReadEventLogA$pdata$ElfReadEventLogA$unwind$ElfReadEventLogA$filt$0$pdata$ElfReadEventLogA$filt$0__guard_ehcont_ElfBackupEventLogFileA$unwind$ElfBackupEventLogFileA$pdata$ElfBackupEventLogFileA$unwind$ElfBackupEventLogFileA$filt$0$pdata$ElfBackupEventLogFileA$filt$0__guard_ehcont_ElfClearEventLogFileA$unwind$ElfClearEventLogFileA$pdata$ElfClearEventLogFileA$unwind$ElfClearEventLogFileA$filt$0$pdata$ElfClearEventLogFileA$filt$0__guard_ehcont_ElfOpenBackupEventLogA$unwind$ElfOpenBackupEventLogA$pdata$ElfOpenBackupEventLogA$unwind$ElfOpenBackupEventLogA$filt$0$pdata$ElfOpenBackupEventLogA$filt$0__guard_ehcont_ElfRegisterEventSourceA$unwind$ElfRegisterEventSourceA$pdata$ElfRegisterEventSourceA$unwind$ElfRegisterEventSourceA$filt$0$pdata$ElfRegisterEventSourceA$filt$0__guard_ehcont_ElfOpenEventLogA$unwind$ElfOpenEventLogA$pdata$ElfOpenEventLogA$unwind$ElfOpenEventLogA$filt$0$pdata$ElfOpenEventLogA$filt$0__guard_ehcont_ElfReportEventW$unwind$ElfReportEventW$pdata$ElfReportEventW$unwind$ElfReportEventW$filt$0$pdata$ElfReportEventW$filt$0__guard_ehcont_ElfReadEventLogW$unwind$ElfReadEventLogW$pdata$ElfReadEventLogW$unwind$ElfReadEventLogW$filt$0$pdata$ElfReadEventLogW$filt$0__guard_ehcont_ElfDeregisterEventSource$unwind$ElfDeregisterEventSource$pdata$ElfDeregisterEventSource$unwind$ElfDeregisterEventSource$filt$0$pdata$ElfDeregisterEventSource$filt$0__guard_ehcont_ElfCloseEventLog$unwind$ElfCloseEventLog$pdata$ElfCloseEventLog$unwind$ElfCloseEventLog$filt$0$pdata$ElfCloseEventLog$filt$0__guard_ehcont_ElfBackupEventLogFileW$unwind$ElfBackupEventLogFileW$pdata$ElfBackupEventLogFileW$unwind$ElfBackupEventLogFileW$filt$0$pdata$ElfBackupEventLogFileW$filt$0__guard_ehcont_ElfClearEventLogFileW$unwind$ElfClearEventLogFileW$pdata$ElfClearEventLogFileW$unwind$ElfClearEventLogFileW$filt$0$pdata$ElfClearEventLogFileW$filt$0__guard_ehcont_ElfOpenBackupEventLogW$unwind$ElfOpenBackupEventLogW$pdata$ElfOpenBackupEventLogW$unwind$ElfOpenBackupEventLogW$filt$0$pdata$ElfOpenBackupEventLogW$filt$0__guard_ehcont_ElfRegisterEventSourceW$unwind$ElfRegisterEventSourceW$pdata$ElfRegisterEventSourceW$unwind$ElfRegisterEventSourceW$filt$0$pdata$ElfRegisterEventSourceW$filt$0__guard_ehcont_ElfOpenEventLogW$unwind$ElfOpenEventLogW$pdata$ElfOpenEventLogW$unwind$ElfOpenEventLogW$filt$0$pdata$ElfOpenEventLogW$filt$0__guard_ehcont_ElfGetLogInformation$unwind$ElfGetLogInformation$pdata$ElfGetLogInformation$unwind$ElfGetLogInformation$filt$0$pdata$ElfGetLogInformation$filt$0__guard_ehcont_ElfChangeNotify$unwind$ElfChangeNotify$pdata$ElfChangeNotify$unwind$ElfChangeNotify$filt$0$pdata$ElfChangeNotify$filt$0__guard_ehcont_ElfOldestRecord$unwind$ElfOldestRecord$pdata$ElfOldestRecord$unwind$ElfOldestRecord$filt$0$pdata$ElfOldestRecord$filt$0__guard_ehcont_ElfNumberOfRecords$unwind$ElfNumberOfRecords$pdata$ElfNumberOfRecords$unwind$ElfNumberOfRecords$filt$0$pdata$ElfNumberOfRecords$filt$0$unwind$ElfDestroyReconnectionInfo$pdata$ElfDestroyReconnectionInfo__guard_ehcont_ElfReconnect$unwind$ElfReconnect$pdata$ElfReconnect$unwind$ElfReconnect$filt$0$pdata$ElfReconnect$filt$0$unwind$ElfCreateReconnInfo$pdata$ElfCreateReconnInfo__guard_fids_WevtInitialize$unwind$WevtInitialize$pdata$WevtInitialize$unwind$ElfRevertThreadPrivilege$pdata$ElfRevertThreadPrivilege$unwind$ElfAssertThreadPrivilege$pdata$ElfAssertThreadPrivilege$unwind$McTemplateU0uzr0_EtwEventWriteTransfer$pdata$McTemplateU0uzr0_EtwEventWriteTransfer$unwind$McTemplateU0usr0_EtwEventWriteTransfer$pdata$McTemplateU0usr0_EtwEventWriteTransfer$unwind$McGenEventUnregister_EtwEventUnregister$pdata$McGenEventUnregister_EtwEventUnregister$unwind$McGenEventRegister_EtwEventRegister$pdata$McGenEventRegister_EtwEventRegister$unwind$McGenEventWrite_EtwEventWriteTransfer$pdata$McGenEventWrite_EtwEventWriteTransfer$unwind$McGenControlCallbackV2$pdata$McGenControlCallbackV2__security_cookie
/152            1606894316              100666  57375     `
d�h�B�_Q�R.debug$SPT@B.text$mnq� 0`.debug$S [{"@B.text$mn��h 0`.debug$S8��(@B.text$mnl� 0`.debug$S<��@B.text$mn�f#! 0`.debug$S`K!�'F@B.text$mnqg*�* 0`.debug$S+:."@B.text$mn��/+0 0`.debug$Sg03"@B.text$mn0�45 0`.debug$S�!5�6@B.text$mn0�7�7 0`.debug$S��7�9@B.text$mn5�:�: 0`.debug$S��:�=@B.text$mn0^>�> 0`.debug$S(�>�@@B.text$mn0�A�A 0`.debug$S �A
D@B.text$mnC�D 0`.debug$S�E�F
@B.text$mnG�F 0`.debug$S�DG�H
@B.text$mn+4I_I 0`.debug$S�}IQK@B.text$mn��K�L 0`.debug$ST5M�Q0@B.text$mn�iST 0`.debug$StcT�W @B.text$mnjY�Y 0`.debug$S4�Y�\ @B.text$mn\'^�^ 0`.debug$S4�^�a @B.text$mn�)c�c 0`.debug$S��c�g$@B.text$mn{i�i 0`.debug$S��i�m&@B.text$mn\ouo 0`.debug$S<�o�r @B.text$mn\#tt 0`.debug$S<�t�w @B.text$mn�-y
{ 0`.debug$S�Z{�B@B.text$mn�z�b� 0`.debug$S���>�@@B.text$mn^�� 0`.debug$S����@B.text$mn���K� 0`.debug$S���e�$@B/4͘@0@.xdata,ј��@0@.pdata%�1�@0@.xdataO�@0@.pdatac�o�@0@.xdata��@0@.pdata����@0@.xdataÙ@0@.pdata˙י@0@.xdata��@0@.pdata�
�@0@.xdata+�@0@.pdata3�?�@0@.xdata]�@0@.pdatae�q�@0@/4��@0@.xdata,����@0@.pdata��@0@.xdata�@0@.pdata!�-�@0@.xdataK�@0@.pdatag�s�@0@.xdata��@0@.pdata����@0@.xdata˛@0@.pdataכ�@0@.xdata�@0@.pdata	��@0@.xdata3�@0@.pdata;�G�@0@.xdatae�@0@.pdataq�}�@0@.xdata��@0@.pdata����@0@.xdataќ@0@.pdataٜ�@0@.xdata�@0@.pdata��@0@.xdata5�@0@.pdata=�I�@0@.xdatag�@0@.pdatao�{�@0@.xdata��@0@.pdata����@0@.xdata˝@0@.pdataӝߝ@0@.xdata��@0@.pdata��@0@.debug$T4
/�@B.chks64@c�
.drectven�
��Sd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\eventapi.obj:<��kk
Microsoft (R) Optimizing Compiler��:s ����o�}�+4qt*Y lռ��́dq�X� ��*�HRI	�̏!�&�e�b	��E2b�^�� �;�,�9Y���dnB_ l��fp������L�5��^85��onecore\admin\wmi\events\advapi\objfre\amd64\pch_hdr.srconecore\admin\wmi\events\advapi\objfre\amd64\precomp.pchonecore\admin\wmi\events\advapi\precomp.honecore\admin\wmi\events\advapi\eventapi.conecore\external\shared\inc\intsafe.h�L-_@SH��@H��H��t6H�L$0�A�H�T$0H�L$ ���y����3��'H�L$ �H�T$(H���H�L$ ����H��@[�
(	4!< KX�e��5Gqk_�BackupEventLogA>hEventLogAI	ZAJ	AIk>qBackupFileNameAKO+>@AnsiStringD0>tReturnValueAcAk>:UnicodeStringD >StatusA,AO
M�^0>"dwErrorCodeA8N
Z�^@B!
h�^POhEventLogXqOBackupFileName0@OAnsiString :OUnicodeString9�^9&_92�^9:�!9I�^9c_O�xq8lR�	]�^�_�,a�0b�@c�Dg�Oj�\k�il�kn�,�0�
_�c�
o�s�
���
����
����
���
@�D�
P�T�
����
=�A�
M�Q�
]�a�
m�q�
}���
����
����
H�\$WH��03�H��H��H��tjE3�H�T$ E3�H������tOH�T$ H�����y��������f9|$"teH�%`3�L�D$(H�I0����
�W�3�H�\$@H��0_�';G!O y� ��5G�
��^�BackupEventLogW>hEventLogAI|CJ%AJAI�>�BackupFileNameAHAKAH�>tReturnValueA.AU,A�A�>:UnicodeD >StatusA?A\#M�^C>"dwErrorCodeAKN
Z�^0B!
h�^@OhEventLogH�OBackupFileName :OUnicode9%�^9E�^9M�!9w�^9��!O���8�(�
2�3�.7�2<�?>�C?�S@�UA�WB�\E�cF�}H��8��9��J�,�0�
_�c�
w�{�
����
����
����
����
����
�
�
��
*�.�
e�i�
y�}�
����
G�K�
W�[�
g�k�
w�{�
����
����
@SH�� ��ȋ���H�� [�! ��8G�^�BaseSetLastNTError>StatusA>"dwErrorCodeAA
 J!0OStatus9�^9�!O�@842�5�6�7�8�,�0�
_�c�
����
����
����
����
���
H�\$H�l$H�t$ WATAUAVAWH��03�A��E��D��H��D��H�1H�D$ D;��\E���S��8�J�H�<H;��;H�C8H�D$`9O��)A�H�L$`E��H������A�H�L$`E��H�������D�C(L�d$`E��tHE;���D9s,���K,H�J�I;���H;���H;���H�������f9kvHD9s$��E��t�C$u|�C$H�I;�rqH�D$`E3�H�L$`E��H�����xZ�C��;�r�3�K0��t#A;�w=D9s4w7�C4H�H�I;�r)H;�w$H;�s+3A��H�߅�t
H�D$ ���E��t3�����H�\$hH�l$pH�t$xH��0A_A^A]A\_Ä�����>���9G��_�CheckEventLogBuffer>lpBufferAJHAJHuH>"nBytesBufferSizeA'An'�>"nBytesReadAhHAhHu8>tisUnicodeAi$Am$�> pbTestB`Hu> pOptionalDataAT��ATHso�> pbTooFarAMWDAMHtD> pStartOfSidAJ�'AJ�"> pDataStartAHjAH|$> pStringAH%
AH/qY> pPastEndOfBufferAH1a3)AH�B 6�>tNumRecordsReadAo-�> pPastEndOfDataAJmAJHu)> pPastEndOfSidAH�#AH�>ucntALA/{T>tNumUncheckedBytesA!�>StatusA��Q#� ARk;G>_pEventRecordAI*{Z�^�^�^�^0B!`OlpBufferh"OnBytesBufferSizep"OnBytesReadxtOisUnicode` OpbTestO���8.|����-��6��?��H��Q��W��`��i��r���������������������������������������
��	�%
�*�/�B�F
�R�Y�d�j�m �r"�w$�|(�~*�����-��0��.��2�,�0�
b�f�
r�v�
����
����
����
����
��
�"�
?�C�
g�k�
w�{�
����
����
����
����

��
�!�
G�K�
W�[�
����
����
����
����
���
��
8�<�
H�L�
f�j�
v�z�
����
����
����
��
����
@SH��@H��H��t6H�L$0�A�H�T$0H�L$ ���y����3��'H�L$ �H�T$(H���H�L$ ����H��@[�
(	4!< KX�e��4Gqk_�ClearEventLogA>hEventLogAI	ZAJ	AIk>qBackupFileNameAKO+>@AnsiStringD0>tReturnValueAcAk>:UnicodeStringD >StatusA,AO
M�^0>"dwErrorCodeA8N
Z�^@B!
h�^POhEventLogXqOBackupFileName0@OAnsiString :OUnicodeString9�^9&_92�^9:�!9I�^9c_O�xq8l�	!�"�#�,%�0&�@'�D+�O.�\/�i0�k1�,�0�
^�b�
n�r�
~���
����
����
���
?�C�
O�S�
����
<�@�
L�P�
\�`�
l�p�
|���
����
����
H�\$WH��03�H��H��H��t%E3�H�T$ E3�H����u�OW�3��V�|$ H�|$(H�T$ H�����y��������f9|$"teH�%`3�L�D$(H�I0���H�\$@H��0_�'4 NZ!b ��Z4G�
��^�ClearEventLogW>hEventLogAI]VAJAI�>�BackupFileNameAHCAK>tReturnValueAh*A�>:UnicodeD >StatusARAo#M�^V>"dwErrorCodeA^N
Z�^0B!
h�^@OhEventLogH�OBackupFileName :OUnicode9%�^92�!9X�^9`�!9��^O���8���
����+��/��8��<��@��E��R��V��f��h��j��o�v�����,�0�
^�b�
r�v�
����
����
����
����
����
4�8�
H�L�
����
��
&�*�
6�:�
F�J�
V�Z�
p�t�
@SH�� �3ۅ�y��������H�� [�! �g3G0*_�CloseEventLog>hEventLogAJ>tReturnValueA
">StatusA
A(M�^>"dwErrorCodeAN
Z_ B!
h�^0OhEventLog9�^9�!O�X08L��������!��#��(��*��,�0�
]�a�
����
����
����
����
S�W�
c�g�
|���
@SH�� �3ۅ�y��������H�� [�! �o;G0*_�DeregisterEventSource>hEventLogAJ>tReturnValueA
">StatusA
A(M�^>"dwErrorCodeAN
Z
_ B!
h�^0OhEventLog9�^9�!O�X08L��
��!�#�(�*�,�0�
e�i�
����
����
����
���
[�_�
k�o�
����
H��8H�D$`H�D$ ���y����3���H��8�!# �D<G50�^�GetEventLogInformation>hEventLogAJ>"dwInfoLevelA>lpBufferAP>"cbBufSizeAi>"pcbBytesNeededEO(D`>ntStatusAM�^>"dwErrorCodeAN
Z�^8B!
h�^@OhEventLogH"OdwInfoLevelPOlpBufferX"OcbBufSize`"OpcbBytesNeeded9�^9!�!O�P58D��������'��+��0��,�0�
f�j�
����
����
����
��
+�/�
l�p�
0�4�
@�D�
X�\�
@SH�� �3ۅ�y��������H�� [�! ��@G0*_�GetNumberOfEventLogRecords>hEventLogAJ>"NumberOfRecordsAK>tReturnValueA
">StatusA
A(M�^>"dwErrorCodeAN
Z_ B!
h�^0OhEventLog8"ONumberOfRecords9�^9�!O�X08LQ�U�W�X�!Z�#[�(]�*_�,�0�
j�n�
����
����
����
����
,�0�
����
����
����
@SH�� �3ۅ�y��������H�� [�! ��=G0*�^�GetOldestEventLogRecord>hEventLogAJ>"OldestRecordAK>tReturnValueA
">StatusA
A(M�^>"dwErrorCodeAN
Z_ B!
h�^0OhEventLog8"OOldestRecord9�^9�!O�X08L�������!��#��(��*��,�0�
g�k�
����
����
����
����
&�*�
����
����
����
3�H�Qf�D��D�HH��t"8tA��I�E;�sE�8u�E;�sC�fD�f�AA����4GCB�^�InitAnsiString>>DestinationStringAJC>�^SourceStringAKC>"LengthAh7B!>ODestinationString�^OSourceStringO�hC8
\\�]�_�`�j�'k�.n�3s�7{�B|�,�0�
f�j�
����
����
� �
3�H�Qf�D��H��t(D�Hf9tA���I�E;�sE�f9u�E;�sC�fD�f�A���7GGF�^�InitUnicodeString>8DestinationStringAJG>[SourceStringAKG>"ByteLengthAh;B!8ODestinationString[OSourceStringO�hG8
\����������(��0��5��9��F��,�0�
i�m�
����
����
$�(�
H��(���y����3���H��(�! �n:G+&_�NotifyChangeEventLog>hEventLogAJ	>hEventAK	>StatusA	M�^
>"dwErrorCodeAN
Z_(B!
h�^0OhEventLog8OhEvent9�^9�!O�P+8D)�,�	.�
/�0�!2�&4�,�0�
d�h�
����
����
����
Z�^�
j�n�
����
H�\$UH��H��PH��H��t6H��H�M�A�H�U�H�M���y ����3��v3�H�M�H��t2H��H�M�A�H�U�H�M��؅�yH�M����3�H�M�H�U�H�M��H�M�H��H�M�H��H�\$`H��P]�
/	;!C Se
v	�������~9G�
�_�OpenBackupEventLogA>qUNCServerNameAJQ/>qFileNameAI�)lAKAI9�Ou>@AnsiStringD0>:UnicodeServerNameD >ReturnHandleAI�AI�>:UnicodeFileNameD@>StatusA3A|A9a0%A9�OuM�^7>"dwErrorCodeA?NM�^��N
Z�^PB!
h�^`qOUNCServerNamehqOFileName0@OAnsiString :OUnicodeServerName@:OUnicodeFileName9�^9-_99�^9A�!9Q�^9c�^9t_9�_9��^9�_9�_O���8����"�3�7�97�K�W#�\$�i%�|'��(��)��*��.��1��3��4��5��7�,�0�
g�k�
����
����
����
&�*�
6�:�
y�}�
����
����
����
����
����
����
����

��
��
*�.�
:�>�
J�N�
Z�^�
j�n�
z�~�
����
H�\$WH��@H��3�H��H�|$XH�L$0�3�H�L$ �H��tE3�H�T$ E3�H����u�3��L�D$XH�T$ H�L$0���y����H���H�\$Xf9|$"teH�%`3�L�D$(H�I0�H��H�\$PH��@_�+Dco!w ���9G�
��^�OpenBackupEventLogW>�UNCServerNameAJ>�FileNameAI
xqAK
>LogHandleBX�>:UnicodeD0>ReturnHandleAI~0>:UnicodeFileNameD >StatusAQ4"
A�$M�^k>"dwErrorCodeAsN
Z�^@B!
h�^P�OUNCServerNameX�OFileNameXOLogHandle0:OUnicode :OUnicodeFileName9�^9)�^9B�^9m�^9u�!9��^O���8���
����"��/��4��L��Q��S��g�k�{�~������
�����,�0�
g�k�
����
����
����
��
J�N�
b�f�
����
d�h�
t�x�
����
����
����
����
����
H�\$WH��@H��3�H�L$ H�|$`�H��H�L$0�L�D$`H�T$ H�L$0���y�����H�|$`H�\$PH��H��@_�
)
=I!Q ��3Gj
\�^�OpenEventLogA>qUNCServerNameAI
TAJ
>qModuleNameAK>@AnsiStringD0>@AnsiModuleNameD >LogHandleB`Q>ReturnHandleAM\
CHCW>StatusAA
A\M�^E>"dwErrorCodeAMN
Z�^@B!
h�^PqOUNCServerNameXqOModuleName0@OAnsiString @OAnsiModuleName`OLogHandle9�^9'�^9G�^9O�!O�hj8
\��
������-��A��E��U��W��\��,�0�
a�e�
q�u�
����
����
�#�
3�7�
G�K�
h�l�
|���
����
����
����
����
����
����
@SH��@H��H�L$ �H��H�L$0�L�D$`H�T$ H�L$0�3ۅ�y�����H�\$`H��H��@[�2@!H ��3G\V�^�OpenEventLogW>�UNCServerNameAI	/AJ	>�ModuleNameAK>LogHandleB`H>:UnicodeD0>ReturnHandleAISC8CN
>:UnicodeModuleNameD >StatusA6
ASM�^<>"dwErrorCodeADN
Z�^@B!
h�^P�OUNCServerNameX�OModuleName`OLogHandle0:OUnicode :OUnicodeModuleName9�^9�^9>�^9F�!O�h\8
\l�	t�u�"w�6}�<~�L��N��S��V��,�0�
a�e�
q�u�
����
����
����
��
#�'�
h�l�
|���
����
����
����
����
����
����
L��I�[I�kI�sWH��@H��$�I��H�|$x�l$pI�C�I�{�l$ �3ۅ�x9vD�E3ɋ�H�����x������H�l$X��H�\$PH�t$`H��@_�5O�b!j �g3G�u!_�ReadEventLogA>hEventLogAJ9>"dwReadFlagsA9>"dwRecordOffsetAh9>lpBufferAL`AQ>"nNumberOfBytesToReadA(KEO(Dp>"pnBytesReadAM$`EO0Dx!>"pnMinNumberOfBytesNeededEO8D�>tReturnValueA;?>StatusA9-AnM�^^>"dwErrorCodeAfNZ%__@B!
h�^POhEventLogX"OdwReadFlags`"OdwRecordOffsethOlpBuffer!p"OnNumberOfBytesToReadx"OpnBytesRead%�"OpnMinNumberOfBytesNeeded9`�^9h�!O�X�8LX�]�9i�Ck�Sn�Wr�^o�nv�,�0�
]�a�
����
����
����
����
��
"�&�
P�T�
d�h�
����
����
����
��
?�C�
S�W�
c�g�
|���
L��I�[I�sWH��@H��$�I��H�\$x�t$pI�C�I�[�t$ ���xD��E��t
D�ˋ�H�����y����3�H�t$X��H�\$PH��@_�1
O�[!c �{3G{p _�ReadEventLogW>hEventLogAJ5>"dwReadFlagsA5>"dwRecordOffsetAh5>lpBufferAM_AQ>"nNumberOfBytesToReadA$JEO(Dp>"pnBytesReadAI !EO0Dx!>"pnMinNumberOfBytesNeededEO8D�>tReturnValueAA4AW>StatusA5*AiM�^W>"dwErrorCodeA_NZ$__@B!
h�^POhEventLogX"OdwReadFlags`"OdwRecordOffsethOlpBuffer!p"OnNumberOfBytesToReadx"OpnBytesRead%�"OpnMinNumberOfBytesNeeded9Y�^9a�!O�X{8LO�T�5_�Fa�Sd�We�gf�il�,�0�
]�a�
����
����
����
����
��
"�&�
P�T�
d�h�
����
����
����
�
�
��
S�W�
g�k�
w�{�
����
@SH��@H��H�L$ �H��H�L$0�L�D$`H�T$ H�L$0�3ۅ�y�����H�\$`H��H��@[�

2@!H ��:G\V�^�RegisterEventSourceA>qUNCServerNameAI	/AJ	>qModuleNameAK>@AnsiStringD0>@AnsiModuleNameD >LogHandleB`H>ReturnHandleAISC8CN
>StatusA6
ASM�^<>"dwErrorCodeADN
Z�^@B!
h�^PqOUNCServerNameXqOModuleName0@OAnsiString @OAnsiModuleName`OLogHandle9�^9�^9>�^9F�!O�h\8
\��	����"��6��<��L��N��S��V��,�0�
h�l�
x�|�
����
���
&�*�
:�>�
N�R�
o�s�
����
����
����
����
����
����
����
@SH��@H��H�L$ �H��H�L$0�L�D$`H�T$ H�L$0�3ۅ�y�����H�\$`H��H��@[�2@!H ��:G\V�^�RegisterEventSourceW>�UNCServerNameAI	/AJ	>�ModuleNameAK>LogHandleB`H>:UnicodeD0>ReturnHandleAISC8CN
>:UnicodeModuleNameD >StatusA6
ASM�^<>"dwErrorCodeADN
Z�^@B!
h�^P�OUNCServerNameX�OModuleName`OLogHandle0:OUnicode :OUnicodeModuleName9�^9�^9>�^9F�!O�h\8
\��	����"��6��<��L��N��S��V��,�0�
h�l�
x�|�
����
����
��
��
*�.�
o�s�
����
����
����
����
����
����
����
H��D�H fD�@f�PH�HSVWATAUAVAWH��pA��E��D��L��3ۉX��X���$�D��I��eH�%`3�H�I0�L��H�D$hH���?9|$`sReH�%`3�D�BH�I0�H�ȋD$`I��H��t#H��$�H�����u�D$`�D$d
���D$`��8�D$d
�3���$���$�D��$�D��$�L��$�L�t$h9\$duUH�\$XH�\$Pf�\$HH��$�H�D$@L�t$8��$��D$0f�|$(H��$�H�D$ D��E��A��I����D$d�D$`��t,I����L�M��teH�%`3�H�I0�H��H��u�eH�%`M��3�H�I0��L$d�����y�������H��pA_A^A]A\_^[�Y���S���!� �e2G�#��^�ReportEventA>hEventLogAJ1AU1��3D�>!wTypeA.Al.��+D�>!wCategoryA`*Ao*��"D�>"dwEventIDA&��BEAi&A�LD�>lpUserSidAH?EO(D�>!wNumStringsAAq�%GA�KEO0D�>"dwDataSizeA.EO8D�>�^lpStringsEO@D�>lpRawDataAHEOHD�>tReturnValueA�>�^pAStringsAV`Dh>"AllocatedStringsA���D`>StatusA�2
DdM�^��>"dwErrorCodeA�NZ�^�^p@B!
h�^$LN20�OhEventLog�!OwType�!OwCategory�"OdwEventID�OlpUserSid�!OwNumStrings�"OdwDataSize��^OlpStrings�OlpRawDatah�^OpAStrings`"OAllocatedStringsdOStatus9W�^9��^9�^9��^9��^9��!O��8��1��6��9��e��n��t���������������������������������[��h��p��������������������������������,�0�
\�`�
l�p�
����
����
����
����
��
0�4�
@�D�
p�t�
����
����
����
����
��
#�'�
S�W�
���
����
����
����
��
E�I�
����
����
��
!�%�
1�5�
A�E�
Q�U�
a�e�
|���
H��D�H fD�@f�PH�HSVWATAUAVAWH��pA��E��D��L��3ۉX��X���$�D��I��eH�%`3�H�I0�L��H�D$hH���J9|$`s]eH�%`3�D�BH�I0��L$`I��H��u���L$d�,H��$�H��H�����u�D$`�D$d
���D$`��8�D$d
�3���$���$�D��$�D��$�L��$�L�t$h9\$duUH�\$XH�\$Pf�\$HH��$�H�D$@L�t$8��$��D$0f�|$(H��$�H�D$ D��E��A��I����D$d9\$`v.I���t$`L�M��teH�%`3�H�I0�H��H��u�eH�%`M��3�H�I0��L$d�����y�������H��pA_A^A]A\_^[�Y���^���!� �U2G�#��^�ReportEventW>hEventLogAJ1AU1��3D�>!wTypeA.Al.��+D�>!wCategoryA`*Ao*��"D�>"dwEventIDA&��MEAi&A�LD�>lpUserSidAHJEO(D�>!wNumStringsAA|�.IA�KEO0D�>"dwDataSizeA9EO8D�>�^lpStringsEO@D�>lpRawDataAH(EOHD�>tReturnValueA�>�^pUStringsAV`Dh>"AllocatedStringsD`>StatusA�I(
DdM�^��>"dwErrorCodeA�NZ�^�^p@B!
h�^$LN20�OhEventLog�!OwType�!OwCategory�"OdwEventID�OlpUserSid�!OwNumStrings�"OdwDataSize��^OlpStrings�OlpRawDatah�^OpUStrings`"OAllocatedStringsdOStatus9W�^9��^9��^9��^9��^9��!O� �8!��1��6��9��e��n��t���������������������������������������f��s��{��������������������������������,�0�
\�`�
l�p�
����
����
����
����
��
0�4�
@�D�
p�t�
����
����
����
����
��
#�'�
S�W�
���
����
����
����
1�5�
����
����
��
��
!�%�
1�5�
A�E�
Q�U�
l�p�
H�E3�E��H;�sJH��tEE��tfD9tA��H��H;�r�H���D8tA��H��H;�r�H��H;�sE��uE��uH�3�ø�����1G^]�^�StringCheck>�^ppbTestAJ^> pbTooFarAK^>tisUnicodeAh^>tnoEmptyAllowedAi^>qpuTestAH%AHE
?> pTestAH@AHE
?>tlenAj	UB!�^OppbTest OpbTooFartOisUnicode tOnoEmptyAllowedO��^8�o�s�	u�w�{�|�*~�.��0��5��@��C��R��U��W��Xv�]��,�0�
Y�]�
|���
����
����
����
���
*�.�
>�B�
h�l�
���
H�\$H�t$WH�� H�AH��H;���A��Dw}�D;�vA��H�H;�sh��tTA��D��3�H��H��H��u���BL��H��H���H�����L��3�H�����؅�t3�����H�\$0H�t$8H�� _�DRo�w���-F���^�TestSid> pbStartOfSidAI�gAJAI�
> pbTooFarAK�HKAK�>"sidLengthAh�HKAh�
>�^pSidAMY:AM�>tvalidA}%A�
Z�^�^ B!0 OpbStartOfSid8 OpbTooFar@"OsidLength9B�^9P�^^P9}�^9��^O���8�+�2�%5�/6�2:�:=�??�Y@�^B�eD�sE�}F��G��K��N��O��3��R�,�0�
Z�^�
n�r�
~���
����
����
����
����
��
� �
<�@�
P�T�
����
����
����
��
��
,�0�
�	##�����p`0n���� �(�����dT4
rp����

4
�P����r0\���

4

rpj���r0q���r0q����	##�����p`0n���� �(�����d4
rp{���dT4
R����p����d42p���

4

rp���r0\��r0\��

4
Rp���

4
Rp��� b5��&200��,200��2B+��8200��>200��D20��JV	�NB�0(%OBJECT_ROOT%onecore\admin\wmi\events\advapi\objfre\amd64\precomp.obj��
>�^t�^�^InitAnsiString�  "�^�^TestSid

t�^�^IsValidSid�
p"#�^
�^"t�^
�^8[t�^�^InitUnicodeString��
 �^ tt�^�^StringCheck"�%�^BaseSetLastNTError�
�^�]"�^RegisterEventSourceA����^OpenEventLogA���#�#*W�^"�^ElfRegisterEventSourceA�^
�^�^ElfOpenEventLogA����"�^RegisterEventSourceW���88*W�^"�^ElfRegisterEventSourceW�^
�^�^OpenEventLogW���^OpenBackupEventLogW�^ElfOpenEventLogW���"�^ElfOpenBackupEventLogW�[8�- �^
�^"4@
�^�t�^�^BackupEventLogW8�^"�^ElfBackupEventLogFileW��^ClearEventLogW�
q*	!!"!"�^t	�^�^ReportEventA���"�^ElfClearEventLogFileW��
>6!!"!"�^!""�^�^ElfReportEventA
�*	!!"!"�^t	�^�^ReportEventW���"#�^
�^
86!!"!"�^!""�^�^ElfReportEventW"""t�^"�^GetEventLogInformation�"""�^"�^ElfGetLogInformation���"t�^"�^GetOldestEventLogRecord"�^_ElfOldestRecord&�^GetNumberOfEventLogRecords�t_"_NotifyChangeEventLog���_ElfNumberOfRecords�__ElfChangeNotify
t	_"
_DeregisterEventSource��	_&_ElfDeregisterEventSource���
_CloseEventLog��_ElfCloseEventLog���qt__BackupEventLogA�^OpenBackupEventLogA
=8_ _
_
�_ClearEventLogA�""t__CheckEventLogBuffer
t&""""""t__ReadEventLogW��_ReadEventLogA��"""""""_#_ElfReadEventLogW���#_ElfReadEventLogA���
���
���
���
����-FC -MT -c -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -Zo -std:c++17 -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973��
*_F+_ -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X&_'_(_)_,_���#�?��Z�c��r����l�e�t�z�&tw�Vc�����b��Xn�\�I}*�ќ��T��ፋ߷Sc��r��i��(�E��T�h5�Y��y�M�
�qv����	�r�qK)<�8v����	�rWu�����.�(��.7[�v�ɴv����	�r�U\���v����	�r��f�L����PSy�x��-�I�i`ʄ�NyW�b�i�n|�:e	�j�S*
�"Q���)�U�x��"��yb��K��
-�Mwp���V�@.c@���K�t'��*'Ju�FS~�"����f�byU-5f�,�؅��l�/}��4`�*'Ju�FS���n���*'Ju�FSD��K�㥱ג�e����VwR�a$o��;�T�|��g�lN�J����ha�į@^����Py>�O�
����X�K8��h��Κ��|a	����p�ő�^d\��kU�����)�����q~u6e<F\��+���"Qr��n}�=�Kivу| 6e<F\� ��H��6e<F\� ��H��Ή��S��|����]��,�n�ʵ-Ƒ)�1u�����~|�y��>��ƕ��c���
��g�@JstTK|r��n}�=�΀`�s�6e<F\��+���"Q6e<F\��+���"Q��m-u"P�
��m-u"^��F����e�Q.�>r���q�5v�J-WV8o�E���J-WV8o�E��-�g�(��	hQ�)�J-WV8o�E���J-WV8o�E���J-WV8o���Dk.,�{in�{��   -INCLUDE:__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi @comp.idk��@feat.00�I���.debug$SPe  0 H Yt�� �� �� % < T e� �� �� �   * C Tg.text$mnq��ae.debug$S "e.text$mn�
e.debug$S8(e.text$mnɿ��e.debug$S<e.text$mn�Y���e.debug$S	`Fe.text$mn
q��ae.debug$S"
e.text$mn��p;e.debug$S
"e.text$mn0l��e.debug$S�e.text$mn0l��e.debug$S�e.text$mn5�k�e.debug$S�e.text$mn0l��e.debug$S(e.text$mn0l��e.debug$S e.text$mnC�=5e.debug$S�
e.text$mnGP7�Pe.debug$S�
e.text$mn+��Be.debug$S�e.text$mn���a]e.debug$ST0e.text$mn ��"Qte.debug$S!t  e.text$mn"j%Q�3e.debug$S#4 "e.text$mn$\�c��e.debug$S%4 $e.text$mn&�`�{e.debug$S'�$&e.text$mn({�e.debug$S)�&(e.text$mn*\�c��e.debug$S+< *e.text$mn,\�c��e.debug$S-< ,e.text$mn.�X��e.debug$S/�B.e.text$mn0�(,�e.debug$S1�@0e.text$mn2^%(xe.debug$S3�2e.text$mn4��߁e.debug$S5�$4e�. �& � �* �" � �
 �0 (  #2 TestSid4 /  C, X$ f v � � � � � �   ) < memcpy $LN35.$LN20�.$LN10&$LN15$LN8*$LN8"$LN9$LN9
$LN340$LN20�0$LN10($LN63$LN14 $LN8,$LN8$$LN12$LN13$LN7$LN8$LN8$LN8$LN8$LN8$LN46�!��.eQ6.xdata7,%ͩ".em7.pdata8yho;.e�8.xdata9�a��&e�9.pdata:���&e�:.xdata;ȷ��e�;.pdata<xR	-e�<.xdata=c%C�*e�=.pdata>��*e>.xdata?��""e1?.pdata@s�+A"eG@.xdataAc%C�e\A.pdataB��`etB.xdataCc%C�
e�C.pdataD��`
e�DES	0e�E.xdataF,IT;�0e�F.pdataG`5B�0e�G.xdataHD��|(e�H.pdataIƍ:�(eI.xdataJ2+�e(J.pdataK�Ȅ�eDK.xdataL��O�4e_L.pdataM��3�4eoM.xdataN��" e~N.pdataO]ؼR e�O.xdataPc%C�,e�P.pdataQ��,e�Q.xdataRc%C�$e�R.pdataS��$eS.xdataTug�WeT.pdataUگ�0e1U.xdataVug�WeHV.pdataW ���e_W.xdataX1�7euX.pdataY]-�e�Y.xdataZ����e�Z.pdata[}Sͅe�[.xdata\����e�\.pdata]}Sͅe].xdata^�9�e6^.pdata_~�eS_.xdata`����eo`.pdataa}Sͅe�a.xdatab����e�b.pdatac}Sͅe�c.xdatad����e�d.pdatae#1ie�e.debug$Tf4
e.chks64g@e
	.gehcont$yElfReportEventAElfReadEventLogAElfRegisterEventSourceAElfOpenEventLogA__imp_RtlFreeUnicodeString__imp_RtlAnsiStringToUnicodeString__imp_RtlInitAnsiStringElfReportEventW__imp_RtlAllocateHeapElfReadEventLogW__imp_HeapFreeIsValidSid__imp_GetProcessHeap__imp_HeapAllocElfOpenBackupEventLogWElfRegisterEventSourceWElfOpenEventLogW__imp_RtlInitUnicodeStringElfBackupEventLogFileW__imp_RtlFreeHeapElfClearEventLogFileW__imp_RtlDosPathNameToNtPathName_UElfGetLogInformationElfOldestRecordElfNumberOfRecordsElfChangeNotifyElfDeregisterEventSourceElfCloseEventLog__imp_SetLastError__imp_RtlNtStatusToDosErrorReportEventAReadEventLogAOpenBackupEventLogARegisterEventSourceAOpenEventLogABackupEventLogAClearEventLogAReportEventWReadEventLogWCheckEventLogBufferStringCheckOpenBackupEventLogWRegisterEventSourceWOpenEventLogWBackupEventLogWClearEventLogWGetEventLogInformationGetOldestEventLogRecordGetNumberOfEventLogRecordsNotifyChangeEventLogDeregisterEventSourceCloseEventLogInitUnicodeStringInitAnsiStringBaseSetLastNTError__C_specific_handler__guard_ehcont_ReportEventA$unwind$ReportEventA$pdata$ReportEventA$unwind$ReadEventLogA$pdata$ReadEventLogA$unwind$OpenBackupEventLogA$pdata$OpenBackupEventLogA$unwind$RegisterEventSourceA$pdata$RegisterEventSourceA$unwind$OpenEventLogA$pdata$OpenEventLogA$unwind$BackupEventLogA$pdata$BackupEventLogA$unwind$ClearEventLogA$pdata$ClearEventLogA__guard_ehcont_ReportEventW$unwind$ReportEventW$pdata$ReportEventW$unwind$ReadEventLogW$pdata$ReadEventLogW$unwind$CheckEventLogBuffer$pdata$CheckEventLogBuffer$unwind$TestSid$pdata$TestSid$unwind$OpenBackupEventLogW$pdata$OpenBackupEventLogW$unwind$RegisterEventSourceW$pdata$RegisterEventSourceW$unwind$OpenEventLogW$pdata$OpenEventLogW$unwind$BackupEventLogW$pdata$BackupEventLogW$unwind$ClearEventLogW$pdata$ClearEventLogW$unwind$GetEventLogInformation$pdata$GetEventLogInformation$unwind$GetOldestEventLogRecord$pdata$GetOldestEventLogRecord$unwind$GetNumberOfEventLogRecords$pdata$GetNumberOfEventLogRecords$unwind$NotifyChangeEventLog$pdata$NotifyChangeEventLog$unwind$DeregisterEventSource$pdata$DeregisterEventSource$unwind$CloseEventLog$pdata$CloseEventLog$unwind$BaseSetLastNTError$pdata$BaseSetLastNTError
/229            1606894316              100666  109986    `
d�3�B�_�f4.debug$Sx0�A@B.rdata��A8B@P@.rdata�`B�B@P@.rdata�>CD@P@.rdata$E@0@.rdataP(ExE@P@.rdata �E@@@.rdata �E@@@.rdata�E@@@.rdata�EF@@@.rdataF*F@@@.rdataP4F�F@P@.rdata@�F�F@P@.rdata�FG@@@.rdataG@0@.rdataPGdG@P@.rdata`�G�G@P@.rdata�
H�H@P@.rdata��H`I@P@.rdata�I�J@P@.rdata BKbK@@@.rdatavK@@@.rdataP�K�K@P@.rdata�K@@@.rdata �KL@@@.rdata0L@L@@@.rdataPJL�L@P@.rdata��LHM@P@.rdata��MN@P@.rdataJNZN@@@.rdatadNtN@@@.rdata~N@0@.rdata��N"O@P@.rdatarO�O@@@.rdata �O�O@@@.rdata(�O@@@.rdata�O�P@P@.rdata`�Q�Q@P@.rdataR&R@@@.rdata0R@R@@@.rdataJRZR@@@.rdata dR�R@@@.rdata0�R@@@.rdata@�RS@P@.rdata`S|S@P@.rdata�S�S@@@.rdata�S@@.rdata�S@@@.rdata�S�S@@@.rdata �ST@@@.rdata(%T@@@.rdata�MT�T@P@.rdata	UU@@@.rdata #UCU@@@.rdata(WU@@@.rdataU@@@.rdata�U�U@@@.rdata@�U�U@P@.rdata V%W@P@.rdata�W�W@@@.rdataP�W/X@P@.rdata(MX@@@.rdatauX�X@@@.rdata �X�X@@@.rdata(�X@@@.rdata�X�Y@P@.rdatawZ�Z@@@.rdata�Z�Z@@@.rdataP�Z�Z@P@.rdataH[a[@P@.rdatak[{[@@@.rdata�[�\@P@.rdata]@0@.rdata]@@@.rdata]-]@@@.rdata7]@@@.rdataO]@@@.rdatag]w]@@@.rdata�]�]@@@.rdata�]�]@@@.rdata�]�]@@@.rdataP�]^@P@.rdata(=^@@@.rdataHe^�^@P@.rdata�^�^@@@.rdata�^�^@@@.rdata �^_@@@.rdata(_@@@.rdataG_@@.rdataH_@@.rdataI_Y_@@@.rdatac_@@.rdata6d_@@@.rdata �_�_@@@.rdata��_@P@.rdatax�b@P@.bss�@�.dataXj`j@@�.rdata0jj�j@@@.rdata`�j,k@P@.rdata6k@@@.rdataJk@@@.gfids$y^k@0@.gfids$yfk@0@.text$mn$vk�k 0`.debug$S,�k�l@B.text$mn$*mNm 0`.debug$S,bm�n@B.text$mn)�no 0`.debug$S\owp
@B.text$mn$�p�p 0`.debug$S,q?r@B.text$mn"�r�r 0`.debug$S,�r�s@B.text$mnAtWt 0`.debug$S�ktGu@B.text$mn�u�u 0`.debug$S��u�v@B.text$mn�v�v 0`.debug$S�w�w@B.text$mn'x=x 0`.debug$S�Qx-y@B.text$mn7iy�y 0`.debug$S��y�{@B.text$mn$0|T| 0`.debug$S4h|�}@B.text$mn$�}~ 0`.debug$S4$~X@B.text$mn7�� 0`.debug$S���@B.text$mn7o��� 0`.debug$S�����@B.text$mnEB��� 0`.debug$SD��߇@B.text$mnE�Ĉ 0`.debug$SD؈�@B.text$mnR��� 0`.debug$S�"�Ύ@B.text$mnR��ԏ 0`.debug$S����@B.text$mn)H�q� 0`.debug$Sx����
@B.text$mnEa��� 0`.debug$SP��
�@B.text$mnE��� 0`.debug$SP�S�@B.text$mn���� 0`.debug$S\Ŝ!� @B.text$mn�a�/� 0`.debug$S�C��"@B.text$mn�G��� 0`.debug$S$
�.�@B.text$mn�Z�	� 0`.debug$S$�A�@B.text$mn�m�+� 0`.debug$S\?��� @B.text$mn(ۻ� 0`.debug$Sd�{�
@B.xdata߽@0@.pdata��@0@.xdata�@0@.pdata�%�@0@.xdataC�@0@.pdataK�W�@0@.xdatau�@0@.pdata}���@0@.xdata��@0@.pdata����@0@.xdataپ@0@.pdata��@0@.xdata�@0@.pdata��@0@.xdata=�@0@.pdataE�Q�@0@.xdatao�@0@.pdataw���@0@.xdata��@0@.pdata����@0@.xdataӿ@0@.pdataۿ�@0@.xdata�@0@.pdata
��@0@.xdata7�@0@.pdata?�K�@0@.xdatai�@0@.pdataq�}�@0@.xdata��@0@.pdata����@0@.xdata�@0@.pdata��@0@.xdata��@0@.pdata��@0@.xdata1�@0@.pdata9�E�@0@.xdatac�@0@.pdatak�w�@0@.xdata��@0@.pdata����@0@.xdata�@0@.pdata��@0@.xdata��@0@.pdata�
�@0@.xdata+�@0@.pdata3�?�@0@.debug$S0]���@B.debug$S,����@B.debug$S4���@B.debug$S()�Q�@B.debug$S(e���@B.debug$S(����@B.debug$S(���@B.debug$S(�A�@B.debug$S(U�}�@B.debug$S(����@B.debug$S(����@B.debug$S(	�1�@B.debug$S(E�m�@B.debug$S(����@B.debug$S(����@B.debug$S(��!�@B.debug$S(5�]�@B.debug$S(q���@B.debug$S(����@B.debug$S(���@B.debug$S(%�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S,!�M�@B.debug$S,a���@B.debug$S,����@B.debug$S,��
�@B.debug$S(!�I�@B.debug$S,]���@B.debug$S,����@B.debug$S,��	�@B.debug$S,�I�@B.debug$S,]���@B.debug$S,����@B.debug$S,��	�@B.debug$S,�I�@B.debug$S(]���@B.debug$S,����@B.debug$S,���@B.debug$S,�E�@B.debug$S,Y���@B.debug$S,����@B.debug$S,���@B.debug$S,�E�@B.debug$S,Y���@B.debug$S,����@B.debug$S,���@B.debug$S,�E�@B.debug$S,Y���@B.debug$S,����@B.debug$S<���@B.debug$S,)�U�@B.debug$S8i���@B.debug$S8����@B.debug$S4�5�@B.debug$S0I�y�@B.debug$S8����@B.debug$S4��
�@B.debug$S0!�Q�@B.debug$TTQe�@B.chks64�	�,
.drectvenIf
��Ud:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\elf_client.obj:<��kk
Microsoft (R) Optimizing Compiler�<`FC_EXPR_START�,*eventlog__MIDL_AutoBindHandle��
"B`elf_MIDL_TYPE_FORMAT_STRING"F`elf_MIDL_PROC_FORMAT_STRING#F`_elf_MIDL_PROC_FORMAT_STRING#B`_elf_MIDL_TYPE_FORMAT_STRING NDR64_UINT8!NDR64_UINT16uNDR64_UINT32NDR64_INT64 NDR64_FORMAT_CHAR NDR64_ALIGNMENTuNDR64_FORMAT_UINT32_NDR64_PARAM_FLAGS_NDR64_BIND_CONTEXT!�_NDR64_POINTER_REPEAT_FLAGS�_NDR64_STRUCTURE_FLAGSF_NDR64_ARRAY_FLAGS<`_tagEXPR_TOKEN __midl_frag297_tP___midl_frag295_t __midl_frag294_t __midl_frag293_tP___midl_frag290_tP___midl_frag289_tP___midl_frag286_tP___midl_frag285_tP___midl_frag284_t�___midl_frag283_t�___midl_frag282_tP___midl_frag278_t\___midl_frag277_tP___midl_frag267_tP___midl_frag264_tP___midl_frag262_tP___midl_frag243_tP___midl_frag239_tP___midl_frag222_t�___midl_frag221_tP___midl_frag217_tP___midl_frag209_t�___midl_frag208_t __midl_frag207_tP___midl_frag206_tP___midl_frag196_tP___midl_frag195_tP___midl_frag193_tP___midl_frag157_t\___midl_frag150_tP___midl_frag149_tP___midl_frag144_t\___midl_frag22_tP___midl_frag21_tu__midl_frag1_t6`__midl_frag292_t3`__midl_frag291_t0`__midl_frag113_t*`__midl_frag288_t'`__midl_frag287_t`__midl_frag92_t*`_NDR64_CONF_STRUCTURE_HEADER_FORMAT`__midl_frag256_t%`_NDR64_STRUCTURE_HEADER_FORMAT`__midl_frag276_t
`__midl_frag5_t�__NDR64_STRUCTURE_FLAGS+�__NDR64_BOGUS_STRUCTURE_HEADER_FORMAT"`_NDR64_SIMPLE_MEMBER_FORMAT`_NDR64_MEMPAD_FORMAT�___midl_frag265_t�___midl_frag253_t�___midl_frag245_t�___midl_frag244_t�___midl_frag241_t�___midl_frag240_t"�__NDR64_POINTER_REPEAT_FLAGS�__NDR64_REPEAT_FORMAT,�__NDR64_POINTER_INSTANCE_HEADER_FORMAT�___midl_frag228_t�___midl_frag225_t�___midl_frag219_t�___midl_frag218_t�___midl_frag214_t�___midl_frag211_t�___midl_frag210_t�___midl_frag205_t�___midl_frag201_t�___midl_frag198_t�___midl_frag197_t�___midl_frag190_t�___midl_frag166_t�___midl_frag159_t�__NDR64_RANGE_FORMAT�___midl_frag158_t�___midl_frag152_t�___midl_frag143_t�___midl_frag133_t�___midl_frag119_t�___midl_frag117_t�___midl_frag114_t___midl_frag115_t|___midl_frag110_ty___midl_frag94_tv___midl_frag93_t&o__NDR64_CONF_ARRAY_HEADER_FORMAT s__NDR64_ARRAY_ELEMENT_INFOk___midl_frag82_th___midl_frag59_te___midl_frag49_tb___midl_frag34_t____midl_frag29_t#\__NDR64_CONTEXT_HANDLE_FORMATY___midl_frag20_tV___midl_frag12_tS___midl_frag10_tP__NDR64_POINTER_FORMATL___midl_frag6_tF__NDR64_ARRAY_FLAGS*I__NDR64_CONF_VAR_ARRAY_HEADER_FORMAT9___midl_frag9_t6__NDR64_EXPR_NOOP2___midl_frag8_t/___midl_frag7_t$__NDR64_EXPR_OPERATOR(__NDR64_EXPR_VAR,__NDR64_EXPR_CONST64___midl_frag2_t�^_NDR64_PROC_FORMAT__NDR64_BIND_CONTEXT'__NDR64_BIND_AND_NOTIFY_EXTENSION__NDR64_PARAM_FLAGS__NDR64_PARAM_FORMAT�( G�*㥬2����M���}�b�R�̫�)��(a� ����o�}�+4qt*Y lռ��́dq�X� �
���mcJAt�qe�el��]�;�L��� ��H�1�t�~e�͘R�InfdE�6T�#y�N ���@�R�ђ�e��<r= h���a�	= ���깰0F���\�h[�^2ybI	ހ䠙���s F?�Z#��.Wi�/0��=��	�9*W�-���onecore\external\shared\inc\pshpack8.honecore\admin\wmi\events\advapi\objfre\amd64\pch_hdr.srconecore\admin\wmi\events\advapi\objfre\amd64\precomp.pchonecore\admin\wmi\events\advapi\precomp.honecore\external\shared\inc\poppack.honecore\external\sdk\inc\ndr64types.honecore\admin\wmi\events\advapi\elf_client.conecore\admin\wmi\events\idl\elf\objfre\amd64\elf_c.conecore\external\shared\inc\guiddef.h�LO`�*�*
]������+H`3qq��7I�����6 &(0#x
n3*( @#�0&)) 2(20588@8H;PeX>`GhSpVxV�Y�e�q�t��������������@,$pH� �0�@C!  @,$pH� �0�@@h<Dp�� /0 /p�@($(pHP�� �0@@( DpH��� �0�@P@l8.Dq
�� (�0 �0�@�P`pb�@l0.Dq
�� �( �0�@P`bp@,x�HpH���� �(�08@HP�X`h�p �0@P`p�������������AD@,$pH� �0@AJ
! M@,$pH� �0�@@l8-Dq
�� (�0 \0�@�P`pb�@l0-Dq
�� �( \0�@P`bp!
 bp�@j@<HpH��� P�(P�0�8 �0@P�`kp�� kAn
���@,x�HpH���� �(�08@HP�X`h�p �0@P`p�������������@J (q
��� �0�@zP � }! �A�
���@q
� �0@, &q
�� �0�@�P!���� �A�
���@j04(pH��P� �( �0@�P�`p �A�
�� @($pH� �0@,��HpH���� (�0�8@HPX�`hp�x �0@P`p���������������!�A�!��0�H��0! �A�
��8@,p�(pH
��� �(�08@HP�X`�h �0�@P`p������������� �!�A�!��0�H�5��#!�@,p�(pH
��� �(�08@HP�X`�h �0�@P`p�������������pI0 ���� �2A!�!�A�!��0�H�(5��P!�! A

��0!2d��� X��0��,^��6�8d���0I(UU[@6\[ ��0�\\[\0����)��[���([L�\[��[�L�\[!'(����0�\[ )0�[\[@6\[ ��\������!'(������\[��� )T��[���)��[)[����!'0�����\[ )8�[����!'(����|�\[���!'(����F�\[H0H$F
EpH0H$F
E0pH0�8@D
GJpH0�8@D
GJpH0H$$D
EP!pH0H$$D
EP!pH 0HDD
E�RHpH81\*@F
G
Z00HH (bp0H81\*@F
G
Z00HH (bp0H	01\*@F
G
Z0HH bp(H
@0H<@E
GHH�f tP!(P!0p8Hx0H�@F
EHHHH �(��0�80@�H�PHX`hppH0H$F
E"pH
0H$F
E<pH81\)@F
G
R<<HH (bp0H81\)@F
G
R<<HH (bp0H01\)@F
G
R<HH bp(H@0H<@E
GHH�V tP!(P!0p8Hx0H�@F
EHHHH �(`�0j8<@�HtPHX`hppH 1\$E
C
Z!� �pH1\D
A
ZpH 1\"F
E
Z���pH00H4$E
GH��P! p(H0H$D
EpH�0H�@F
EHHHH (0�0�8 @0H�P*XXH`hppxHp0H�$F
E
RHHH �(v�0�80@�H�PHX`phHp0H�$F
E
RHHH �(��0�8<@�H�PHX`ph3&9(`�?'�*��?x�y)�#�]������+H`P03qq��7I�����6]������+H`H��8E3�H�T$ L��H�
A�P
�H��8�0'��4G$�^�ElfrBackupELFA>TZLogHandleAJ>�^BackupFileNameAK
Z�^8B!@TZOLogHandleH�^OBackupFileNameO�0$�$|�����,�0�
^�b�
����
���
H��8E3�H�T$ L��H�
A�P�H��8�0'��4G$�^�ElfrBackupELFW>TZLogHandleAJ>�^BackupFileNameAK
Z�^8B!@TZOLogHandleH�^OBackupFileNameO�0$�$n�r�z�,�0�
^�b�
����
���
H��8D�D$(L��E3�H�T$ H�
A�P�H��8�0 '�6G)$�^�ElfrChangeNotify>TZLogHandleAJ>�ClientIdAKDH>"EventAh
Z�^8B!@TZOLogHandleH�OClientIdP"OEventO�0)�$����$��,�0�
`�d�
����
����
,�0�
H��8E3�H�T$ L��H�
A�P�H��8�0'��3G$�^�ElfrClearELFA>TZLogHandleAJ>�^BackupFileNameAK
Z�^8B!@TZOLogHandleH�^OBackupFileNameO�0$�$j�n�v�,�0�
]�a�
����
���
H��8H�T$ L��3�H�
E3��H��8�0'��3G"�^�ElfrClearELFW>TZLogHandleAJ>�^BackupFileNameAK
Z�^8B!@TZOLogHandleH�^OBackupFileNameO�0"�$\�`�h�,�0�
]�a�
����
���
E3�L��H�
A�P�	0'��1G�^�ElfrCloseEL>�^LogHandleAJ

Z�^B!�^OLogHandleO�(����,�0�
[�_�
����
E3�L��H�
A�P�	0'��>G�^�ElfrDeregisterClusterSvc>qUNCServerNameAJ

Z�^B!qOUNCServerNameO�(�3�7�,�0�
l�p�
����
E3�L��H�
A�P�	0'��?G�^�ElfrDeregisterEventSource>�^LogHandleAJ

Z�^B!�^OLogHandleO�(�����,�0�
i�m�
����
E3�L��H�
A�P�	0'��1G�^�ElfrFlushEL>TZLogHandleAJ

Z�^B!TZOLogHandleO�(�o�s�,�0�
[�_�
����
H��HH�D$pH�D$8D�L$0L��L�D$(H�
E3��T$ A�P�H��H�0.'��;G72�^�ElfrGetLogInformation>TZLogHandleAJ">"InfoLevelA-> lpBufferAP%>"cbBufSizeAi>"pcbBytesNeededEO(Dp
Z�^HB!PTZOLogHandleX"OInfoLevel` OlpBufferh"OcbBufSizep"OpcbBytesNeededO�07�$[�_�2j�,�0�
e�i�
����
����
����
���
����
H��8E3�H�T$ L��H�
A�P�H��8�0'��9G$�^�ElfrNumberOfRecords>TZLogHandleAJ>"NumberOfRecordsAK
Z�^8B!@TZOLogHandleH"ONumberOfRecordsO�0$�$������,�0�
c�g�
����
��
H��8E3�H�T$ L��H�
A�P�H��8�0'��6G$�^�ElfrOldestRecord>TZLogHandleAJ>"OldestRecordNumberAK
Z�^8B!@TZOLogHandleH"OOldestRecordNumberO�0$�$������,�0�
`�d�
����
��
L��H��HH�D$pI�C�E�K�L��E�C�H�
E3�I�S�A�P�H��H�0.'��2G72�^�ElfrOpenBELA>pUNCServerNameAJ">�^FileNameAK->"MajorVersionAh%>"MinorVersionAi>�^LogHandleEO(Dp
Z�^HB!PpOUNCServerNameX�^OFileName`"OMajorVersionh"OMinorVersionp�^OLogHandleO�07�$����2��,�0�
`�d�
����
����
����
����
����
L��H��HH�D$pI�C�E�K�L��E�C�H�
E3�I�S�A�P	�H��H�0.'��2G72�^�ElfrOpenBELW>qUNCServerNameAJ">�^BackupFileNameAK->"MajorVersionAh%>"MinorVersionAi>�^LogHandleEO(Dp
Z�^HB!PqOUNCServerNameX�^OBackupFileName`"OMajorVersionh"OMinorVersionp�^OLogHandleO�07�$��2�,�0�
`�d�
����
����
����
���
����
L��H��XH��$�I�C苄$��D$8E�K�L��M�C�H�
E3�I�S�A�P�H��X�,0<'��1GE@�^�ElfrOpenELA>pUNCServerNameAJ0>�^ModuleNameAK;>�^RegModuleNameAP3>"MajorVersionAi%>"MinorVersionEO(D�>�^LogHandleEO0D�
Z�^XB!`pOUNCServerNameh�^OModuleNamep�^ORegModuleNamex"OMajorVersion�"OMinorVersion��^OLogHandleO�0E�$����@��,�0�
_�c�
����
����
����
���
.�2�
��
L��H��XH��$�I�C苄$��D$8E�K�L��M�C�H�
E3�I�S�A�P�H��X�,0<'��1GE@�^�ElfrOpenELW>qUNCServerNameAJ0>�^ModuleNameAK;>�^RegModuleNameAP3>"MajorVersionAi%>"MinorVersionEO(D�>�^LogHandleEO0D�
Z�^XB!`qOUNCServerNameh�^OModuleNamep�^ORegModuleNamex"OMajorVersion�"OMinorVersion��^OLogHandleO�0E�$����@��,�0�
_�c�
����
����
����
���
.�2�
��
L��H��XH��$�I�C�H��$�I�C�H��$�I�C�E�K�L��E�C�H�
E3��T$ A�P�H��X�90I'�g1GRM�^�ElfrReadELA>TZLogHandleAJ=>"ReadFlagsAH>"RecordOffsetAh@>"NumberOfBytesToReadAi2> BufferEO(D�>"NumberOfBytesReadEO0D�>"MinNumberOfBytesNeededEO8D�
Z�^XB!`TZOLogHandleh"OReadFlagsp"ORecordOffset x"ONumberOfBytesToRead� OBuffer�"ONumberOfBytesRead#�"OMinNumberOfBytesNeededO�0R�$����M��,�0�
[�_�
���
����
����
����
1�5�
n�r�
|���
L��H��XH��$�I�C�H��$�I�C�H��$�I�C�E�K�L��E�C�H�
E3��T$ A�P
�H��X�90I'�g1GRM�^�ElfrReadELW>TZLogHandleAJ=>"ReadFlagsAH>"RecordOffsetAh@>"NumberOfBytesToReadAi2> BufferEO(D�>"NumberOfBytesReadEO0D�>"MinNumberOfBytesNeededEO8D�
Z�^XB!`TZOLogHandleh"OReadFlagsp"ORecordOffset x"ONumberOfBytesToRead� OBuffer�"ONumberOfBytesRead#�"OMinNumberOfBytesNeededO�0R�$)�-�M:�,�0�
[�_�
���
����
����
����
1�5�
n�r�
|���
H��8L�D$(L��E3�H�T$ H�
A�P�H��8�0 '�4<G)$�^�ElfrRegisterClusterSvc>qUNCServerNameAJ>"pulSizeAK>�^ppPackedEventInfoAP
Z�^8B!@qOUNCServerNameH"OpulSizeP�^OppPackedEventInfoO�0)�$!�%�$.�,�0�
j�n�
����
����
H�L�
L��H��XH��$�I�C苄$��D$8E�K�L��M�C�H�
E3�I�S�A�P�H��X�,0<'�>GE@�^�ElfrRegisterEventSourceA>pUNCServerNameAJ0>�^ModuleNameAK;>�^RegModuleNameAP3>"MajorVersionAi%>"MinorVersionEO(D�>�^LogHandleEO0D�
Z�^XB!`pOUNCServerNameh�^OModuleNamep�^ORegModuleNamex"OMajorVersion�"OMinorVersion��^OLogHandleO�0E�$����@��,�0�
l�p�
����
����
����
��
;�?�
 �$�
L��H��XH��$�I�C苄$��D$8E�K�L��M�C�H�
E3�I�S�A�P�H��X�,0<'�>GE@�^�ElfrRegisterEventSourceW>qUNCServerNameAJ0>�^ModuleNameAK;>�^RegModuleNameAP3>"MajorVersionAi%>"MinorVersionEO(D�>�^LogHandleEO0D�
Z�^XB!`qOUNCServerNameh�^OModuleNamep�^ORegModuleNamex"OMajorVersion�"OMinorVersion��^OLogHandleO�0E�$����@�,�0�
l�p�
����
����
����
��
;�?�
 �$�
H��H��$D��$�D��$�H��$�H��$H�D$xH��$�D�T$pH�D$hH��$�H�D$`H��$�H�D$XH��$�H�D$P��$��D$H��$�D�\$@�D$8E��D�L$0L��E��H�
D�D$(E3��T$ A�P�H�ĘÝ0�'�6G���^�ElfrReportEventA>TZLogHandleAJ�
>"TimeA�>!EventTypeA`�>!EventCategoryAa�>"EventIDEO(D�>!NumStringsEO0D�>"DataSizeEO8D�>�^ComputerNameEO@D�>�^UserSIDEOHD�>�^StringsEOPD�
> DataEOXD�>!FlagsEO`D�>"RecordNumberEOhD>"TimeWrittenEOpD
Z�^�B!�TZOLogHandle�"OTime�!OEventType�!OEventCategory�"OEventID�!ONumStrings�"ODataSize��^OComputerName��^OUserSID��^OStrings� OData�!OFlags"ORecordNumber"OTimeWrittenO�0��$����,�0�
`�d�
���
����
����
����
"�&�
Q�U�
����
����
����
��
7�;�
j�n�
����
,�0�
H��H��$D��$D��$�H��$�H��$H��$�H��$�D�T$xH�D$pH��$�H�D$hH��$�H�D$`H��$�H�D$X��$��D$PH��$�D�\$HH�D$@��$��D$8E��D�L$0L��E��H�
D�D$(E3��T$ A�P�H�Ęí0�'�i?G���^�ElfrReportEventAndSourceW>TZLogHandleAJ�
>"TimeA�>!EventTypeA`�>!EventCategoryAa�>"EventIDEO(D�>�^SourceNameEO0D�>!NumStringsEO8D�>"DataSizeEO@D�>�^ComputerNameEOHD�>�^UserSIDEOPD�>�^StringsEOXD�
> DataEO`D�>!FlagsEOhD>"RecordNumberEOpD>"TimeWrittenEOxD
Z�^�B!�TZOLogHandle�"OTime�!OEventType�!OEventCategory�"OEventID��^OSourceName�!ONumStrings�"ODataSize��^OComputerName��^OUserSID��^OStrings� OData!OFlags"ORecordNumber"OTimeWrittenO�0��$�������,�0�
i�m�
����
����
����
����
+�/�
\�`�
����
����
����
��
E�I�
q�u�
����
����
����
H��H��$�D��$�D��$�H�D$xH��$�D�T$pH�D$hH��$�H�D$`H��$�H�D$XH��$�H�D$P��$��D$H��$�D�\$@�D$8E��D�L$0L��E��H�
D�D$(E3�H�T$ A�P�H�ĈÍ0�'��8G���^�ElfrReportEventExA>TZLogHandleAJ�>�^TimeGeneratedAK�>!EventTypeA`�>!EventCategoryAa~>"EventIDEO(D�>!NumStringsEO0D�>"DataSizeEO8D�>�^ComputerNameEO@D�>�^UserSIDEOHD�>�^StringsEOPD�
> DataEOXD�>!FlagsEO`D�>"RecordNumberEOhD�
Z�^�B!�TZOLogHandle��^OTimeGenerated�!OEventType�!OEventCategory�"OEventID�!ONumStrings�"ODataSize��^OComputerName��^OUserSID��^OStrings� OData�!OFlags�"ORecordNumberO�0��$�������,�0�
b�f�
����
����
����
���
-�1�
\�`�
����
����
����
��
B�F�
u�y�
����
H��H��$�D��$�D��$�H�D$xH��$�D�T$pH�D$hH��$�H�D$`H��$�H�D$XH��$�H�D$P��$��D$H��$�D�\$@�D$8E��D�L$0L��E��H�
D�D$(E3�H�T$ A�P�H�ĈÍ0�'��8G���^�ElfrReportEventExW>TZLogHandleAJ�>�^TimeGeneratedAK�>!EventTypeA`�>!EventCategoryAa~>"EventIDEO(D�>!NumStringsEO0D�>"DataSizeEO8D�>�^ComputerNameEO@D�>�^UserSIDEOHD�>�^StringsEOPD�
> DataEOXD�>!FlagsEO`D�>"RecordNumberEOhD�
Z�^�B!�TZOLogHandle��^OTimeGenerated�!OEventType�!OEventCategory�"OEventID�!ONumStrings�"ODataSize��^OComputerName��^OUserSID��^OStrings� OData�!OFlags�"ORecordNumberO�0��$�������,�0�
b�f�
����
����
����
���
-�1�
\�`�
����
����
����
��
B�F�
u�y�
����
H��H��$D��$�D��$�H��$�H��$H�D$xH��$�D�T$pH�D$hH��$�H�D$`H��$�H�D$XH��$�H�D$P��$��D$H��$�D�\$@�D$8E��D�L$0L��E��H�
D�D$(E3��T$ A�P�H�ĘÝ0�'�6G���^�ElfrReportEventW>TZLogHandleAJ�
>"TimeA�>!EventTypeA`�>!EventCategoryAa�>"EventIDEO(D�>!NumStringsEO0D�>"DataSizeEO8D�>�^ComputerNameEO@D�>�^UserSIDEOHD�>�^StringsEOPD�
> DataEOXD�>!FlagsEO`D�>"RecordNumberEOhD>"TimeWrittenEOpD
Z�^�B!�TZOLogHandle�"OTime�!OEventType�!OEventCategory�"OEventID�!ONumStrings�"ODataSize��^OComputerName��^OUserSID��^OStrings� OData�!OFlags"ORecordNumber"OTimeWrittenO�0��$L�P��d�,�0�
`�d�
���
����
����
����
"�&�
Q�U�
����
����
����
��
7�;�
j�n�
����
,�0�
H��8L�D$(L��E3��T$ H�
A�P�H��8�0'�<G(#�^�ElfrWriteClusterEvents>qUNCServerNameAJ>"ulSizeA> pBufferAP
Z�^8B!@qOUNCServerNameH"OulSizeP OpBufferO�0(�$E�I�#R�,�0�
j�n�
����
����
4�8�
�������������7���b(���b)�������R��
�7���E���E��b$��"b$��(���.�R��4�7��:�E��@�E��Fb)��Lb$��Rb$��Xb$��^b"��d�" �^eventlog_SyntaxInfo
� �eventlog_StubDesc
�&$�^eventlog_Ndr64ProcTable
��^__midl_frag1
�___midl_frag2
�/___midl_frag7
�2___midl_frag8
�9___midl_frag9
�L___midl_frag6  
�S___midl_frag10##
�V___midl_frag12&&
�Y___midl_frag20))
�P___midl_frag21,,
�\___midl_frag22//
�____midl_frag2922
�b___midl_frag3455
�e___midl_frag4988
�h___midl_frag59;;
�k___midl_frag82>>
�v___midl_frag93AA
�y___midl_frag94DD
�|___midl_frag110GG
�___midl_frag115JJ
��___midl_frag114MM
��___midl_frag117PP
��___midl_frag119SS
��___midl_frag133VV
��___midl_frag143YY
�P___midl_frag144\\
�P___midl_frag149__
�\___midl_frag150bb
��___midl_frag152ee
�P___midl_frag157hh
��___midl_frag158kk
��___midl_frag159nn
��___midl_frag166qq
��___midl_frag190tt
�P___midl_frag193ww
�P___midl_frag195zz
�P___midl_frag196}}
��___midl_frag197��
��___midl_frag198��
��___midl_frag201��
��___midl_frag205��
�P___midl_frag206��
��___midl_frag207��
��___midl_frag208��
�P___midl_frag209��
��___midl_frag210��
��___midl_frag211��
��___midl_frag214��
�P___midl_frag217��
��___midl_frag218��
��___midl_frag219��
��___midl_frag221��
�P___midl_frag222��
��___midl_frag225��
��___midl_frag228��
�P___midl_frag239��
��___midl_frag240��
��___midl_frag241��
�P___midl_frag243��
��___midl_frag244��
��___midl_frag245��
��___midl_frag253��
�P___midl_frag262��
�P___midl_frag264��
��___midl_frag265��
�
`__midl_frag5��
�P___midl_frag267��
�`__midl_frag276��
�\___midl_frag277��
�`__midl_frag256��
�P___midl_frag278��
��___midl_frag282��
��___midl_frag283��
�P___midl_frag284��
�`__midl_frag92��
�P___midl_frag285��
�P___midl_frag286��
�'`__midl_frag287��
�*`__midl_frag288��
�0`__midl_frag113��
�P___midl_frag289
�P___midl_frag290
�3`__midl_frag291
�6`__midl_frag292


�8`__midl_frag293


�9`__midl_frag294
�P___midl_frag295
�:`__midl_frag297
�/->`eventlog_FormatStringOffsetTable
�?`BindingRoutines  
�)'B`elf__MIDL_TypeFormatString##
�)'F`elf__MIDL_ProcFormatString&&
�&$
eventlog_ClientIfHandle--
�!�-eventlog_ProxyInfo00
�,*Z!eventlog___RpcClientInterface33
�'%�7_NDR64_RpcTransferSyntax66
�!�7_RpcTransferSyntax99
V	�NB�0(%OBJECT_ROOT%onecore\admin\wmi\events\advapi\objfre\amd64\precomp.obj��
6
�
�,
�^:
TZ�^!!"!"�^�^�^ !"
�^�^ElfrReportEventExW��-"�+�^�^NdrClientCall3�BTZ"!!"�^!"�^�^�^ !""�^&�^ElfrReportEventAndSourceW��
i!
�^:
TZ�^!!"!"�^�^�^ !"
�^�^ElfrReportEventExA�
TZ�^�^ElfrFlushELTZ" ""�^"�^ElfrGetLogInformation��q" �^"�^ElfrWriteClusterEvents�
q�^&�^ElfrDeregisterClusterSvc���
TZp�^""�^�^�^ElfrOpenBELA���"TZ""" ""�^�^ElfrReadELA
 q"�^�^"�^ElfrRegisterClusterSvc�>TZ"!!"!"�^�^�^ !""�^�^ElfrReportEventA���TZ�^�^�^ElfrBackupELFA�p�^�^""�^�^&�^ElfrRegisterEventSourceA����^ElfrOpenELA�^ElfrClearELFA��q�^""�^�^�^ElfrOpenBELW����^ElfrReadELW>TZ"!!"!"�^�^�^ !""�^�^ElfrReportEventW���q�^�^""�^�^&�^ElfrRegisterEventSourceW���TZ�"�^�^ElfrChangeNotify����^ElfrOpenELWTZ"�^�^ElfrOldestRecord����^ElfrNumberOfRecords
�^�^&�^ElfrDeregisterEventSource���^ElfrCloseELTZ�^�^�^ElfrBackupELFW��^ElfrClearELFW��
E(���^#��
�^#��
u��B�_NDR64_PROC_FORMAT.?AU_NDR64_PROC_FORMAT@@���
uFlags
uStackSize
uConstantClientBufferSize�
uConstantServerBufferSize�
!RpcFlags�
!FloatDoubleMask��
!NumberOfParams���
!ExtensionSizeB�^_NDR64_PROC_FORMAT.?AU_NDR64_PROC_FORMAT@@��.onecore\external\sdk\inc\ndr64types.h���^�^x^�_NDR64_BIND_AND_NOTIFY_EXTENSION.?AU_NDR64_BIND_AND_NOTIFY_EXTENSION@@��B�_NDR64_BIND_CONTEXT.?AU_NDR64_BIND_CONTEXT@@n
 HandleType���
 Flags
!StackOffset��
 RoutineIndex�
 Ordinal��B__NDR64_BIND_CONTEXT.?AU_NDR64_BIND_CONTEXT@@_�^�.
�^Binding��
!NotifyIndex��^__NDR64_BIND_AND_NOTIFY_EXTENSION.?AU_NDR64_BIND_AND_NOTIFY_EXTENSION@@��_�^�B�_NDR64_PARAM_FORMAT.?AU_NDR64_PARAM_FORMAT@@
B�_NDR64_PARAM_FLAGS.?AU_NDR64_PARAM_FLAGS@@��
!��
!��
!��
!��
!��
!��
!��
!��
!��
!	��
!
��
!��
!��
!
��
!��V
	_MustSize�

_MustFree�
_IsPipe���
_IsIn�

_IsOut
_IsReturn�
_IsBasetype���
_IsByValue
_IsSimpleRef��
_IsDontCallFreeInst���
_SaveForAsyncFinish���
_IsPartialIgnore��
_IsForceAllocate��
_Reserved�
_UseCache�B__NDR64_PARAM_FLAGS.?AU_NDR64_PARAM_FLAGS@@��_�^�V
_Type�
_Attributes���
!
Reserved�
uStackOffset��B__NDR64_PARAM_FORMAT.?AU_NDR64_PARAM_FORMAT@@_�^�R
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5:_P__midl_frag2_t.?AU__midl_frag2_t@@��>onecore\admin\wmi\events\idl\elf\objfre\amd64\elf_c.c��_ _@F�_NDR64_EXPR_OPERATOR.?AU_NDR64_EXPR_OPERATOR@@��R
 ExprType�
 Operator�
 CastType�
 Reserved�F#__NDR64_EXPR_OPERATOR.?AU_NDR64_EXPR_OPERATOR@@��$_�^h:�_NDR64_EXPR_VAR.?AU_NDR64_EXPR_VAR@@R
 ExprType�
 VarType��
!Reserved�
uOffset���:'__NDR64_EXPR_VAR.?AU_NDR64_EXPR_VAR@@(_�^�B�_NDR64_EXPR_CONST64.?AU_NDR64_EXPR_CONST64@@V
 ExprType�
 Reserved�
!Reserved1
ConstValue���B+__NDR64_EXPR_CONST64.?AU_NDR64_EXPR_CONST64@@,_�^xB
ufrag1
"_frag2
&_frag3
*_frag4:._ __midl_frag7_t.?AU__midl_frag7_t@@��/_ _B
ufrag1
"_frag2
&_frag3
*_frag4:1_ __midl_frag8_t.?AU__midl_frag8_t@@��2_ _>�_NDR64_EXPR_NOOP.?AU_NDR64_EXPR_NOOP@@��:
 ExprType�
 Size�
!Reserved�>5__NDR64_EXPR_NOOP.?AU_NDR64_EXPR_NOOP@@��6_�^�2
ufrag1
4_frag2
*_frag3:8___midl_frag9_t.?AU__midl_frag9_t@@��9_ _b�_NDR64_CONF_VAR_ARRAY_HEADER_FORMAT.?AU_NDR64_CONF_VAR_ARRAY_HEADER_FORMAT@@B�_NDR64_ARRAY_FLAGS.?AU_NDR64_ARRAY_FLAGS@@��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ���
=_HasPointerInfo���
>_HasElementInfo���
?_IsMultiDimensional���
@_IsArrayofStrings�
A_Reserved1
B_Reserved2
C_Reserved3
D_Reserved4BE__NDR64_ARRAY_FLAGS.?AU_NDR64_ARRAY_FLAGS@@��F_�^��
 FormatCode���
 Alignment
<_Flags
 Reserved�
uElementSize��
_ConfDescriptor���
_VarDescriptorbH__NDR64_CONF_VAR_ARRAY_HEADER_FORMAT.?AU_NDR64_CONF_VAR_ARRAY_HEADER_FORMAT@@I_�^�
;_frag1:K___midl_frag6_t.?AU__midl_frag6_t@@��L_ _(F�_NDR64_POINTER_FORMAT.?AU_NDR64_POINTER_FORMAT@@R
 FormatCode���
 Flags
!Reserved�
_Pointee��FO__NDR64_POINTER_FORMAT.?AU_NDR64_POINTER_FORMAT@@P_�^�
N_frag1:R___midl_frag10_t.?AU__midl_frag10_t@@S_ _R
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5:U_P__midl_frag12_t.?AU__midl_frag12_t@@V_ _�B
�^frag1
�^frag2
_ frag3
_0frag4:X_@__midl_frag20_t.?AU__midl_frag20_t@@Y_ _�f
 FormatCode���
 ContextFlags�
 RundownRoutineIndex��
 Ordinal��V[__NDR64_CONTEXT_HANDLE_FORMAT.?AU_NDR64_CONTEXT_HANDLE_FORMAT@@��\_�^�R
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5:^_P__midl_frag29_t.?AU__midl_frag29_t@@__ _�b
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6:a_`__midl_frag34_t.?AU__midl_frag34_t@@b_ _��
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9:	d_�__midl_frag49_t.?AU__midl_frag49_t@@e_ _��
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8:g_�__midl_frag59_t.?AU__midl_frag59_t@@h_ _�2
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9
_�frag10���
_�frag11���
_�frag12���
_�frag13���
_�frag14���
_�frag15���
_�frag16���
_frag17���:j___midl_frag82_t.?AU__midl_frag82_t@@k_ _�Z�_NDR64_CONF_ARRAY_HEADER_FORMAT.?AU_NDR64_CONF_ARRAY_HEADER_FORMAT@@�
 FormatCode���
 Alignment
<_Flags
 Reserved�
uElementSize��
_ConfDescriptor���Zn__NDR64_CONF_ARRAY_HEADER_FORMAT.?AU_NDR64_CONF_ARRAY_HEADER_FORMAT@@o_�^�N�_NDR64_ARRAY_ELEMENT_INFO.?AU_NDR64_ARRAY_ELEMENT_INFO@@2
uElementMemSize���
_Element��Nr__NDR64_ARRAY_ELEMENT_INFO.?AU_NDR64_ARRAY_ELEMENT_INFO@@s_�^�"
m_frag1
q_frag2:u_ __midl_frag93_t.?AU__midl_frag93_t@@v_ _~"
ufrag1
&_frag2:x___midl_frag94_t.?AU__midl_frag94_t@@y_ _uR
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5>{_P__midl_frag110_t.?AU__midl_frag110_t@@��|_ _i"
ufrag1
&_frag2>~___midl_frag115_t.?AU__midl_frag115_t@@��_ _G"
m_frag1
q_frag2>�_ __midl_frag114_t.?AU__midl_frag114_t@@���_ _P
N_frag1>�___midl_frag117_t.?AU__midl_frag117_t@@���_ _?R
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5>�_P__midl_frag119_t.?AU__midl_frag119_t@@���_ _3�
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9>	�_�__midl_frag133_t.?AU__midl_frag133_t@@���_ _#�
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8>�_�__midl_frag143_t.?AU__midl_frag143_t@@���_ _�
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9
_�frag10���>
�_�__midl_frag152_t.?AU__midl_frag152_t@@���_ _�
"
m_frag1
q_frag2>�_ __midl_frag158_t.?AU__midl_frag158_t@@���_ _�
B�_NDR64_RANGE_FORMAT.?AU_NDR64_RANGE_FORMAT@@j
 FormatCode���
 RangeType
!Reserved�
MinValue�
MaxValue�B�__NDR64_RANGE_FORMAT.?AU_NDR64_RANGE_FORMAT@@�_�^�2
ufrag1
�_frag2
&_ frag3>�_(__midl_frag159_t.?AU__midl_frag159_t@@���_ _�
2
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9
_�frag10���
_�frag11���
_�frag12���
_�frag13���
_�frag14���
_�frag15���
_�frag16���
_frag17���>�___midl_frag166_t.?AU__midl_frag166_t@@���_ _�
b
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6>�_`__midl_frag190_t.?AU__midl_frag190_t@@���_ _�
"
m_frag1
q_frag2>�_ __midl_frag197_t.?AU__midl_frag197_t@@���_ _�
B
ufrag1
�_frag2
"_ frag3
&_$frag4>�_0__midl_frag198_t.?AU__midl_frag198_t@@���_ _�
B
�^frag1
�^frag2
_ frag3
_0frag4>�_@__midl_frag201_t.?AU__midl_frag201_t@@���_ _�
b
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6>�_`__midl_frag205_t.?AU__midl_frag205_t@@���_ _|

 ��"
m_frag1
q_frag2>�_ __midl_frag210_t.?AU__midl_frag210_t@@���_ __
2
ufrag1
�_frag2
&_ frag3>�_(__midl_frag211_t.?AU__midl_frag211_t@@���_ _U
�
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8>�_�__midl_frag214_t.?AU__midl_frag214_t@@���_ _F
"
m_frag1
q_frag2>�_ __midl_frag218_t.?AU__midl_frag218_t@@���_ _8
2
ufrag1
�_frag2
&_ frag3>�_(__midl_frag219_t.?AU__midl_frag219_t@@���_ _.
B
�^frag1
�^frag2
_ frag3
_0frag4>�_@__midl_frag225_t.?AU__midl_frag225_t@@���_ _
F
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9
_�frag10���
_�frag11���
_�frag12���
_�frag13���
_�frag14���
_�frag15���
_�frag16���
_frag17���
_frag18���>�_ __midl_frag228_t.?AU__midl_frag228_t@@���_ _
F�_NDR64_REPEAT_FORMAT.?AU_NDR64_REPEAT_FORMAT@@��R�_NDR64_POINTER_REPEAT_FLAGS.?AU_NDR64_POINTER_REPEAT_FLAGS@@
 ��
 ��.
�_SetCorrMark��
�_Reserved�R�__NDR64_POINTER_REPEAT_FLAGS.?AU_NDR64_POINTER_REPEAT_FLAGS@@�_�^�
 FormatCode���
�_Flags
!Reserved�
uIncrement
uOffsetToArray
uNumberOfPointers�F�__NDR64_REPEAT_FORMAT.?AU_NDR64_REPEAT_FORMAT@@���_�^f�_NDR64_POINTER_INSTANCE_HEADER_FORMAT.?AU_NDR64_POINTER_INSTANCE_HEADER_FORMAT@@*
uOffset���
uReserved�f�__NDR64_POINTER_INSTANCE_HEADER_FORMAT.?AU_NDR64_POINTER_INSTANCE_HEADER_FORMAT@@�_�^"
�_frag1
N_frag2:�_<anonymous-tag>.?AU<anonymous-tag>@@�_ _�2
�_frag1
�_frag2
 (frag3:�_0<anonymous-tag>.?AU<anonymous-tag>@@�_ _�2
m_frag1
�_frag2
q_@frag3>�_P__midl_frag240_t.?AU__midl_frag240_t@@���_ _�2
ufrag1
�_frag2
&_ frag3>�_(__midl_frag241_t.?AU__midl_frag241_t@@���_ _�"
m_frag1
q_frag2>�_ __midl_frag244_t.?AU__midl_frag244_t@@���_ _�2
ufrag1
�_frag2
&_ frag3>�_(__midl_frag245_t.?AU__midl_frag245_t@@���_ _�
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9
_�frag10���
_�frag11���
_�frag12���
_�frag13���
_�frag14���
_�frag15���
_�frag16���>�___midl_frag253_t.?AU__midl_frag253_t@@���_ _�"
�_frag1
N_frag2:�_<anonymous-tag>.?AU<anonymous-tag>@@�_ _�2
�_frag1
�_frag2
 (frag3:�_0<anonymous-tag>.?AU<anonymous-tag>@@�_ _�2
m_frag1
�_frag2
q_@frag3>�_P__midl_frag265_t.?AU__midl_frag265_t@@���_ _�f�_NDR64_BOGUS_STRUCTURE_HEADER_FORMAT.?AU_NDR64_BOGUS_STRUCTURE_HEADER_FORMAT@@��J�_NDR64_STRUCTURE_FLAGS.?AU_NDR64_STRUCTURE_FLAGS@@��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ���
�_HasPointerInfo���
�_HasMemberInfo
�_HasConfArray�
�_HasOrigPointerInfo���
�_HasOrigMemberInfo
�_Reserved1
�_Reserved2
�_Reserved3J�__NDR64_STRUCTURE_FLAGS.?AU_NDR64_STRUCTURE_FLAGS@@���_�^C�
 FormatCode���
 Alignment
�_Flags
 Reserve��
uMemorySize���
_OriginalMemberLayout�
_OriginalPointerLayout
_PointerLayoutf�_ _NDR64_BOGUS_STRUCTURE_HEADER_FORMAT.?AU_NDR64_BOGUS_STRUCTURE_HEADER_FORMAT@@���_�^bR�_NDR64_SIMPLE_MEMBER_FORMAT.?AU_NDR64_SIMPLE_MEMBER_FORMAT@@V
 FormatCode���
 Reserved1
!Reserved2
uReserved3R`_NDR64_SIMPLE_MEMBER_FORMAT.?AU_NDR64_SIMPLE_MEMBER_FORMAT@@`�^F�_NDR64_MEMPAD_FORMAT.?AU_NDR64_MEMPAD_FORMAT@@��V
 FormatCode���
 Reserve1�
!MemPad���
uReserved2F`_NDR64_MEMPAD_FORMAT.?AU_NDR64_MEMPAD_FORMAT@@��`�^�R
`frag1
`frag2
`frag3
`frag4
` frag5:	`(<anonymous-tag>.?AU<anonymous-tag>@@
` _3"
�_frag1

` frag2:`H__midl_frag5_t.?AU__midl_frag5_t@@��
` _0
�^frag1
�^frag2
_ frag3
_0frag4
_@frag5
_Pfrag6
_`frag7
_pfrag8
_�frag9
_�frag10���
_�frag11���
_�frag12���
_�frag13���
_�frag14���
_�frag15���
_�frag16���>`__midl_frag276_t.?AU__midl_frag276_t@@��` _nZ�_NDR64_STRUCTURE_HEADER_FORMAT.?AU_NDR64_STRUCTURE_HEADER_FORMAT@@��j
 FormatCode���
 Alignment
�_Flags
 Reserve��
uMemorySize���Z`_NDR64_STRUCTURE_HEADER_FORMAT.?AU_NDR64_STRUCTURE_HEADER_FORMAT@@��`�^O
`frag1>`__midl_frag256_t.?AU__midl_frag256_t@@��` _�b�_NDR64_CONF_STRUCTURE_HEADER_FORMAT.?AU_NDR64_CONF_STRUCTURE_HEADER_FORMAT@@�
 FormatCode���
 Alignment
�_Flags
 Reserve��
uMemorySize���
_ArrayDescription�b`_NDR64_CONF_STRUCTURE_HEADER_FORMAT.?AU_NDR64_CONF_STRUCTURE_HEADER_FORMAT@@`�^X
`frag1:`__midl_frag92_t.?AU__midl_frag92_t@@` _�"
�_frag1
N_frag2: `<anonymous-tag>.?AU<anonymous-tag>@@!` _>2
�_frag1
!`frag2
 (frag3:#`0<anonymous-tag>.?AU<anonymous-tag>@@$` _;2
m_frag1
$`frag2
q_@frag3>&`P__midl_frag287_t.?AU__midl_frag287_t@@��'` _82
ufrag1
�_frag2
&_ frag3>)`(__midl_frag288_t.?AU__midl_frag288_t@@��*` _.R
`frag1
`frag2
`frag3
`frag4
` frag5:,`(<anonymous-tag>.?AU<anonymous-tag>@@-` _\"
�_frag1
-` frag2>/`H__midl_frag113_t.?AU__midl_frag113_t@@��0` _Y"
m_frag1
q_frag2>2` __midl_frag291_t.?AU__midl_frag291_t@@��3` _2
ufrag1
�_frag2
&_ frag3>5`(__midl_frag292_t.?AU__midl_frag292_t@@��6` _
 ��
 ��
 ��FC_EXPR_STARTFC_EXPR_ILLEGAL��FC_EXPR_CONST32��FC_EXPR_CONST64��FC_EXPR_VAR��FC_EXPR_OPER�FC_EXPR_NOOP�FC_EXPR_END��6t;`_tagEXPR_TOKEN.?AW4_tagEXPR_TOKEN@@���<`�^[#6��# � #��&
Pad��
@`Format���VA`�_elf_MIDL_TYPE_FORMAT_STRING.?AU_elf_MIDL_TYPE_FORMAT_STRING@@��B` _ #u�&
Pad��
D`Format���VE`x_elf_MIDL_PROC_FORMAT_STRING.?AU_elf_MIDL_PROC_FORMAT_STRING@@��F` _$
���
���
���
����-FC -MT -c -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -Zo -std:c++17 -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973��
L`FM` -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -XH`I`J`K`N`�� ���8���)nCSy�����ﺥd^z?��l�?a��/�1y~3`W��ߍd��1bm���:B�X���o���@�����C┫g]ɒ*Υݲ	��|@>�3od	��q���D,�)��'^Fb�K�xe�p�'�g�$pT�\On�����!u�����/���)+p4�X1y~3`Wpd��<����H-�QW����C┫g]ɒ*Υ������C�}��U���W�Bc�A��>�3od	��mg��Q l��dP-I������H-�QW�E�"F�v��!u��Ϊ�j�>�3od	��拹Fxw����C┹�H-�QW��r���#�NBCn�Ƨ|���Bc�A��Jd���2S0�?�cPeI������H-�QW��rf���U��W�0�I������H-�QW�����h�r���1�ն�
U������~Q���1<�6�+�8��Q,_Y\cE�g��҈����C┹�H-�QW���i/+=E��L��I�����6�+�8��Q,_Y\cE�M*ؓ$�:k�6�+�8��+=E��L��%�1í�u���{�X�I����G;Q�:�30��V�lI����1�qT�����6�+�8���6�+�8��Q,_Y\cE�qt0
^ӘM*ؓ$�:k�6�+�8�����C┹�H-�QW�s> ����U�]�Z�-�P�P#G�Bc�A���{����
���E	nC�fhz��b�w��磸��[fA&�@
��Up���z����eg4k 2|���S5�,���^�I#J�����G�9��*�Nu�}�4F�8 ������}��+1؆��r:�ۻ9Q�Uy��W���t�!��O[���Yx����r�b�֧��J��21��j�ηeAS``@b�e����c���v�kR�12_!�?ˤ��1�p�?�
�)�R_~mg����b����fl��}�&�F>����0�o�e�}t�й���5��P��}���9�p�v%<�K�h�?�n?V`i+�<g�՘�5��H1BwѰ��2F��ƺ�l70��8�ǘ3�P�KA��	FQ���P�/r��ɴ����,�a�v�N��vh
ZHK�o㯭��~�Հ.�ѣ7?���yK�֠g�_�QCި�a���ژ�V���H`�t�u¸�93SR�ؖ�[��s�պOl�m��L��o�ku޴��1r���	�j1+i��.��9:��Z��M�i��M�'��Z��M�i��M�'�5�
X%�#���p�k
�l���K����l�Oߨ�e�Q.�>�i5�c_}4��e�Q.�>)���5�
X%�#`ޗ�Θ)����&7�ہ���We���Ɉ�*�1��l�O߷���&7��Yd�����&7��Yd���e�Q.�>�mFt��e�Q.�>�mFt5�
X%�#`ޗ�Θ)����&7�ہ���We���Ɉ�*�1��l�O߷���&7��Yd�����&7��Yd���e�Q.�>)�����e�Q.�>�mFt��e�Q.�>�mFt��e�Q.�>�mFt��e�Q.�>��ݤ���dSS�;�'d��d;�ю�k2���(^i*\I�.5Ҧ�z�{�w�ɲt�
<��T������U��s]vJ� V��,���_B@f���:��Br
�NV~R�s5%j����!XiCJf���bQ�|a�Y�1���Z҆�5C�{1e!# (�a��%�J�+�l���q:
�]H-�M�B��^o-�b�?�@�|���@{�⃫��kV�?G�P�K����
T��6�%nhx�[w��ؓ;R�JG��*Q��7�ҫ�X�a����kr^� Ǿx�
M�ڟӫ5ԅĎ]�S�{�/�˳4U�k����7p�>"B�tH��}�3Y�d��O���c��
C��k�"0�o��z���CM�<I:J��V8S�
c,�G(��T�H�m���sAZe���cW$�Q)�b�ٕҜc��|mu���a�f�����l�C��7 �f[Ŭ�F,�	���J���=].}���℻sa�7&y�G�O�.nl8(;��d�.x��-Ϟ!8���Z{e��jn��`1���"�.!�0\L߃���:G{�EŶ����V��2К�+�%�z4�ʺ7C�3@J�hF��OV���t�	̇R�e�{�`�Q����=��0�|P/x���]�������$���ZϜ�P�~�Dq:�wI�Z{vlA9�HS�I�b�eAj���Gt3�}лRi��%%�*�;����@��K��;(���I$6~���.li@�+k$+*�s�eG�(|=�Z��\�}f�?���^��   -INCLUDE:__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi @comp.idk��@feat.00�I���.debug$Sxe.rdata����Re ' .rdata�B��Le:.rdata�eL.rdataed.rdataP��v/eq.rdata W�D}e~.rdata ���e�.rdata	��f_e�	.rdata
��/e�
.rdatarԒ1e�.rdataPZ[�e�.rdata
@�T�e�
.rdataC�e�.rdata�K�e�.rdataP��=e�.rdata`�,e.rdata�q���e.rdata��Ne".rdata��Qe0.rdata �?qEe>.rdata]'�eL.rdataP��v/eZ.rdata��ˎei.rdata ��b+ex.rdatarԒ1e�.rdataPZ[�e�.rdata����e�.rdata�o�Se�.rdatak&�ve�.rdataC�e�.rdata D�T�e� .rdata!���e�!.rdata"}{?e�".rdata# ��b+e#.rdata$(�S�e$.rdata%��Qe,%.rdata&`Ye;&.rdata'C�eJ'.rdata(Q�!�eY(.rdata)rԒ1eh).rdata* ��b+ew*.rdata+0�hyZe�+.rdata,@y�<3e�,.rdata-`���e�-.rdata.k&�ve�..rdata/� �je�/.rdata0f�>�e�0.rdata1}{?e�1.rdata2 ��b+e�2.rdata3(JJ�e�3.rdata4��3�Je
4.rdata5}{?e5.rdata6 ��b+e+6.rdata7(0���e:7.rdata8�	�eI8.rdata9���ReX9.rdata:@}gV&eg:.rdata; ��0�ev;.rdata<��W�e�<.rdata=P��e�=.rdata>(��e�>.rdata?rԒ1e�?.rdata@ ��b+e�@.rdataA(=�U{e�A.rdataB�z��e�B.rdataC}{?e�C.rdataD��W�e�D.rdataEP��eE.rdataFH>tp�eF.rdataG��W�e(G.rdataH�z��e7H.rdataI�teFI.rdataJa�qeUJ.rdataK}{?edK.rdataLh?B|esL.rdataM��8%e�M.rdataN}{?e�N.rdataO�exe�O.rdataP��W�e�P.rdataQ��W�e�Q.rdataRP��e�R.rdataS(�kT�e�S.rdataTH>tp�e�T.rdataU��W�e�U.rdataVrԒ1eV.rdataW ��b+eW.rdataX(���e&X.rdataYd�e5Y.rdataZ�meDZ.rdata[k&�veS[.rdata\��jpeb\.rdata]6q�o�eq]� � � � .rdata^ e�^.rdata_�υ	�e_.rdata`x��e`8 .bssaeGa.databeeb.rdatac0�Xe}c.rdatad`��2e�d.rdatae57�e�e.rdatafc�s�e�f.gfids$yg�!q�e�g.gfids$yh��9^e�h.text$mni$o1��e.debug$Sj,ie.text$mnk$����e.debug$Sl,ke.text$mnm)���e.debug$Sn\
me.text$mno$��,e.debug$Sp,oe.text$mnq"��M*e.debug$Sr,qe.text$mns�3�e.debug$St�se.text$mnu	�b�e.debug$Sv�ue.text$mnw*��e.debug$Sx�we.text$mny���Ae.debug$Sz�ye.text$mn{7i M�e.debug$S|�{e.text$mn}$�͖e.debug$S~4}e.text$mn$*�CWe.debug$S�4e.text$mn�7�u�e.debug$S���e.text$mn�7��\e.debug$S���e.text$mn�Ev�e.debug$S�D�e.text$mn�E�,;�e.debug$S�D�e.text$mn�R���|e.debug$S���e.text$mn�R��e.debug$S���e.text$mn�)Є�e.debug$S�x
�e.text$mn�E��e.debug$S�P�e.text$mn�ET��;e.debug$S�P�e.text$mn���T]e.debug$S�\ �e.text$mn���1&ne.debug$S��"�e.text$mn��c��e.debug$S�$�e.text$mn����u�e.debug$S�$�e.text$mn������e.debug$S�\ �e.text$mn�(7�Te.debug$S�d
�e�� �� � )y 5{ K� bu {� �� �� �� �� �� �i �o �� � � (� A� Mm ^ o} �w �s �k �q $LN4�$LN4�$LN4�$LN4{$LN4�$LN4�$LN4�$LN4�$LN4�$LN4�$LN4�$LN4i$LN4o$LN4�$LN4�$LN4�$LN4�$LN4�$LN4m$LN4$LN4}$LN4k$LN4q.xdata���	��e��.pdata� �ms�e��.xdata���	��e��.pdata� �ms�e	�.xdata��?��e0	�.pdata�U,o�eR	�.xdata���j�{es	�.pdata�dZ�{e�	�.xdata�1�7�e�	�.pdata��y�*�e�	�.xdata�1�7�e�	�.pdata�}y9�e

�.xdata��?��e(
�.pdata���|ÓeA
�.xdata�\z��eY
�.pdata����em
�.xdata��7��e�
�.pdata�dZ��e�
�.xdata�\z��e�
�.pdata���}a�e�
�.xdata�\z��e�
�.pdata���}a�e�
�.xdata�1�7ie�.pdata��l<}ie(�.xdata�1�7oe>�.pdata��l<}oeT�.xdata��?��ei�.pdata���|Ûe��.xdata�\z��e��.pdata����e��.xdata��7��e��.pdata�dZ��e��.xdata�\z��e��.pdata���}a�e�.xdata�\z��e+�.pdata���}a�e?�.xdata�1�7meR�.pdata�}y9�mek�.xdata�1�7e��.pdata��l<}e��.xdata�1�7}e��.pdata��l<}}e��.xdata�1�7ke��.pdata��l<}ke
�.xdata�1�7qe
�.pdata�+eS�qe.
�.debug$S�0e.debug$S�,e.debug$S�4e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(	e.debug$S�(
e.debug$S�(e.debug$S�(e.debug$S�(
e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�(e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�,e.debug$S�, e.debug$S�,!e.debug$S�,"e.debug$S�,#e.debug$S�,$e.debug$S�,%e.debug$S�,&e.debug$S�,'e.debug$S�,(e.debug$S�,)e.debug$S�,*e.debug$S�,+e.debug$S�,,e.debug$S�,-e.debug$S�,.e.debug$S�,/e.debug$S�,0e.debug$S�,1e.debug$S�,2e.debug$S�,3e.debug$S�,4e.debug$S,5e.debug$S,6e.debug$S,7e.debug$S,8e.debug$S,9e.debug$S,:e.debug$S,;e.debug$S,<e.debug$S,=e.debug$S	,>e.debug$S
,?e.debug$S,@e.debug$S,Ae.debug$S
,Be.debug$S,Ce.debug$S,De.debug$S,Ee.debug$S(Fe.debug$S,Ge.debug$S,He.debug$S,Ie.debug$S,Je.debug$S,Ke.debug$S,Le.debug$S,Me.debug$S,Ne.debug$S(Oe.debug$S,Pe.debug$S,Qe.debug$S,Re.debug$S,Se.debug$S,Te.debug$S ,Ue.debug$S!,Ve.debug$S",We.debug$S#,Xe.debug$S$,Ye.debug$S%,Ze.debug$S&,[e.debug$S',\e.debug$S(<]e.debug$S),^e.debug$S*8_e.debug$S+8`e.debug$S,4be.debug$S-0ce.debug$S.8de.debug$S/4ee.debug$S00fe.debug$T1TQe.chks642�	eC
eventlog_SyntaxInfoMIDL_user_freeMIDL_user_allocateeventlog_StubDesceventlog_Ndr64ProcTable__midl_frag1__midl_frag2__midl_frag7__midl_frag8__midl_frag9__midl_frag6__midl_frag10__midl_frag12__midl_frag20__midl_frag21__midl_frag22__midl_frag29__midl_frag34__midl_frag49__midl_frag59__midl_frag82__midl_frag93__midl_frag94__midl_frag110__midl_frag115__midl_frag114__midl_frag117__midl_frag119__midl_frag133__midl_frag143__midl_frag144__midl_frag149__midl_frag150__midl_frag152__midl_frag157__midl_frag158__midl_frag159__midl_frag166__midl_frag190__midl_frag193__midl_frag195__midl_frag196__midl_frag197__midl_frag198__midl_frag201__midl_frag205__midl_frag206__midl_frag207__midl_frag208__midl_frag209__midl_frag210__midl_frag211__midl_frag214__midl_frag217__midl_frag218__midl_frag219__midl_frag221__midl_frag222__midl_frag225__midl_frag228__midl_frag239__midl_frag240__midl_frag241__midl_frag243__midl_frag244__midl_frag245__midl_frag253__midl_frag262__midl_frag264__midl_frag265__midl_frag5__midl_frag267__midl_frag276__midl_frag277__midl_frag256__midl_frag278__midl_frag282__midl_frag283__midl_frag284__midl_frag92__midl_frag285__midl_frag286__midl_frag287__midl_frag288__midl_frag113__midl_frag289__midl_frag290__midl_frag291__midl_frag292__midl_frag293__midl_frag294__midl_frag295__midl_frag297eventlog_FormatStringOffsetTableEVENTLOG_HANDLE_A_unbindEVENTLOG_HANDLE_A_bindEVENTLOG_HANDLE_W_unbindEVENTLOG_HANDLE_W_bindBindingRoutineself__MIDL_TypeFormatStringelf__MIDL_ProcFormatStringNdrClientCall3eventlog__MIDL_AutoBindHandleeventlog_ClientIfHandleeventlog_ProxyInfoeventlog___RpcClientInterface_NDR64_RpcTransferSyntax_RpcTransferSyntax__guard_fids__ElfrReportEventExAElfrReportEventExWElfrReportEventAndSourceWElfrFlushELElfrGetLogInformationElfrWriteClusterEventsElfrDeregisterClusterSvcElfrRegisterClusterSvcElfrReportEventAElfrReadELAElfrOpenBELAElfrRegisterEventSourceAElfrOpenELAElfrBackupELFAElfrClearELFAElfrReportEventWElfrReadELWElfrOpenBELWElfrRegisterEventSourceWElfrOpenELWElfrChangeNotifyElfrOldestRecordElfrNumberOfRecordsElfrDeregisterEventSourceElfrCloseELElfrBackupELFWElfrClearELFW$unwind$ElfrReportEventExA$pdata$ElfrReportEventExA$unwind$ElfrReportEventExW$pdata$ElfrReportEventExW$unwind$ElfrReportEventAndSourceW$pdata$ElfrReportEventAndSourceW$unwind$ElfrGetLogInformation$pdata$ElfrGetLogInformation$unwind$ElfrWriteClusterEvents$pdata$ElfrWriteClusterEvents$unwind$ElfrRegisterClusterSvc$pdata$ElfrRegisterClusterSvc$unwind$ElfrReportEventA$pdata$ElfrReportEventA$unwind$ElfrReadELA$pdata$ElfrReadELA$unwind$ElfrOpenBELA$pdata$ElfrOpenBELA$unwind$ElfrRegisterEventSourceA$pdata$ElfrRegisterEventSourceA$unwind$ElfrOpenELA$pdata$ElfrOpenELA$unwind$ElfrBackupELFA$pdata$ElfrBackupELFA$unwind$ElfrClearELFA$pdata$ElfrClearELFA$unwind$ElfrReportEventW$pdata$ElfrReportEventW$unwind$ElfrReadELW$pdata$ElfrReadELW$unwind$ElfrOpenBELW$pdata$ElfrOpenBELW$unwind$ElfrRegisterEventSourceW$pdata$ElfrRegisterEventSourceW$unwind$ElfrOpenELW$pdata$ElfrOpenELW$unwind$ElfrChangeNotify$pdata$ElfrChangeNotify$unwind$ElfrOldestRecord$pdata$ElfrOldestRecord$unwind$ElfrNumberOfRecords$pdata$ElfrNumberOfRecords$unwind$ElfrBackupELFW$pdata$ElfrBackupELFW$unwind$ElfrClearELFW$pdata$ElfrClearELFW/308            1606894316              100666  1574335   `
d�
�B�_`!.debug$S���@B.rdata,�@0@.rdata0�@0@.rdata6�@0@.rdata:�J�@@@.rdataT�d�@@@.rdatan�~�@@@.debug$S4����@B.debug$S@Ѝ�@B.debug$S8$�\�@B.debug$P|qp�@B.chks64h�
.drectve\
��Rd:\os\obj\amd64fre\onecore\admin\wmi\events\advapi\objfre\amd64\precomp.obj:<��kk
Microsoft (R) Optimizing Compiler�"�5;ProcThreadAttributeSafeOpenPromptOriginClaim)DAuditEventDirectoryServiceAccessTSmrGcActionStop"|ProcessBreakOnTermination�%VrfPlatformModeTest#�ImageMitigationOptionsMask)�DynamicTickVetoClockUpdateFailed |,ProcessImageFileMappingTP_LOG_LEVEL_INFO4�DPFLTR_REFS_IDAProcessWorkingSetSwapEPowerActionSleep#zPoCsDeviceNotificationWiFi�PowerSystemMaximum&��SystemSingleModuleInformation!�EnlistmentCrmInformation(�MonitorRequestReasonIdleTimeout	PerfCSwapLite4�DPFLTR_MPIO_IDProfileTotalIssues�3ReservedForDVRF51&2JobObjectReserved2Information0=InternalWakeSourcePredictedUserPresence"CSSystemBatteryStatePrecise-F9FileLinkInformationBypassAccessCheck!VRtlPathTypeDriveAbsolute#YPlugPlayControlStartDevice F.FileHardLinkInformation&`� AccessReasonFromPrivilegegCOR_VERSION_MAJORCXThermalStandby�KeyBasicInformation �LearningModeLogLevelMax �VrfStandardDDIRuleClassCProcessorInformation%)DISPLAYCONFIG_TOPOLOGY_CLONEvNtProductWinNtfFpFormatI64,YPlugPlayControlTargetDeviceRelation{PsProtectedSignerLsa�TokenSessionReference�FpCodeSquareRoot�SystemVaTypePagedPool�GEO_ISO2+�VRF_TRIAGE_CONTEXT_FLIGHT_TARGETEDSecurityAppliance,MemExtendedParameterPartitionHandle#PnpQueryTransportRelationsCSystemVideoStateFHFileLinkInformationEx,�PsEnergyComponentTypeWindowResource+�EtwCoverageSamplerQueryInformation1�FilterBootOptionOperationOpenSystemStore2]SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED'�HSystemWatchdogTimerInformation"�FileFsObjectIdInformation/�JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS#�MaxProcessMitigationPolicy'�EtwQueryPartitionInformationV2"�MmEtwWorkingSetTypeSystem)FeatureConfigurationPriorityUserTypeAAuditDeleteObject%�
PsEnergyComponentTypeAudioIn$0TransactionOutcomeCommitted)3LdrModulesWaitingForDependenciesEToleranceIntervalShortKDWinHighLabelSidNTpTraceThreadPriority&2JobObjectReserved9Information�MonitorRequestReasonDP2��SystemDifRemovePluginVerificationOnDriver�FileNameInfo CGSuspendResumeInvocation2�DISPLAYCONFIG_DEVICE_INFO_GET_SOURCE_NAME$�ACTCTX_RUN_LEVEL_AS_INVOKER �WMI_GET_SINGLE_INSTANCE$KkWinAccountProtectedUsersSid
UWOP_PUSH_MACHFRAME%�wSystemPagedPoolInformationEx �MonitorRequestReasonLid.|OProcessWin32kSyscallFilterInformationoSystemPowerState!�ThreadActualBasePriority(�ResourceManagerBasicInformation&�SubsystemInformationTypeWin32$�RtlSparseBitmapOperationAny |?ProcessFaultInformation�AclSizeInformation)�EtwBufferStatePendingCompression4JDPFLTR_DMSERVER_ID20MaxJobObjectInfoClassASERVERSILO_TERMINATEDNMaxTpTraceType^IoPriorityCriticalqIoSessionStateCreated&�VrfPowerDelayFuzzingRuleClass�ViewUnmap�PowerDeviceMaximum,�CrossProcOperationMemoryDirtyNotify4�DPFLTR_LSASS_ID�BootEntropySourceTpm'�SectionOriginalBaseInformation4&DPFLTR_SCCLIENT_ID�
MaxKeyInfoClass"��SystemRootSiloInformation)WorkerFactoryCallbackIndependent&�ProcessSystemCallFilterPolicy%IMDT_UNAVAILABLE"`��AccessReasonFilterAce FFileStandardInformation9aPS_MITIGATION_OPTION_MODULE_TAMPERING_PROTECTION!2JobObjectWakeInformation�WMI_DISABLE_COLLECTION<GEOCLASS_REGION3KWWinCapabilityPrivateNetworkClientServerSid"0TransactionOutcomeAbortedgMutantBasicInformation�IrqPriorityLowTypeCfFpFormatString�7SystemNumaProcessorMap$�MaxSubsystemInformationType {PsProtectedSignerWinTcb �FileIdExtdDirectoryInfo2��SystemCodeIntegrityCertificateInformation(2JobObjectClearPeakJobMemoryUsed aPS_MITIGATION_OPTION_NX�ViewShare#�PerfInfoDebugEventReceived�TokenLogonSid'KUWinCapabilityInternetClientSid*��SystemSecureBootPolicyInformation^IoPriorityVeryLow �BackTraceDatabaseCreate7
TransactionManagerOldestTransactionInformation�$FpCodeYn�ThreadAmILastThread<TableInsertAsRightOSidTypeAlias'REventProviderUseDescriptorType#oThreadWorkloadClassDefaultrMaxHardwareCounterTypeuDEPPolicyOptOutxOptionOkNoWait$�SharedVirtualDisksSupported!@PsAttributeGroupAffinity:�	DISPLAYCONFIG_DEVICE_INFO_GET_ADVANCED_COLOR_INFOfFpFormatI16 VCOPYFILE2_PROGRESS_STOPF;FileIdInformation'�ManageHotPatchLoadPatchForUserC0GroupPark�PNP_VetoTypeUnknown�SecurityDelegation$VCOPYFILE2_PROGRESS_CONTINUE"zPoCsDeviceNotificationMbn4DPFLTR_KBDCLASS_ID��MaxSystemInfoClassLogExceptionDispatch4!DPFLTR_FASTFAT_IDWnfDataScopeSystem.�DISPLAYCONFIG_COLOR_ENCODING_YCBCR422�FirmwareTypeMaxqIoSessionStateLoggedOn�TokenLinkedTokenTypeB)SharedVirtualDiskHandleStateNoneSysDbgBreakPointKBWinLowLabelSid�FileFullDirectoryInfo4DPFLTR_SCSIPORT_IDUWOP_ALLOC_SMALLSysDbgReadControlSpace+�DirectoryNotifyExtendedInformation$�TransactionBasicInformation�WdInfoResetTimer�LocationTypeFileSystemSysDbgQueryVersion'2)JobObjectReserved19Information(uFileStorageTierClassUnspecified0	EventTraceHeapSummaryTracingInformationSysDbgReadMsrSYSTEM_HANDLE_EVENT �MarshalDirectionMarshal%FFileFullDirectoryInformation �MemoryFlushModifiedList�KeyTrustInformation*�RtlResTypeDiskWriteConstraintTier  DEBUG_CONTROL_SPACE_PCR)
 ORIENTATION_PREFERENCE_LANDSCAPE �BackTraceDatabaseDeleteSysDbgWriteIoSpace�,ReservedForDVRF443aPS_MITIGATION_OPTION_FORCE_RELOCATE_IMAGES�7ReservedForDVRF55KWinCreatorOwnerSid� MaxProcessTlsOperation� UmsThreadAffinity%� SecureSettingValueTypeBinary|FProcessInPrivate)`�AccessReasonNotGrantedByCape48DPFLTR_MCHGR_ID*g�COMIMAGE_FLAGS_32BITPREFERRED4QDPFLTR_IHVSTREAMING_ID)�ZSystemBootEnvironmentInformation1
 ORIENTATION_PREFERENCE_LANDSCAPE_FLIPPEDs!STUB_UNMARSHAL#v!VmCfgCallTargetInformation,�?SystemEmulationProcessorInformation�FpCodeModf/�CrossProcOperationMemoryFreePostNotify�!PowerStateSleeping25�JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME SYSTEM_HANDLE_SEMAPHORE+�PsEnergyComponentTypeTrackingState$�[SystemHypervisorInformation#2
JobObjectJobSetInformation+�EtwCoverageSamplerBloomInformation��SystemFlushInformation%�AlpcServerSessionInformation)"FpRoundMinusInfinity*2'JobObjectServerSiloUserSharedData/`�AccessReasonNotGrantedByParentCape#�ExceptionContinueExecution'2(JobObjectReserved18Information R"EtwProviderTraitTypeMax!U"FEEDBACK_TOUCH_DOUBLETAP2|fProcessDynamicEnforcedCetCompatibleRanges�"HiberFileBucket1GBPRpcFailedLbsMessages�PowerDeviceD2%|ProcessForegroundInformation"�"WdActionQueryTimeoutValue�GEO_FRIENDLYNAME#�FeatureEnabledStateEnabled3LdrModulesCondensed&EventTraceSpinlockInformationKEWinSystemLabelSid!|2ProcessWindowInformationKqWinAccountKeyAdminsSid4LDPFLTR_INFINIBAND_ID"SysDbgClearUmBreakPid%�WSystemSpecialPoolInformation4oDPFLTR_WHEA_ID |1ProcessOwnerInformation�VrfHardwareRuleClass F$FileTrackingInformation�FpCompareGreater1��SystemCodeIntegrityPolicyFullInformation$KWinBuiltinAdministratorsSid%F#DISPLAYCONFIG_SCALING_CUSTOM#I#	ProcessInformationClassMax(HSE_VALIDATE_MAPPING_HEADER_ONLY{PsProtectedSignerApp#r#
DeviceInstanceRemovalEvent'�$SystemContextSwitchInformation#`��AccessReasonTrustLabel"|-ProcessAffinityUpdateMode�TraceVersionInfo+�#QUERY_FILE_LAYOUT_NUM_FILTER_TYPES�#PsMaxStdHandleStates'�#SeImageSignaturePackageCatalog(�TraceSampledProfileIntervalInfo�#IMPORT_OBJECT_DATA!�ProcessDynamicCodePolicy4|DPFLTR_USBSTOR_ID(FeatureConfigurationPriorityMax!�#WorkerFactoryIdleTimeout�#ResponseOk�#DCDC_DISABLE_RELAYOUTgMAX_CLASS_NAME)$DISPLAYCONFIG_ROTATION_ROTATE180�FileStorageInfo|QProcessWakeInformation'�`SystemPrefetchPatchInformation!C	AdministratorPowerPolicy'T$HighMemoryResourceNotification&g$RtlRXactOperationSetAttributeSYSTEM_HANDLE_PIPE�"WdActionStopTimer)�TransactionDTCPrivateInformation1�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_MIRACASTWaitNotification#�$InvalidAppContainerSidTypeTSmrGcActionPause)|^ProcessSecurityDomainInformation�!PowerStateSleeping1*F*FileIoStatusBlockRangeInformation�$PsMaxWakeReasons%2JobObjectBasicUIRestrictions$2JobObjectGroupInformationEx�$ErrorRecoverable#�1ThreadPowerThrottlingState-%PdataRefToFullXdata�TracePmcEventListInfo%�EtwQueryPartitionInformationC
ProcessorStateHandler2#�ThreadDescriptorTableEntry$F6FileStandardLinkInformation+1"��HeapDetailedFailureInformation*�
MonitorRequestReasonSessionUnlockVRtlPathTypeRooted/>WOW64_FUNCTION_CPU_TURBO_THUNK_CONTROL�/ThreadAttachContainer'2*JobObjectReserved20Information SymbolicLinkAccessMask&MaxKeySetInfoClass$F!FileReparsePointInformation(
 ORIENTATION_PREFERENCE_PORTRAIT!�"HiberFileBucketUnlimited|$ProcessCookie�4ReservedForDVRF52�EtwBufferStateMaximum� FpCodeTanZ&LdrpAnyDevice2bit'2%JobObjectReserved15Information@PsAttributeJobListOSidTypeWellKnownGroup#SysDbgEnableKernelDebugger$|ProcessDefaultHardErrorMode(gCOMIMAGE_FLAGS_STRONGNAMESIGNED$�TraceProviderBinaryTracking�FpCodeCosLogExceptionHandler"�
ProcessChildProcessPolicyUWOP_SPARE_CODEs'FileIdType,�'LoadReasonStaticForwarderDependencySysDbgSetSpecialCall gIMAGE_COR_MIH_METHODRVA*�'ActivationContextBasicInformation�PNP_VetoDevice SysDbgQuerySpecialCalls-ACsvControlMarkHandleLocalVolumeMount�'PMETypeMax/MemExtendedParameterUserPhysicalHandle.�)SystemVerifierRemoveDriverInformation.aPS_MITIGATION_OPTION_ROP_CALLER_CHECK�PoHot�"VMEConfiguration4DPFLTR_VIDEOPRT_ID4�DPFLTR_XSAVE_ID4NDPFLTR_IHVVIDEO_ID(UserNotPresentOSidTypeInvalid�
WMI_CAPTURE_STATE!F(FileShortNameInformation2aPS_MITIGATION_OPTION_STRICT_HANDLE_CHECKS#�.SystemTimeSlipNotification/�#QUERY_FILE_LAYOUT_FILTER_TYPE_CLUSTERS|LProcessEnergyValues�oSystemAitSamplingValue"VCOPYFILE2_PROGRESS_CANCEL+�MonitorRequestReasonScMonitorpower4DPFLTR_NTFS_ID+�DSystemSessionMappedViewInformation!|XProcessUptimeInformation�/ReservedForDVRF47$� SecureSettingValueTypeUlong)K^WinCapabilityRemovableStorageSid&�(PsProtectedTypeProtectedLight#�!VmOfferPriorityBelowNormal#`�AccessReasonAllowedAce4rDPFLTR_TPM_ID�!PowerStateShutdownOff �BootEntropySourceRdrand)�TransactionEnlistmentInformation�!PowerStateSleeping34)IoSessionEventLogoff+7)SystemMemoryPartitionCombineMemory�GEO_NATION#{PsProtectedSignerWinSystem!�PsEnergyComponentTypeCpu"|ProcessSessionInformation�!FpCodeTanh&2,JobObjectContainerTelemetryId!K-WinAccountControllersSid*�FeatureVariantPayloadKindExternalEPowerActionNoneSYSTEM_HANDLE_PROCESS�)DeviceWakeSourceType!�PsEnergyComponentTypeMax9�DISPLAYCONFIG_DEVICE_INFO_SET_TARGET_PERSISTENCE�FileCompressionInfo%�ACTCTX_RUN_LEVEL_UNSPECIFIED �PNP_VetoOutstandingOpen(	EtwNotificationTypeCredentialUI>WOW64_FUNCTION_MAXIMUM"@PsAttributeIdealProcessorU(MandatoryLevelCount,�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DVI(�@SystemExtendedHandleInformationf
FpFormatCompare!�SystemPixelFormatUnknown-�MonitorRequestReasonScreenOffRequestSYSTEM_HANDLE_JOB%�ImageStrictHandleCheckPolicy �SectionBasicInformation�PsCreateFailExeFormat-�'ActivationContextDetailedInformation6*
EtwWdiScenarioCode$B*MaxServiceRegistryStateType)'COPYFILE2_CALLBACK_CHUNK_STARTED44DPFLTR_FUSION_ID1�0MonitorRequestReasonDisplayRequiredUnDim#|RProcessEnergyTrackingState�1ReservedForDVRF49�KeyFullInformationyJournalRenameKey |DProcessSubsystemProcess0�*JOBOBJECT_IO_ATTRIBUTION_CONTROL_ENABLE"�*PoSleepDisableReasonVideo4tDPFLTR_ENVIRON_IDF4FileUnusedInformation#@PsAttributeProtectionLevelU"FEEDBACK_PEN_DOUBLETAP �VrfVMSwitchingRuleClass&C[QueryPotentialDripsConstraint%�MaximumFileInfoByHandleClass'�*CmResourceShareDriverExclusiver#DeviceInstallEvent+�(SystemVerifierAddDriverInformation!AuditOpenObjectForDeleteUWOP_SET_FPREGSYSTEM_HANDLE_REG_KEY!+ShutdownReboot�FileEndOfFileInfo;+GetFileExInfoStandard&�+SystemLegacyDriverInformation"KwWinBuiltinDeviceOwnersSid0�CrossProcOperationMemoryAllocPostNotifyCLLastResumePerformance1EventTraceProfileSourceRemoveInformation<TableEmptyTree4{DPFLTR_APPCOMPAT_ID/
FeatureConfigurationPriorityUserPolicy!@PsAttributeParentProcess�ThreadWow64Context�!VrfWDFRuleClass�+OS_DEPLOYMENT_STANDARD(CTraceApplicationPowerMessageEnd/2!JobObjectNotificationLimitInformation2KCWinMediumLabelSid#�#WorkerFactoryThreadMinimum uFileStorageTierClassMax�#PsNeverDuplicate#VRtlPathTypeRootLocalDeviceP	RpcFailedLbsDecisions+F/FileProcessIdsUsingFileInformation|ProcessDebugFlags�+IMO_UNAVAILABLE!EPowerActionShutdownReset%MemoryTypeLargePage"�MemoryCaptureAccessedBits#�ManageHotPatchQueryPatchesEPowerActionHibernate�)EtwRtBufferLost�(VrfAVXCorruption�FileRenameInfoEx0�PsEnergyComponentTypeCompositorResource5ObjectTypesInformation-�JSystemWow64SharedInformationObsolete"�3SystemVerifierInformation^IoPriorityHigh),TokenElevationTypeFull"2JobObjectCompletionFilter|ProcessDeviceMap#bUmsInformationCommandQuery�IrqPriorityUndefinedM,	PlatformRoleMaximum �FileFsVolumeInformation�#ThreadSuspendCount4K#WinBuiltinPreWindows2000CompatibleAccessSid"F:FileVolumeNameInformation,b,CI_WINDOWS_LOCKDOWN_RESTRICTION_MAXPKHeteroCpuPolicyLargePnpQueryBusRelationss'MaximumFileIdType%�FileFullDirectoryRestartInfo+F?FileIdExtdBothDirectoryInformation"�SystemNetRateControlQuota�ThreadTebInformation"�,ImagePolicyEntryTypeInt64 M,PlatformRoleWorkstation#j$MonitorRequestTypeToggleOn SmallBusinessRestrictedWnfInfoStateNameExist/�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SVIDEO�,TokenBnoIsolation+KfWinBuiltinRemoteManagementUsersSid�EtwBufferStateCSwitchOSidTypeDeletedAccount�VrfEnhancedIORuleClass �SystemObjectInformation)KNWinBuiltinCertSvcDComAccessGroupr#DeviceClassChangeEvent1"HeapTaggingInformation�TraceLbrEventListInfo	Personal+y,POINTER_DEVICE_TYPE_INTEGRATED_PEN%�TP_CALLBACK_PRIORITY_INVALIDProfileTime!�MaxImageMitigationPolicyZ&LdrpRemoteAaPS_MITIGATION_OPTION_ALLOW_DOWNGRADE_DYNAMIC_CODE_POLICY.|cProcessFreeFiberShadowStackAllocation$�PsCreateFailOnSectionCreate"U"FEEDBACK_PEN_PRESSANDHOLD3�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDTVDONGLE �SystemNetRateControlSet�)EtwRtEventNoLoss%�KeyVirtualizationInformation#�$KeyValuePartialInformation/aPS_MITIGATION_OPTION_HIGH_ENTROPY_ASLRKAWinUntrustedLabelSid �sSystemErrorPortTimeouts�2ReservedForDVRF508aPS_MITIGATION_OPTION_WIN32K_SYSTEM_CALL_DISABLE.��SystemFeatureConfigurationInformation&�SharedVirtualDisksUnsupported�TokenIntegrityLevel2��SystemSecureSpeculationControlInformation(K$WinBuiltinRemoteDesktopUsersSid�'��LoadReasonUnknownuDEPPolicyOptIn*@PsAttributeMitigationAuditOptions4?DPFLTR_PREFETCHER_ID�PNPISABus(UserPresent 4)IoSessionEventConnected"�VSystemRefTraceInformation+5,FileMetadataOptimizationInProgress[ThreadPowerThrottling5F#DISPLAYCONFIG_SCALING_ASPECTRATIOCENTEREDMAX!Y(	RtlBsdItemBootCheckpoint�EventSecuritySetDACL,YPlugPlayControlGetBlockedDriverListDSmrGcStateInactive U(MandatoryLevelUntrusted K"WinBuiltinReplicatorSid�ImagePolicyIdNone 4�DPFLTR_CRASHDUMPXHCI_ID-$��DISPLAYCONFIG_ROTATION_FORCE_UINT324�DPFLTR_PSHED_ID�TokenAppContainerSid*EventTraceStackCachingInformation&AProcessWorkingSetOperationMax1EventTraceLastBranchEventListInformation �IrqPolicyMachineDefaultDAuditEventObjectAccess U"
FEEDBACK_TOUCH_RIGHTTAP()DISPLAYCONFIG_TOPOLOGY_INTERNAL4�DPFLTR_FILETRACE_ID#FFileMailslotSetInformation�/SystemSessionCreate)Z%CmExtendedParameterTrustClassKey$�
SystemStackTraceInformation!�ThreadEventPair_Reusable"),TokenElevationTypeLimited�'SC_STATUS_PROCESS_INFO%�VrfSyncDelayFuzzingRuleClass1��SystemFirmwareBootPerformanceInformation�FpCodeFrexp'1/CI_WINDOWS_LOCKDOWN_MODE_TRIALMaxEventTraceInfoClass$e*COPYFILE2_PHASE_READ_SOURCE#K&WinAccountAdministratorSid'CSystemMonitorHiberBootPowerOffKWinInteractiveSid#�iSystemProcessorBrandString&�/IMPORT_OBJECT_NAME_UNDECORATE�EventSecuritySetSACLC-GetPowerRequestList4 DPFLTR_NTOSPNP_ID1FeatureConfigurationPriorityImageDefault!�!TokenUserClaimAttributes�FpCodeAtan�/DPI_AWARENESS_UNAWARE%�SystemPerformanceInformation�"CbusConfiguration"e-MemoryReserveIoCompletion�#WorkerFactoryTimeout�PowerDeviceD38aPS_MITIGATION_OPTION_IMAGE_LOAD_PREFER_SYSTEM324cDPFLTR_VDSUTIL_ID+&0PerfInfoMMStatAggregatePageCombineKWinLocalSystemSid-�:SystemRecommendedSharedDataAlignment&�ySystemNodeDistanceInformation�ImagePolicyIdEtw*�ManageHotPatchQueryPatchesForUser$�0DynamicTickDisableReasonMax#2JobObjectFreezeInformation,F#��DISPLAYCONFIG_SCALING_FORCE_UINT32'2.JobObjectReserved24Information!KWinCreatorOwnerServerSid �.MonitorRequestReasonDim'�#WorkerFactoryThreadSoftMaximum�'LoadReasonAsDataLoad)EventTraceTimeProfileInformation!�0PoDisabledStateSleeping2'�LearningModeLogLevelSpecialApc!�,ImagePolicyEntryTypeNoner#VetoEvent!�,ImagePolicyEntryTypeBoolfFpFormatU325ObjectBasicInformationrPMCCounter |ProcessBasicInformation �
VrfIRPTrackingRuleClassASERVERSILO_TERMINATING"gCOR_VTABLEGAP_NAME_LENGTH&� ComputerNamePhysicalDnsDomain�"MPIConfiguration$ACsvControlGetCsvFsMdsPathV2(� ComputerNamePhysicalDnsHostname1"HeapOptimizeResources2FeatureConfigurationPriorityImageOverride$YPlugPlayControlUnlockDevice4�DPFLTR_UDFS_ID3�IrqPolicyAllProcessorsInMachineWhenSteered0��SystemEntropyInterruptTimingInformation4RDPFLTR_IHVBUS_IDTSmrGcActionStart)`�AccessReasonAllowedParentAce|ProcessQuotaLimitsOSidTypeUnknown2PerfInfoMemUsageMax�VrfDMARuleClassCProcessorPowerPolicyAc,]SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS K.WinAccountCertAdminsSid(�*DISPLAYCONFIG_PIXELFORMAT_32BPP(�*DISPLAYCONFIG_PIXELFORMAT_24BPP#<2FindStreamInfoMaxInfoLevel� SystemObsolete0�ThreadCSwitchPmu'|(ProcessInstrumentationCallback�ThreadCSwitchMon(�SystemTimeAdjustmentInformation�$Width8Bits�MemoryEmptyWorkingSetsKWinBuiltinUsersSid4mDPFLTR_IOSTRESS_ID@PsAttributeClientId)K;WinBuiltinAuthorizationAccessSid#�GSystemWatchdogTimerHandler�VrfAutoFailRuleClass'�VrfAllocationFailuresRuleClass�DynamicTickVetoNone�$RtlDiskSpeedPolicyFast)'COPYFILE2_CALLBACK_POLL_CONTINUEI#ProcessReservedValue1)gCOMIMAGE_FLAGS_NATIVE_ENTRYPOINT3PROTOCOL_LOADED)EventTraceSoftRestartInformation!�	ProcessFontDisablePolicy'�FileIdBothDirectoryRestartInfo� UmsThreadPrioritySysDbgSetAutoKdEnable$��SystemControlFlowTransition!�'USER_MARSHAL_CB_MARSHALL$&KeySetHandleTagsInformation$5ObjectHandleFlagInformation�MicroChannel&� SecureSettingValueTypeBoolean!�ExceptionNestedException.�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_D_JPN�ThreadTimes4'DPFLTR_SERIAL_ID�PsCreateSuccess(�>SystemEmulationBasicInformationFFileBasicInformation4]DPFLTR_VERIFIER_ID�=ReservedForDVRF61�PCIBus*�+SystemProcessClassificationSystem�#ResponseRetry�PowerSystemSleeping3!|ProcessDebugObjectHandle4nDPFLTR_HEAP_ID+�0DynamicTickDisableReasonEmOverride)�DISPLAYCONFIG_COLOR_ENCODING_RGB(YPlugPlayControlInitializeDevice!TP_LOG_LEVEL_TRACE_LEAVE�LocationTypeRegistry$�*CmResourceShareUndetermined�#ResponseCancel(7)SystemMemoryPartitionMoveMemory �DynamicTickVetoProcBusy4fDPFLTR_MM_ID0AuditOpenObjectForDeleteWithTransaction'`�0AccessReasonIntegrityLevel�PowerSystemWorking#�SystemTimeOfDayInformation
�	CBus#�-ThreadSubsystemInformation	ProfileIcacheMissesM,PlatformRoleMobile(�ProcessPayloadRestrictionPolicy'�ProcessStrictHandleCheckPolicy42JobObjectAssociateCompletionPortInformation$�PerfInfoDebugEventContinued4_DPFLTR_VDSBAS_ID$�*PoSleepDisableReasonVhdBoot�'USER_MARSHAL_CB_FREE�TokenHasRestrictions-�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HDMI%S5
MemoryBasicInformationCappedCPPlatformIdleStates�:ReservedForDVRF58�
TokenStatistics �
ImagePolicyIdCapability�+IMO_INJECTED%.+RtlFeatureConfigurationCount4DPFLTR_LSERMOUS_ID�WMI_ENABLE_COLLECTION|`ProcessEnableLogging33DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED [ThreadDynamicCodePolicy2�CrossProcOperationMemoryProtectPostNotify�5DriverType$�$PsWakeReasonInstrumentation&K0WinAccountEnterpriseAdminsSid<GEOCLASS_ALL�
MPIBus!PnpQueryRemovalRelations-�VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING�ImagePolicyIdCrashDump&6SevereErrorCIScreenOff&StorageReserveIdUpdateScratch.EventTraceProfileSourceAddInformation!qIoSessionStateTerminatedFFileNamesInformation"�SystemPageFileInformation�FpCompareEqual|ProcessBasePriority�PNP_VetoPendingClose�PsCreateFailExeName4�DPFLTR_POWER_ID4,DPFLTR_DCOMSS_ID+�#TokenRestrictedUserClaimAttributes�ImageHeapPolicy&�MonitorRequestReasonResumePdc4$DPFLTR_NETAPI_ID*�MemoryCaptureAndResetAccessedBits&K:WinBuiltinPerfLoggingUsersSidCBPlatformInformation$�PSystemMemoryListInformation#EtwNotificationTypeSession�6PT_TOUCH|ProcessHandleCount.EventTraceObjectTypeFilterInformation�TurboChannel)�/MonitorRequestReasonBuiltinPanel�#MemoryNotResident���RelationAllgIMAGE_COR_MIH_EHRVA�"WdActionQueryState'2JobObjectReserved12Information�?ReservedForDVRF63#F"FileNetworkOpenInformation/�MonitorRequestReasonSystemStateEntered0�EtwSessionNotificationSessionTerminated!VCOPYFILE2_PROGRESS_PAUSE)WorkerFactoryCallbackLongRunningOSidTypeUser)7)SystemMemoryPartitionInformation"),TokenElevationTypeDefault �SystemPixelFormatR8G8B87�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INDIRECT_WIRED�GEO_ISO_UN_NUMBER(�NSystemVerifierTriageInformation�MaxTraceSetInfoClass'V7MemSectionExtendedParameterMaxvNtProductLanManNt);ProcThreadAttributeParentProcessY(RtlBsdItemAabTimeout!|*ProcessWorkingSetWatchEx(F#�DISPLAYCONFIG_SCALING_PREFERREDCSystemExecutionState�FileStandardInfo!!ProcessActivityTypeMax�FileIdInfo4DPFLTR_MOUCLASS_ID4DPFLTR_CLASSPNP_ID|ProcessImageFileName43DPFLTR_SXS_ID�@VrfRuleClassSizeMaxK=WinBuiltinDCOMUsersSid,�FilterBootOptionOperationSetElement�)TokenProcessTrustLevel$K WinBuiltinPrintOperatorsSid�#ResponseReturnToCaller!ASERVERSILO_SHUTTING_DOWN%IMDT_TOUCH"�#WorkerFactoryBindingCount#�-SystemLookasideInformation�+OS_DEPLOYMENT_COMPACT'�$KeyValueFullInformationAlign64'�tSystemLowPriorityIoInformation4zDPFLTR_LUAFV_IDr#CustomDeviceEvent0;	ProcThreadAttributeSecurityCapabilities4�DPFLTR_SSPICLI_ID#�,ImagePolicyEntryTypeUInt16'�ProcessSystemCallDisablePolicy"�AlpcWaitForPortReferences�GEO_RFC1766�IoPriorityHintNormal0��SystemEnergyEstimationConfigInformation"`�`AccessReasonEmptyDacl�6XLAT_CLIENT/�DISPLAYCONFIG_COLOR_ENCODING_INTENSITY-�ResourceManagerCompletionInformation&M&POINTER_CHANGE_FIRSTBUTTON_UPr#InvalidIDEvent(2)JobObjectServerSiloRunningStateUWOP_SAVE_NONVOL)M&POINTER_CHANGE_SECONDBUTTON_DOWN+�
PsEnergyComponentTypeKeyboardInput"|6ProcessHandleCheckingMode)EventTracePerformanceInformation4DDPFLTR_DMCONFIG_ID-]SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE2JobObjectSharedCommitKWinSelfSid �ManageHotPatchLoadPatch2�FeatureConfigurationOperationFeatureState"SystemCrashDumpDisable�#
ResponseContinuej9KTMOBJECT_TRANSACTION4dDPFLTR_DFRGIFC_ID*�EtwCoverageSamplerPerfInformation!VCOPYFILE2_PROGRESS_QUIET.��SystemSecureBootPolicyFullInformationSysDbgReadVirtual�9DDC_DISABLE_RESIZE�
ProcessImageLoadPolicy;�
DISPLAYCONFIG_DEVICE_INFO_SET_ADVANCED_COLOR_STATE&2JobObjectReserved3Information RPCHTTP_RS_INTERFACE4�DPFLTR_SE_ID4BDPFLTR_PCI_ID
ProfileFpInstructions9EventTraceProcessorTraceConfigurationInformation6*EtwStartLoggerCodeLogExceptionEmpty'e*COPYFILE2_PHASE_NAMEGRAFT_COPY)`�AccessReasonMissingPrivilege�#DCDC_DEFAULT!CWPowerInformationInternal,�0DynamicTickDisableReasonNoHwSupport"!+ShutdownRebootForRecovery�FpCodeConvert4�9MemoryExhaustionTypeFailFastOnCommitFailure+�EtwSessionNotificationLogfileError&2(JobObjectServerSiloInitialize�$TokenPrimary%�$ThreadHeterogeneousCpuPolicy6�$��DISPLAYCONFIG_OUTPUT_TECHNOLOGY_FORCE_UINT32�!ThreadIdealProcessorEx P
RpcAttemptedLbsMessages<�AlpcAdjustCompletionListConcurrencyCountInformation� ProcessTlsReplaceIndex/�$��DISPLAYCONFIG_OUTPUT_TECHNOLOGY_OTHER(S5MemoryMappedFilenameInformation(�TraceSystemTraceEnableFlagsInfo&F0FileNormalizedNameInformation*��SystemHypervisorDetailInformationC2WakeTimerList!|UProcessTelemetryCoverage*�+SystemProcessClassificationNormal |ProcessWow64Information3PROTOCOL_NOT_LOADED$��SystemSecureBootInformation xOptionCancelTryContinue8;ProcThreadAttributeAllApplicationPackagesPolicy;~:ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MAXVERSIONTESTED4hDPFLTR_WOW64_IDWHServer"�EtwBufferStatePlaceholder�GEO_LATITUDE*�$KeyValuePartialInformationAlign64'�VrfDeadlockPreventionRuleClass{	PsProtectedSignerMax.�:RtlMitigationOptionStateNotConfigured%�EtwBufferStateGeneralLogging6�DISPLAYCONFIG_DEVICE_INFO_GET_SDR_WHITE_LEVEL�;ReservedForDVRF59 'COPYFILE2_CALLBACK_NONE(��SystemDmaGuardPolicyInformation)�*DISPLAYCONFIG_PIXELFORMAT_NONGDI�$MaximumDmaWidth"��SystemBootLogoInformation!CSystemPowerPolicyCurrent�ThreadPagePriority%IMDT_MOUSE |4ProcessMitigationPolicyCProcessorStateHandler'�VrfBelow4GBAllocationRuleClass(`�AccessReasonDeniedParentAce"�,ImagePolicyEntryTypeInt16 yJournalBeginTransaction&�.SystemFirmwareTable_Enumerate4vDPFLTR_WDT_ID�*ReservedForDVRF42#2JobObjectCompletionCounter3LdrModulesSnappedI;SeLearningModeMaxN;PowerUserNotPresent.2JobObjectNotificationLimitInformation#PRpcBackEndConnectionFailed"�
SystemCallTimeInformationSmallBusiness#qIoSessionStateDisconnected �ImagePolicyIdScenarioId*�MonitorRequestReasonNearProximity0�7SystemActivityModerationAppTypePackageduDEPPolicyAlwaysOff3LdrModulesSnapping2K<WinBuiltinTerminalServerLicenseServersSid�MaximumInterfaceType%{PsProtectedSignerAntimalware�SYSTEM_HANDLE_INVALID#YPlugPlayControlResetDevice/�7SystemActivityModerationAppTypeClassic*�TracePeriodicCaptureStateListInfo+�+SystemProcessClassificationMaximum"K+WinAccountDomainGuestsSid-�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HD155~:ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MITIGATION4YDPFLTR_STORPORT_ID�ManageHotPatchMax!�&VrfInfoDisclosureIRPRule4*DPFLTR_RPCPROXY_ID5�$
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EMBEDDED%b-PoHiberForceDisableReasonMax�TraceGroupQueryList�WMI_SET_SINGLE_ITEM<MaxJournalInformation!+ShutdownPowerOff1EDIT_CONTROL_FEATURE_PASTE_NOTIFICATIONSEPowerActionReserved#2%JobObjectSiloRootDirectoryProfileDcacheAccesses'2'JobObjectReserved17Information PKHeteroCpuPolicyDefault�!VmOfferPriorityVeryLow&0PerfInfoMMStatNotUsed)|CProcessAllowedCpuSetsInformation�PowerDeviceUnspecified�PowerDeviceD0f	FpFormatU64"FFilePipeRemoteInformation'�*DISPLAYCONFIG_PIXELFORMAT_8BPP�CacheUnified �!PowerStateShutdownReset.�*PoSleepDisableReasonPortableWorkspace CFSetShutdownSelectedTime+��SystemProcessorIdleMaskInformation�ThreadHideFromDebugger"-%PdataPackedUnwindFragment �ImageChildProcessPolicy(�#SystemKernelDebuggerInformation�WdInfoState@PsAttributeToken5V7MemSectionExtendedParameterUserPhysicalFlags&�$PsWakeReasonActivityReferenceEToleranceIntervalLong%KlWinCapabilityAppointmentsSid�ThreadGroupInformation&rRtlPhysicalMemoryPolicyNormalFFileStreamInformationCVBatteryDeviceStateSYSTEM_HANDLE_TOKEN-�0ThreadManageWritesToExecutableMemory�#IMPORT_OBJECT_CODE!TP_LOG_LEVEL_TRACE_ENTER1SharedVirtualDiskHandleStateHandleShared � ProcessTlsReplaceVectorN;PowerUserInvalidProfileTotalCycles(�MonitorRequestReasonSleepButton3LdrModulesPlaceHolderProfile3Issue4�DPFLTR_ENDOFTABLE_IDCRPlatformIdleVeto$�FileStorageTierMediaTypeScm4qDPFLTR_MMCSS_ID"�<SystemNumaAvailableMemory!CZPhysicalPowerButtonPress4KDPFLTR_SR_ID1|_ProcessCombineSecurityDomainsInformation%4�DPFLTR_STORAGECLASSMEMORY_ID8aPS_MITIGATION_OPTION_EXPORT_ADDRESS_FILTER_PLUS*g�COMIMAGE_FLAGS_TRACKDEBUGDATA6�+MonitorRequestReasonPdcSignalHolographicShell�#SeImageSignatureNone� UmsThreadUserContext�TokenIsAppContainer$S5MemoryWorkingSetInformation$�#SeImageSignatureCatalogHint&�MonitorRequestReasonUserInputASERVERSILO_STARTED+2JobObjectCpuRateControlInformation&S5MemoryWorkingSetExInformation�7PdataCrUnchained�MemoryPurgeStandbyListRelationNumaNode12JobObjectBasicAndIoAccountingInformation4uDPFLTR_EMS_ID+
EventTracePoolTagFilterInformation%�0PoDisabledStateSleeping0Idle�ThreadPriority!EtwNotificationTypeAudio2*JobObjectIoAttribution&�EnlistmentRecoveryInformation5MaxObjectInfoClass!ACsvControlDisableCachingCJCsDeviceNotification1��SystemCodeIntegrityUnlockModeInformation@PsAttributeUmsThread#��SystemPoolLimitInformation'2JobObjectReserved11Information1`�AccessReasonNotGrantedToAppContainer�PCMCIABus!K*WinAccountDomainUsersSid�FpCodeDivide(�	ThreadQuerySetWin32StartAddress.�'ActivationContextManifestResourceName"FFileAllocationInformation(�ThreadEnableAlignmentFaultFixup|ProcessWx86InformationKWinNetworkServiceSid)�bSystemSystemPartitionInformation9�1MonitorRequestReasonBatteryCountChangeSuppressed'.+RtlFeatureConfigurationRuntime'�RTL_RESOURCE_POLICY_FLAGS_NONE'M&POINTER_CHANGE_FOURTHBUTTON_UP�FirmwareTypeUefi"�BootEntropySourceAcpiOem0uDEPPolicyAlwaysOnSYSTEM_HANDLE_MAX(5,FileMetadataOptimizationPendingEmbeddedRestricted%�"��ConfigurationSpaceUndefinedEPowerActionShutdown&�#SeImageSignatureCatalogCached(EtwNotificationTypeLegacyEnable**NormalizationC!�5 Win32ServiceShareProcess�FpCodeFabsCDMonitorInvocation�
FpCodeAcos%PRpcBackEndConnectionAttempts$CProcessorPowerPolicyCurrent&2JobObjectReserved4Information)�ImageExtensionPointDisablePolicy!�$KeyValueBasicInformation)�,SystemCurrentTimeZoneInformationEmbeddedNT�*SynchronizationEvent&�?��DPI_HOSTING_BEHAVIOR_INVALID�ImageDynamicCodePolicy+KjWinLocalAccountAndAdministratorSid-FindExInfoStandard3�DISPLAYCONFIG_DEVICE_INFO_GET_ADAPTER_NAME�PerfInfoMemResetMax'�6FixedWakeSourceDozeToHibernateC?SessionPowerCleanup�LT_LOWEST_LATENCYxOptionShutdownSystem$2JobObjectBasicProcessIdList"qIoSessionStateInitializedP	KHeteroCpuPolicyMaxFFilePipeInformation4+DPFLTR_AUTOCHK_ID4DPFLTR_MOUHID_ID%�IrqPolicySpecifiedProcessors4DPFLTR_SMSS_ID1��SystemDifApplyPluginVerificationOnDriver)2JobObjectEndOfJobTimeInformation%�	MonitorRequestReasonFullWakeProfile4Issue�*TokenPrivateNameSpace RPCHTTP_RS_ACCESS_1,@DISPLAYCONFIG_MODE_INFO_TYPE_TARGET�#FpCodeY1!|8ProcessRevokeFileHandles%|ProcessLUIDDeviceMapsEnabled!�$
RtlDiskSpeedPolicyNormalN;PowerUserMaximum-EventTraceCoverageSamplerInformationZ@KernelRequester
�PoDcCSystemPowerPolicyDc�ImagePolicyIdMaximum+�eSystemNumaProximityNodeInformationY(RtlBsdItemBootGood�'DisableLoad!@
PsAttributeStdHandleInfo|@AR_NOSENSOR&zPoCsDeviceNotificationMaximumRMaxEventInfo4aPS_MITIGATION_OPTION_CET_USER_SHADOW_STACKSAuditObjectReferenceTypeFY(
RtlBsdItemErrorInfo!KmWinCapabilityContactsSid�WdInfoTriggerReset(1/CI_WINDOWS_LOCKDOWN_MODE_LOCKED�AlpcBasicInformation#�TraceProfileSourceListInfo�ProcessDEPPolicyProfileIcacheIssues1�,MonitorRequestReasonPdcSignalFingerprint�
FileRemoteProtocolInfo9aPS_MITIGATION_OPTION_LOADER_INTEGRITY_CONTINUITY"y,POINTER_DEVICE_TYPE_TOUCH+�!MonitorRequestReasonUserInputTouch0�2MonitorRequestReasonResumeModernStandby5A
CsvControlEnableUSNRangeModificationTrackingKWinRestrictedCodeSid%K@WinBuiltinCryptoOperatorsSid	PerfCSwapIdle)$DISPLAYCONFIG_ROTATION_ROTATE270$ACsvControlStartRedirectFile!�$KeyValueLayerInformation3�^SystemImageFileExecutionOptionsInformation4�MonitorRequestReasonSetThreadExecutionStateC4ProcessorIdleStatesHvK,WinAccountComputersSid$PKHeteroCpuPolicyBiasedSmall�)VrfAccessModeMismatch�ImageDepPolicy$2PerfInfoMemUsagePfnMetadata�6PT_POINTER� UmsThreadIsTerminated0>WOW64_FUNCTION_CPU_CFG_DISPATCH_CONTROL�'AutoLoad � TokenAppContainerNumberI#ProcessLeapSecondInfo)FeatureConfigurationPriorityTest)|ProcessEnableAlignmentFaultFixupY(RtlBsdItemMax+MemExtendedParameterAttributeFlags(b-PoHiberForceDisableReasonPolicy�.ReservedForDVRF46
�PoAc
ProfileCacheMisses"�MarshalDirectionUnmarshal)"FpRoundChopped4DPFLTR_CDROM_ID&KeySetDebugInformation"K)WinAccountDomainAdminsSid�GEO_LONGITUDE/V7MemSectionExtendedParameterInvalidType �ExceptionCollidedUnwind�TraceInfoReserved15�#VrfXDVPlatformMode%C`PowerInformationLevelMaximumKWinTerminalServerSidYMaxPlugPlayControlU"FEEDBACK_PEN_TAP�6PT_PEN.t;PerfInfoDomainChangeEventEnterSyscall.YPlugPlayControlDeviceClassAssociation/F8FileRenameInformationBypassAccessCheck�$ErrorFatal,�&SystemExtendServiceTableInformation&�~SystemBootGraphicsInformationProfileAlignmentFixup�(AtomTableInformation&|@ProcessTelemetryIdInformation�
InternalPowerBus@PsAttributeTebAddress�"WdActionSleep�FileRenameInfo4DPFLTR_CRASHDUMP_ID�"PCMCIAConfiguration!>MemoryLocationResident$PKHeteroCpuPolicyBiasedLarge2��SystemFeatureUsageSubscriptionInformation&S5	MemoryEnclaveImageInformation�"WdActionResetTimer3LdrModulesMapped�SystemLocksInformation�SecurityImpersonation#2ShrinkPrepare.�TSystemVerifierCancellationInformation4DPFLTR_KBDHID_IDr#DeviceArrivalEvent$�8SystemPrefetcherInformation/�dSystemProcessorPerformanceDistribution�PowerDeviceD1EPowerActionShutdownOff&�'LoadReasonDelayloadDependencyUWOP_ALLOC_LARGE�"PCIConfigurationProfile2Issue4GDPFLTR_VSS_ID"�_SystemCoverageInformationC^UpdateBlackBoxRecorder1�*JOBOBJECT_IO_ATTRIBUTION_CONTROL_DISABLETP_LOG_LEVEL_ERROR-b,CI_WINDOWS_LOCKDOWN_RESTRICTION_NONE4DPFLTR_DMSYNTH_ID�)TimerWakeSourceType�PowerSystemShutdown
Blade4DPFLTR_SERMOUSE_ID)	SYSTEM_HANDLE_COMPOSITION_OBJECT�VrfIORuleClass*KRWinThisOrganizationCertificateSid4"DPFLTR_SAMSS_ID�$WidthNoWrap!�TP_CALLBACK_PRIORITY_LOWgMAX_PACKAGE_NAME#�	PsEnergyComponentTypeInput!�,ThreadWorkOnBehalfTicket,�EtwCoverageSamplerStatusInformation63��DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT325ObjectNameInformation!Z%CmExtendedParameterEvent1�TransactionSuperiorEnlistmentInformation 3PROTOCOL_ADDRESS_CHANGE�'SystemLoad3�#MonitorRequestReasonUserInputAccelerometer&Y$RtlDiskSpacePolicyBelowNormal �SystemDeviceInformationvNtProductServer�PNP_VetoWindowsServiceM,PlatformRoleDesktop$�!PowerStateSleeping4Firmwaren.WnfWellKnownStateName<�DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_PREFERRED_MODEM,PlatformRoleSlate�6ReservedForDVRF54�$GenericLessThan4yDPFLTR_NVCTRACE_ID b!TransactionStateIndoubt"��SystemKernelDebuggerFlagsF
FileRenameInformationASERVERSILO_INITINGStorageReserveIdSoft"�VrfDriverLoggingRuleClassK'WinAccountGuestSid!�#MemoryContiguityStateMax)KrWinAccountEnterpriseKeyAdminsSid3LdrModulesReadyToInit#�DynamicTickVetoNoDeepSleep#j9KTMOBJECT_RESOURCE_MANAGERPRpcOutgoingBandwidth4CDPFLTR_DMIO_ID+�=POINTER_DEVICE_CURSOR_TYPE_UNKNOWN(;ProcThreadAttributeWin32kFilter)JCMaxSystemActivityModerationState&�+ThreadExplicitCaseSensitivity*;ProcThreadAttributeIdealProcessor!@PsAttributeSecureProcess�FpCodeCompare�TokenOrigingCOR_VERSION_MINOR�EtwBufferStateFree�#WorkerFactoryPaused �MonitorRequestReasonPnP+qIoSessionStateDisconnectedLoggedOn�SmrGcMethodRotation$�RtlSparseBitmapOperationSet6��SystemPortableWorkspaceEfiLauncherInformation$�&TokenRestrictedDeviceGroups,Y(RtlBsdItemFeatureConfigurationState�VrfSecurityRuleClass(2JobObjectMemoryUsageInformationDPortDumpInformation =3FindExSearchMaxSearchOp�SmrGcMethodCompaction!4FDPFLTR_WSOCKTRANSPORT_ID!�EtwBufferStateCompressed);ProcThreadAttributePreferredNode�ImagePolicyIdParentSd�POINTER_FEEDBACK_NONESysDbgGetKdBlockEnable�7PdataCrChainedWithPacDataCenter<DPROXY_UNMARSHAL&KeySetLayerInformation4PDPFLTR_IHVNETWORK_ID.�DISPLAYCONFIG_COLOR_ENCODING_YCBCR4205�CrossProcOperationInstructionCacheFlushHeavy4�DPFLTR_FLTREGRESS_ID#�DirectoryNotifyInformation!PRpcAttemptedLbsDecisions	PerfCSwapIdleShortFDFileStatInformation% NotificationTimer|\ProcessSequenceNumber4DPFLTR_SETUP_ID%CPowerInformationLevelUnused0 Y(RtlBsdItemVersionNumber �SystemHandleInformationPRpcLastCounter#�EnlistmentBasicInformation+��SystemFirmwarePartitionInformation�5RecognizerType(�jSystemVirtualAddressInformation*KdWinAccountCloneableControllersSid&�TracePeriodicCaptureStateInfo �VrfSpecialPoolRuleClass�#PsRequestDuplicate(YPlugPlayControlDeregisterDevice�PNP_VetoWindowsApp(�5SystemSessionProcessInformation�#IMPORT_OBJECT_CONSTfFpFormatFp809�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INDIRECT_VIRTUAL'F'FileValidDataLengthInformation0�SSystemProcessorIdleCycleTimeInformation �RtlResTypeDiskSpeedTierCSystemBatteryState$�FileFsFullSizeInformationEx"EAlpcMessageSidInformationACsvControlQueryMdsPath#�YSystemErrorPortInformation 1"HeapExtendedInformation�$GenericEqual%F@FileDispositionInformationExZ&LdrpNoDevice$|MProcessPowerThrottlingState6�KSystemRegisterFirmwareTableInformationHandler |/ProcessGroupInformation"[ThreadAbsoluteCpuPriority$�SystemFullMemoryInformationAuditAccessCheck**NormalizationD(�/DPI_AWARENESS_PER_MONITOR_AWARE FFileObjectIdInformation,�0DynamicTickDisableReasonBcdOverride!�"WdActionSetTriggerAction3@��DISPLAYCONFIG_MODE_INFO_TYPE_FORCE_UINT32CSystemPowerPolicyAc|ProcessIoCountersRelationCache� VrfStateSepRuleClass*aPS_MITIGATION_OPTION_FONT_DISABLE.|SProcessManageWritesToExecutableMemory"�"CsvFsDiskConnectivityNone+�#QUERY_FILE_LAYOUT_FILTER_TYPE_NONE�FpCodeFmod5EventTraceProcessorTraceEventListInformation)�VRF_TRIAGE_CONTEXT_CERTIFICATION�TraceGuidQueryProcess!�#SeImageSignatureEmbedded(M&	POINTER_CHANGE_FIFTHBUTTON_DOWN1YPlugPlayControlGetDeviceInterfaceEnabled*VERIFIER_MODE_TRIAGE0�AlpcUnregisterCompletionListInformation!>MemoryLocationInvalid&F+FileIoPriorityHintInformation0��SystemWorkloadAllowedCpuSetsInformation$�EPowerRequestDisplayRequired(M&POINTER_CHANGE_THIRDBUTTON_DOWN&�ImagePolicyIdCrashDumpKeyGuid&�#
WorkerFactoryStackInformation|@AR_REMOTESESSION#�?DPI_HOSTING_BEHAVIOR_MIXED)�SystemUnloadGdiDriverInformation.�DISPLAYCONFIG_COLOR_ENCODING_YCBCR444�'DemandLoad%FFileBothDirectoryInformation"�POINTER_FEEDBACK_INDIRECT9�#QUERY_FILE_LAYOUT_FILTER_TYPE_STORAGE_RESERVE_ID'�LSystemFirmwareTableInformation4EDPFLTR_DMADMIN_ID*'COPYFILE2_CALLBACK_CHUNK_FINISHED�EtwBufferStateFlush&K2WinAccountRasAndIasServersSid�TokenDefaultDacl�FileIoPriorityHintInfo&F7FileRemoteProtocolInformation/KoWinBuiltinDefaultSystemManagedGroupSid=3FindExSearchNameMatch0��SystemProcessorPerformanceInformationEx+&0PerfInfoMMStatIterationPageCombine*2JobObjectIoRateControlInformation*VERIFIER_MODE_UNUSEDI#ProcessInPrivateInfo�<ReservedForDVRF606*EtwUpdateLoggerCode&�'MaxActivationContextInfoClass(uFileStorageTierClassPerformanceK?WinIUserSidEPowerActionDisplayOff/�SharedVirtualDiskCDPSnapshotsSupported%|;ProcessCheckStackExtentsMode-EventTraceSessionSecurityInformation�DTP_DEBUG_CLASS_POOL�$TokenImpersonations'ExtendedFileIdType �FileFsDeviceInformation.��SystemSecureDumpEncryptionInformation�	FileAttributeTagInfo$��SystemPageFileInformationExCQProcessorIdleVeto�(TokenIsRestrictedPRpcCurrentUniqueUser}KCONTINUE_LONGJUMPProfilePipelineDry#EtwNotificationTypeNoReply�WdInfoStartTimer |>ProcessMemoryExhaustion"gCOMIMAGE_FLAGS_IL_LIBRARYU(MandatoryLevelMediumAuditHandleCreation/�FilterBootOptionOperationDeleteElement"2JobObjectGroupInformation'��SystemMemoryChannelInformation@	PsAttributeErrorMode/HSE_VALIDATE_MAPPING_ENTIRE_IMAGE_CLEAN� ComputerNameNetBIOS�	KeyLayerInformation.��SystemEnclaveLaunchControlInformation�FpCodeAsin�TokenElevationType0MemExtendedParameterAddressRequirements'�%SystemRegistryQuotaInformation�6XLAT_SERVER�Internal"�ManageHotPatchUnloadPatchY(RtlBsdSleepInProgress&�ProcessControlFlowGuardPolicy,YPlugPlayControlQueryDeviceRelations|@AR_DISABLEDfFpFormatU16K6WinThisOrganizationSid%@PsAttributeMitigationOptionsKWinNullSid%�FIoCompletionBasicInformation&��SystemBootMetadataInformation,K_WinBuiltinRDSRemoteAccessServersSid�0ReservedForDVRF48#�nSystemRegistryAppendString�GEO_ISO3ToleranceHigh|ProcessDebugPort +UmsSchedulerThreadYield,0G2RtlDiskWriteConstraintPolicyLimited!�pSystemVhdBootInformation
SYSTEM_HANDLE_SOCKET$2@EtwCompressionModeNoDisable�
ImageSehopPolicy�$NotAppContainerSidTypeHAL_MCA_RECORD�"NuBusConfiguration&M&
POINTER_CHANGE_FIFTHBUTTON_UP:aPS_MITIGATION_OPTION_BLOCK_NON_MICROSOFT_BINARIES%IMDT_TOUCHPAD)y,POINTER_DEVICE_TYPE_EXTERNAL_PEN!SysDbgGetPrintBufferSize#�:RtlMitigationOptionStateOn-�MonitorRequestReasonAcDcDisplayBurst+
TransactionManagerBasicInformation)�$MonitorRequestReasonUserInputHid/
EventTraceProfileSourceListInformation(�GServiceDirectoryPersistentStateFFileEaInformation%IMDT_KEYBOARD4sDPFLTR_THREADORDER_IDC"ProcessorCap"S5MemoryRegionInformationExWnfDataScopeProcess�#ResponseAbort�FpCodeSinh&�
VrfMDLInvariantStackRuleClass&2JobObjectReserved8InformationPKHeteroCpuPolicySmallC<IdleResiliency�FileDispositionInfo� ThreadCounterProfiling3��LdrModulesMerged)K[WinCapabilityDocumentsLibrarySid"�qSystemCpuQuotaInformation�FpCodePowCYSystemHiberFileType4)IoSessionEventCreated-t;PerfInfoDomainChangeEventUserRestore'C_SessionAllowExternalDmaDevices**NormalizationKD�WdInfoNop$�	FileFsDriverPathInformation�FpCodeRemainder-7)SystemMemoryPartitionNodeInformation|ProcessExceptionPort(K`WinBuiltinRDSEndpointServersSid5EventTraceLastBranchConfigurationInformation%C:PowerSettingNotificationName*�,ImagePolicyEntryTypeUnicodeString'��SystemManufacturingInformation �7PdataCrUnchainedSavedLr.�MonitorRequestReasonUserInputKeyboard4)IoSessionEventMaxC@SessionLockState�	WMI_EXECUTE_METHOD#�"TokenDeviceClaimAttributes�EventSecurityAddSACL#PowerMonitorOff%SysDbgSetKdUmExceptionEnable �VRF_TRIAGE_CONTEXT_NONE'�MonitorRequestReasonSystemIdle);ProcThreadAttributePseudoConsole2�kSystemLogicalProcessorAndGroupInformation4�DPFLTR_MSDSM_ID7aPS_MITIGATION_OPTION_STRICT_CONTROL_FLOW_GUARD-FindExInfoBasicF FileQuotaInformation%|=ProcessProtectionInformation,2"JobObjectLimitViolationInformation2!FFileEndOfFileInformation+'COPYFILE2_CALLBACK_STREAM_FINISHEDZ%CmExtendedParameterMax/FIFileLinkInformationExBypassAccessCheck&g$RtlRXactOperationDelAttribute
AuditOpenNonObject-)��DISPLAYCONFIG_TOPOLOGY_FORCE_UINT32"�VrfMoreDebuggingRuleClass1~IMidlWinrtTypeSerializationInfoVersionOne,FeatureConfigurationPriorityServiceU(MandatoryLevelHigh"[ThreadInformationClassMax(��SystemAllowedCpuSetsInformation!�'SystemPrioritySeperation%CTraceApplicationPowerMessage4a!PS_MITIGATION_OPTION_BLOCK_NON_CET_BINARIES.;ProcThreadAttributeChildProcessPolicy�$PsWakeReasonUser'2,JobObjectReserved22Information�KeyCachedInformation+CEFirmwareTableInformationRegisteredOSidTypeLogonSessionC&ProcessorLoad�BSC_ACTION_OWN_RESTART#�MmEtwWorkingSetTypeMaximum'F<FileIdExtdDirectoryInformationS5MemoryBasicInformation �SystemPixelFormatB8G8R8(��SystemPhysicalMemoryInformation�ThreadUmsInformation>��SystemHardwareSecurityTestInterfaceResultsInformation
�"Cmos(|WProcessEnableReadWriteVmLogging$�'USER_MARSHAL_CB_BUFFER_SIZE�!VmOfferPriorityLow!+ShutdownNoRebootfFpFormatFp128.7)SystemMemoryPartitionCreateLargePagesoMaxThreadWorkloadClass�FpCodeHypot� UmsThreadMaxInfoClassWnfDataScopeSession+� MonitorRequestReasonUserInputMouse+2 JobObjectNetRateControlInformation�
ThreadIdealProcessor(|[ProcessSystemResourceManagementK>WinBuiltinIUsersSid �RtlResTypeDiskSpaceTier$|EProcessJobMemoryInformation)EventTracePebsTracingInformation-�$TokenRestrictedDeviceClaimAttributes�
PNP_VetoAlreadyRemoved-�PsEnergyComponentTypeDisplayRequired**NormalizationKC#'DfsLinkTrackingInformation#�6FixedWakeSourceSleepButton4xDPFLTR_NDIS_ID%�RtlResTypePhysicalMemoryTier$�TP_CALLBACK_PRIORITY_NORMAL.��SystemHypervisorSharedPageInformation �ThreadSwitchLegacyState�/��DPI_AWARENESS_INVALID#C>SessionConnectNotification)F=FileReplaceCompletionInformation|@AR_ENABLED$U"	FEEDBACK_TOUCH_PRESSANDHOLD�*NotificationEvent"DSmrGcStateActiveFullSpeedAuditOpenObjectK	WinNetworkSidKWinBuiltinGuestsSid%IDL_CS_NO_CONVERT(��SystemPlatformBinaryInformation)7)SystemMemoryPartitionAddPagefileMaximumDmaSpeed,2JobObjectBasicAccountingInformation)HSE_VALIDATE_MAPPING_ENTIRE_IMAGE!`�PAccessReasonNullDacl,�EtwSessionNotificationRealtimeError%|)ProcessThreadStackAllocation)�TransactionPropertiesInformation4(DPFLTR_SERENUM_ID%uFileStorageTierClassCapacity�TokenPrimaryGroup%KWinBuiltinSystemOperatorsSid4XDPFLTR_SHPC_ID*�	VrfForcePendingIORequestRuleClassxOptionYesNo�!PowerStateSleeping4�)EtwRtEventLossMax+�ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE�0PoDisabledStateMaximum�VMEBus5aPS_MITIGATION_OPTION_IMAGE_LOAD_NO_LOW_LABEL KWinAuthenticatedUserSid!�#DCDC_DISABLE_FONT_UPDATE#�"WdActionQueryTriggerAction'�*SystemProcessorIdleInformation#ProfileSpecialInstructions4:DPFLTR_PCIIDE_ID3LdrModulesMapping=aPS_MITIGATION_OPTION_RESTRICT_CHILD_PROCESS_CREATIONKWinCreatorGroupSid41DPFLTR_BURNENG_ID�(PsProtectedTypeNone yJournalSetLastWriteTime"K1WinAccountPolicyAdminsSid M,PlatformRoleUnspecified|&ProcessCycleTime'�FeatureEnabledStateOptionsNone�Isa(b!TransactionStateCommittedNotify45DPFLTR_IDLETASK_ID$|NProcessReserved3Information�KeyNameInformation�IrqPriorityNormal%�rSystemNativeBasicInformation$KWinEnterpriseControllersSid)S5MemoryPrivilegedBasicInformation �ExceptionContinueSearch �
FileIdBothDirectoryInfo|'ProcessPagePriority�IoPriorityHintLow�SystemBasicInformationgMutantOwnerInformation+|PProcessDisableSystemAllowedCpuSets	AuditCloseNonObject0���DISPLAYCONFIG_DEVICE_INFO_FORCE_UINT32'M&POINTER_CHANGE_SECONDBUTTON_UP�"HiberFileBucket16GB�FileAllocationInfo>WOW64_FUNCTION_NOP%��SystemShadowStackInformationCProcessorPowerPolicyDcyJournalSetKeyUserFlags'�ACTCTX_RUN_LEVEL_REQUIRE_ADMIN)��SystemDifSetRuleClassInformation)��SystemActivityModerationExeState3�IrqPolicySpreadMessagesAcrossAllProcessors#F,FileSfioReserveInformation3�DTOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE(�	AlpcRegisterCallbackInformation%�PsEnergyComponentTypeNetwork$�ImageControlFlowGuardPolicy2a
PS_MITIGATION_OPTION_IMAGE_LOAD_NO_REMOTE %IDL_CS_IN_PLACE_CONVERT,KhWinAuthenticationServiceAssertedSid)U"FEEDBACK_PEN_BARRELVISUALIZATIONr#BlockedDriverEvent'0TransactionOutcomeUndeterminedStorageReserveIdNoneSingleUserTSC8LogicalProcessorIdling!�1SystemSessionInformationSysDbgGetAutoKdEnablePnpQueryPowerRelations!�KeyHandleTagsInformation8�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPOSITE_VIDEO6*EtwFlushLoggerCode)�"CsvFsDiskConnectivityMdsNodeOnly!Y(RtlBsdItemShutdownBootId0F)FileIoCompletionNotificationInformation#F
FileDispositionInformation"I;SeLearningModeInvalidType7>WOW64_FUNCTION_CPU_OPTIMIZE_CHPE_IMPORT_THUNKS�TraceDisallowListQuery!�SystemPoolTagInformation�DynamicTickVetoMaxSysDbgSetKdBlockEnable �3MonitorRequestReasonMax4pDPFLTR_USERGDI_ID�VrfForceIrqlRuleClass$�MonitorRequestReasonUnknown-FindExInfoMaxInfoLevel0��SystemRegistryReconciliationInformation,�EtwCoverageSamplerCreateInformation"�	PNP_VetoInsufficientPower'�MaxEtwCoverageSamplerInfoClass(�=SystemProcessorPowerInformation*VERIFIER_MODE_LOGO�	FpCodeRoundCSystemPowerInformation'�gSystemCodeIntegrityInformation&SysDbgKdPullRemoteFile,KJWinEnterpriseReadonlyControllersSid*�JOB_OBJECT_IO_RATE_CONTROL_ENABLEU(MandatoryLevelSystem�#MemoryNotContiguousn.WnfPersistentStateName)KvWinAuthenticationFreshKeyAuthSid&KYWinCapabilityVideosLibrarySid2��SystemHypervisorProcessorCountInformationSysDbgReadBusData�IrqPriorityHigh�$Width64Bits �TraceMaxPmcCounterQueryCHPlmPowerRequestCreate$bUmsInformationCommandAttach#I#ProcessProtectionLevelInfo4lDPFLTR_KTM_ID!�5SC_EVENT_PROPERTY_CHANGE�#ResponseIgnore%K!WinBuiltinBackupOperatorsSid#�FileFsAttributeInformation(�PsEnergyComponentTypeMouseInput'2-JobObjectReserved23Information0@PsAttributeAllApplicationPackagesPolicyN$KeyRemoved#SysDbgGetUmAttachPid$SysDbgQueryTraceInformation4�'MonitorRequestReasonUserInputInitialization-��SystemProcessorCycleStatsInformation Y
PlugPlayControlProperty'�*CmResourceShareDeviceExclusive#PowerMonitorOn$�#WorkerFactoryTimeoutWaiters'ZEReadDirectoryNotifyInformation�GEO_OFFICIALLANGUAGESSysDbgWriteMsr$ACsvControlQueryFileRevision �.SystemFirmwareTable_Get�$ErrorCorrected RPCHTTP_RS_REDIRECT'B*ServiceRegistryStatePersistentC)SessionPowerInit@PsAttributeMax'EventTraceGroupMaskInformation4DPFLTR_CONFIG_ID,YPlugPlayControlQueryAndRemoveDevice�'VrfLwSpecialPool4
DPFLTR_REDBOOK_IDI;SeLearningModeSettings|YProcessImageSection@PsAttributeImageName%1/CI_WINDOWS_LOCKDOWN_MODE_MAX�FileFsSizeInformation'�VrfMDLInvariantDriverRuleClass& SymbolicLinkGlobalInformation4DPFLTR_WMILIB_ID�PNP_VetoLegacyDriver ��SystemCpuSetInformation"�,ImagePolicyEntryTypeInt324DPFLTR_TWOTRACK_ID)EventTraceHeapTracingInformation+UmsSchedulerStartup @PsAttributeBnoIsolation-�
AlpcCompletionListRundownInformation�"
PNPISAConfigurationC=SessionRITState�WMI_ENABLE_EVENTS3��LdrModulesSnapError�-TokenChildProcessFlags'2JobObjectBasicLimitInformation3KuWinAuthenticationKeyPropertyAttestationSid PKHeteroCpuPolicyDynamic KTWinBuiltinAnyPackageSid(=InternalWakeSourceTimerOverride%CVerifyProcessorPowerPolicyAc!VRtlPathTypeDriveRelative|
ProcessIoPortHandlers43DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED|"ProcessExecuteFlags&F>FileHardLinkFullIdInformation"+UmsSchedulerThreadBlocked!4)IoSessionEventTerminated @PsAttributeWin32kFilter`�pAccessReasonNoSD%�PsEnergyComponentTypeStorage�TokenUIAccess#�*PoSleepDisableReasonPolicy#Z@UserSharedServiceRequester%KsWinAuthenticationKeyTrustSid"-%PdataPackedUnwindFunctionWaitAll�
FpCodeTruncateN$KeyModified�WdInfoStopTimer'2JobObjectReserved13Information(YPlugPlayControlGetRelatedDevice&�DynamicTickVetoClockOutOfSync|ProcessUserModeIOPL(�}SystemSessionBigPoolInformation�PerfInfoDebugEventMax|@AR_SUPPRESSED�BootEntropySourceUefiyJournalCreateKey&�(ThreadSystemThreadInformation-~:ACTCTX_COMPATIBILITY_ELEMENT_TYPE_OS>aPS_MITIGATION_OPTION_SPECULATIVE_STORE_BYPASS_DISABLE#�#MemoryAlignedAndContiguous+FCFileDesiredStorageClassInformation4iDPFLTR_ALPC_ID"SemaphoreBasicInformation-�MonitorRequestReasonUserDisplayBurst"FFileCompletionInformation|@@AR_DOCKED�LocationTypeMaximum�GEO_DIALINGCODE�2ThreadWorkloadClass �	BootEntropySourceTcbTpm(�"SystemCrashDumpStateInformation�ThreadIoPriority g$RtlRXactOperationDelete�FpCodeSubtract�6PT_TOUCHPAD#<JournalAbsoluteInformationC#SystemWakeSourceProfilePipelineFrozenn.WnfPermanentStateName!�POINTER_FEEDBACK_DEFAULT%�,ImagePolicyEntryTypeOverride�ThreadBasicInformation**NormalizationOther'|TProcessCaptureTrustletLiveDump%�MonitorRequestReasonTerminal%5,FileMetadataOptimizationNone*�FeatureConfigurationOperationNone#=3FindExSearchLimitToDevices*�ISystemLogicalProcessorInformation.�AlpcRegisterCompletionListInformationgCOR_VTABLE_32BIT4DPFLTR_FSTUB_ID.��SystemCodeIntegrityClearDynamicStores�!PowerStateMaximumCLastWakeTimeCommunicationServer!K3WinNTLMAuthenticationSid�FpCodeLog104kDPFLTR_PERFLIB_ID0�6VirtualStorageBehaviorCacheWriteThrough#�zSystemAcpiAuditInformation#r#DeviceInstanceStartedEvent y
JournalAbortTransaction<DPROXY_MARSHAL/�'RunlevelInformationInActivationContext{StandardDesign'5ObjectSessionObjectInformation%��SystemPoolZeroingInformationZ&��LdrpAnyDevice�SystemVaTypeAll!�ThreadSetTlsArrayAddress!FFilePipeLocalInformation CSystemPowerLoggingEntryY(RtlBsdItemChecksum$PKHeteroCpuPolicyLargeOrIdle*'COPYFILE2_CALLBACK_STREAM_STARTED%e*COPYFILE2_PHASE_PREPARE_DEST+KtWinAuthenticationKeyPropertyMFASid4jDPFLTR_WDI_ID�RF_UNSORTED!&KeyWow64FlagsInformation#"SystemCrashDumpReconfigure.
TransactionManagerRecoveryInformation�FpCompareUnordered&CSystemPowerStateNotifyHandler�ImageAslrPolicy�GEO_LCID�$MaxAppContainerSidType&y,POINTER_DEVICE_TYPE_TOUCH_PAD!�FileFsMaximumInformation$@PsAttributeDesktopAppPolicy'e*COPYFILE2_PHASE_PREPARE_SOURCE<TableFoundNodeFFileAccessInformationSYSTEM_HANDLE_THREAD|!ProcessIoPriority�%ThreadContainerId+EventTraceProfileConfigInformation3��SystemEntropyInterruptTimingRawInformationVRtlPathTypeUnknown#�PerfInfoMemResetUndoFailed(�UserUnknown$�AlpcConnectedSIDInformation,|eProcessDynamicEHContinuationTargets(1"��HeapSetDebuggingInformation�FirmwareTypeUnknown#�IrqPolicyOneCloseProcessor ACsvControlStartForceDFOFLFileMaximumInformationAuditPrivilegeObjectj9KTMOBJECT_INVALID|ProcessAffinityMask|ProcessVmCounters.SMaxTimerInfoClass�	ImageFontDisablePolicy#Y(RtlBsdItemBootAttemptCount$WnfDataScopePhysicalMachine4DPFLTR_I8042PRT_ID#�#WorkerFactoryThreadMaximumDSmrGcStateActive@PsAttributeDebugObject�	WdInfoInvalid&2JobObjectReserved1Information4�DPFLTR_WER_IDC\EnergyTrackerCreate�&ThreadNameInformation�9ReservedForDVRF57xOptionOk"�#	WorkerFactoryCallbackType�WMI_REGINFO-KVWinCapabilityInternetClientServerSid&�SystemNonPagedPoolInformation�ECOMPARE_STRING$��SystemLeapSecondInformation,aPS_MITIGATION_OPTION_HEAP_TERMINATE+;ProcThreadAttributeProtectionLevel�NuBus&@PsAttributeChildProcessPolicyU(MandatoryLevelLow'F#DISPLAYCONFIG_SCALING_IDENTITY$zPoCsDeviceNotificationAudio4)IoSessionEventLogon%MemoryTypeHugePage$�$PsWakeReasonPreserveProcess*KaWinBuiltinRDSManagementServersSid1"HeapStackDatabase#��SystemWin32WerStartCallout#�AlpcMessageZoneInformation$v!VmPageDirtyStateInformationFFileAllInformation�)InternalWakeSourceType4�DPFLTR_GPIO_ID%K5WinSChannelAuthenticationSidBJCSystemActivityModerationStateUserManagedDisableThrottling%M,PlatformRoleEnterpriseServer!!!ProcessActivityTypeAudioREventProviderSetTraits$I#ProcessMemoryExhaustionInfo@PsAttributeHandleList47DPFLTR_TAPE_ID�AlpcPortInformationVRtlPathTypeLocalDevice&2JobObjectReserved6Information4DPFLTR_ACPI_ID�AclRevisionInformation46DPFLTR_SOFTPCI_ID!�SystemVaTypeNonPagedPoolC!ProcessorIdleStates�PerfInfoMemReset CSystemPowerStateHandler-��SystemCodeIntegrityUnlockInformation'KLWinBuiltinEventLogReadersGroup ProfileLoadLinkedIssues#2ShrinkAbort/|JProcessHighGraphicsPriorityInformation�PsCreateInitialState |%ProcessImageInformation%�ImageSystemCallDisablePolicy�PNP_VetoDriver�WdInfoTriggerAction6*EtwStopLoggerCode3K%WinBuiltinNetworkConfigurationOperatorsSid�WMI_GET_ALL_DATAFFileModeInformationKWinRemoteLogonIdSid!�ACTCTX_RUN_LEVEL_NUMBERS %SysDbgGetLiveKernelDump,YPlugPlayControlGenerateLegacyDevice"WnfInfoSubscribersPresent3�&MonitorRequestReasonUserInputSessionSwitch#r
RtlPhysicalMemoryPolicyLow4)IoSessionEventIgnore!CORegisterSpmPowerSettings(M&POINTER_CHANGE_FIRSTBUTTON_DOWN(KXWinCapabilityPicturesLibrarySid"gCOR_VTABLE_FROM_UNMANAGEDC3DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST5�$��DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INTERNAL(|dProcessAltSystemCallInformation%SysDbgQueryModuleInformation4eDPFLTR_DEFAULT_ID�FpCodeSin�TokenMandatoryPolicy}KCONTINUE_RESUME@PsAttributeChpe0)XJOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGSKOWinMediumPlusLabelSid*1"HeapEnableTerminationOnCorruption%�EtwQueryProcessHandleInfoMax4^DPFLTR_VDS_ID9�JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL"�VrfMiscellaneousRuleClass&�SystemMirrorMemoryInformation*�{SystemBasicPerformanceInformation 4TDPFLTR_RTLTHREADPOOL_ID)�ManageHotPatchUnloadPatchForUser#FFileMoveClusterInformation4aDPFLTR_VDSDYNDR_ID$�*ThreadDynamicCodePolicyInfo"`�AccessReasonDeniedAce*VERIFIER_MODE_TEST-�6VirtualStorageBehaviorCacheWriteBack+��SystemInterruptSteeringInformation2JobObjectClearEvent'C/NotifyUserModeLegacyPowerEvent M,PlatformRoleAppliancePC$|.ProcessMemoryAllocationMode�TokenSource$�/IMPORT_OBJECT_NAME_EXPORTASyJournalDeleteKey'FEFileMemoryPartitionInformationY(RtlBsdItemProductType#�,	ImagePolicyEntryTypeUInt64'YPlugPlayControlEnumerateDevice43DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE|7ProcessKeepAliveCount*��SystemWheaIpmiHardwareInformationSysDbgGetTriageDump|]ProcessLoaderDetour0�RSystemThreadPriorityClientIdInformation4;DPFLTR_FLOPPY_ID#v!VmImageHotPatchInformation"�FileFsDataCopyInformation�SecurityIdentification&2JobObjectReserved5Information1K]WinCapabilityEnterpriseAuthenticationSid �	TracePmcCounterListInfo&zPoCsDeviceNotificationStorage>�'FileInformationInAssemblyOfAssemblyInActivationContxt,�PsEnergyComponentTypeForegroundTime#2ShrinkCommit$|HProcessIumChallengeResponse! DEBUG_CONTROL_SPACE_PRCB�0SystemSessionDetach4DPFLTR_CACHEMGR_ID�FileNormalizedNameInfogCOMIMAGE_FLAGS_ILONLY6*EtwWdiSemUpdate,�lSystemProcessorCycleTimeInformation#CUPowerRequestActionInternalPhoneNT4ADPFLTR_FCPORT_IDUWOP_SAVE_XMM128"C'PowerShutdownNotificationY(RtlBsdPowerTransition(�*PoSleepDisableReasonGuardedHost*�.TokenIsLessPrivilegedAppContainer�FpCodeAtan2AuditCloseObject&� ComputerNameDnsFullyQualified�5ReservedForDVRF53CVerifySystemPolicyDc"r#	DevicePropertyChangeEvent-g�COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE%MemoryTypeMax FFilePositionInformation'��SystemVsmProtectionInformation0a
PS_MITIGATION_OPTION_CONTROL_FLOW_GUARD%|aProcessLeapSecondInformationKWinLogonIdsSid�WMI_DISABLE_EVENTS CSystemPowerStateLogging/�AlpcAssociateCompletionPortInformation,�$	DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDI%�/IMPORT_OBJECT_NAME_NO_PREFIX-�EtwSessionNotificationSessionStarted"�$ParentAppContainerSidType+A
CsvControlQueryVolumeRedirectState�$MaxKeyValueInfoClass%MemExtendedParameterNumaNode3a	PS_MITIGATION_OPTION_PROHIBIT_DYNAMIC_CODE!C%TraceServicePowerMessage@PsAttributeImageInfo#�ImageUserShadowStackPolicy�
BootMaxEntropySourcesPRpcRequestsPerSecondKbWinUserModeDriversSid�#ResponseNo}KCONTINUE_LAST�WdInfoTimeoutValue!SysDbgSetPrintBufferSize*��SystemProcessorProfileControlAreaCSetPowerSettingValue%�ProcessUserShadowStackPolicy#?UNSPECIFIED_COMPARTMENT_ID*�#MemoryNotEligibleToMakeContiguous%ACsvControlQueryRedirectState-�MonitorRequestReasonPoSetSystemState�"Pos2�DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_NAME�8ReservedForDVRF56.�VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICSCNotifyUserPowerSetting ACsvControlEnableCaching!�5SC_EVENT_DATABASE_CHANGE$�BackTraceDatabaseMaxControl�TokenCapabilities&2JobObjectReserved7Informationj9KTMOBJECT_ENLISTMENT$�IrqPolicyAllCloseProcessors"�BootEntropySourceSeedfileKWinWorldSid1K8WinBuiltinIncomingForestTrustBuildersSidVRtlPathTypeRelative%5CoverageAllModules2�DTOKEN_SECURITY_ATTRIBUTE_OPERATION_DELETE"�SystemPixelFormatB8G8R8X8CVerifySystemPolicyAc�FpCodeMultiply($DISPLAYCONFIG_ROTATION_IDENTITY&� SecureSettingValueTypeUnknown�TokenRestrictedSids�CacheTraceEPowerActionWarmEject2)XJOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH*2	JobObjectExtendedLimitInformationKWinLocalServiceSid,S5MemoryPhysicalContiguityInformation�"WdActionStartTimer%REventProviderBinaryTrackInfoSysDbgCheckLowMemory0EventTraceProfileCounterListInformation�
PNP_VetoNonDisableable4DPFLTR_SYSTEM_ID#�TransactionBindInformation#r#HardwareProfileChangeEvent�-ReservedForDVRF45yJournalSetValue)�VrfProcessorBranchTraceRuleClass$'NtfsLinkTrackingInformation �"WdActionSetTimeoutValue&|<ProcessCommandLineInformation'|IProcessChildProcessInformation!Y$RtlDiskSpacePolicyNormal4@DPFLTR_RSFILTER_ID4wDPFLTR_FVEVOL_ID!�'LoadReasonEnclavePrimary4DPFLTR_TCPIP_ID�#SeImageSignatureCacheG7HANDEDNESS_LEFT#��SystemCpuSetTagInformation�(AtomBasicInformation&2$JobObjectSiloBasicInformatione*COPYFILE2_PHASE_MAX	SysDbgWriteVirtual�ThreadPerformanceCount!�VrfExtendingXDVTimeLimit/��SystemDeviceDataEnumerationInformation^IoPriorityNormal.Y	PlugPlayControlGetInterfaceDeviceList0�*��DISPLAYCONFIG_PIXELFORMAT_FORCE_UINT32%�SystemDpcBehaviorInformation!FFileAlignmentInformationKiWinLocalAccountSid)2JobObjectInterferenceInformation+EventTraceKernelVersionInformation'�SystemSummaryMemoryInformation(�#WorkerFactoryThreadBasePriorityA�DISPLAYCONFIG_DEVICE_INFO_SET_SUPPORT_VIRTUAL_RESOLUTION4DPFLTR_STORPROP_ID'zPoCsDeviceNotificationEthernet!�BSystemBigPoolInformation �MmEtwWorkingSetTypeUser-A	CsvControlQueryFileRevisionFileId128ComputeServer�ThreadIsTerminated%5CoverageSearchByName�>ReservedForDVRF62,2&JobObjectServerSiloBasicInformation �GServiceDirectoryTypeMax`AccessReasonNone4\DPFLTR_VSSDYNDISK_ID �SectionImageInformation�3MaxThreadInfoClass SysDbgClearSpecialCalls%��SystemFullProcessInformationoDevicePowerState'AuditOpenObjectWithTransactionY(RtlBsdItemBootShutdown�#
WorkerFactoryFlags3�%MonitorRequestReasonUserInputPoUserPresent"�FileFsFullSizeInformationSYSTEM_HANDLE_MUTEX�SystemVaTypeSystemPtesC1ProcessorIdleDomains�TokenAccessInformationKWinDialupSid�TraceGuidQueryList!.STimerSetCoalescableTimer�GEO_ID�GEO_CURRENCYCODE1FBFileRenameInformationExBypassAccessCheck6*EtwIncrementFileCode�GEO_CURRENCYSYMBOL�FpCodeCosh*�=POINTER_DEVICE_CURSOR_TYPE_ERASER%�SystemVdmInstemulInformation(|AProcessCommitReleaseInformation2JobObjectContainerIdCCPdcInvocation-7)SystemMemoryPartitionGetMemoryEvents+�"CsvFsDiskConnectivitySubsetOfNodes+t;PerfInfoDomainChangeEventEnterTrap,;ProcThreadAttributeDesktopAppPolicy/ACsvControlUnmarkHandleLocalVolumeMountProfileMaximum1"HeapMemoryLimit"�#MaxWorkerFactoryInfoClass"g$RtlRXactOperationSetValue�$ErrorOthers02/JobObjectThreadImpersonationInformation�RF_SORTED3���DISPLAYCONFIG_COLOR_ENCODING_FORCE_UINT32�'LoadReasonDynamicLoadSYSTEM_HANDLE_SECTION(�SectionInternalImageInformation0k0BootEntropySourceStructureUninitialized�SystemPathInformation3aPS_MITIGATION_OPTION_EXPORT_ADDRESS_FILTER,U"FEEDBACK_TOUCH_CONTACTVISUALIZATION*VERIFIER_MODE_FIELD4�DPFLTR_VPCI_ID�
GEO_PARENT$�'LoadReasonEnclaveDependency 2-JobObjectSiloSystemRoot%�DynamicTickVetoSoftwareTimer4DPFLTR_SVCHOST_ID%�MonitorRequestReasonResumeS4�'ThreadSelectedCpuSets-��SystemCodeIntegrityPolicyInformation#EtwNotificationTypePerflib"�TP_CALLBACK_PRIORITY_HIGHKWinBuiltinDomainSid.�SystemProcessorPerformanceInformation!7)	SystemMemoryPartitionMax� ComputerNameDnsDomain'2JobObjectCycleTimeNotification*�SystemPerformanceTraceInformationC]EnergyTrackerQuery% DEBUG_CONTROL_SPACE_KSPECIAL!�0PoDisabledStateSleeping4�AlpcServerInformation'2JobObjectReserved10Information!y,��POINTER_DEVICE_TYPE_MAX)�ManageHotPatchQueryActivePatches@JCSystemActivityModerationStateUserManagedAllowThrottlingOSidTypeDomain'F%FileIdBothDirectoryInformation%1"HeapCompatibilityInformation%MemoryTypeNonPagedFFFileStatLxInformation!@PsAttributePriorityClass�+IMO_SYSTEM^IoPriorityLow$bUmsInformationCommandDetach!�"SgiInternalConfiguration�CacheInstruction�	SystemFlagsInformationFFileFullEaInformation%�uSystemBootEntropyInformation-�'LoadReasonDynamicForwarderDependency�#ResponseNotHandled*1/CI_WINDOWS_LOCKDOWN_MODE_UNLOCKED�"FpCodeY0*�-MonitorRequestReasonDirectedDrips�TokenUser4IDPFLTR_PROCESSOR_ID(FJFileStorageReserveIdInformation/ZEReadDirectoryNotifyExtendedInformation*KpWinBuiltinStorageReplicaAdminsSidC,PowerRequestActions!STUB_MARSHAL(F#DISPLAYCONFIG_SCALING_STRETCHED�TokenGroups%�
FileFsVolumeFlagsInformation ��SystemPolicyInformation(�aSystemVerifierFaultsInformation�TokenSandBoxInertC
SystemReserveHiberFile,aPS_MITIGATION_OPTION_ROP_STACKPIVOTUWOP_PUSH_NONVOLToleranceMedium(MemExtendedParameterInvalidType"K/WinAccountSchemaAdminsSid#�#WorkerFactoryThreadCpuSets?DEFAULT_COMPARTMENT_ID7�'AssemblyDetailedInformationInActivationContext*|0ProcessTokenVirtualizationEnabled"�MaximumIoPriorityHintTypefFpFormatFp64*EventTraceStackTracingInformation+)XJOB_OBJECT_NET_RATE_CONTROL_ENABLE&6CriticalError%�FileStorageTierMediaTypeDisk,2+JobObjectMemoryPartitionInformation#�,ImagePolicyEntryTypeUInt32!�0PoDisabledStateSleeping1 �$KeyValueFullInformation<DPROXY_CALCSIZE qIoSessionStateConnected?a$PS_MITIGATION_OPTION_CET_DYNAMIC_APIS_OUT_OF_PROC_ONLY�ThreadCycleTime/�CrossProcOperationMemoryAllocPreNotify�VrfRuleClassBase/EventTraceExecutiveResourceInformation*t;PerfInfoDomainChangeEventIdleHaltyJournalSetKeySecurity}KCONTINUE_SET!5ObjectSessionInformation$U(MandatoryLevelSecureProcess r#TargetDeviceChangeEvent{EndAlternatives."SystemCrashDumpInitializationComplete�)EtwRtBackupLost� UmsThreadTeb�SecurityAnonymousN;PowerUserPresent/�MonitorRequestReasonBatteryCountChange'Y(RtlBsdItemPowerButtonPressInfo"�MonitorRequestReasonWinrt*�ProcessSideChannelIsolationPolicy%�9DDC_DISABLE_CONTROL_RELAYOUT)�9SystemExtendedProcessInformationDPortBasicInformation*��SystemInterruptCpuSetsInformationj$MonitorRequestTypeOff�BootEntropySourceCng!�VrfPortMiniportRuleClassKWinServiceSid/��SystemTrustedPlatformModuleInformation&M&POINTER_CHANGE_THIRDBUTTON_UP% SynchronizationTimer&6IgnoreError�BSC_ACTION_RUN_COMMAND^MaxIoPriorityTypes"F-FileSfioVolumeInformation4
DPFLTR_SCSIMINIPORT_ID%MemoryTypePaged/aPS_MITIGATION_OPTION_RETURN_FLOW_GUARD�TokenAuditPolicy�
GEO_TIMEZONES `��AccessReasonNoGrant+�EtwSessionNotificationMediaChanged&6NormalError!FFileDirectoryInformation|	ProcessAccessToken)�6SystemLoadGdiDriverInSystemSpace|ProcessLdtSize4DPFLTR_VIDEO_ID4�DPFLTR_KSECDD_ID$.+RtlFeatureConfigurationBoot'�"ThreadCpuAccountingInformation(��SystemKernelVaShadowInformatione-MemoryReserveUserApc<DPROXY_GETBUFFER"2@EtwCompressionModeRestartAuditPrivilegeService!RelationProcessorPackage,�SharedVirtualDiskSnapshotsSupported RPCHTTP_RS_SESSION�'LoadReasonAsImageLoad+EAlpcMessageDirectStatusInformationfFpFormatI32$s!STUB_CALL_SERVER_NO_HRESULT!SysDbgGetUmBreakPid!'COPYFILE2_CALLBACK_ERROR� UmsThreadIsSuspended�$Width32Bits#K4WinDigestAuthenticationSid�FileAlignmentInfo4�'CompatibilityInformationInActivationContext ���InterfaceTypeUndefined �WMI_SET_SINGLE_INSTANCE�VrfNdisWifiRuleClass($DISPLAYCONFIG_ROTATION_ROTATE90C;GetPowerSettingValue*KIWinNonCacheablePrincipalsGroupSid$�:RtlMitigationOptionStateOff F5FileNumaNodeInformation4DPFLTR_HALIA64_IDKWinProxySid5�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EXTERNAL5FKFileCaseSensitiveInformationForceAccessCheck4ODPFLTR_IHVAUDIO_IDA�JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP4}DPFLTR_SBP2PORT_ID*�MemoryPurgeLowPriorityStandbyList%��SystemMemoryUsageInformation'�VRF_TRIAGE_CONTEXT_DEVELOPMENT
SysDbgReadPhysicalKPWinLocalLogonSid"�ImagePolicyIdCrashDumpKey"KcWinBuiltinHyperVAdminsSid'B*ServiceRegistryStateParameters4-DPFLTR_UNIMODEM_ID�/TokenIsSandboxedEnterprise�BootEntropySourceTime
�Eisa#ProfileIntegerInstructions4DPFLTR_AMLI_IDRelationProcessorCore�"	WdActionWakeProfileTotalNonissuesU"��FEEDBACK_MAX"TSmrGcActionStartFullSpeed�ThreadLastSystemCall ��SystemFlags2Information%gCOMIMAGE_FLAGS_32BITREQUIRED"�,ImagePolicyEntryTypeUInt8!ProfileStoreInstructions�TraceMaxLoggersQuery|@�AR_LAPTOP4�DPFLTR_CFR_ID$YPlugPlayControlDeviceStatusI#ProcessPowerThrottling/SharedVirtualDiskHandleStateFileShared�SmrGcMethodCompression4�DPFLTR_STORVSP_ID(�IrqPolicyAllProcessorsInMachine#�SystemFileCacheInformation;�/SystemFeatureConfigurationSectionTypeUsageTriggers0�PsEnergyComponentTypeDesktopVisibleTimeuDEPTotalPolicyCount42DPFLTR_IMAPI_ID�
TraceSetDisallowList�"HiberFileBucket8GBiGroupAffinityDontCare,��SystemSpeculationControlInformationOSidTypeGroup4=DPFLTR_TERMSRV_ID#�EPowerRequestSystemRequired
StorageServer3aPS_MITIGATION_OPTION_IMPORT_ADDRESS_FILTER&�"CsvFsDiskConnectivityAllNodes%bUmsInformationCommandInvalid#�6FixedWakeSourcePowerButton)
EtwNotificationTypeInProcSession�"HiberFileBucket32GB�$PsWakeReasonKernel%I#ProcessTelemetryCoverageInfon.WnfTemporaryStateName%SysDbgGetKdUmExceptionEnable4�DPFLTR_MOUNTMGR_ID5��SystemCodeIntegritySyntheticCacheInformation#�XSystemProcessIdInformation*�0TokenOriginatingProcessTrustLevel1Y(RtlBsdItemReportedAbnormalShutdownBootId,�VrfTrackingPoolAllocationsRuleClass K7WinOtherOrganizationSid�PowerSystemUnspecified"�BootEntropySourceExternal&�EPowerRequestExecutionRequired'F#DISPLAYCONFIG_SCALING_CENTERED}KCONTINUE_UNWIND"�#WorkerFactoryRetryTimeout4	DPFLTR_DISK_IDxOptionAbortRetryIgnore(��SystemMemoryTopologyInformationI#ProcessAppMemoryInfo3JCSystemActivityModerationStateSystemManaged$
 ORIENTATION_PREFERENCE_NONE"%IDL_CS_NEW_BUFFER_CONVERT$|BProcessReserved1Information)KKWinAccountReadonlyControllersSid�KeyFlagsInformation�9DDC_DISABLE_ALL'=3FindExSearchLimitToDirectories�+IMO_HARDWAREq(EventBasicInformation�)EtwRtEventLost#C$SystemHiberFileInformationgCOR_VTABLE_64BIT�$Width16Bits'Y(RtlBsdPowerTransitionExtension%FFileMailslotQueryInformation);ProcThreadAttributeGroupAffinity!�0PoDisabledStateSleeping34[DPFLTR_PRINTSPOOLER_ID$SysDbgDisableKernelDebugger#�VRF_TRIAGE_CONTEXT_DEFAULT5�/SystemFeatureConfigurationSectionTypeRuntime|#ProcessTlsInformation{NEC98x86"YPlugPlayControlHaltDevice�"VrfMoreIrqlRuleClass�)FixedWakeSourceType#�TokenVirtualizationEnabled)�"MonitorRequestReasonUserInputPen/2JobObjectExtendedAccountingInformation%�0DynamicTickDisableReasonNone�FileFsLabelInformationTerminalServer&S5MemorySharedCommitInformation$�FeatureEnabledStateDisabled'Z%CmExtendedParameterInvalidTypeTP_LOG_LEVEL_WARNING2�+SystemProcessClassificationMemCompression.��SystemSupportedProcessorArchitectures�PoConditionMaximum"Y$RtlDiskSpacePolicyVeryLow$�)TimerPresumedWakeSourceType$YPlugPlayControlUserResponse;b,CI_WINDOWS_LOCKDOWN_RESTRICTION_NOUNLOCK_PERMANENT�BSC_ACTION_NONE3��LdrModulesUnloadedRelationGroup�	GEO_OFFICIALNAMEVRtlPathTypeUncAbsolute4HDPFLTR_PNPMEM_ID6*EtwQueryLoggerCode0>WOW64_FUNCTION_QUERY_PROCESS_DEBUG_INFO4|GProcessRaiseUMExceptionOnInvalidHandleClose0�CrossProcOperationInstructionCacheFlush$TimerBasicInformation!�SystemProcessInformation!�ThreadImpersonationToken#&KeyControlFlagsInformationDSmrGcStatePaused%KZWinCapabilityMusicLibrarySid�LT_DONT_CAREN;PowerUserInactive&M,PlatformRolePerformanceServer+2
JobObjectLimitViolationInformation�IoPriorityHintVeryLow&)DISPLAYCONFIG_TOPOLOGY_EXTEND(�=��POINTER_DEVICE_CURSOR_TYPE_MAX#�PNP_VetoInsufficientRights|ProcessRaisePriority�#	ResponseTryAgain7�DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_BASE_TYPE4/DPFLTR_FLTMGR_ID�FpCodeExp�"HiberFileBucket4GB'KHWinCacheablePrincipalsGroupSid�$GenericGreaterThan@a PS_MITIGATION_OPTION_USER_CET_SET_CONTEXT_IP_VALIDATION�PsCreateFailOnFileOpen$�LearningModeLogLevelPassive�7PdataCrChained!�EtwQueryLastDroppedTimesxOptionOkCancel!{PsProtectedSignerCodeGen,]SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN,�+SystemProcessClassificationRegistry3��SystemCodeIntegrityVerificationInformation7��SystemAffinitizedInterruptProcessorInformation4`DPFLTR_VDSDYN_ID ProfileLoadInstructions%gCOR_VTABLE_CALL_MOST_DERIVED,t;PerfInfoDomainChangeEventIdleResume�#ResponseYesZ@UserProcessRequester�"HiberFileBucket2GB"�EtwSessionNotificationMax8�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPONENT_VIDEO"R"EtwProviderTraitTypeGroupWnfDataScopeUserPRpcIncomingBandwidth$� ComputerNamePhysicalNetBIOS#�!SystemExceptionInformation%�SectionRelocationInformation,@DISPLAYCONFIG_MODE_INFO_TYPE_SOURCE9aPS_MITIGATION_OPTION_RESTRICT_SET_THREAD_CONTEXT7�MonitorRequestReasonAcDcDisplayBurstSuppressed(�?IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF!�$ChildAppContainerSidType!KGWinCreatorOwnerRightsSid&�xSystemSystemPtesInformationEx7��SystemCodeIntegrityPlatformManifestInformation!�ImagePolicyIdParentSdRevAProcessWorkingSetEmptyPnpQueryEjectRelations'��SystemSecurityModelInformation�"MaximumBusDataType!�WdInfoGeneratedLastReset*��SystemIsolatedUserModeInformation!�PsEnergyComponentTypeMBB�%TokenDeviceGroups�GEO_NAMEY(
RtlBsdItemBootId0�DTOKEN_SECURITY_ATTRIBUTE_OPERATION_NONE�9DDC_DEFAULT"�]SystemTimeZoneInformation�TokenSessionId�PsCreateMaximumStates-�FeatureEnabledStateOptionsWexpConfig'�FileIdExtdDirectoryRestartInfo�MaxSectionInfoClass*�USystemProcessorPowerInformationEx+Z%CmExtendedParameterFileAccessToken.EventTraceProfileEventListInformation)M&POINTER_CHANGE_FOURTHBUTTON_DOWN$PKHeteroCpuPolicySmallOrIdle%�TraceProfileSourceConfigInfoe*COPYFILE2_PHASE_NONE&�RtlSparseBitmapOperationClear�BSC_ACTION_RESTART&KWinBuiltinAccountOperatorsSid|:ProcessHandleTable �SystemVaTypeSystemCache+��SystemOfflineDumpConfigInformation �SystemModuleInformation &KeyWriteTimeInformationC3DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST+��SystemCodeIntegrityAddDynamicStore$��SystemSpacesBootInformation!{PsProtectedSignerWindows%2.JobObjectEnergyTrackingState � ComputerNameDnsHostname$�cSystemSystemDiskInformation(v!VmPhysicalContiguityInformation'�,
ImagePolicyEntryTypeAnsiString"�SystemPixelFormatR8G8B8X8#�TP_CALLBACK_PRIORITY_COUNT�ThreadPriorityBoost$�2SystemRangeStartInformationG7HANDEDNESS_RIGHT.EAlpcMessageTokenModifiedIdInformation% SysDbgRegisterForUmBreakInfo"�ESystemHotpatchInformation�PowerSystemSleeping2SysDbgSetTracepointFEDIT_CONTROL_FEATURE_ENTERPRISE_DATA_PROTECTION_PASTE_SUPPORT4ZDPFLTR_STORMINIPORT_ID"�MSystemModuleInformationEx!|9ProcessWorkingSetControl2�FeatureConfigurationOperationVariantState�EventSecurityAddDACL"�TraceLbrConfigurationInfo$WorkerFactoryCallbackNormal�PNP_VetoLegacyDeviceACsvControlStopForceDFO�FpCodeLdexp6KeWinBuiltinAccessControlAssistanceOperatorsSid/v!VmVirtualMachinePrepopulateInformation)�MonitorRequestReasonSxTransition�TokenTypeM&POINTER_CHANGE_NONE3LdrModulesInitializingEtwNotificationTypeMax�ImageSignaturePolicy#�FeatureEnabledStateDefault4�DPFLTR_TXF_ID(�MonitorRequestReasonPowerButton|@AR_MULTIMON4VDPFLTR_TCPIP6_ID#FFileCompressionInformation'2+JobObjectReserved21InformationWnfInfoIsQuiescent%�ProcessMitigationOptionsMask4�DPFLTR_EXFAT_ID(�CSystemSessionPoolTagInformationgCOR_VERSION_MAJOR_V2WnfDataScopeMachine�RtlResTypeMax'2/JobObjectReserved25Information2~:ACTCTX_COMPATIBILITY_ELEMENT_TYPE_UNKNOWN"g IMAGE_COR_EATJ_THUNK_SIZE<GEOCLASS_NATION'F&FileIdFullDirectoryInformation$�,
ImagePolicyEntryTypeMaximum(��SystemIntegrityQuotaInformation1b,CI_WINDOWS_LOCKDOWN_RESTRICTION_NOUNLOCK!�ThreadBreakOnTermination!@PsAttributeMemoryReserve2#JobObjectCreateSilo)|BProcessDefaultCpuSetsInformation�ThreadAffinityMask*KnWinAccountDefaultSystemManagedSidxOptionRetryCancel%IMDT_PEN)"FpRoundPlusInfinity&�LearningModeLogLevelNormalApc�TraceStackTracingInfo)�
MonitorRequestReasonPolicyChangeMaxSuiteTypeCTThermalEvent 
SysDbgWriteControlSpace$2@EtwCompressionModeNoRestart�MemoryCommandMaxC*SessionDisplayState&;ProcThreadAttributeHandleListK
WinAnonymousSid�FileCaseSensitiveInfo!<JournalClientInformation&T$LowMemoryResourceNotificationToleranceLow �	TokenImpersonationLevel|@ AR_NOT_SUPPORTEDA�DISPLAYCONFIG_DEVICE_INFO_GET_SUPPORT_VIRTUAL_RESOLUTION%��SystemKernelDebuggingAllowed"EtwNotificationTypeEnableSysDbgWritePhysicalC5ProcessorPerfStatesHv�ThreadIsIoPending�3SC_ENUM_PROCESS_INFO)�0PoDisabledStateSleeping4Firmware1�CrossProcOperationMemoryProtectPreNotify�
TraceGroupQueryInfo%�QSystemFileCacheInformationExCLastSleepTimeU"FEEDBACK_TOUCH_TAP4<DPFLTR_FDC_ID*=InternalWakeSourceDozeToHibernate&�MonitorRequestReasonPdcSignal.�CrossProcOperationMemoryFreePreNotify�FirmwareTypeBios-�#QUERY_FILE_LAYOUT_FILTER_TYPE_FILEID"�4SystemVerifierThunkExtend#PowerMonitorDim!��SystemBadPageInformationY$
RtlDiskSpacePolicyLow&�#WorkerFactoryBasicInformation�FpCodeLog,;ProcThreadAttributeMitigationPolicy+F2FileIdGlobalTxDirectoryInformation CSystemPowerCapabilities!�,ImagePolicyEntryTypeInt8)t;PerfInfoDomainChangeEventMaximum/K\WinCapabilitySharedUserCertificatesSid3��LdrModulesInitError-b-PoHiberForceDisableReasonGuardedHost$|KProcessSubsystemInformation4�DPFLTR_FSLIB_ID<DPROXY_SENDRECEIVE4.DPFLTR_SIS_ID*k0BootEntropySourceDisabledByPolicy&YPlugPlayControlGetDeviceDepth%�EPowerRequestAwayModeRequired�BSC_ACTION_REBOOT(&KeySetVirtualizationInformation&�PsEnergyComponentTypeAudioOut*|bProcessFiberShadowStackAllocation4SDPFLTR_HPS_IDKWinLocalSid�/IMPORT_OBJECT_NAME*�vSystemVerifierCountersInformation&�$PsWakeReasonExecutionRequired/�DTOKEN_SECURITY_ATTRIBUTE_OPERATION_ADDCMDisplayBurst'2&JobObjectReserved16InformationgNATIVE_TYPE_MAX_CB$�OSystemSuperfetchInformationC(MonitorCapabilities4DPFLTR_CDAUDIO_ID# DEBUG_CONTROL_SPACE_THREAD=�$
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EXTERNAL4~DPFLTR_COVERAGE_IDxOptionYesNoCancelr#MaxPlugEventCategorySysDbgReadIoSpace�
ImageImageLoadPolicy��SystemEdidInformation#�SystemProcessorInformation3��LdrModulesUnloadingProfileDcacheMisses'COPYFILE2_CALLBACK_MAXI#ProcessMemoryPriority"�)ThreadActualGroupAffinity3��SystemCodeIntegrityPoliciesFullInformation)YPlugPlayControlRegisterNewDevice"PKHeteroCpuPolicyStaticMax(�6VirtualStorageBehaviorUndefined�/IMPORT_OBJECT_ORDINAL"� UmsThreadInvalidInfoClass40DPFLTR_WMICORE_ID�5Win32ServiceOwnProcess'2JobObjectReserved14Information=�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EMBEDDED�*CmResourceShareShared�PowerSystemSleeping1+�7MaxSystemActivityModerationAppType#ACsvControlStopRedirectFile$k0BootEntropySourceNotPresent&�#WorkerFactoryAdjustThreadGoal$�FileStorageTierMediaTypeSsdU"FEEDBACK_PEN_RIGHTTAP"iGroupAffinityAllGroupZero�TraceGuidQueryInfo$|CProcessReserved2Information$EtwNotificationTypeReserved�FileBasicInfoPKHeteroCpuPolicyAll3�/SystemFeatureConfigurationSectionTypeCount!��SystemConsoleInformation%;ProcThreadAttributeUmsThread-t;PerfInfoDomainChangeEventUserCallout�#PsAlwaysDuplicate	UWOP_SAVE_XMM128_FAR|ProcessWorkingSetWatch�mSystemStoreInformation�ThreadBasePriority�TokenOwner�SystemVaTypeMaxC3SystemHiberFileSizeKWinNtAuthoritySid�TokenPrivileges3gCOR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN�6FixedWakeSourceRtc&{PsProtectedSignerAuthenticode�1MaxTokenInfoClassPRpcIncomingConnections$ProfileBranchMispredictions�(CpuSetInformation#�MmEtwWorkingSetTypeSession,V7MemSectionExtendedParameterNumaNode5��SystemFeatureConfigurationSectionInformation8�)MonitorRequestReasonPdcSignalWindowsMobileShell'2JobObjectBackgroundInformation6*EtwActivityIdCreateAaPS_MITIGATION_OPTION_RESTRICT_INDIRECT_BRANCH_PREDICTION.� ComputerNamePhysicalDnsFullyQualified#;
ProcThreadAttributeJobList!�FileFsControlInformationCASystemHiberbootState+0GdRtlDiskWriteConstraintPolicyNormal�'BootLoadCompatible�ProcessSignaturePolicy gCOR_DELETED_NAME_LENGTH �SystemVdmBopInformationUWOP_EPILOG&�ImagePayloadRestrictionPolicy+��SystemProcessorFeaturesInformation4MDPFLTR_IHVDRIVER_ID$|ProcessPooledUsageAndLimits4bDPFLTR_VDSLDR_ID#4)IoSessionEventDisconnected�BootEntropySourceNone-��SystemSecureKernelProfileInformation&CNExitLatencySamplingPercentage�5SC_EVENT_STATUS_CHANGE'�=POINTER_DEVICE_CURSOR_TYPE_TIPC9UserPresence!k0BootEntropySourceSuccess-�MonitorRequestReasonRemoteConnection�
ThreadZeroTlsCell!�0PoDisabledStateReserved5!@
PsAttributePreferredNode&��SystemBuildVersionInformation!�+TokenSingletonAttributes4�DPFLTR_CAPIMG_ID�"	MPSAConfigurations!STUB_CALL_SERVER$YPlugPlayControlRetrieveDock"`�@AccessReasonOwnershipS5MemoryImageInformation)�fSystemDynamicTimeZoneInformation&�
FileFsMetadataSizeInformation!�SystemVaTypeSessionSpace0�+SystemProcessClassificationSecureSystem5ObjectTypeInformation�VrfSystemBIOSRuleClass�FpCodeUnspecified)aPS_MITIGATION_OPTION_ROP_SIMEXEC[ThreadMemoryPriorityKQWinConsoleLogonSidM,PlatformRoleSOHOServer�FpCodeAdd*KSWinApplicationPackageAuthoritySid'j$MonitorRequestTypeOnAndPresent!KWinCreatorGroupServerSid#�SystemPagedPoolInformation2�hSystemProcessorMicrocodeUpdateInformation02JobObjectTimerVirtualizationInformation<2FindStreamInfoStandard/|5ProcessDynamicFunctionTableInformation-@PsAttributeSafeOpenPromptOriginClaimO
SidTypeLabel�ProcessorInternal�FpCodeFloor&j9KTMOBJECT_TRANSACTION_MANAGER/KMWinNewEnterpriseReadonlyControllersSid?�'FileInformationInAssemblyOfAssemblyInActivationContextBackOffice RPCHTTP_RS_ACCESS_24#DPFLTR_PNPMGR_ID$�FileStorageTierMediaTypeMax| ProcessHandleTracing �9MemoryExhaustionTypeMax%EAlpcMessageHandleInformation �NUM_VRF_TRIAGE_CONTEXTSHAL_MCE_RECORD�"HiberFileBucketMax&0PerfInfoMMStatMax!�
TokenGroupsAndPrivilegesC7ProcessorSetIdle-�$DISPLAYCONFIG_OUTPUT_TECHNOLOGY_LVDS�!VmOfferPriorityNormalC.ProcessorInformationEx%FFileAlternateNameInformation1�|SystemQueryPerformanceCounterInformation �'TokenSecurityAttributes'�DynamicTickVetoClockConstraint4>DPFLTR_W32TIME_ID
�Vmcs%U"FEEDBACK_GESTURE_PRESSANDTAP�6PT_MOUSE MemExtendedParameterMax'�IMidlInterceptionInfoVersionOne FAFileRenameInformationEx KWinBuiltinPowerUsersSid%�?DPI_HOSTING_BEHAVIOR_DEFAULT*��SystemKernelDebuggerInformationExStorageReserveIdMaxyMaxJournalChangeAction|
ProcessLdtInformation1;ProcThreadAttributeMitigationAuditPolicy�ImagePolicyIdDebug+F1FileNetworkPhysicalNameInformation<TableInsertAsLeft�5AdapterType0�FeatureConfigurationOperationResetStatek0BootEntropySourceError"�VrfCodeIntegrityRuleClass*2JobObjectSecurityLimitInformation�5FileSystemType$��SystemSoftRebootInformation(�MonitorRequestReasonGracePeriod5�*JOBOBJECT_IO_ATTRIBUTION_CONTROL_VALID_FLAGS1
TransactionManagerOnlineProbeInformationC+PowerRequestCreate)
TransactionManagerLogInformation#�
BootEntropySourceTcbRdrand$�FileFsSectorSizeInformation)"FpRoundNearest�"EisaConfiguration%�FilterBootOptionOperationMax"|VProcessEnclaveInformation6�'AssemblyDetailedInformationInActivationContxtStorageReserveIdHard)YPlugPlayControlQueryConflictList#�/DPI_AWARENESS_SYSTEM_AWARE0
 ORIENTATION_PREFERENCE_PORTRAIT_FLIPPED#�SystemCallCountInformation#�'USER_MARSHAL_CB_UNMARSHALLF	FileNameInformation�	ImagePolicyIdDeviceIde-MemoryReserveTypeMax'�SystemLoadGdiDriverInformation �*PoSleepDisableReasonMax"|+ProcessImageFileNameWin325aPS_MITIGATION_OPTION_EXTENSION_POINT_DISABLE+�ProcessExtensionPointDisablePolicy)�#SeImageSignatureCatalogNotCached*�ASystemLostDelayedWriteInformation�TokenElevationNTpTraceThreadAffinity!�(PsProtectedTypeProtectedWaitAny"�.ThreadDbgkWerReportActives'ObjectIdType%5CoverageSearchByHash$�PsCreateFailMachineMismatch$SysDbgClearUmAttachPid|ProcessPriorityClass|ProcessTimes#�TokenVirtualizationAllowed�PerfInfoMemResetUndo&F3FileIsRemoteDeviceInformationMultiUserTS�ACPIBus#aPS_MITIGATION_OPTION_SEHOP�FpCodeCeil$��SystemDeviceDataInformation4WDPFLTR_ISAPNP_ID�RF_CALLBACK4�DPFLTR_CNG_ID%CVerifyProcessorPowerPolicyDc�(PsProtectedTypeMax%� SecureSettingValueTypeString7�DTOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL� ComputerNameMax+��SystemVmGenerationCountInformation-)XJOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG|gMaxProcessInfoClassK(WinAccountKrbtgtSid)��SystemWriteConstraintInformation$oThreadWorkloadClassGraphics4gDPFLTR_DFSC_ID#�'LoadReasonStaticDependency/2JobObjectSchedulingRankBiasInformation$�SubsystemInformationTypeWSL EToleranceIntervalMedium'�'PMETypeFailFastOnCommitFailurev!VmPrefetchInformation)��SystemElamCertificateInformation1��SystemCriticalProcessErrorLogInformation'�*PoSleepDisableReasonHypervisorMaxPnpQueryRelations�EventSecurityMaxN$KeyAdded/��SystemCombinePhysicalMemoryInformation"ProfileBranchInstructions*�FeatureVariantPayloadKindResidentyJournalDeleteValue�CacheData�;SystemComPlusPackage4UDPFLTR_LDR_ID!>MemoryLocationPagefile8WorkerFactoryCallbackDetectedUnrecoverableErrorC ProcessorPerfStates/]SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE�FpCompareLess�FileDispositionInfoEx#ProfileMemoryBarrierCycles�ProcessASLRPolicy.7)SystemMemoryPartitionInitialAddMemory S5MemoryRegionInformationSYSTEM_HANDLE_FILE-
TransactionManagerLogPathInformation2�/SystemFeatureConfigurationSectionTypeBoot;+GetFileExMaxInfoLevel()DISPLAYCONFIG_TOPOLOGY_EXTERNALUWOP_SAVE_NONVOL_FARq	IoSessionStateMax qIoSessionStateLoggedOff"REventProviderSetReserved1(�*DISPLAYCONFIG_PIXELFORMAT_16BPP3@DISPLAYCONFIG_MODE_INFO_TYPE_DESKTOP_IMAGE�FileStreamInfoY(RtlBsdItemAabEnabled)K9WinBuiltinPerfMonitoringUsersSid%�PNP_VetoIllegalDeviceRequest0�*MonitorRequestReasonPdcSignalHeyCortana&�FeatureVariantPayloadKindNone 4�DPFLTR_DRIVEEXTENDER_ID!>MemoryLocationReserved�[MemoryRegionInfo	PerfCSwapFull$�RtlSparseBitmapOperationMax�RF_KERNEL_DYNAMIC-��SystemActivityModerationUserSettings,�FileStorageTierMediaTypeUnspecified4%DPFLTR_SCSERVER_IDCKPlatformRole-�SystemScrubPhysicalMemoryInformation�+ReservedForDVRF43O	SidTypeComputer!|3ProcessHandleInformation/Y
PlugPlayControlGetInterfaceDeviceAlias!�$PsWakeReasonWorkOnBehalf49DPFLTR_IDEP_ID.KgWinAuthenticationAuthorityAssertedSidWaitDequeue$|ZProcessDebugAuthInformation�KeyNodeInformation3	LdrModulesReadyToRun�"
WdActionMarkHiberPhase FFileInternalInformation"v!VmPagePriorityInformation$�\SystemVerifierInformationEx%FGFileCaseSensitiveInformation"�VrfAdditionalDDIRuleClass�PowerSystemHibernate+��SystemDifClearRuleClassInformation�FpCodeCabs"KFWinWriteRestrictedCodeSid#R"EtwProviderTraitDecodeGuid#��SystemFwRamdiskInformationFFileLinkInformation,aPS_MITIGATION_OPTION_BOTTOM_UP_ASLR;�(MonitorRequestReasonPdcSignalWindowsMobilePwrNotif!y	JournalCommitTransaction�VrfAdvancedMMRuleClass"�$VrfStandalonePlatformMode$e*COPYFILE2_PHASE_SERVER_COPYZ&LdrpWebDAV$ DEBUG_CONTROL_SPACE_MAXIMUM!�FSystemObjectSecurityMode+7)SystemMemoryPartitionSetAttributes{PsProtectedSignerNone�PNPBus!gIMAGE_COR_MIH_BASICBLOCKK
WinBatchSidC6ProcessorPerfCapHv�ImagePolicyIdSvn$F#FileAttributeTagInformation)EtwNotificationTypePrivateLogger|ProcessPriorityBoostb!TransactionStateNormal#�SystemInterruptInformation1EtwNotificationTypeFilteredPrivateLoggerfFpFormatFp32�BackTraceDatabaseFlush�MPSABus+�MonitorRequestReasonThermalStandbySysDbgWriteBusData*e*COPYFILE2_PHASE_WRITE_DESTINATION4)DPFLTR_UHCD_ID�N�m
t__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi#�$_KEY_VALUE_INFORMATION_CLASS �GWMI_PROCESS_INFORMATION64$�^PHEAP_AFFINITY_MANAGER_ENABLE*C_FILE_PIPE_CLIENT_PROCESS_BUFFER_V2*C5_SYSTEM_KERNEL_DEBUGGER_INFORMATION'�^PCACTIVATION_CONTEXT_QUERY_INDEXK�[_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFULuUINT�MENUITEMINFO38ALTTABINFO�^PSYSDBG_LIVEDUMP_CONTROL�^PXSAVE_FORMAT�ENUM_SERVICE_STATUSW�^PGENERIC_MAPPING7j_RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY!�B_RTL_UNICODE_STRING_BUFFER�8HARDWARE_COUNTER_DATA �^ANON_OBJECT_HEADER_BIGOBJ+b0PERFINFO_YIELD_PROCESSOR_INFORMATION(�^PSYSTEM_ALARM_CALLBACK_OBJECT_ACE_SE_AUDIT_OPERATION-�^PSYSTEM_KERNEL_DEBUGGER_INFORMATION_EX�^PFILE_ID_TYPEo+PMOUSEHOOKSTRUCTTIMEFMT_ENUMPROCA!�=POINTER_DEVICE_CURSOR_TYPE�^PFILE_PIPE_PEEK_BUFFER�^HKEY�LPCDLGTEMPLATEA&^EVENT_HEADER_EXTENDED_DATA_ITEMPRTL_REFERENCE_COUNT32�^PFP_128,AX_SYSTEM_BASIC_PERFORMANCE_INFORMATION�^RTL_AVL_FREE_ROUTINEDAUDIT_EVENT_TYPE(i8LOOKUP_STREAM_FROM_CLUSTER_OUTPUT_6HOT_PATCH_IMAGE_INFO�@PTPP_START_ROUTINE�^LPENUMLOGFONTA�TWCRANGE)�^PACCESS_DENIED_CALLBACK_OBJECT_ACE7�^PIMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATIONALPC_PORT_ATTRIBUTES.�G_DISPLAYCONFIG_SET_ADVANCED_COLOR_STATENtagMOUSEMOVEPOINT�^PINPUT_INJECTION_VALUE%X>_MANAGE_HOT_PATCH_UNLOAD_PATCH,Y PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA#G _QUERY_STORAGE_RESERVE_INPUT�^PFILE_COMPRESSION_INFO�^NPWNDCLASSEX!
T_ETW_THREAD_AFFINITY_EVENT'�^PPUBLIC_OBJECT_BASIC_INFORMATION�^PIPT_TRACE_EVENT_DATA�+PCUZZWSTR/;_STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE$�^PSYSTEM_HANDLE_INFORMATION_EXu0_Wx86ThreadState�S_FILE_PIPE_INFORMATION7_QUOTA_LIMITS$�^PSYSTEM_NET_RATE_CONTROL_TYPE�^WAITORTIMERCALLBACKFUNC�ADESIGNVECTOR"PLOGICAL�^PVRF_RULE_CLASS_ID�^DISPLAYCONFIG_RATIONAL�F_ETW_HEAP_EVENT_SNAPSHOT
:IMAGE_ENCLAVE_IMPORT4�+_ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION�2tagMETAHEADER0!tagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION"PLCID'�]SYSTEM_BOOT_GRAPHICS_INFORMATION(WWRTL_DYNAMIC_TIME_ZONE_INFORMATION�_TRIVERTEX!X_PERFINFO_CC_FLUSH_CACHE6LPTEXTMETRICW�5_WNF_STATE_NAME
�PPVOID�-_DEDUP_FILE_OPERATION �^PETW_SET_MARK_INFORMATION!�4CS_TYPE_LOCAL_SIZE_ROUTINE8 MUTANT_BASIC_INFORMATION�'MENUBARINFO�(PS_PROTECTED_TYPE�^PPLEX_READ_DATA_REQUEST!�^PSYSTEM_HANDLE_INFORMATIONUKEY_NAME_INFORMATION/VRJOURNAL_TRANSACTION_BOUNDARY_INFORMATION"_RTL_HEAP_MEMORY_LIMIT_INFO�&RTL_HANDLE_TABLE_ENTRY CENCRYPTION_BUFFER&p0_SYSTEM_PAGEFILE_INFORMATION_EX*�_SYSTEM_VERIFIER_TRIAGE_INFORMATIONz/WMI_QUEUE+ _PROCESS_HANDLE_SNAPSHOT_INFORMATION�SPROCESS_INFORMATION�^ENUMRESNAMEPROCAOPEMRSETBKMODEpPTCH+�AJOBOBJECT_EXTENDED_LIMIT_INFORMATION�9_PROCESSOR_IDLE_STATE~^LPDISPLAY_DEVICE}^PRPC_INTERFACE_TEMPLATEA
!FSHORTPSECURITY_DESCRIPTOR;�X_TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION#�,REFS_DEALLOCATE_RANGES_RANGE�SEVENT_FILTER_LEVEL_KW-�BPROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE2�9_MEMORY_PARTITION_MEMORY_EVENTS_INFORMATIONI!OSVERSIONINFOPLANGSPEC�X_MUILANGLIST#�7LPPROC_THREAD_ATTRIBUTE_LIST"FLONG+DUPLICATE_EXTENTS_DATA,n>_CSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT|^PKEY_TRUST_INFORMATION${^PCM_DISK_GEOMETRY_DEVICE_DATAz^PTP_WAIT/�C_PROCESS_READWRITEVM_LOGGING_INFORMATION�_RTL_HEAP_ENTRY"y^PEMRCREATEDIBPATTERNBRUSHPTx^PIMAGE_OS2_HEADER#w^PKEY_HANDLE_TAGS_INFORMATION+�<CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1%v^PCOMPATIBILITY_CONTEXT_ELEMENTC/_RPC_SECURITY_QOS_V4_Wu^PETW_TP_EVENT_TIMER_SET\RETRIEVAL_POINTER_BASEt^PRID_DEVICE_INFO_HID!�+tagINPUT_MESSAGE_ORIGIN_IDs^PIMAGE_DOS_HEADER�]IMAGE_OS2_HEADERr^LPCONNECTDLGSTRUCTPKHETERO_CPU_POLICY`DEMRSTROKEPATH�_TP_CALLBACK_PRIORITY�6TP_WAITq^LPSHELLHOOKINFO$�ETW_CREATEDELETE_OBJECT_EVENT
qNWPSTR\_RETRIEVAL_POINTER_BASEp^PSYSTEM_ALARM_OBJECT_ACE�/LPOSVERSIONINFOW�9VIDEO_RECORD�]_IMAGE_OS2_HEADER�(LPPATTERN�-PEMRPOLYLINE�UICONMETRICSW$�B_PERFINFO_CC_WORKITEM_DEQUEUE*o^PFILE_QUERY_ON_DISK_VOL_INFO_BUFFER�_SECTION_INHERIT(n^PCREDIRECTION_FUNCTION_DESCRIPTORm^PSERVICE_NOTIFY_2W$l^PETW_COVERAGE_SAMPLER_OPTIONSk^PRTLP_START_THREAD _Y_LDR_IMPORT_CALLBACK_INFO eV_SECURITY_SEED_AND_LENGTH"/1_PROCESS_WINDOW_INFORMATIONJYLPWNDCLASSEXA!i^LPSERVICE_FAILURE_ACTIONSA.h^PPLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA�OUTLINETEXTMETRIC2-JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V23�0SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION�&LPCONTEXT'UEVENT_TRACE_SPINLOCK_INFORMATION g^PSYSTEM_VDM_INSTEMUL_INFO�SNPEXTLOGFONTA�;_MMPFN_IDENTITY)f^PACTIVATION_CONTEXT_NOTIFY_ROUTINEc^HICON&b^PPROCESS_POWER_THROTTLING_STATE*�U_IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY&LFILE_FS_DRIVER_PATH_INFORMATION'`^DISPLAYCONFIG_DESKTOP_IMAGE_INFO#]^PDUPLICATE_EXTENTS_DATA_EX32+5/SERVICE_CONTROL_STATUS_REASON_PARAMS\^PMESSAGE_TRACE_HEADERpG_cpinfoexA;[_WMI_WAIT_OBJECT_RECORD[^PKINTERRUPT_ROUTINE6_RTL_DYNAMIC_HASH_TABLE|0LPICONMETRICSAd$STYLEBUFA�"_WATCHDOG_HANDLER_ACTION'#\RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR#HANDLE_PTR kU_RTL_MODULE_EXTENDED_INFO3�ESYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISEY^PHKEY�0LPPROCESS_HEAP_ENTRY5W^PPROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY ,5EISA_MEMORY_CONFIGURATION�0OBJECT_TYPE_LIST)�[_SYSTEM_PREFETCH_PATCH_INFORMATION)V^PRTL_DYNAMIC_HASH_TABLE_ENUMERATOR-�5SYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1%U^PSYSTEM_OBJECTTYPE_INFORMATION6tagTITLEBARINFOd_STRING64BB_PROCESS_PRIORITY_CLASS_MCA_EXCEPTIONVANPSTYLEBUFWT^PRTL_AVL_MATCH_FUNCTION'"_PERFINFO_SAMPLED_PROFILE_CONFIG�"_SECURITY_DESCRIPTOR&E_ALPC_MESSAGE_INFORMATION_CLASS"_FILE_STREAM_INFORMATION�&TRACE_LOGFILE_HEADER32
pPSZR^PETW_OBJECT_TYPE_EVENT Q^PSID_IDENTIFIER_AUTHORITY'P5LOOKUP_STREAM_FROM_CLUSTER_INPUT�U_KTMOBJECT_CURSOR%�ZRTL_USER_PROCESS_INFORMATION64"GEOTYPE�E_CONSOLE_CURSOR_INFO"�PERFINFO_DEBUG_EVENT_REASON -_CM_MONITOR_DEVICE_DATA!P^PPERFINFO_MARK_INFORMATION4)IO_SESSION_EVENT�-HW_PROFILE_INFO O^PTHREAD_BASIC_INFORMATION)�SYSTEM_VERIFIER_TRIAGE_INFORMATION�,SYSTEMTIME)�F_WIM_PROVIDER_REMOVE_OVERLAY_INPUTN^PSL_HWID_DEVICE_INFO#CRITICAL_SECTION_DEBUGM^PISID:WIN32_FIND_DATA(PEMRPOLYLINE16L^PMUILANGLISTNODEK^PTRACE_GUID_REGISTRATIONJ^PMESSAGE_TRACE!I^PEMREXTCREATEFONTINDIRECTWH^PEVENT_DATA_DESCRIPTOR%G^PPROCESS_DEVICEMAP_INFORMATION/Y+_PROCESS_REVOKE_FILE_HANDLES_INFORMATIONF^PVRF_TRIAGE_CONTEXT�ACTCTXAE^PETW_HEAP_EVENT_COMMON�&PCONTEXT.D^PFILE_DESIRED_STORAGE_CLASS_INFORMATION�GPLUGPLAY_NOTIFY_HDRC^POSVERSIONINFO(EMRPOLYBEZIERTO16z%PERFINFO_CCSWAP_IDLE|\_FILE_STORAGE_TIERA(]_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASICB^LPLC_ID)�UIMAGE_ALPHA_RUNTIME_FUNCTION_ENTRYA^PFIND_BY_SID_OUTPUT-�DSTORAGE_QUERY_DEPENDENT_VOLUME_REQUEST@^PRTL_DYNAMIC_HASH_TABLE1*NPPOLYTEXTA*�!_RTL_ACTIVATION_CONTEXT_STACK_FRAME"�R_ADMINISTRATOR_POWER_POLICY.?^PMEMORY_PARTITION_ATTRIBUTE_INFORMATION$>^PTRACE_ENABLE_FLAG_EXT_HEADER,?_BOOT_AREA_INFO{+LPPOWER_REQUEST_CONTEXT4H_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE"�<CLAIM_SECURITY_ATTRIBUTE_V12=^PPROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION$�!SYSTEM_FIRMWARE_TABLE_HANDLER<^PIO_RESOURCE_DESCRIPTOR�1LPGLYPHMETRICSFLOAT#STREAM_EXTENT_ENTRY!A_TXFS_QUERY_RM_INFORMATION2_JOBOBJECTINFOCLASS;^PPERFORMANCE_DATA%:^PFILE_FS_ATTRIBUTE_INFORMATION�$ERROR_SEVERITY_VALUE
_COMMTIMEOUTS${&_FILE_ID_FULL_DIR_INFORMATIONSHANDLE_PTR9^PKLDR_DATA_TABLE_ENTRY�USTARTUPINFOEX08^PSYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE�]HPALETTE__:WIN32_FIND_DATAA�XVALENTW%�$_SERVICE_LAUNCH_PROTECTED_INFO7^POBJECT_ATTRIBUTES32 KIRQL!CJOURNAL_CLIENT_INFORMATION6^WNDPROC8_IMAGE_AUX_SYMBOL_EX-5^PJOBOBJECT_LIMIT_VIOLATION_INFORMATION*�D_SYSTEM_PROCESSOR_POWER_INFORMATION!U_RTL_TIME_ZONE_INFORMATION%$_ETW_UMGL_KEYDPWINDOWPOS^_TRACE_LOGFILE_HEADER644^PCACCESS_MASK2^PSD_ENUM_SDS_ENTRY�*REPARSE_GUID_DATA_BUFFER;1^PRTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY�ZLPBITMAPFILEHEADER"0^PETW_TIMER_EXPIRATION_EVENT$�ETW_SESSION_NOTIFICATION_TYPE&�Y_FSCTL_QUERY_REGION_INFO_OUTPUT�Y_SYSDBG_TRIAGE_DUMP"d>RTL_IMAGE_MITIGATION_POLICYuV_PERFINFO_MARK_EVENT 1?LUID_AND_ATTRIBUTES_ARRAY./^PMEMORY_PARTITION_NODE_PAGE_INFORMATION%.^PKEY_VALUE_PARTIAL_INFORMATION�,LPOSVERSIONINFOEX2WG ._ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING"-^PCACTCTX_SECTION_KEYED_DATA�5WMI_PNP_RECORD_V4$�@_SILOOBJECT_BASIC_INFORMATION+^LPMEMORYSTATUSEX *^PRPC_SEC_CONTEXT_KEY_INFO)�_RESOURCEMANAGER_INFORMATION_CLASSU+MDINEXTMENU""ZETW_COVERAGE_SAMPLER_STATUS)^PCACTCTXW*qUSYSTEM_FEATURE_CONFIGURATION_UPDATE�'OFSTRUCT�_OVERLAPPED_ENTRYP'HELPWININFOWGMUIREGISTRYINFO&�=_ACTIVATION_CONTEXT_QUERY_INDEX5_WMI_THREAD_INFORMATION0%^PIMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER�/EMRTRANSPARENTBLT�]LPHARDWAREINPUT#^PCOVERAGE_MODULE_INFO"^PRTL_SPARSE_BITMAP_RANGE)!^PLOOKUP_STREAM_FROM_CLUSTER_OUTPUT ^PEMRTRANSPARENTBLTd(tagMEASUREITEMSTRUCT,_EVENT_TRACE_PROFILE_LIST_INFORMATION$�9_SYSTEM_TIMEOFDAY_INFORMATION%^PNTPSS_MEMORY_BULK_INFORMATION"POINTER_INPUT_TYPE'WPAGEDIR_INFORMATION)^PEVENT_EXTENDED_ITEM_STACK_TRACE64^PHEAP_SUMMARY!WPS_BNO_ISOLATION_PARAMETER'�:REMOTE_LINK_TRACKING_INFORMATION^PPO_WAKE_SOURCE_DEVICEM,_POWER_PLATFORM_ROLEDPORT_INFORMATION_CLASS<"LPPAINTSTRUCT'�T_PROCESS_LEAP_SECOND_INFORMATION2^PPROCESS_MITIGATION_BINARY_SIGNATURE_POLICY�VSUPPORTED_OS_INFOe-_MEMORY_RESERVE_TYPE0^PJOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2V_REPARSE_INDEX_KEY)^PRTL_FEATURE_ENABLED_STATE_OPTIONS1/CI_WINDOWS_LOCKDOWN_MODE$2ZFILE_FS_ATTRIBUTE_INFORMATION�tagENUMLOGFONTW(�]_SYSTEM_BOOT_GRAPHICS_INFORMATION(^PEVENT_EXTENDED_ITEM_PMC_COUNTERS"^PPERFINFO_IDLE_STATE_CHANGED�!_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED�#tagLOCALESIGNATUREm;PLOGPALETTE�1MINMAXINFO
IMEMENUITEMINFOAhandle_t4_PERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION�"PERFINFO_CCSWAP_BUFFER^PCSV_MGMT_LOCK1�D_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX(^PRTL_FEATURE_CONFIGURATION_UPDATE^PMCA_EXCEPTION^PRTL_HASH_TABLEU<tagEMRFILLRGN$�SFILE_FS_FULL_SIZE_INFORMATION$�VPERFINFO_SET_POWER_ACTION_RET6BMUILANGINFO$�VPROCESS_MITIGATION_DEP_POLICY�%THREAD_ENERGY_VALUES'cS_FILE_END_OF_FILE_INFORMATION_EX�R_PORT_VIEW? PBITMAPCOREHEADERVFIBER1^PPLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLED<TABLE_SEARCH_RESULT)0SET_DAX_ALLOC_ALIGNMENT_HINT_INPUT^PRTL_RVA_LISTB'RTL_CRITICAL_SECTION'�:_HEAP_BLOCK_SETTABLE_INFORMATION^LPENCLAVE_ROUTINE�\PPALETTEENTRY"&!_BY_HANDLE_FILE_INFORMATIONNUBLENDFUNCTION^NOTIFICATIONCALLBACK^HWINSTA/tagENHMETAHEADER�%_SYSTEM_POOL_ENTRY'
^PCACTCTX_SECTION_KEYED_DATA_2600P RPC_SECURITY_QOS_V2_W^LPSTYLEBUF^PIMAGE_DEBUG_MISC$�_SYSTEM_NET_RATE_CONTROL_TYPE�DIBSECTION'�<_PROCESS_HANDLE_TABLE_ENTRY_INFO^LPCOMMCONFIG^PEMRALPHABLEND�VMONITORINFOEXW*zR_PROCESS_EXTENDED_BASIC_INFORMATION%,_TRANSACTION_BASIC_INFORMATION^LPAXESLIST^EXCEPTION_ROUTINE^PTP_LOG_ROUTINEuDWORD32"�ZENCLAVE_INIT_INFO_VBS_BASIC8�]PASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_ROUTINE�9tagBITMAP�9TRACKMOUSEEVENT�_MIDL_METHOD_PROPERTY#80FILE_SFIO_VOLUME_INFORMATION�]PKTMOBJECT_TYPE+!;_EVENT_TRACE_PERFORMANCE_INFORMATION|_PROCESSINFOCLASSb'_PROCESS_EXCEPTION_PORT�EETW_HEAP_EVENT_FREEF_PORT_MESSAGE)�]PSYSTEM_POWER_STATE_DISABLE_REASON,�SYSTEM_PROCESSOR_FEATURES_INFORMATION)/_SYSTEM_PROCESSOR_IDLE_INFORMATION�SPEXTLOGFONTA �]LANGGROUPLOCALE_ENUMPROCW23_ACL)+PERFINFO_FILENAME_SAME_INFORMATION�]PUIMAGE_OS2_HEADER/�6_SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION!@PEMRABORTPATH%'_IMAGE_LOAD_CONFIG_DIRECTORY64^#_OBJECT_NAME_INFORMATIONO_RTL_BITMAP)]CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG%�_TRANSACTION_INFORMATION_CLASSEtagHW_PROFILE_INFOW�]PEMRPOLYDRAW16�]LPCDLGTEMPLATE�]PCSV_QUERY_MDS_PATH�YPMSGBOXPARAMSW"9!_PERFINFO_CCSWAP_IDLE_SHORT�]PWMI_TRACE_PACKET#�]PTOKEN_SECURITY_ATTRIBUTE_V1�4_HARDERROR_MSG%�]PGET_RUNTIME_FUNCTION_CALLBACK)"FP_IEEE_ROUNDING_MODE�(CPU_SET_INFORMATION_TYPE�]PEVENTSFORLOGFILE�]LPCLIENTCREATESTRUCT+�UJOBOBJECT_IO_ATTRIBUTION_INFORMATIONi@_RTL_HEAP_INFORMATION&h,PUBLIC_OBJECT_BASIC_INFORMATION(�]PDELAYLOAD_FAILURE_SYSTEM_ROUTINE+�]PCSV_QUERY_FILE_REVISION_FILE_ID_128�]PGESTUREINFO�*PEXTLOGPEN32�TEB_ACTIVE_FRAME �+_CM_PARTIAL_RESOURCE_LIST"�]RTL_GENERIC_COMPARE_ROUTINE-_FINDEX_INFO_LEVELS�@RTL_RXACT_CONTEXT#�]PETW_COVERAGE_SAMPLER_SAMPLE'3_SYSTEM_ALARM_ACES0ENUMLOGFONTEXDVW�]HPALETTEg'_ICONINFOEXW-�S_FILE_FS_PERSISTENT_VOLUME_INFORMATION�VPEMRRECTANGLE�RPORT_VIEW#d>_RTL_IMAGE_MITIGATION_POLICYs'_FILE_ID_TYPE�"tagENUMTEXTMETRICW�]PWNODE_METHOD_ITEM! _RPC_HTTP_REDIRECTOR_STAGE�]PAUDIT_EVENT_TYPE>CM_EXTENDED_PARAMETER�]PLOAD_ASDATA_TABLE�]PEXCEPTION_RECORD32'�]PFILE_END_OF_FILE_INFORMATION_EX�PSE_TOKEN_USER:_UNICODE_STRING�ZPEMREXCLUDECLIPRECT"�]PPPM_PERFSTATE_DOMAIN_EVENT�$APPCONTAINER_SID_TYPE�]LPCMENUITEMINFOQBCI_LOG_MMCSS_START� tagGESTURENOTIFYSTRUCT.;EVENT_INSTANCE_HEADER<;FILE_LAYOUT_NAME_ENTRY�]PTP_TASK_CALLBACKS�ETW_BUFFER_STATETIMAGE_IMPORT_BY_NAMEK\_NON_PAGED_DEBUG_INFO"SAVEPOINT_ID�tagRAWMOUSE*RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W�F_CI_LOG_SCHEDULER_WAKEUP0tagNCCALCSIZE_PARAMS;[WMI_WAIT_OBJECT_RECORDw_SYSTEM_VERIFIER_ISSUE8WIN32_FIND_DATAW�]LPTTPOLYCURVE�]PKEY_EVENT_RECORDWTOKEN_LINKED_TOKEN"_POWER_PLATFORM_INFORMATION4�CSYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION�\STUB_THUNK�TtagINPUT_MESSAGE_SOURCE �?_SYSTEM_BASIC_INFORMATION!@PEMRENDPATH�;_COVERAGE_SECTION_HEADER!�BtagTOUCH_HIT_TESTING_INPUTPOOLINDEX�5_WMI_PNP_RECORD_V4}5_SYSTEM_NUMA_INFORMATION �FILE_INFO_BY_HANDLE_CLASS�TRIVERTEX�]PEMRSETWORLDTRANSFORM s1_ETW_STACK_CACHING_CONFIG�]PTOKEN_ELEVATION_TYPEVU_TOKEN_PRIVILEGES�]PFAT_STATISTICS
S(PPOINT�8_POINTFLOAT�*tagDRAWITEMSTRUCT3�@_IMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION�]PWNF_DELIVERY_DESCRIPTOR&�]PPROCESS_EXTENDED_ENERGY_VALUES(�RTL_FEATURE_ENABLED_STATE_OPTIONS�YPIMEMENUITEMINFOW;TIMEFMT_ENUMPROCEX#�]PETW_KERNEL_HEADER_EXTENSION)\B_SYSTEM_ENTROPY_TIMING_INFORMATIONx?PDLGITEMTEMPLATEWVAPSTYLEBUFW&CSV_QUERY_REDIRECT_STATE"�YRTL_ALLOCATE_STRING_ROUTINE�]LPNETINFOSTRUCT>XMM_SAVE_AREA32�Z_RGNDATAHEADER�DLPNONCLIENTMETRICSA�UETW_WNF_EVENT_PUBLISH!�@_WIN32_FILE_ATTRIBUTE_DATA�]SC_HANDLE$�B_WIM_PROVIDER_START_INTEGRITY�4NPWNDCLASSA�W_TOKEN_CONTROL$�]RTL_UMS_SCHEDULER_ENTRY_POINT�?EVENT_TRACE$7RPC_BINDING_HANDLE_OPTIONS_V1"�%ACCESS_ALLOWED_CALLBACK_ACEHTOKEN_PRIMARY_GROUP'94FILE_REMOTE_PROTOCOL_INFORMATION� _SYSTEM_POWER_POLICY�SYSTEM_VA_TYPE/�JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V1�3_FILE_REGION_OUTPUT�]PIRQ_GROUP_POLICY�RtagEMRRESIZEPALETTE.�]PEVENT_EXTENDED_ITEM_RELATED_ACTIVITYID!�]PPROCESS_BASIC_INFORMATION �]PFILE_FULL_EA_INFORMATION2#WMI_BUFFER_HEADER/�S_PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA-�]PCACTIVATION_CONTEXT_BASIC_INFORMATION=tagCBT_CREATEWNDARPC_BINDING_HANDLE$�]PPERFINFO_PAGE_RANGE_IDENTITY�]PHIBERFILE_BUCKET_SIZEq+MOUSEHOOKSTRUCT/UWNF_DELIVERY_DESCRIPTORB_IMAGE_FUNCTION_ENTRY64$�]PCONSOLE_SCREEN_BUFFER_INFOEX�#tagWNODE_TOO_SMALL,�]PSYSTEM_HYPERVISOR_DETAIL_INFORMATION�KCRM_PROTOCOL_BLOB(EMRPOLYGON16�,_SYSTEMTIME"EVENT_RECORD(;5EVENT_TRACE_IPT_EVENT_INFORMATION�]PENCLAVE_INIT_INFO_VBS�]PRPC_SECURITY_QOS_V3_A5[_WMI_RESOURCE$�]PDEFINE_STORAGE_RESERVE_INPUT$_SharedVirtualDiskHandleState�)FAT_STATISTICS@'LPCRITICAL_SECTION_DEBUG�]PMIDL_STUB_DESCLRESULT�tagENUMLOGFONTEXDVAH=EMREXTCREATEPEN�=PS_CPU_QUOTA_QUERY_ENTRY�#PS_STD_HANDLE_STATE�]PEMREXTSELECTCLIPRGN!�R_KEY_SET_LAYER_INFORMATION#�]PBAD_MEMORY_CALLBACK_ROUTINE�2tagCIEXYZ|EtagPOLYTEXTW�]PUSAGE_PROPERTIES�ZGROUP_RELATIONSHIPU6_SYSTEM_PREFETCH_STATS�]LPNLSVERSIONINFO cG_DECRYPTION_STATUS_BUFFER �]PPOWER_MONITOR_INVOCATION$�]PETW_TP_EVENT_TIMER_CANCELLED�EMALLOC_FREE_STRUCT)�]PEVENT_EXTENDED_ITEM_STACK_TRACE32*�]PFILE_PIPE_CLIENT_PROCESS_BUFFER_EX wYPFN_NT_COMMIT_TRANSACTION�2CBT_CREATEWNDW�BLDR_DATA_TABLE_ENTRY32"�_SUBSYSTEM_INFORMATION_TYPE�]PREQUESTER_TYPE�XPLOGBRUSH32)�V_STREAMS_ASSOCIATE_ID_INPUT_BUFFER.�]PRTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS&%_XSTATE_FEATURE3d#SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION"�GI_RpcProxyCallbackInterface[_LUTF8_STRING%�-COVERAGE_UNLOADED_MODULE_ENTRY�]PWMIREGINFOWRTL_CIRCULAR_LIST_ENTRY$4_ETW_UMS_EVENT_CONTEXT_SWITCH,,_JOURNAL_SET_KEY_SECURITY_INFORMATION�]PIMAGE_EXPORT_DIRECTORY%	@SYSTEM_CPU_SET_TAG_INFORMATIONINT64'+SRTL_IMAGE_MITIGATION_HEAP_POLICY,�]PEVENT_TRACE_HEAP_TRACING_INFORMATION3HALPC_SERVER_INFORMATIONI�@ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING�'tagMENUBARINFO�%PCOMPOSITIONFORM/�'IMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADER�$_RTL_AVL_TABLE#c@_COMPOUND_ACCESS_ALLOWED_ACE/�*_JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2-BSECURE_SPECULATION_CONTROL_INFORMATION5CREATE_THREAD_DEBUG_INFOLGHENHMETAFILE__�9WMI_DISKIO_FLUSH_BUFFERS.9PROCESS_JOB_MEMORY_INFO"2IMAGE_ARCHIVE_MEMBER_HEADER�]PLUID_AND_ATTRIBUTES�U_CSV_MGMT_LOCK.�_PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA$]R_PROCESS_AFFINITY_UPDATE_MODE�]PBULK_SECURITY_TEST_DATA1�4_STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY(\BSYSTEM_ENTROPY_TIMING_INFORMATION)�]PPROCESS_CHILD_PROCESS_INFORMATIONt,LPLOGPEN%�]PIMAGE_DYNAMIC_RELOCATION64_V2�3_PATHNAME_BUFFER"�%_UNIQUE_PROCESS_INFORMATION&D?_FILE_PIPE_CREATE_SYMLINK_INPUT\]PEMRDRAWESCAPE(�]PRPC_BINDING_HANDLE_TEMPLATE_V1_W�]PWMI_IMAGEID_INFORMATION& PSECURITY_CONTEXT_TRACKING_MODE'�(_QUERY_PERFORMANCE_COUNTER_FLAGS(�]PSYSTEM_BOOT_GRAPHICS_INFORMATION"�]PRTL_QUERY_REGISTRY_ROUTINEcPPOINTS�1tagMINMAXINFOLSTATUS�WPOWER_SESSION_CONNECT!�]PTP_TASK_UNPOSTED_CALLBACK�AtagDESIGNVECTOR#�T_FILE_FS_CONTROL_INFORMATIONA�]PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC'?EVENT_EXTENDED_ITEM_PMC_COUNTERS�]PREMOTE_PORT_VIEWREMRSETTEXTALIGN
_WMI_UDP%9_ETW_TP_EVENT_TIMER_EXPIRATION#�DPERFINFO_DOMAIN_CHANGE_EVENT#KSPIN_LOCK�ENUMLOGFONTEXDVA)nS_FILE_PIPE_EVENT_ENUM_INPUT_BUFFERyWSL_KMEM_CACHE�]RPC_IF_CALLBACK_FN+D_LBR_TRACE_EVENT_DATA�]PPEB$�]PTRANSACTION_LIST_INFORMATION>_XSAVE_FORMAT!�XFILE_ZERO_DATA_INFORMATION�=tagENUMUILANG�BtagEMRALPHABLEND!�*_HEAP_AFFINITY_SLOT_ASSIGNuVPERFINFO_MARK_EVENT�WUSAGE_PROPERTIES�]LPNUMBERFMTA �>_MEMORY_BASIC_INFORMATIONR,_SERVICE_NOTIFY_2A"9@ETW_KERNEL_HEADER_EXTENSION�]PPS_PROTECTED_TYPE�0IMAGE_FILE_HEADER�ZGENERIC_MAPPING2JOBOBJECTINFOCLASSA_SERVERSILO_STATE�]PPPM_WMI_IDLE_STATES_EX&�/_ETW_AUTOBOOST_NO_ENTRIES_EVENT�:_KAFFINITY_EX%�]PPROCESS_FOREGROUND_BACKGROUND�PROCESS_DISK_COUNTERS�X_FILE_REFERENCE_RANGE�UPS_STD_HANDLE_INFOVGLYPHMETRICS�DEBUGHOOKINFO�]PSYSTEM_TPM_INFORMATION�]PENABLE_TRACE_PARAMETERS ZCFILE_OBJECTID_INFORMATION&�]PSYSTEM_HANDLE_TABLE_ENTRY_INFO25TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT"�;_JOBOBJECT_WAKE_INFORMATION$�]PRTL_RETPOLINE_CHECK_FUNCTION3q,PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION$�]PRTLP_HEAP_SERIALIZED_MAPPING�=PSFEATURE_OUTPUT�(CREATESTRUCTW�]GEO_ENUMNAMEPROC�]PETW_REGNOTIF_REGISTER!�]PETW_IDEAL_PROCESSOR_EVENTj:PERFINFO_PROCESS_PERFCTR�]LPSTARTUPINFOEXA�PFN_SC_NOTIFY_CALLBACK67tagTTPOLYCURVE%�&_PERFINFO_PPM_IDLE_STATE_ENTER�]PSTRING�]PHARDWAREINPUT"�]PJOURNAL_CLIENT_INFORMATION(�-_FILE_NOTIFY_EXTENDED_INFORMATION&JV_RTL_PROCESS_BACKTRACES_CONTROL'�1_RTLP_PROCESS_REFLECTION_CONTEXTtPINT
pPCH"/'FILE_COMPLETION_INFORMATION"�]LDR_MANIFEST_PROBER_ROUTINE/POWER_MONITOR_INVOCATION�>LPPIXELFORMATDESCRIPTOR&�]PETW_TP_EVENT_TIMER_SET_NTTIMER*�]PSYSTEM_VERIFIER_FAULTS_INFORMATION�]PIMAGE_ENCLAVE_CONFIG32I?LDR_VERIFY_IMAGE_INFO?�]PACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA!�]PREPARSE_POINT_INFORMATION)�CSYSTEM_VERIFIER_FAULTS_INFORMATION�YATOM_TABLE_INFORMATION�]PWNF_TYPE_ID)�>PFN_RTL_IS_NTDDI_VERSION_AVAILABLE�_XSAVE_VENDOR#�<_CLAIM_SECURITY_ATTRIBUTE_V1@_PS_ATTRIBUTE_NUMWXLPDLGTEMPLATEA�EPOWER_REQUEST_TYPE�]PRTL_BSD_ITEM_TYPE�YRPC_SEC_CONTEXT_KEY_INFO)]PPERFINFO_DYNAMIC_TICK_VETO_REASON�*tagKBDLLHOOKSTRUCT~]PPOWER_SESSION_RIT_STATE�?PO_WAKE_SOURCE_INTERNAL!TEMRCREATEDIBPATTERNBRUSHPT"F.ETW_OPTICALIO_FLUSH_BUFFERS!m UNICODE_PREFIX_TABLE_ENTRY_,RGNDATA�@DISCDLGSTRUCTA}]PRPC_SECURITY_QOS_V2_A)|]PETW_COVERAGE_SAMPLER_BLOOM_FILTER#PULONG_PTR4{]PSYSTEM_CODEINTEGRITYVERIFICATION_INFORMATION)�G_EVENT_EXTENDED_ITEM_STACK_TRACE64�%_THREAD_ENERGY_VALUES
)DCB�+ENUMLOGFONTEXc6_NETRESOURCEW$�6_FILE_FS_OBJECTID_INFORMATION y]PRTL_UMS_SCHEDULER_REASON�?SMALL_RECTx]PPOWER_REQUEST_TYPE)w]PFN_NT_SET_INFORMATION_TRANSACTION\IMAGE_POLICY_ENTRYiYPFIBER_CALLOUT_ROUTINE*t]LPSERVICE_REQUIRED_PRIVILEGES_INFOW-XIMAGE_DATA_DIRECTORY"s]PMEMORY_COMBINE_INFORMATION"r]PREQUEST_RAW_ENCRYPTED_DATA)q]PPERFINFO_VIRTUAL_ALLOC_XPARTITION#p]PTOKEN_GROUPS_AND_PRIVILEGES�E_FILE_ID_BOTH_DIR_INFOo]PFILE_REFERENCE_RANGE+>WSYSTEM_PROCESS_INFORMATION_EXTENSION>_BOOT_RECORD%;HEAP_INFORMATION_ITEM*n]PCFINDFIRSTACTIVATIONCONTEXTSECTIONsMULTIKEYHELPA-�_JOBOBJECT_LIMIT_VIOLATION_INFORMATION$�X_SYSTEM_LOOKASIDE_INFORMATION-�5JOURNAL_SET_KEY_USER_FLAGS_INFORMATION �X_PERFINFO_VAD_ROTATE_INFO+�AEVENT_TRACE_HEAP_TRACING_INFORMATION�?PKCRM_TRANSACTION_BLOB#rsize_t�#HARDERROR_RESPONSE$'IMAGE_LOAD_CONFIG_DIRECTORY64=3FINDEX_SEARCH_OPS+h6_SYSTEM_DMA_GUARD_POLICY_INFORMATION_PERFINFO_PO_PRESLEEP)l]PSYSTEM_REGISTRY_QUOTA_INFORMATIONk]LPLOAD_DLL_DEBUG_INFO�RPABCFLOAT�LOGICAL_DISK_EXTENTS�STHREAD_PERFORMANCE_DATA�)LPMULTIKEYHELPW"j]PENTER_STATE_NOTIFY_HANDLER�4GENERATE_NAME_CONTEXT�@PERFORMANCE_DATAXGEMRMODIFYWORLDTRANSFORM%i]PFILE_SFIO_RESERVE_INFORMATION+�_SYSTEM_PROCESSOR_POLICY_INFORMATION&�G_SL_KMEM_CACHE_VALUE_DESCRIPTOR�X_VCN_RANGE_INPUT_BUFFER
8$LPSIZEh]LPEXTLOGFONT'*ALPC_MESSAGE_ATTRIBUTESF_FILE_GET_EA_INFORMATION�COVERAGE_MODULES�"ENUMTEXTMETRICWg]PQUERY_BAD_RANGES_OUTPUTF_SHUFFLE_FILE_DATAf]PLIST_ENTRY64�ZPACKEDEVENTINFO&e]PWIM_PROVIDER_CONTROL_INTEGRITYd]LPPROGRESS_ROUTINEvPAXISINFOA@EPEMRSTROKEANDFILLPATH#a]PSHARED_VIRTUAL_DISK_SUPPORT%D?FILE_PIPE_CREATE_SYMLINK_INPUT!7QUERY_SERVICE_LOCK_STATUSA&�_PERFINFO_PPM_IDLE_EXIT_LATENCY5`]PPROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICYU_CSV_NAMESPACE_INFO,_]PSYSTEM_PROCESS_INFORMATION_EXTENSION^]PMESSAGE_RESOURCE_ENTRY�$_PS_WAKE_REASON#7)_PARTITION_INFORMATION_CLASS$Y0_KEY_OPEN_SUBKEYS_INFORMATION]]PSYSTEM_ALARM_ACE$�)_PROCESS_HANDLE_TRACING_QUERYBT_NTFS_STATISTICS�EISA_DMA_CONFIGURATION\]PEMREXTESCAPE&[]PFILE_ATTRIBUTE_TAG_INFORMATIONZ]PSYSDBG_BUS_DATAY]PTOKEN_USER�-tagHW_PROFILE_INFOAX]LPWNDCLASS#b"_PERFINFO_SYSCALL_ENTER_DATAu<UNWIND_INFO�@KEY_VALUE_ENTRY&92_ETW_WNF_EVENT_NAME_SUB_RUNDOWN�+REASON_CONTEXTCtagEMRGLSBOUNDEDRECORD�V_SUPPORTED_OS_INFO%W]PUMS_SYSTEM_THREAD_INFORMATION&V]PPERFINFO_SET_DEVICES_STATE_RETU]PSL_APPX_CACHE�,ETW_TP_EVENT_POOL_CREATE'5,FILE_METADATA_OPTIMIZATION_STATE!x_HARDERROR_RESPONSE_OPTION&T]RTLP_UNHANDLED_EXCEPTION_FILTERPUMS_CONTEXT-�SFILE_NETWORK_PHYSICAL_NAME_INFORMATION�*TIMEFMT_ENUMPROCW� _WMI_WAIT_SINGLE#�-_FILE_LINK_ENTRY_INFORMATION#�XSYSTEM_LOOKASIDE_INFORMATIONS]PEVENT_RECORD_CALLBACK&R]PCIMAGE_BOUND_IMPORT_DESCRIPTORV_IO_STATUS_BLOCKP]PWOF_EXTERNAL_INFON;USER_ACTIVITY_PRESENCE,O]PPLUGPLAY_CONTROL_BLOCKED_DRIVER_DATARTL_HASH_BUCKET_TYPEN]PATOM_TABLE_INFORMATIONo9CM_FLOPPY_DEVICE_DATA'yJOURNAL_CHANGE_INFORMATION_CLASS#DWORD_PTR�A_XSAVE_VENDORS-M]PSYSTEM_ISOLATED_USER_MODE_INFORMATION�+POWER_REQUEST_CONTEXT�[PLAYERPLANEDESCRIPTOR�9tagNEWTEXTMETRICEXW�GCPU_CONFIG_RECORD&�U_SYSTEM_PROCESS_TRUST_LABEL_ACE�)ACCESS_REASONSpV_EXCEPTION_RECORD32LCSGAMUTMATCH�<PMODEMSETTINGS(;5EVENT_TRACE_LBR_EVENT_INFORMATION'S;_ETW_COVERAGE_SAMPLER_PERF_STATSL]LPFILTERKEYS!�7IMAGE_DYNAMIC_RELOCATION64K]PTIME_FIELDSG0LPEXCEPTION_RECORD.BRPC_SECURITY_QOS_V5_APS_ACCESS_DENIED_ACEA_COMSTAT3*POLYTEXT�SSE_ACCESS_REPLY*>JOBOBJECT_ASSOCIATE_COMPLETION_PORT$J]PHEAP_AFFINITY_SLOT_ACTIVATED$I]PETW_TP_EVENT_POOL_TH_MAX_SET�_MESSAGE_RESOURCE_BLOCKH]PRTL_PROCESS_BACKTRACES �B_OBJECT_TYPES_INFORMATIONk!_RPC_STRING�YDL_EUI48$c_PERFINFO_PPM_IDLE_STATE_EXIT!�E_FILE_FULL_DIR_INFORMATION q/_MEMORY_WORKING_SET_BLOCKG]PHEAP_INFORMATION_ITEM�9_VIDEO_RECORD#k<JOBOBJECT_JOBSET_INFORMATIONF]PWNODE_HEADER
tLONG32E]PPROCESSOR_RELATIONSHIP,	$KEY_VALUE_PARTIAL_INFORMATION_ALIGN64,�(EVENT_EXTENDED_ITEM_PROCESS_START_KEY"9ETW_OPTICALIO_INIT�FILE_EA_INFORMATION(&HELPINFO%D]PWORKER_FACTORY_CALLBACK_CLASSl_RTL_HASH_TABLE u>RTL_RETPOLINE_BINARY_INFOS(NPPOINTlAPP_MEMORY_INFORMATIONC]PRPC_ENDPOINT_TEMPLATEW,�WCLAIM_SECURITY_ATTRIBUTES_INFORMATION/�V_FILE_PROCESS_IDS_USING_FILE_INFORMATION"?PPELARRAYaR_MESSAGE_TRACEB]PWOF_VERSION_INFOA]PNLSTABLEINFO@]PWMI_PNP_RECORD_V5?]PIMAGE_SYMBOL#
X_ENCLAVE_LOAD_DATA_VBS_BASIC�9TRACE_LOGFILE_HEADER(=]PPERFINFO_MEMORY_NODE_INFORMATIONwE_WMI_LOGGER_INFORMATION##2_SHRINK_VOLUME_REQUEST_TYPES ;]DISPLAYCONFIG_SOURCE_MODE&�Z_FILE_STANDARD_LINK_INFORMATION$9]APPLICATION_RECOVERY_CALLBACK�LEARNING_MODE_LOG_LEVEL"7]PSYSTEM_POOLTAG_INFORMATIONLANGINDEX*�#DIALOG_CONTROL_DPI_CHANGE_BEHAVIORS%6]PSYSTEM_ACPI_AUDIT_INFORMATION+&LPWNDCLASSW#t$ETW_COVERAGE_SAMPLER_OPTIONS(5,_FILE_METADATA_OPTIMIZATION_STATE5]LPCONNECTDLGSTRUCTW!�"FILE_ALIGNMENT_INFORMATION�XPERFINFO_VAD_ROTATE_INFOK6tagCBTACTIVATESTRUCT)�!JOBOBJECT_INTERFERENCE_INFORMATION�4tagDRAWTEXTPARAMSc6NETRESOURCEW#4]PPROCESS_WORKING_SET_CONTROL3]PHEAP_RANGE_INFORMATIONgGRIP_INFO%� PROCESS_POWER_THROTTLING_STATE,�YSYSTEM_FIRMWARE_PARTITION_INFORMATION!CtagUPDATELAYEREDWINDOWINFO�)_ETW_RT_EVENT_LOSS.+_MEMORY_PHYSICAL_CONTIGUITY_INFORMATION�2tagCBT_CREATEWNDW�VPORT_DATA_ENTRY9_COVERAGE_MODULE_REQUEST�!ICONINFOEXA(�W_PROCESS_DEVICEMAP_INFORMATION_EXq(EVENT_INFORMATION_CLASSyW_SL_KMEM_CACHE2]PCIMAGE_POLICY_ENTRY!�SUBSYSTEM_INFORMATION_TYPEuXtagAUDIODESCRIPTION3SERVICE_FAILURE_ACTIONS#kV_IMAGE_RESOURCE_DIR_STRING_UD_PORT_INFORMATION_CLASS0EJOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL"1]PTXFS_GET_METADATA_INFO_OUT�*PO_SLEEP_DISABLE_REASON�WNF_DLLUNLOAD_CALLBACKetagPOINTSKDLPEVENTMSGMSGREMRSETBKMODE0]LPNCCALCSIZE_PARAMS/]PSERVICE_TIMECHANGE_INFO �_SYSTEM_INFORMATION_CLASS..]PJOBOBJECT_NET_RATE_CONTROL_INFORMATION%zPO_CS_DEVICE_NOTIFICATION_TYPE!6_EVENTLOG_FULL_INFORMATION�<tagENUMLOGFONTA)�E_SERVICE_REQUIRED_PRIVILEGES_INFOA-]PRTL_RXACT_CONTEXT�$TOKEN_TYPE"
_ETW_FINALIZE_KTIMER2_EVENT#� DELETE_STORAGE_RESERVE_INPUT,]PKEY_FLAGS_INFORMATION+]PCACTIVATION_CONTEXT"PUCSSTRSDSINGLE_LIST_ENTRY329"QUERY_FILE_LAYOUT_OUTPUT@(]RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC%]HMETAFILE$�_ETW_PROCESS_HANDLE_INFO_TYPE!$]PCPS_SYSTEM_DLL_INIT_BLOCK1"]PSYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION �ZSEC_WINNT_AUTH_IDENTITY_W&JCI_LOG_SCHEDULER_SLEEP_RESPONSE&�+_PERFINFO_FILE_SIMPLE_OPERATION
�PUWSTR!]PUSN_RECORD_V3'U@TIMER_SET_COALESCABLE_TIMER_INFO%�U_SYSTEM_OBJECTTYPE_INFORMATION ]PFILE_LINKS_INFORMATION+]PSYSTEM_SYSTEM_PARTITION_INFORMATION�VtagHARDWAREHOOKSTRUCTDSPEMREXTTEXTOUTW|\FILE_STORAGE_TIER�DLPAXESLISTA)]PETW_UMS_EVENT_DIRECTED_SWITCH_END �SYSTEM_AUDIT_CALLBACK_ACE=a7PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION$�=_SYSTEM_INTERRUPT_INFORMATION]PEVENT_FILTER_LEVEL_KW,P1_TRANSACTIONMANAGER_BASIC_INFORMATION"COLORREFSAINPUT_RECORD#]PETW_COVERAGE_SAMPLER_STATUS)]PFILE_PIPE_EVENT_ENUM_INPUT_BUFFER]PUSER_ACTIVITY_PRESENCE�V_SYSTEM_WORKINGSET_ENTRY']PBOOT_ENTROPY_SOURCE_RESULT_CODE$�IMAGE_DYNAMIC_RELOCATION64_V2]PRPC_SYNTAX_IDENTIFIER�\XSAVE_CPU_INFO RTL_FEATURE_VARIANT'k0_BOOT_ENTROPY_SOURCE_RESULT_CODE�+_OSVERSIONINFOEXW!]PFILE_INTERNAL_INFORMATION]PSYSTEM_POWER_STATE"@:_SYSTEM_POOLTAG_INFORMATION$XIMAGE_BOUND_IMPORT_DESCRIPTORb'PROCESS_EXCEPTION_PORT$]PFILE_ID_FULL_DIR_INFORMATIONG1PCTCH3a2PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION*]PTRANSACTIONMANAGER_LOG_INFORMATION']I_RpcProxyGetConnectionTimeoutFn!&!BY_HANDLE_FILE_INFORMATION"�!_SYSTEM_MANDATORY_LABEL_ACE ]PCPU_SET_INFORMATION_TYPE"�[PROCESSOR_POWER_INFORMATION*�6SYSTEM_ELAM_CERTIFICATE_INFORMATION#`VCM_DISK_GEOMETRY_DEVICE_DATA v_RTL_QUERY_REGISTRY_TABLE]PSTRING64#]PIMAGE_ARCHIVE_MEMBER_HEADER(!_LDR_DLL_LOADED_NOTIFICATION_DATA3SRTL_HEAP_WALK_ENTRY4
]PJOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V1!]PSTARTING_VCN_INPUT_BUFFER�IRQ_DEVICE_POLICY-_IMAGE_CHPE_RANGE_ENTRY$�D_RTL_PROCESS_VERIFIER_OPTIONS6_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION]ENUMRESNAMEPROCW�TRACE_GUID_INFOKPRIORITY]PTOKEN_TYPE�R_KEY_LAYER_INFORMATION
]_Ea9TPRAWHID<9WMI_TXR]POBJECT_TYPE_INFORMATION"]PSYSTEM_MEMORY_LIST_COMMAND!(_SEC_WINNT_AUTH_IDENTITY_AUNWIND_OP_CODESH2CACHE_DESCRIPTOR$�8_SYSTEM_BOOT_LOGO_INFORMATION�R_RDR_CALLOUT_STATE()XJOB_OBJECT_NET_RATE_CONTROL_FLAGS&[_CM_PARTIAL_RESOURCE_DESCRIPTOR%B_CONNECTDLGSTRUCTA]PMIDL_SERVER_INFO]PVM_COUNTERS"�_RTL_HEAP_MEMORY_LIMIT_DATA�2NPMSG&^4_PERFINFO_CC_LOGGED_STREAM_INFO]LPSERVICE_DESCRIPTIONA,�\PPERFINFO_CLOCK_INTERRUPT_INFORMATION�?IO_RESOURCE_LIST�\PMUILANGUAGESl7NPIMECHARPOSITION2�\PEVENT_TRACE_OBJECT_TYPE_FILTER_INFORMATION&�U_TOKEN_APPCONTAINER_INFORMATION\(_RTL_BSD_ITEM,;5EVENT_TRACE_PROFILE_EVENT_INFORMATION&{LEAP_SECOND_DATA_REGISTRY_ENTRY$C_RTL_CRITICAL_SECTION_DEBUG32FSHUFFLE_FILE_DATA-�\JOBOBJECT_NET_RATE_CONTROL_INFORMATION(_POWER_USER_PRESENCE#RTL_FEATURE_CHANGE_STAMP(�\PSYSTEM_ACTIVITY_MODERATION_STATE"+._OPERATION_START_PARAMETERS|@AR_STATE!�\PPERFINFO_WORKINGSET_ENTRY�SYSTEM_POWER_STATE#USRTLP_HEAP_SERIALIZED_MAPPING%)HOBJECT_HANDLE_FLAG_INFORMATION+�._SYSTEM_HYPERVISOR_QUERY_INFORMATION�\ENUMRESTYPEPROCW$tG_ETW_PARTITION_INFO_EXTENSION
�\PUQUAD�W_POWER_SESSION_CONNECT%A_PROCESS_WORKING_SET_OPERATIONLIST_ENTRY32-�\PFILE_FS_PERSISTENT_VOLUME_INFORMATION(-NPDEBUGHOOKINFO�\ANON_OBJECT_HEADER�RTL_RESOURCE�\PEXTLOGFONT#�\PSD_CHANGE_MACHINE_SID_INPUT3�\PMEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION�\FONTENUMPROCA_ETW_SET_KTIMER2_EVENT(�\PIMAGE_ARM_RUNTIME_FUNCTION_ENTRY�\LPPALETTEENTRYe_IMAGE_NT_HEADERS64"�\PSYSTEM_VA_LIST_INFORMATION�\PRTL_ENUM_HEAPS_ROUTINE �\PDECRYPTION_STATUS_BUFFER�\PTP_IO_CALLBACK�\PEMRTEXT�\PTOKEN_PRIMARY_GROUP�\PPSINJECTDATA�\MSGBOXCALLBACK-�<JOBOBJECT_BASIC_ACCOUNTING_INFORMATIONV1tagCOLORADJUSTMENTi5PERFINFO_MEM_RESET_INFO!�\PFSCTL_OFFLOAD_READ_OUTPUT�(PATTERN!@PEMRBEGINPATH�*KBDLLHOOKSTRUCT�SNT_TIB32[TtagMENUGETOBJECTINFO�\PRTL_RVA_LIST_ITERATOR$K_ENUM_SERVICE_STATUS_PROCESSA�&RPC_VERSION�ENUMLOGFONTW�PEMRPOLYPOLYGON�\LPSOUNDSENTRY!�V_PERFINFO_MARK_INFORMATION�\SC_NOTIFICATION_CALLBACK�\PWNODE_EVENT_REFERENCE.�\PEVENT_TRACE_POOLTAG_FILTER_INFORMATION0�\PSYSTEM_VERIFIER_CANCELLATION_INFORMATION+UMS_SCHEDULER_REASON�)PBITMAPV4HEADER�SPOUTLINETEXTMETRICA%�!_FILE_FS_DATA_COPY_INFORMATION�WIMAGE_SYMBOL$�\PFILE_STORAGE_TIER_MEDIA_TYPE9#_RPC_SECURITY_QOS_V3_W �\PPERFINFO_DPC_INFORMATION �\PFILESYSTEM_STATISTICS_EX�FSYSTEM_ALARM_OBJECT_ACE�CRTL_PROCESS_BACKTRACES�XPRAWKEYBOARD�RPC_ADDRESS_CHANGE_FN%�_SYSTEM_RESOURCE_ATTRIBUTE_ACE�$_PEBS_DS_SAVE_AREA�\PCFOUR_PART_VERSION�\GEO_ENUMPROCYLPIMEMENUITEMINFOA.�5_SYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1�\PATOM_BASIC_INFORMATION+RTL_UNLOAD_EVENT_TRACE:UtagRAWINPUTHEADER,g"_IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY�_PROCESS_DISK_COUNTERSq;LOGPALETTE(tagEMRPOLYLINE16�APNEWTEXTMETRICA�\ABORTPROC'=4_PERFINFO_PO_SESSION_CALLOUT_RET�\PXSAVE_CPU_INFO�"POWER_SESSION_TIMEOUTS�\PEMRSETPALETTEENTRIES3�SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT7�\PRTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICYGEOID�"_CSVFS_DISK_CONNECTIVITY!TF_STORAGE_RESERVE_AREA_INFO�\DPI_AWARENESS_CONTEXT�\OLDFONTENUMPROCA�#_VIDEOPARAMETERS�#ENUM_SERVICE_STATUS^<ETW_BUFFER_CONTEXT�\XMIT_HELPER_ROUTINE,?*_PERFINFO_SAMPLED_PROFILE_INFORMATION'\2_SYSTEM_MEMORY_USAGE_INFORMATIONOPEMRSETLAYOUT&E9_PROCESS_EXTENDED_ENERGY_VALUES�>_EVENT_HEADERc/PERFINFO_TRACE_HEADER�\PNON_PAGED_DEBUG_INFO!�\PSYSTEM_THREAD_INFORMATION�TP_CALLBACK_INSTANCE�\RPC_OBJECT_INQ_FN*\V_SYSTEM_MEMORY_TOPOLOGY_INFORMATIONJ5LPCOMPAREITEMSTRUCT%�TPLUGPLAY_CONTROL_CONFLICT_DATA=NETRESOURCE�6_FULL_PTR_XLAT_TABLES%E_TXFS_LIST_TRANSACTIONS%fW_EXTENT_READ_CACHE_INFO_BUFFER$NUMA_NODE_RELATIONSHIP�\PEVENT_CALLBACK"�\PFILE_ZERO_DATA_INFORMATION&�Z_PROCESS_CYCLE_TIME_INFORMATION$�\PPROCESS_AFFINITY_UPDATE_MODE,�6_FILE_IOSTATUSBLOCK_RANGE_INFORMATION&�\PFILE_PROVIDER_EXTERNAL_INFO_V17;._RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY!n(SYSTEM_BIGPOOL_INFORMATION%�\PPLUGPLAY_CONTROL_INSTALL_DATA�\LPENUMLOGFONTEX(PEMRPOLYBEZIER16#�\PKEY_VALUE_BASIC_INFORMATION8ULPRAWINPUTHEADER%�\LPENUM_SERVICE_STATUS_PROCESSW!�\PWMI_IMAGELOAD_INFORMATION�[_RTL_RVA_LIST]+ETW_SET_TIMER_EVENT�\PCONTEXT_CHUNK.IMAGE_TLS_DIRECTORY64%�\PIO_RESOURCE_REQUIREMENTS_LIST�\PCRAWINPUTDEVICE#�VEVENT_EXTENDED_ITEM_INSTANCE#�4SERVERSILO_BASIC_INFORMATION'�\PPS_MITIGATION_AUDIT_OPTIONS_MAP{<XSTATE_CONTEXT2�%JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION$M&tagPOINTER_BUTTON_CHANGE_TYPE�*CM_SHARE_DISPOSITION&�\PRTL_DISK_WRITE_CONSTRAINT_INFO�\ICMENUMPROCA�\PWNODE_ALL_DATA#�_PERFINFO_DEBUG_EVENT_REASONyVFILE_END_OF_FILE_INFO�\LPMETAFILEPICT'�%TXFS_READ_BACKUP_INFORMATION_OUT�\PXSTATE_FEATURE�\REGISTERWORDENUMPROCW�\PUNWIND_HISTORY_TABLE �\PMUTANT_OWNER_INFORMATIONMENUTEMPLATEW�\LPWNDCLASSEX(�YPERFINFO_CONTIGUOUS_PAGE_GENERATEZ_HV_DETAILS!�\PHEAP_EXTENDED_INFORMATION�/tagEMRSELECTPALETTE�\PRTL_TREE_WALK_FUNCTIONz*_KEY_EVENT_RECORDW%pvalueW�@DISCDLGSTRUCT&lSERVICE_DELAYED_AUTO_START_INFO�\PETW_CLOCK_TIME_UPDATE*�1_PROCESS_COMMIT_RELEASE_INFORMATION�\PVALENT&�TSYSTEM_ACTIVITY_MODERATION_INFO%�T_PROCESS_FOREGROUND_BACKGROUND(�<PERFINFO_KERNELMEMORY_RANGE_USAGE&XFILE_DISPOSITION_INFORMATION_EX#YENLISTMENT_BASIC_INFORMATION�U_STARTUPINFOEXA>FILE_ALL_INFORMATION)�\PMEMORY_PARTITION_NODE_INFORMATION�2_DMA_CONFIGURATION_BYTE1(�\PPROCESS_DEVICEMAP_INFORMATION_EX�\PWNF_STATE_NAME_LIFETIME$6$_PERFINFO_PPM_STATE_SELECTION)\W_RTL_IMAGE_MITIGATION_SEHOP_POLICY$�&_RTL_CRITICAL_SECTION_DEBUG64
�APSIZELLCSCSTYPE�\PETW_CLOSE_HANDLE_EVENT$�\RTL_REALLOCATE_STRING_ROUTINE�>tagDROPSTRUCT=,XSAVE_CET_U_FORMAT0�\PEVENT_TRACE_COVERAGE_SAMPLER_INFORMATION�)UNICODE_STRING323?_PRIVILEGE_SET�'ACTIVATION_CONTEXT_STACK.9_RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY�\PENUMTEXTMETRIC#�GSD_CHANGE_MACHINE_SID_OUTPUT�\PIMAGE_NT_HEADERS*�0SYSTEM_WRITE_CONSTRAINT_INFORMATIONjSPEXTLOGPEN�,tagRECONVERTSTRING17HEAP_EVENT_RANGE"^/_PERFINFO_MEMORY_NODE_ENTRY!NV_REPARSE_POINT_INFORMATION%LOGICAL_PROCESSOR_RELATIONSHIP�'EMRPOLYTEXTOUTW)$DPERFINFO_PO_CALIBRATED_PERFCOUNTERREMRSETROP2�YSYSDBG_TRIAGE_DUMP�\PTRACE_GUID_PROPERTIES#�\PPERFINFO_SYSCALL_ENTER_DATA!�_RTL_FEATURE_ENABLED_STATE�E_OPTICAL_MEDIA_RECORD-�\PSYSTEM_FIRMWARE_PARTITION_INFORMATION�=EVENT_FILTER_EVENT_ID#�\PIMAGE_RESOURCE_DIR_STRING_U0�CRTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICYkDNEWTEXTMETRICEX!�\PTOUCHPREDICTIONPARAMETERSLONG_PTRsWXSAVE_CPU_ERRATA�(_TOKEN_DEVICE_CLAIMS!�TXFS_SAVEPOINT_INFORMATION#�\PPROCESSOR_POWER_INFORMATION"�DPLUGPLAY_CONTROL_DEPTH_DATA�\LPSYSTEM_POWER_STATUS�tagHIGHCONTRASTW �\PETW_KQUEUE_ENQUEUE_EVENT*�\PACCESS_ALLOWED_CALLBACK_OBJECT_ACE%w(_TIME_DYNAMIC_ZONE_INFORMATION!�\DISPLAYCONFIG_ADAPTER_NAME�\PEMRPLGBLT�+CLIENT_CALL_RETURN�;ACL_REVISION_INFORMATION�\PMEMORY_RESERVE_TYPE/8,_FILE_QUERY_METADATA_OPTIMIZATION_OUTPUT�-tagNONCLIENTMETRICSW�\PETW_WAKE_COUNTER_EVENT/�\PJOBOBJECT_EXTENDED_LIMIT_INFORMATION_V1`.PALPC_HANDLE_ATTR32�\PREASON_BUFFER�\RTL_AVL_MATCH_FUNCTION%�\PPERFINFO_CC_WORKITEM_COMPLETE�<_EVENT_TRACE_LOGFILEALANGNAMEINDEX�\HRSRC�\PCWNF_TYPE_ID\EDITWORDBREAKPROCA�EIMAGE_POLICY_METADATA�*_ETW_HEAP_EVENT_CREATE(�"_PERFINFO_CC_EXTRA_WB_THREAD_INFO
�/CURDIR!ZC_FILE_OBJECTID_INFORMATION"�'PROCESS_WORKING_SET_CONTROL$~\PCM_EISA_FUNCTION_INFORMATION�C_FILE_ALLOCATION_INFO!8_WINDOW_BUFFER_SIZE_RECORD�_IO_RESOURCE_DESCRIPTOR'Y_ETW_ANTI_STARVATION_BOOST_EVENT*[PROCESS_SECURITY_DOMAIN_INFORMATIONREMRSETICMMODEz\PFILE_STORAGE_TIER(y\PWORKER_FACTORY_BASIC_INFORMATIONx\LPSYSTEM_INFOnUNIVERSAL_NAME_INFOW3RPC_ADDRESS_CHANGE_TYPE1^)_EVENT_TRACE_IPT_CONFIGURATION_INFORMATION&w\PETW_COVERAGE_SAMPLER_PERF_INFO#PUINT_PTRv\PIMAGE_TLS_DIRECTORY64'�:MEMORY_SHARED_COMMIT_INFORMATION6PEMRPOLYPOLYLINE16!�#_SECURITY_OBJECT_AI_PARAMS
_EVENT_DATA_DESCRIPTOR*�#_PERFINFO_HARDPAGEFAULT_INFORMATION.�AJOBOBJECT_EXTENDED_LIMIT_INFORMATION_V1�tagEXTLOGPEN32#t\PIMAGE_DYNAMIC_RELOCATION_V2s\PREFS_VOLUME_DATA_BUFFER1�C_RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY$�D_CONSOLE_SCREEN_BUFFER_INFOEXr\PPROVIDERZHV_DETAILS,'7MANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHES&q\PRTL_USER_PROCESS_INFORMATION64!ATOMp\PEMROFFSETCLIPRGN+o\PFILE_LINK_ENTRY_FULL_ID_INFORMATION+n\PSYSTEM_BOOT_ENVIRONMENT_INFORMATION*�2SYSTEM_KERNEL_VA_SHADOW_INFORMATION#HETW_CLOCK_STATE_CHANGE_EVENT*m\PPERFINFO_SYSTEM_MEMORY_INFORMATION'l\PSTORAGE_RESERVE_AREA_DEFINITION+�0_TRANSACTION_ENLISTMENTS_INFORMATIONk\PTP_WIN32_IO_CALLBACK
 ORIENTATION_PREFERENCE/�4SYSTEM_VERIFIER_CANCELLATION_INFORMATION!�-QUERY_SERVICE_LOCK_STATUSW�SERVICE_NOTIFYW&�T_PLUGPLAY_CONTROL_CONFLICT_DATAg\PEMREOFn$_CI_LOG_SCHEDULER_EVENT4f\PSYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE�XMUILANGLIST$e\PRTL_USER_PROCESS_INFORMATIONd\LPPOLYTEXT
�TPEB�INTERFACE_TYPE�G_PLUGPLAY_NOTIFY_HDR�ZLPBITMAPCOREINFO c\PSC_NOTIFICATION_CALLBACK�7MENU_EVENT_RECORD`\PUSN_RECORD_EXTENT^\_Reparse(\\PMEMORY_SHARED_COMMIT_INFORMATION�(_SCOPE_TABLE_AMD64,[\PSYSTEM_LOGICAL_PROCESSOR_INFORMATIONZ\PETW_OPTICALIO_INITD_CSV_CONTROL_PARAM%�_REFS_SMR_VOLUME_GC_PARAMETERSY\PLDR_DLL_LOAD_REASON+X\PEVENT_TRACE_SPINLOCK_INFORMATION_V1�U_IMAGE_RELOCATION�_VRF_RULE_CLASS_ID2?SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION(W\PACTIVATION_CONTEXT_ASSEMBLY_DATA$V\PTRACE_PROVIDER_INSTANCE_INFOU\PNDR_ASYNC_MESSAGE$ &_QUERY_BAD_RANGES_INPUT_RANGE�_FIRMWARE_TYPEmEETW_UMS_EVENT_PARK�V_SID%�ZFILE_STANDARD_LINK_INFORMATION%|UWIM_PROVIDER_ADD_OVERLAY_INPUT%�(_SYSTEM_CALL_COUNT_INFORMATION%;VKEY_VIRTUALIZATION_INFORMATION�FIXEDT\PAR_STATE"
XENCLAVE_LOAD_DATA_VBS_BASIC�8tagCOMBOBOXINFOS\LPSERVICE_DESCRIPTION#ULONG_PTR%R\PEVENT_EXTENDED_ITEM_EVENT_KEY+<_ALPC_PORT_ASSOCIATE_COMPLETION_PORT)�[_EVENT_EXTENDED_ITEM_STACK_TRACE32-Q\PPERFINFO_PFMAPPED_SECTION_INFORMATION�_LUNICODE_STRINGY_CSV_IS_OWNED_BY_CSVFS.P\PSYSTEM_SESSION_MAPPED_VIEW_INFORMATION$$ETW_TP_EVENT_CALLBACK_DEQUEUE'O\PETW_SESSION_NOTIFICATION_PACKET6tagWINDOWPLACEMENT$�Y_FILE_STANDARD_INFORMATION_EX)N\PTXFS_ROLLFORWARD_REDO_INFORMATIONM\PCSV_IS_OWNED_BY_CSVFSK\NON_PAGED_DEBUG_INFO"I\PMEMORY_BASIC_INFORMATION64%H\PQUERY_BAD_RANGES_OUTPUT_RANGE%G\PEXTENT_READ_CACHE_INFO_BUFFER!�&_ENCRYPTION_KEY_CTRL_INPUT+I4_REFS_DEALLOCATE_RANGES_INPUT_BUFFER!F\PSECURE_SETTING_VALUE_TYPE E\PRTL_UNLOAD_EVENT_TRACE643D\PCLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUEC\PALPC_SERVER_INFORMATION
B\PFNFTH!�_SECTION_INFORMATION_CLASSA\I_RpcPerformCalloutFn'0_TOKEN_BNO_ISOLATION_INFORMATION�E_POWER_REQUEST_TYPE�%_LDR_ENUM_RESOURCE_ENTRY W:FSCTL_OFFLOAD_READ_OUTPUT%@\PSYSTEM_GDI_DRIVER_INFORMATION�0_MUILANGUAGESuPULONG32#W_PS_BNO_ISOLATION_PARAMETERS!(ALPC_WORK_ON_BEHALF_TICKETI+_WAKE_TIMER_INFO�PUWSTR_C?\PEVENT_RECORDE0PROCESS_WAKE_FILTERf<tagENUMLOGFONTEXW,�_LRPC_SYSTEM_HANDLE_MARSHAL_DIRECTION�ZRGNDATAHEADERINT16�D_XSAVE_FEATURE<\PWRITE_USN_REASON_INPUT+~'SYSTEM_HYPERVISOR_DETAIL_INFORMATION;\PRTL_TRACE_DATABASEIU_SCRUB_PARITY_EXTENT(CCFG_CALL_TARGET_INFO)�C_PERFINFO_VIRTUAL_ALLOC_XPARTITION�FPERFINFO_FLT_OPERATION:\PTP_CLEANUP_GROUPKDPEVENTMSG#9\RTL_HEAP_STACK_WRITE_ROUTINE�9NDR_USER_MARSHAL_INFO"PUCSCHAR!8\I_RpcProxyIsValidMachineFn4TTPOLYGONHEADER7\PROPENUMPROCW�'_NDR_CS_ROUTINES�._MAXVERSIONTESTED_INFO�=tagFONTSIGNATURE4\PSD_GLOBAL_CHANGE_OUTPUT-�_MEMORY_PARTITION_TRANSFER_INFORMATION _ALPC_WORK_ON_BEHALF_ATTR#\1SYSTEM_HIBERFILE_INFORMATION3\LPCSCROLLINFO1\HRAWINPUT!0\PFILE_QUERY_SPARING_BUFFER�>tagEMREXTFLOODFILL$/\PEVENT_EXTENDED_ITEM_INSTANCE&JOBOBJECT_ENERGY_TRACKING_STATE.\PIO_SESSION_CONNECT_INFO&�Y_WIM_PROVIDER_CONTROL_INTEGRITY%b-_PO_HIBER_FORCE_DISABLE_REASON+-\PMEM_SECTION_EXTENDED_PARAMETER_TYPEdULPTITLEBARINFO#,\PSEMAPHORE_BASIC_INFORMATION%7_RPC_BINDING_HANDLE_OPTIONS_V1+\PWMI_IDE_CHANNEL_RECORD9*\PPROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION6)\PSYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRY(\PPLUGPLAY_APC_ROUTINEf.PLOGBRUSH�YLPIMEMENUITEMINFOW(#\_RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR \PXSAVE_FEATURE�<IMAGE_FUNCTION_ENTRY�9PBITMAP\PKLDR_DATA_TABLE_ENTRY32�(tagCREATESTRUCTWTDATEFMT_ENUMPROCEXW �_MUTANT_OWNER_INFORMATION�THTOUCHINPUT__�_RTL_BALANCED_NODE�Z_GROUP_RELATIONSHIP�!EMRWIDENPATH"\PFILE_NUMA_NODE_INFORMATION#\PSYSTEM_VHD_BOOT_INFORMATION�Z_CM_PCCARD_DEVICE_DATA\_IMAGE_POLICY_ENTRY�5_FILE_NAMES_INFORMATION�=_PSFEATURE_OUTPUT"�RDRIVER_VERIFIER_THUNK_PAIRS�7TIME_FIELDS'\PSYSTEM_ACTIVITY_MODERATION_INFOStagRGBQUAD!COLOR16(�B_PERFINFO_DRIVER_COMPLETE_REQUEST,\PPERFINFO_DRIVER_COMPLETE_REQUEST_RET#RTL_WORK_ON_BEHALF_TICKET_EXLPHANDLE�*CREATESTRUCT\PIMAGE_VXD_HEADER|PROCESSINFOCLASS(�FILE_FS_METADATA_SIZE_INFORMATION�*TP_TIMER"CALTYPE\PKHETERO_CPU_POLICY\IELF_HANDLE%\PSYSTEM_SECUREBOOT_INFORMATION=CBT_CREATEWND+
TRANSACTIONMANAGER_INFORMATION_CLASS
@STRINGk!RPC_STRINGpPCHAR\PMOVE_FILE_RECORD_DATA4\PRTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY"� TXFS_GET_TRANSACTED_VERSIONJ'_SD_GLOBAL_CHANGE_OUTPUT \LPENCLAVE_TARGET_FUNCTION�8_WMI_PUSHLOCK)G_RTL_PROCESS_BACKTRACE_INFORMATION2)=SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION
\PRETRIEVAL_POINTER_BASE\PPO_WAKE_SOURCE_HEADER1ENCLAVE_CREATE_INFO_VBS�FILE_BASIC_INFO\PDLL_INIT_ROUTINE!k2_WMI_DISKIO_READWRITE_INIT&\PSL_APPX_CACHE_VALUE_DESCRIPTOR!y(PRTL_UMS_THREAD_INFO_CLASSo#RTL_CRITICAL_SECTION32�_DEVICE_POWER_STATE3:_MULTI_TIME$\PJOBOBJECT_JOBSET_INFORMATION%\PPROCESS_ENERGY_TRACKING_STATE+\PRPC_HTTP_TRANSPORT_CREDENTIALS_V2_W\PWMI_FILE_IO)PETW_COVERAGE_SAMPLER_OPTION_FLAGS)\PGET_FILTER_FILE_IDENTIFIER_OUTPUT#�[PPROCESS_SESSION_INFORMATION"�[PFSCTL_OFFLOAD_WRITE_OUTPUT&�)_PERFINFO_PPM_PERF_STATE_CHANGE#e7_PERFINFO_MEMORY_INFORMATION�[OBJECT_TYPE_INFORMATION,SYSTEM_BIGPOOL_ENTRY�RWINSTAENUMPROCW8 :_ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION)�[PSYSTEM_HANDLE_TABLE_ENTRY_INFO_EX+PEMRSETBRUSHORGEX�[PETW_RT_EVENT_LOSS6�[JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V3)�[PSTREAMS_ASSOCIATE_ID_INPUT_BUFFER(5SYSTEM_POWER_STATE_DISABLE_REASON�3EMRFRAMERGN�9_PERFINFO_FILE_CREATE�RTL_HEAP_ENTRY)_DCB.�[PFILE_NETWORK_PHYSICAL_NAME_INFORMATION.�[PTRANSACTIONMANAGER_LOGPATH_INFORMATION�#_ENUM_SERVICE_STATUSA._RTL_BALANCED_LINKS�[LPEXIT_THREAD_DEBUG_INFO|8_NTFS_STATISTICS_EX7uD_SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTIONF_EVENTSFORLOGFILE�[LPLAYERPLANEDESCRIPTORv$NPREGISTERWORDA�+PCUWCHAR'$_SYSTEM_DPC_BEHAVIOR_INFORMATION$�[PKEY_OPEN_SUBKEYS_INFORMATION1�[PEVENT_TRACE_LBR_CONFIGURATION_INFORMATION�.NPDEVMODEA�_GUID#�[_PROCESSOR_POWER_INFORMATION%�[PINVERTED_FUNCTION_TABLE_ENTRY�A_EVENT_FILTER_DESCRIPTOR�[PKLDR_DATA_TABLE_ENTRY64'�F_IO_COMPLETION_INFORMATION_CLASS �[PETW_CANCEL_KTIMER2_EVENT!�;_PERFINFO_PO_NOTIFY_DEVICE)�?_JOBOBJECT_CONTAINER_IDENTIFIER_V2�FILE_DISPOSITION_INFO_EX"�VETW_COVERAGE_SAMPLER_SAMPLE=SPALTTABINFOS:_CM_SERIAL_DEVICE_DATA&INIT_ONCE�[LPAUDIODESCRIPTION [PWMI_DISKIO_FLUSH_BUFFERS.B_RPC_SECURITY_QOS_V5_A:�!RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME�'EMRPOLYTEXTOUTA�"PROCESS_LEAP_SECOND_INFO�[PEMRRESTOREDCSUITE_TYPE�tagBITMAPINFOpLPCH!mCPO_SPR_ACTIVE_SESSION_DATA%�[PSYSDBG_LIVEDUMP_CONTROL_FLAGS;FILE_STORAGE_INFO�0PROCESS_HEAP_ENTRYd STARTUPINFOA.*MDICREATESTRUCTASID_AND_ATTRIBUTES_HASH!Z%CM_EXTENDED_PARAMETER_TYPE�[PTP_DIRECT_CALLBACK�[PIO_STATUS_BLOCK)�[PFILE_ID_GLOBAL_TX_DIR_INFORMATION�+CM_PARTIAL_RESOURCE_LIST �GTP_POOL_STACK_INFORMATIONRPC_INTERFACE_GROUP!�[PPERFINFO_SET_POWER_ACTION$�)_PERFINFO_FILE_PATH_OPERATION _FILE_MODE_INFORMATION�SLPPROCESS_INFORMATIONs@UUID_VECTOR�SNETCONNECTINFOSTRUCT �&_SPARSE_OVERALLOCATE_DATA�BHTASK__CRtagEMRMASKBLT)]5KEY_SET_VIRTUALIZATION_INFORMATION!,5_EISA_MEMORY_CONFIGURATION�WLPRID_DEVICE_INFOI_LARGE_INTEGER)�%WIM_PROVIDER_SUSPEND_OVERLAY_INPUTmB_SYSDBG_BUS_DATA&�[PMANAGE_HOT_PATCH_QUERY_PATCHESf&UNWIND_CODE!�WSYSTEM_POWER_LOGGING_ENTRYJ�[ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL-�[PFSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER"�[PSE_PACKAGE_CAPABILITY_INFO~EMRCOLORCORRECTPALETTE%�[_PIMAGE_RUNTIME_FUNCTION_ENTRY,/WOW64_CPUAREA_INFO),_TOKEN_ELEVATION_TYPE_WNF_DATA_SCOPE"ACMANAGE_HOT_PATCH_LOAD_PATCH(�[EVENT_EXTENDED_ITEM_STACK_TRACE32eVSECURITY_SEED_AND_LENGTH�[GDI_HANDLE_BUFFER32 �RTL_FEATURE_ENABLED_STATE�@TP_DEBUG_FREE_INFO!�"_WMI_IMAGEID_INFORMATION64�_SYSTEM_POWER_STATE �X_OPERATION_END_PARAMETERS&X_FILE_PROVIDER_EXTERNAL_INFO_V0KDPEVENTMSGMSG�[POBJECT_ATTRIBUTES�-_VM_COUNTERS_EX�*_FOCUS_EVENT_RECORD#�[_ETW_DISKIO_FLUSH_BUFFERS_V2%5COVERAGE_REQUEST_CODES-�[PSERVICE_CONTROL_STATUS_REASON_PARAMSW&�@_PS_CPU_QUOTA_QUERY_INFORMATIONNE_RPC_SERVER_INTERFACE
�[HKEY__
vZHPEN__�YRPC_SECURITY_QOS_V2_AqAPETW_DISKIO_READWRITE_V3�[PBATTERY_REPORTING_SCALE6U_FILE_FULL_DIR_INFO�WtagLAYERPLANEDESCRIPTOR�[PPERFINFO_FILE_CREATE ;PROC_THREAD_ATTRIBUTE_NUMz0tagSCROLLBARINFO"CLONG�HANDLER_FUNCTION_EX%_WORKER_FACTORY_CALLBACK_CLASS boolean0�[PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION+�$_HEAP_OPTIMIZE_RESOURCES_INFORMATION,J_PERFINFO_CLOCK_INTERRUPT_INFORMATION�[PTOKEN_DEFAULT_DACL(�0_SYSTEM_AUDIT_CALLBACK_OBJECT_ACEN:tagCHANGEFILTERSTRUCT�"_ETW_OBJECT_TYPE_EVENT*�VETW_TP_EVENT_WORKER_NUMANODE_SWITCH.'_SYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE�[RTL_RVA_LIST
ZHRGN__*K8_SYSTEM_LOW_PRIORITY_IO_INFORMATION�[PACL_SIZE_INFORMATIONAZFILESYSTEM_STATISTICS_EX�[DLL_INIT_ROUTINE%XFILE_PROVIDER_EXTERNAL_INFO_V0"�[PCLDR_DLL_NOTIFICATION_DATA�Z_FILE_NAME_INFOU+tagMDINEXTMENU'�WSYSTEM_LEGACY_DRIVER_INFORMATION#'U_PROCESS_LOGGING_INFORMATION8DTHREAD_TLS_INFORMATION&�FIO_COMPLETION_INFORMATION_CLASS+�YSYSTEM_VERIFIER_COUNTERS_INFORMATION'�0_PLUGPLAY_CONTROL_CONFLICT_ENTRY1p:TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT�+LPOSVERSIONINFOEXW-?5SYSTEM_SESSION_MAPPED_VIEW_INFORMATIONvWIN32_STREAM_ID�7PS_MEMORY_RESERVE�@tagMENUITEMINFOW�#_SERVICE_TIMECHANGE_INFO!+SHUTDOWN_ACTION�YHACCEL__�[LPOVERLAPPEDx?LPDLGITEMTEMPLATEW�:LPRECONVERTSTRING!�[PIMAGE_RESOURCE_DATA_ENTRY�?SYSTEM_ACCESS_FILTER_ACE/VETW_KQUEUE_ENQUEUE_EVENTz=USN_JOURNAL_DATA�_KEY_INFORMATION_CLASSt,NPLOGPEN+-EMRANGLEARCc_RESUME_PERFORMANCE,�[PSYSTEM_INTERRUPT_CPU_SET_INFORMATION�[PCLDR_DATA_TABLE_ENTRY1aU_SYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION^9RTL_DEBUG_INFORMATION'�[PIMAGE_CE_RUNTIME_FUNCTION_ENTRY�[PPPM_WMI_PERF_STATE�[HRSRC__�[PMENUGETOBJECTINFO,�_PROCESS_EXTENDED_BASIC_INFORMATION64�?_OSVERSIONINFOEX2A"!ETW_DFSS_START_NEW_INTERVAL_EVENT_DESCRIPTOR�6_FILE_LEVEL_TRIM$�SNTPSS_MEMORY_BULK_INFORMATION%�[WIN32_MEMORY_INFORMATION_CLASS,�[PFILE_IO_PRIORITY_HINT_INFORMATION_EX�XVCN_RANGE_INPUT_BUFFER)�_TRACE_PERIODIC_CAPTURE_STATE_INFO
9S_FP_32%.C_POWER_THROTTLING_THREAD_STATE)�[PSYSTEM_PREFETCH_PATCH_INFORMATION)�[PJOBOBJECT_BASIC_LIMIT_INFORMATIONPPS_APC_ROUTINE �GEVENT_EXTENDED_ITEM_TS_ID4�[PFSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE�#tagWINDOWINFO;+GET_FILEEX_INFO_LEVELSYFEMREXCLUDECLIPRECT�[PPO_WAKE_SOURCE_FIXED#ADJOURNAL_ABSOLUTE_INFORMATIONLOCALE_ENUMPROCA!wchar_t(�ESERVICE_REQUIRED_PRIVILEGES_INFOA#�[PPERFINFO_PO_SESSION_CALLOUT�9MEMORY_EXHAUSTION_TYPEt[COMMCONFIG.�8_ETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT(�[PETW_TIMER_EXPIRATION_START_EVENT
;RTLP_TAG_INFO/pCEVENT_TRACE_COVERAGE_SAMPLER_INFORMATION.�[PJOBOBJECT_CPU_RATE_CONTROL_INFORMATION�[PRTL_AVL_FREE_ROUTINE#4'_ETW_TP_EVENT_CALLBACK_START_PERFINFO_HV_HYPERCALLwU_PERFINFO_IO_TIMER)7?PERFINFO_SESSIONCREATE_INFORMATION2�.FILE_IO_COMPLETION_NOTIFICATION_INFORMATIONuRTL_FEATURE_ID �[PRTL_OKAY_TO_LOCK_ROUTINE$�'ACTIVATION_CONTEXT_INFO_CLASS!�[PFILE_POSITION_INFORMATION(�[PRPC_HTTP_TRANSPORT_CREDENTIALS_WVWMI_IRQ_RECORD#�_REQUEST_OPLOCK_INPUT_BUFFER�[PPACKEDEVENTINFO�?OSVERSIONINFOEX2/E_RTL_SPARSE_BITMAP_CTX�ICONMETRICSA*SPERFINFO_PAGECOMBINE_ITERATION_STAT*�[PFILE_VALID_DATA_LENGTH_INFORMATION&QUERY_FILE_LAYOUT_INPUT+�[PSYSTEM_KERNEL_VA_SHADOW_INFORMATION-�SYSTEM_CODEINTEGRITYPOLICY_INFORMATION�[PSYSDBG_MSR%BCONNECTDLGSTRUCT�RKEY_LAYER_INFORMATION�;READ_USN_JOURNAL_DATA
qLPWORD%�Z_THREAD_POWER_THROTTLING_STATE�FWNODE_HEADER�<_KERNEL_USER_TIMES([PWINDOWPLACEMENT"�[PALPC_WORK_ON_BEHALF_TICKET#�[PTXFS_GET_TRANSACTED_VERSION�[LPCIEXYZ :ESECTION_IMAGE_INFORMATION+PEMRSETVIEWPORTORGEX!Y_PERFINFO_WORKINGSET_ENTRY �,IMAGE_COFF_SYMBOLS_HEADER(�[PLOOKUP_STREAM_FROM_CLUSTER_ENTRY7�[PSYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION�0RTL_STACK_CONTEXTqAETW_DISKIO_READWRITE_V3�[PRUNTIME_FUNCTIONe*_COPYFILE2_COPY_PHASE$�_FILE_STORAGE_TIER_MEDIA_TYPE�'_DISPLAY_DEVICEW&�[PRTL_PROCESS_MODULE_INFORMATION2@-JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V1�%WMI_REGISTRY 4_ETW_KQUEUE_DEQUEUE_EVENT&#PROCESS_HEAP_INFORMATION�[_OBJECT_TYPE_INFORMATION�&COUNTER_READING$�[PTXFS_CREATE_MINIVERSION_INFO(�[SYSTEM_PREFETCH_PATCH_INFORMATION!�[PETW_DISABLE_KTIMER2_EVENT�[PSYSTEM_POOL_INFORMATIONzENPPOLYTEXTW�%STACK_WALK_EVENT_DATA&�'_SYSTEM_VERIFIER_INFORMATION_EX@"EMRMOVETOEX#�ETW_PROCESS_HANDLE_INFO_TYPE�[PRETRIEVAL_POINTER_COUNT�[PETW_POOL_EVENTSE_AUDIT_OPERATION�[PGENERATE_NAME_CONTEXT�[PETW_HEAP_EVENT_FREE�&PRTL_RESOURCE_DEBUG64"]SE_WS_APPX_SIGNATURE_ORIGIN"�[PPROCESS_UPTIME_INFORMATION1_IMAGE_OPTIONAL_HEADER64*�D_TOKEN_SECURITY_ATTRIBUTE_OPERATION�[PTHREAD_WORKLOAD_CLASS!�2SYSTEM_ERROR_PORT_TIMEOUTS6:LPCANDIDATELIST�_SE_TOKEN_USER.�<_JOBOBJECT_BASIC_ACCOUNTING_INFORMATION�_IRQ_PRIORITY%?_PERFINFO_FLT_OPERATION_STATUS%ZMEMORY_COMBINE_INFORMATION_EX2�[PWMI_RESOURCE�.THREAD_NAME_INFORMATION�[PTP_DIRECT'�C_RTL_IMAGE_MITIGATION_DEP_POLICY�[PMARK_HANDLE_INFO>_WOW64_FUNCTION_CODE64�!LDR_DDAG_NODE C4PERFINFO_CC_FLUSH_SECTION,QUADu_FILE_STORAGE_TIER_CLASS%�YFSCTL_QUERY_REGION_INFO_OUTPUT0�[PSYSTEM_FEATURE_CONFIGURATION_INFORMATIOND7FILE_ID_EXTD_DIR_INFO@ANSI_STRING
�[PFP_32"�D_TXFS_GET_METADATA_INFO_OUT!d=_CONTAINER_ROOT_INFO_INPUT)�_FILE_FS_METADATA_SIZE_INFORMATIONREMRSETSTRETCHBLTMODE-_REARRANGE_FILE_DATA�[LPSTARTUPINFOA[PCONSOLE_SELECTION_INFO#/'_FILE_COMPLETION_INFORMATION%)V_COMPATIBILITY_CONTEXT_ELEMENT�5SCRUB_PARITY_EXTENT_DATA*+_PERFINFO_FILENAME_SAME_INFORMATION"�7_IMAGE_DYNAMIC_RELOCATION64,~[PSYSTEM_VERIFIER_COUNTERS_INFORMATION"}[PCIMAGE_BOUND_FORWARDER_REF(�:RTL_IMAGE_MITIGATION_OPTION_STATE!�VWIM_PROVIDER_EXTERNAL_INFO+{[PSYSTEM_NET_RATE_CONTROL_SET_CONTEXT$z[PSYSTEM_PROCESSOR_INFORMATION1y[PCACTIVATION_CONTEXT_RUN_LEVEL_INFORMATIONjSNPEXTLOGPEN�_cpinfo
w[PFIBER#�@_SEMAPHORE_BASIC_INFORMATION6%REG_PROVIDER*v[PETW_TRACE_PARTITION_INFORMATION_V2 �,_ETW_TP_EVENT_POOL_CREATENU_BLENDFUNCTION+._SYSTEM_SYSTEM_PARTITION_INFORMATIONt[_COMMCONFIG)q[LPSERVICE_REQUIRED_PRIVILEGES_INFO�RPC_MESSAGE �<SYSTEM_HANDLE_INFORMATION _TIME_ZONE_INFORMATION"�_HEAP_EVENT_COMMIT_DECOMMIT"�PERFINFO_PO_SESSION_CALLOUT!p[PNTFS_EXTENDED_VOLUME_DATAj9_KTMOBJECT_TYPEo[HINSTANCE$n[PGET_SYSTEM_WOW64_DIRECTORY_W&�_FILE_REPARSE_POINT_INFORMATIONk[OLDFONTENUMPROCW�MENUITEMINFOA{<_XSTATE_CONTEXTs=NEWTEXTMETRIC�SNPOUTLINETEXTMETRICA#j[PENCLAVE_INIT_INFO_VBS_BASIC�LPDIBSECTIONG5MSGBOXPARAMSWi[PETW_CANCEL_TIMER_EVENT;F_CM_SCSI_DEVICE_DATA�ZFILE_NAME_INFO $_FILE_STAT_LX_INFORMATIONf[PUSN_JOURNAL_DATA_V1('PLUGPLAY_CONTROL_CONFLICT_STRINGSe[PFILE_QUOTA_INFORMATION+?)PLUGPLAY_CONTROL_RELATED_DEVICE_DATAd[PRTL_RXACT_OPERATION'c[PETW_ANTI_STARVATION_BOOST_EVENT4a2_PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION| _KCRM_MARSHAL_HEADER,LPSECURITY_CAPABILITIES'b[RTL_WALK_IMAGE_POLICIES_CALLBACKPLANGNAMEINDEX!NPTEXTMETRICA4�RPROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY^IO_PRIORITY_HINT='_CONSOLE_FONT_INFO �APERFINFO_BOOT_PHASE_STARTdYALPC_DATA_VIEW_ATTR&�?_SL_APPX_CACHE_VALUE_DESCRIPTOR�RSERVICE_DESCRIPTION�EFI_DRIVER_ENTRY_LISTSTORAGE_RESERVE_ID a[PREFS_SMR_VOLUME_GC_STATE)`[PRTL_IMAGE_MITIGATION_SEHOP_POLICY_[PPO_SLEEP_DISABLE_REASON>XSAVE_FORMAT^[PEXCEPTION_FILTER�9FILE_NAME_INFORMATION�VLPHARDWAREHOOKSTRUCT[[PPOWER_IDLE_RESILIENCY �RTL_IMAGE_POLICY_METADATAoD_PS_ATTRIBUTE�DTP_DEBUG_CLASS;�Y_RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICYdCVM_COUNTERS_EX2+qU_SYSTEM_FEATURE_CONFIGURATION_UPDATE�_HSM_OPCODE(Z[PFILE_METADATA_OPTIMIZATION_STATE!Y[PETW_NOTIFICATION_CALLBACK2U[PSYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE+PENHMETAHEADER'ZARPC_BINDING_HANDLE_SECURITY_V1_A!cEMEMORY_BASIC_INFORMATION32*�2_FILE_INITIATE_REPAIR_OUTPUT_BUFFER"�R_KEY_WRITE_TIME_INFORMATIONYNPIMEMENUITEMINFOAhDCSV_QUERY_FILE_REVISIONT[PFILE_PIPE_EVENT_BUFFER3&LOGCOLORSPACEA�#LOCALESIGNATUREq2_HEAP_RANGE_LOG�W_RTL_BUFFER$S[PPO_INTERNAL_WAKE_SOURCE_TYPE&4tagPOINTER_TOUCH_INFO:_DYNAMIC_FUNCTION_TABLER[PRTL_DISK_SPEED_INFO'�ESERVICE_REQUIRED_PRIVILEGES_INFO(�_IMAGE_LOAD_CONFIG_CODE_INTEGRITY Q[PRTL_MODULE_EXTENDED_INFOD<_PS_ATTRIBUTE_LIST�"_CSV_QUERY_MDS_PATH_V2=NETRESOURCEAP[PRPC_SECURITY_QOS_V5_WO[PENCRYPTED_DATA_INFO#3C_SHARED_VIRTUAL_DISK_SUPPORT(N[PSYSTEM_SINGLE_MODULE_INFORMATION�!GCP_RESULTSL[PTP_TIMERK[HDESK1J[PEVENT_TRACE_IPT_CONFIGURATION_INFORMATION"�AFILE_PROVIDER_EXTERNAL_INFO�#PVIDEOPARAMETERS
TEB'�3FILE_FS_FULL_SIZE_INFORMATION_EXI[LPDOCINFOW!H[PFILE_TRACKING_INFORMATION`DtagEMRFILLPATH�#ENUM_SERVICE_STATUSA!^/PERFINFO_MEMORY_NODE_ENTRY!4'ETW_TP_EVENT_CALLBACK_STOP$|YPERFINFO_CC_WORKITEM_COMPLETE
v,LOGPEN!�SYSTEM_MEMORY_LIST_COMMAND#G[RTL_RETPOLINE_CHECK_FUNCTION F[PETW_STACK_CACHING_CONFIG% TIMER_TYPE�&_TOKEN_MANDATORY_LABELE[PLDR_FAILURE_DATA �BEMREXTCREATEFONTINDIRECTW�APO_WAKE_SOURCE_INFO4_!_SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION5%&RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY"?NPPELARRAY�EETW_CRITSEC_EVENT_INIT*�E_JOBOBJECT_MEMORY_USAGE_INFORMATION$Y_ENLISTMENT_BASIC_INFORMATIOND[PINIT_ONCE_FNvB_WMI_TCPIPVWMI_WAIT_MULTIPLE)zRPROCESS_EXTENDED_BASIC_INFORMATION�S_PROCESS_INFORMATION@[LANGUAGEGROUP_ENUMPROCA2=[PACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600h0RTL_LFG_RNG_STATE]%PEMRARC_LIST_ENTRY3_!SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION!WORD�!EMRSETVIEWPORTORGEX"�>_SYSTEM_POWER_STATE_CONTEXT9[PWMI_WAIT_OBJECT_RECORD"#ETW_COVERAGE_SAMPLER_HANDLE(8[PLEARNING_MODE_OBJECT_INFORMATIONn7IMECHARPOSITION7[PRPC_SECURITY_QOS_V2_W5[WMI_RESOURCE:UNICODE_STRING"2[LDR_CREATE_ACT_CTX_LANGUAGE�"_BUS_DATA_TYPE#�&_SYSTEM_VERIFIER_INFORMATION1[GOBJENUMPROC,.[PRTL_FEATURE_USAGE_SUBSCRIPTION_TABLE�)_MAT2
9_RPC_SECURITY_QOS_V5_WTVEMRCREATEPALETTE$-[PFILE_END_OF_FILE_INFORMATION.�5_JOURNAL_SET_KEY_USER_FLAGS_INFORMATION�VLOAD_DLL_DEBUG_INFO%�V_EVENT_EXTENDED_ITEM_EVENT_KEY+?*PERFINFO_SAMPLED_PROFILE_INFORMATION*�*_FILE_PIPE_CLIENT_PROCESS_BUFFER_EX#,[PETW_TP_EVENT_CALLBACK_START!�FSE_PACKAGE_CAPABILITY_INFO +[PWIN32_MEMORY_RANGE_ENTRY�REMRSETCOLORADJUSTMENT�:ALPC_BASIC_INFORMATION�C_RTL_TRACE_BLOCKRPC_SS_THREAD_HANDLE�9_MEMORY_EXHAUSTION_TYPE*[PAXISINFO(EMRPOLYLINE16&':_PERFINFO_PPM_IDLE_STATE_CHANGE�VRF_RULE_CLASS_ID�WMI_SPINLOCK�;_ETW_HEAP_EVENT_COMMON$�/FILE_SFIO_RESERVE_INFORMATION')[PFILE_MAILSLOT_QUERY_INFORMATION�R_CSV_QUERY_MDS_PATH:_EISA_MEMORY_TYPE�Y_ETW_CANCEL_TIMER_EVENT �U_RTL_PHYSICAL_MEMORY_INFO�CUSEROBJECTFLAGS([LPWINDOWPLACEMENT!�Z_SEC_WINNT_AUTH_IDENTITY_W�%PEMRSELECTCOLORSPACE&,_IMAGE_RESOURCE_DIRECTORY_ENTRY'[PTHREAD_START_ROUTINE!&[PFSCTL_OFFLOAD_WRITE_INPUT/�GMEMORY_PARTITION_INITIAL_ADD_INFORMATION&`$ETW_PARTITION_INFO_EXTENSION_V2 %[PMEM_ADDRESS_REQUIREMENTS$[PCM_PCCARD_DEVICE_DATAJ1_PERFINFO_PROCESS_INSWAP'![PIO_COMPLETION_BASIC_INFORMATIONR4EVENT_FILTER_EVENT_NAME�U_ETW_WNF_EVENT_PUBLISH [PSE_IMAGE_SIGNATURE_TYPE[PFILE_ID_EXTD_DIR_INFOLPMENUTEMPLATEuPEN_MASK&tagPOINTER_TYPE_INFO
[PFP_648D_THREAD_TLS_INFORMATION�(HELPWININFO$[PSYSTEM_INTERRUPT_INFORMATION&[PFSCTL_UNMAP_SPACE_INPUT_BUFFER-[PWMI_JOB_SEND_NOTIFICATION_INFORMATION&�/_PERFINFO_SET_DEVICES_STATE_RET[PRTL_HASH_ENTRY[PCONDITION_VARIABLE�#NEWTEXTMETRICW[PWMI_DELAY_EXECUTION"�_IMAGE_DELAYLOAD_DESCRIPTOR�$DMA_WIDTH�VCOUNTED_REASON_CONTEXT [PRTL_ENCLAVE_LAUNCH_TOKENuLPINPUT0[PJOBOBJECT_LIMIT_VIOLATION_INFORMATION_V1
�2tagMSG[PETW_TP_EVENT_POOL_CLOSE�SFILE_LEVEL_TRIM_OUTPUT*[PSYSTEM_MEMORY_TOPOLOGY_INFORMATION�EWMI_TRACE_MESSAGE_PACKETGPMUIREGISTRYINFOg!_WMI_JOB_INFORMATION$�F_WOW64_DESCRIPTOR_TABLE_ENTRY�6_TOKEN_SOURCE%x@_FSCTL_QUERY_REGION_INFO_INPUT�*CREATESTRUCTA"�KEY_WOW64_FLAGS_INFORMATION �2_CM_COMPONENT_INFORMATION�<EVENT_TRACE_LOGFILEA%�_INVERTED_FUNCTION_TABLE_ENTRY%�ZPROCESS_CYCLE_TIME_INFORMATION�U_QUOTA_LIMITS_EX/[PFSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUT&[PJOURNAL_RENAME_KEY_INFORMATION�7_MENU_EVENT_RECORD#GW_ETW_CRITSEC_EVENT_COLLISION"_FILE_FS_VOLUME_INFORMATION+6WRTL_FEATURE_USAGE_SUBSCRIPTION_TABLE�_GROUP_AFFINITY�?PO_WAKE_SOURCE_DEVICE�ACOMM_FAULT_OFFSETS[PFIND_BY_SID_DATA
[PPERFINFO_PROCESS_INSWAP+[_PROCESS_SECURITY_DOMAIN_INFORMATIONZLPKEYBDINPUT[PPS_ATTRIBUTE_LIST#[PETW_DISKIO_FLUSH_BUFFERS_V3(�@ETW_COVERAGE_SAMPLER_BLOOM_FILTER)
[PRESOURCEMANAGER_BASIC_INFORMATION'bB_IR_TIMER_EXTRA_CREATE_PARAMETER�PDLL_DIRECTORY_COOKIEFILE_ID_INFO	[WMIDPREQUEST k2WMI_DISKIO_READWRITE_INIT=TOKEN_STATISTICS_S_FILE_REGION_INPUT*�$HEAP_OPTIMIZE_RESOURCES_INFORMATIONFTTEB_ACTIVE_FRAME_EX[PRTL_SPARSE_BITMAP_CTX[PFILE_END_OF_FILE_INFO)�<_PERFINFO_KERNELMEMORY_RANGE_USAGE�(IMAGE_SECTION_HEADER[PEMRGLSBOUNDEDRECORD[PPROCESSOR_IDLE_HANDLER2'YSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EXN_RASTERIZER_STATUS�PLDR_SERVICE_TAG_RECORD�DHUMPD__[PLUTF8_STRING+�ZPPROCESS_SECURITY_DOMAIN_INFORMATION"�-PROCESSOR_POWER_POLICY_INFO �R_THREAD_BASIC_INFORMATION""_RTL_BITMAP_EX�=FONTSIGNATURE!�ZPETW_THREAD_AFFINITY_EVENT&�ZPFILE_STANDARD_LINK_INFORMATION$�BBOOT_ENTROPY_SOURCE_NT_RESULT�6FILE_LEVEL_TRIM�5SERVICE_NODE_TYPE!@_FILE_BOTH_DIR_INFORMATION!XGtagEMRMODIFYWORLDTRANSFORM:MOF_FIELD&�+SYSTEM_POOL_ZEROING_INFORMATION�GSERVICE_DIRECTORY_TYPE]_TRACE_ENABLE_CONTEXT_EX-�_SYSTEM_ISOLATED_USER_MODE_INFORMATION�ZPEMREXTCREATEPEN,�ZPACTIVATION_CONTEXT_BASIC_INFORMATION#5DATEFMT_ENUMPROCEXAd$STYLEBUF&�@PERFINFO_WORKINGSET_INFORMATION!u>_RTL_RETPOLINE_BINARY_INFO�ZLPNEWTEXTMETRIC�ZSENDASYNCPROCz!SID_AND_ATTRIBUTES*�ZPFILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER%�@PS_CPU_QUOTA_QUERY_INFORMATION-�<SYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER�5MUILANGCFGLISTECSYSTEM_VDM_INSTEMUL_INFO$�;SYSTEM_PROCESS_ID_INFORMATION'4_ETW_TRACE_PARTITION_INFORMATION�C_IMAGE_DEBUG_DIRECTORY�ZPSE_AUDIT_OPERATION'�ZPRTL_FEATURE_CONFIGURATION_TABLE)�_SYSTEM_SECURITY_MODEL_INFORMATIOND+_ENCLAVE_LOAD_INFO_VBS�*DRAWITEMSTRUCT�RUNWIND_HISTORY_TABLE�_MIDL_FORMAT_STRING%�USYSTEM_PROCESS_TRUST_LABEL_ACE�CURRENCYFMTAO_SID_NAME_USE�*OUTLINETEXTMETRICW.>IMAGE_DEBUG_MISC#�YFILE_STANDARD_INFORMATION_EX,�/VIRTUALIZATION_INSTANCE_INFO_INPUT_EX"�ZPADMINISTRATOR_POWER_POLICY�ZPSLIST_HEADERB:PLOGFONTA
8+HIMC__IPHYSICAL_ADDRESS*�7SYSTEM_ACTIVITY_APP_MODERATION_TYPE�ZRTL_AVL_ALLOCATE_ROUTINE3PERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION)�2FILE_INITIATE_REPAIR_OUTPUT_BUFFER?�ZPSYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY�UTP_DIRECTG>POINTER_PEN_INFO�AETW_NOTIFICATION_HEADER)�"_MEMORY_PARTITION_NODE_INFORMATIONgG_RIP_INFO�/tagPIXELFORMATDESCRIPTOR$REMOTE_NAME_INFOW*�ZPPERFINFO_DPC_EXECUTION_INFORMATION>_OBJECTID<7_PORT_DATA_INFORMATION^FPCUNZTCH*o?SYSTEM_CRASH_DUMP_STATE_INFORMATION�ZPBITMAPCOREINFO(�BWMI_EXTENDED_THREAD_INFORMATION64�+PCUWSTR(POWER_USER_PRESENCE�ZPPERFINFO_DEBUG_EVENTDYPMETAHEADER�ZLPDLGITEMTEMPLATEl7LPIMECHARPOSITION4_RTL_HEAP_TAG_INFO�ZLPFNDEVMODE�ALPDESIGNVECTOR�ZLPMDICREATESTRUCTAX_CHAR_INFO#BLPNETRESOURCE,SID_AND_ATTRIBUTES_ARRAYBTNTFS_STATISTICS/�3SYSTEM_ACTIVITY_MODERATION_USER_SETTINGSPSERVICE_STATUS_HANDLE__
pPNZTCH�ZPIMAGE_SYMBOL_EXaPS_MITIGATION_OPTION"�EPRTL_CRITICAL_SECTION_DEBUG�6_HARDWARE_COUNTER#�ZPPROCESS_LOGGING_INFORMATION�ZPKCONTINUE_TYPE�ZLPOSVERSIONINFOEX�,_IMAGE_POLICY_ENTRY_TYPE)�ZPETW_TP_EVENT_TIMER_CANCEL_NTTIMER#�Z_ENCLAVE_INIT_INFO_VBS_BASIC<%HCURSOR\,NPRGNDATA�ZLPSTYLESTRUCT�ZCS_TAG_GETTING_ROUTINE+�ZPPERFINFO_PAGECOMBINE_ITERATION_STAT j:_PERFINFO_PROCESS_PERFCTR'�ZPPLUGPLAY_CONTROL_CONFLICT_ENTRY�ZPMOFRESOURCEINFOA!�/PERFINFO_SET_DEVICES_STATE'�_ETW_COVERAGE_SAMPLER_QUERY_INFO�ZPCOUNTER_READING/�ZPFILE_PROCESS_IDS_USING_FILE_INFORMATION�ZPAPPCONTAINER_SID_TYPE�*POUTLINETEXTMETRICW�ZPEMRINTERSECTCLIPRECT�_TOKEN_INFORMATION_CLASS&�ZPPROCESS_CYCLE_TIME_INFORMATION&�ZPNTFS_FILE_RECORD_OUTPUT_BUFFER�ZPPERFINFO_FILE_DIRENUM�ZPCURDIR�ZPBOOT_ENTRY&Z_MEMORY_COMBINE_INFORMATION_EX2�"SECURITY_DESCRIPTORZZLDR_FAILURE_DATAK<RATE_QUOTA_LIMIT�ZHHOOK#�_ALPC_PORT_INFORMATION_CLASS�5FILE_NAMES_INFORMATION�ZPEVENTLOGRECORD�&DISPATCHER_CONTEXT%X_IMAGE_BOUND_IMPORT_DESCRIPTOR�VMCI_STATS20GDI_TEB_BATCH$�ZPSYSTEM_REF_TRACE_INFORMATION*2>_PERFINFO_DPC_EXECUTION_INFORMATION�ZPIMAGE_OPTIONAL_HEADER64 'LINK_TRACKING_INFORMATION�ZPRPC_ENDPOINT_TEMPLATEA*�ZPPERFINFO_PO_CALIBRATED_PERFCOUNTER �ZPWOW64_FLOATING_SAVE_AREA"#_RTL_CRITICAL_SECTION_DEBUG�ZPPPM_WMI_PERF_STATES_EX�ZPQUOTA_LIMITS_EX(�_PROCESS_TELEMETRY_ID_INFORMATION}_REDIRECTION_DESCRIPTOR�ZPEMR6�ZLDR_LOADED_MODULE_ENUMERATION_CALLBACK_FUNCTION�FILE_REGION_INFO�ZPGROUP_RELATIONSHIPE-_NLSTABLEINFO%�'_ACTIVATION_CONTEXT_INFO_CLASS*�ZPSYSTEM_EXTENDED_THREAD_INFORMATION$)VCOMPATIBILITY_CONTEXT_ELEMENT'�JOB_OBJECT_IO_RATE_CONTROL_FLAGS� _SYSTEM_POOLTAG�ZLPSERIALKEYSA�ZPFILE_PIPE_INFORMATION'�SPERFINFO_MEMORY_NODE_INFORMATION%U=_SE_SET_FILE_CACHE_INFORMATION5�ZPJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION$�ZTHREAD_POWER_THROTTLING_STATE�2_LDR_DATA_TABLE_ENTRY64)�ZPFILE_IO_PRIORITY_HINT_INFORMATION�ZPSYSDBG_COMMAND#� PROCESS_TLS_INFORMATION_TYPE)�R_GET_FILTER_FILE_IDENTIFIER_OUTPUT�ZPRC_CONFIG
�UOW#KENUM_SERVICE_STATUS_PROCESSA�ZPRPC_PROTSEQ_ENDPOINT+U_IMAGE_VXD_HEADERN;_USER_ACTIVITY_PRESENCE�ZPXSAVE_POLICY,�ZPPLUGPLAY_CONTROL_INTERFACE_LIST_DATA�>DROPSTRUCTo_POWER_STATE_TYPE�ZCM_PCCARD_DEVICE_DATA)�RVIRTUAL_STORAGE_SET_BEHAVIOR_INPUT�._HEAP_RANGE_DESTROY#�ZPMEM_EXTENDED_PARAMETER_TYPE�ZPRGNDATAHEADER.ZtagEMRTEXTOPEMRSETICMMODE �ZPETW_HEAP_EVENT_EXPANSION�Z_GENERIC_MAPPING/�>TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY�#_WORKERFACTORYINFOCLASS�ZPBITMAPFILEHEADERpGCPINFOEXA!_HIBERFILE_BUCKET�PKCRM_PROTOCOL_BLOB9ACTCTXW �ZPPROCESSOR_IDLESTATE_INFO"�ZLPCREATE_PROCESS_DEBUG_INFO�ZPEMRROUNDRECT�ZPTOUCH_HIT_TESTING_INPUTn.WNF_STATE_NAME_LIFETIME2p:_TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT�ZPPROCESS_TLS_INFORMATION&�Z_RTL_USER_PROCESS_INFORMATION64�=RPC_BINDING_VECTOR!�ZPSEC_WINNT_AUTH_IDENTITY_W�ZPIMAGE_TLS_DIRECTORY32)�:_REMOTE_LINK_TRACKING_INFORMATION_.�)_SYSTEM_THREAD_CID_PRIORITY_INFORMATIONuUHALF_PTR�ZLPOSVERSIONINFOEX2b<EMROFFSETCLIPRGN�EMRPOLYGON�ZPEMRGLSRECORD!v:_PERFINFO_SET_POWER_ACTION*�ZPTXFS_LIST_TRANSACTION_LOCKED_FILES�6SD_ENUM_SDS_OUTPUTU_ETW_CLOCK_TIME_UPDATE�Z_PACKEDEVENTINFO)�0_FINDFIRSTACTIVATIONCONTEXTSECTION5LPWIN32_FIND_DATAA"SEMAPHORE_INFORMATION_CLASS�#PLOCALESIGNATURE5OBJECT_INFORMATION_CLASS|S_RTL_ELEVATION_FLAGS�ZPFILE_NAME_INFO�$RTL_AVL_TABLE�$_APPCONTAINER_SID_TYPE~ZPRTL_STACK_CONTEXT_ENTRY�>PUNICODE_STRING*�=_MIDL_WINRT_TYPE_SERIALIZATION_INFO!}ZPLINK_TRACKING_INFORMATION#�2CM_EISA_FUNCTION_INFORMATION$� _PROCESS_TLS_INFORMATION_TYPE#�_PROCESS_BASIC_INFORMATION64|ZDLGPROCzZNPPOLYTEXT4d#_SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION�S_RTL_RVA_LIST_ITERATORyZPLDR_DATA_TABLE_ENTRY32xZPWMI_JOB_REMOVE_PROCESS�_WMI_FILE_IO�FFP_IEEE_VALUEtZHPENk.tagCHARSETINFO%rZPPERFINFO_SET_POWER_ACTION_RET%�V_PROCESS_MITIGATION_DEP_POLICY(tagEMRCREATECOLORSPACEWqZLPSOUNDSENTRYA�2ETW_HEAP_EVENT_ALLOC�#PCANSI_STRING%pZPSYSTEM_PROCESS_CLASSIFICATION&oZPPROCESS_MEMORY_EXHAUSTION_TYPE)�DSYSTEM_PROCESSOR_POWER_INFORMATION")_SYSTEM_PREFETCH_OPTIONSnZPPPM_PERFSTATE_EVENT3L7SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATIONp!tagIMEMENUITEMINFOWPLONG/SGETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT�VSYSTEM_WORKINGSET_ENTRY!+_SHUTDOWN_ACTION�"ACCESSTIMEOUTSTGCP_RESULTSW"�V_WIM_PROVIDER_EXTERNAL_INFOmZLPTHREAD_START_ROUTINE�/IMAGE_LINENUMBER"�+MEMORY_PARTITION_PAGE_RANGE#�ENLISTMENT_INFORMATION_CLASS8lZPACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION PBOOLEAN3XWOF_EXTERNAL_INFOcRESUME_PERFORMANCE%�RTL_SPARSE_BITMAP_FREE_ROUTINEkZNPLOGFONT(jZPFILE_REMOTE_PROTOCOL_INFORMATION�GRTL_HEAP_PARAMETERSiZPFS_INFORMATION_CLASS�-KEY_BASIC_INFORMATION#hZPRTL_SEGMENT_HEAP_PARAMETERS&!SYSTEM_HOT_PATCH_REGISTRY_VALUEgZLPNONCLIENTMETRICS'fZPTOKEN_BNO_ISOLATION_INFORMATION)�EJOBOBJECT_MEMORY_USAGE_INFORMATION3eZPSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EXG7HANDEDNESS"dZPUNWIND_HISTORY_TABLE_ENTRY6RTL_DYNAMIC_HASH_TABLE#cZPSYSTEM_SCOPED_POLICY_ID_ACE�YPRPC_STRINGbZPCSTRING�5WNF_STATE_NAME%aZPRTL_REALLOCATE_STRING_ROUTINE �RTL_RESOURCE_POLICY_FLAGS'�$ETW_COVERAGE_SAMPLER_CREATE_INFO7^ZPSYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION$APRTL_CRITICAL_SECTION_DEBUG32!=Y_FILE_POSITION_INFORMATION;FCM_SCSI_DEVICE_DATA?$_RTL_SPARSE_BITMAP_RUN�>EMRSETTEXTCOLOR]ZPCOBJECT_ATTRIBUTESZZ_LDR_FAILURE_DATA"WZPPO_SPR_ACTIVE_SESSION_DATA�4BITMAPFILEHEADER�-PEMRPOLYLINETO�<IMAGE_THUNK_DATA32$�?_EXTENDED_ENCRYPTED_DATA_INFOpPUNZTCH<9_WMI_TXRVZPETW_PER_SESSION_QUOTA$�FFILE_ZERO_DATA_INFORMATION_EX!7&_SYSTEM_OBJECT_INFORMATION#TEXTMETRICAUZPIELF_HANDLE'�>CFG_CALL_TARGET_LIST_INFORMATIONSC_LOCKSZPCZPSTR�VALENTAT_IMAGE_ROM_HEADERS$�G_SD_CHANGE_MACHINE_SID_OUTPUTQZPBOOT_ENTROPY_NT_RESULT(EMRPOLYBEZIER16PZPCONTAINER_VOLUME_STATE}_KCONTINUE_TYPE/+_SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATIONOZPEX_WNF_CALLBACKXFORM%MZPETW_CLOCK_CONFIGURATION_EVENT?PERFINFO_PO_POSTSLEEP�>TIMELINE_BITMAP�$_ERROR_SEVERITY_VALUE�;FILE_PATH"�)MEMORY_WORKING_SET_EX_BLOCK!LZPSTARTING_LCN_INPUT_BUFFER'{_LEAP_SECOND_DATA_REGISTRY_ENTRY*�B_SERVICE_TRIGGER_SPECIFIC_DATA_ITEM�?ETW_REF_CLOCK.�<_SYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER�EWIN32K_SYSCALL_FILTER�;SCRUB_DATA_OUTPUT ERROR_SEVERITY$�#QUERY_FILE_LAYOUT_FILTER_TYPE%!>MEMORY_WORKING_SET_EX_LOCATION"u-RTL_SPARSE_BITMAP_PARAMETER!LPTEXTMETRICAKZLPCPINFOEXA!�G_WMI_PROCESS_INFORMATION64#�R_DRIVER_VERIFIER_THUNK_PAIRS�+_FILETIME#POINTER_64_INTJZPCREATE_USN_JOURNAL_DATA�F_SL_HWID_DEVICE_INFOIZPMESSAGE_RESOURCE_DATA�D_REPAIR_COPIES_OUTPUTHZPVOLUME_REFS_INFO_BUFFER.GZPSYSTEM_SPECULATION_CONTROL_INFORMATION$�?_RTL_PROCESS_LOCK_INFORMATION+_VOLUME_REFS_INFO_BUFFER�'DISPLAY_DEVICEWDU_QUERY_SERVICE_CONFIGWFZPCIMAGE_TLS_DIRECTORY64DZPKCONTINUE_ARGUMENTCZPENCLAVE_INIT_INFO_SGXHPOWERNOTIFYu#_PROCESSOR_NUMBERH(_MIDL_SERVER_INFO_pva_list AZ_FILESYSTEM_STATISTICS_EX_SINGLE_LIST_ENTRY# VSYSTEM_EXCEPTION_INFORMATION>ZPMULTI_TIME @V_FILE_FULL_EA_INFORMATION=ZPRTL_HEAP_STACK_CONTROL#SID_HASH_ENTRY�1PVALUEA<ZPQUERYHANDLEROWMI_PAGE_FAULTN$_REG_ACTION!�=POINTER_DEVICE_CURSOR_INFOqPPARAM_OFFSETTABLE!;ZPRTL_RVA_LIST_RAW_ITERATOR#PSIZE_T-8ZPCLAIM_SECURITY_ATTRIBUTES_INFORMATION&)H_OBJECT_HANDLE_FLAG_INFORMATION!7ZPCACTIVATION_CONTEXT_STACK�WTOKEN_CONTROL15ZPTRANSACTION_NOTIFICATION_PROMOTE_ARGUMENT4ZLPENUMLOGFONTEXDVstagWNODE_EVENT_ITEM<=_WMI_CONTEXTSWAP#L=_SYSTEM_SCOPED_POLICY_ID_ACE�"LPLOGFONTW�3SE_AUDIT_INFO%2Z_FILE_FS_ATTRIBUTE_INFORMATION(U@_TIMER_SET_COALESCABLE_TIMER_INFO�/EMRSETDIBITSTODEVICEh+_ETW_REGNOTIF_REGISTER)IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY(KFILE_ID_EXTD_BOTH_DIR_INFORMATION � RTL_UMS_THREAD_INFO_CLASS.ZEMRTEXT^XDESKTOPENUMPROCADUQUERY_SERVICE_CONFIGW"PSECURITY_INFORMATION_KPROFILE_SOURCE^_IO_PRIORITY_HINT,ZLPSERVICE_MAIN_FUNCTIONW#PTRACEHANDLE+ZPMOFRESOURCEINFOW!*ZRPC_NEW_HTTP_PROXY_CHANNEL�3MIDL_STUB_MESSAGEPCLAIMS_BLOB-'SYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE&ZPSYSTEM_AUDIT_OBJECT_ACE2_PROCESS_TLS_INFORMATION�GRTL_BITMAP_RUNRPC_IF_HANDLE%%ZPEXCEPTION_REGISTRATION_RECORDS:CM_SERIAL_DEVICE_DATA$ZPCM_SONIC_DEVICE_DATA2�,TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT#"Z_ETW_COVERAGE_SAMPLER_STATUS&ZPMEMORY_COMBINE_INFORMATION_EX2+_RTL_CIRCULAR_LIST_HEAD>"PEMRMOVETOEXZWINEVENTPROCc+_CONNECTDLGSTRUCTW'j&_ETW_DFSS_RELEASE_THREAD_ON_IDLEmIMAGE_DOS_HEADER)+:_SYSTEM_VSM_PROTECTION_INFORMATION$v5KEY_CONTROL_FLAGS_INFORMATION�WFILE_STORAGE_TIER_REGION d=CONTAINER_ROOT_INFO_INPUT!h_PS_MITIGATION_OPTIONS_MAP#�TXFS_LIST_TRANSACTIONS_ENTRYURTL_ENCLAVE_LAUNCH_TOKEN5WMI_THREAD_INFORMATIONZPHV_DETAILS ZPRTL_UNLOAD_EVENT_TRACE32+0VARIABLE_NAMEZPRTL_GENERIC_TABLE�*TOUCHINPUT%ZPKAFFINITY_ENUMERATION_CONTEXT'ZPSYSTEM_SPECIAL_POOL_INFORMATION!@PEMRSETMETARGN*
ZPMIDL_WINRT_TYPE_SERIALIZATION_INFO�7_EISA_IRQ_DESCRIPTOR49_devicemodeW�@tagPOINTFX
ZPNTFS_VOLUME_DATA_BUFFER??RTL_UNLOAD_EVENT_TRACE64	ZLINEDDAPROCCUPDATELAYEREDWINDOWINFOqBALPC_DIRECT_ATTRZPROPENUMPROCA!'TRACE_GUID_PROPERTIES�XEVENT_TRACE_LOGFILEW-�:_MEMORY_PARTITION_PAGEFILE_INFORMATION&	/_MANAGE_HOT_PATCH_QUERY_PATCHESZPKEYBDINPUT$aX_TRACE_ENABLE_FLAG_EXT_HEADER$EVENT_TRACE_INFORMATION_CLASSZPACCESS_DENIED_ACE_YLDR_IMPORT_CALLBACK_INFO)j;_PROCESS_CHILD_PROCESS_INFORMATIONZPPROCESS_PRIORITY_CLASS
LPARAM�YHRGN�"LOGFONTW-�Y_SYSTEM_FIRMWARE_PARTITION_INFORMATION�GLPOSVERSIONINFOEX2A�>EMREXTFLOODFILL|@tagAR_STATE BYTE�!tagABORTPATHy,tagPOINTER_DEVICE_TYPERPC_STATUS�V_SLIST_HEADER�GtagEMRNAMEDESCAPE�A_PO_WAKE_SOURCE_INFO4�>PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY!�YRTL_QUERY_REGISTRY_ROUTINEl_APP_MEMORY_INFORMATION6Athreadlocaleinfostruct'�5_ETW_COVERAGE_SAMPLER_BLOOM_INFO)�4TRANSACTIONMANAGER_LOG_INFORMATION"g)WMI_IMAGELOAD_INFORMATION64	YPWCRANGE�YLPMSGBOXPARAMSW!�_SYSTEM_AUDIT_CALLBACK_ACE(G3FILE_IO_PRIORITY_HINT_INFORMATION'�YPSYSTEM_SHADOW_STACK_INFORMATION7�YLDR_APP_COMPAT_DLL_REDIRECTION_CALLBACK_FUNCTIONTC_CONSOLE_SELECTION_INFO�S_SE_ACCESS_REPLY&�YPFSCTL_QUERY_REGION_INFO_OUTPUT�KUSER_SHARED_DATA �RKEY_SET_LAYER_INFORMATION_system_handle_tL5tagCOMPAREITEMSTRUCT*�YPPROCESS_SYSTEM_RESOURCE_MANAGEMENT�YPENUMUILANG!�YPSHRINK_VOLUME_INFORMATION4�YPSYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION�YPENCLAVE_TARGET_FUNCTION#PULONGLONG�YPSE_AUDIT_INFO!WNF_STATE_NAME_INFORMATION�YPENHMETARECORD�YPSYSDBG_TRIAGE_DUMP/�YPPLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATAr7RTL_RXACT_LOG�ANPNEWTEXTMETRICA�YPWMI_IRQ_RECORDlG_CALL_FRAMER%_KEY_NODE_INFORMATION�YPDL_EUI48!�%PERFINFO_BATTERY_LIFE_INFO*!;EVENT_TRACE_PERFORMANCE_INFORMATION!/1PROCESS_WINDOW_INFORMATION@FP_IEEE_RECORD �_SYSTEM_POWER_INFORMATION�YPMCI_STATS�)GESTURECONFIGP>SYSTEM_INFO�XOPERATION_END_PARAMETERSREMRSETPOLYFILLMODE�>val_context �YPTOKEN_ACCESS_INFORMATION+|C_CSV_QUERY_FILE_REVISION_FILE_ID_128 byte"PERFINFO_MASK�YPALPC_DATA_VIEW_ATTR�URTL_PHYSICAL_MEMORY_INFO>�_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT�7ENCLAVE_INIT_INFO_SGX3�YPTRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION�YPTP_ALPC@EPEMRSTROKEPATH!�WMI_JOB_SET_QUERY_NET_RATE�YPIMAGE_IMPORT_BY_NAME�YAPP_LOCAL_DEVICE_ID
�%PCWSTR�YPPO_WAKE_SOURCE_TIMER�9_IMAGE_HOT_PATCH_BASE�YPRPC_ANSI_STRING86_CONTEXT_EX�-HGLRC__2�@IMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION*�YPALPC_PORT_MESSAGE_ZONE_INFORMATION$�YPPPM_IDLE_STATE_ACCOUNTING_EX\G_RC_CONFIGVCOPYFILE2_MESSAGE_ACTION�YPWMIREGINFO ;/_MIDL_METHOD_PROPERTY_MAP .TETW_CPU_CACHE_FLUSH_EVENT�YPNT_PRODUCT_TYPE�YPHARDWARE_COUNTERB>PO_WAKE_SOURCE_TIMER3_LDR_DDAG_STATE)WW_RTL_DYNAMIC_TIME_ZONE_INFORMATION �%_ETW_CANCEL_KTIMER2_EVENT&�YPPERFINFO_PPM_IDLE_EXIT_LATENCY-�(_EVENT_EXTENDED_ITEM_PROCESS_START_KEY.�YPPROCESS_MITIGATION_FONT_DISABLE_POLICYlGCALL_FRAME�YLPCIEXYZTRIPLE'�YPWMI_EXTENDED_THREAD_INFORMATIONJ3RPC_PROTSEQ_ENDPOINT,�Y_SYSTEM_VERIFIER_COUNTERS_INFORMATION�YPPS_WAKE_REASON�0HMENU__$�YPFILE_TYPE_NOTIFICATION_INPUT"FEMREXTESCAPE�YNPIMEMENUITEMINFOW$�YPFILE_STANDARD_INFORMATION_EX	"_nlsversioninfoex"�_PERFINFO_PROCESS_PERFCTR64�Y_ATOM_TABLE_INFORMATIONd _STARTUPINFOA�YPETW_CREATE_HANDLE_EVENT+AXSYSTEM_BASIC_PERFORMANCE_INFORMATIONtagENUMTEXTMETRICA*�9TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE)�YRTL_SPARSE_BITMAP_ALLOCATE_ROUTINE6�BIMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATION'2SYSTEM_CODEINTEGRITY_INFORMATION �CSYSTEM_THREAD_INFORMATION�BITMAPINFOHEADERPFTEB_ACTIVE_FRAME_CONTEXT-�YPVIRTUALIZATION_INSTANCE_INFO_INPUT_EX#�>REPAIR_STORAGE_RESERVE_INPUTxtagAXISINFOA�YLPENHMETARECORD�+tagENUMLOGFONTEXA�UWRITE_USN_REASON_INPUT�YLPNUMBERFMTW
CSHORT%�YWIM_PROVIDER_CONTROL_INTEGRITY"�8_ETW_HEAP_EVENT_CONTRACTION�YPTOKEN_LINKED_TOKEN SE_SIGNING_LEVEL$�V_TXFS_CREATE_MINIVERSION_INFOESYSTEM_POWER_STATUS�@tagFILTERKEYS�Y_RPC_SECURITY_QOS_V2_A�YPLDR_VERIFY_IMAGE_INFO'�YPIR_TIMER_EXTRA_CREATE_PARAMETER�YPPERFINFO_CC_FLUSH_CACHE
!wint_t�YPLDR_DATA_TABLE_ENTRY+�7_SYSTEM_ACTIVITY_MODERATION_APP_TYPE4ENABLE_TRACE_PARAMETERS'X_FILE_DISPOSITION_INFORMATION_EX$�?_PLUGPLAY_CUSTOM_NOTIFICATION�YPFOUR_PART_VERSION�YNPREGISTERWORD!u9PERFINFO_SYSCALL_EXIT_DATA)95PEVENT_TRACE_LBR_EVENT_INFORMATION"c@COMPOUND_ACCESS_ALLOWED_ACE�YETW_CANCEL_TIMER_EVENT"�YPPERFINFO_CCSWAP_IDLE_SHORT,�C_ACTIVATION_CONTEXT_BASIC_INFORMATION)�Y_PERFINFO_CONTIGUOUS_PAGE_GENERATE:�YRTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY �Y_RPC_SEC_CONTEXT_KEY_INFO*�YPTOKEN_SECURITY_ATTRIBUTE_OPERATION(�._DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK1IMAGE_OPTIONAL_HEADER64 �YPFN_NT_CREATE_TRANSACTION�>LPDROPSTRUCT
�YHACCEL�YLPSERVICE_TABLE_ENTRYA!�YPFILE_STANDARD_INFORMATIONVUTOKEN_PRIVILEGESZ@REQUESTER_TYPE/�CSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION�USTARTUPINFOEXA�_STATE_LOCATION_TYPE%�?_ENCLAVE_CREATE_INFO_VBS_BASIC\CM_KEYBOARD_DEVICE_DATA-�6_HEAP_PERFORMANCE_COUNTERS_INFORMATION[LUTF8_STRING.�YPSTREAMS_QUERY_PARAMETERS_OUTPUT_BUFFEROPEMRSETSTRETCHBLTMODE,�YPSERVICE_CONTROL_STATUS_REASON_PARAMS�YPEVENT_TRACE_LOGFILEW�YPWOW64_LDT_ENTRY�_SERVICE_NOTIFY_2W0SG_ETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT+�V_ETW_TP_EVENT_WORKER_NUMANODE_SWITCH'�E_IMAGE_CE_RUNTIME_FUNCTION_ENTRY&�#JOBOBJECT_BASIC_PROCESS_ID_LIST �YPPPM_THERMAL_POLICY_EVENT�F_SYSDBG_PHYSICAL�=PHANDLETABLEUNIVERSAL_NAME_INFO((TETW_TP_EVENT_TIMER_EXPIRATION_END4)_IO_SESSION_EVENT#�YPSECTION_IMAGE_INFORMATION64�SYNCHRONIZATION_BARRIERYPIMEMENUITEMINFOA+�6PROCESS_STACK_ALLOCATION_INFORMATION6B_MUILANGINFO!~YPRTL_WORK_ON_BEHALF_TICKET%|Y_PERFINFO_CC_WORKITEM_COMPLETE)>6SYSTEM_SESSION_POOLTAG_INFORMATION0�MEMORY_PARTITION_PAGE_COMBINE_INFORMATION&FBFILE_MAILSLOT_QUERY_INFORMATION,�RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET$ V_SYSTEM_EXCEPTION_INFORMATIONyYLPHW_PROFILE_INFOWxYPFILE_ATTRIBUTE_TAG_INFOS+PMDINEXTMENU'<RPC_BINDING_HANDLE_TEMPLATE_V1_W"wYPFN_NT_ROLLBACK_TRANSACTION*h6SYSTEM_DMA_GUARD_POLICY_INFORMATION�=FILE_PREFETCHtPBOOL{PRTL_BALANCED_NODEtYPKEY_CACHED_INFORMATIONsYPFPO_DATArYPCIMAGE_IMPORT_BY_NAME/pYPSYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION6:PCANDIDATELISTpLPUTSTR.oYPFSCTL_SET_INTEGRITY_INFORMATION_BUFFER �_TRANSACTION_NOTIFICATION2 GACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA&nYPALPC_PORT_CALLBACK_INFORMATION RW_SERVICE_FAILURE_ACTIONSW �$_TOKEN_ACCESS_INFORMATION:�XTOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION-�!_JOBOBJECT_END_OF_JOB_TIME_INFORMATION.8'_TRANSACTIONMANAGER_LOGPATH_INFORMATION
"PCLONG
ETOKEN_ELEVATION�+PMUICCENTRY�#tagNEWTEXTMETRICW%GtagEMRSETPALETTEENTRIES�9tagTRACKMOUSEEVENT mYPMEMORY_WORKING_SET_BLOCKlYPFXSAVE_FORMAT_WX86:$SIZEL�5MESSAGE_TRACE_USER&kYPSYSTEM_PAGEFILE_INFORMATION_EXjYPRTL_BSD_ITEM(EMRPOLYLINETO16*�*_SYSTEM_SESSION_PROCESS_INFORMATION#�W_SECTION_IMAGE_INFORMATION64�PBITMAPINFOHEADER�ASERVICE_TABLE_ENTRYALONG,�/_DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER2,7_FILE_SET_STORAGE_RESERVE_ID_INFORMATION_EXm;NPLOGPALETTE_EFI_DRIVER_ENTRYiYPENCLAVE_ROUTINE�Xvalue_entWgYPHEAP_COMMIT_DECOMMIT"�'TOKEN_GROUPS_AND_PRIVILEGES fYPSYMBOLIC_LINK_INFO_CLASS?_PERFINFO_PO_POSTSLEEPPSSIZE_T�6LOGICAL_DISK_DEFRAGdY_ALPC_DATA_VIEW_ATTR aYPIMAGE_ARCHITECTURE_ENTRY�4ETW_CREATE_HANDLE_EVENT \YPLDR_IMPORT_CALLBACK_INFO"[YPSYSTEM_POWER_STATE_CONTEXT)RTL_FEATURE_CONFIGURATION_PRIORITY:>MONITORINFOEXA'ZYPJOBOBJECT_BASIC_UI_RESTRICTIONS$(_FILE_PIPE_REMOTE_INFORMATION3�.FILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EXoPOWER_STATE_TYPE�GCOVERAGE_MODULE_INFOR#_MUICCHEADERYYPCNTSTATUS �:_SID_IDENTIFIER_AUTHORITY�WRTL_BUFFER�,_DOCINFOW TFSTORAGE_RESERVE_AREA_INFO,WYPJOURNAL_SET_DELETE_VALUE_INFORMATIONVYPDEVMODE�E_ETW_CRITSEC_EVENT_INIT HFILE_FS_LABEL_INFORMATION!�RKEY_WRITE_TIME_INFORMATION�EXCEPTION_DISPOSITION$�_SECURITY_IMPERSONATION_LEVELUYLPSERIALKEYSZ<_PEB_LDR_DATA TYPCIMAGE_IMPORT_DESCRIPTOR>_SD_QUERY_STATS_INPUTRYPGHOSTED_FILE_EXTENT0&_POWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICES%QYPIMAGE_DYNAMIC_RELOCATION32_V26EVENT_BASIC_INFORMATION< CLIENTCREATESTRUCT"�%_WMI_JOB_SET_QUERY_CPU_RATE$PYPREPAIR_STORAGE_RESERVE_INPUT1�WRTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER�REMRRESIZEPALETTEOYHSYNTHETICPOINTERDEVICE+�9_TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE�!tagEMRSETVIEWPORTORGEX�-NONCLIENTMETRICSW%NYPBOOT_ENTROPY_SOURCE_NT_RESULT-&F_JOURNAL_CREATE_DELETE_KEY_INFORMATIONMYRTL_TREE_DELETE_FUNCTION5LYPPROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY`DEMRSTROKEANDFILLPATHJYNPWNDCLASSEXA �REFS_SMR_VOLUME_GC_METHOD%JVRTL_PROCESS_BACKTRACES_CONTROL(KYPRTL_IMAGE_MITIGATION_HEAP_POLICY*8SOUNDSENTRYWJYPWNDCLASSEXA�1STYLEBUFW�RtagWNODE_EVENT_REFERENCE �X_MEMORY_FRAME_INFORMATION$IYPWORKER_FACTORY_DEFERRED_WORK!HYPSECTION_IMAGE_INFORMATIONGYPSCOPE_TABLEWDIAGNOSTIC_BUFFER�/tagEMRSETDIBITSTODEVICE**NORM_FORM<2_STREAM_INFO_LEVELS�,DRAWPATRECTFYPSMALL_RECTEYPSE_IMPERSONATION_STATEDYLPMETAHEADERBYLPHIGHCONTRASTA/AYPPROCESS_REVOKE_FILE_HANDLES_INFORMATION+�0_SYSTEM_WRITE_CONSTRAINT_INFORMATION�@MUILANGCFGNODE$@YPCTEB_ACTIVE_FRAME_CONTEXT_EX =YFILE_POSITION_INFORMATION ORRTL_FEATURE_CONFIGURATIONL_REMOTE_PORT_VIEW"NLS_FUNCTION%;YPTXFS_WRITE_BACKUP_INFORMATION9:YPCACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION^TRACE_LOGFILE_HEADER64	3_FILE_STREAM_INFOPRpcPerfCounters*+)ETW_UMS_EVENT_DIRECTED_SWITCH_STARTb!_TRANSACTION_STATE�7RPC_SYNTAX_IDENTIFIER @FILE_BOTH_DIR_INFORMATION-8YPJOURNAL_CREATE_DELETE_KEY_INFORMATION,
_TRANSACTIONMANAGER_INFORMATION_CLASS17YRTL_SPARSE_BITMAP_UPDATE_METADATA_CALLBACK49DEVMODEW"�'tagRID_DEVICE_INFO_KEYBOARD�1IMAGE_ENCLAVE_CONFIG32$uF_FILE_PIPE_SILO_ARRIVAL_INPUT!+.OPERATION_START_PARAMETERS'3YDISPLAYCONFIG_TARGET_DEVICE_NAME0YPIMAGE_FUNCTION_ENTRY!/YPPO_FIXED_WAKE_SOURCE_TYPE"CM_VIDEO_DEVICE_DATA$�_ENLISTMENT_INFORMATION_CLASS7(WOW64_LDT_ENTRY�-LPSECURITY_ATTRIBUTES#.YPETW_OPTICALIO_FLUSH_BUFFERS,_QUAD)�DALPC_PORT_MESSAGE_ZONE_INFORMATION�"_KEY_FULL_INFORMATION�/_INITIAL_TEB(e8_MEMORY_ENCLAVE_IMAGE_INFORMATION�_TP_CALLBACK_ENVIRON_V3:�PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATIONxtagHANDLETABLE)+YPSE_LEARNING_MODE_USER_OBJECT_DATA%EALPC_MESSAGE_INFORMATION_CLASS�-DEDUP_FILE_OPERATION#*YPPERFINFO_MEMORY_INFORMATION-�ETW_COVERAGE_SAMPLER_INFORMATION_CLASS3)YPTOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE#*#_TEB_ACTIVE_FRAME_CONTEXT_EX3'Y_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EX�0tagNONCLIENTMETRICSA$YPTERMINATION_HANDLER<?PCPE_EXCEPTIONU<EMRFILLRGN�S_THREAD_PERFORMANCE_DATA�B_WOF_EXTERNAL_FILE_ID"!YPSYSTEM_PROCESS_INFORMATION*V7MEM_SECTION_EXTENDED_PARAMETER_TYPECPE_EXCEPTIONIWPOSVERSIONINFOAP<_PHYSICAL_DISK_RECORD0<CM_Power_Data_s YPEMRPOLYDRAW#�>PROCESS_WS_WATCH_INFORMATION)�3FSCTL_QUERY_STORAGE_CLASSES_OUTPUT-X_IMAGE_DATA_DIRECTORY�FILE_FS_SIZE_INFORMATION#YI_RpcProxyGetClientAddressFn�_ULARGE_INTEGER YPERFINFO_WORKINGSET_ENTRYYCSV_IS_OWNED_BY_CSVFSpEVENTLOG_HANDLE_A$YPENLISTMENT_BASIC_INFORMATION_TP_LOG_LEVEL&_RTL_TRACE_ENUMERATEpNPSTRl=SYSTEM_AUDIT_OBJECT_ACE�)_ACCESS_REASONSYPCI_LOG_MMCSS_STOP_SID_AND_ATTRIBUTES_HASHYPPS_STD_HANDLE_INFOYPLOAD_DLL_EVENT_DATA86CONTEXT_EX�V_COUNTED_REASON_CONTEXT
YPACTCTXW'YPRTL_SPARSE_BITMAP_CTX_OPERATION"7)PARTITION_INFORMATION_CLASS#�6FILE_FS_OBJECTID_INFORMATION,*%REFS_VOLUME_COUNTER_INFO_INPUT_BUFFERYPPPM_THERMALCHANGE_EVENThF_KEY_CACHED_INFORMATION�$_DMA_WIDTH
YPRTL_RUN_ONCEzXMESSAGE_RESOURCE_DATAt*PLARGE_INTEGER�%SYSTEM_POOL_ENTRY	YLPWCRANGEREMRSETMAPMODEPSID&YETW_ANTI_STARVATION_BOOST_EVENT�5CI_LOG_SCHEDULER_SLEEP$_TIMER_INFORMATION_CLASS�'_LDR_DLL_LOAD_REASON 1$_WOW64_FLOATING_SAVE_AREA3YPTRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT'YPREDIRECTION_FUNCTION_DESCRIPTOR#PERFINFO_TIMESTAMPYPSYSDBG_VIRTUAL�XPRTL_HANDLE_TABLE�)MULTIKEYHELPW%I_PROCESS_HANDLE_TRACING_ENABLE�XPCSV_QUERY_MDS_PATH_V22�ECLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE&�XPMEMORY_WORKING_SET_EX_LOCATIONYPCWPSTRUCT�XPPERFINFO_FLT_OPERATION#PDWORD64�,IMAGE_POLICY_ENTRY_TYPEOPEMRSELECTCLIPPATH$tagCURSORINFO)�DIRECTORY_NOTIFY_INFORMATION_CLASS�CFILE_ALLOCATION_INFO �XPMIDL_METHOD_PROPERTY_MAP#�BPERFINFO_CC_WORKITEM_DEQUEUE)�XPCLDR_DLL_LOADED_NOTIFICATION_DATA�XMEMORY_FRAME_INFORMATIONz0SCROLLBARINFO�XHIMCC�;PPERFINFO_TRACE_ENTRY%�XPPERFINFO_FLT_OPERATION_STATUS�TBOOT_OPTIONS5�:_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST&�XPRTL_DYNAMIC_HASH_TABLE_CONTEXT�XPACTCTXAn7tagIMECHARPOSITION�XPFP_IEEE_RECORD�+RTLP_HEAP_TAGGING_INFO�XLPCPINFOEX!GG_PERFINFO_FILE_INFORMATION�XPENCLAVE_CREATE_INFO_VBS�XPMUILANGLISTwUPERFINFO_IO_TIMERuULONG32�XPSINGLE_LIST_ENTRY32*�8EVENT_TRACE_PROFILE_ADD_INFORMATION!H_FILE_FS_LABEL_INFORMATION*1+_SYSTEM_FEATURE_CONFIGURATION_QUERY�XLPMDICREATESTRUCTW$�XPETW_KTIMER2_EXPIRATION_EVENT�XPPHYSICAL_DISK_RECORD&'_LINK_TRACKING_INFORMATION_TYPE�MEM_EXTENDED_PARAMETER.ZEREAD_DIRECTORY_NOTIFY_INFORMATION_CLASS* ETW_TP_EVENT_TIMER_EXPIRATION_BEGIN�SILO_USER_SHARED_DATA�_FSINFOCLASS�XHINSTANCE__^<_ETW_BUFFER_CONTEXT!�-MEMORY_COMBINE_INFORMATION,?)_PLUGPLAY_CONTROL_RELATED_DEVICE_DATA �XPOPERATION_END_PARAMETERS.�XPRTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICYUNIVERSAL_NAME_INFOA�%LPCOMPOSITIONFORM�(TOKEN_DEVICE_CLAIMS:?PGLYPHSET,�XPPERFINFO_DYNAMIC_TICK_DISABLE_REASON'�XPSYSTEM_DPC_BEHAVIOR_INFORMATION(�W_SYSTEM_LEGACY_DRIVER_INFORMATION(bW_MIDL_INTERFACE_METHOD_PROPERTIES"�_WATCHDOG_INFORMATION_CLASS+�XPRPC_HTTP_TRANSPORT_CREDENTIALS_V2_A#*>UMS_CREATE_THREAD_ATTRIBUTES'�XPCRITICAL_PROCESS_EXCEPTION_DATA�T_EXIT_PROCESS_DEBUG_INFOKBPERFINFO_SPINLOCK_CONFIG&;V_KEY_VIRTUALIZATION_INFORMATION�2LPDISPLAY_DEVICEAHDEVNOTIFY�VtagMONITORINFOEXW�DREPAIR_COPIES_OUTPUT,=_SYSTEM_INTERRUPT_CPU_SET_INFORMATION$F_PLUGPLAY_CONTROL_STATUS_DATA+�XPFSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT!}1tagWTSSESSION_NOTIFICATION�XPTEB_ACTIVE_FRAME_EXz9_LPC_CLIENT_DIED_MSG#�XPPROCESSOR_POWER_POLICY_INFO3._SD_QUERY_STATS_OUTPUT8_WIN32_FIND_DATAWg9FILE_CASE_SENSITIVE_INFO�XLPLOGBRUSH32"�$RTL_GENERIC_COMPARE_RESULTS�DtagPOINTER_INFO �?_SYSTEM_ACCESS_FILTER_ACE�XPSERVICE_NOTIFY_2A�XNPLOGBRUSH32 �XPPERFINFO_VAD_ROTATE_INFO�XLPMSGBOXPARAMS�XPVALENTWRTL_REFERENCE_COUNT32
pPCCHARPSTARTUPINFOW,�XPCSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT)�_PERFINFO_DYNAMIC_TICK_VETO_REASON�HMODULE:_WIN32_FIND_DATAA�XFILE_REFERENCE_RANGE&�XPPROCESS_MEMORY_EXHAUSTION_INFO �XPSPARSE_OVERALLOCATE_DATAMOFHANDLE_G_RPC_IF_ID �XPPPM_IDLE_STATE_BUCKET_EX,�:MEMORY_PARTITION_PAGEFILE_INFORMATION%9PROCESS_MEMORY_EXHAUSTION_INFO�XPSE_SECURITY_DESCRIPTOR�XPPS_PKG_CLAIM&�XPWIM_PROVIDER_ADD_OVERLAY_INPUT$�XPSYSTEM_LOOKASIDE_INFORMATION-�XPPLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA2-_TP_TASK_CALLBACKS(�S_LOOKUP_STREAM_FROM_CLUSTER_ENTRY#�XRTL_GENERIC_ALLOCATE_ROUTINE!XUNWIND_HISTORY_TABLE_ENTRYu/FILE_RENAME_INFORMATION�XPVCN_RANGE_INPUT_BUFFER!@PEMRCLOSEFIGUREVLPMODEMDEVCAPS�PERFINFO_CCSWAP;�XPTOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION)�SYSTEM_SESSION_BIGPOOL_INFORMATION�XLPRAWKEYBOARD�XLPNMHDRV_GLYPHMETRICS)�0_TXFS_ROLLFORWARD_REDO_INFORMATION �FSCTL_OFFLOAD_WRITE_INPUTH9LPFILETIME�XPMMPFN_IDENTITY�XPKTMOBJECT_CURSOR�X_EVENT_TRACE_LOGFILEW�_SYSTEM_PIXEL_FORMAT �SECTION_INFORMATION_CLASS�?_PO_WAKE_SOURCE_INTERNAL�RRTL_FEATURE_USAGE_DATA$�:_WORKER_FACTORY_DEFERRED_WORK'JOBOBJECT_RATE_CONTROL_TOLERANCE<TtagEMRROUNDRECT�XPEMRFORMATX_FILE_QUOTA_INFORMATION"�_REQUEST_RAW_ENCRYPTED_DATA �XPMEMORY_IMAGE_INFORMATION0�;TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT �XLPEXIT_PROCESS_DEBUG_INFO+�XPCLDR_DLL_UNLOADED_NOTIFICATION_DATA#�XPREFS_SMR_VOLUME_INFO_OUTPUT&�XPPERFINFO_SAMPLED_PROFILE_CACHE3�XPSYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION�,FLOAT128#�XPFILE_ALLOCATED_RANGE_BUFFER�.LPINIT_ONCEs=NEWTEXTMETRICA4�&_SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM!�XPEVENT_EXTENDED_ITEM_TS_ID�B_DEBUG_EVENT�XPLOGICAL_DISK_DEFRAG�EOPTICAL_MEDIA_RECORD0�ESTORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY�XPFIRMWARE_TYPE�_SYSTEM_TPM_INFORMATION�_ACL_INFORMATION_CLASS!�XPTXFS_QUERY_RM_INFORMATION �F_RTL_FEATURE_USAGE_REPORT�XPTP_JOB(wGLPCREATEFILE2_EXTENDED_PARAMETERS�XPALPC_DIRECT_ATTR!<_JOURNAL_INFORMATION_CLASS+�_PLUGPLAY_CONTROL_USER_RESPONSE_DATA�XLPNETCONNECTINFOSTRUCT&{:_EVENT_EXTENDED_ITEM_PEBS_INDEX�XPDYNAMIC_FUNCTION_TABLE~,HCOLORSPACE__�XPRPC_IMPORT_CONTEXT_P$�6VIRTUAL_STORAGE_BEHAVIOR_CODE�XPIO_RESOURCE_LIST�/PENUMTEXTMETRICA"�9_ENABLE_TRACE_PARAMETERS_V1"�X_FILE_ZERO_DATA_INFORMATION5~XPRTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY&�@PRTL_PROCESS_REFLECTION_ROUTINE}XLPREMOTE_NAME_INFOA�:_ALPC_BASIC_INFORMATION0�DFSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX"|XPSYSTEM_POWER_LOGGING_ENTRYzX_MESSAGE_RESOURCE_DATATVtagEMRCREATEPALETTEuXAUDIODESCRIPTIONpPTSTR(rXPIMAGE_LOAD_CONFIG_CODE_INTEGRITYqXPCPTABLEINFO,,_RTL_USER_PROCESS_EXTENDED_PARAMETERSpXPIMAGE_THUNK_DATA32&�G_SYSTEM_PERFORMANCE_INFORMATION&nXWIN32_MEMORY_REGION_INFORMATION�VHARDWAREHOOKSTRUCT#_KEY_VALUE_LAYER_INFORMATIONc_WOW64_CONTEXTdXKENTROPY_TIMING_ROUTINE#�FWOW64_DESCRIPTOR_TABLE_ENTRYU HBRUSH__cXPDIAGNOSTIC_BUFFER#aXTRACE_ENABLE_FLAG_EXT_HEADER"cE_MEMORY_BASIC_INFORMATION32^XWINSTAENUMPROCA]XPUNWIND_OP_CODES4\D_SEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION\XPREDIRECTION_DESCRIPTOR�!EMRABORTPATHBPCUUCSCHAR?_FP_128[XLPCMENUITEMINFOW!�;JOBOBJECT_WAKE_INFORMATION"�TFILE_FS_CONTROL_INFORMATION!YXENTER_STATE_NOTIFY_HANDLER0aUSYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION&XXPCM_PNP_BIOS_INSTALLATION_CHECK#ULONG64aEMRSETCOLORSPACEWXLPDLGTEMPLATEWsWNODE_EVENT_ITEM(�FWIM_PROVIDER_REMOVE_OVERLAY_INPUT&b,CI_WINDOWS_LOCKDOWN_RESTRICTION)VXPRTL_YIELD_UNTIL_CONDITION_ROUTINE%SXDISPLAYCONFIG_TARGET_BASE_TYPEPXLPFMTID*W2_SECTION_INTERNAL_IMAGE_INFORMATIONWECONSOLE_HISTORY_INFO#OXPPARTITION_INFORMATION_CLASS�FP_OPERATION_CODE"�D_FSCTL_QUERY_FAT_BPB_BUFFER$NXPEXTENDED_ENCRYPTED_DATA_INFO'�+_SYSTEM_POOL_ZEROING_INFORMATION"#2SHRINK_VOLUME_REQUEST_TYPES+MXPFN_NT_QUERY_INFORMATION_TRANSACTION%=PUBLIC_OBJECT_TYPE_INFORMATION�_KCONTINUE_ARGUMENT&6SERVICE_ERROR_TYPE�!_SERVICE_DESCRIPTIONW JXPFSCTL_OFFLOAD_READ_INPUTIXPIMAGE_RELOCATIONGXPWNF_DATA_SCOPE�+ENUMLOGFONTEXA[tagCWPSTRUCT&0PERFINFO_MM_STAT2�R_EVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION�D_LDRP_CSLIST5�8SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRYFXPCPU_CONFIG_RECORD+�0PERFINFO_DYNAMIC_TICK_DISABLE_REASON_SUITE_TYPE�5_FILE_OBJECTID_BUFFER�!_POWER_STATE*EXPSYSTEM_SESSION_POOLTAG_INFORMATION�'LDR_DLL_LOAD_REASONDXPEMRCREATEBRUSHINDIRECTCXPETW_HEAP_EVENT_CREATE8IMAGE_AUX_SYMBOL_EX#65SECURITY_DESCRIPTOR_RELATIVE	3FILE_STREAM_INFO 7T_IMAGE_RESOURCE_DIRECTORY�_PS_PROTECTION%BCONNECTDLGSTRUCTA,?XPSYSTEM_BASIC_PERFORMANCE_INFORMATION=XLOCALE_ENUMPROCEX)�WFILE_QUERY_ON_DISK_VOL_INFO_BUFFER+RTL_UMS_SCHEDULER_REASON�FLPWINDOWINFOpPNZCH$-SD_ENUM_SDS_ENTRYaEMRDELETECOLORSPACE#4ETW_UMS_EVENT_CONTEXT_SWITCH :XPREAD_USN_JOURNAL_DATA_V1%�-_SYSDBG_LIVEDUMP_CONTROL_FLAGS$=H_TRACE_PROVIDER_INSTANCE_INFO�_ETW_BUFFER_STATE7XPETW_HEAP_EVENT_SNAPSHOT1�#PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION$AD_JOURNAL_ABSOLUTE_INFORMATION(6XPRTL_IMAGE_MITIGATION_ASLR_POLICY"5XPSYSDBG_KD_PULL_REMOTE_FILE)�B_WMI_EXTENDED_THREAD_INFORMATION64�"_HIBERFILE_BUCKET_SIZE3X_WOF_EXTERNAL_INFO0XPRTL_FEATURE_USAGE_DATA/XPCM_KEYBOARD_DEVICE_DATA+XPIMAGE_DATA_DIRECTORY#'XPSYSTEM_PAGEFILE_INFORMATION�*RTL_DRIVE_LETTER_CURDIR+0_VARIABLE_NAME#&XPRTL_GENERIC_COMPARE_ROUTINE"�9ETW_DISKIO_FLUSH_BUFFERS_V3"�SERVERSILO_INIT_INFORMATION&%XPFILE_IO_COMPLETION_INFORMATION#XPETW_READY_THREAD_EVENT�#_IO_STATUS_BLOCK32!XPERFINFO_CC_FLUSH_CACHE*t;PERFINFO_DOMAIN_CHANGE_EVENT_REASON
#SIZE_T!&_KEY_SET_INFORMATION_CLASS�UtagICONMETRICSW&CW_PERFINFO_SAMPLED_PROFILE_CACHEQ6IMAGE_OPTIONAL_HEADER32XFILE_QUOTA_INFORMATION�'SERVICE_LOAD_TYPE2XPRTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER'XPFILE_DISPOSITION_INFORMATION_EX&XPFILE_PROVIDER_EXTERNAL_INFO_V0�&RTL_UMS_CONTEXT$$ETW_TP_EVENT_CALLBACK_ENQUEUE�ETW_WNF_EVENT_SUBSCRIBE"X_UNWIND_HISTORY_TABLE_ENTRY0�;JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION�BWOF_EXTERNAL_FILE_ID*XPSYSTEM_KERNEL_DEBUGGER_INFORMATIONYPLUGPLAY_CONTROL_CLASS�G_RTL_HEAP_PARAMETERS
@PFLOAT#XPENCLAVE_LOAD_DATA_VBS_BASIC
HLOCAL%XPIMAGE_BOUND_IMPORT_DESCRIPTORXPUSN_RECORD_V2�U_RTL_HANDLE_TABLE(XPSYSTEM_MANUFACTURING_INFORMATION_-EMREXTTEXTOUTWRWSERVICE_FAILURE_ACTIONSW!�WPWMI_IMAGEID_INFORMATION32#�WPFILE_SET_DEFECT_MGMT_BUFFER�5_CM_SERVICE_NODE_TYPE�WLPRGBQUAD�3SRWLOCK�WPFILE_DISPOSITION_INFO-�W_CLAIM_SECURITY_ATTRIBUTES_INFORMATION
�WPTP_IO�_IMAGE_MITIGATION_POLICY#CWPRETSTRUCT"�WPSYSTEM_MANDATORY_LABEL_ACE$	JOBOBJECT_WAKE_INFORMATION_V1&�TPROCESS_LEAP_SECOND_INFORMATION"�WPFILE_GET_QUOTA_INFORMATION�WPETW_REF_CLOCK�WPKERNEL_USER_TIMES0�WPSYSTEM_NET_RATE_CONTROL_DISPATCH_ROUTINEU_KEY_NAME_INFORMATION�G_RPC_POLICY#rGENERIC_BINDING_ROUTINE_PAIR__WGLSWAP�WtagUSAGE_PROPERTIESi5_PERFINFO_MEM_RESET_INFO,�TACTIVATION_CONTEXT_SECTION_KEYED_DATA�,LPSYSTEMTIMEA;EMRCREATEPEN-
1_TRANSACTIONMANAGER_OLDEST_INFORMATION�WMONITORENUMPROC$x@FSCTL_QUERY_REGION_INFO_INPUT'�RTL_FEATURE_CONFIGURATION_UPDATE�1WINDOWS_OS_OPTIONSEACM_EISA_SLOT_INFORMATION�WLPDLGTEMPLATE�G_SC_ACTION�AXSAVE_VENDORS#.S_TIMER_SET_INFORMATION_CLASS7�_MEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATIONs=tagNEWTEXTMETRICA�UMESSAGE_TRACE_HEADER�)NT_TIB64/�WPPROCESS_READWRITEVM_LOGGING_INFORMATION,};SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNTdPRTL_UMS_COMPLETION_LIST�PROCESSOR_CACHE_TYPE/�4RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY>_FILE_ALL_INFORMATION�WPSTRING32�WPT2_SET_PARAMETERS&�WPSYSTEM_LEAP_SECOND_INFORMATION01SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION�WPETW_WNF_EVENT_CALLBACK"�W_SYSTEM_POWER_LOGGING_ENTRY& _PROCESSOR_PROFILE_CONTROL_AREA&�CRTL_IMAGE_MITIGATION_DEP_POLICY�WPTOKEN_CONTROL"�WPWIM_PROVIDER_OVERLAY_ENTRY:>tagMONITORINFOEXAVLUID%=_FILE_PIPE_EVENT_SELECT_BUFFER"�BAD_MEMORY_CALLBACK_ROUTINE�WPRID_DEVICE_INFO �W_FILE_STORAGE_TIER_REGION"�WSECTION_IMAGE_INFORMATION64KDNPEVENTMSG�WLPMONITORINFOEX)#A_ETW_UMS_EVENT_DIRECTED_SWITCH_END*1SYSTEM_FLUSH_INFORMATION$�WPETW_TP_EVENT_POOL_TH_MIN_SET�7_PS_MEMORY_RESERVE$�WPOBJECT_DIRECTORY_INFORMATION PERROR_SEVERITY )DISPLAYCONFIG_TOPOLOGY_IDK6CBTACTIVATESTRUCT'�@_PERFINFO_WORKINGSET_INFORMATIONPNP_QUERY_RELATION%8SYSTEM_LEAP_SECOND_INFORMATION#R&HEAP_BLOCK_EXTRA_INFORMATION#iEPROCESS_HANDLE_TRACING_ENTRY�8_ETW_HEAP_EVENT_RUNDOWN �.TXFS_START_RM_INFORMATION �<_MEM_ADDRESS_REQUIREMENTS�-_DEVICE_FLAGS�'tagEMRPOLYTEXTOUTA/PERFINFO_GROUPMASK�-_MEMORYSTATUSEXuPOINTER_FLAGS �WPFILE_STORAGE_TIER_REGION�WPPROFILE_SOURCE_INFO�6_SD_ENUM_SDS_OUTPUT�1pvalueAS5MEMORY_INFORMATION_CLASSWNDR_NOTIFY_ROUTINE&�WPLINK_TRACKING_INFORMATION_TYPE�WPRTL_BUFFER�WFONTENUMPROCW�W_IMAGE_SYMBOL!�DFSCTL_QUERY_FAT_BPB_BUFFER8N#SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATIONKtagSOUNDSENTRYA+b_SYSTEM_BOOT_ENVIRONMENT_INFORMATION�WENHMFENUMPROC�<POINTER_DEVICE_INFO�T_BOOT_OPTIONS@%PMOUSEHOOKSTRUCTEX�$ETW_READY_THREAD_EVENT�WWNF_META_CALLBACKZU_KLDR_DATA_TABLE_ENTRY32!3_SYSTEM_MEMORY_INFORMATION�.MAXVERSIONTESTED_INFO�WLAYERPLANEDESCRIPTOR�WPPVALUE�*EVENT_TYPE'�VSYSTEM_MANUFACTURING_INFORMATION�WPEVENT_BASIC_INFORMATION�@_MUILANGCFGNODE+,RTL_USER_PROCESS_EXTENDED_PARAMETERS;KERNINGPAIR�WPEMRSTRETCHBLT*�W_FILE_QUERY_ON_DISK_VOL_INFO_BUFFER�_WMI_PNP_RECORD_V5*�R_VIRTUAL_STORAGE_SET_BEHAVIOR_INPUT%.+RTL_FEATURE_CONFIGURATION_TYPE�PDELETEITEMSTRUCT�_WMI_JOB_ASSIGN_PROCESS PTUCHAR%�WPFILE_ZERO_DATA_INFORMATION_EX*FILE_STORAGE_RESERVE_ID_INFORMATIONl+SERIALKEYS(�4_RPC_HTTP_TRANSPORT_CREDENTIALS_A�1STICKYKEYS:$tagSIZE*]5_KEY_SET_VIRTUALIZATION_INFORMATIONqIO_SESSION_STATE �WPCI_WINDOWS_LOCKDOWN_MODE|SRTL_ELEVATION_FLAGS0�._ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION)"_FP__IEEE_ROUNDING_MODE#�WPETW_CRITSEC_EVENT_COLLISION�XSAVE_VENDOR!�,_IMAGE_COFF_SYMBOLS_HEADER�WPCIMAGE_TLS_DIRECTORY32%ETXFS_LIST_TRANSACTIONS0TRANSACTION_OUTCOME$�WPEVENT_TRACE_BUFFER_CALLBACKWR,SERVICE_NOTIFY_2Ap'IMAGE_HOT_PATCH_INFO#gReplacesCorHdrNumericDefines�SE_IMPERSONATION_STATEGFILE_SET_SPARSE_BUFFER�WPRTL_TICK_LOCK
#UINT64.IMAGE_TLS_DIRECTORY'�WPROCESS_DEVICEMAP_INFORMATION_EX-+@PROCESS_MITIGATION_DYNAMIC_CODE_POLICY�WPCM_MONITOR_DEVICE_DATA$w(DYNAMIC_TIME_ZONE_INFORMATION4tagTTPOLYGONHEADER1VLPGUITHREADINFO�B_ETW_DEBUG_PRINT_EVENT�SYSTEM_AUDIT_ACE S5_MEMORY_INFORMATION_CLASS�WLPDISCDLGSTRUCTA+91_PERFINFO_IMAGELOAD_IN_PAGEFILE_INFO(�WPSYSTEM_LEGACY_DRIVER_INFORMATION2�W_RTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER0�8_EVENT_TRACE_SESSION_SECURITY_INFORMATION0�>_TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY�WPPOWER_SESSION_CONNECT!�G_TP_POOL_STACK_INFORMATION2PREGISTERWORDW�WPETW_WNF_EVENT_SUBSCRIBE3�;_TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT;RTL_RELATIVE_NAME_U�T_RTL_HEAP_STACK_QUERY�7WNODE_METHOD_ITEM�EMRPOLYBEZIERTO)95PEVENT_TRACE_IPT_EVENT_INFORMATIONqPWCH#�FILE_TYPE_NOTIFICATION_INPUT�2EMRCREATECOLORSPACE�*tagCREATESTRUCTAmW_PERFINFO_DEBUG_EVENT
+2_FP_80�WENTER_STATE_HANDLER�WPRPC_SERVER_INTERFACEWPSCOPE_TABLE_AMD64CRTL_RESOURCE_DEBUG32"DWORD~WPCTEB_ACTIVE_FRAME_EX�(tagLOGBRUSH#|WLPTOP_LEVEL_EXCEPTION_FILTER#�_SERVERSILO_INIT_INFORMATION{WPUSN_RECORDvWPSL_KMEM_CACHE�7UNICODE_PREFIX_TABLE
"RULONGpWPXSAVE_CPU_ERRATAoWPFILE_PREFETCH�#WNODE_TOO_SMALL.v PROCESS_STACK_ALLOCATION_INFORMATION_EX5�C_SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATIONmWPERFINFO_DEBUG_EVENT"�IMAGE_DYNAMIC_RELOCATION_V2,�6HEAP_PERFORMANCE_COUNTERS_INFORMATION#_STREAM_EXTENT_ENTRYhWPFILE_ALIGNMENT_INFO-!MENUINFO#@9ENUM_SERVICE_STATUS_PROCESSW
!UINT16)_ALPC_SECURITY_ATTR$fWEXTENT_READ_CACHE_INFO_BUFFERy7_POWER_SESSION_RIT_STATE�<ENUMLOGFONT�!EMRENDPATH'bWMIDL_INTERFACE_METHOD_PROPERTIES�ETW_OBJECT_HANDLE_EVENT,SECURITY_CAPABILITIES(\WRTL_IMAGE_MITIGATION_SEHOP_POLICY9IPT_TRACE_EVENT_DATA(YWPETW_COVERAGE_SAMPLER_STATUS_INFO)UWPRTL_DYNAMIC_TIME_ZONE_INFORMATION!PWLPSERVICE_FAILURE_ACTIONSW�2_ETW_HEAP_EVENT_ALLOC-LWPSERVICE_CONTROL_STATUS_REASON_PARAMSAVREPARSE_INDEX_KEY$X>MANAGE_HOT_PATCH_UNLOAD_PATCHIWLPOSVERSIONINFOA�RAWMOUSE"GWETW_CRITSEC_EVENT_COLLISION%CWPERFINFO_SAMPLED_PROFILE_CACHE(�TRACE_PERIODIC_CAPTURE_STATE_INFOc2PCSTR�LPENUMLOGFONTEXDVA"_FILE_FS_DEVICE_INFORMATION �@PRTL_ACQUIRE_LOCK_ROUTINE�=IMAGE_IMPORT_DESCRIPTOR
~/SE_SID*�TFILE_LINK_ENTRY_FULL_ID_INFORMATIONq REPAIR_COPIES_INPUTfFP_IEEE_FORMAT,>W_SYSTEM_PROCESS_INFORMATION_EXTENSION-�T_ACTIVATION_CONTEXT_SECTION_KEYED_DATA
c2LPCSTR�DEXCEPTION_LOG�PARSE_MESSAGE_CONTEXTPLONG_PTR"�(_SYSTEM_CPU_SET_INFORMATION,6W_RTL_FEATURE_USAGE_SUBSCRIPTION_TABLE-ACCESS_ALLOWED_ACE#�3DEFINE_STORAGE_RESERVE_INPUT�!HIGHCONTRAST+�%_PROCESS_KEEPALIVE_COUNT_INFORMATION>SD_QUERY_STATS_INPUTWMIHANDLE1WPCULONG$/WPREFS_DEALLOCATE_RANGES_RANGE.WPFN_NT_OPEN_TRANSACTIONfPRTL_UMS_CONTEXTuTOUCH_MASK)WLPSC_ACTION+�6FILE_IOSTATUSBLOCK_RANGE_INFORMATION'W_PAGEDIR_INFORMATION!0,ENLISTMENT_CRM_INFORMATION"WPRTL_FREE_STRING_ROUTINE+!WPRTL_IS_THREAD_WITHIN_LOADER_CALLOUT%�4SYSTEM_DEVICE_DATA_INFORMATIONWLPHW_PROFILE_INFOA�RAWINPUT WRPC_MGMT_AUTHORIZATION_FN!|7_ETW_COVERAGE_SAMPLER_DATAw6FARPROC!jEVENT_INSTANCE_GUID_HEADER$WPPS_POST_PROCESS_INIT_ROUTINE �EFILE_FULL_DIR_INFORMATION#FPLUGPLAY_CONTROL_STATUS_DATA!WPPPM_IDLE_STATE_ACCOUNTINGb9_RTL_HEAP_STACK_CONTROL"WPPS_BNO_ISOLATION_PARAMETERZ=LASTINPUTINFO�_CM_PERF_COUNTERSf_FP__IEEE_FORMAT �(_CPU_SET_INFORMATION_TYPEWPTP_CALLBACK_INSTANCEWPEMRGRADIENTFILLWPIMAGE_ROM_HEADERSWPGET_MODULE_HANDLE_EXADLL_DIRECTORY_COOKIE
PSHORT_FILE_SEGMENT_ELEMENT�PINTERFACE_DEREFERENCE%�$_PROCESS_ENERGY_TRACKING_STATE WLANGGROUPLOCALE_ENUMPROCA 	WPRID_DEVICE_INFO_KEYBOARD7AXESLISTWWPBOOT_RECORD�9IMAGE_HOT_PATCH_BASE:URAWINPUTHEADERWPCI_LOG_SCHEDULER_WAKEUPW_TOKEN_LINKED_TOKENW_DIAGNOSTIC_BUFFER!2PERFINFO_IDLE_STATE_CHANGE$�VPQUERY_STORAGE_RESERVE_OUTPUTw6PROC$�DEXCEPTION_REGISTRATION_RECORD�_VRF_TRIAGE_CONTEXT!sSETW_TIMER_EXPIRATION_EVENT+�VPETW_TP_EVENT_WORKER_NUMANODE_SWITCH`T_MESSAGE_RESOURCE_ENTRY�V_LOAD_DLL_DEBUG_INFO�*LPDRAWITEMSTRUCT�)STRING32�0GHOSTED_FILE_EXTENT'zG_CREATEFILE2_EXTENDED_PARAMETERS+�S_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W'^_EVENT_HEADER_EXTENDED_DATA_ITEM�V_PORT_DATA_ENTRY"�VPWIM_PROVIDER_EXTERNAL_INFO!4<KEY_VALUE_FULL_INFORMATION!�_REFS_SMR_VOLUME_GC_METHOD�CACHE_RELATIONSHIP�VPHARDWAREHOOKSTRUCT!PRTL_CRITICAL_SECTION�RPC_CLIENT_ALLOC�_NT_TIB
5_RTL_PROCESS_LOCKS�VPFLS_DATA!/PUMS_SCHEDULER_ENTRY_POINT �VPERFINFO_MARK_INFORMATION&z_PO_CS_DEVICE_NOTIFICATION_TYPE"TP_VERSION�VPRAWINPUTDEVICELIST,�0_PERFINFO_DYNAMIC_TICK_DISABLE_REASONuPUINT32,�A_PROCESS_MITIGATION_IMAGE_LOAD_POLICYeTtagMDICREATESTRUCTWb5TOKEN_USER_CLAIMS!�VPREFS_SMR_VOLUME_GC_METHOD�VPACTCTX�_ETW_OBJECT_HANDLE_EVENT�.SI_COPYFILEP)XSAVE_POLICY!T_REFS_SMR_VOLUME_GC_ACTION�VPEMRMASKBLT!�(_FILE_INTERNAL_INFORMATIONENUMTEXTMETRICA UINT8 URTL_TIME_ZONE_INFORMATION/:_TRACE_VERSION_INFO$�VEVENT_EXTENDED_ITEM_EVENT_KEY6_CLIENT_ID(�VSTREAMS_ASSOCIATE_ID_INPUT_BUFFER!�VPPS_MITIGATION_OPTIONS_MAP0�<_SYSTEM_FEATURE_CONFIGURATION_INFORMATIONtagAXESLISTA�VPINPUT_RECORD"hBFILE_ALLOCATED_RANGE_BUFFERz>REARRANGE_FILE_DATA32,�A_SYSTEM_LOGICAL_PROCESSOR_INFORMATION�VLPCOMSTAT|?_IMAGE_CHPE_METADATA_X86 �VPSCRUB_PARITY_EXTENT_DATA�IMAGE_POLICY_ID2TPO_WAKE_SOURCE_HEADERgUT2_SET_PARAMETERS�V_MCI_STATS�1EMRSETMAPPERFLAGS�TPRPC_SID%�VPPROCESS_MITIGATION_DEP_POLICYa_PS_MITIGATION_OPTION�VPCONSOLE_FONT_INFOEX�VPCZPCWSTRc2LPCCH�VSLIST_HEADER$�VPSECURITY_IMPERSONATION_LEVEL-V_FSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER(]?SYSTEM_WATCHDOG_TIMER_INFORMATION-�VPPLUGPLAY_CONTROL_TARGET_RELATION_DATA(@SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX(�V_SYSTEM_MANUFACTURING_INFORMATION$�V_EVENT_EXTENDED_ITEM_INSTANCE �.ETW_THREAD_SET_NAME_EVENT�tagMSGBOXPARAMSA#�VPFILE_LINK_ENTRY_INFORMATION#ORSYSTEM_FEATURE_CONFIGURATION#ACTIVATION_CONTEXT_MSIX_INFO�%PCZZWSTRKPROFILE_SOURCE+�PROCESS_EXTENDED_BASIC_INFORMATION64%�V_PERFINFO_SET_POWER_ACTION_RET
�%LPCWCH zHEAP_SUBSEGMENT_ACTIVATED 6EVENTLOG_FULL_INFORMATIONTNETINFOSTRUCT�:WMIGUIDINFORMATIONo)ETW_WAKE_COUNTER_EVENT0�G_MEMORY_PARTITION_INITIAL_ADD_INFORMATION�VLPSCROLLINFO#�VPOFFSETINSTANCEDATAANDLENGTHPLANGINDEX)5FILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER�VPHELPWININFO,�VPJOBOBJECT_IO_ATTRIBUTION_INFORMATION�BLPCRECTL?CPTABLEINFO�VDRAWSTATEPROC�VPPORT_DATA_ENTRY,�:_SYSTEM_SECUREBOOT_POLICY_INFORMATION2�?_SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE �.tagEMRCREATEBRUSHINDIRECT
�)_M128AS@PCOUNTED_REASON_CONTEXT�VPSUPPORTED_OS_INFO�VHGESTUREINFO__n_IMAGE_THUNK_DATA64#�VTXFS_CREATE_MINIVERSION_INFO-�PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATAh_REPARSE_DATA_BUFFER *1_SYSTEM_FLUSH_INFORMATION_AFILE_ID_DESCRIPTORA BITMAPCOREHEADER
pPUTSTR.�VFILE_PROCESS_IDS_USING_FILE_INFORMATION�VPSYSTEM_WORKINGSET_ENTRY�VLPGCP_RESULTSA;tagEMRCREATEPEN#�V_ETW_COVERAGE_SAMPLER_SAMPLE
�VSID(�7_SYSDBG_LIVEDUMP_CONTROL_ADDPAGES&�,PERFINFO_CC_SCHEDULE_READ_AHEAD%�VPPOWER_THROTTLING_THREAD_STATE�VPSYSDBG_IO_SPACE�BOVERLAPPED�VLPMONITORINFOEXW)�#PERFINFO_HARDPAGEFAULT_INFORMATION$�FFILE_MOVE_CLUSTER_INFORMATION�VPPNP_QUERY_RELATIONLPMSGBOXPARAMSA$Z7_OBJECT_DIRECTORY_INFORMATIONDtagLOGBRUSH32�RSERVICE_DESCRIPTIONA�VPEMRELLIPSE$^0_ETW_TP_EVENT_POOL_TH_MIN_SET&�5ETW_COVERAGE_SAMPLER_BLOOM_INFO�:_RTL_PROCESS_MODULES&\2SYSTEM_MEMORY_USAGE_INFORMATION�VSERVICE_MAIN_FUNCTIONAT?_XSAVE_AREA_HEADER!PPROCESS_HANDLE_INFORMATION~VHGESTUREINFO'�5_WMI_EXTENDED_THREAD_INFORMATION  _SYMBOLIC_LINK_INFO_CLASS(PEMRPOLYBEZIERTO16CEMRPOLYDRAW16$|VPETW_PARTITION_INFO_EXTENSION�)M128Ax0PSCROLLBARINFO�0PERFINFO_CCSWAP_LITE{VPREG_NOTIFY_INFORMATIONyV_FILE_END_OF_FILE_INFOsVPPERFINFO_MARK_EVENT(�PERFINFO_DRIVER_COMPLETIONROUTINE
qPCTSTRpVEXCEPTION_RECORD32 �_STREAM_INFORMATION_ENTRY�EVENT_TRACE_HEADER0#_JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2 &)PERFINFO_IPI_RECEIVE_DATA6FIMAGE_NT_HEADERS32"kVIMAGE_RESOURCE_DIR_STRING_UkDNEWTEXTMETRICEXAX_devicemodeAhVPCZPWSTR cVPSECURITY_SEED_AND_LENGTHF_VARIABLE_NAME_AND_VALUE$`V_CM_DISK_GEOMETRY_DEVICE_DATA�_FILE_ID_128�_SYSDBG_CONTROL_SPACE�TRTL_HEAP_STACK_QUERY#PDWORD_PTR)\VSYSTEM_MEMORY_TOPOLOGY_INFORMATION"XVPWNF_STATE_NAME_INFORMATION]%PEMRCHORDWVPTOKEN_MANDATORY_POLICY$FSCTL_UNMAP_SPACE_OUTPUT*�5_SYSTEM_EXTENDED_THREAD_INFORMATION1E_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVALVVPLBR_TRACE_EVENT_DATA%�UTOKEN_APPCONTAINER_INFORMATIONRVPEMRCREATEPALETTE PVPACL_REVISION_INFORMATION�:FILE_ID_INFORMATION NVREPARSE_POINT_INFORMATION&HVPRTL_PROCESS_BACKTRACES_CONTROL�PRTL_RB_NODE
ePOINTS�ULPICONMETRICSW%�S_FILE_FS_FULL_SIZE_INFORMATION &KEY_SET_INFORMATION_CLASS cs_byte AETW_REFDEREF_OBJECT_EVENT(ODEVENT_TRACE_GROUPMASK_INFORMATION.FVPCACTIVATION_CONTEXT_SECTION_KEYED_DATA�*_CM_SHARE_DISPOSITION�PEMRSETVIEWPORTEXTEX�8tagEMRSTRETCHBLTuPDWORD32(DVPMEMORY_ENCLAVE_IMAGE_INFORMATION%CVPWIM_PROVIDER_INTEGRITY_STATUS"BVPETW_COVERAGE_SAMPLER_STATS#�,FILE_COMPRESSION_INFORMATION@VFILE_FULL_EA_INFORMATION g_MUTANT_INFORMATION_CLASS%�GSYSTEM_PERFORMANCE_INFORMATION�#WORKERFACTORYINFOCLASS=VPNTFS_STATISTICS_EX&3VPKEY_VIRTUALIZATION_INFORMATION1VPGUITHREADINFO /V_ETW_KQUEUE_ENQUEUE_EVENTV_ACL_SIZE_INFORMATION,VPTHREAD_TEB_INFORMATION!<tagINPUT_TRANSFORM+VPETW_UMS_EVENT_PARK&'VPCCOMPATIBILITY_CONTEXT_ELEMENT%VPCONSOLE_HISTORY_INFO$VPWMI_WAIT_MULTIPLE#VPQUAD&s_PERFINFO_INTERRUPT_INFORMATION"VPEXCEPTION_RECORD64$VPSYSTEM_EXCEPTION_INFORMATIONVLPGLYPHMETRICSVPMODEMDEVCAPSV_WMI_IRQ_RECORD#qPSECURITY_DESCRIPTOR_CONTROL| KCRM_MARSHAL_HEADERVPFILE_ID_BOTH_DIR_INFO�3tagLOGFONTAVLPNLSVERSIONINFOEX6UFILE_FULL_DIR_INFOVIO_STATUS_BLOCK
VPREPARSE_INDEX_KEY%� FILE_PIPE_DELETE_SYMLINK_INPUT,VFSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER5PROCESSOR_RECORD%'LINK_TRACKING_INFORMATION_TYPEVPRTL_BACKOFF/VPJOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2%SE_ACCESS_REQUEST*<ALPC_PORT_ASSOCIATE_COMPLETION_PORT"MIDL_INTERCEPTION_INFOV_WMI_WAIT_MULTIPLE%fPLUGPLAY_CONTROL_PROPERTY_DATA.�,_RESOURCEMANAGER_COMPLETION_INFORMATION�'PDISPLAY_DEVICEW�>_TIMELINE_BITMAP*�.SYSTEM_HYPERVISOR_QUERY_INFORMATION�4ETW_CLOSE_HANDLE_EVENT �UPRTL_AVL_ALLOCATE_ROUTINE6PEMRSELECTOBJECTr#_PLUGPLAY_EVENT_CATEGORY\'_cpinfoexW�UIMAGE_RELOCATION�UQUOTA_LIMITS_EX�U_PS_STD_HANDLE_INFO�U_WRITE_USN_REASON_INPUT�UPCONSOLE_CURSOR_INFOB8RPC_SECURITY_QOS�-_PROCESSOR_IDLE_STATESx?LPDLGITEMTEMPLATEA!�2_FILE_STANDARD_INFORMATION�UHRAWINPUT__�UKTMOBJECT_CURSOR"UCSCHAR�UPPVALUEAwCINVERTED_FUNCTION_TABLE*�UPIMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY�UPEVENT_FILTER_EVENT_NAME#�UPPLUGPLAY_CONTROL_DEPTH_DATA�StagINPUT_INJECTION_VALUE�%COMPOSITIONFORM,�U_JOBOBJECT_IO_ATTRIBUTION_INFORMATION�UPFILE_REGION_OUTPUT�UPBOOT_ENTRY_LISTKDNPEVENTMSGMSG �UPRTL_PHYSICAL_MEMORY_INFO5 GtagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA�*LPEXTLOGFONTW#�_FILE_PIPE_LOCAL_INFORMATION�ULPNETRESOURCEAXCHAR_INFO�UPSERVICE_NOTIFY�%_WMI_REGISTRY!�UPETW_WNF_EVENT_UNSUBSCRIBEqPWORD"�"_FILE_ALIGNMENT_INFORMATION�S_FILE_LEVEL_TRIM_OUTPUT�WMI_PNP_RECORD�URTL_HANDLE_TABLE�ULPSTARTUPINFOEXpCCHAR.LPEXCEPTION_POINTERS�tagDELETEITEMSTRUCT�UPRTL_AVL_TREEBHRTL_CRITICAL_SECTION64'�UPPROCESS_WS_WATCH_INFORMATION_EXFILE_SEGMENT_ELEMENTLPMENUTEMPLATEA%�_ETW_SESSION_NOTIFICATION_TYPE!\:CONSOLE_SCREEN_BUFFER_INFO�UPEXCEPTION_ROUTINE-�UPMEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE�UNPOUTLINETEXTMETRIC'�HEAP_EVENT_SUBSEGMENT_ALLOC_FREEm_IMAGE_DOS_HEADER�UCSV_MGMT_LOCK$�UPSYSTEM_ROOT_SILO_INFORMATION&	@_SYSTEM_CPU_SET_TAG_INFORMATIONxAXISINFOA�-MIDL_STUBLESS_PROXY_INFO%�A_MEMORY_EXHAUSTION_INFORMATION�UPRTL_RELATIVE_NAME_U�UPICONMETRICSW&�UPSYSTEM_PROCESS_TRUST_LABEL_ACE�UPCSVFS_DISK_CONNECTIVITY�U_TP_DIRECTV_LUIDLANGSPEC�SGDI_HANDLE_BUFFER64"�UPFILE_DIRECTORY_INFORMATION*l_VIRTUALIZATION_INSTANCE_INFO_INPUT�ULPGCP_RESULTSW)(T_ETW_TP_EVENT_TIMER_EXPIRATION_ENDJWMIREGINFO'cF_ALPC_SERVER_SESSION_INFORMATION&zGCREATEFILE2_EXTENDED_PARAMETERSFEFILE_ATTRIBUTE_TAG_INFO�UPEMRSETCOLORADJUSTMENT!�UPETW_CPU_CACHE_FLUSH_EVENT$�USYSTEM_OBJECTTYPE_INFORMATION\$RTL_DISK_SPACE_INFO�0PRECT!�UPIMAGE_ARCHITECTURE_HEADER&�UPTOKEN_APPCONTAINER_INFORMATION�2LDR_DATA_TABLE_ENTRY64"�4RTL_USER_PROCESS_PARAMETERSt6POWER_SESSION_WINLOGON@"tagEMRLINETO&nFILE_CASE_SENSITIVE_INFORMATION!�UPRTL_TREE_COMPARE_FUNCTION~LPCANDIDATEFORM�U_MESSAGE_TRACE_HEADER
/CLASSIC_EVENT_ID+T_EVENT_TRACE_SPINLOCK_INFORMATION_V1�0tagRECT'�UPRTL_QUERY_DEBUG_VIRTUAL_PROCESS7TIMAGE_RESOURCE_DIRECTORY hPS_MITIGATION_OPTIONS_MAP"�:IMAGE_SEPARATE_DEBUG_HEADER$�UPSYSTEM_BOOT_LOGO_INFORMATION?_MM_ETW_PAGE_INFO+a;PERFINFO_SPEC_CONTROL_RETPOLINE_EXIT0�UPJOBOBJECT_NOTIFICATION_LIMIT_INFORMATIONIUSCRUB_PARITY_EXTENT_ETW_NOTIFICATION_TYPE�UPVOLUME_BITMAP_BUFFER#�UPSHRINK_VOLUME_REQUEST_TYPES�UPETW_WNF_EVENT_PUBLISH'�UPETW_COVERAGE_SAMPLER_PERF_STATS�#PANSI_STRING�UPDELETE_USN_JOURNAL_DATA�UPTP_JOB_CALLBACK$?tagPELARRAY&]_HEAP_REUSE_THRESHOLD_ACTIVATEDSSIZE_T�_ALPC_TOKEN_ATTR"�&SYSTEM_VERIFIER_INFORMATION(�ASYSTEM_CONTEXT_SWITCH_INFORMATION*_RTL_FEATURE_CONFIGURATION_PRIORITY�:_WMIGUIDINFORMATION6F_IMAGE_NT_HEADERS'UPRTL_STACK_TRACE_DATABASE_CREATE$~UPRTL_PROCESS_LOCK_INFORMATION�)tagGESTURECONFIG�ULARGE_INTEGER�.TP_IO ~4HEAP_EXTENDED_INFORMATION�!_MM_ETW_PAGE_EXTRA_INFO&|U_WIM_PROVIDER_ADD_OVERLAY_INPUTyULPKERNINGPAIRuUPPERFINFO_IO_TIMER&sUPPROCESS_MEMORY_ALLOCATION_MODE$_SYSTEM_PROCESSOR_INFORMATION+nUPSYSTEM_FEATURE_CONFIGURATION_UPDATEkURTL_MODULE_EXTENDED_INFOgU_T2_SET_PARAMETERS_V0�TP_CALLBACK_PRIORITYdUPTITLEBARINFO-&tagWNDCLASSW"cUPEVENT_INSTANCE_GUID_HEADER1_UPSYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATIONW-RTL_HEAP_TAG#�?PLUGPLAY_CUSTOM_NOTIFICATION]UPETW_NOTIFICATION_HEADER!\UPACCESS_ALLOWED_OBJECT_ACE � SECURE_SETTING_VALUE_TYPEZUKLDR_DATA_TABLE_ENTRY32 4D_ETW_HEAP_EVENT_EXPANSIONTUPTOKEN_PRIVILEGES�/INITIAL_TEBSUPFILE_NAME_INFORMATIONj9KTMOBJECT_TYPE3kRPROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY$FILE_STAT_LX_INFORMATION%RUPWMI_JOB_SET_QUERY_INFORMATIONQU_locale_t"LOGICAL$PUPPERFINFO_MEM_RESET_INFO_TYPE1a%MEMORY_PARTITION_CONFIGURATION_INFORMATION�1_RTL_BACKOFF,RESERVICE_CONTROL_STATUS_REASON_PARAMSW�:_OBJECT_ATTRIBUTES64�<ENUMLOGFONTALUPBLENDFUNCTION�>_ETW_PER_SESSION_QUOTA+ _ETW_TP_EVENT_TIMER_EXPIRATION_BEGIN"�E_WIM_PROVIDER_OVERLAY_ENTRYGUPSCRUB_PARITY_EXTENTx.ETW_OPTICALIO_READWRITE"FUPPERFINFO_CC_CAN_WRITE_FAIL(�%SYSTEM_REGISTRY_QUOTA_INFORMATION(�>_CFG_CALL_TARGET_LIST_INFORMATION%�MEMORY_WORKING_SET_INFORMATIONFF_FOUR_PART_VERSIONHGDIOBJBULPQUERY_SERVICE_CONFIGW)EMRCOLORMATCHTOTARGET%�-MM_ETW_WORKING_SET_PFN_RUNDOWN(�RESOURCEMANAGER_INFORMATION_CLASS@UPRTL_DEBUG_INFORMATION]%PEMRARCTO�4tagWNDCLASSEXW�#POEM_STRING�FRTL_FEATURE_USAGE_REPORT+_MCI_ADDR�_SECURITY_ATTRIBUTES&?ULPOVERLAPPED_COMPLETION_ROUTINE8:CANDIDATELIST"<UPTRACE_ENABLE_FLAG_EXT_ITEM8UPRAWINPUTHEADER4UPFILE_FULL_DIR_INFO!:AETW_COVERAGE_SAMPLER_STATS'M_SYSTEM_SHADOW_STACK_INFORMATION2UPMEMORY_RANGE_ENTRY)1UPMEMORY_WORKING_SET_EX_INFORMATION�WMI_JOB_ASSIGN_PROCESS/U_WNF_DELIVERY_DESCRIPTOR�?_COMPRESSED_DATA_INFO'�4RPC_HTTP_TRANSPORT_CREDENTIALS_A+UIMAGE_VXD_HEADER!OR_RTL_FEATURE_CONFIGURATION$�_TXFS_LIST_TRANSACTIONS_ENTRY�=_IMAGE_IMPORT_DESCRIPTOR6PTEXTMETRICW"'UPROCESS_LOGGING_INFORMATIONUPMOVE_FILE_DATA32-KT_SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX�,IMAGE_HOT_PATCH_HASHES� CLIENT_ID64$�A_ETW_TP_EVENT_TIMER_CANCELLED%UPFILE_PIPE_ASSIGN_EVENT_BUFFER�G_RTL_BITMAP_RUN�D_EXCEPTION_LOG U_RTL_ENCLAVE_LAUNCH_TOKEN�4WNF_TYPE_IDP_STARTUPINFOW�8_LDR_DATA_TABLE_ENTRY#7tagEXTLOGFONTA+�%JOURNAL_SET_DELETE_VALUE_INFORMATION!UPRTL_TIME_ZONE_INFORMATIONN:CHANGEFILTERSTRUCT �_FILE_DISPOSITION_INFO_EX�9VS_FIXEDFILEINFOUPSE_SID)�:_RTL_IMAGE_MITIGATION_OPTION_STATE
UHLSURFUETW_CLOCK_TIME_UPDATE9#0_PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION
UPKEY_NAME_INFORMATION$UPTRANSACTION_BIND_INFORMATION �ETW_DISABLE_KTIMER2_EVENT'UPPROCESS_HANDLE_TABLE_ENTRY_INFOF_FILE_INFORMATION_CLASS�)tagMULTIKEYHELPW�.PUUCSCHAR+~GPLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA�'RID_DEVICE_INFO_MOUSE#REGHANDLE!UPSECTION_BASIC_INFORMATIONHDWP+UPSYSTEM_CRASH_DUMP_STATE_INFORMATION�,_FLOAT1284UPJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVEUNAMEENUMPROCAULPENUM_SERVICE_STATUSWI"_DISPLAY_DEVICEA3*tagPOLYTEXTA�;_IMAGE_TLS_DIRECTORY32�C_ImageArchitectureHeader yLDR_DLL_NOTIFICATION_DATA1�/_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE�TPETW_UMGL_KEYPWIN32_MEMORY_RANGE_ENTRY�8_CONTEXT�.PHYSICAL_CHANNEL_RUN\F_HEAP_BLOCK_INFORMATION�THWND�TPGET_MODULE_HANDLE_EXW�TPPOINTFLOAT1�TPMEMORY_PARTITION_PAGE_COMBINE_INFORMATION-�TPACTIVATION_CONTEXT_SECTION_KEYED_DATA�7_FILE_NOTIFY_INFORMATION)�*SYSTEM_SESSION_PROCESS_INFORMATION�TPTRACE_ENABLE_CONTEXT"�TPIMAGE_DELAYLOAD_DESCRIPTOR>#_RTL_MODULE_BASIC_INFO,�TPPROCESS_MITIGATION_IMAGE_LOAD_POLICY�BSC_ACTION_TYPE�EIMAGE_EXPORT_DIRECTORYStagEMRGRADIENTFILL�KLOCK_QUEUE_HANDLE�TEXIT_PROCESS_DEBUG_INFO�TPEVENT_DESCRIPTOR�TPWNODE_SINGLE_INSTANCE�DLDRP_CSLIST�ALPBITMAPV5HEADER�_PARSE_MESSAGE_CONTEXT�TPUNICODE_STRING64"FEMRDRAWESCAPE�0_KCRM_TRANSACTION_BLOB0VR_JOURNAL_TRANSACTION_BOUNDARY_INFORMATION�$EMRCHORDx PCUZZTSTR�TPCFG_CALL_TARGET_INFO�TtagWCRANGE"SPEMRSETBKCOLOR�TPIMAGE_ENCLAVE_CONFIG64!@PEMRWIDENPATH#�TPFILE_FS_CONTROL_INFORMATIONI@_GRADIENT_TRIANGLE,UQUAD�TPINTERFACE_TYPE�"MEMORY_RANGE_ENTRY<_TABLE_SEARCH_RESULT�TWOW64_REMOTE_FUNCTION64�.LPDEVMODEA�TWNF_USER_CALLBACK'�#_JOBOBJECT_BASIC_PROCESS_ID_LIST�SPROCESSOR_RELATIONSHIP�TPICONINFOEXAg'ICONINFOEXW3�TPJOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V1�SYSTEM_INFORMATION_CLASS!�TPWINDOW_BUFFER_SIZE_RECORDWNODE_ALL_DATA"WNF_CHANGE_STAMPr_HARDWARE_COUNTER_TYPEG_FILE_SET_SPARSE_BUFFER)�TPSYSTEM_MEMORY_CHANNEL_INFORMATION EA_CM_EISA_SLOT_INFORMATION�$HEAP_RANGE_INFORMATIONCDLPBITMAPINFO�TPETW_DEBUG_PRINT_EVENT$�TPROCESS_FOREGROUND_BACKGROUND&�TPSL_KMEM_CACHE_VALUE_DESCRIPTOR�+POSVERSIONINFOEXW&�TPPLUGPLAY_CONTROL_CONFLICT_DATA�#_RTL_CONDITION_VARIABLE�TINPUT_MESSAGE_SOURCE�_currencyfmtA$�E_NDR_USER_MARSHAL_INFO_LEVEL1�TPPRPC_SID-�2FSCTL_GET_INTEGRITY_INFORMATION_BUFFER#�DISPLAYCONFIG_COLOR_ENCODING+�T_FILE_LINK_ENTRY_FULL_ID_INFORMATION
B_WIN32_FIND_STREAM_DATA�TPPOWERBROADCAST_SETTING-�TPPROCESS_MITIGATION_POLICY_INFORMATION,�TPEVENT_TRACE_SYSTEM_EVENT_INFORMATION4kR_PROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY�TPRTL_HEAP_STACK_QUERY�PACTIVATION_CONTEXT&�TPIMAGE_DYNAMIC_RELOCATION_TABLEc/_PERFINFO_TRACE_HEADER$�TPWIM_PROVIDER_START_INTEGRITY'�T_SYSTEM_ACTIVITY_MODERATION_INFO?q5_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA$H_ETW_CLOCK_STATE_CHANGE_EVENT�TPMM_ETW_WORKING_SET_TYPE$APROCESS_WORKING_SET_OPERATION'�TPQUERY_PERFORMANCE_COUNTER_FLAGS�/POSVERSIONINFOW,�TPDEDUP_QUERY_FILE_HASHES_INPUT_BUFFERDREFS_SMR_VOLUME_GC_STATE�TPNT_TIB32!�A_CREATE_PROCESS_DEBUG_INFO�THTOUCHINPUT$�;KNONVOLATILE_CONTEXT_POINTERS,�TPJOBOBJECT_SECURITY_LIMIT_INFORMATION$0_FILE_ID_EXTD_DIR_INFORMATIONhD_CSV_QUERY_FILE_REVISION�TtagBITMAPCOREINFO$�>_PROCESS_WS_WATCH_INFORMATION+�:SYSTEM_SECUREBOOT_POLICY_INFORMATIONU"FEEDBACK_TYPEdC_VM_COUNTERS_EX2 �=_FSCTL_OFFLOAD_READ_INPUT(EMRCREATECOLORSPACEW),TOKEN_ELEVATION_TYPE�;tagPALETTEENTRY�EMRPOLYDRAW'�TPPROCESS_LEAP_SECOND_INFORMATION JFILE_QUERY_SPARING_BUFFER&%+_FSCTL_UNMAP_SPACE_INPUT_BUFFER�9_WMI_IDE_CHANNEL_RECORD3�TPJOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION
pLPTSTR.9_PROCESS_JOB_MEMORY_INFO�#REPARSE_DATA_BUFFER_EX�TPBOOT_OPTIONSwEWMI_LOGGER_INFORMATION�'PMENUBARINFO{PS_PROTECTED_SIGNER"�TPPOWER_STATE_NOTIFY_HANDLER$iCKEY_VALUE_PARTIAL_INFORMATION�TPPREFIX_TABLE_ENTRY�8_HARDWARE_COUNTER_DATA!|%ENTER_STATE_SYSTEM_HANDLER�KEY_INFORMATION_CLASS�TBITMAPCOREINFO%92ETW_WNF_EVENT_NAME_SUB_RUNDOWN!L>_PROCESS_FAULT_INFORMATIONNTP_TRACE_TYPE�T_PEB!@PEMRFLATTENPATH'�"ETW_TIMER_EXPIRATION_START_EVENT#MONITOR_DISPLAY_STATE"gTPTXFS_SAVEPOINT_INFORMATIONeTMDICREATESTRUCTW/WMI_PROCESS_INFORMATION)bTPEVENT_TRACE_GROUPMASK_INFORMATION`TMESSAGE_RESOURCE_ENTRYO_WMI_PAGE_FAULT]TPWAKE_TIMER_INFO[TMENUGETOBJECTINFOXTUILANGUAGE_ENUMPROCW(9CJOBOBJECT_BASIC_LIMIT_INFORMATION%<STREAMS_QUERY_ID_OUTPUT_BUFFER!�'_SYSTEM_NUMA_PROXIMITY_MAPUTPDISPLAY_DEVICESTtagGCP_RESULTSWPTSERVER_ROUTINE%OTPREFS_SMR_VOLUME_GC_PARAMETERS=CBT_CREATEWNDA#�PS_CPU_QUOTA_SET_INFORMATION3.SD_QUERY_STATS_OUTPUTNTPRPC_SECURITY_QOSMTPEVENT_HEADER,_SECURITY_CAPABILITIES,KTSYSTEM_KERNEL_DEBUGGER_INFORMATION_EXHTLPFIBER_START_ROUTINE Y?TOUCHPREDICTIONPARAMETERSFT_TEB_ACTIVE_FRAME_EX�,OSVERSIONINFOEX2W@TPNTFS_STATISTICS>TPEMRSETMITERLIMIT<TEMRROUNDRECT9TLPRAWHID 5TPIMAGE_RESOURCE_DIRECTORY$b?_FILE_VOLUME_NAME_INFORMATION2T_PO_WAKE_SOURCE_HEADER% EETW_COVERAGE_SAMPLER_PERF_INFO%/8_WMI_DISKIO_IO_REDIRECTED_INIT*�:SYSTEM_NET_RATE_CONTROL_SET_CONTEXT 0TPRTL_QUERY_REGISTRY_TABLE&F,_SYSTEM_MEMORY_LIST_INFORMATION<2STREAM_INFO_LEVELS#PCWPRETSTRUCT!.T_ETW_CPU_CACHE_FLUSH_EVENT*_PERFINFO_BOOT_PREFETCH_INFORMATION#b?FILE_VOLUME_NAME_INFORMATION+TPTOKEN_ELEVATION*TLPCURRENCYFMTA�=_HEAP_COMMIT_DECOMMIT++)_ETW_UMS_EVENT_DIRECTED_SWITCH_START3&tagLOGCOLORSPACEA)&TPETW_TP_EVENT_TIMER_EXPIRATION_END($TPPROCESS_HANDLE_TRACING_ENABLE_EX#TPTP_WORK�tagDIBSECTION"TPROPENUMPROC#lAJOBOBJECT_FREEZE_INFORMATION!TPRTL_FEATURE_CONFIGURATION�D_TP_DEBUG_CLASS+TPROCESS_PROTECTION_LEVEL_INFORMATION#PKAFFINITYTIMAGE_ROM_HEADERSSATOM_BASIC_INFORMATION!TPFILE_REMOTE_PROTOCOL_INFO.	;_FILE_DESIRED_STORAGE_CLASS_INFORMATION#�$_RTL_GENERIC_COMPARE_RESULTS.� _PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA&f_PLUGPLAY_CONTROL_PROPERTY_DATA�3RTL_SRWLOCK"TPETW_UMS_EVENT_DISASSOCIATE$TtagEMRCREATEDIBPATTERNBRUSHPT!�FPROCESS_UPTIME_INFORMATIONTPUSN_RECORD_UNION_FILE_ID_INFO 
TETW_THREAD_AFFINITY_EVENT
TPRPC_DISPATCH_TABLE"rPERFINFO_CC_LAZY_WRITE_SCANqAWMI_DISKIO_READWRITE	TPSYSDBG_PHYSICAL�RLPABCFLOATT_NETINFOSTRUCTT_IMAGE_IMPORT_BY_NAME_DMA_SPEEDTPSYSTEM_PREFETCH_STATS�_SYSTEM_VA_TYPEtPLONG32"ACCESS_REASON�SPFILE_EA_INFORMATION�SPFILE_LEVEL_TRIM_OUTPUT%*RTL_DYNAMIC_HASH_TABLE_CONTEXT%�SPRTL_UMS_SCHEDULER_ENTRY_POINT}TITLEBARINFOEX'�SLOOKUP_STREAM_FROM_CLUSTER_ENTRY)�SPSYSTEM_SECURITY_MODEL_INFORMATION+&NPWNDCLASSW�SPFILEMUIINFO1�REVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION�SEDITWORDBREAKPROC�2LPMSG%�/ETW_AUTOBOOST_NO_ENTRIES_EVENT*[6_PERFINFO_PO_NOTIFY_DEVICE_COMPLETE�SPSE_ACCESS_REPLY-
3FSCTL_SET_INTEGRITY_INFORMATION_BUFFER�_KCRM_PROTOCOL_BLOB�S_NETCONNECTINFOSTRUCT�D_IMAGE_SYMBOL_EX+�SPCASSEMBLY_FILE_DETAILED_INFORMATION!�SPPERFINFO_FILE_INFORMATION!�8_PAGE_PRIORITY_INFORMATIONDLPMETARECORD�6RPC_SECURITY_QOS_V3_A�SLPMONITORINFOV.__GENERIC_BINDING_INFO�3_IO_ERROR_LOG_MESSAGE%�SPFILE_FS_FULL_SIZE_INFORMATION�S_NT_TIB32�>FILE_BASIC_INFORMATION�SFILE_PIPE_INFORMATION.�SPLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA,�SFILE_FS_PERSISTENT_VOLUME_INFORMATION_SFILE_REGION_INPUTq+tagMOUSEHOOKSTRUCTDtagMETARECORD(�S_PERFINFO_MEMORY_NODE_INFORMATION�SINPUT_INJECTION_VALUE�SPWX86TIB#SharedVirtualDiskHandleState"j$_POWER_MONITOR_REQUEST_TYPE*�SRPC_HTTP_TRANSPORT_CREDENTIALS_V2_W�SPRTL_RXACT_LOG!�=_SILOOBJECT_ROOT_DIRECTORY+�SPPLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA�SPPNP_VETO_TYPE4RTL_HEAP_TAG_INFO�/PROCESS_ENERGY_VALUES/ SCONTEXT_QUEUE$�SPRTL_GENERIC_ALLOCATE_ROUTINE�SPPOWER_SESSION_WINLOGON!!PROCESS_ACTIVITY_TYPE�SPRTL_STACK_CONTEXTBH_RTL_CRITICAL_SECTION64(�SPFILE_FS_VOLUME_FLAGS_INFORMATION'C3_REDIRECTION_FUNCTION_DESCRIPTOR$iE_PROCESS_HANDLE_TRACING_ENTRY"�SPUNICODE_PREFIX_TABLE_ENTRYu_DEP_SYSTEM_POLICY_TYPE�SLPEXTLOGFONTA�SPTHREAD_PERFORMANCE_DATA)�(_FILE_ID_GLOBAL_TX_DIR_INFORMATIONLPRAWINPUTDEVICE!�SLPOUTPUT_DEBUG_STRING_INFO$�SPTXFS_TRANSACTION_ACTIVE_INFO#�SPMEMORY_PRIORITY_INFORMATION�=_RTL_GENERIC_TABLE"LPDWORD�LPRAWINPUTI!_OSVERSIONINFOA�SCALINFO_ENUMPROCEXEX�SLPIMEMENUITEMINFO 1/_CI_WINDOWS_LOCKDOWN_MODE#�@tagACTCTX_SECTION_KEYED_DATA2�SPJOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2�SLPEXCEPTION_DEBUG_INFO�S_EVENT_FILTER_LEVEL_KW�SPALPC_HANDLE_ATTR�SLPOUTLINETEXTMETRICA&�A_FILE_PROVIDER_EXTERNAL_INFO_V1PCTOKEN_OWNER&APPLICATIONLAUNCH_SETTING_VALUE3S_RTL_HEAP_WALK_ENTRY�SGDI_HANDLE_BUFFER�SPEISA_IRQ_DESCRIPTOR�SPWMI_CONTEXTSWAP+�SPCLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE.�S_FILE_NETWORK_PHYSICAL_NAME_INFORMATIONa:SYSDBG_MSR�-_QUERY_BAD_RANGES_INPUT �SPTPP_THREAD_DATA_CALLBACK�SPROPENUMPROCEXA�SPRPC_POLICY'�SPPERFINFO_CC_SCHEDULE_READ_AHEAD"P_PROCESS_HANDLE_INFORMATION�,_OSVERSIONINFOEX2W(�_RTL_QUERY_DEBUG_INFORMATION_INFO"_DOCINFOA-�SPALPC_PORT_COMPLETION_LIST_INFORMATION%�S_NTPSS_MEMORY_BULK_INFORMATION�SPEISA_PORT_CONFIGURATION�SRTL_RVA_LIST_ITERATOR�SPPROCESS_INFORMATION�S_PROCESSOR_RELATIONSHIP%4;CM_PNP_BIOS_INSTALLATION_CHECK�SPTP_ALPC_CALLBACK_EX%{:EVENT_EXTENDED_ITEM_PEBS_INDEX0�,TRANSACTION_NOTIFICATION_PROMOTE_ARGUMENTvSPRTL_ELEVATION_FLAGS"sS_ETW_TIMER_EXPIRATION_EVENT(JC_SYSTEM_ACTIVITY_MODERATION_STATE1�F_PLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLEDpSLPSERIALKEYSW(nSFILE_PIPE_EVENT_ENUM_INPUT_BUFFERv&EVENTLOGRECORD�-PEMRPOLYBEZIER"kSPETW_DUPLICATE_HANDLE_EVENTjSLPEXTLOGPENiSIMCENUMPROC&
S_RTL_DISK_WRITE_CONSTRAINT_INFO|EPOLYTEXTWPRLIST_ENTRY%eSPFILE_MAILSLOT_SET_INFORMATION&cSFILE_END_OF_FILE_INFORMATION_EX]SPFILE_REGION_INPUTHGLOBAL�RTL_RESOURCE_CATEGORY[SHFONT%ZSPFILE_MOVE_CLUSTER_INFORMATION#YSPFILE_PROVIDER_EXTERNAL_INFO1XSPSYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION#�ESYSTEM_ROOT_SILO_INFORMATIONWSPLDR_RESLOADER_RET$US_RTLP_HEAP_SERIALIZED_MAPPING&CPROCESS_ENERGY_VALUES_EXTENSION%5_COVERAGE_REQUEST_CODES�RMEMORY_IMAGE_INFORMATION+RSPTRANSACTION_ENLISTMENTS_INFORMATIONPSACCESS_DENIED_ACE7_Wx86TIB%S_FILE_PIPE_ASSIGN_EVENT_BUFFER)�1PROCESS_COMMIT_RELEASE_INFORMATIONu3RGBTRIPLE�/RTL_OSVERSIONINFOW*JSPRTL_SPARSE_BITMAP_ALLOCATE_ROUTINECM_ROM_BLOCKISHWINEVENTHOOK�._THREAD_NAME_INFORMATION�VIRTUAL_STORAGE_TYPEZ!_RPC_CLIENT_INTERFACE:�SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION)JF_SYSTEM_MEMORY_CHANNEL_INFORMATIONHSPIRQ_PRIORITY)GSPRTL_PROCESS_BACKTRACE_INFORMATION
;_RTLP_TAG_INFO� _PEBS_DS_SAVE_AREA64DSPEMREXTTEXTOUTA(�)SE_LEARNING_MODE_USER_OBJECT_DATA)�,_RTL_PROCESS_MODULE_INFORMATION_EX%}JOURNAL_RENAME_KEY_INFORMATION�FHMONITOR__�:PERFINFO_FILE_READ_WRITE CSPCSV_QUERY_REDIRECT_STATEASHMETAFILE__?SPMENUITEMTEMPLATE(r&_RPC_BINDING_HANDLE_TEMPLATE_V1_A >SPALPC_WORK_ON_BEHALF_ATTR=SLPALTTABINFO <SPFILE_FS_SIZE_INFORMATION;SLPCREATESTRUCT9SFP_3207SPSYSTEM_REGISTRY_APPEND_STRING_PARAMETERS#�SECURITY_IMPERSONATION_LEVEL#"=_SD_CHANGE_MACHINE_SID_INPUT�TOKEN_INFORMATION_CLASS6SPFILE_LAYOUT_ENTRY!5SPFILE_MAILSLOT_PEEK_BUFFER1SPRTL_HEAP_WALK_ENTRY".STIMER_SET_INFORMATION_CLASS(+S_RTL_IMAGE_MITIGATION_HEAP_POLICY�'_OFSTRUCTB:LPLOGFONTA)(SPWIM_PROVIDER_UPDATE_OVERLAY_INPUT!E_FILE_PIPE_WAIT_FOR_BUFFER'SMFENUMPROC"SPEMRSETTEXTCOLOR3!SPPROCESS_MITIGATION_USER_SHADOW_STACK_POLICYz%_PERFINFO_CCSWAP_IDLE1 SPSTORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY#tagTEXTMETRICASEMRGRADIENTFILL&SPMEMORY_WORKING_SET_INFORMATION�_OSVERSIONINFOEXA!F;SYSDBG_KD_PULL_REMOTE_FILES_ATOM_BASIC_INFORMATION^CEXTLOGPEN�XSAVE_AREASPSYSTEM_BATTERY_STATESPSERVICE_NOTIFY_2|.POSVERSIONINFOEXA�5_MESSAGE_TRACE_USER+S_PERFINFO_PAGECOMBINE_ITERATION_STAT
SRTL_GENERIC_FREE_ROUTINE+SPRTL_FEATURE_CONFIGURATION_OPERATION%
SRTL_DISK_WRITE_CONSTRAINT_INFOSRGBQUAD�tagEMRPOLYPOLYLINE-�_PROCESS_MITIGATION_POLICY_INFORMATION4GtagSTYLESTRUCT(g_IMAGE_ARM_RUNTIME_FUNCTION_ENTRYo_THREAD_WORKLOAD_CLASS$SPSYSTEM_FILECACHE_INFORMATIONSPCIMAGE_EXPORT_DIRECTORYE0_JOBOBJECT_WAKE_FILTER$SFILE_PIPE_ASSIGN_EVENT_BUFFERA tagBITMAPCOREHEADER+/6EVENT_TRACE_TIME_PROFILE_INFORMATION�RPPORT_VIEW�%ALPC_CONTEXT_ATTR�RPWNF_META_CALLBACK�RDESKTOPENUMPROCW,�A_PERFINFO_DRIVER_COMPLETE_REQUEST_RETg$RTL_RXACT_OPERATION�RNPABCFLOAT�RPEMRCREATECOLORSPACE�,HEAP_EVENT_RANGE_CREATE,�RPPROCESS_STACK_ALLOCATION_INFORMATION�RPHARDERROR_MSG�SERIALKEYSWwC_INVERTED_FUNCTION_TABLE/�RPSTORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE �R_MEMORY_IMAGE_INFORMATION"�RPKEY_WRITE_TIME_INFORMATION1IMAGE_OPTIONAL_HEADER9�_PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY�RPIMAGE_FUNCTION_ENTRY64*�RPVIRTUAL_STORAGE_SET_BEHAVIOR_INPUT!�RPKEY_SET_LAYER_INFORMATION�'_SC_STATUS_TYPE%�RPFILE_NETWORK_OPEN_INFORMATION�RPKEY_LAYER_INFORMATION#cPERFINFO_PPM_IDLE_STATE_EXIT5�R_PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY$lA_JOBOBJECT_FREEZE_INFORMATION.�RPPROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE#�@SILOOBJECT_BASIC_INFORMATION
BWIN32_FIND_STREAM_DATA�RPEMRRESIZEPALETTE#�RPDRIVER_VERIFIER_THUNK_PAIRS�R_RTL_FEATURE_USAGE_DATA"N0ETW_COVERAGE_SAMPLER_MODULE
D&_COORD�RRDR_CALLOUT_STATE2�RPEVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION�R_UNWIND_HISTORY_TABLE�RPIO_ERROR_LOG_PACKET�._ETW_HEAP_EVENT_REALLOC�;COVERAGE_SECTION_HEADERZ<PEB_LDR_DATA�8COMBOBOXINFO
 PUINT8$�_FILE_DISPOSITION_INFORMATION(�RGET_FILTER_FILE_IDENTIFIER_OUTPUT �RPWMI_TRACE_MESSAGE_PACKET�RCSV_QUERY_MDS_PATH�DELETEITEMSTRUCT�RWNODE_EVENT_REFERENCE�R_SERVICE_DESCRIPTIONA#DWORD64!�RCS_TYPE_FROM_NETCS_ROUTINE$9ETW_TP_EVENT_TIMER_EXPIRATION�RPTOKEN_AUDIT_POLICY!�RADMINISTRATOR_POWER_POLICY�RPEMRNAMEDESCAPE�1tagHARDWAREINPUT
�.PRECTL!�RPWMI_IMAGEID_INFORMATION64�RPWNF_STATE_NAME#�)PROCESS_HANDLE_TRACING_QUERY"PEXECUTION_STATE�RPZPCSTR�RtagEMRSETCOLORADJUSTMENT0�RI_RpcProxyGetClientSessionAndResourceUUIDM@_FNSAVE_FORMAT�RPFP_IEEE_VALUE�/_FILE_PREFETCH_EX"�8_SYSTEM_PROCESS_INFORMATION:3_KLDR_DATA_TABLE_ENTRY64�RTHREAD_BASIC_INFORMATION!}RPSYSTEM_ALARM_CALLBACK_ACE&�+RTL_QUERY_DEBUG_VIRTUAL_PROCESS|RGENERIC_BINDING_ROUTINE �:_PERFINFO_FILE_READ_WRITE*nRPPROCESS_EXTENDED_BASIC_INFORMATION4eRPPROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY%RTL_MEMORY_TYPEdRPFILE_BASIC_INFO&cRPPOWER_THROTTLING_PROCESS_STATEqPARAM_OFFSETTABLEaRMESSAGE_TRACE7TOKEN_USER{A_HEAP_SUMMARY�A_RPC_PROTSEQ_VECTORAYFtagEMREXCLUDECLIPRECT�PWMIHANDLE#]RPROCESS_AFFINITY_UPDATE_MODE(dPERFINFO_DRIVER_MAJORFUNCTION_RET@CANSI_STRING0TRPJOURNAL_TRANSACTION_BOUNDARY_INFORMATION#�RTL_XPRESS_CALLBACK_FUNCTIONRRLPCRECTL�.PERFINFO_VIRTUAL_ALLOC'N3GET_FILTER_FILE_IDENTIFIER_INPUT�RTL_AVL_TREE%1RTL_UMS_SCHEDULER_STARTUP_INFO#_SE_SECURITY_DESCRIPTOR'�$_FILE_PIPE_CLIENT_PROCESS_BUFFER$GRPSYSTEM_FEATURE_CONFIGURATION#FRLPQUERY_SERVICE_LOCK_STATUSW0TOKEN_SID_INFORMATIONERPMARK_HANDLE_INFO32 �@WIN32_FILE_ATTRIBUTE_DATACREMRMASKBLT*NNTFS_VOLUME_DATA_BUFFER#�#STARTING_LCN_INPUT_BUFFER_EX&NVOLUME_BITMAP_BUFFERZ)MOVE_FILE_DATA"NMOVE_FILE_RECORD_DATA�=MFT_ENUM_DATA_V0�MFT_ENUM_DATA_V1A=READ_FILE_USN_DATA#3READ_USN_JOURNAL_DATA_V0�;READ_USN_JOURNAL_DATA_V18HUSN_RANGE_TRACK_OUTPUTNUSN_RECORD_V3�&USN_RECORD_COMMON_HEADER�CUSN_RECORD_V4BUSN_JOURNAL_DATA_V0z=USN_JOURNAL_DATA_V1NDELETE_USN_JOURNAL_DATANMARK_HANDLE_INFO32EPOWER_ACTION#�POWER_MONITOR_REQUEST_REASON�SYSTEM_POWER_CONDITION�SET_POWER_SETTING_VALUE �NOTIFY_USER_POWER_SETTING�MBATTERY_REPORTING_SCALE�!POWER_STATE_HANDLER_TYPEv"POWER_STATE_HANDLER!�MPOWER_STATE_NOTIFY_HANDLER HPPM_WMI_LEGACY_PERFSTATEYPPM_WMI_IDLE_STATES�MPPM_WMI_IDLE_STATES_EX6PPM_WMI_PERF_STATES �MPPM_IDLE_STATE_ACCOUNTING�!PPM_IDLE_ACCOUNTING#�MPPM_IDLE_STATE_ACCOUNTING_EXGPPM_IDLE_ACCOUNTING_EX�MPPM_PERFSTATE_EVENT!�MPPM_PERFSTATE_DOMAIN_EVENT+PPM_IDLESTATE_EVENT�MPPM_THERMALCHANGE_EVENT�MPPM_THERMAL_POLICY_EVENT�)POWER_ACTION_POLICY8SYSTEM_POWER_LEVEL�)PO_WAKE_SOURCE_TYPE#=PO_INTERNAL_WAKE_SOURCE_TYPE�KPTP_WAIT_CALLBACKMCA_EXCEPTION_TYPEY$RTL_DISK_SPACE_POLICY'0GRTL_DISK_WRITE_CONSTRAINT_POLICYY(RTL_BSD_ITEM_TYPE�@RTL_ACE_DATA!�ACTCTX_REQUESTED_RUN_LEVEL(~:ACTCTX_COMPATIBILITY_ELEMENT_TYPE&�JRTLWOW64_CROSSPROCESS_WORK_HEAD�ABITMAPV5HEADER&3DISPLAYCONFIG_SCANLINE_ORDERINGF#DISPLAYCONFIG_SCALINGDJSHELLHOOKINFO@JPOWERBROADCAST_SETTINGP+BSMINFO�+FLASHWINFO&'JSERVICE_TRIGGER_CUSTOM_STATE_IDR,SERVICE_NOTIFY_23WMIREGGUIDWJWMIREGINFOW�WMIDPREQUESTCODE�IMOFRESOURCEINFOW�2MOFRESOURCEINFOA�IRPC_ENDPOINT_TEMPLATEW�IRPC_ENDPOINT_TEMPLATEA�IRPC_INTERFACE_TEMPLATEA 1RPC_INTERFACE_TEMPLATEW�IRPC_DISPATCH_TABLE�6XLAT_SIDE.�D_STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST@HPRTL_CRITICAL_SECTION64#=HTRACE_PROVIDER_INSTANCE_INFO:HPQUOTA_LIMITS6HPUSN_RANGE_TRACK_OUTPUT#@DISPLAYCONFIG_MODE_INFO_TYPEs!STUB_PHASE3H_ALPC_SERVER_INFORMATION�6USN_RECORD!@PEMRREALIZEPALETTE&'HPOBJECT_HANDLE_FLAG_INFORMATION�FILEMUIINFO7�4PROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICY$HFIND_BY_SID_OUTPUTk.CHARSETINFO HPPPM_WMI_LEGACY_PERFSTATE�_RTL_PROTECTED_ACCESS,HJOBOBJECT_IO_RATE_CONTROL_INFORMATION-�_RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET$HPPERFINFO_DOMAIN_CHANGE_EVENTH_TOKEN_PRIMARY_GROUP!HPFILE_FS_LABEL_INFORMATION#AC_MANAGE_HOT_PATCH_LOAD_PATCH EFILE_PIPE_WAIT_FOR_BUFFER
HPRTL_CIRCULAR_LIST_HEAD DLPGRADIENT_TRIANGLE'6LEARNING_MODE_OBJECT_INFORMATION$	HPETW_CLOCK_STATE_CHANGE_EVENTh0_RTL_LFG_RNG_STATEHPLOGFONT!HPSECURITY_OBJECT_AI_PARAMS$�5_FILE_ID_BOTH_DIR_INFORMATION/ZE_READ_DIRECTORY_NOTIFY_INFORMATION_CLASS)CFILE_PIPE_CLIENT_PROCESS_BUFFER_V23HFSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE(�$_ETW_COVERAGE_SAMPLER_CREATE_INFOHPANSI_STRING32!�GPTP_POOL_STACK_INFORMATION�E_IMAGE_POLICY_METADATA!�GPWMI_PROCESS_INFORMATION646*ETWTRACECONTROLCODEf&_UNWIND_CODE(�GEVENT_EXTENDED_ITEM_STACK_TRACE64�GPFILE_STAT_INFORMATION(�3_FILE_FS_FULL_SIZE_INFORMATION_EX%�GSL_KMEM_CACHE_VALUE_DESCRIPTOR�!EMRREALIZEPALETTE�GPCTOUCHINPUT2�=PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY�GPOSVERSIONINFOEX2AO"RTL_PERTHREAD_CURDIR
 LPBYTE�GPRPC_SECURITY_QOS_V4_A �GPSID_AND_ATTRIBUTES_ARRAY�GPTP_SIMPLE_CALLBACK-�GDISPLAYCONFIG_SET_ADVANCED_COLOR_STATE�GPWMI_PUSHLOCK�GEMRNAMEDESCAPE&�ETW_COVERAGE_SAMPLER_QUERY_INFOPT2_CANCEL_PARAMETERS&�GPSYSTEM_MEMORY_LIST_INFORMATION �GPTEB_ACTIVE_FRAME_CONTEXT �=_PS_CPU_QUOTA_QUERY_ENTRY�&LPJIT_DEBUG_INFO64�GRPC_POLICY&�GPSYSTEM_PERFORMANCE_INFORMATION�GPPLUGPLAY_NOTIFY_HDR"�GPCONSOLE_SCREEN_BUFFER_INFO�GSC_ACTION�GPHEAP_BLOCK_INFORMATION�.MOUSEINPUT&3!ALPC_MESSAGE_HANDLE_INFORMATION�#RTL_CONDITION_VARIABLE�GPHPOWERNOTIFY!�G_EVENT_EXTENDED_ITEM_TS_ID	_PERFINFO_CCSWAP_TYPE PF_TEB_ACTIVE_FRAME_CONTEXT9�GPSYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION�_CACHE_RELATIONSHIP#PS_SECURITY_DOMAIN0�GPMEMORY_PARTITION_INITIAL_ADD_INFORMATION4�GPSEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION%�=ACTIVATION_CONTEXT_QUERY_INDEX%�GtagI_RpcProxyCallbackInterface�1IMAGE_ENCLAVE_CONFIG64�GPTOKEN_OWNER�:SERVICE_STATUS#PDWORDLONGqRUNTIME_FUNCTION�GPRTL_HEAP_PARAMETERS�GPRTLP_CURDIR_REF�'USER_MARSHAL_CB_TYPE(GESTUREINFO$�GPFILE_PIPE_SILO_ARRIVAL_INPUT'�RTL_FEATURE_VARIANT_PAYLOAD_KINDqFBOOT_ENTRY_LIST/_PERFINFO_GROUPMASKS7tagMONITORINFO�tagCANDIDATEFORM�GPGENERIC_BINDING_INFO$�GPSD_CHANGE_MACHINE_SID_OUTPUT"�GPFILE_FS_VOLUME_INFORMATIOND_AUDIT_EVENT_TYPE�GPRTL_BITMAP_RUN�$tagEMRARC�GPVARIABLE_NAME_AND_VALUE�G_CPU_CONFIG_RECORD�G_COVERAGE_MODULE_INFO�GRPC_DISPATCH_FUNCTION�GPTOKEN_INFORMATION_CLASSF_CM_RESOURCE_LIST,~G_PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA�+RTL_OSVERSIONINFOEXW'wGPCREATEFILE2_EXTENDED_PARAMETERS%�:_FILE_NETWORK_OPEN_INFORMATION+�5_PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA
�0NPRECT#tGETW_PARTITION_INFO_EXTENSION+�_PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA�4WNDCLASSpGCPINFOEX)�A_SYSTEM_CONTEXT_SWITCH_INFORMATIONFCM_RESOURCE_LIST�*_OUTLINETEXTMETRICW�FS_INFORMATION_CLASS"_EVENT_RECORD$�/IMAGE_LOAD_CONFIG_DIRECTORY32jGPCALL_FRAME&�:HEAP_BLOCK_SETTABLE_INFORMATIONeGLPRIP_INFOB_FILE_RENAME_INFO&�EJOBOBJECT_BASIC_UI_RESTRICTIONScGDECRYPTION_STATUS_BUFFER &2SHRINK_VOLUME_INFORMATION'l_SERVICE_DELAYED_AUTO_START_INFO_GRPC_IF_ID\GRC_CONFIGVGPEMRMODIFYWORLDTRANSFORM0QGPETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT$OGPSECURE_MEMORY_CACHE_CALLBACKJGHENHMETAFILE GGPERFINFO_FILE_INFORMATION
tINT*0_SET_DAX_ALLOC_ALIGNMENT_HINT_INPUT-DGPREFS_VOLUME_COUNTER_INFO_INPUT_BUFFER<_FILE_ALIGNMENT_INFO*I4REFS_DEALLOCATE_RANGES_INPUT_BUFFER�PROCESSOR_IDLE_TIMES%CGPTRANSACTION_BASIC_INFORMATION'*_ALPC_MESSAGE_ATTRIBUTES%/)ACTCTX_SECTION_KEYED_DATA_2600%BGPSYSTEM_RESOURCE_ATTRIBUTE_ACEAGPTIMERAPCROUTINEuPEN_FLAGS(A&_SYSTEM_ALARM_CALLBACK_OBJECT_ACE�COMMPROP%$_ETW_TP_EVENT_CALLBACK_ENQUEUE,G_ETW_TP_EVENT_TIMER_SET4<GPCACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATAOPEMRSETTEXTALIGN:GPSERVICE_TRIGGER9GLPIID8GPTHREAD_UMS_INFORMATION'C_PROCESS_ENERGY_VALUES_EXTENSION 7GPSYSTEM_BASIC_INFORMATION 6GPCM_INT13_DRIVE_PARAMETER4GSTYLESTRUCT�8LUID_AND_ATTRIBUTES�=CONTAINER_VOLUME_STATEN9_XSTATE_CONFIGURATION5.GPASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA,GETW_TP_EVENT_TIMER_SET�*PEXTLOGFONTW)GLPSERVICE_MAIN_FUNCTIONA2NPREGISTERWORDW�#_PS_STD_HANDLE_STATE4(GPFILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EX�DPO_WAKE_SOURCE_FIXED!'GPSYSTEM_NUMA_PROXIMITY_MAP�LAST_EXCEPTION_LOG�-PEMRPOLYBEZIERTO-REARRANGE_FILE_DATA%GEMRSETPALETTEENTRIES�8PMOUSEMOVEPOINT%?POWER_THROTTLING_PROCESS_STATE&.+_RTL_FEATURE_CONFIGURATION_TYPE"GLPSERVICE_STATUSt*PPHYSICAL_ADDRESS&.OBJECT_BASIC_INFORMATION.+@_PROCESS_MITIGATION_DYNAMIC_CODE_POLICY3GPACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA3*POLYTEXTAY_PLUGPLAY_CONTROL_CLASSG_MUIREGISTRYINFOGPIMAGE_CHPE_METADATA_X866�9SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION"GPKEY_VALUE_FULL_INFORMATION�"tagEMREXTSELECTCLIPRGNGPHEAP_SUBSEGMENT_ALLOC
GPPPM_IDLE_ACCOUNTING_EX�ELDR_RESLOADER_RET$IPROCESS_HANDLE_TRACING_ENABLET?XSAVE_AREA_HEADER�ACCEL�+PCUNZWCH#�"_FILE_ALLOCATION_INFORMATIONGPFILE_SET_SPARSE_BUFFER%mF_DISPLAYCONFIG_SDR_WHITE_LEVEL$�<_SERVICE_FAILURE_ACTIONS_FLAG%GPIMAGE_LOAD_CONFIG_DIRECTORY64(v!_VIRTUAL_MEMORY_INFORMATION_CLASSGNPNEWTEXTMETRICGPPROCESSOR_NUMBER"�F_SE_PACKAGE_CAPABILITY_INFO D@SYSTEM_POWER_CAPABILITIES�FPPROCESSOR_POWER_POLICY0�=_SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS�FSL_HWID_DEVICE_INFO�*LPOUTLINETEXTMETRICW�E_WIN32K_SYSCALL_FILTER#SYSTEM_FILECACHE_INFORMATION�4tagWNDCLASSA!�FPDUPLICATE_EXTENTS_DATA_EX.*MDICREATESTRUCTPNTSTATUS%v5_KEY_CONTROL_FLAGS_INFORMATION�6tagPOINTER_INPUT_TYPE�@PRTL_DELETE_LOCK_ROUTINE&cFALPC_SERVER_SESSION_INFORMATION�FWAITORTIMERCALLBACK�(ACCESS_DENIED_OBJECT_ACE&�FPSTREAMS_QUERY_ID_OUTPUT_BUFFER�FPSERVICE_TRIGGER_INFO.�FPSYSTEM_THREAD_CID_PRIORITY_INFORMATION�CPRTL_TRACE_BLOCK@OEM_STRING-�FPJOBOBJECT_MEMORY_USAGE_INFORMATION_V2 �FPRTL_FEATURE_USAGE_REPORTB#_WMI_TRACE_PACKET3-_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V2+�6_SYSTEM_ELAM_CERTIFICATE_INFORMATION�F_WNODE_HEADER!HIBERFILE_BUCKET"�6KEY_VALUE_BASIC_INFORMATION"	?SYSTEM_VHD_BOOT_INFORMATIONnIMAGE_THUNK_DATA64�F_FP_IEEE_VALUE'�_PERFINFO_PPM_THERMAL_CONSTRAINT�FPIO_STATUS_BLOCK32'L_FILE_FS_DRIVER_PATH_INFORMATION�FGRAYSTRINGPROC�FPWINDOWINFO LPTIME_ZONE_INFORMATION&�>_ETW_TP_EVENT_TIMER_SET_NTTIMER�#_HARDERROR_RESPONSE�C_FILE_DISPOSITION_INFO3�+ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION cD_OUTPUT_DEBUG_STRING_INFO�<REASON_BUFFER0�FPLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLED�MIDL_STUB_DESC6�RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICYMENUTEMPLATE�FLPREMOTE_NAME_INFOyFFILE_LAYOUT_ENTRY�FPRTL_AVL_COMPARE_ROUTINE)�FPWIM_PROVIDER_REMOVE_OVERLAY_INPUT�FPNV_MEMORY_RANGE�FPPOOLED_USAGE_AND_LIMITS%�F_FILE_MOVE_CLUSTER_INFORMATION�;_FILE_PATH&_CM_MCA_POS_DATAv$LPREGISTERWORDA�F_PERFINFO_FLT_OPERATION�FPFILE_LEVEL_TRIM_RANGE%�FPFILE_PIPE_EVENT_SELECT_BUFFER�FLPCURRENCYFMT�_PERFINFO_IPI_SEND_DATA�F_SYSTEM_ALARM_OBJECT_ACE)�FPSYSTEM_WATCHDOG_TIMER_INFORMATION$�FPWOW64_DESCRIPTOR_TABLE_ENTRYxAXISINFO(�_HEAP_EVENT_SUBSEGMENT_ALLOC_FREE�FETW_HEAP_EVENT_SNAPSHOT�FCI_LOG_SCHEDULER_WAKEUP'�,SYSTEM_SINGLE_MODULE_INFORMATION0�FPEVENT_TRACE_SESSION_SECURITY_INFORMATIONWAIT_TYPE%�F_FILE_ZERO_DATA_INFORMATION_EX�FSYSDBG_PHYSICAL�FPEMRSETPIXELV�FPEISA_MEMORY_TYPE/�FPTRANSACTIONMANAGER_RECOVERY_INFORMATION)�<SYSTEM_SET_TIME_ADJUST_INFORMATION!�FPRTL_UNICODE_STRING_BUFFERoDPS_ATTRIBUTE�tagEMRSETVIEWPORTEXTEXi>GUITHREADINFO�?DPI_HOSTING_BEHAVIOR �FPPERFINFO_SPINLOCK_CONFIG&0_PERFINFO_MM_STAT$�FPREQUEST_OPLOCK_OUTPUT_BUFFER"�F_PROCESS_UPTIME_INFORMATION&�FPSYSTEM_DEVICE_DATA_INFORMATION)�FPPLUGPLAY_CONTROL_CONFLICT_STRINGS�FPHDEVNOTIFY"s%TOKEN_SECURITY_ATTRIBUTE_V1~FHMONITOR
ADOUBLE)1+SYSTEM_FEATURE_CONFIGURATION_QUERY+}FRTL_SPARSE_BITMAP_ENUMERATE_CALLBACK�=tagSCROLLINFO#O*ETW_TP_EVENT_CALLBACK_CANCEL&�IMAGE_RESOURCE_DIRECTORY_STRINGyF_FILE_LAYOUT_ENTRY#uFFILE_PIPE_SILO_ARRIVAL_INPUT!A_ETW_REFDEREF_OBJECT_EVENT!� _SECURE_SETTING_VALUE_TYPEqF_BOOT_ENTRY_LIST$mFDISPLAYCONFIG_SDR_WHITE_LEVELjFPRID_DEVICE_INFO_MOUSE 3SYSTEM_MEMORY_INFORMATIONhFKEY_CACHED_INFORMATIONeFPHEAP_EVENT_RANGE_CREATEBTP_TASK�*EXTLOGFONTW UCHAR�*_RTL_DRIVE_LETTER_CURDIR.M/_JOBOBJECT_CPU_RATE_CONTROL_INFORMATION'aFPALPC_SERVER_SESSION_INFORMATION!�$FILE_NUMA_NODE_INFORMATION>�SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY_FPMSGBOXPARAMS^FPCNZTCH#=E_SYSTEM_PAGEFILE_INFORMATION �@PRTL_RELEASE_LOCK_ROUTINE\FHEAP_BLOCK_INFORMATIONYFEMRINTERSECTCLIPRECT�7IMAGE_DYNAMIC_RELOCATIONVFPPLUGPLAY_EVENT_BLOCK!RFPSTORAGE_RESERVE_AREA_INFO�FMTID!NFPCTEB_ACTIVE_FRAME_CONTEXT%MFPNTFS_FILE_RECORD_INPUT_BUFFER1LFPSYSTEM_FEATURE_CONFIGURATION_UPDATE_ENTRY�+MM_ETW_PAGE_INFO_EX(JFSYSTEM_MEMORY_CHANNEL_INFORMATIONFFFOUR_PART_VERSION=FPFILE_ID_128�#VIDEOPARAMETERS$6KAFFINITY_ENUMERATION_CONTEXT9FPCM_SCSI_DEVICE_DATA#7EXTLOGFONT4FPIMAGE_NT_HEADERS32+<CM_SONIC_DEVICE_DATAL5COMPAREITEMSTRUCT#2FPSECURITY_QUALITY_OF_SERVICE1FPENCLAVE_CREATE_INFO_SGX0FLPJIT_DEBUG_INFO/FPEMRPIXELFORMAT�8LPCOMBOBOXINFO�8_LUID_AND_ATTRIBUTES(,FPTXFS_READ_BACKUP_INFORMATION_OUT"+FPPERFINFO_BATTERY_LIFE_INFO(2_PERFINFO_KERNELMEMORY_USAGE_TYPE*FPLUID)FLPPOINTFX(FPWNDCLASSEX$�4FILE_MAILSLOT_SET_INFORMATION$�@SYSTEM_SECUREBOOT_INFORMATION}1WTSSESSION_NOTIFICATION(-=FILE_IS_REMOTE_DEVICE_INFORMATION,&FJOURNAL_CREATE_DELETE_KEY_INFORMATION�$RTL_DISK_SPEED_POLICY2tagLOGCOLORSPACEW"FtagEMREXTESCAPE&VDSTORAGE_RESERVE_AREA_DEFINITIONi#IO_ERROR_LOG_PACKET-/MEMORY_PARTITION_NODE_PAGE_INFORMATION+�;_PERFINFO_PAGECOMBINE_AGGREGATE_STAT+�CFILE_IO_PRIORITY_HINT_INFORMATION_EX,FPJOURNAL_SET_KEY_SECURITY_INFORMATIONzELPPOLYTEXTWFPCM_PNP_BIOS_DEVICE_NODEj_THREAD_UMS_INFORMATION&FDISPLAYCONFIG_VIDEO_SIGNAL_INFO�3PATHNAME_BUFFERFEVENTSFORLOGFILEFPCM_RESOURCE_LIST$FPPLUGPLAY_CONTROL_STATUS_DATA"LCID BOOLEANFPTP_CALLBACK_ENVIRON�!EMRCLOSEFIGURE6tagEMRSELECTOBJECT�4WNDCLASSEXWFVARIABLE_NAME_AND_VALUE�EPRPC_SECURITY_QOS_V3_W$�)_THREAD_PROFILING_INFORMATION!#RTL_SPARSE_BITMAP_CTX_LOCK �EDISPLAYCONFIG_TARGET_MODEptrdiff_t$�E_SYSTEM_ROOT_SILO_INFORMATION0_TRANSACTION_OUTCOME�EPUNICODE_PREFIX_TABLE#�@PRTL_INITIALIZE_LOCK_ROUTINE�1tagSTICKYKEYS$?PELARRAY+2FP_80Z@_REQUESTER_TYPE�<_ALPC_HANDLE_ATTR32�EPCIMAGE_POLICY_METADATA@'PCRITICAL_SECTION_DEBUGpPINT8qLPCTSTR�EFILE_ID_BOTH_DIR_INFO�4WNDCLASSA4�E_SYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE�_IRQ_DEVICE_POLICY(�_PERFINFO_DPC_ENQUEUE_INFORMATION�:OBJECT_ATTRIBUTES64�BLPMULTIKEYHELPA �E_WMI_TRACE_MESSAGE_PACKET"ID_TRACE_ENABLE_FLAG_EXT_ITEM.�_SYSTEM_SPECULATION_CONTROL_INFORMATION�EPFILE_RENAME_INFO%�DISPLAYCONFIG_DEVICE_INFO_TYPE�ECONSOLE_CURSOR_INFO�STATE_LOCATION_TYPE�E_IMAGE_EXPORT_DIRECTORY�%PCWCHdUNICODE_STRING64�EPWIN32K_SYSCALL_FILTER�"tagEMRSETMITERLIMIT}TRACE_PROFILE_INTERVALvBWMI_TCPIP�EPETW_PRIORITY_EVENT�:CSTRING+P1TRANSACTIONMANAGER_BASIC_INFORMATION�EPOPTICAL_MEDIA_RECORD�EPULARGE_INTEGER*�EPJOBOBJECT_MEMORY_USAGE_INFORMATION1�E_STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY3/DRTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY>%tagWNDCLASSEXA�*LOCALE_ENUMPROCW#�ELPQUERY_SERVICE_LOCK_STATUSA&?PROCESS_WS_WATCH_INFORMATION_EX!�9ENABLE_TRACE_PARAMETERS_V1�._PERFINFO_VIRTUAL_ALLOC�/DPI_AWARENESS�=LPMSLLHOOKSTRUCT4�:SYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST�ERTL_HEAP_COMMIT_ROUTINE�EPIMAGE_HOT_PATCH_HASHESgMUTANT_INFORMATION_CLASS'�EPETW_DFSS_RELEASE_THREAD_ON_IDLE�EPRTL_RESOURCE_DEBUG�EPCUNICODE_STRING3#_TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION�"tagACCESSTIMEOUT'�>_CSV_QUERY_VOLUME_REDIRECT_STATE3�E_CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE�E_LDR_RESLOADER_RET#6EXCEPTION_DEBUG_INFOU"tagFEEDBACK_TYPE�EPETW_CRITSEC_EVENT_INIT
USN&42_PROCESS_MITIGATION_ASLR_POLICY4=_STREAM_LAYOUT_ENTRY$�?ENCLAVE_CREATE_INFO_VBS_BASIC#�ENDR_USER_MARSHAL_INFO_LEVEL1(�PERFINFO_DYNAMIC_TICK_VETO_REASON8:tagCANDIDATELIST"CALID"RPC_LENGTH-�8ETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT!�EPFILE_FULL_DIR_INFORMATION�ESYSNLS_FUNCTION�E_ETW_HEAP_EVENT_FREE�(_IMAGE_SECTION_HEADERM!BOOT_ENTRY!�ELDR_IMPORT_MODULE_CALLBACK�EPRTL_DEBUG_INFORMATION32�"BUS_DATA_TYPE�_ImageArchitectureEntry�E_MALLOC_FREE_STRUCTG7tagHANDEDNESS<0POINTER_DEVICE_PROPERTY)tagCOLORMATCHTOTARGET&�EIMAGE_CE_RUNTIME_FUNCTION_ENTRY�EPUSEROBJECTFLAGSE6PROCESSOR_POWER_POLICY'�EPJOBOBJECT_ENERGY_TRACKING_STATE!�EWIM_PROVIDER_OVERLAY_ENTRY �EPSYSTEM_FLAGS_INFORMATIONQ$_REG_NOTIFY_INFORMATION'�E_JOBOBJECT_BASIC_UI_RESTRICTIONS+�EPEVENT_TRACE_PROFILE_ADD_INFORMATION�EPIMAGE_DEBUG_DIRECTORY#�EPLDR_MANIFEST_PROBER_ROUTINE�?_REMOTE_NAME_INFOA;�EPPROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATION
u7tagEMR2LOGCOLORSPACEW(�EPPERFINFO_DRIVER_COMPLETE_REQUEST�FILESYSTEM_STATISTICS(y_JOURNAL_CHANGE_INFORMATION_CLASS$�EPRTL_XPRESS_CALLBACK_FUNCTION*ELPSERVICE_REQUIRED_PRIVILEGES_INFOA�:RTL_PROCESS_MODULESzEPPOLYTEXTW<DPROXY_PHASEqEPWMI_LOGGER_INFORMATIONoEPCOVERAGE_MODULE_REQUESTV_RTL_PATH_TYPEjBLPRGBTRIPLEmE_ETW_UMS_EVENT_PARK$gEPPROCESS_HANDLE_TRACING_ENTRY!9_FILE_MAILSLOT_PEEK_BUFFER#�DRTL_PROCESS_VERIFIER_OPTIONSfELPDISCDLGSTRUCTeEPSERVERSILO_STATE"aEPMEMORY_BASIC_INFORMATION32-_EPMANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHESqA_ETW_DISKIO_READWRITE_V3#^EPCIMAGE_DELAYLOAD_DESCRIPTOR/\EPREAD_DIRECTORY_NOTIFY_INFORMATION_CLASS�MOUSEHOOKSTRUCTEX#�"PERFINFO_CC_WORKITEM_ENQUEUEqPUINT16WE_CONSOLE_HISTORY_INFO(ZA_RPC_BINDING_HANDLE_SECURITY_V1_A(�?JOBOBJECT_CONTAINER_IDENTIFIER_V2/TEPSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX-RE_SERVICE_CONTROL_STATUS_REASON_PARAMSWNERPC_SERVER_INTERFACE!�C_ACCESS_ALLOWED_OBJECT_ACE JESTARTING_VCN_INPUT_BUFFERFE_FILE_ATTRIBUTE_TAG_INFOCEDESKTOPENUMPROC
!USHORTBEPPROCESS_ENERGY_VALUES&AEPPLUGPLAY_CONTROL_CONFLICT_LIST@EPEMRFILLPATHA_NIC_RECORD?EPMFT_ENUM_DATA"=ESYSTEM_PAGEFILE_INFORMATION!:E_SECTION_IMAGE_INFORMATION
�2MSG1EPRTL_BALANCED_LINKS/ERTL_SPARSE_BITMAP_CTX �'_ACTIVATION_CONTEXT_STACK#EPTXFS_LIST_TRANSACTIONS& E_ETW_COVERAGE_SAMPLER_PERF_INFO/�.ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION!8DISCDLGSTRUCTW �(_ACCESS_DENIED_OBJECT_ACE_FILE_STANDARD_INFO,�>EVENT_TRACE_STACK_CACHING_INFORMATIONEHW_PROFILE_INFOW@+EMRSETICMPROFILER,SERVICE_NOTIFYA K-IMAGE_RESOURCE_DATA_ENTRY!EPFILE_PIPE_WAIT_FOR_BUFFEREPEVENT_FILTER_EVENT_ID8�4_PROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICYEPSCRUB_DATA_INPUTEPCTEB_ACTIVE_FRAME PROCESS_BASIC_INFORMATION�DIO_SESSION_CONNECT_INFO�6SCRUB_DATA_INPUT#RTL_RESOURCE_DEBUGq_IO_SESSION_STATE�&PREFIX_TABLE_ENTRYF8ETW_PRIORITY_EVENT1�;_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION,
1TRANSACTIONMANAGER_OLDEST_INFORMATIONTRACE_ENABLE_CONTEXTOSID_NAME_USE�2_CI_LOG_MMCSS_STOP(EPPERFINFO_CC_EXTRA_WB_THREAD_INFO
E_TOKEN_ELEVATION${ALTERNATIVE_ARCHITECTURE_TYPE
ELPHELPWININFO	EPBOOT_AREA_INFOE_SYSTEM_POWER_STATUSEpthreadlocinfo%:IMAGE_DYNAMIC_RELOCATION_TABLE4=STREAM_LAYOUT_ENTRY�RTL_FREE_STRING_ROUTINE~BMIDL_SYNTAX_INFO!wctype_t*�D_ALPC_PORT_MESSAGE_ZONE_INFORMATION�"HIBERFILE_BUCKET_SIZE*�DPSECTION_INTERNAL_IMAGE_INFORMATION�DPCOMPRESSED_DATA_INFOv?KEYBDINPUT�tagRAWINPUTDEVICELIST�'tagLC_ID�D_IO_SESSION_CONNECT_INFO"�DPFSCTL_QUERY_FAT_BPB_BUFFER(�DPSYSTEM_CODEINTEGRITY_INFORMATION'I&_EVENT_TRACE_VERSION_INFORMATION�DPCLIENT_ID*�DPSYSTEM_PROCESSOR_POWER_INFORMATION$�_DISPLAYCONFIG_COLOR_ENCODING �-_MIDL_STUBLESS_PROXY_INFO)�DTOKEN_SECURITY_ATTRIBUTE_OPERATION�DHUMPD
23ACL�DPLDRP_CSLIST�DPKUSER_SHARED_DATA�DLPMENUITEMINFOW�CRM_PROTOCOL_ID#AETW_KTIMER2_EXPIRATION_EVENT�DPTP_DEBUG_CLASS�DPAXESLISTA�DPREPAIR_COPIES_OUTPUTRPC_AUTHZ_HANDLE(FILE_MEMORY_PARTITION_INFORMATION�5_HEAP_INFORMATION�DPDRAWPATRECT6@PIMAGE_TLS_CALLBACK#�:_IMAGE_SEPARATE_DEBUG_HEADER20_GDI_TEB_BATCH%�D_EXCEPTION_REGISTRATION_RECORD.�DPSTORAGE_QUERY_DEPENDENT_VOLUME_REQUEST�_WMI_SPINLOCK:BCM_PNP_BIOS_DEVICE_NODE/�DPHEAP_QUERY_INFORMATION_CALLBACK_ROUTINE
�DPCOORD1�DPFSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX!*_PLUGPLAY_EVENT_BLOCK�DPNONCLIENTMETRICSA*_LDR_DLL_UNLOADED_NOTIFICATION_DATA-�.PROCESS_DYNAMIC_EH_CONTINUATION_TARGET�&VM_COUNTERS$�(_RTL_USER_PROCESS_INFORMATION�1LPMINMAXINFOPMIDL_XMIT_TYPE+�_FILE_SYSTEM_RECOGNITION_INFORMATION_PZPCWSTR�DXSAVE_FEATUREwRTL_RB_TREE�D_PO_WAKE_SOURCE_FIXED#�D_PLUGPLAY_CONTROL_DEPTH_DATA�DPROPENUMPROCEX�)_STRING32�DLPTOGGLEKEYS&�DPHEAP_REUSE_THRESHOLD_ACTIVATED�DPKEY_VALUE_ENTRY#�DCONSOLE_SCREEN_BUFFER_INFOEX"�.WMI_IMAGELOAD_INFORMATION32:>MONITORINFOEX�,RPC_SID!�DTXFS_GET_METADATA_INFO_OUT�DPOINTER_INFO�DPEXCEPTION_LOG#�_FILE_MAKE_COMPATIBLE_BUFFER0�4_RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY�TP_CALLBACK_ENVIRON�DPRTL_HEAP_COMMIT_ROUTINE$�DPRTL_PROCESS_VERIFIER_OPTIONS$�D_PERFINFO_DOMAIN_CHANGE_EVENT%�DPMEMORY_EXHAUSTION_INFORMATION�DPSYSTEM_VERIFIER_ISSUE'�DPCI_LOG_SCHEDULER_SLEEP_RESPONSE�LPUWSTR":PCURSORINFO�2_HEAP_RANGE_CREATE�DIMAGE_SYMBOL_EXDPIMAGE_AUX_SYMBOL }DPPOWER_USER_PRESENCE_TYPE|DLPTPMPARAMSzD_StreamInformation6uDSYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION%@7_WMI_JOB_SET_QUERY_INFORMATION qDPOBJECT_TYPES_INFORMATIONmDPPS_ATTRIBUTE�TP_CLEANUP_GROUPkDtagNEWTEXTMETRICEXAfDPCSV_QUERY_FILE_REVISION�8EISA_PORT_CONFIGURATIONcDOUTPUT_DEBUG_STRING_INFO`DEMRFILLPATH!�0LPC_UNREGISTER_PROCESS_MSG3\DSEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATIONDMETARECORD"YDOFFSETINSTANCEDATAANDLENGTH'VD_STORAGE_RESERVE_AREA_DEFINITIONSD_SINGLE_LIST_ENTRY32�"CSVFS_DISK_CONNECTIVITY&�1RTLP_PROCESS_REFLECTION_CONTEXT)�_PROCESS_ENERGY_COMPONENT_TYPE_NUMO._RPC_SECURITY_QOS_V4_A%IDL_CS_CONVERT�&_SYSTEM_TRACE_HEADER�"_PERFINFO_CCSWAP_BUFFER)OD_EVENT_TRACE_GROUPMASK_INFORMATIONo3_IMAGE_AUX_SYMBOL!LDPFILE_INFO_BY_HANDLE_CLASSKDLPEVENTMSG!IDTRACE_ENABLE_FLAG_EXT_ITEMFDPENCRYPTION_BUFFER%�*FILE_IO_COMPLETION_INFORMATIONEDPETW_HEAP_EVENT_REALLOCDDPOSVERSIONINFOEXCDPBITMAPINFO uSYSTEM_ALARM_CALLBACK_ACE,�A_JOBOBJECT_EXTENDED_LIMIT_INFORMATION$?DPJOURNAL_ABSOLUTE_INFORMATION:DPFNSAVE_FORMAT6DPTHREAD_TLS_INFORMATION�9PROCESSOR_IDLE_STATE4DETW_HEAP_EVENT_EXPANSION�_HEAP_SUBSEGMENT_INITb5_TOKEN_USER_CLAIMSz>_REARRANGE_FILE_DATA32 �@ACTCTX_SECTION_KEYED_DATA�_KLOCK_QUEUE_HANDLE4/D_RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY+DLBR_TRACE_EVENT_DATA
�NT_TIB(�_RTL_FEATURE_CONFIGURATION_UPDATE'DLPHEAP_SUMMARY"�7_PERFINFO_PROCESS_PERFCTR32
�LPGUID&RTL_TRACE_ENUMERATE;&DPRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME*$D_PERFINFO_PO_CALIBRATED_PERFCOUNTER&!DPFILE_PIPE_DELETE_SYMLINK_INPUT DPGRADIENT_TRIANGLEDLPWINDOWPOSPVOIDDPCSV_CONTROL_OPDPMETARECORD%DPTHREAD_CYCLE_TIME_INFORMATION!DPPERFINFO_IPI_RECEIVE_DATADPLDR_SECTION_INFOD_DataStreamDSYSTEM_BATTERY_STATE
DRTL_RUN_ONCE_INIT_FN�>_FILE_BASIC_INFORMATIONDLOGBRUSH32�WORKERCALLBACKFUNCDPRTLP_EXIT_THREADc4tagEMRPIXELFORMAT%�;_SYSTEM_PROCESS_ID_INFORMATION-!tagMENUINFO�C_ETW_DISKIO_READWRITE_V2�CRTL_TRACE_BLOCK�CBULK_SECURITY_TEST_DATA!�C_SYSTEM_THREAD_INFORMATIONA,LOAD_DLL_EVENT_DATA�_TRACE_QUERY_INFO_CLASS�CRPCLT_PDU_FILTER_FUNCPCSZ1�CPRTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY�CLPQUERY_SERVICE_CONFIG�CI_RpcFreeCalloutStateFn$�IMAGE_DYNAMIC_RELOCATION32_V2�CPMM_ETW_PAGE_INFO�MESSAGE_RESOURCE_BLOCK�CPFILE_ALLOCATION_INFO�9PEMRSETICMPROFILE 9"_QUERY_FILE_LAYOUT_OUTPUT�CPIMAGE_NT_HEADERS64�CUILANGUAGE_ENUMPROCA&b_THREAD_UMS_INFORMATION_COMMAND�CPHEAP_INFORMATION�"NPLOGFONTW)�CPFILE_IS_REMOTE_DEVICE_INFORMATION+�CACTIVATION_CONTEXT_BASIC_INFORMATION�-PROCESSOR_IDLE_STATES�1tagENHMETARECORD�CPCI_LOG_SCHEDULER_EVENT�C_RTL_PROCESS_BACKTRACES�CPGESTURENOTIFYSTRUCT,�C_FILE_IO_PRIORITY_HINT_INFORMATION_EX*�C_SYSTEM_VERIFIER_FAULTS_INFORMATION,;5_EVENT_TRACE_SYSTEM_EVENT_INFORMATION�CIMAGE_DEBUG_DIRECTORY�1GLYPHMETRICSFLOAT �CIMAGE_ARCHITECTURE_HEADER.�CPROCESS_READWRITEVM_LOGGING_INFORMATION�CPPROCESS_ACCESS_TOKEN
�CHKL�7EVENT_TRACE_PROPERTIES.�CPEVENT_TRACE_PROFILE_CONFIG_INFORMATION �CACCESS_ALLOWED_OBJECT_ACEp'_IMAGE_HOT_PATCH_INFO�CPUSN_RECORD_V4*�_SYSTEM_PHYSICAL_MEMORY_INFORMATIONi_IRQ_GROUP_POLICY�CtagUSEROBJECTFLAGS�CGENERIC_UNBIND_ROUTINE(�CPERFINFO_VIRTUAL_ALLOC_XPARTITION'�CPRTL_IMAGE_MITIGATION_DEP_POLICY�CLPDEBUG_EVENT&�CPPERFINFO_PPM_IDLE_STATE_CHANGE�CPPO_WAKE_SOURCE_TYPEMCA_EXCEPTION/�CDISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION)�=_ACCESS_DENIED_CALLBACK_OBJECT_ACE$U=SE_SET_FILE_CACHE_INFORMATION�CPFILESYSTEM_STATISTICS5�CPSYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION�CLPSERVICE_STATUS_PROCESSY;TP_WORKi@RTL_HEAP_INFORMATION�CPALPC_SECURITY_ATTR!�CPPERFINFO_BOOT_PHASE_START0�C_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION�CFILE_DISPOSITION_INFO~CPRPC_CLIENT_IDjBPRGBTRIPLE*|CCSV_QUERY_FILE_REVISION_FILE_ID_128tCPINVERTED_FUNCTION_TABLELPFXPT16DOT16tagEMRBITBLTrCPXSAVE_SUPPORTED_CPU�$tagEMREOF0pC_EVENT_TRACE_COVERAGE_SAMPLER_INFORMATION&�$IO_COMPLETION_BASIC_INFORMATION"mC_PO_SPR_ACTIVE_SESSION_DATA�+_REASON_CONTEXTterrno_t#�;_FILE_SET_DEFECT_MGMT_BUFFER%iC_KEY_VALUE_PARTIAL_INFORMATION!�PERFINFO_PROCESS_PERFCTR64fCPEVENT_FILTER_DESCRIPTOR!�0PPOWER_STATE_DISABLED_TYPEf;_SYSDBG_VIRTUALBtagEMRRESTOREDC"SECURITY_INFORMATIONbCPVM_COUNTERS_EX2 `CPRTL_GENERIC_FREE_ROUTINE^CtagEXTLOGPEN�:PRECONVERTSTRING~B_MIDL_SYNTAX_INFOqWCHAR!XCPFILE_OBJECTID_INFORMATIONVCPMOUSE_EVENT_RECORDU(MANDATORY_LEVELTCCONSOLE_SELECTION_INFO+�?EVENT_TRACE_SOFT_RESTART_INFORMATIONPC_TOKEN_OWNER,�#MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE PBYTEMCPMEMORY_EXHAUSTION_TYPE$LCPSYSTEM_TIMEOFDAY_INFORMATION(T$MEMORY_RESOURCE_NOTIFICATION_TYPE"I;_SE_LEARNING_MODE_DATA_TYPE'JCSYSTEM_ACTIVITY_MODERATION_STATE 5_CREATE_THREAD_DEBUG_INFOHCPDLGITEMTEMPLATE#-$ETW_TP_EVENT_POOL_TH_MAX_SET/GCPEVENT_TRACE_PROFILE_COUNTER_INFORMATION�tagCOPYDATASTRUCT�SD_GLOBAL_CHANGE_INPUT EC_SYSTEM_VDM_INSTEMUL_INFO#<CPMANAGE_HOT_PATCH_LOAD_PATCH)9C_JOBOBJECT_BASIC_LIMIT_INFORMATION&7CPRTL_FEATURE_CONFIGURATION_TYPE6CLPMOUSEKEYS(U_EVENT_TRACE_SPINLOCK_INFORMATION*5CPEVENT_TRACE_TAG_FILTER_INFORMATION.V#_EVENT_TRACE_PROFILE_REMOVE_INFORMATION,&_TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1"3CSHARED_VIRTUAL_DISK_SUPPORT"EXECUTION_STATE0CTPP_THREAD_DATA_CALLBACK�?OSVERSIONINFOEX2A�A_SERVICE_TABLE_ENTRYA$.CPOWER_THROTTLING_THREAD_STATE+CPFILE_INFORMATION_CLASS4*CPPROCESS_INSTRUMENTATION_CALLBACK_INFORMATION ~6SECTION_BASIC_INFORMATION(C_CFG_CALL_TARGET_INFO5� _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA%CDISPLAYCONFIG_2DREGIONi7PPM_WMI_IDLE_STATE)�BSERVICE_TRIGGER_SPECIFIC_DATA_ITEM"CPCLASSIC_EVENT_ID C_ENCRYPTION_BUFFER�"_POWER_SESSION_TIMEOUTSD=_SERVICE_STATUS_PROCESS
CPZPSTR'v!VIRTUAL_MEMORY_INFORMATION_CLASS�;RPC_TRANSFER_SYNTAX'CPPROCESS_ENERGY_VALUES_EXTENSION*CPFILE_PIPE_CLIENT_PROCESS_BUFFER_V2CPTP_LOG_LEVELCEMRGLSBOUNDEDRECORD4ETW_KQUEUE_DEQUEUE_EVENT#t.SYSTEM_HANDLE_INFORMATION_EX"C_JOURNAL_CLIENT_INFORMATIONCtagEMRPOLYDRAW16"PWNF_CHANGE_STAMP,�<_SYSTEM_QUERY_TIME_ADJUST_INFORMATION&CPRTL_SEGMENT_HEAP_MEMORY_SOURCECLPHW_PROFILE_INFO�BPUPDATELAYEREDWINDOWINFO�_LEARNING_MODE_LOG_LEVEL!�_RTL_IMAGE_POLICY_METADATA�BPMULTIKEYHELPA%�BPVIRTUAL_STORAGE_BEHAVIOR_CODE%�B_BOOT_ENTROPY_SOURCE_NT_RESULT�_ETW_WNF_EVENT_SUBSCRIBEQB_CI_LOG_MMCSS_START'�BPCSV_QUERY_VOLUME_REDIRECT_STATE#�BPRTL_SPARSE_BITMAP_PARAMETER$�$SERVICE_LAUNCH_PROTECTED_INFO
LIST_ENTRY64.�B_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE)� _WIM_PROVIDER_UPDATE_OVERLAY_INPUT�BHTASK%�BPETW_LAST_DROPPED_EVENT_STRUCTPCUSHORT�BPUNWIND_INFO3)=_SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION1�9MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION_PNP_QUERY_RELATION)�BPWMI_EXTENDED_THREAD_INFORMATION64"�BPPERFINFO_SET_DEVICES_STATEANIC_RECORD�BPWOF_EXTERNAL_FILE_ID4�SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION#�4_CM_FULL_RESOURCE_DESCRIPTORB_RTL_STACK_CONTEXT_ENTRY�>tagEMRSETTEXTCOLOR�BTOUCH_HIT_TESTING_INPUT"�BPPERFINFO_PROCESS_PERFCTR32$�TRANSACTION_INFORMATION_CLASS�BPNONCLIENTMETRICS�BPETW_SET_KTIMER2_EVENT�BOBJECT_TYPES_INFORMATION*�SYSTEM_PROCESSOR_POLICY_INFORMATION� _SERVICE_SID_INFO%�BPISECURITY_DESCRIPTOR_RELATIVE�BPENABLECALLBACK�BEMRALPHABLEND'�BPERFINFO_DRIVER_COMPLETE_REQUEST�BDEBUG_EVENT�B_LDR_DATA_TABLE_ENTRY328�BPLDR_APP_COMPAT_DLL_REDIRECTION_CALLBACK_FUNCTIONq2HEAP_RANGE_LOG7�B_IMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATIONf_ENERGY_STATE_DURATION L>PROCESS_FAULT_INFORMATIONxPOWER_IDLE_RESILIENCY*�BPSERVICE_TRIGGER_SPECIFIC_DATA_ITEM+t;_PERFINFO_DOMAIN_CHANGE_EVENT_REASON�_SERVICE_TRIGGER_INFO�BPHEAP_RANGE_CREATE �BRTL_UNICODE_STRING_BUFFER@NETWORK_APP_INSTANCE_EA�+_MUICCENTRY$�BPPERFINFO_CC_WORKITEM_DEQUEUE�&RTL_RESOURCE_DEBUG64�B_SC_ACTION_TYPE�BETW_DEBUG_PRINT_EVENT�BPIO_SESSION_EVENT#�BWIM_PROVIDER_START_INTEGRITY�BPRTL_PROTECTED_ACCESS#�BtagEMREXTCREATEFONTINDIRECTW(ARTL_DEBUG_INFORMATION32�B_OVERLAPPED�ASERVICE_TABLE_ENTRYxBPMIDL_SYNTAX_INFO!�_PROCESS_MITIGATION_POLICYACSV_CONTROL_OP�!SERVICE_DESCRIPTIONWtBPWMI_TCPIPz9LPC_CLIENT_DIED_MSGqB_ALPC_DIRECT_ATTRmBSYSDBG_BUS_DATA"PSECURITY_ATTRIBUTES_OPAQUEjBNPRGBTRIPLE#hB_FILE_ALLOCATED_RANGE_BUFFER�_KUSER_SHARED_DATA%�;_KNONVOLATILE_CONTEXT_POINTERS#Y#RTL_DYNAMIC_HASH_TABLE_ENTRY4eBPACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION �=SILOOBJECT_ROOT_DIRECTORYdBPETW_BUFFER_STATE&bBIR_TIMER_EXTRA_CREATE_PARAMETER_BLPAXISINFO"^BPSUBSYSTEM_INFORMATION_TYPE)WBPSYSTEM_ENTROPY_TIMING_INFORMATIONAUBPRTL_QUERY_DEBUG_VIRTUAL_PROCESS_QUERY_INFORMATION_ROUTINETBLPGCP_RESULTSASBPARRAY_INFOOBPCI_LOG_MMCSS_START�PFLS_CALLBACK_FUNCTIONAXESLISTA#�_HOT_PATCH_INFORMATION_CLASSMBPSERVICE_NOTIFY_1RTL_REFERENCE_COUNT�EMRPOLYLINE#LDR_EXTERNAL_DLL_PATH KB_PERFINFO_SPINLOCK_CONFIG%�/_IMAGE_LOAD_CONFIG_DIRECTORY32�_THREADINFOCLASS�+_MM_ETW_PAGE_INFO_EX#HBPTRANSACTION_ENLISTMENT_PAIR*�%PROCESS_KEEPALIVE_COUNT_INFORMATION'FB_FILE_MAILSLOT_QUERY_INFORMATION"_FILE_GET_QUOTA_INFORMATION�?_QUERY_BAD_RANGES_OUTPUT6<SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATIONBBPROCESS_PRIORITY_CLASSR_PROCESSOR_GROUP_INFO?BPTRACE_LOGFILE_HEADER>BNDR_NOTIFY2_ROUTINE:B_CM_PNP_BIOS_DEVICE_NODE2BPMUILANGINFO1BLPSC_HANDLE)BPRPC_SECURITY_QOS_V5_A*'BPVIRTUALIZATION_INSTANCE_INFO_INPUT%�+RTL_SEGMENT_HEAP_MEMORY_SOURCE%n4_ETW_LAST_DROPPED_EVENT_STRUCT+MCI_ADDR"BLPCONNECTDLGSTRUCTA^"JOB_SET_ARRAYBRTL_STACK_CONTEXT_ENTRY�>ABCFLOAT$_NUMA_NODE_RELATIONSHIP\,PRGNDATA$�=tagPOINTER_DEVICE_CURSOR_TYPE#BUSER_MARSHAL_FREEING_ROUTINEBIMAGE_FUNCTION_ENTRY64"BPSYSTEM_CPU_SET_INFORMATIONBPCUUCSSTR&BPACTCTX_SECTION_KEYED_DATA_2600BEMRRESTOREDC@"EMRLINETO/_WMI_PROCESS_INFORMATION
BPUSN_JOURNAL_DATA_V0�_LAST_EXCEPTION_LOGBPWIN32_FIND_STREAM_DATABFILE_RENAME_INFO,/6_EVENT_TRACE_TIME_PROFILE_INFORMATION3O(JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2BPFILE_LAYOUT_NAME_ENTRY+BPRPC_HTTP_TRANSPORT_CREDENTIALS_V3_WrPERFINFO_DPC_INFORMATION�APTP_DEBUG_FREE_INFO�APRTL_CIRCULAR_LIST_ENTRY�EISA_PORT_DESCRIPTOR><RTL_HASH_ENTRY�APCOMPARTMENT_ID�+_IMAGE_BASE_RELOCATION+�APROCESS_MITIGATION_IMAGE_LOAD_POLICY*�:_ETW_TRACE_PARTITION_INFORMATION_V2 �ACREATE_PROCESS_DEBUG_INFOb.ALPC_HANDLE_ATTR�APEFI_DRIVER_ENTRY_LIST�TRACE_ENABLE_INFO$�AMEMORY_EXHAUSTION_INFORMATIONREMRSETLAYOUT&�$FILE_PIPE_CLIENT_PROCESS_BUFFER!%PGRADIENT_RECT"4'ETW_TP_EVENT_CALLBACK_START�*_PO_SLEEP_DISABLE_REASON!�APPERFINFO_PO_NOTIFY_DEVICE�APPO_WAKE_SOURCE_INFO�ALPSIZEL+�APERFINFO_DRIVER_COMPLETE_REQUEST_RET$�"_PERFINFO_CC_WORKITEM_ENQUEUE�A_ETW_NOTIFICATION_HEADER,�A_EVENT_TRACE_HEAP_TRACING_INFORMATIONK<_RATE_QUOTA_LIMIT_SYSDBG_COMMANDi4CORRELATION_VECTOR$�APACTIVATION_CONTEXT_MSIX_INFO#�AETW_TP_EVENT_TIMER_CANCELLED�ALPSERVICE_TABLE_ENTRY"�@PVECTORED_EXCEPTION_HANDLER?'LPCRITICAL_SECTION BCHAR�9ETW_WNF_EVENT_CALLBACK!N4_FILE_TRACKING_INFORMATION%�AFILE_PROVIDER_EXTERNAL_INFO_V1�APRTL_RETPOLINE_ROUTINES�#_SYSDBG_IO_SPACE�ARPC_PROTSEQ_VECTORA-�APJOBOBJECT_END_OF_JOB_TIME_INFORMATION,�APJOBOBJECT_EXTENDED_LIMIT_INFORMATION� PROCESS_WAKE_INFORMATION)�APSYSTEM_CONTEXT_SWITCH_INFORMATIONv,tagLOGPEN"GEOCLASS`(_XMIT_ROUTINE_QUINTUPLE+�ASYSTEM_LOGICAL_PROCESSOR_INFORMATION'�APPERFINFO_PPM_THERMAL_CONSTRAINT.TOKEN_GROUPS PSE_SIGNING_LEVEL#�APETW_DFSS_START_NEW_INTERVAL#�5FILE_ID_BOTH_DIR_INFORMATION�-SYSTEM_FLAGS_INFORMATION-�APTOKEN_SECURITY_ATTRIBUTES_INFORMATION�?RTL_UNLOAD_EVENT_TRACE32� _COMPUTER_NAME_FORMAT'r&RPC_BINDING_HANDLE_TEMPLATE_V1_A")$_PERFINFO_CC_CAN_WRITE_FAIL!I;SE_LEARNING_MODE_DATA_TYPE+�ADISPLAYCONFIG_SET_TARGET_PERSISTENCE
�IID=BOOT_ENTROPY_NT_RESULT$/UMS_SYSTEM_THREAD_INFORMATION�ALPRASTERIZER_STATUS�@_RPC_PROTSEQ_VECTORW!�A_PERFINFO_BOOT_PHASE_START!�_IMAGE_ROM_OPTIONAL_HEADER�AEVENT_FILTER_DESCRIPTOR�APBITMAPV5HEADER�1_EXCEPTION_RECORD64|3MEMORY_SCRUB_INFORMATION�ALPNEWTEXTMETRICA"�*SECTION_IMAGE_INFORMATION32+�APVIRTUALIZATION_INSTANCE_INFO_OUTPUT&�APSYSTEM_VERIFIER_INFORMATION_EX
�ACTCTX�(tagRID_DEVICE_INFO�A_COMM_FAULT_OFFSETS�APPERFINFO_PO_PRESLEEPnSD_ENUM_SDS_INPUT..TRANSACTIONMANAGER_RECOVERY_INFORMATION�APDESIGNVECTOR�_RPC_CLIENT_ID�APXSAVE_VENDORS"APIMAGE_DYNAMIC_RELOCATION64#~APIMAGE_LOAD_CONFIG_DIRECTORY{AHEAP_SUMMARYuAHWINEVENTHOOK__+;5EVENT_TRACE_SYSTEM_EVENT_INFORMATIONoAPWMI_DISKIO_READWRITE$fAPJOBOBJECT_FREEZE_INFORMATIOND)TIMER_BASIC_INFORMATION�$EMRARCTO�?MENUITEMTEMPLATEHEADERcAPPM_WMI_PERF_STATES_EX]ALPFILE_ID_DESCRIPTOR(XAPRPC_BINDING_HANDLE_SECURITY_V1_A-_WMI_POWER_RECORDVALPSTYLEBUFW'�0WORKER_FACTORY_BASIC_INFORMATION)UAPSYSTEM_VSM_PROTECTION_INFORMATION�!EMRSAVEDCx_ENCLAVE_CREATE_INFO_SGXo9_CM_FLOPPY_DEVICE_DATASA_INPUT_RECORD%MALPSERVICE_FAILURE_ACTIONS_FLAG,�3TOKEN_SECURITY_ATTRIBUTES_INFORMATION$LAPSERVERSILO_BASIC_INFORMATIONJAHFONT__ CAPCM_EISA_SLOT_INFORMATIONAAWNDENUMPROC�0NONCLIENTMETRICS>APEMRSELECTPALETTE":A_ETW_COVERAGE_SAMPLER_STATS!_KLDR_DATA_TABLE_ENTRY6Athreadlocinfo*APSCRUB_DATA_OUTPUT&RTL_RUN_ONCE(A_RTL_DEBUG_INFORMATION32�#IMPORT_OBJECT_TYPE3i(_SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT�"LPENUMTEXTMETRICW(_JOBOBJECT_RATE_CONTROL_TOLERANCE"%APENTER_STATE_SYSTEM_HANDLER(#AETW_UMS_EVENT_DIRECTED_SWITCH_END ATXFS_QUERY_RM_INFORMATION�>MEMORY_BASIC_INFORMATIONAPNIC_RECORD!APETW_REFDEREF_OBJECT_EVENTAPXSTATE_CONFIGURATIONACOMSTATAETW_SET_KTIMER2_EVENT)�@_ETW_COVERAGE_SAMPLER_BLOOM_FILTER�@_PERFORMANCE_DATA$*>_UMS_CREATE_THREAD_ATTRIBUTESF*ENCLAVE_INIT_INFO_VBS/rRTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY'�@PPERFINFO_WORKINGSET_INFORMATION/_SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX!�@PETW_THREAD_SET_NAME_EVENT"�@LPWIN32_FILE_ATTRIBUTE_DATA�@POINTFX(�@PSYSTEM_AUDIT_CALLBACK_OBJECT_ACE�@_TP_DEBUG_FREE_INFOJ�@_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING�@DISPLAYCONFIG_MODE_INFO#�@PFILE_ALLOCATION_INFORMATIONREVENT_INFO_CLASS�PTEBPVOID64�@RPC_PROTSEQ_VECTORW D_REFS_SMR_VOLUME_GC_STATE�@PRTL_RUN_ONCE_INIT_FN@+EMRSETICMPROFILEA�@PCM_POWER_DATA!�@PUSER_THREAD_START_ROUTINE�@MENUITEMINFOW&�@PPS_CPU_QUOTA_QUERY_INFORMATION�'POFSTRUCT�@PPERFINFO_GROUPMASKI0EXCEPTION_POINTERS�3_RTL_SRWLOCK�"tagPOINT"�TRACE_ENABLE_FLAG_EXTENSION)K8SYSTEM_LOW_PRIORITY_IO_INFORMATION�@PLIST_ENTRY323�;JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V13�@PIMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION"�@PTOP_LEVEL_EXCEPTION_FILTER5_PROCESSOR_RECORD$�@PSILOOBJECT_BASIC_INFORMATION1�@PTRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT#tagCWPRETSTRUCT"uRTL_FEATURE_VARIANT_PAYLOAD,(9_JOBOBJECT_SECURITY_LIMIT_INFORMATION"�@PRTL_HEAP_MEMORY_LIMIT_DATA�?REMOTE_NAME_INFO%�+_PERFINFO_DRIVER_MAJORFUNCTION�._MOVE_FILE_DATA32CPOWER_INFORMATION_LEVEL�>BREAK_ON_STATUS_BUFFERe:FILE_PIPE_EVENT_BUFFER�@_KEY_VALUE_ENTRY$�@PGET_SYSTEM_WOW64_DIRECTORY_A�@PIO_COUNTERS=USN_JOURNAL_DATA_V2"�@SEMAPHORE_BASIC_INFORMATION�@PRTL_ACE_DATA�@_DISCDLGSTRUCTA$�&PERFINFO_PPM_IDLE_STATE_ENTER>�@PPROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION�@PWNF_DLLUNLOAD_CALLBACK�!EMRSETWINDOWORGEXUCSV_NAMESPACE_INFO�_RTL_RESOURCE_CATEGORYI"DISPLAY_DEVICEA �PROCESS_MITIGATION_POLICY!�@PACTCTX_SECTION_KEYED_DATA�@FILTERKEYS�?_EVENT_TRACE�_RPC_MESSAGE�@PMIDL_INTERCEPTION_INFO�@PSYSTEM_TRACE_HEADER*�@PPERFINFO_SESSIONCREATE_INFORMATION0_ _SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATEk'_NV_MEMORY_RANGE�0ETW_TP_EVENT_POOL_CLOSE%�_IO_RESOURCE_REQUIREMENTS_LIST�@PMUILANGCFGNODEq;tagLOGPALETTE$/8WMI_DISKIO_IO_REDIRECTED_INIT�:KAFFINITY_EX�@_RTL_RXACT_CONTEXT�tagBITMAPINFOHEADER
"LCTYPE
pPZZSTR�<_IMAGE_THUNK_DATA32 &._OBJECT_BASIC_INFORMATION%�@_SYSTEM_SECUREBOOT_INFORMATIONz@PSERVICE_START_REASON%v@PFSCTL_QUERY_REGION_INFO_INPUT!F$IMAGE_AUX_SYMBOL_TOKEN_DEFj1DMA_CONFIGURATION_BYTE0s@_UUID_VECTOR#%>FILE_END_OF_FILE_INFORMATION�_TRANSACTION_LIST_ENTRYp@PSCONTEXT_QUEUE$�5_TRANSACTION_BIND_INFORMATION#%NDR_CS_SIZE_CONVERT_ROUTINESn@FIND_BY_SID_DATA&_QUERY_FILE_LAYOUT_INPUTk@PALPC_CONTEXT_ATTR�6TOKEN_SOURCE3�6JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE�,POSVERSIONINFOEX2We@PRTL_HEAP_INFORMATION}tagTITLEBARINFOEX#a@PCOMPOUND_ACCESS_ALLOWED_ACE
tLPBOOL/._UNLOAD_DLL_DEBUG_INFO�!ICONINFOEXW%PVALUEW,�'PERFINFO_PFMAPPED_SECTION_INFORMATION,]@PCLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1\@PCI_LOG_SCHEDULER_SLEEP+X@PCRTL_ACTIVATION_CONTEXT_STACK_FRAME-95PEVENT_TRACE_STACK_TRACING_INFORMATION(P@PTIMER_SET_COALESCABLE_TIMER_INFO"PSAVEPOINT_ID+t4_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_AM@FNSAVE_FORMAT�0_OBJECT_TYPE_LIST+�_RTL_FEATURE_CONFIGURATION_OPERATIONx;LPENUMLOGFONTEXDVW<"PPAINTSTRUCT-%ARM64_FNPDATA_FLAGSI@GRADIENT_TRIANGLE"DOCINFOAF@PEMRSTRETCHDIBITS�5SC_EVENT_TYPE!@@PSYSTEM_POWER_CAPABILITIES�SYSTEM_POWER_INFORMATION;�_SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION=@SC_HANDLE__:�3PROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATION�7FILE_NOTIFY_INFORMATION2�;TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT#9@_ETW_KERNEL_HEADER_EXTENSION8H_IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION7FPO_DATA#PSID_HASH_ENTRYEVENT_DESCRIPTOR&6@KENTROPY_INITIALIZATION_ROUTINEP'tagHELPWININFOW&2@ETW_COMPRESSION_RESUMPTION_MODE(0@PLOOKUP_STREAM_FROM_CLUSTER_INPUT,/@PPLUGPLAY_CONTROL_DEVICE_CONTROL_DATA+;5EVENT_TRACE_PEBS_TRACING_INFORMATION&.@PCSE_SET_FILE_CACHE_INFORMATION �$LPSYNCHRONIZATION_BARRIER�!tagEMRPLGBLT0_TOKEN_SID_INFORMATION.$@PPROCESS_MITIGATION_DYNAMIC_CODE_POLICY/#@PPROCESS_MITIGATION_CHILD_PROCESS_POLICY!"@PUSN_TRACK_MODIFIED_RANGES!@PEMRSAVEDC$ @PPS_CPU_QUOTA_SET_INFORMATION@_FP_IEEE_RECORD@PCM_MCA_POS_DATA@PTP_NBQ_FREE_ROUTINE@RPC_FORWARD_FUNCTION$@PTHREAD_PROFILING_INFORMATION!@PFILE_BOTH_DIR_INFORMATION)@_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX&@PSYSTEM_CPU_SET_TAG_INFORMATION@DATEFMT_ENUMPROCEXEX�_FILE_LINK_INFORMATION%�?SL_APPX_CACHE_VALUE_DESCRIPTOR�?LPQUERY_SERVICE_CONFIGA'>1_PERFINFO_PMC_SAMPLE_INFORMATION�?PFILE_ID_INFORMATION#�?RTL_PROCESS_LOCK_INFORMATION� SERVICE_SID_INFO�?_ETW_REF_CLOCK�4_VIRTUALIZATION_RECORD"MEM_EXTENDED_PARAMETER_TYPE_-EMREXTTEXTOUTA7�?PLDR_LOADED_MODULE_ENUMERATION_CALLBACK_FUNCTION�!EMRPAINTRGN!vMEMORY_BASIC_INFORMATION64-"_SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS(�*MEMORY_WORKING_SET_EX_INFORMATION�?LPDISCDLGSTRUCTW"u9_PERFINFO_SYSCALL_EXIT_DATA,�?PEVENT_TRACE_SOFT_RESTART_INFORMATION�?POSVERSIONINFOEX2(�?PRTL_QUERY_DEBUG_INFORMATION_INFO�?LPCURRENCYFMTW)�?PJOBOBJECT_CONTAINER_IDENTIFIER_V2�?_SMALL_RECT*"4_PERFINFO_EXECUTIVE_RESOURCE_CONFIG�?PTP_NBQ_ALLOC_ROUTINE"7_QUERY_SERVICE_LOCK_STATUSA*�<_SYSTEM_SET_TIME_ADJUST_INFORMATION$�?PPLUGPLAY_CUSTOM_NOTIFICATION�?PCGESTUREINFO!RTL_STRING_LENGTH_TYPE,�?_EVENT_TRACE_SOFT_RESTART_INFORMATION�?PPO_WAKE_SOURCE_INTERNAL�tagICEXYZTRIPLE._IMAGE_TLS_DIRECTORY64�?REMOTE_NAME_INFOA'36PROCESS_HANDLE_TRACING_ENABLE_EX#�?EXTENDED_ENCRYPTED_DATA_INFO"0,_ENLISTMENT_CRM_INFORMATIONHRESULT1�?SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE�?PRKCRM_TRANSACTION_BLOB�.tagMOUSEINPUT�?LPCPINFOEXW%?8WOW64_ARCHITECTURE_INFORMATION%�?PENCLAVE_CREATE_INFO_VBS_BASIC�?PIMAGE_ENCLAVE_IMPORT�?COMPRESSED_DATA_INFO%�+_SYSTEM_PROCESS_CLASSIFICATIONZRID_DEVICE_INFO_HID �?PSYSTEM_ACCESS_FILTER_ACE,�?PSYSTEM_QUERY_TIME_ADJUST_INFORMATIONI%tagEMRGLSRECORD�?PIMAGE_FILE_HEADER�?QUERY_BAD_RANGES_OUTPUT�#_SE_IMAGE_SIGNATURE_TYPE3�,_TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT"�*_ETW_UMS_EVENT_DISASSOCIATE�FILE_LINK_INFORMATION�?PCACTCTXA&�>_SYSTEM_HANDLE_TABLE_ENTRY_INFO!�?PSYSTEM_OBJECT_INFORMATION!Z4_IMAGE_BOUND_FORWARDER_REF2�7_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600�?PMANDATORY_LEVEL6%&_RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY�+INPUT_MESSAGE_ORIGIN_IDl"MOUSE_EVENT_RECORD�?_IO_RESOURCE_LIST�1_EXIT_THREAD_DEBUG_INFO�9NPBITMAP�?IMAGE_AUX_SYMBOL_TYPE2_LDR_SECTION_INFO$�?PSET_PURGE_FAILURE_MODE_INPUT�?PMENUITEMTEMPLATEHEADER'k5USER_MARSHAL_MARSHALLING_ROUTINE�?SYSTEM_BASIC_INFORMATION.�PROCESS_MITIGATION_CHILD_PROCESS_POLICY�7THREAD_TEB_INFORMATION-� MEMORY_PARTITION_ATTRIBUTE_INFORMATION �?_RTL_UNLOAD_EVENT_TRACE32Z=tagLASTINPUTINFO�?PEVENT_TRACE
"LGRPID.%8_STREAMS_QUERY_PARAMETERS_OUTPUT_BUFFER�?_PO_WAKE_SOURCE_DEVICE�"_TOKEN_ORIGIN,m6SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA?MM_ETW_PAGE_INFORtagEMRSELECTCLIPPATH�NUMBERFMTA
uLPUINT"4_ETW_DUPLICATE_HANDLE_EVENT|?IMAGE_CHPE_METADATA_X86y?PIMAGE_ENCLAVE_CONFIGx?PDLGITEMTEMPLATEAv?tagKEYBDINPUT�)_X86_CALL_FRAMEt?PIO_APC_ROUTINE+o?_SYSTEM_CRASH_DUMP_STATE_INFORMATIONz PKCRM_MARSHAL_HEADER�*tagEXTLOGFONTW-5/_SERVICE_CONTROL_STATUS_REASON_PARAMSA+�2_CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUEj?PWNF_USER_CALLBACK&f?PPERFINFO_CC_LOGGED_STREAM_INFO"e?PSYSTEM_ERROR_PORT_TIMEOUTS�._SERVICE_START_REASONd?PHARDWARE_COUNTER_TYPE$`?PFILE_VOLUME_NAME_INFORMATION)]?_SYSTEM_WATCHDOG_TIMER_INFORMATION&�RTL_STACK_TRACE_DATABASE_CREATE#Y?tagTouchPredictionParameters-V?PEVENT_TRACE_STACK_CACHING_INFORMATIONQ?PXSAVE_AREA_HEADERP?PRTL_MEMORY_TYPE�9PEMRSETICMPROFILEA"O?PETW_HEAP_EVENT_CONTRACTION3?PRIVILEGE_SET"N?PPROCESSOR_IDLESTATE_POLICYL?_CPTABLEINFO#CRTL_CRITICAL_SECTION_DEBUG32C1SERVICE_TRIGGERI?_LDR_VERIFY_IMAGE_INFO&B?PFILE_PIPE_CREATE_SYMLINK_INPUT ??_RTL_UNLOAD_EVENT_TRACE64<?PCMC_EXCEPTION;?PRTL_UNLOAD_EVENT_TRACE:?LPGLYPHSET*�;PERFINFO_PAGECOMBINE_AGGREGATE_STAT#9?PKEY_WOW64_FLAGS_INFORMATION*7?_PERFINFO_SESSIONCREATE_INFORMATION�(PPATTERN0?PPRIVILEGE_SET�EMRPOLYPOLYLINE"�.PERFINFO_FILE_OPERATION_END.?PTXFS_MODIFY_RM,?BOOT_AREA_INFO"?LPPELARRAY&"_EXFAT_STATISTICS;+_GET_FILEEX_INFO_LEVELS�HIGHCONTRASTW
?FP_1283?_SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION!AUMS_SCHEDULER_STARTUP_INFO$?PERFINFO_FLT_OPERATION_STATUS~-SLIST_ENTRY'?_PROCESS_WS_WATCH_INFORMATION_EX0?PPOWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICESf<ENUMLOGFONTEXW?PPERFINFO_PO_POSTSLEEP$`MEMORY_COMBINE_INFORMATION_EX#	?_SYSTEM_VHD_BOOT_INFORMATION.;_EVENT_INSTANCE_HEADER(?_EVENT_EXTENDED_ITEM_PMC_COUNTERS'_PERFINFO_FILEOBJECT_INFORMATION&?_POWER_THROTTLING_PROCESS_STATE�>PPIXELFORMATDESCRIPTOR%�>ETW_TP_EVENT_TIMER_SET_NTTIMER5�>_PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY0�>PTXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY+�>PRPC_HTTP_TRANSPORT_CREDENTIALS_V3_A+>_JOBOBJECT_ASSOCIATE_COMPLETION_PORT�SECTION_INHERIT�>PBREAK_ON_STATUS_BUFFER(�>PCFG_CALL_TARGET_LIST_INFORMATION'�>DISPLAYCONFIG_DEVICE_INFO_HEADER�>_ABCFLOAT$�>_REPAIR_STORAGE_RESERVE_INPUTSYSDBG_COMMAND�>PVALCONTEXT&�1PERFINFO_CC_READ_AHEAD_COMPLETE#x1SYSTEM_CALL_TIME_INFORMATION�>EMRSETBKCOLOR�>LPCBT_CREATEWND!�>PETW_COVERAGE_SAMPLER_DATA`ACCESS_REASON_TYPE&�>CSV_QUERY_VOLUME_REDIRECT_STATE!�>SYSTEM_POWER_STATE_CONTEXT%�>SYSTEM_HANDLE_TABLE_ENTRY_INFO!�>PEVENT_TRACE_PROPERTIES_V2'�>PPERFINFO_PO_SESSION_CALLOUT_RET�7_ETW_POOL_EVENT�#KSYSTEM_TIME�>EVENT_HEADER�>PVIRTUALIZATION_RECORD$�>PPROCESS_WS_WATCH_INFORMATION+�PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA$�._SYSTEM_FIRMWARE_TABLE_ACTION�>PEMREXTFLOODFILL�>PRPC_UNICODE_STRINGtPHALF_PTR�>ANON_OBJECT_HEADER_V2!�>PSYSTEM_POLICY_INFORMATION�>PTIMELINE_BITMAP�3_PREFIX_TABLE-�>_EVENT_TRACE_STACK_CACHING_INFORMATION �>PMEMORY_BASIC_INFORMATION�>PDROPSTRUCT�>ETW_PER_SESSION_QUOTA#�>PLDR_CREATE_ACT_CTX_LANGUAGE�>PFILE_BASIC_INFORMATION�_TXFS_MODIFY_RM!�1FSCTL_OFFLOAD_WRITE_OUTPUT0�>PFN_RTL_IS_SERVICE_PACK_VERSION_INSTALLED�tagEMRPOLYLINE�>PACCESS_ALLOWED_ACEA!_STARTUPINFOEXW"�9DIALOG_DPI_CHANGE_BEHAVIORS+}>PJOBOBJECT_ASSOCIATE_COMPLETION_PORT_LOAD_ASDATA_TABLEx>PREARRANGE_FILE_DATA32!q>PRTL_RETPOLINE_BINARY_INFOvtagEMRSETARCDIRECTIONg%EXCEPTION_RECORD"._IMAGE_DYNAMIC_RELOCATION32+n>CSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT>q5ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATAk>PROCESSOR_IDLE_HANDLERi>tagGUITHREADINFO'�.DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK29NPDEVMODEW#Z>PRTL_IMAGE_MITIGATION_POLICY%S>PMANAGE_HOT_PATCH_UNLOAD_PATCH�*FOCUS_EVENT_RECORDP>_SYSTEM_INFO�*WNODE_SINGLE_ITEM!J>PPROCESS_FAULT_INFORMATIONG>tagPOINTER_PEN_INFOM,POWER_PLATFORM_ROLE-E>PSYSTEM_PROCESSOR_PROFILE_CONTROL_AREA�0_PERFINFO_CCSWAP_LITE*�VIRTUALIZATION_INSTANCE_INFO_OUTPUT.B_SECURE_SPECULATION_CONTROL_INFORMATION63_EISA_IRQ_CONFIGURATIOND>LPLOGCOLORSPACEA.�_ETW_COVERAGE_SAMPLER_INFORMATION_CLASS)�4MANAGE_WRITES_TO_EXECUTABLE_MEMORYB>_PO_WAKE_SOURCE_TIMERNDR_CCONTEXT">>PLDR_IMPORT_MODULE_CALLBACK'�_IMAGE_RESOURCE_DIRECTORY_STRING_TEB8>LPMONITORINFOEXA5>PPM_WMI_PERF_STATE)2>PERFINFO_DPC_EXECUTION_INFORMATION.>_IMAGE_DEBUG_MISC$(>PUMS_CREATE_THREAD_ATTRIBUTES$%>_FILE_END_OF_FILE_INFORMATION&!>_MEMORY_WORKING_SET_EX_LOCATION>NPTEXTMETRIC[-tagMOUSEKEYS>RPC_SETFILTER_FUNC>OBJECTID>BOOT_RECORD>PCM_EXTENDED_PARAMETER)�*TRANSACTION_PROPERTIES_INFORMATION�6_MUILANGLISTNODE>PFILE_ALL_INFORMATION<SYSGEOCLASS�=PSD_QUERY_STATS_INPUT/�=SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS#�+_OS_DEPLOYEMENT_STATE_VALUES�=PMSLLHOOKSTRUCT�4LPWNDCLASSEXW�=FSCTL_OFFLOAD_READ_INPUT$DISPLAYCONFIG_ROTATION#�FILE_DISPOSITION_INFORMATION�_JIT_DEBUG_INFO�=_RPC_BINDING_VECTOR�7PS_SYSTEM_DLL_INIT_BLOCK,;5EVENT_TRACE_STACK_TRACING_INFORMATIONc2PCZZSTR4�7PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY$3 _SYSTEM_REF_TRACE_INFORMATION�=SCROLLINFO�=PWMI_PNP_RECORD_V3�7SYSDBG_LIVEDUMP_CONTROL�=PPSFEATURE_OUTPUT�=LPFONTSIGNATURE)�=MIDL_WINRT_TYPE_SERIALIZATION_INFO(�=ACCESS_DENIED_CALLBACK_OBJECT_ACE!�=PSILOOBJECT_ROOT_DIRECTORY�=_FILE_PREFETCH�=PFONTSIGNATURE�=RTL_GENERIC_TABLE�+OSVERSIONINFOEXW)�1FILE_VALID_DATA_LENGTH_INFORMATION)�=PSYSTEM_FIRMWARE_TABLE_INFORMATION�$PS_WAKE_REASON&
0FILE_FS_SECTOR_SIZE_INFORMATION� SYSTEM_POOL_INFORMATION�=HEAP_COMMIT_DECOMMIT�ETW_LBR_ENTRY&�=PPERFINFO_FILE_SIMPLE_OPERATION �=PPS_CPU_QUOTA_QUERY_ENTRY#�=SYSTEM_INTERRUPT_INFORMATIONi-tagWINDOWPOSRPC_NS_HANDLE=METAFILEPICT$�=tagPOINTER_DEVICE_CURSOR_INFO
x'HSTR__"r*MEMORY_PRIORITY_INFORMATION�=PIMAGE_IMPORT_DESCRIPTOR�1_IMAGE_ENCLAVE_CONFIG64&�=PACTIVATION_CONTEXT_QUERY_INDEX!�._TXFS_START_RM_INFORMATION&�=PRTL_UMS_SCHEDULER_STARTUP_INFO�=_EVENT_FILTER_EVENT_ID�=ENUMUILANG�=LPHANDLETABLE5tagMSLLHOOKSTRUCT3�=PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION'2PERFINFO_KERNELMEMORY_USAGE_TYPE�=PMFT_ENUM_DATA_V0�=_CONTAINER_VOLUME_STATE3�=_PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY}=PUSN_JOURNAL_DATA_V2�_FILE_REGION_INFOdSTRING641"_HEAP_INFORMATION_CLASS)[6PERFINFO_PO_NOTIFY_DEVICE_COMPLETE-IMAGE_CHPE_RANGE_ENTRYx=PUSN_JOURNAL_DATA�3IO_ERROR_LOG_MESSAGE�_KEY_TRUST_INFORMATION <JOURNAL_INFORMATION_CLASS&>1PERFINFO_PMC_SAMPLE_INFORMATION�_RTL_RESOURCEv=PSERVICE_NOTIFYAu=PPS_CREATE_INFOq=PNEWTEXTMETRIC�6tagEMRSETPIXELVNDR_EXPR_DESC%�5_ETW_CLOCK_CONFIGURATION_EVENT"�_ACCESS_DENIED_CALLBACK_ACEl=_SYSTEM_AUDIT_OBJECT_ACE!_=_SYSTEM_POLICY_INFORMATIONi=PCOEM_STRINGg=PTOKEN_STATISTICS*8tagSOUNDSENTRYWPLONGLONGC2XSAVE_SUPPORTED_CPUf=PVM_COUNTERS_EX!b=PCONTAINER_ROOT_INFO_INPUT-~!EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID _=SYSTEM_POLICY_INFORMATION�0_PROCESS_HEAP_ENTRY;tagEMRPOLYPOLYLINE16\=PREPARSE_DATA_BUFFER_EXX=PLASTINPUTINFO%S=PSE_SET_FILE_CACHE_INFORMATION�6_PROCESS_ACCESS_TOKEN1P=JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2"L=SYSTEM_SCOPED_POLICY_ID_ACEH=tagEMREXTCREATEPEND=SERVICE_STATUS_PROCESS#�)PERFINFO_FILE_PATH_OPERATION?=PREAD_FILE_USN_DATA�(_PO_WAKE_SOURCE_HISTORY<=WMI_CONTEXTSWAP2=PSTREAM_LAYOUT_ENTRY'0=PSYSTEM_HOT_PATCH_REGISTRY_VALUE"PTP_VERSION/=PFILE_STORAGE_INFO='CONSOLE_FONT_INFO"n(_SYSTEM_BIGPOOL_INFORMATION!�SYSTEM_VA_LIST_INFORMATION!� _RTL_UMS_THREAD_INFO_CLASSH2_CACHE_DESCRIPTOR"�2CONSOLE_READCONSOLE_CONTROL)-=_FILE_IS_REMOTE_DEVICE_INFORMATION3&=PSYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION�(ATOM_INFORMATION_CLASS�RTL_BARRIER$=POBJECT_ATTRIBUTES64""=SD_CHANGE_MACHINE_SID_INPUT$=FILE_PIPE_EVENT_SELECT_BUFFER=_BOOT_ENTROPY_NT_RESULT=_NETRESOURCEA=LPCBT_CREATEWNDA
=PPOWER_STATE_TYPE-};_SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT+=SYSTEM_INTERRUPT_CPU_SET_INFORMATIONA0ANIMATIONINFO
LONG64=_TOKEN_STATISTICSS*FILE_PIPE_PEEK_BUFFER�"tagLOGFONTW�0tagEMRCREATEMONOBRUSH0�4STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY-=PSYSTEM_PROCESSOR_FEATURES_INFORMATION#�5QUERY_STORAGE_RESERVE_OUTPUT1=PSYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION
�'_FP_64DMA_SPEED=tagMETAFILEPICT#�<PCLAIM_SECURITY_ATTRIBUTE_V1&�-_COVERAGE_UNLOADED_MODULE_ENTRY."HSAVEDUILANGUAGES__�<LPMODEMSETTINGS�<PEVENT_TRACE_LOGFILEA�9RPC_CLIENT_INFORMATION1
�9BITMAP(�<PGET_FILTER_FILE_IDENTIFIER_INPUT�<_REASON_BUFFER"�<PSYSTEM_CONSOLE_INFORMATION�<MEM_ADDRESS_REQUIREMENTS�%LPCWCHAR.�ACTIVATION_CONTEXT_DETAILED_INFORMATION!�<PPAGE_PRIORITY_INFORMATION:$SIZE g9_FILE_CASE_SENSITIVE_INFO�<LPENUMLOGFONT^#OBJECT_NAME_INFORMATIONFFILE_INFORMATION_CLASS�(PO_WAKE_SOURCE_HISTORY_6_HOT_PATCH_IMAGE_INFO�+LPCUWSTR$T)_SET_PURGE_FAILURE_MODE_INPUT!�<_SYSTEM_HANDLE_INFORMATION�0RECTV1COLORADJUSTMENT>#RTL_MODULE_BASIC_INFO#�<PRTL_USER_PROCESS_PARAMETERSFILE_STAT_INFORMATION�<tagPOINTER_DEVICE_INFO)�<PPERFINFO_KERNELMEMORY_RANGE_USAGE"ULONG*�<PSYSTEM_SET_TIME_ADJUST_INFORMATION	PERFINFO_CCSWAP_TYPE.�<PSYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER"�+OS_DEPLOYEMENT_STATE_VALUES3�&SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM�<_IMAGE_FUNCTION_ENTRY�<PCIMAGE_THUNK_DATA32�1_WMI_JOB_REMOVE_PROCESS,�<_CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1!15CONTAINER_ROOT_INFO_OUTPUT/_ABC$_REMOTE_NAME_INFOW�<KERNEL_USER_TIMES+�<SYSTEM_QUERY_TIME_ADJUST_INFORMATION.�<PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION"�0_LPC_UNREGISTER_PROCESS_MSG �<PREPARSE_GUID_DATA_BUFFER�<PSYSTEM_NUMA_INFORMATION/�<SYSTEM_FEATURE_CONFIGURATION_INFORMATION�_MM_ETW_WORKING_SET_TYPE#�<SERVICE_FAILURE_ACTIONS_FLAG&�<PROCESS_HANDLE_TABLE_ENTRY_INFO�<ALPC_HANDLE_ATTR32x<PXSTATE_CONTEXT(:<_ETW_COVERAGE_SAMPLER_STATUS_INFOu<_UNWIND_INFO&m<PPUBLIC_OBJECT_TYPE_INFORMATION$k<_JOBOBJECT_JOBSET_INFORMATION%fDEDUP_CHUNK_INFORMATION_HASH32h<PEISA_IRQ_CONFIGURATIONd<LPENUMLOGFONTEXWc1RAWKEYBOARD�/_OSVERSIONINFOWb<tagEMROFFSETCLIPRGN\<PETW_BUFFER_CONTEXT�8ETW_HEAP_EVENT_RUNDOWNX<PPEB_LDR_DATAS<PEMRFILLRGNSECURITY_STATUS~9_ENCRYPTED_DATA_INFOP<PHYSICAL_DISK_RECORDG<PRATE_QUOTA_LIMITD<PS_ATTRIBUTE_LIST(�.SYSTEM_FIRMWARE_TABLE_INFORMATION><_RTL_HASH_ENTRYh.NPCHARSETINFO':<ETW_COVERAGE_SAMPLER_STATUS_INFO6<PNETWORK_APP_INSTANCE_EA"4<_KEY_VALUE_FULL_INFORMATION0<CM_POWER_DATA� WMI_WAIT_SINGLE$�(SYSTEM_CALL_COUNT_INFORMATION0�/SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE+<_CM_SONIC_DEVICE_DATA(<PTRACE_VERSION_INFO''<PFILE_FS_SECTOR_SIZE_INFORMATION &<PRTL_TREE_DELETE_FUNCTION(�PROCESS_ENERGY_COMPONENT_TYPE_NUMatagEMRSETCOLORSPACE)K_FILE_ID_EXTD_BOTH_DIR_INFORMATION%<ENUMRESLANGPROCW!<INPUT_TRANSFORM$O*_ETW_TP_EVENT_CALLBACK_CANCEL29LPDEVMODEW(<_RPC_BINDING_HANDLE_TEMPLATE_V1_W <PCM_COMPONENT_INFORMATION<FILE_ALIGNMENT_INFO#�2_CONSOLE_READCONSOLE_CONTROL+
<PALPC_PORT_ASSOCIATE_COMPLETION_PORT<RPC_STATS_VECTOR&<_STREAMS_QUERY_ID_OUTPUT_BUFFER�;IMAGE_TLS_DIRECTORY321�;_TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT�*DATEFMT_ENUMPROCW�;PSTYLEBUF �;_ACL_REVISION_INFORMATION�;HLSURF__�LPRAWMOUSE�;_SCRUB_DATA_OUTPUT#�;PMEMORY_PARTITION_PAGE_RANGEtBOOL1LPXFORM1�;PJOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION%[CM_PARTIAL_RESOURCE_DESCRIPTOR7<_SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION!
ETW_FINALIZE_KTIMER2_EVENT/�;PPROCESS_STACK_ALLOCATION_INFORMATION_EX�;PIMEMENUITEMINFO1�;I_RpcProxyUpdatePerfCounterBackendServerFn �;PERFINFO_PO_NOTIFY_DEVICE�;PCOVERAGE_SECTION_HEADER*�4_MANAGE_WRITES_TO_EXECUTABLE_MEMORYh.PCHARSETINFO�;ETW_HEAP_EVENT_COMMONeIMAGE_NT_HEADERS%�;PKNONVOLATILE_CONTEXT_POINTERS3�;PTRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT�0EMRSETWORLDTRANSFORM
c2PCNZCH.�._PROCESS_DYNAMIC_EH_CONTINUATION_TARGET�;PALETTEENTRY+�;PPERFINFO_PAGECOMBINE_AGGREGATE_STAT�;PFILE_PATH�;PEVENT_FILTER_HEADER�;PPERFINFO_TRACE_HEADER�;PRTL_BITMAP_EX�;_RPC_TRANSFER_SYNTAX%�;PSYSTEM_PROCESS_ID_INFORMATION!W;_WMI_IMAGELOAD_INFORMATION#PKSPIN_LOCKT'tagNMHDR"�;FILE_SET_DEFECT_MGMT_BUFFER"�;PJOBOBJECT_WAKE_INFORMATION�SYSDBG_CONTROL_SPACE�;MMPFN_IDENTITY�;PREAD_USN_JOURNAL_DATA-{;PSYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT�EMRPOLYPOLYGON$y;LPENUM_SERVICE_STATUS_PROCESS
qPWCHARx;PENUMLOGFONTEXDVW�5_SC_EVENT_TYPE$w;PETW_HEAP_EVENT_RUNDOWN_RANGE+v;PPERFINFO_DOMAIN_CHANGE_EVENT_REASONm;LPLOGPALETTE(j;PROCESS_CHILD_PROCESS_INFORMATION�#NPNEWTEXTMETRICW�4PWNDCLASSEXWf;SYSDBG_VIRTUALc;NPEXTLOGFONT,a;_PERFINFO_SPEC_CONTROL_RETPOLINE_EXIT&^;PDEDUP_CHUNK_INFORMATION_HASH32];PTP_WORK_CALLBACK W;WMI_IMAGELOAD_INFORMATION4O(_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2 7QUERY_SERVICE_LOCK_STATUS&S;ETW_COVERAGE_SAMPLER_PERF_STATS3WMIREGGUIDP;PX86_CALL_FRAME L;PMEMORY_SCRUB_INFORMATION�%tagCOMPOSITIONFORM.K;PRETRIEVAL_POINTERS_AND_REFCOUNT_BUFFER*�_SYSTEM_SESSION_BIGPOOL_INFORMATION"F;_SYSDBG_KD_PULL_REMOTE_FILEMNUMBERFMTW4C;PPROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY?;PEMRCREATEPEN<;_FILE_LAYOUT_NAME_ENTRY!9;KENTROPY_RAW_DATA_CALLBACK6;PSTORAGE_RESERVE_ID&4;_CM_PNP_BIOS_INSTALLATION_CHECK1;PWOW64_FUNCTION_CODE640;LPHELPINFO);PEVENT_INSTANCE_HEADER';PRTL_RB_TREE%;_HEAP_INFORMATION_ITEMstagMULTIKEYHELPA+;PEVENT_TRACE_PERFORMANCE_INFORMATION;PSYSTEM_PREFETCH_OPTIONS RPC_BUFPTR;_RTL_RELATIVE_NAME_U1,7FILE_SET_STORAGE_RESERVE_ID_INFORMATION_EXVCURSORSHAPE;PCIMAGE_SECTION_HEADER.;STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE;PRTLP_TAG_INFO#TEXTMETRIC�'USER_MARSHAL_CB$x1_SYSTEM_CALL_TIME_INFORMATION,� _PLUGPLAY_CONTROL_INTERFACE_LIST_DATA&6_CM_ERROR_CONTROL_TYPE-	;FILE_DESIRED_STORAGE_CLASS_INFORMATION;_FILE_STORAGE_INFO;NAMEENUMPROCW.�0_PROCESS_MITIGATION_FONT_DISABLE_POLICY4tagREGISTERWORDW �:PPERFINFO_FILE_READ_WRITE#H_REFS_SMR_VOLUME_INFO_OUTPUT �:PTRANSACTION_NOTIFICATION)�:ETW_TRACE_PARTITION_INFORMATION_V25�:PSYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST!�:PMEMORY_REGION_INFORMATION1K)EVENT_TRACE_OBJECT_TYPE_FILTER_INFORMATION�:PKAFFINITY_EX+�:_SYSTEM_NET_RATE_CONTROL_SET_CONTEXT�:PRTL_PROCESS_MODULES,�:PSYSTEM_SECUREBOOT_POLICY_INFORMATIONuDEP_SYSTEM_POLICY_TYPE�:PEMRFRAMERGN"�:PWMI_JOB_SET_QUERY_NET_RATE�:PCOBJECT_ATTRIBUTES64.�:POUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK�:_SERVICE_STATUS(�:_MEMORY_SHARED_COMMIT_INFORMATION�value_entA�:_CSTRING�:NPRECONVERTSTRING#�:PIMAGE_SEPARATE_DEBUG_HEADER�'PEMRPOLYTEXTOUTW�:PCEVENT_DESCRIPTORpTCHAR~-_SLIST_ENTRY�MIDL_METHOD_PROPERTY�:PALPC_BASIC_INFORMATIONf.NPLOGBRUSH(�:PREMOTE_LINK_TRACKING_INFORMATION�:PEMRCOLORCORRECTPALETTE�:PWMIGUIDINFORMATION"B*SERVICE_REGISTRY_STATE_TYPE$�:FILE_NETWORK_OPEN_INFORMATION!�:PROCESSOR_IDLESTATE_POLICY-�:PMEMORY_PARTITION_PAGEFILE_INFORMATION
5RTL_PROCESS_LOCKS'�:PHEAP_BLOCK_SETTABLE_INFORMATION+�:PPERFINFO_IMAGELOAD_IN_PAGEFILE_INFO!�+FILE_DIRECTORY_INFORMATION(/SYSTEM_PROCESSOR_IDLE_INFORMATION
�:HDC:_MOF_FIELD#�:WORKER_FACTORY_DEFERRED_WORK�:SID_IDENTIFIER_AUTHORITY*�!PRTL_ACTIVATION_CONTEXT_STACK_FRAME�4PWNDCLASSA�:ENCLAVE_TARGET_FUNCTION�:_FILE_ID_INFORMATION#�SharedVirtualDiskSupportType17_HEAP_EVENT_RANGE%{_ALTERNATIVE_ARCHITECTURE_TYPE�%PEMRSETCOLORSPACE&y:PEVENT_EXTENDED_ITEM_PEBS_INDEX v:PERFINFO_SET_POWER_ACTIONs:PPOINTLr:PXMIT_ROUTINE_QUINTUPLE!$_POOLED_USAGE_AND_LIMITS2n:PTRANSACTION_NOTIFICATION_RECOVERY_ARGUMENTl:PHEAP_RANGE_DESTROY h:PPERFINFO_PROCESS_PERFCTR�/FILE_PREFETCH_EXe:_FILE_PIPE_EVENT_BUFFERa:_SYSDBG_MSR4_DPFLTR_TYPE"\:_CONSOLE_SCREEN_BUFFER_INFO!W:_FSCTL_OFFLOAD_READ_OUTPUT$�,SYSTEM_ACPI_AUDIT_INFORMATIONLPLDT_ENTRYQ:PCM_SERIAL_DEVICE_DATAL:PCHANGEFILTERSTRUCTI:RPC_IF_ID_VECTORC:PEX_WNF_SUBSCRIPTIONB:NPLOGFONTA�1_GLYPHMETRICSFLOAT#�._PERFINFO_FILE_OPERATION_END!@:SYSTEM_POOLTAG_INFORMATION=:PRTL_HEAP_TAG<:LANGUAGEGROUP_ENUMPROCWeSERVICE_MAIN_FUNCTIONW6:NPCANDIDATELIST3:MULTI_TIME/:TRACE_VERSION_INFOqLPCUTSTR(+:SYSTEM_VSM_PROTECTION_INFORMATION%':PERFINFO_PPM_IDLE_STATE_CHANGE#$:PRTL_ALLOCATE_STRING_ROUTINE":LPCURSORINFO�%LPCWSTRr3PCUCSSTR7 :ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATIONT1LPCOLORADJUSTMENT:PMOF_FIELD:EISA_MEMORY_TYPEuFILE_STORAGE_TIER_CLASS
�8RAWHID:PPERFINFO_MM_STAT!
:PIMAGE_BOUND_FORWARDER_REF�&TOKEN_MANDATORY_LABEL0:PSYSTEM_PROCESSOR_CYCLE_STATS_INFORMATIONYLPCWPSTRUCT
:_IMAGE_ENCLAVE_IMPORT �5DUPLICATE_EXTENTS_DATA_EX:DYNAMIC_FUNCTION_TABLE:PFILE_OBJECTID_BUFFER:PPOWER_ACTION�TP_POOL�+PAXESLISTW"15_CONTAINER_ROOT_INFO_OUTPUT�TEXTMETRICW@FLOAT4REGISTERWORDW�9PRPC_CLIENT_INFORMATION1�9WMI_IDE_CHANNEL_RECORD�9PERFINFO_FILE_CREATE�9PLDR_RELEASE_ACT_CTX7�9_SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION&*_RTL_DYNAMIC_HASH_TABLE_CONTEXT�9DISPLAYCONFIG_PATH_INFO �9PFSCTL_UNMAP_SPACE_OUTPUT�9PPROCESSOR_IDLE_STATE#KAFFINITY�4HBITMAP__�9_TRACE_LOGFILE_HEADER#N0_ETW_COVERAGE_SAMPLER_MODULE�9PCOBJECT_ATTRIBUTES32�9PTOUCHINPUT�(tagHELPWININFOAB'_RTL_CRITICAL_SECTION"%1RTL_SEGMENT_HEAP_PARAMETERS_HEAP_REGION_INFORMATION�1FILEOFFSET_INFORMATION2�9PMEMORY_PARTITION_MEMORY_EVENTS_INFORMATION�9PEMRSETICMPROFILEW-�_JOBOBJECT_MEMORY_USAGE_INFORMATION_V2�9_FILE_NAME_INFORMATION�*LPKBDLLHOOKSTRUCT�9tagVS_FIXEDFILEINFO#�9_ETW_DISKIO_FLUSH_BUFFERS_V3u0WX86THREAD�9PSRWLOCK#�9PCM_FULL_RESOURCE_DESCRIPTOR�9_ETW_WNF_EVENT_CALLBACK)_FILE_MEMORY_PARTITION_INFORMATION�,MODEMDEVCAPS�9PEVENT_TRACE_PROPERTIES*�9PFSCTL_QUERY_STORAGE_CLASSES_OUTPUT�9LPTRACKMOUSEEVENT#�9SYSTEM_TIMEOFDAY_INFORMATION'�9DISPLAYCONFIG_SOURCE_DEVICE_NAME5)+_JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION%sPERFINFO_INTERRUPT_INFORMATION�9PVIDEO_RECORD
qPNZWCH.�9PFSCTL_GET_INTEGRITY_INFORMATION_BUFFER�9LPBITMAP�9NEWTEXTMETRICEXW�9PPOLYTEXT(-PDEBUGHOOKINFO�9_NDR_USER_MARSHAL_INFO6EMRDELETEOBJECT"�9PENABLE_TRACE_PARAMETERS_V1e*COPYFILE2_COPY_PHASE+�9PTOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE#.3_DUPLICATE_EXTENTS_DATA_EX32�THREADINFOCLASS-�*JOBOBJECT_IO_ATTRIBUTION_CONTROL_FLAGS�9PMUILANGCFGLISTsMULTIKEYHELP�9PIMAGE_HOT_PATCH_BASE~9ENCRYPTED_DATA_INFOx9PLPC_CLIENT_DIED_MSG�7LPHELPWININFOA"s9PPERFINFO_SYSCALL_EXIT_DATAq9PENCLAVE_LOAD_INFO_VBSm9PCM_FLOPPY_DEVICE_DATA e9PFILE_CASE_SENSITIVE_INFO;HEAP_SUBSEGMENT_ALLOC0�'_IMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADERb9RTL_HEAP_STACK_CONTROL^9_RTL_DEBUG_INFORMATION
#WPARAMQ9NPSTYLEBUFz/_WMI_QUEUEP9PLDR_ENUM_RESOURCE_ENTRYN9XSTATE_CONFIGURATION*�_ASSEMBLY_FILE_DETAILED_INFORMATION#6$PERFINFO_PPM_STATE_SELECTION�-QUERY_BAD_RANGES_INPUTH9PFILETIMEG9PACE_HEADER%E9PROCESS_EXTENDED_ENERGY_VALUES$@9_ENUM_SERVICE_STATUS_PROCESSW:9PWMI_TXR79HICON__29PDEVMODEW09QUERYHANDLER b)_ETW_SET_MARK_INFORMATION,9PPROCESS_JOB_MEMORY_INFO&*9PSYSTEM_SYSTEM_DISK_INFORMATION+(9JOBOBJECT_SECURITY_LIMIT_INFORMATION$9PPEBS_DS_SAVE_AREA64"9_ETW_OPTICALIO_INITX'CONTEXT_CHUNK9_IPT_TRACE_EVENT_DATA%9PETW_TP_EVENT_TIMER_EXPIRATION%�_WIM_PROVIDER_INTEGRITY_STATUS&9_PROCESS_MEMORY_EXHAUSTION_INFO 9FILE_MAILSLOT_PEEK_BUFFER
9RPC_SECURITY_QOS_V5_W9COVERAGE_MODULE_REQUEST9tagACTCTXW�8CONTEXT%LDR_RELOCATE_IMAGE_RETURN_TYPE�8PHSM_OPCODE4�8PSYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT�8LPMOUSEMOVEPOINT�tagICONMETRICSA!�8ETW_HEAP_EVENT_CONTRACTION+�8_EVENT_TRACE_PROFILE_ADD_INFORMATION�8RTL_AVL_COMPARE_ROUTINE?$RTL_SPARSE_BITMAP_RUN"OPERATION_ID�!PEMRPAINTRGNtagRAWINPUTDEVICE%�FILE_REPARSE_POINT_INFORMATION�8PCOMBOBOXINFO �8PAGE_PRIORITY_INFORMATION#�8SYSTEM_BOOT_LOGO_INFORMATION�8_EISA_PORT_CONFIGURATION!�8PLUID_AND_ATTRIBUTES_ARRAY(�8PSYSDBG_LIVEDUMP_CONTROL_ADDPAGESr#PLUGPLAY_EVENT_CATEGORYB'CRITICAL_SECTION�8WMI_PUSHLOCK �SYSTEM_DEVICE_INFORMATION$./LDR_DLL_NOTIFICATION_FUNCTION�3PREFIX_TABLE�8tagRAWHID.�8PETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT�8PETW_HEAP_EVENT_RUNDOWN$80_FILE_SFIO_VOLUME_INFORMATION�8NPWNDCLASS�!POWER_STATE-�RTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS;�3_PROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATIONDCSV_CONTROL_PARAM!�8SYSTEM_PROCESS_INFORMATION%'EMRSTRETCHDIBITS-WMI_POWER_RECORD3�(_TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE!�)SYSTEM_CONSOLE_INFORMATION6�8_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRY#�8PMEMORY_WORKING_SET_EX_BLOCK&�-_MM_ETW_WORKING_SET_PFN_RUNDOWN�8POINTFLOAT�8LDR_DATA_TABLE_ENTRY�8PHARDWARE_COUNTER_DATA�8PFILE_ACCESS_INFORMATION�8EMRSTRETCHBLT+�8RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN%_EVENT_TRACE_INFORMATION_CLASS/�8EVENT_TRACE_SESSION_SECURITY_INFORMATION)LDR_DLL_UNLOADED_NOTIFICATION_DATA|8NTFS_STATISTICS_EX2_locale_tstruct)i8_LOOKUP_STREAM_FROM_CLUSTER_OUTPUT+J*_FSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT'e8MEMORY_ENCLAVE_IMAGE_INFORMATIONDa8PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED&_8RTLWOW64_CROSSPROCESS_WORK_ITEM
�._RECTL2M8PMEMORY_PARTITION_CONFIGURATION_INFORMATION�4DRAWTEXTPARAMS=PEXCEPTION_POINTERS*I8PSYSTEM_LOW_PRIORITY_IO_INFORMATIONF8_ETW_PRIORITY_EVENT6EMRSELECTOBJECTB8_RPC_SECURITY_QOSterrcode�/IMPORT_OBJECT_NAME_TYPE!y_LDR_DLL_NOTIFICATION_DATA&?8_WOW64_ARCHITECTURE_INFORMATION368PCACTIVATION_CONTEXT_SECTION_KEYED_DATA_260038tagALTTABINFO%-8PWMI_DISKIO_IO_REDIRECTED_INIT(8LPSOUNDSENTRYW1_WMI_IMAGEID_INFORMATION-%8STREAMS_QUERY_PARAMETERS_OUTPUT_BUFFER'�(_SYSTEM_SPECIAL_POOL_INFORMATION!8_DISCDLGSTRUCTW8PIMAGE_AUX_SYMBOL_EX�"tagEVENTMSG&8_SYSTEM_LEAP_SECOND_INFORMATION"�,KEY_HANDLE_TAGS_INFORMATION1*LPPOLYTEXTA 8WINDOW_BUFFER_SIZE_RECORD8PSYSTEM_POWER_LEVEL�!EMRBEGINPATH�7_RPC_SYNTAX_IDENTIFIER�7PFILE_NOTIFY_INFORMATION0�3_SYSTEM_ACTIVITY_MODERATION_USER_SETTINGS1�7ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600LPFXPT2DOT30�PTEB_ACTIVE_FRAME)�4TXFS_LIST_TRANSACTION_LOCKED_FILES�7_ENCLAVE_INIT_INFO_SGX�4SERVICE_NOTIFY_1 �7PIMAGE_DYNAMIC_RELOCATION$� _DELETE_STORAGE_RESERVE_INPUT�7PHELPWININFOA�7_SYSDBG_LIVEDUMP_CONTROL�7ARM64_FNPDATA_CR�7EISA_IRQ_DESCRIPTOR(�7PPERFINFO_DPC_ENQUEUE_INFORMATION"�7PPROC_THREAD_ATTRIBUTE_LIST!�7PERFINFO_PROCESS_PERFCTR32Q6_IMAGE_OPTIONAL_HEADER�7PKEY_BASIC_INFORMATIONi)PMEASUREITEMSTRUCT&B.CRITICAL_PROCESS_EXCEPTION_DATA�7TIMERPROC�7_EVENT_TRACE_PROPERTIES FCHAR�7_THREAD_TEB_INFORMATION+�7PSYSTEM_ACTIVITY_MODERATION_APP_TYPE�7PMUISTRINGPOOL�7PTEXTMETRIC5�7_PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY �7_PS_SYSTEM_DLL_INIT_BLOCK%�7PPO_HIBER_FORCE_DISABLE_REASON'�7SYSDBG_LIVEDUMP_CONTROL_ADDPAGES�7PPORT_DATA_INFORMATION�7PWMIREGGUIDW�7tagWNODE_METHOD_ITEM�7PPS_MEMORY_RESERVE�7HWINSTA__�7PMENU_EVENT_RECORD!�7PPERFINFO_CC_FLUSH_SECTIONA_CSV_CONTROL_OP�)LPSTYLEBUFA)PERFINFO_BOOT_PREFETCH_INFORMATION�FILE_LINKS_INFORMATION�7_UNICODE_PREFIX_TABLE;EMRPOLYPOLYLINE16'�1RPC_HTTP_TRANSPORT_CREDENTIALS_W �0POWER_STATE_DISABLED_TYPE�7_TIME_FIELDS�7ETW_POOL_EVENT |7ETW_COVERAGE_SAMPLER_DATAy7POWER_SESSION_RIT_STATE
u7EMRr7_RTL_RXACT_LOG�3PFULL_PTR_XLAT_TABLES%(USER_MARSHAL_ROUTINE_QUADRUPLE�3LOGFONTl7PIMECHARPOSITION":)SECURITY_QUALITY_OF_SERVICEg7PPPM_WMI_IDLE_STATEh_SERVICE_TABLE_ENTRYW"e7PERFINFO_MEMORY_INFORMATION>a7_PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION^7RTL_TRACE_HASH_FUNCTION#Z7OBJECT_DIRECTORY_INFORMATION
/ABCS7MONITORINFOP7PWNF_USER_SUBSCRIPTION4L7_SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATIONI7PHANDEDNESS*�%_WIM_PROVIDER_SUSPEND_OVERLAY_INPUTA!STARTUPINFOEXWD7_FILE_ID_EXTD_DIR_INFOFXPT16DOT16$@7WMI_JOB_SET_QUERY_INFORMATIONPRTL_REFERENCE_COUNT)�PIMAGE_IA64_RUNTIME_FUNCTION_ENTRY#r_PERFINFO_CC_LAZY_WRITE_SCAN<7PORT_DATA_INFORMATION67TTPOLYCURVE/7PHEAP_EVENT_RANGE(.7PPERFINFO_KERNELMEMORY_USAGE_TYPE'!LDR_DLL_LOADED_NOTIFICATION_DATA2*7PFILE_SET_STORAGE_RESERVE_ID_INFORMATION_EX"�_SYSTEM_MEMORY_LIST_COMMAND-'7_MANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHESN$REG_ACTION#7EXTLOGFONTAMENUTEMPLATEA�*CODEPAGE_ENUMPROCW�#_KSYSTEM_TIME�1tagEMRSETMAPPERFLAGS 7LPMENUITEMINFOA�3SC_ENUM_TYPE7PSID_AND_ATTRIBUTESKWELL_KNOWN_SID_TYPE�1FILE_LEVEL_TRIM_RANGEA0tagANIMATIONINFO"7LPQUERY_SERVICE_LOCK_STATUS7QUOTA_LIMITS#7PKEY_VALUE_LAYER_INFORMATION,�PLUGPLAY_CONTROL_TARGET_RELATION_DATA_TOKEN_MANDATORY_POLICY� MINIMIZEDMETRICS%7PRPC_BINDING_HANDLE_OPTIONS_V17_FPO_DATA-7PSYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT7PNDR_CORRELATION_INFO#V4_PROCESS_SESSION_INFORMATION7WX86TIB�!HIGHCONTRASTA�6FULL_PTR_XLAT_TABLES2tagEMRELLIPSE�6PIMAGE_TLS_DIRECTORY$�6PFILE_FS_OBJECTID_INFORMATION�6MUILANGLISTNODE�6PWNDCLASS�6PWOW64_CPUAREA_INFO#KSPIN_LOCK_QUEUE_NUMBER6�6JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V1,�6_PROCESS_STACK_ALLOCATION_INFORMATION�6PFILE_LEVEL_TRIM#�6_KEY_VALUE_BASIC_INFORMATION!RTL_HEAP_MEMORY_LIMIT_INFO�6_LOGICAL_DISK_DEFRAG.8,FILE_QUERY_METADATA_OPTIMIZATION_OUTPUT�6EMRSETPIXELV,�6PFILE_IOSTATUSBLOCK_RANGE_INFORMATION-NPABC)#_ETW_TP_EVENT_TIMER_CANCEL_NTTIMER�6_RPC_SECURITY_QOS_V3_A.�6SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION�'_USER_MARSHAL_CB_TYPE�6HARDWARE_COUNTER%�6_VIRTUAL_STORAGE_BEHAVIOR_CODE�6PFE_EXPORT_FUNC^AXISINFOWS.PSFEATURE_CUSTPAPER�_LOGICAL_DISK_EXTENTS)T$_MEMORY_RESOURCE_NOTIFICATION_TYPEqPWSTR�6PTOKEN_SOURCE�6USN_RECORD_V2 �6PO_FIXED_WAKE_SOURCE_TYPE'�6PETW_PARTITION_INFO_EXTENSION_V2�6PKSPIN_LOCK_QUEUE+�6PSYSTEM_ELAM_CERTIFICATE_INFORMATIONy$WMI_DELAY_EXECUTION�tagINPUT__time64_t�6PROCESS_ACCESS_TOKEN�PS_CREATE_STATE�6LPMEMORYSTATUS-�6DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS�6PSD_ENUM_SDS_OUTPUT-�6PHEAP_PERFORMANCE_COUNTERS_INFORMATION�6PWMI_DPI_RECORD�6_SCRUB_DATA_INPUT~6_SECTIONBASICINFO{6WINSTAENUMPROC>%WNDCLASSEX!x6PRETRIEVAL_POINTERS_BUFFERw6NEARPROCt6_POWER_SESSION_WINLOGONp6KEY_PID_ARRAY�(SCOPE_TABLE_AMD64-m6_SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA+f6PSYSTEM_DMA_GUARD_POLICY_INFORMATIONa6LPNETRESOURCEW]6PHOT_PATCH_IMAGE_INFO�4HKL__*Y6PPERFINFO_PO_NOTIFY_DEVICE_COMPLETEW6PPERFINFO_VTL_CHANGEU6SYSTEM_PREFETCH_STATS,95PEVENT_TRACE_PEBS_TRACING_INFORMATIONO6PIMAGE_OPTIONAL_HEADER32)I/PROCESS_SYSTEM_RESOURCE_MANAGEMENTt2TP_ALPCM6PWINDOWS_OS_OPTIONS)1_RTL_DYNAMIC_HASH_TABLE_ENUMERATORI6LPCBTACTIVATESTRUCT�!tagHIGHCONTRASTA
uUINT32!�_EVENT_TRACE_PROPERTIES_V2'G6PTHREAD_LAST_SYSCALL_INFORMATIONE6_PROCESSOR_POWER_POLICY"PACCESS_MASK*>6_SYSTEM_SESSION_POOLTAG_INFORMATION:6PIRQ_DEVICE_POLICY�/OSVERSIONINFOW%_IDL_CS_CONVERTQ!_PERFINFO_FILE_DIRENUM66PCONTEXT_EX%�_ETW_CREATEDELETE_OBJECT_EVENT(36_PROCESS_HANDLE_TRACING_ENABLE_EX�CANDIDATEFORM)K)EVENT_TRACE_TAG_FILTER_INFORMATION%42PROCESS_MITIGATION_ASLR_POLICY(.+SYSTEM_FEATURE_CONFIGURATION_TYPE/ENHMETAHEADER,-6PEVENT_TRACE_TIME_PROFILE_INFORMATION+6PIO_SESSION_STATE)6HDC__#6_EXCEPTION_DEBUG_INFO6WINDOWPLACEMENT6_EVENT_BASIC_INFORMATION6NPTEXTMETRICW6PEMRDELETEOBJECT*6PSYSTEM_PLATFORM_BINARY_INFORMATION�MM_ETW_WORKING_SET_TYPE�0EMRCREATEMONOBRUSH(6_LEARNING_MODE_OBJECT_INFORMATION$�_SharedVirtualDiskSupportType6PPPM_WMI_PERF_STATES"6LPEVENTLOG_FULL_INFORMATION_,_RGNDATA$r_GENERIC_BINDING_ROUTINE_PAIR�*LPEXTLOGPEN32AXESLIST6TITLEBARINFO�3LOGFONTA%�5DISPLAYCONFIG_PATH_SOURCE_INFO'm_PS_MITIGATION_AUDIT_OPTIONS_MAP.�_SYSTEM_CODEINTEGRITYPOLICY_INFORMATION� UMS_THREAD_INFO_CLASS�)_NT_TIB64�1KEY_FLAGS_INFORMATION�5PMESSAGE_TRACE_USER�5FILE_OBJECTID_BUFFER.�5PJOURNAL_SET_KEY_USER_FLAGS_INFORMATION�5_MUILANGCFGLIST�5PFILE_NAMES_INFORMATION�5PFILE_RENAME_INFORMATION#(FILE_PIPE_REMOTE_INFORMATION�5PEXFAT_STATISTICS�5HEAP_INFORMATION�tagRAWINPUT �5_SCRUB_PARITY_EXTENT_DATA�.RECTL'2_THREAD_LAST_SYSCALL_INFORMATION!�5_DUPLICATE_EXTENTS_DATA_EX�5LPCURSORSHAPE�5PSC_EVENT_TYPE�5PAPCFUNC�5LPCLSID!�_SYSTEM_DEVICE_INFORMATION� tagEMRGDICOMMENT2EMRELLIPSE�5PWMI_PNP_RECORD_V4#g)_WMI_IMAGELOAD_INFORMATION64%�5PETW_TP_EVENT_CALLBACK_DEQUEUE
tPINT32+g"IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY*�5PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA$\1_SYSTEM_HIBERFILE_INFORMATION$�5ETW_CLOCK_CONFIGURATION_EVENT�OVERLAPPED_ENTRY*�5PPERFINFO_EXECUTIVE_RESOURCE_CONFIG�5PCWNF_STATE_NAME.�5PSYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1PHANDLE&�5WMI_EXTENDED_THREAD_INFORMATION�5_CI_LOG_SCHEDULER_SLEEP'�5PETW_COVERAGE_SAMPLER_BLOOM_INFO�PS_PROTECTION �5HSYNTHETICPOINTERDEVICE__$q_IMAGE_RUNTIME_FUNCTION_ENTRY$�5_QUERY_STORAGE_RESERVE_OUTPUT)�5SYSTEM_EXTENDED_THREAD_INFORMATION�5PENUMLOGFONTEXDV#�5TRANSACTION_BIND_INFORMATIONGLOBALHANDLE�!EMRINVERTRGN#&,PERFINFO_PAGE_RANGE_IDENTITY$�5PFILE_COMPRESSION_INFORMATION$�5PFILE_ID_BOTH_DIR_INFORMATION}5SYSTEM_NUMA_INFORMATION%t5PKEY_CONTROL_FLAGS_INFORMATION@n5PCACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA)k5USER_MARSHAL_UNMARSHALLING_ROUTINEe5PPERFINFO_MEM_RESET_INFO`5PTOKEN_USER_CLAIMS�FIRMWARE_TYPE*W5PKEY_SET_VIRTUALIZATION_INFORMATION�%EMRSCALEWINDOWEXTEXU5PIMAGE_THUNK_DATA(P5_LOOKUP_STREAM_FROM_CLUSTER_INPUT*�*_TRANSACTION_PROPERTIES_INFORMATION6jRTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICYJ5PCOMPAREITEMSTRUCTG5tagMSGBOXPARAMSW)C5SYSTEM_KERNEL_DEBUGGER_INFORMATION.?5_SYSTEM_SESSION_MAPPED_VIEW_INFORMATION!�FILE_IO_PRIORITY_HINT_INFO-95PEVENT_TRACE_PROFILE_EVENT_INFORMATION$65_SECURITY_DESCRIPTOR_RELATIVE:�%_SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION35PFILE_STANDARD_INFO"/5PCONTAINER_ROOT_INFO_OUTPUT!)5PEISA_MEMORY_CONFIGURATION(5PVALENTA H_SE_VALIDATE_MAPPING_TYPE,�$DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY�-LPNONCLIENTMETRICSW�LUNICODE_STRING$�2THREAD_CYCLE_TIME_INFORMATION'5PCOVERAGE_REQUEST_CODES#5CALINFO_ENUMPROCEXA" 5PPROCESSOR_PERFSTATE_POLICY)5_SYSTEM_POWER_STATE_DISABLE_REASON!5LPCREATE_THREAD_DEBUG_INFO�2MOFRESOURCEINFOrHARDWARE_COUNTER_TYPE5MSLLHOOKSTRUCT*5_FILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER5PRTL_PROCESS_LOCKS"5USER_MARSHAL_SIZING_ROUTINE*�PLUGPLAY_CONTROL_USER_RESPONSE_DATA5PPROCESSOR_RECORD#�4_RTL_USER_PROCESS_PARAMETERS�4HARDERROR_MSGg$_RTL_RXACT_OPERATION�4NPWNDCLASSEXW!�4PPROCESS_MITIGATION_POLICY�4LPWNDCLASSA�4_SERVICE_NOTIFY_18�4PPROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICY'n_FILE_CASE_SENSITIVE_INFORMATION*�4_TRANSACTIONMANAGER_LOG_INFORMATIONXDEVMODEA$�4_SERVERSILO_BASIC_INFORMATION� SYSTEM_POOLTAG�4_WNF_TYPE_ID0�4_SYSTEM_VERIFIER_CANCELLATION_INFORMATION"�4CM_FULL_RESOURCE_DESCRIPTOR�4LPMENUITEMINFO*�4_TXFS_LIST_TRANSACTION_LOCKED_FILES�4tagBITMAPFILEHEADER�4_ETW_CREATE_HANDLE_EVENT#�ETW_HEAP_EVENT_RUNDOWN_RANGE�4PTOKEN_GROUPS�4_GENERATE_NAME_CONTEXT%�4_FILE_MAILSLOT_SET_INFORMATION�4HBITMAP�4LPDRAWTEXTPARAMS �IMAGE_ROM_OPTIONAL_HEADER1�4PSTORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY&�4_SYSTEM_DEVICE_DATA_INFORMATION0�4PRTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY�)MAT2�DLGTEMPLATE�4LPHKL{"REGISTERWORD�NDR_RUNDOWN�tagACCEL)�_PERFINFO_DRIVER_COMPLETIONROUTINEm_KSPIN_LOCK_QUEUE
�4TP_JOB�4PRTL_BARRIER*�4PMANAGE_WRITES_TO_EXECUTABLE_MEMORY�4PICONINFOEX(�4PRPC_HTTP_TRANSPORT_CREDENTIALS_A�4CS_TYPE_NET_SIZE_ROUTINE�4VIRTUALIZATION_RECORD'�4PETW_TRACE_PARTITION_INFORMATION�PMIDL_STUB_MESSAGE!~4_HEAP_EXTENDED_INFORMATION�_FILE_COMPRESSION_INFO*t4RPC_HTTP_TRANSPORT_CREDENTIALS_V2_Ap4PETW_OPTICALIO_READWRITE�PERFINFO_VTL_CHANGE$n4ETW_LAST_DROPPED_EVENT_STRUCT(h _RTL_IMAGE_MITIGATION_ASLR_POLICY�#CONDITION_VARIABLE-"_WMI_JOB_SEND_NOTIFICATION_INFORMATION.k4PMEMORY_PHYSICAL_CONTIGUITY_INFORMATIONf4PCORRELATION_VECTOR�)BITMAPV4HEADERc4EMRPIXELFORMAT'`4PPERFINFO_CC_READ_AHEAD_COMPLETE%^4PERFINFO_CC_LOGGED_STREAM_INFO�PAINTSTRUCT Z4IMAGE_BOUND_FORWARDER_REF"V4PROCESS_SESSION_INFORMATIONR4_EVENT_FILTER_EVENT_NAME{_PS_PROTECTED_SIGNER N4FILE_TRACKING_INFORMATION'K4PCI_WINDOWS_LOCKDOWN_RESTRICTION DEBUG_CONTROL_SPACE_ITEM+F4PREFS_DEALLOCATE_RANGES_INPUT_BUFFER�CLSID#_MONITOR_DISPLAY_STATE!C4_PERFINFO_CC_FLUSH_SECTION#@4PPERFINFO_DEBUG_EVENT_REASON
 TUCHAR?4PSE_ACCESS_REQUESTyLPTITLEBARINFOEX&=4PERFINFO_PO_SESSION_CALLOUT_RET(94_FILE_REMOTE_PROTOCOL_INFORMATION&4POINTER_TOUCH_INFO)"4PERFINFO_EXECUTIVE_RESOURCE_CONFIG*�%_PERFINFO_SYSTEM_MEMORY_INFORMATION4PRTL_HEAP_TAG_INFO;4PRTL_QUERY_DEBUG_VIRTUAL_PROCESS_READ_MEMORY_ROUTINE4LPTTPOLYGONHEADER(qIMAGE_IA64_RUNTIME_FUNCTION_ENTRY!4ETW_DUPLICATE_HANDLE_EVENT$4PETW_UMS_EVENT_CONTEXT_SWITCH
4PALPC_TOKEN_ATTR4_ENABLE_TRACE_PARAMETERS4PRTL_BITMAP!4LPSERVICE_PRESHUTDOWN_INFO&4ETW_TRACE_PARTITION_INFORMATION�3_SC_ENUM_TYPE*�3_FSCTL_QUERY_STORAGE_CLASSES_OUTPUT0#SYSTEM_FEATURE_CONFIGURATION_CHANGE_STAMP*�/_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE�3PPREFIX_TABLE�3PPATHNAME_BUFFERKSOUNDSENTRYA�3_SE_AUDIT_INFO(�,RESOURCEMANAGER_BASIC_INFORMATION�3HSPRITE�)_PROFILE_SOURCE_INFO#�"_HEAP_AFINITY_MANAGER_ENABLE�3PHANDLER_ROUTINE!�3PHEAP_AFFINITY_SLOT_ASSIGN�3_MIDL_STUB_MESSAGE;�3PPROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATION(�3PFILE_FS_FULL_SIZE_INFORMATION_EX~IO_COUNTERSASERVERSILO_STATE�KINTERRUPT_ROUTINE-�3_TOKEN_SECURITY_ATTRIBUTES_INFORMATION$�3_DEFINE_STORAGE_RESERVE_INPUT�3PIO_ERROR_LOG_MESSAGE"�3PIMAGE_DYNAMIC_RELOCATION320�3PSYSTEM_ACTIVITY_MODERATION_USER_SETTINGS�3PRTL_SRWLOCK%J,FILE_ATTRIBUTE_TAG_INFORMATION�3FILE_REGION_OUTPUT"_CM_VIDEO_DEVICE_DATA�3PPLUGPLAY_EVENT_CATEGORY�3LPLOGFONT�3tagEMRFRAMERGN�3PCM_PERF_COUNTERS |3_MEMORY_SCRUB_INFORMATIONy3PFIBER_START_ROUTINEu3tagRGBTRIPLEr3PCUCSCHARo3IMAGE_AUX_SYMBOL(N3_GET_FILTER_FILE_IDENTIFIER_INPUT�tagMENUITEMINFOAJ3_RPC_PROTSEQ_ENDPOINT�.LPMOUSEINPUT"�FILE_PIPE_LOCAL_INFORMATIONFFILE_GET_EA_INFORMATION)G3_FILE_IO_PRIORITY_HINT_INFORMATION&C3REDIRECTION_FUNCTION_DESCRIPTOR(A3PRPC_BINDING_HANDLE_SECURITY_V1_W@3PCZPCSTR=3_FINDEX_SEARCH_OPS:3KLDR_DATA_TABLE_ENTRY6463EISA_IRQ_CONFIGURATION03PACL".3DUPLICATE_EXTENTS_DATA_EX32+3PROPENUMPROCEXW'3SYSTEM_ALARM_ACE !3PREAD_USN_JOURNAL_DATA_V0/3PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATIONtCM_RESOURCE_TYPE,3PPERFINFO_YIELD_PROCESSOR_INFORMATION!3PSYSTEM_MEMORY_INFORMATION%3DISPLAYCONFIG_PATH_TARGET_INFO
"REGSAM.
3_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER3PFILE_STREAM_INFO3PWMIREGGUID#uintptr_t�+_MODEMSETTINGS3PPOWER_PLATFORM_ROLE.�2_FSCTL_GET_INTEGRITY_INFORMATION_BUFFER+�2_SYSTEM_KERNEL_VA_SHADOW_INFORMATION�-DEVICE_FLAGS�2PMOFRESOURCEINFO&.RTL_FEATURE_CONFIGURATION_TABLE�2METAHEADER�2tagEMRCREATECOLORSPACE�2CM_COMPONENT_INFORMATION�2LPCBT_CREATEWNDW)�2PFINDFIRSTACTIVATIONCONTEXTSECTION�2PDISPLAY_DEVICEAqRPC_WSTR�2PETW_HEAP_EVENT_ALLOCeIMAGE_NT_HEADERS64�2PLDR_DATA_TABLE_ENTRY64�2PMSG*�2PFILE_INITIATE_REPAIR_OUTPUT_BUFFER�2DMA_CONFIGURATION_BYTE1$�2PEVENT_TRACE_BUFFER_CALLBACKA%�2_THREAD_CYCLE_TIME_INFORMATIOND)_TIMER_BASIC_INFORMATION$�2_CM_EISA_FUNCTION_INFORMATION�2PMUICCHEADER�2PCREDIRECTION_DESCRIPTOR �2FILE_STANDARD_INFORMATION�._SI_COPYFILE#CLSN�2PSID_NAME_USE"�2_SYSTEM_ERROR_PORT_TIMEOUTS-&WNDCLASSW
qLPWSTRs'FILE_ID_TYPE
�2CIEXYZ�0PAXISINFOW#�2PCONSOLE_READCONSOLE_CONTROL�2HEAP_RANGE_CREATE�2CI_LOG_MMCSS_STOP*�2CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE ~2RETRIEVAL_POINTERS_BUFFERx2PTP_ALPC_CALLBACKs2PRTLP_HEAP_TAGGING_INFOn2PHEAP_RANGE_LOG�#_TOKEN_DEFAULT_DACL!i2PWMI_DISKIO_READWRITE_INIT0_PLEX_READ_DATA_REQUESTg2PWNODE_SINGLE_ITEMg!WMI_JOB_INFORMATIONf2PQUERYACTCTXW_FUNC&�_ETW_THREAD_EVENT_SUBPROCESSTAG#UINT_PTRc2PCCH4_2PPROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION'Z2PSYSTEM_MEMORY_USAGE_INFORMATION)W2SECTION_INTERNAL_IMAGE_INFORMATIONK2LPOUTLINETEXTMETRIC/J2PJOBOBJECT_LIMIT_VIOLATION_INFORMATION_2F2PCACHE_DESCRIPTORC2_XSAVE_SUPPORTED_CPU>2PJOB_SET_ARRAY&72PETW_WNF_EVENT_NAME_SUB_RUNDOWN&-2PPROCESS_MITIGATION_ASLR_POLICY
)2PFP_80!&2_SHRINK_VOLUME_INFORMATION(2_SYSTEM_CODEINTEGRITY_INFORMATION2PCIMAGE_THUNK_DATA�&_RTL_HANDLE_TABLE_ENTRY�/_IMAGE_LINENUMBER�BOOT_ENTROPY_SOURCE_ID2LPOSVERSIONINFO&POINTER_TYPE_INFO2LPLOGCOLORSPACEW2EMRRECTANGLE"2_PERFINFO_IDLE_STATE_CHANGE
2PDISPATCHER_CONTEXT� SYSTEM_POWER_POLICY�!OBJECT_ATTRIBUTES322PROCESS_TLS_INFORMATION�_FP_IEEE_OPERATION_CODE2localeinfo_struct�1_WINDOWS_OS_OPTIONS�1WMI_JOB_REMOVE_PROCESS�1_IMAGE_ENCLAVE_CONFIG32�1DLGITEMTEMPLATE�1EXIT_THREAD_DEBUG_INFO�_PNP_VETO_TYPE$_RTL_WORK_ON_BEHALF_TICKET_EXuGLYPHSET�1PGLYPHMETRICSFLOAT&PERFINFO_FILEOBJECT_INFORMATION�1_PERFINFO_CC_READ_AHEAD�1PTP_POOL�1PEMRSETMAPPERFLAGS3SERVICE_FAILURE_ACTIONSA�1tagSTYLEBUFW(�1_RPC_HTTP_TRANSPORT_CREDENTIALS_W�1IMAGE_ENCLAVE_CONFIG�1_FILE_LEVEL_TRIM_RANGEuSYSTEM_FEATURE_ID�1LPSTICKYKEYS�(TRACE_GUID_REGISTRATION�1PUNICODE_STRING32$�PROCESS_DEVICEMAP_INFORMATION*�1_FILE_VALID_DATA_LENGTH_INFORMATION�1RTL_BACKOFF'�1PRTLP_PROCESS_REFLECTION_CONTEXT_UNIVERSAL_NAME_INFOA"!SECURITY_DESCRIPTOR_CONTROL�1ENHMETARECORD"�1_FSCTL_OFFLOAD_WRITE_OUTPUT
LPVOID�1HARDWAREINPUT
�1PVALUEC/RPC_SECURITY_QOS_V4_W/PRPC_INTERFACE_GROUP)�1PRTL_PROCESS_MODULE_INFORMATION_EX�1EXCEPTION_RECORD64�1PMINMAXINFO�1HIMCC__�1LPWIN32_STREAM_ID#�1PWMI_IMAGELOAD_INFORMATION32*�1PPROCESS_COMMIT_RELEASE_INFORMATION�1_FILEOFFSET_INFORMATION�1_KEY_FLAGS_INFORMATION�+IMAGE_BASE_RELOCATION{1PWTSSESSION_NOTIFICATION$v1PSYSTEM_CALL_TIME_INFORMATIONs1ETW_STACK_CACHING_CONFIG%p1PFILE_FS_DATA_COPY_INFORMATION'�-FILE_NOTIFY_EXTENDED_INFORMATION n1USN_TRACK_MODIFIED_RANGESj1_DMA_CONFIGURATION_BYTE0�GUIDc1tagRAWKEYBOARD`1_IELF_HANDLENTSTATUS$Y1PSYSTEM_HIBERFILE_INFORMATION*]_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIGRAWINPUTDEVICET1PCOLORADJUSTMENTR1LPREGISTERWORD,N1PTRANSACTIONMANAGER_BASIC_INFORMATION�RPC_SECURITY_CALLBACK_FNL1PSTACK_WALK_EVENT_DATAqLPWCHJ1PERFINFO_PROCESS_INSWAP
G1LPCTCHC1_SERVICE_TRIGGER'<1PPERFINFO_PMC_SAMPLE_INFORMATION*91PERFINFO_IMAGELOAD_IN_PAGEFILE_INFO"-1PPROCESS_WINDOW_INFORMATIONE0JOBOBJECT_WAKE_FILTER (1PSYSTEM_FLUSH_INFORMATION#%1_RTL_SEGMENT_HEAP_PARAMETERS1PRPC_INTERFACE_TEMPLATEW1PIMAGE_OPTIONAL_HEADER�FILE_ACCESS_INFORMATION1_ENCLAVE_CREATE_INFO_VBS-1PTRANSACTIONMANAGER_OLDEST_INFORMATION	1I_RpcProxyFilterIfFn11_SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION-�,RESOURCEMANAGER_COMPLETION_INFORMATION1WMI_IMAGEID_INFORMATION&�0PPERFINFO_PPM_PERF_STATE_CHANGE%�#_QUERY_FILE_LAYOUT_FILTER_TYPE+_FILE_STORAGE_RESERVE_ID_INFORMATION�0_ETW_TP_EVENT_POOL_CLOSE/@-JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION(�0_WORKER_FACTORY_BASIC_INFORMATION(�0FINDFIRSTACTIVATIONCONTEXTSECTION�0tagEMRSETWORLDTRANSFORM�0_IMAGE_FILE_HEADER�_SILO_USER_SHARED_DATA�0PEFI_DRIVER_ENTRY*�0TRANSACTION_ENLISTMENTS_INFORMATION�0RTL_TREE_WALK_FUNCTION�LPTRIVERTEX(�0TXFS_ROLLFORWARD_REDO_INFORMATION+�0PSYSTEM_WRITE_CONSTRAINT_INFORMATION�0PPROCESS_HEAP_ENTRY$R&_HEAP_BLOCK_EXTRA_INFORMATION�0PPERFINFO_CCSWAP_LITE"�0PLPC_UNREGISTER_PROCESS_MSG4�0_SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION�,RTL_OSVERSIONINFOEX2W�$RTL_DISK_SPEED_INFO�0LPAXISINFOW�0PEMRCREATEMONOBRUSH\$_RTL_DISK_SPACE_INFO�0NONCLIENTMETRICSA'�0PPERFINFO_SAMPLED_PROFILE_CONFIG�0POBJECT_TYPE_LIST-�0PROCESS_MITIGATION_FONT_DISABLE_POLICY&�0PLUGPLAY_CONTROL_CONFLICT_ENTRY�0_RTL_STACK_CONTEXT'�0SYSTEM_AUDIT_CALLBACK_OBJECT_ACE/�SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION�0KCRM_TRANSACTION_BLOB�0_GHOSTED_FILE_EXTENT�0HMENU
�0LPRECT�0MUILANGUAGES|0PICONMETRICSAx0LPSCROLLBARINFOs0PWX86THREAD%p0SYSTEM_PAGEFILE_INFORMATION_EX&k0BOOT_ENTROPY_SOURCE_RESULT_CODEe0PRTL_LFG_RNG_STATE,b0_PERFINFO_YIELD_PROCESSOR_INFORMATION#^0ETW_TP_EVENT_POOL_TH_MIN_SET'�FILE_FS_VOLUME_FLAGS_INFORMATION![0PREFS_SMR_VOLUME_GC_ACTION1� _EVENT_TRACE_LBR_CONFIGURATION_INFORMATION#Y0KEY_OPEN_SUBKEYS_INFORMATION�TP_CALLBACK_ENVIRON_V35LPWIN32_FIND_DATAWS0tagENUMLOGFONTEXDVW#L0PETW_COVERAGE_SAMPLER_MODULEI0_EXCEPTION_POINTERS&�_PROCESS_MEMORY_ALLOCATION_MODEC0PJOBOBJECT_WAKE_FILTER?0LPANIMATIONINFO!<0tagPOINTER_DEVICE_PROPERTY$60PFILE_SFIO_VOLUME_INFORMATION%40PSYSTEM_FIRMWARE_TABLE_HANDLER-0PGDI_TEB_BATCH)0PVARIABLE_NAME�._PHYSICAL_CHANNEL_RUN8#0PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION$ 0PQUERY_BAD_RANGES_INPUT_RANGE0LPDOCINFO0PTOKEN_SID_INFORMATION&0TOKEN_BNO_ISOLATION_INFORMATION+0PPROCESS_HANDLE_SNAPSHOT_INFORMATION*0PSET_DAX_ALLOC_ALIGNMENT_HINT_INPUT0PSERVICE_NOTIFYW'
0_FILE_FS_SECTOR_SIZE_INFORMATION'
0PAPPLICATIONLAUNCH_SETTING_VALUE0r_RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY�(PMINIMIZEDMETRICS#	0PREQUEST_OPLOCK_INPUT_BUFFER)�SYSTEM_PHYSICAL_MEMORY_INFORMATION�QUERY_SERVICE_CONFIGA0PETW_SET_TIMER_EVENT#�*_SECTION_IMAGE_INFORMATION320NCCALCSIZE_PARAMS%�/PIMAGE_LOAD_CONFIG_DIRECTORY32�/PIXELFORMATDESCRIPTOR�/FONTENUMPROCA�/EMRSELECTPALETTE'�/PEVENT_TRACE_VERSION_INFORMATION�/PFILE_PREFETCH_EX+�/DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER%�/PERFINFO_SET_DEVICES_STATE_RET$�/PRTL_DYNAMIC_HASH_TABLE_ENTRY�/HSPRITE__�PUOW�NUMBERFMT%�/_FILE_SFIO_RESERVE_INFORMATION%._TXFS_WRITE_BACKUP_INFORMATION�/_CURDIR�/_PROCESS_ENERGY_VALUES�/LPPANOSE�/PIMAGE_LINENUMBER�/PINITIAL_TEB�/USN_RECORD_UNION�$_TOKEN_TYPE�/LPENUMTEXTMETRICA"�/_PERFINFO_SET_DEVICES_STATE1�PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY�LDR_RELEASE_ACT_CTX�RTL_AVL_NODE
V,POINTL#�.SYSTEM_FIRMWARE_TABLE_ACTION&�RTL_SPARSE_BITMAP_CTX_OPERATIONy-TPMPARAMS%�%_QUERY_BAD_RANGES_OUTPUT_RANGE�/tagEMRTRANSPARENTBLT&�/PETW_AUTOBOOST_NO_ENTRIES_EVENT'EMRFORMAT�VRF_TRIAGE_CONTEXT�/PEMRSETDIBITSTODEVICE-�/_VIRTUALIZATION_INSTANCE_INFO_INPUT_EX1�/PSYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE�/PRTL_OSVERSIONINFOW�/LPUNLOAD_DLL_DEBUG_INFO�/PPSFEATURE_CUSTPAPER*�/DISPLAYCONFIG_TARGET_PREFERRED_MODE)�/ACCESS_ALLOWED_CALLBACK_OBJECT_ACE+EVENT_TRACE_PROFILE_LIST_INFORMATION~/_SE_SIDx/PWMI_QUEUEu/_FILE_RENAME_INFORMATIONq/MEMORY_WORKING_SET_BLOCKi/HHOOK__�EMRPOLYLINETOc/PERFINFO_TRACE_ENTRY`/LPWIN32_FIND_DATA"\/PPERFINFO_MEMORY_NODE_ENTRYPUMS_COMPLETION_LIST!Y/PROCESSOR_PERFSTATE_POLICY" #SERVICE_PREFERRED_NODE_INFO{"REGISTERWORDA#O/PACCESS_ALLOWED_CALLBACK_ACE-M/JOBOBJECT_CPU_RATE_CONTROL_INFORMATION*I/_PROCESS_SYSTEM_RESOURCE_MANAGEMENT>/PRPC_SECURITY_QOS_V4_W;/MIDL_METHOD_PROPERTY_MAP,5/SERVICE_CONTROL_STATUS_REASON_PARAMSA-//PRTL_PROCESS_DLL_NOTIFICATION_FUNCTION
pPTCHAR9__C_ASSERT__,/_WOW64_CPUAREA_INFO "/RPC_AUTH_KEY_RETRIEVAL_FN##SYSTEM_KERNEL_DEBUGGER_FLAGS /_POWER_MONITOR_INVOCATION%/_UMS_SYSTEM_THREAD_INFORMATION/PWMI_PROCESS_INFORMATION,�MEMORY_PARTITION_TRANSFER_INFORMATION/PPLUGPLAY_CONTROL_CLASS
/_CLASSIC_EVENT_ID%	/MANAGE_HOT_PATCH_QUERY_PATCHES)�.PSYSTEM_PROCESSOR_IDLE_INFORMATION#�._WMI_IMAGELOAD_INFORMATION323�._FILE_IO_COMPLETION_NOTIFICATION_INFORMATION�.PINIT_ONCEILARGE_INTEGER)�._SYSTEM_FIRMWARE_TABLE_INFORMATION+�.PSYSTEM_HYPERVISOR_QUERY_INFORMATION!�.PTXFS_START_RM_INFORMATION�.PEMRGDICOMMENT#�.PPERFINFO_FILE_OPERATION_END�.PUUCSSTR(�.PDPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK�.PMAXVERSIONTESTED_INFO�.PREASON_CONTEXT#_RTL_SPLAY_LINKS�.PDEVMODEA4�._FILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EXJ$RTL_RETPOLINE_ROUTINES�.ETW_HEAP_EVENT_REALLOCqPUSHORT�_ACE_HEADER&Q-_PLUGPLAY_CONTROL_CONFLICT_LIST0�.PACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION�.PMOUSEINPUT�NLSVERSIONINFO�.PPERFINFO_VIRTUAL_ALLOC.�.PPROCESS_DYNAMIC_EH_CONTINUATION_TARGET�.PPHYSICAL_CHANNEL_RUN�.PSI_COPYFILE�(LOGBRUSH�.EMRCREATEBRUSHINDIRECT�.MOVE_FILE_DATA32�.LPRECTL!�._ETW_THREAD_SET_NAME_EVENT �.NTFS_EXTENDED_VOLUME_DATA+�.PFILE_SYSTEM_RECOGNITION_INFORMATION�.PSD_GLOBAL_CHANGE_INPUT�.SERVICE_START_REASON�.HEAP_RANGE_DESTROY�.PTHREAD_NAME_INFORMATION�._DesiredStorageClassRCM_INT13_DRIVE_PARAMETER!.IMAGE_DYNAMIC_RELOCATION32|.LPOSVERSIONINFOEXA I#PROCESS_INFORMATION_CLASS�!EMRFLATTENPATHENUMTEXTMETRIC.{.PETW_COVERAGE_SAMPLER_INFORMATION_CLASSoTHREAD_WORKLOAD_CLASSz.PRTL_PROCESS_HEAPSx._ETW_OPTICALIO_READWRITE$t._SYSTEM_HANDLE_INFORMATION_EXn._WNF_STATE_NAME_LIFETIMEh.LPCHARSETINFOf.LPLOGBRUSHe.pthreadmbcinfob._ALPC_HANDLE_ATTR'�%ACTIVATION_CONTEXT_ASSEMBLY_DATAV.GENERIC_BINDING_INFOtINT32S._PSFEATURE_CUSTPAPERO.RPC_SECURITY_QOS_V4_A#F._ETW_OPTICALIO_FLUSH_BUFFERS-�&EVENT_TRACE_PROFILE_ADD_INFORMATION_V2'B._CRITICAL_PROCESS_EXCEPTION_DATA?.PRTL_SPLAY_LINKS>.PREGISTERCLASSNAMEW6;.RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY�)NPSTYLEBUFA$�+PERFINFO_DRIVER_MAJORFUNCTION8.PDEBUG_PRINT_CALLBACK5.PEMRANGLEARC1.PSD_QUERY_STATS_OUTPUTTP_WAIT_RESULT/.UNLOAD_DLL_DEBUG_INFO").POPERATION_START_PARAMETERS $.POBJECT_BASIC_INFORMATION�(_PS_PROTECTED_TYPEF .ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING�_OUTLINETEXTMETRICA$.TXFS_WRITE_BACKUP_INFORMATION.RTL_BALANCED_LINKS.PCIMAGE_TLS_DIRECTORY"G QUERY_STORAGE_RESERVE_INPUT*.SYSTEM_SYSTEM_PARTITION_INFORMATION/._TRANSACTIONMANAGER_RECOVERY_INFORMATION4�RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY
HANDLE/.PRTL_READ_MAPPED_MEMORY_EXCEPTION_FILTER.PFE_IMPORT_FUNCN_TP_TRACE_TYPE�-PSECURITY_ATTRIBUTES#�_TRACE_ENABLE_FLAG_EXTENSIONpINT8�-PDEDUP_FILE_OPERATION�-HGLRC%�-NTFS_FILE_RECORD_OUTPUT_BUFFER�-_KEY_BASIC_INFORMATION�-VM_COUNTERS_EX%�-PPROCESS_WORKING_SET_OPERATION�-HW_PROFILE_INFOA3&LOGCOLORSPACE# #_SERVICE_PREFERRED_NODE_INFO"�-FILE_LINK_ENTRY_INFORMATION�-PPROCESSOR_IDLE_STATES#�&RTL_CRITICAL_SECTION_DEBUG64�-PNONCLIENTMETRICSW �-STARTING_LCN_INPUT_BUFFER�-PEMRPOLYGONpPZZTSTR&�-PCOVERAGE_UNLOADED_MODULE_ENTRY"�-_QUERY_SERVICE_LOCK_STATUSW#ULONGLONG�-MEMORYSTATUSEX$�-SYSDBG_LIVEDUMP_CONTROL_FLAGS#�-_PROCESSOR_POWER_POLICY_INFO=,_XSAVE_CET_U_FORMATRPROCESSOR_GROUP_INFO"�-_MEMORY_COMBINE_INFORMATION�-PDEVICE_FLAGS"LPCOLORREFCODEPAGE_ENUMPROCA�-PENTER_STATE_HANDLER �-PMIDL_STUBLESS_PROXY_INFO�-PZPWSTR�-PCLUNICODE_STRING__time32_t(�-PFILE_NOTIFY_EXTENDED_INFORMATION�$GRADIENT_RECT�-PQUERY_BAD_RANGES_INPUT&�-PMM_ETW_WORKING_SET_PFN_RUNDOWN((_RPC_BINDING_HANDLE_SECURITY_V1_W.FSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUT(POWER_USER_PRESENCE_TYPE �-_SYSTEM_FLAGS_INFORMATION|-PSLIST_ENTRYy-tagTPMPARAMS#u-_RTL_SPARSE_BITMAP_PARAMETER�'_RTL_PROCESS_HEAPSi-WINDOWPOS%,IMAGE_RESOURCE_DIRECTORY_ENTRYe-MEMORY_RESERVE_TYPE$b-PO_HIBER_FORCE_DISABLE_REASON"DOCINFO-	$_KEY_VALUE_PARTIAL_INFORMATION_ALIGN64_-tagEMREXTTEXTOUTA[-MOUSEKEYSW-_RTL_HEAP_TAGS-PTRACE_ENABLE_CONTEXT_EX'�_RTL_SPARSE_BITMAP_CTX_OPERATION%Q-PLUGPLAY_CONTROL_CONFLICT_LIST!K-_IMAGE_RESOURCE_DATA_ENTRY_STORAGE_RESERVE_IDH-PDMA_SPEEDE-NLSTABLEINFO0@-_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION�_FP_IEEE_COMPARE_RESULT}#_FILE_LAYOUT_INFO_ENTRY}#FILE_LAYOUT_INFO_ENTRY=-EX_WNF_CALLBACK2-TP_TASK_CALLBACKS*�PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA�'WMI_DPI_RECORD+-tagEMRANGLEARC(-LPDEBUGHOOKINFO!I#_PROCESS_INFORMATION_CLASS$'-PSC_NOTIFICATION_REGISTRATION$-_SD_ENUM_SDS_ENTRY -CM_MONITOR_DEVICE_DATA-FINDEX_INFO_LEVELS*K)_EVENT_TRACE_TAG_FILTER_INFORMATION-_ACCESS_ALLOWED_ACE-PIMAGE_CHPE_RANGE_ENTRYl+SERIALKEYSA3-PJOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V2	-CREATE_USN_JOURNAL_DATA-PREARRANGE_FILE_DATA-PEISA_PORT_DESCRIPTOR(�,_SYSTEM_SINGLE_MODULE_INFORMATION.�,PRESOURCEMANAGER_COMPLETION_INFORMATION�,PRTL_OSVERSIONINFOEX2W(PEMRPOLYLINETO16�,RECONVERTSTRING�,PETW_LBR_ENTRY$�,NTFS_FILE_RECORD_INPUT_BUFFER(�,PTP_CLEANUP_GROUP_CANCEL_CALLBACK*�,PASSEMBLY_FILE_DETAILED_INFORMATION�,PSYSTEMTIME�,PCOVERAGE_MODULES�,MENUITEMTEMPLATE6�,JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2�"KEY_FULL_INFORMATION!�,PIMAGE_COFF_SYMBOLS_HEADER  _DEBUG_CONTROL_SPACE_ITEM$�,_FILE_COMPRESSION_INFORMATION$�,_REFS_DEALLOCATE_RANGES_RANGE#�,_KEY_HANDLE_TAGS_INFORMATION�,DOCINFOW'�,_PERFINFO_CC_SCHEDULE_READ_AHEAD�,_IMAGE_HOT_PATCH_HASHES�MFT_ENUM_DATA
�,PLBLOB�,LPCOMMTIMEOUTS�,_DRAWPATRECT�,_RPC_SID�,_HEAP_EVENT_RANGE_CREATE3�,PTRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT%�,_SYSTEM_ACPI_AUDIT_INFORMATION�&_SL_APPX_CACHE�,_MODEMDEVCAPS%~*_PLUGPLAY_CONTROL_INSTALL_DATA)�,_RESOURCEMANAGER_BASIC_INFORMATION (RTL_WORK_ON_BEHALF_TICKET�,EDITWORDBREAKPROCW�,PFLOAT128�,LPSERVICE_TABLE_ENTRYW �,PETW_TP_EVENT_POOL_CREATE(�,RTL_PROCESS_MODULE_INFORMATION_EX|,HCOLORSPACERPC_CWSTRPACCESS_TOKENy,POINTER_DEVICE_TYPEt,PLOGPEN�_TRACE_ENABLE_INFO4q,_PROCESS_INSTRUMENTATION_CALLBACK_INFORMATIONm,REFS_VOLUME_DATA_BUFFER-W&_SYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT'h,_PUBLIC_OBJECT_BASIC_INFORMATIONE%_RTL_UMS_COMPLETION_LISTd,PFILE_MODE_INFORMATION\,LPRGNDATAY,HDESK__V,_POINTL
�$EMRARCT,LPENUM_SERVICE_STATUSAR,SERVICE_NOTIFYO,PPERFINFO_IPI_SEND_DATA+�'_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A&J,_FILE_ATTRIBUTE_TAG_INFORMATION%F,SYSTEM_MEMORY_LIST_INFORMATIONA,_LOAD_DLL_EVENT_DATA;,PXSAVE_CET_U_FORMAT/3,PFILE_QUERY_METADATA_OPTIMIZATION_OUTPUT".,PENLISTMENT_CRM_INFORMATION,,PVIRTUAL_STORAGE_TYPE+,PREPAIR_COPIES_INPUTPRpcProxyPerfCounters
EVENT_DATA_DESCRIPTOR$&,_PERFINFO_PAGE_RANGE_IDENTITY&,PIMAGE_RESOURCE_DIRECTORY_ENTRY,PSECURITY_CAPABILITIES�!_LDR_DDAG_NODEtHFILE,PCUQUAD,PPM_IDLE_STATE_BUCKET_EX�"WATCHDOG_HANDLER_ACTION+,JOURNAL_SET_KEY_SECURITY_INFORMATION,,PRTL_USER_PROCESS_EXTENDED_PARAMETERS�UUID�+LPCUWCHAR@+EMRSETICMPROFILEW�+PFLASHWINFO �+PCM_PARTIAL_RESOURCE_LIST"FILE_STREAM_INFORMATION4DPFLTR_TYPE�+FILETIME&�+_RTL_SEGMENT_HEAP_MEMORY_SOURCE"�+_FILE_DIRECTORY_INFORMATION�+LPMDICREATESTRUCT�+MODEMSETTINGS�+REGISTERWORDENUMPROCA%�+PPERFINFO_DRIVER_MAJORFUNCTION#�+_MEMORY_PARTITION_PAGE_RANGE�+_CLIENT_CALL_RETURN�+MUICCENTRY�+NPIMEMENUITEMINFO�+PRTL_OSVERSIONINFOEXW'�+_RTL_QUERY_DEBUG_VIRTUAL_PROCESS�LDR_SERVICE_TAG_RECORDK_ICONINFO�+PIMAGE_BASE_RELOCATION�$PEBS_DS_SAVE_AREA�+LPAXESLISTW�+PMM_ETW_PAGE_INFO_EX�PRIORITY_HINT�+LPENUMLOGFONTEXA�+_RTLP_HEAP_TAGGING_INFO5�+PCACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION�+PCLBLOB$�+SYSTEM_PROCESS_CLASSIFICATION%�+PERFINFO_FILE_SIMPLE_OPERATION'�+PSYSTEM_POOL_ZEROING_INFORMATION{+PPOWER_REQUEST_CONTEXTx+IMPORT_OBJECT_HEADERo+LPMOUSEHOOKSTRUCTl+tagSERIALKEYSAh+ETW_REGNOTIF_REGISTERe+PGROUP_AFFINITY�_MUISTRINGPOOLc+CONNECTDLGSTRUCTWg%_EXCEPTION_RECORD]+_ETW_SET_TIMER_EVENT
PINT16.Y+PROCESS_REVOKE_FILE_HANDLES_INFORMATION'COPYFILE2_MESSAGE_TYPE"SYSINF_PAGE_COUNTS+LPMDINEXTMENUL+PBSMINFOFPORT_MESSAGEI+WAKE_TIMER_INFOD+ENCLAVE_LOAD_INFO_VBS@+tagEMRSETICMPROFILE.=+PTOUCH_HIT_TESTING_PROXIMITY_EVALUATION#TRACEHANDLE6+HIMC�_INTERFACE_TYPE*,+PSYSTEM_FEATURE_CONFIGURATION_QUERYORTL_BITMAP4)+JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION%%+FSCTL_UNMAP_SPACE_INPUT_BUFFER+RTL_CIRCULAR_LIST_HEAD+_RTL_UNLOAD_EVENT_TRACE TIME_ZONE_INFORMATION.+SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION+PMCI_ADDR+PEMRSETWINDOWORGEX+VOLUME_REFS_INFO_BUFFER+PPPM_IDLESTATE_EVENT$+PSYSTEM_KERNEL_DEBUGGER_FLAGS-+MEMORY_PHYSICAL_CONTIGUITY_INFORMATION.�*JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2)�*_MEMORY_WORKING_SET_EX_INFORMATION�*NPOUTLINETEXTMETRICW�*LPCREATESTRUCTA�*ETW_HEAP_EVENT_CREATE"�HOT_PATCH_INFORMATION_CLASS!�*ETW_UMS_EVENT_DISASSOCIATE�*PWOW64_CONTEXT�*PFOCUS_EVENT_RECORD/�'IMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER*�*PTRANSACTION_PROPERTIES_INFORMATION�*NPEXTLOGFONTW*�*PSYSTEM_SESSION_PROCESS_INFORMATION [_THREAD_INFORMATION_CLASS'�*PALPC_MESSAGE_HANDLE_INFORMATION&�*_FILE_IO_COMPLETION_INFORMATION#qIMAGE_RUNTIME_FUNCTION_ENTRY#�*PSECTION_IMAGE_INFORMATION32�#PNEWTEXTMETRICW�*PKBDLLHOOKSTRUCT�*PEVENT_INSTANCE_INFO�*PRTL_DRIVE_LETTER_CURDIR�*PDRAWITEMSTRUCT�*tagWNODE_SINGLE_ITEM �*_REPARSE_GUID_DATA_BUFFER"NOTIFICATION_MASK�*CALINFO_ENUMPROCW�*_EVENT_TYPE.�*PEVENT_TRACE_PROFILE_REMOVE_INFORMATION
�_LBLOB �*HEAP_AFFINITY_SLOT_ASSIGN�*NPEXTLOGPEN32 �*DISPLAYCONFIG_PIXELFORMAT)�*FILE_PIPE_CLIENT_PROCESS_BUFFER_EX!�WATCHDOG_INFORMATION_CLASS#*'TRANSACTION_LIST_INFORMATION!-_FILE_REMOTE_PROTOCOL_INFO�*tagTOUCHINPUT�*PTP_TIMER_CALLBACK$~*PLUGPLAY_CONTROL_INSTALL_DATA$WORKER_FACTORY_CALLBACK_CLASSvEMRSETARCDIRECTIONz*KEY_EVENT_RECORDt*PTP_TIMESTAMP#r*_MEMORY_PRIORITY_INFORMATION V_COPYFILE2_MESSAGE_ACTIONn*COPYFILE2_MESSAGES*_FILE_PIPE_PEEK_BUFFER$M*PETW_TP_EVENT_CALLBACK_CANCEL2i(SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT �&ENCRYPTION_KEY_CTRL_INPUT*J*FSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT�_EXCEPTION_DISPOSITION�ACL_INFORMATION_CLASSF*_ENCLAVE_INIT_INFO_VBS,9*PPERFINFO_SAMPLED_PROFILE_INFORMATION1*PPOLYTEXTA.*tagMDICREATESTRUCTA**_NORM_FORM%*PALPC_MESSAGE_ATTRIBUTES�RTL_RB_NODE#LPCWPRETSTRUCT#*PENERGY_STATE_DURATION�%CLUSTER_RANGE!*PLUGPLAY_EVENT_BLOCK�)LPBITMAPV4HEADER
�)LPMAT2�)PWMI_BUFFER_HEADER�)PWMI_UDP�)_FAT_STATISTICS�)PROFILE_SOURCE_INFO�)PACCESS_REASONS)�)_SE_LEARNING_MODE_USER_OBJECT_DATA�)PNT_TIB64 �)PPOWER_STATE_HANDLER_TYPE
tagIMEMENUITEMINFOA�FXSAVE_FORMAT_WX86&�_RTL_RETPOLINE_RELOCATION_INDEXM'LPHELPWININFOW$�)PPERFINFO_FILE_PATH_OPERATION"�)_SYSTEM_CONSOLE_INFORMATION{$LPWGLSWAPDATEFMT_ENUMPROCA%Z"JOBOBJECT_IO_ATTRIBUTION_STATS%~(_SYSTEM_GDI_DRIVER_INFORMATION
�)PM128A�)PGESTURECONFIG%�)PERFINFO_PPM_PERF_STATE_CHANGE-�)SYSTEM_THREAD_CID_PRIORITY_INFORMATION�)ANSI_STRING32�)X86_CALL_FRAME�)PPOWER_ACTION_POLICY�)PMULTIKEYHELPW�)PSTYLEBUFA$�)PPROCESS_HANDLE_TRACING_QUERYEXCEPTION_LOG_TYPE�%_CLUSTER_RANGE�)ETW_RT_EVENT_LOSS�PUNZWCHR%KEY_NODE_INFORMATION#�)THREAD_PROFILING_INFORMATION#�)_MEMORY_WORKING_SET_EX_BLOCKo)_ETW_WAKE_COUNTER_EVENT:l)PSYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATIONi)LPMEASUREITEMSTRUCT#e)PWMI_IMAGELOAD_INFORMATION64b)ETW_SET_MARK_INFORMATION0^)EVENT_TRACE_IPT_CONFIGURATION_INFORMATIONX)PMOVE_FILE_DATA%V)PJOBOBJECT_WAKE_INFORMATION_V1#T)SET_PURGE_FAILURE_MODE_INPUTP)_XSAVE_POLICY-K)EVENT_TRACE_POOLTAG_FILTER_INFORMATION�'_OBJECT_ATTRIBUTESnIMAGE_THUNK_DATA-H)OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACKB)PTIMER_BASIC_INFORMATION,=)PPLUGPLAY_CONTROL_RELATED_DEVICE_DATA
!LANGID#:)_SECURITY_QUALITY_OF_SERVICE2)PTRACE_LOGFILE_HEADER3291)PPROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY&mPS_MITIGATION_AUDIT_OPTIONS_MAP(/)tagACTCTX_SECTION_KEYED_DATA_2600+))PETW_UMS_EVENT_DIRECTED_SWITCH_START!&)_PERFINFO_IPI_RECEIVE_DATA")SYSTEM_PREFETCH_OPTIONS)ALPC_SECURITY_ATTR)PEMRCOLORMATCHTOTARGET�(_WOF_VERSION_INFO�(LPDCB
pPSCHAR(�(FILE_ID_GLOBAL_TX_DIR_INFORMATION�(_ATOM_INFORMATION_CLASS&�(QUERY_PERFORMANCE_COUNTER_FLAGS%�'PROCESS_MEMORY_EXHAUSTION_TYPE�!tagGCP_RESULTSA2�(TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE�(WOF_VERSION_INFO�(PMM_ETW_PAGE_EXTRA_INFO�(NPPATTERN �%ETW_IDEAL_PROCESSOR_EVENT
PINT64�(PTOKEN_DEVICE_CLAIMS�(APC_CALLBACK_FUNCTION-�(PEVENT_EXTENDED_ITEM_PROCESS_START_KEY!�(SYSTEM_CPU_SET_INFORMATION&�(SYSTEM_SPECIAL_POOL_INFORMATION�(HELPWININFOA�(RID_DEVICE_INFO�(_TRACE_GUID_REGISTRATION#�(RTL_USER_PROCESS_INFORMATION�(LPCREATESTRUCTW�(LPMINIMIZEDMETRICS�(SCOPE_TABLE �(FILE_INTERNAL_INFORMATION%�(PSYSTEM_CALL_COUNT_INFORMATION
�PANOSE�(PIMAGE_SECTION_HEADER �(PACCESS_DENIED_OBJECT_ACE"�PROCESS_BASIC_INFORMATION64�(ARRAY_INFO�(PPO_WAKE_SOURCE_HISTORY$~(SYSTEM_GDI_DRIVER_INFORMATIONy(PUMS_THREAD_INFO_CLASS�%PCWCHAR%u(PDYNAMIC_TIME_ZONE_INFORMATION�%PEMRSCALEWINDOWEXTEXq(_EVENT_INFORMATION_CLASS"l(PSYSTEM_BIGPOOL_INFORMATION3g(PSYSTEM_INTERRUPT_STEERING_INFORMATION_INPUTd(MEASUREITEMSTRUCT`(XMIT_ROUTINE_QUINTUPLE\(RTL_BSD_ITEMFXPT2DOT30U(_MANDATORY_LEVELS(LPPOINT"R(PWMI_JOB_SET_QUERY_CPU_RATE(Q(PPROCESS_TELEMETRY_ID_INFORMATION4K(PJOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2H(MIDL_SERVER_INFO9(PPS_PROTECTED_SIGNER7(_WOW64_LDT_ENTRY!(PRTL_PERTHREAD_CURDIR (PCIMAGE_THUNK_DATA64#(PTEB_ACTIVE_FRAME_CONTEXT_EXuPUINT(PEMRPOLYGON16(tagGESTUREINFO'(RPC_BINDING_HANDLE_SECURITY_V1_W
"RTL_SPARSE_BITMAP_RANGE-�_DISPLAYCONFIG_GET_ADVANCED_COLOR_INFO(PEMRCREATECOLORSPACEW(PPOWER_USER_PRESENCE0�'PIMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADER�'_CM_SERVICE_LOAD_TYPE�'FP_64#�'_PROCESS_WORKING_SET_CONTROL TPACTIVATION_CONTEXT_STACK%~$ALPC_PORT_CALLBACK_INFORMATION%�'SYSTEM_VERIFIER_INFORMATION_EX5�_SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION-�'_PERFINFO_PFMAPPED_SECTION_INFORMATION�'LC_ID�'OBJECT_ATTRIBUTES_PEBS_DS_SAVE_AREA32&�'_PROCESS_MEMORY_EXHAUSTION_TYPE�'LPOFSTRUCT�'tagRID_DEVICE_INFO_MOUSE0�'_IMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER*�'RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A �'SYSTEM_NUMA_PROXIMITY_MAP�'PEMRPOLYTEXTOUTA�'RID_DEVICE_INFO_KEYBOARD�'_USER_MARSHAL_CB�'LPMENUBARINFO#�'_TOKEN_GROUPS_AND_PRIVILEGES�_EISA_DMA_CONFIGURATION�'LPDISPLAY_DEVICEW�'SC_STATUS_TYPE�'NDR_CS_ROUTINES�_HEAP_SUBSEGMENT_FREE.)EVENT_TRACE_PROFILE_COUNTER_INFORMATION�'RTL_PROCESS_HEAPS�tagTOGGLEKEYS#%tagINPUT_MESSAGE_DEVICE_TYPE�'_WMI_DPI_RECORD,~'_SYSTEM_HYPERVISOR_DETAIL_INFORMATIONv'HSTR�_PRIORITY_HINT�%EMRSCALEVIEWPORTEXTEXn'PIMAGE_HOT_PATCH_INFO�DUPLICATE_EXTENTS_DATA32k'NV_MEMORY_RANGE"�_FILE_IO_PRIORITY_HINT_INFO�#SE_IMAGE_SIGNATURE_TYPEe'PICONINFOEXWZ!RPC_CLIENT_INTERFACE`_ACCESS_REASON_TYPE`'PPROCESS_EXCEPTION_PORT^'NPDEVMODE\'CPINFOEXWX'_CONTEXT_CHUNKT'NMHDRM'PHELPWININFOW{"tagREGISTERWORDAJ'SD_GLOBAL_CHANGE_OUTPUT1D'PSYSTEM_FEATURE_USAGE_SUBSCRIPTION_DETAILS?'PCRITICAL_SECTION
"PULONG;'PCONSOLE_FONT_INFO-� _ALPC_PORT_COMPLETION_LIST_INFORMATION-8'TRANSACTIONMANAGER_LOGPATH_INFORMATIONw_RTL_RB_TREE"2'PETW_TP_EVENT_CALLBACK_STOP'�_ETW_SESSION_NOTIFICATION_PACKET#-'PFILE_COMPLETION_INFORMATION$*'_TRANSACTION_LIST_INFORMATION%'tagEMRSTRETCHDIBITS!'_TRACE_GUID_PROPERTIES"'IMAGE_LOAD_CONFIG_DIRECTORY!'_LINK_TRACKING_INFORMATION'_COPYFILE2_MESSAGE_TYPEuTOUCH_FLAGS�HEAP_SUBSEGMENT_INIT&Z"_JOBOBJECT_IO_ATTRIBUTION_STATS.	'PSYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE)'_PLUGPLAY_CONTROL_CONFLICT_STRINGS'tagEMRFORMAT5�&LPSERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM�&PTOKEN_MANDATORY_LABEL�&_TRACE_LOGFILE_HEADER32�&_COUNTER_READING TREFS_SMR_VOLUME_GC_ACTION�&_PREFIX_TABLE_ENTRY�&_VM_COUNTERS�&SL_APPX_CACHE!�&PENCRYPTION_KEY_CTRL_INPUT+�RTLWOW64_CROSSPROCESS_WORK_OPERATIONRPC_AUTH_IDENTITY_HANDLE�&_RPC_VERSION�&_DISPATCHER_CONTEXT�&_RTL_UMS_CONTEXT�&LPJIT_DEBUG_INFO32.�&_EVENT_TRACE_PROFILE_ADD_INFORMATION_V2 �&PUSN_RECORD_COMMON_HEADER�&SPARSE_OVERALLOCATE_DATA&j_SYSTEM_SYSTEM_DISK_INFORMATION�&PRTL_HANDLE_TABLE_ENTRY#�&PSYSTEM_VERIFIER_INFORMATION$�&PRTL_CRITICAL_SECTION_DEBUG64%CONSOLE_FONT_INFOEX�&SYSTEM_TRACE_HEADER%~&PPERFINFO_PPM_IDLE_STATE_ENTER#{&FILE_ID_FULL_DIR_INFORMATIONv&_EVENTLOGRECORD(m&PRPC_BINDING_HANDLE_TEMPLATE_V1_A&j&ETW_DFSS_RELEASE_THREAD_ON_IDLE]&PUNWIND_CODE,W&SYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT$P&PHEAP_BLOCK_EXTRA_INFORMATION!M&POINTER_BUTTON_CHANGE_TYPE!K&PSEC_WINNT_AUTH_IDENTITY_A&I&EVENT_TRACE_VERSION_INFORMATIONF&PICONMETRICSD&COORD'A&SYSTEM_ALARM_CALLBACK_OBJECT_ACE$=&COPYFILE2_EXTENDED_PARAMETERS9&LPMENUINFO_UNWIND_OP_CODES 7&SYSTEM_OBJECT_INFORMATION1&LPLOGCOLORSPACE �"WMI_IMAGEID_INFORMATION32+&PWNDCLASSW(&tagHELPINFO6#&PRTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY# &QUERY_BAD_RANGES_INPUT_RANGE&_RTL_RUN_ONCE/&POWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICES)&PCACTIVATION_CONTEXT_ASSEMBLY_DATA &_CSV_QUERY_REDIRECT_STATE&PQUERY_FILE_LAYOUT_INPUT,�%_JOURNAL_SET_DELETE_VALUE_INFORMATION�%PEMRSCALEVIEWPORTEXTEX)!_SERVICE_REQUIRED_PRIVILEGES_INFOW�%_ALPC_CONTEXT_ATTR*�%PWIM_PROVIDER_SUSPEND_OVERLAY_INPUT"�%_PERFINFO_BATTERY_LIFE_INFO)�%_SYSTEM_REGISTRY_QUOTA_INFORMATION�%PCNZWCH�%LDR_ENUM_RESOURCE_ENTRY9�%SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION�%PTHREAD_ENERGY_VALUES(�%_TXFS_READ_BACKUP_INFORMATION_OUT &#_PROCESS_HEAP_INFORMATION�%PEMRDELETECOLORSPACE�%ETW_CANCEL_KTIMER2_EVENT+�%PPROCESS_KEEPALIVE_COUNT_INFORMATION�%NDR_SCONTEXT!�%_ETW_IDEAL_PROCESSOR_EVENT
#size_t~PCANDIDATEFORM)�%PERFINFO_SYSTEM_MEMORY_INFORMATION$�%QUERY_BAD_RANGES_OUTPUT_RANGE�%PCLUSTER_RANGE�IMAGE_MITIGATION_POLICY�%RTLP_EXIT_THREAD�%_STACK_WALK_EVENT_DATA_ALPC_PORT_ATTRIBUTES�%PWMI_REGISTRY�%PSYSTEM_POOL_ENTRY�%tagEMRSCALEVIEWPORTEXTEX�%PICONINFO3�%_JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION(�%_ACTIVATION_CONTEXT_ASSEMBLY_DATA!�%WMI_JOB_SET_QUERY_CPU_RATE#RTL_SPLAY_LINKS�%NPCOMPOSITIONFORM%�%PLDR_DLL_NOTIFICATION_FUNCTION#�%_ACCESS_ALLOWED_CALLBACK_ACE!�%UNIQUE_PROCESS_INFORMATION%RTLP_START_THREADv%PPERFINFO_CCSWAP_IDLE#s%_TOKEN_SECURITY_ATTRIBUTE_V1c%PEXCEPTION_RECORD2a%_MEMORY_PARTITION_CONFIGURATION_INFORMATION]%PEMRPIE"\%PCM_EXTENDED_PARAMETER_TYPEU%PPVALUEW�!tagEMRINVERTRGNP%PKEY_NODE_INFORMATIONN%LPFNDEVCAPSI%EMRGLSRECORD%bTHREAD_UMS_INFORMATION_COMMAND#�TXFS_TRANSACTION_ACTIVE_INFOE%RTL_UMS_COMPLETION_LISTC%ENUMRESTYPEPROCA�OUTLINETEXTMETRICA@%LPMOUSEHOOKSTRUCTEX>%WNDCLASSEXA6%provider_info
time_t-*%_REFS_VOLUME_COUNTER_INFO_INPUT_BUFFER&%XSTATE_FEATUREo#_RTL_CRITICAL_SECTION32!%LPGRADIENT_RECT#PULONG64%_SE_ACCESS_REQUEST�_FUNCTION_TABLE_TYPE%_CONSOLE_FONT_INFOEX+�LRPC_SYSTEM_HANDLE_MARSHAL_DIRECTION$%_NDR_CS_SIZE_CONVERT_ROUTINES%_RTL_MEMORY_TYPE"�$_FILE_NUMA_NODE_INFORMATION*�RTL_FEATURE_CONFIGURATION_OPERATION%`_MEMORY_COMBINE_INFORMATION_EX%�$PSERVICE_LAUNCH_PROTECTED_INFO$�$PROCESS_ENERGY_TRACKING_STATE+�$PHEAP_OPTIMIZE_RESOURCES_INFORMATION�$_HEAP_RANGE_INFORMATION-PABC�_PS_CREATE_INFO'�$PFILE_PIPE_CLIENT_PROCESS_BUFFER�$PDMA_WIDTHITP_TIMESTAMP�$_GRADIENT_RECT
�$EMRPIE+&TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1�$LPUNIVERSAL_NAME_INFOW(�$PETW_COVERAGE_SAMPLER_CREATE_INFOpSCHAR�$PPEBS_DS_SAVE_AREA-�$PSYSTEM_CRASH_DUMP_CONFIGURATION_CLASSLONGLONG�$_ETW_READY_THREAD_EVENT�$RETRIEVAL_POINTER_COUNT'�$_IO_COMPLETION_BASIC_INFORMATION�$_RTL_DISK_SPEED_INFO�$PHEAP_SUBSEGMENT_FREE0�RTL_FEATURE_CONFIGURATION_CHANGE_CALLBACK�$PSYNCHRONIZATION_BARRIER�$PRTL_AVL_TABLE"�$KEY_VALUE_INFORMATION_CLASS�$TOKEN_ACCESS_INFORMATION(�_RTL_FEATURE_VARIANT_PAYLOAD_KIND"error_status_t�$LPCOMMPROP
�$EMREOF&~$_ALPC_PORT_CALLBACK_INFORMATION{$PWGLSWAPy$_WMI_DELAY_EXECUTION1�_SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATIONv$PREGISTERWORDA$t$_ETW_COVERAGE_SAMPLER_OPTIONSn$CI_LOG_SCHEDULER_EVENT!j$POWER_MONITOR_REQUEST_TYPEd$tagSTYLEBUFA'`$_ETW_PARTITION_INFO_EXTENSION_V2W$PRTL_DISK_SPACE_INFO�DEVICE_POWER_STATEQ$REG_NOTIFY_INFORMATIONJ$_RTL_RETPOLINE_ROUTINES"D$PIMAGE_AUX_SYMBOL_TOKEN_DEFA$PDEVICE_POWER_STATE=$PRTL_SPARSE_BITMAP_RUN8$PSIZE$4$PPERFINFO_PPM_STATE_SELECTION0nSYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION1$WOW64_FLOATING_SAVE_AREA$-$_ETW_TP_EVENT_POOL_TH_MAX_SET!)$PERFINFO_CC_CAN_WRITE_FAIL%$ETW_UMGL_KEY!$POOLED_USAGE_AND_LIMITS$PNUMA_NODE_RELATIONSHIP&$SYSTEM_DPC_BEHAVIOR_INFORMATIONHEAP_REGION_INFORMATION%$PETW_TP_EVENT_CALLBACK_ENQUEUE $_FSCTL_UNMAP_SPACE_OUTPUT$TIMER_INFORMATION_CLASS-$PKEY_VALUE_PARTIAL_INFORMATION_ALIGN64_CM_ROM_BLOCK!;_PROC_THREAD_ATTRIBUTE_NUM$CURSORINFO�#SERVICE_TIMECHANGE_INFO.�_RTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS-�#_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATETP_LOG_LEVEL�#LPLOCALESIGNATURE %INPUT_MESSAGE_DEVICE_TYPE#PREGHANDLE&�#PETW_THREAD_EVENT_SUBPROCESSTAG�#PUTF8_STRING%�#PDRIVER_VERIFIER_THUNK_ROUTINE�EMRSETWINDOWEXTEX�#TOKEN_DEFAULT_DACL2�#_PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION�#WINDOWINFO�#LPENUM_SERVICE_STATUS�#PZPTSTR�#PKSYSTEM_TIME�#LPNEWTEXTMETRICW�#IO_STATUS_BLOCK32�#PTOKEN_ORIGIN�PFORMAT_STRING�#_REPARSE_DATA_BUFFER_EX(�#PRTL_WALK_IMAGE_POLICIES_CALLBACK,_SYSTEM_BIGPOOL_ENTRY�#PRTL_CONDITION_VARIABLE �#SECURITY_OBJECT_AI_PARAMS$�#PSTARTING_LCN_INPUT_BUFFER_EX�#SYSDBG_IO_SPACE"$!PBY_HANDLE_FILE_INFORMATION �#PPROCESS_LEAP_SECOND_INFO�#LPVIDEOPARAMETERS�#PWNODE_TOO_SMALL'�#PJOBOBJECT_BASIC_PROCESS_ID_LIST*�#PPERFINFO_HARDPAGEFAULT_INFORMATION�JIT_DEBUG_INFOx#PFILE_LAYOUT_INFO_ENTRYtLPINTu#PROCESSOR_NUMBERm#PRTL_CRITICAL_SECTION32i#_IO_ERROR_LOG_PACKET*f#PIMAGE_ARM64_RUNTIME_FUNCTION_ENTRY4a#PSYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION\#POBJECT_NAME_INFORMATION$Y#_RTL_DYNAMIC_HASH_TABLE_ENTRY-V#EVENT_TRACE_PROFILE_REMOVE_INFORMATION�COPYDATASTRUCTR#MUICCHEADER9N#_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION)D#PPERFINFO_DRIVER_MAJORFUNCTION_RETB#WMI_TRACE_PACKET<#PRTL_MODULE_BASIC_INFO9#RPC_SECURITY_QOS_V3_W2#_WMI_BUFFER_HEADERpPSTR"*#TEB_ACTIVE_FRAME_CONTEXT_EX $#PPROCESS_HEAP_INFORMATIONR"ETW_PROVIDER_TRAIT_TYPE$"#PFILTER_BOOT_OPTION_OPERATION4�_PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY$#LPSERVICE_PREFERRED_NODE_INFO�PMOFHANDLE#SE_SECURITY_DESCRIPTOR/#JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2(#ETW_TP_EVENT_TIMER_CANCEL_NTTIMER#PMONITOR_DISPLAY_STATE$#_SYSTEM_KERNEL_DEBUGGER_FLAGS2#TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION#NPCWPRETSTRUCT
�CPINFO�"_MEMORY_RANGE_ENTRY�"PBUS_DATA_TYPE�"TOKEN_ORIGIN*�_DIRECTORY_NOTIFY_INFORMATION_CLASS�"CSV_QUERY_MDS_PATH_V2 �"WMI_IMAGEID_INFORMATION64�"EMRSETMITERLIMIT�"EMREXTSELECTCLIPRGN�"LPNUMBERFMT-)EVENT_TRACE_PROFILE_CONFIG_INFORMATION�"PPOWER_SESSION_TIMEOUTS#�"HEAP_AFFINITY_MANAGER_ENABLE�"PLOGFONTW�"EVENTMSG�"ETW_OBJECT_TYPE_EVENT�"PKEY_FULL_INFORMATION �"_PROCESS_LEAP_SECOND_INFO!�"_WMI_IMAGEID_INFORMATION32% PROCESSOR_PROFILE_CONTROL_AREA2VMEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION(�"MEMORY_PARTITION_NODE_INFORMATION$�"PPERFINFO_CC_WORKITEM_ENQUEUE'�"PERFINFO_CC_EXTRA_WB_THREAD_INFO�"PPERFINFO_CCSWAP_BUFFER�"PISECURITY_DESCRIPTOR�"POINT�"PENUMTEXTMETRICW �"PPROCESS_WAKE_INFORMATION�WMI_PNP_RECORD_V5"�"PFILE_ALIGNMENT_INFORMATION�"LPACCESSTIMEOUT(�"_ETW_TIMER_EXPIRATION_START_EVENTv_NT_PRODUCT_TYPE"�"FILE_ALLOCATION_INFORMATION �"PTP_TASK_EXECUTE_CALLBACK!�_FILE_INFO_BY_HANDLE_CLASSy"PREGISTERWORDPLIST_ENTRYo"PPOWER_STATE_HANDLERl"_MOUSE_EVENT_RECORD,e"PIMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY"b"PERFINFO_SYSCALL_ENTER_DATA^"_JOB_SET_ARRAY&X"PJOBOBJECT_IO_ATTRIBUTION_STATSO"_RTL_PERTHREAD_CURDIRI"DISPLAY_DEVICEE"CS_TYPE_TO_NETCS_ROUTINE*B"PJOBOBJECT_INTERFERENCE_INFORMATION>"PEMRLINETO<"NPPAINTSTRUCT;"LPICONMETRICS 7"PQUERY_FILE_LAYOUT_OUTPUT5"PTIMER_APC_ROUTINE1"HEAP_INFORMATION_CLASS,"HSAVEDUILANGUAGES&"EXFAT_STATISTICS�_BOOT_ENTROPY_SOURCE_ID""RTL_BITMAP_EXd STARTUPINFO"_MIDL_INTERCEPTION_INFO"PFILE_STREAM_INFORMATION,"SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS"PCM_VIDEO_DEVICE_DATA
"_RTL_SPARSE_BITMAP_RANGE	"NLSVERSIONINFOEX,"WMI_JOB_SEND_NOTIFICATION_INFORMATIONhREPARSE_DATA_BUFFER�!LPDOCINFOA!�!SYSTEM_MANDATORY_LABEL_ACE�!PPOWER_STATE!POWER_PLATFORM_INFORMATION�!PPPM_IDLE_ACCOUNTING�!LPSERVICE_DESCRIPTIONW"LTRANSACTION_ENLISTMENT_PAIR�!_OBJECT_ATTRIBUTES32%�!_SYSTEM_FIRMWARE_TABLE_HANDLER�!PEMRINVERTRGN�!EMRPLGBLT*�!_JOBOBJECT_INTERFERENCE_INFORMATION�!PLDR_DDAG_NODE)�!RTL_ACTIVATION_CONTEXT_STACK_FRAME&�!PFILE_LINKS_FULL_ID_INFORMATION�_RTL_AVL_TREE�EMRSETVIEWPORTEXTEX-�!RETRIEVAL_POINTERS_AND_REFCOUNT_BUFFER$�!FILE_FS_DATA_COPY_INFORMATION�!OFFER_PRIORITY�!_ICONINFOEXA�!MM_ETW_PAGE_EXTRA_INFO*�!PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG,�!JOBOBJECT_END_OF_JOB_TIME_INFORMATIONC�!RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED�!EMRSETMETARGN�JIT_DEBUG_INFO64�!GCP_RESULTSA�!LPHIGHCONTRAST�!EMRSETBRUSHORGEX�!LPHANDLER_FUNCTION.~!_EVENT_EXTENDED_ITEM_RELATED_ACTIVITYIDz!_SID_AND_ATTRIBUTESx!PCLIENT_ID64p!IMEMENUITEMINFOWk!RPC_ANSI_STRINGe!PWMI_JOB_INFORMATIONb!TRANSACTION_STATE4]!PSYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATIONT!PRPC_CLIENT_INTERFACEQ!PERFINFO_FILE_DIRENUMM!_BOOT_ENTRY!FILE_FS_DEVICE_INFORMATIONI!OSVERSIONINFOA.E!JOBOBJECT_LIMIT_VIOLATION_INFORMATION_2=!LPSTARTUPINFOEXW;!LPMULTIKEYHELP!9!PERFINFO_CCSWAP_IDLE_SHORT'3!_ALPC_MESSAGE_HANDLE_INFORMATION*!LPCMENUINFO#$!LPBY_HANDLE_FILE_INFORMATION!!_PROCESS_ACTIVITY_TYPE!LPTEXTMETRIC!KLDR_DATA_TABLE_ENTRY'!_SYSTEM_HOT_PATCH_REGISTRY_VALUE-!TOUCH_HIT_TESTING_PROXIMITY_EVALUATION(!PLDR_DLL_LOADED_NOTIFICATION_DATA(!SERVICE_REQUIRED_PRIVILEGES_INFOW#!_ETW_DFSS_START_NEW_INTERVAL}KCONTINUE_TYPE� _SYSTEM_POOL_INFORMATION+� PLUGPLAY_CONTROL_INTERFACE_LIST_DATA&� _PROCESS_POWER_THROTTLING_STATE� PPERFINFO_CCSWAP(� WIM_PROVIDER_UPDATE_OVERLAY_INPUT 8 _MUTANT_BASIC_INFORMATION� PEBS_DS_SAVE_AREA64.� _MEMORY_PARTITION_ATTRIBUTE_INFORMATION-� PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA4� ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA � _PROCESS_WAKE_INFORMATION$� PDELETE_STORAGE_RESERVE_INPUT0� EVENT_TRACE_LBR_CONFIGURATION_INFORMATION� PSYSTEM_POWER_POLICY � LPSERVICE_FAILURE_ACTIONS&� _FILE_PIPE_DELETE_SYMLINK_INPUT� EMRGDICOMMENT@UTF8_STRING$�_REQUEST_OPLOCK_OUTPUT_BUFFER� tagMINIMIZEDMETRICS� GESTURENOTIFYSTRUCT� LPCGUID7HIMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION� PSYSTEM_AUDIT_ACE#0FILE_ID_EXTD_DIR_INFORMATION� LPSERVICE_SID_INFO� PWMI_WAIT_SINGLE#�PERFINFO_MEM_RESET_INFO_TYPE� _CLIENT_ID64,� ALPC_PORT_COMPLETION_LIST_INFORMATION#� _TXFS_GET_TRANSACTED_VERSION� PSYSTEM_POOLTAG� COMPUTER_NAME_FORMAT  RPC_HTTP_REDIRECTOR_STAGE"ACCESS_MASKz PRKCRM_MARSHAL_HEADERx PCZZTSTR/v _PROCESS_STACK_ALLOCATION_INFORMATION_EXq _REPAIR_COPIES_INPUT"m _UNICODE_PREFIX_TABLE_ENTRY'h RTL_IMAGE_MITIGATION_ASLR_POLICYb LPSTARTUPINFO/_ SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE-Y _PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA
S HBRUSHP _RPC_SECURITY_QOS_V2_W#D PQUERY_STORAGE_RESERVE_INPUTPSINJECTDATA? LPBITMAPCOREHEADER< tagCLIENTCREATESTRUCT 6 PMUTANT_BASIC_INFORMATION#3 SYSTEM_REF_TRACE_INFORMATION/ _SCONTEXT_QUEUE% _TIMER_TYPE!# RPC_HTTP_PROXY_FREE_STRING+ PETW_TP_EVENT_TIMER_EXPIRATION_BEGIN FILE_MODE_INFORMATION& PPROCESSOR_PROFILE_CONTROL_AREA PTIME_ZONE_INFORMATION SYMBOLIC_LINK_INFO_CLASS* PROCESS_HANDLE_SNAPSHOT_INFORMATION'�PETW_COVERAGE_SAMPLER_QUERY_INFO$�REFS_SMR_VOLUME_GC_PARAMETERS-�SYSTEM_SPECULATION_CONTROL_INFORMATION$�IO_RESOURCE_REQUIREMENTS_LIST �RTL_TREE_COMPARE_FUNCTION%�_IMAGE_DYNAMIC_RELOCATION32_V2�TRANSACTION_LIST_ENTRY'�RTL_STACK_TRACE_DATABASE_CONTROL�PFILE_REGION_INFO�KEY_TRUST_INFORMATION�SERVICE_TRIGGER_INFO�PLUNICODE_STRING�PROCESSOR_IDLESTATE_INFO"�_SYSTEM_VA_LIST_INFORMATION{TOKEN_AUDIT_POLICY�PSYSTEM_VA_TYPE;�PSYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION�PEMRPOLYPOLYLINE%�PERFINFO_PPM_IDLE_EXIT_LATENCY"�ALPC_PORT_INFORMATION_CLASS~tagCOLORCORRECTPALETTExHANDLETABLE&qPPERFINFO_INTERRUPT_INFORMATION1n_SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION%jSYSTEM_SYSTEM_DISK_INFORMATION&f_DEDUP_CHUNK_INFORMATION_HASH32SHORT*bSYSTEM_BOOT_ENVIRONMENT_INFORMATION3V_MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION�PCRM_PROTOCOL_IDQPTRACE_GUID_INFO"PPACCESS_DENIED_CALLBACK_ACENMOUSEMOVEPOINT+JPERFINFO_CLOCK_INTERRUPT_INFORMATION8PPORT_MESSAGE}_TRACE_PROFILE_INTERVAL35_TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT2PTP_TASK
1PXFORM./_MEMORY_PARTITION_NODE_PAGE_INFORMATION_RTL_TICK_LOCK*)PPERFINFO_FILENAME_SAME_INFORMATION,!PTOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1'_JOBOBJECT_ENERGY_TRACKING_STATEEXPR_EVAL�RTL_BALANCED_NODE#SYSTEM_PROCESSOR_INFORMATIONETW_NOTIFICATION_TYPECMC_EXCEPTION�BITMAPINFO�_SYSTEM_AUDIT_ACE#�PPROCESS_BASIC_INFORMATION64�_FILE_LINKS_INFORMATION8�PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY�_MIDL_STUB_DESC �ETW_WNF_EVENT_UNSUBSCRIBE�PCACTCTX�_TEB_ACTIVE_FRAME#�SYSTEM_NET_RATE_CONTROL_TYPE�PRTL_HEAP_ENTRY�PWIN32_FIND_DATA$�_ETW_HEAP_EVENT_RUNDOWN_RANGE'�PERFINFO_DPC_ENQUEUE_INFORMATION#�PSERVERSILO_INIT_INFORMATION-�_SYSTEM_PROCESSOR_FEATURES_INFORMATION!�HEAP_EVENT_COMMIT_DECOMMIT% SECURITY_CONTEXT_TRACKING_MODE$�PIMAGE_RUNTIME_FUNCTION_ENTRY�KCONTINUE_ARGUMENTLOCALHANDLEvLPAXISINFOA
uPINPUTqPMULTIKEYHELPiPIMAGE_THUNK_DATA643LDR_DDAG_STATEfENERGY_STATE_DURATION%^PMEMORY_COMBINE_INFORMATION_EX&&PCM_PARTIAL_RESOURCE_DESCRIPTOR!PTEXTMETRICA PEVENT_TRACE_HEADERALPC_WORK_ON_BEHALF_ATTR$PRTL_WORK_ON_BEHALF_TICKET_EX_NDR_EXPR_DESC)_ETW_COVERAGE_SAMPLER_OPTION_FLAGS/_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUTtagWNODE_ALL_DATA�RPC_CLIENT_FREE1�_MEMORY_PARTITION_PAGE_COMBINE_INFORMATION.�PPLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA�RPC_IMPORT_CONTEXT_PPINT_PTR �_FILE_FS_SIZE_INFORMATION!�REQUEST_RAW_ENCRYPTED_DATA�LPUNIVERSAL_NAME_INFOA)�PTRACE_PERIODIC_CAPTURE_STATE_INFO�PTRANSACTION_LIST_ENTRY�tagWNODE_SINGLE_INSTANCE�PHEAP_SUBSEGMENT_INITLPCVOID#�PTRACE_ENABLE_FLAG_EXTENSION%�RTL_PROCESS_MODULE_INFORMATION"A_UMS_SCHEDULER_STARTUP_INFO;�_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATION$�_TXFS_TRANSACTION_ACTIVE_INFO-�_PLUGPLAY_CONTROL_TARGET_RELATION_DATAPLONG64$�WIM_PROVIDER_INTEGRITY_STATUS4�_SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT�LBLOB�_FILEMUIINFO'�PROCESS_TELEMETRY_ID_INFORMATION#�FILE_STORAGE_TIER_MEDIA_TYPE!�PRTL_IMAGE_POLICY_METADATAPCUCHAR�RAWINPUTDEVICELISTPCSHORT�_VIRTUAL_STORAGE_TYPE�_SD_GLOBAL_CHANGE_INPUT
�VALENT�PETW_OBJECT_HANDLE_EVENT_PSINJECTDATA{_TOKEN_AUDIT_POLICYv_WIN32_STREAM_ID r_PERFINFO_DPC_INFORMATION'lPFILE_CASE_SENSITIVE_INFORMATION xHARDERROR_RESPONSE_OPTIONiIRQ_GROUP_POLICY&dPPLUGPLAY_CONTROL_PROPERTY_DATAaEMRSELECTCOLORSPACE^PIMAGE_COR20_HEADERZMEMORYSTATUSYPCLUTF8_STRINGSPCSV_NAMESPACE_INFOP_KHETERO_CPU_POLICY7�_RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICYM_numberfmtW%GPPROCESS_HANDLE_TRACING_ENABLE?PCSV_CONTROL_PARAM7:PSYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION7tagAXESLISTWHPCON2LDR_SECTION_INFO$,TRANSACTION_BASIC_INFORMATION (SEC_WINNT_AUTH_IDENTITY_AdANSI_STRING64 "PFILE_STAT_LX_INFORMATION_TRACE_ENABLE_CONTEXTPSID_AND_ATTRIBUTES_HASHSPHANDLELPENUMTEXTMETRICI_RPC_HANDLE"PETW_FINALIZE_KTIMER2_EVENT!_PROCESS_BASIC_INFORMATION"PPOWER_PLATFORM_INFORMATIONPCSCHAR�_FILE_ACCESS_INFORMATION0�_SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION#�_KEY_WOW64_FLAGS_INFORMATION�_IMAGE_POLICY_ID;EMRPOLYPOLYGON16*�PSYSTEM_SESSION_BIGPOOL_INFORMATION�_nlsversioninfopLPTCH!�PNOTIFY_USER_POWER_SETTING!�RTL_HEAP_MEMORY_LIMIT_DATAR_EVENT_INFO_CLASS#�_PERFINFO_PO_SESSION_CALLOUT�PXSAVE_AREA �PDUPLICATE_EXTENTS_DATA32"�PHEAP_EVENT_COMMIT_DECOMMIT2�_PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY,�DISPLAYCONFIG_GET_ADVANCED_COLOR_INFO�PENUMLOGFONTEXDVA�PCEVENT_RECORD#�PFILE_MAKE_COMPATIBLE_BUFFER�TRANSACTION_NOTIFICATION�FILE_COMPRESSION_INFO0�SYSTEM_FEATURE_CONFIGURATION_UPDATE_ENTRY�_FILE_BASIC_INFO"�_WMI_JOB_SET_QUERY_NET_RATE�SYSTEM_TPM_INFORMATION�tagPANOSE!�PIMAGE_ROM_OPTIONAL_HEADER�IRQ_PRIORITY�PRKCRM_PROTOCOL_BLOB�_FXSAVE_FORMAT_WX86{PTRACE_PROFILE_INTERVAL)lVIRTUALIZATION_INSTANCE_INFO_INPUT]PREPARSE_DATA_BUFFERZtagRID_DEVICE_INFO_HIDVACL_SIZE_INFORMATION(1RTL_DYNAMIC_HASH_TABLE_ENUMERATORLREMOTE_PORT_VIEW"HREFS_SMR_VOLUME_INFO_OUTPUT@_NETWORK_APP_INSTANCE_EA!RTL_ATOM-9RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY3PWMI_THREAD_INFORMATION0PLEX_READ_DATA_REQUEST�STREAM_INFORMATION_ENTRY)PSYSTEM_BIGPOOL_ENTRY&CM_MCA_POS_DATA/#PACTIVATION_CONTEXT_DETAILED_INFORMATIONPHIBERFILE_BUCKET.SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EXFILE_STANDARD_INFOICMENUMPROCW RPC_CSTR$_SYSTEM_FILECACHE_INFORMATION�MSGBOXPARAMSAsystem_handle_t"PRTL_HEAP_MEMORY_LIMIT_INFO�PRTL_RESOURCE�EXTLOGPEN32�tagSERIALKEYSW'�IMAGE_LOAD_CONFIG_CODE_INTEGRITY,�JOBOBJECT_MEMORY_USAGE_INFORMATION_V2�PKLOCK_QUEUE_HANDLE�PXSAVE_VENDOR#�FILTER_BOOT_OPTION_OPERATION)�PPERFINFO_DRIVER_COMPLETIONROUTINE�PFILE_LINK_INFORMATION�PNP_VETO_TYPE�LPENUMLOGFONTW�LPCPINFO�HEAP_SUBSEGMENT_FREE�ACE_HEADER*�PDIRECTORY_NOTIFY_INFORMATION_CLASS�TXFS_MODIFY_RM�PSYSDBG_CONTROL_SPACE,�_PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA'�RTL_QUERY_DEBUG_INFORMATION_INFO$�_FILE_TYPE_NOTIFICATION_INPUT+�_VIRTUALIZATION_INSTANCE_INFO_OUTPUT�PTRACE_ENABLE_INFO&Z_FILE_LINKS_FULL_ID_INFORMATION�_PERFINFO_CCSWAP�PWMI_SPINLOCK�FUNCTION_TABLE_TYPEyPTITLEBARINFOEXwPFILE_STORAGE_TIER_CLASS0pPRTL_IMAGE_MITIGATION_FONT_DISABLE_POLICYlRTL_HASH_TABLEcLPPOINTSbHOOKPROC'ZPEVENT_HEADER_EXTENDED_DATA_ITEMXIMAGE_COR20_HEADER$TI_RpcProxyUpdatePerfCounterFn&MSYSTEM_SHADOW_STACK_INFORMATIONAPRTL_RESOURCE_DEBUG32?LPDEVMODE'=__PUBLIC_OBJECT_TYPE_INFORMATION5PWIN32_FIND_DATAW&2THREAD_LAST_SYSCALL_INFORMATION'._RTL_FEATURE_CONFIGURATION_TABLE$&PFILE_PIPE_REMOTE_INFORMATION!#RTL_CRITICAL_SECTION_DEBUGPFILE_ID_INFOOPEMRSETROP2+PFILE_STORAGE_RESERVE_ID_INFORMATIONRTL_TICK_LOCK
COMMTIMEOUTS"_WNF_STATE_NAME_INFORMATIONPFILE_SEGMENT_ELEMENT!�_RTL_RESOURCE_POLICY_FLAGS$�_PS_CPU_QUOTA_SET_INFORMATION�PMFT_ENUM_DATA_V16�MEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATION�RTL_PROTECTED_ACCESS�PCOPYDATASTRUCT,�PPROCESS_EXTENDED_BASIC_INFORMATION64(�PRTL_FEATURE_VARIANT_PAYLOAD_KIND�PRAWINPUT�TOGGLEKEYS,�JOBOBJECT_LIMIT_VIOLATION_INFORMATION$�INVERTED_FUNCTION_TABLE_ENTRY�ICONMETRICS+�PSYSTEM_PROCESSOR_POLICY_INFORMATION�_EISA_PORT_DESCRIPTOR'�_RTL_STACK_TRACE_DATABASE_CREATEintptr_t!�PSYSTEM_DEVICE_INFORMATION#�PHOT_PATCH_INFORMATION_CLASS
�_FIXED�PLAST_EXCEPTION_LOG�CIEXYZTRIPLE �PSYSTEM_POWER_INFORMATION}LPCMENUITEMINFOA!vPLDR_DLL_NOTIFICATION_DATAPSINGLE_LIST_ENTRYtPSD_ENUM_SDS_INPUT#pPPERFINFO_CC_LAZY_WRITE_SCANmKSPIN_LOCK_QUEUEcWOW64_CONTEXT^tagAXISINFOW$�_FILTER_BOOT_OPTION_OPERATIONZ_MEMORYSTATUS
V_FIBERNRASTERIZER_STATUS!J_FILE_QUERY_SPARING_BUFFERDPSHUFFLE_FILE_DATABHANDLER_FUNCTION?COMPARTMENT_ID7_TOKEN_USER�OSVERSIONINFOEX 1PETW_KQUEUE_DEQUEUE_EVENT._TOKEN_GROUPS/)_EVENT_TRACE_PROFILE_COUNTER_INFORMATION&"PERFINFO_SAMPLED_PROFILE_CONFIG4RTL_FEATURE_CONFIGURATION_CHANGE_REGISTRATIONDISK_SPACE_INFORMATION&_LOGICAL_PROCESSOR_RELATIONSHIP4PPERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION(ETW_COVERAGE_SAMPLER_OPTION_FLAGS%�PETW_CREATEDELETE_OBJECT_EVENT&�ETW_SESSION_NOTIFICATION_PACKET(�_FILE_FS_VOLUME_FLAGS_INFORMATION�LPHANDLER_FUNCTION_EX�SECURITY_ATTRIBUTES�POINTER_FEEDBACK_MODE�EVENTSECURITYOPERATION"�PPERFINFO_PROCESS_PERFCTR64&�_RTL_PROCESS_MODULE_INFORMATION*�PRTL_FEATURE_CONFIGURATION_PRIORITYINT_PTR.�PSYSTEM_CODEINTEGRITYPOLICY_INFORMATION�PPROCESS_DISK_COUNTERS�_TRACE_GUID_INFO$�_PERFINFO_MEM_RESET_INFO_TYPE �_SERVICE_PRESHUTDOWN_INFO�LPHIGHCONTRASTW�_EFI_DRIVER_ENTRY_LIST%�LPENUM_SERVICE_STATUS_PROCESSA�SE_TOKEN_USER/�_PROCESS_MITIGATION_CHILD_PROCESS_POLICY�_RTL_BARRIER�SERVICE_NOTIFY_2WEWMI_PNP_RECORD_V3�PLOGICAL_DISK_EXTENTS$�PFILE_DISPOSITION_INFORMATION,�SYSTEM_ISOLATED_USER_MODE_INFORMATION!u_SYSTEM_ALARM_CALLBACK_ACEnEVENT_INSTANCE_INFOLIST_ENTRYjTHREAD_UMS_INFORMATION[THREAD_INFORMATION_CLASSRPCHAR_INFOMPWMI_PAGE_FAULT'J_CI_LOG_SCHEDULER_SLEEP_RESPONSEDPFILE_GET_EA_INFORMATION8PXMM_SAVE_AREA326CLIENT_ID%�RTL_RETPOLINE_RELOCATION_INDEX 3_SERVICE_FAILURE_ACTIONSA+PWMI_POWER_RECORD"(_ALPC_WORK_ON_BEHALF_TICKETEMRBITBLT"LPREMOTE_NAME_INFOWPALPC_PORT_ATTRIBUTES!FILE_GET_QUOTA_INFORMATIONtHALF_PTRvNT_PRODUCT_TYPE!j_MEMORY_REGION_INFORMATIONPHEAP_REGION_INFORMATIONPAXESLISTPERFINFO_PO_PRESLEEPpPUZZTSTRPRAWINPUTDEVICE�CURRENCYFMT�PNT_TIB�PRPC_MESSAGE�RPC_EP_INQ_HANDLE:RPC_UNICODE_STRING"�_TXFS_SAVEPOINT_INFORMATION �PFILE_DISPOSITION_INFO_EX�INPUT!�ACCESS_DENIED_CALLBACK_ACE�_COVERAGE_MODULES�PIMAGE_MITIGATION_POLICY�IMAGE_ARCHITECTURE_ENTRY �PSTREAM_INFORMATION_ENTRY�tagDEBUGHOOKINFO�_PS_PKG_CLAIM3�PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY"PTP_MILLISECONDS(�PHEAP_EVENT_SUBSEGMENT_ALLOC_FREE%�ETW_THREAD_EVENT_SUBPROCESSTAG"�FILE_MAKE_COMPATIBLE_BUFFER�PCACHE_RELATIONSHIP=�ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT�LPDELETEITEMSTRUCTqEVENTLOG_HANDLE_W�PSILO_USER_SHARED_DATA7�PMEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATION�tagACTCTXA�PRPC_RUNDOWN&}_JOURNAL_RENAME_KEY_INFORMATIONutagGLYPHSET�QUERY_SERVICE_CONFIG#PUINT64lDPI_AWARENESS_CONTEXT__hSERVICE_TABLE_ENTRYW
 PUCHAR`MARK_HANDLE_INFO\_CM_KEYBOARD_DEVICE_DATAXDEVMODE[CWPSTRUCT*TEVENT_TRACE_SPINLOCK_INFORMATION_V1NLPSTARTUPINFOWKSOUNDSENTRY(GRTL_PROCESS_BACKTRACE_INFORMATION.7PSECURE_SPECULATION_CONTROL_INFORMATION2LPREGISTERWORDW +_RTL_UMS_SCHEDULER_REASON-LPABC*VERIFIER_MODE'USN_RECORD_EXTENTPSTREAM_EXTENT_ENTRY_EXCEPTION_LOG_TYPE*PPERFINFO_BOOT_PREFETCH_INFORMATION_WAIT_TYPE(PJOBOBJECT_RATE_CONTROL_TOLERANCE#_SEMAPHORE_INFORMATION_CLASSWNF_DATA_SCOPECALINFO_ENUMPROCA1PJOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVALPPOOLINDEX
 PKIRQL*�FILE_SYSTEM_RECOGNITION_INFORMATION/�IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY_XDATA+_DUPLICATE_EXTENTS_DATA*�_SYSTEM_PLATFORM_BINARY_INFORMATION�LPACCELqPCUTSTR"�REQUEST_OPLOCK_INPUT_BUFFER�TRACE_QUERY_INFO_CLASS�GROUP_AFFINITY�_XSAVE_AREA�FILE_ID_128�JIT_DEBUG_INFO32REMRSELECTCLIPPATH�EMRPOLYBEZIER�PRAWMOUSE�PWMI_PNP_RECORD)�_RTL_FEATURE_ENABLED_STATE_OPTIONS+�PPLUGPLAY_CONTROL_USER_RESPONSE_DATA$CURRENCYFMTW�PDIBSECTION _EVENT_FILTER_HEADER&�_MEMORY_WORKING_SET_INFORMATION�_numberfmtA!�PSYSTEM_AUDIT_CALLBACK_ACE�_FILE_EA_INFORMATION5�PSYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION$�PTXFS_LIST_TRANSACTIONS_ENTRY�PPROCESSOR_IDLE_TIMES�PPARSE_MESSAGE_CONTEXT}PEMRBITBLT!z_HEAP_SUBSEGMENT_ACTIVATEDvRTL_QUERY_REGISTRY_TABLEn_SD_ENUM_SDS_INPUT7gPRTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY/�_ACTIVATION_CONTEXT_DETAILED_INFORMATIONbPANSI_STRING64_WGLSWAPYNPCWPSTRUCTVtagCURSORSHAPE R_CM_INT13_DRIVE_PARAMETER�FLS_DATAHSE_VALIDATE_MAPPING_TYPEB_TP_TASK6PEMRPOLYPOLYGON16 -FILE_REMOTE_PROTOCOL_INFOPMSGBOXPARAMSA*PLDR_DLL_UNLOADED_NOTIFICATION_DATA'_APPLICATIONLAUNCH_SETTING_VALUE
IMEMENUITEMINFO�RPC_CLIENT_ID�LATENCY_TIME�SERVICE_PRESHUTDOWN_INFO�PINTERFACE_REFERENCE�_COMMPROP�ENUMLOGFONTEXDV,�PROCESS_MITIGATION_POLICY_INFORMATION�PTRIVERTEX�WNODE_SINGLE_INSTANCE&�PFILE_REPARSE_POINT_INFORMATION�_FLS_DATA#�REQUEST_OPLOCK_OUTPUT_BUFFER�tagPAINTSTRUCT&�PERFINFO_PPM_THERMAL_CONSTRAINT�MUTANT_OWNER_INFORMATION-�PMEMORY_PARTITION_TRANSFER_INFORMATION�WMI_FILE_IO*�PSYSTEM_PHYSICAL_MEMORY_INFORMATION&�PRTL_RETPOLINE_RELOCATION_INDEX}REDIRECTION_DESCRIPTORtPEMRSETARCDIRECTION$oGET_RUNTIME_FUNCTION_CALLBACK"j_EVENT_INSTANCE_GUID_HEADER$aPPERFINFO_PPM_IDLE_STATE_EXIT]TRACE_ENABLE_CONTEXT_EXUPPPM_WMI_IDLE_STATESOPPROCESSOR_GROUP_INFO#L_TRANSACTION_ENLISTMENT_PAIR8CPIMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION'@PRTLP_UNHANDLED_EXCEPTION_FILTER5PWIN32_FIND_DATAA#2_IMAGE_ARCHIVE_MEMBER_HEADER)PDUPLICATE_EXTENTS_DATAVRTL_PATH_TYPE PRTL_TRACE_ENUMERATEEDIT_CONTROL_FEATURELOAD_ASDATA_TABLEPCM_ROM_BLOCK"HELPPOLY!FILE_FS_VOLUME_INFORMATION"PFILE_FS_DEVICE_INFORMATION�_ETW_LBR_ENTRY�FP_IEEE_COMPARE_RESULT-�PRTL_FEATURE_USAGE_SUBSCRIPTION_TARGET�SYSTEM_PIXEL_FORMATPEBS_DS_SAVE_AREA32!�_ETW_DISABLE_KTIMER2_EVENT�PS_PKG_CLAIMpCHAR!�IMAGE_DELAYLOAD_DESCRIPTOR(�_RTL_STACK_TRACE_DATABASE_CONTROL�tagTEXTMETRICW�_EVENT_TRACE_HEADER�CM_PERF_COUNTERS%�PROCESS_MEMORY_ALLOCATION_MODE�_ENUM_SERVICE_STATUSW �EVENT_TRACE_PROPERTIES_V2$�SYSTEM_RESOURCE_ATTRIBUTE_ACE�LPBITMAPINFOHEADER%�_IMAGE_DYNAMIC_RELOCATION64_V2�LPOVERLAPPED_ENTRY�SYSGEOTYPE%�_PROCESS_DEVICEMAP_INFORMATION�tagEMRPOLYDRAWTOKEN_MANDATORY_POLICYx_POWER_IDLE_RESILIENCYpPWNODE_EVENT_ITEMjPAPP_MEMORY_INFORMATIONaPRESUME_PERFORMANCEXPTRACE_LOGFILE_HEADER64(SPEVENT_TRACE_SPINLOCK_INFORMATION"NPPROCESS_HANDLE_INFORMATION)HPFILE_ID_EXTD_BOTH_DIR_INFORMATIONE_WMI_PNP_RECORD_V3">PUMS_SCHEDULER_STARTUP_INFO;tagKERNINGPAIR%6_KAFFINITY_ENUMERATION_CONTEXT$-PFILE_ID_EXTD_DIR_INFORMATION"PPOINTER_TYPE_INFO+_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W'PPERFINFO_FILEOBJECT_INFORMATIONSINGLE_LIST_ENTRY_FILE_STAT_INFORMATION$_ACTIVATION_CONTEXT_MSIX_INFOtagXFORMPPEBS_DS_SAVE_AREA32"KEY_VALUE_LAYER_INFORMATION�MSGBOXPARAMS�_QUERY_SERVICE_CONFIGA�_PROCESSOR_CACHE_TYPE�PEMRSETWINDOWEXTEX�LPCDLGTEMPLATEW'�PIMAGE_RESOURCE_DIRECTORY_STRING#�PFILE_PIPE_LOCAL_INFORMATION5�_RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY6�PRTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION(�SYSTEM_SECURITY_MODEL_INFORMATION�IO_RESOURCE_DESCRIPTOR"�PFILE_IO_PRIORITY_HINT_INFOpLPSTR~NPCANDIDATEFORMI_RPC_MUTEX'yPLEAP_SECOND_DATA_REGISTRY_ENTRY"v_MEMORY_BASIC_INFORMATION64$jPGENERIC_BINDING_ROUTINE_PAIR)d_PERFINFO_DRIVER_MAJORFUNCTION_RET@_STRING%]HEAP_REUSE_THRESHOLD_ACTIVATEDTCALINFO_ENUMPROCEXWNSERVICE_STATUS_HANDLE"KENUM_SERVICE_STATUS_PROCESS@PS_ATTRIBUTE_NUM&:_IMAGE_DYNAMIC_RELOCATION_TABLE 5_OBJECT_INFORMATION_CLASS+LPENHMETAHEADER&(_USER_MARSHAL_ROUTINE_QUADRUPLELPUNIVERSAL_NAME_INFOPERFINFO_HV_HYPERCALL"TP_MILLISECONDS
WMI_UDP*_IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY�HSM_OPCODE&�PRTL_SPARSE_BITMAP_FREE_ROUTINE�POUTLINETEXTMETRIC�PPS_PROTECTION�_FILESYSTEM_STATISTICSqPRTL_ATOMOPEMRSETPOLYFILLMODE�_PERFINFO_VTL_CHANGE�PSET_POWER_SETTING_VALUE�OSVERSIONINFOEXA�PUZZWSTR�_SE_IMPERSONATION_STATE*�PSYSTEM_VERIFIER_TRIAGE_INFORMATION�tagMOUSEHOOKSTRUCTEX�_LDR_SERVICE_TAG_RECORD?�_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY�PMESSAGE_RESOURCE_BLOCK�MUISTRINGPOOL)�PFILE_FS_METADATA_SIZE_INFORMATIONqPZZWSTR!�_FSCTL_OFFLOAD_WRITE_INPUT �_DUPLICATE_EXTENTS_DATA327�PRTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY0�PCACTIVATION_CONTEXT_DETAILED_INFORMATION~_IO_COUNTERSwSYSTEM_VERIFIER_ISSUE!rRTL_PHYSICAL_MEMORY_POLICYn_UNIVERSAL_NAME_INFOW jMEMORY_REGION_INFORMATION"]PCOPYFILE2_PROGRESS_ROUTINEOPEMRSETMAPMODE'IPFILE_FS_DRIVER_PATH_INFORMATION>WOW64_FUNCTION_CODE64;_HEAP_SUBSEGMENT_ALLOC&1_RTL_UMS_SCHEDULER_STARTUP_INFO$_currencyfmtW EVENT_FILTER_HEADEREFI_DRIVER_ENTRY,PEVENT_TRACE_PROFILE_LIST_INFORMATION%	_JOBOBJECT_WAKE_INFORMATION_V15RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION)�PFILE_MEMORY_PARTITION_INFORMATION)�SYSTEM_PLATFORM_BINARY_INFORMATION+�PPLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA�MIDL_FORMAT_STRINGuPUHALF_PTR0�SYSTEM_FEATURE_USAGE_SUBSCRIPTION_DETAILS�PRTL_AVL_NODE�PWMI_JOB_ASSIGN_PROCESS�PEISA_DMA_CONFIGURATION
"PDWORD�TRACE_INFO_CLASS�PMIDL_METHOD_PROPERTY#DWORDLONG�ALPC_TOKEN_ATTR0�SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION�PMEM_EXTENDED_PARAMETER�PS_CREATE_INFO)�ASSEMBLY_FILE_DETAILED_INFORMATION�PERFINFO_IPI_SEND_DATAxENCLAVE_CREATE_INFO_SGXtENUMRESLANGPROCA(jLPSERVICE_DELAYED_AUTO_START_INFO'gIMAGE_ARM_RUNTIME_FUNCTION_ENTRY%ZFILE_LINKS_FULL_ID_INFORMATION
LPLONG P_WIN32_MEMORY_RANGE_ENTRYLPMENUTEMPLATEWKICONINFO
@HWND__�� �0:s�0pV�eҐ����lj��6�Ȗ0�$ �~����.P�t�OWsP-"�x#N�:�&���F �o��#�V����|G%D�VH�,=Q��s ����/�5h��d�����,�]0�f&(�� ƨ��T���Ȓ����)n���y��aP`I� ���r��Axa?E$��N�:���i�ٯa5.�P�� ���巪�����0v�};��?$�N��a 2��j�/@�R�?�_A��w�?���g�|��*c�A '���8�#�qf�N�g����X���P����	m �:��2K]�
j����e�
ʪ�3k�ӭ�� f߹��R֋�|��ڕ����G/S�6�<���� 0�i�dܾ�[~uz"*���B�:�ٝy�!($�� �M��wK�58���5h2�
/�U���R�:Jf #^�S�q�9�s"-0#�H��'�N�"Y
�:i4 �u�Մ��+�5�5�f�s�a{�:˨���Za_ �*ʡZ�4��D��?�e�A�	fa��A��;� ��@\קĒ��$Ir�͢�)��|�u����� ��wkO'�l�5l�c���~|����o�O�� �>�j�t�&~8^�B��J2�/Ru�~ e��i�45���̯Zo�����q�+�<��* 5��`&N_�|�<�$���!�O]}��"O [��t'Q��A���2��9\���h��fcY�!�?8x ������A$խ�0� NG�%+�*�
!7�=b� �[�-%`4�����o2�>�'�q.qg�Gn��)� ������Q�;�[$��ۅ=@����,��� hV
>.r��h�#��Y��e��y��f:h?�! �����C��ґtE��W3�ې�����o�C �2Ԃ�sr|R_e(��V�����z,v�y�| `���[4dx���By%�Г���z�&K�-�pW� ���{�$��N����~p��o7��T�1*���.� �F��B�6�0A��(|�C��F�7� ]�����W	��}Ν���lq����ϋN�Z �k@�ʘM�p�?ho�7���Z����j�H�I G�*㥬2����M���}�b�R�̫�)��p '�N�	8t����A��d�W�G$���l�0"$�&� �۠�Җ�{�������n"]�,$J��� �Jd��hy��R�*��Ll11�{SI�[*��Q� K�o��]�R2cj��
��K?C��9s�PH.]	 �O�3tk#�L-�1�
��M�H�sx?��> �G�/�m��hB-����-q�b}��Y�~Ya M�d�Q�?����:��ޅǧ8�M�%�i_&� � ����̫��2r�WQ��K��TI�Up��/�z� ���[r�"��衷��R��ҹ����� ����w�^��ȯ�
?���;��f���B(H� �[��=�
Tǜ�
]����>d��Wƫ���+ 3E�� �r`QQ���e��e����`z�iN 4o��g-+2ܪܚosm�E����a��^�R�=�u E~/EX"�-�p-���i����`��.�z#�0�� �J��W6���,�)J	dɫ7�%eڭ��� �-��}n�5��L���:I����R��~(�y� Ҥ��\��}7	�O~aD��0��-x���x�`<� )G�xS�l�F,�yV���6�}�����ָ@��j@ n*�\T�uM�fk�<�t���L�ee�#a��b� �.r���A6
؇Sz�I��x{_K�<ކ��� ~��$P�<�tv��AHE/��)�}�yS�	 S�O����SXn��T�F����ZS�kk!m�0	 ��%|�#o5a�0i�^�{�ơz[ l���HRV	 y3�
6$��g涧i0����
�E�g$E��$x	 T�@�
2��U��p�|�����k����[p*&�	 G�Qy�(�_ f�ټ�p.�ڤ���~���	 �����y�Q+���{"WÌ�R~̟���H���?�	 ��'��,��@H4sS�k�!Ȫ:ݬ���"fE)
 Zڤ�~����̓s���� ��*	���k��)C�9
 �m�%:�|l�����h��D�m��-��[j
 0T�]�yǥ˘�0�H��I��G(������
 NM�1C����+e#����
�S�x��������
 �OHa]R���s���&���\��:�yE��
 ��7 ��������3]��"F���:�,�U�	  �y���	qtY��-l��|��+!so�$&�0 N�Q�4O&K��+l;x�2�%��ݮ�pZ,�S ��a�;.+�!6�%ri�E�Q�p�u�G�g�.�v ���O.@=4L�C�ي�m�;_�iM %q�� �4Y����|��B�N��m#��*�sE��Bp��� ����o�}�+4qt*Y lռ��́dq�X� ����8�����L�v���Xm*����I/i�� �t�T�`���Niu�$�I8FQ@e�}&f�S��E��# ��ꪄ<}��}�^|�{�)D��Xh�;��N �kE9OӨ��.IF��SY9G&��.��?堳(l �D�rlBsm�DE�cQ����}W� �w��±�� ��������0TcIC4�U��m��sF'<�Z� S���M�"��S��U}h�g�c�q�c5w�k���8� O�2
�שTg���FF��ݼ�-�BS��
 �A+��z'����k��mD�XL���t<
 ��.b��)���]Ý2�tW���Q�*�a
 �*�����ou��M+K�Ŋ�;��qh��
 |�8�>�$�;�@�[VP��sVf*wۭg�
 ����#��ZF��-�wRϵI
5I�گ�Q�[d��
 W|A
w�O�?�pU]~-�2�!�\O����5� �:B{m�n=�g���\c*�ӏ���Z"	��Y$ D�n��q���9��a�_�G���H�E���-W��xZG �-h/�S��~����
󠉆a!�1k��jj ��3)�J�$��{�.
w~�/�l���M�� 8����}ڥ��#�J�7�����"��Ѻ��^�� ��#YV^b%�}��/'p�O�Gʈ?��z���� I�(��+�S�u��]?�z�9NP�3Q�MJ�B  �
���mcJAt�qe�el��]�;�L��F j�v��b~�ۥ�)0M�/�띡e���	\�@Zv X�s.��Z���-�Ó��Q�iL0pIH�� @ȍl2��X�1��}���e��C��>�ȢF)�� ����ɵ\|5��Z��b���Q3	���kb���B� B-<y����9P/�M�#��_��<�� φ6R^ ����FAP�icû����;�|"B7�㙨^�9F ��ý3NP���eb�nM`I����<�Fn 3*�ָ䊀��DJ՝����q/�=M�f�t�� �.ו+�8W(M��6[���Z\��~���[�� ��`�\��7A���)����F)J�޺)��%��7� B��V�v4�'���xܺky�3m�F�kz �f�u�Jn\��zx�\�G����q*�V�,�: _H��i�%0�eTu	˔���3��E�+ �_�g ��dk߲#���Jq��x9���iF���>b/����� ��*
Y,�}��Ƴ�������X����� ��o�ۗ��.�F��F9�37���9�0�x2�� ���L� ���g�;�[������r���ؓ�	��� ${E&Cv�wdGa�|}�oj�b�P�<�/1 *�7�C
TQ��?R����֪¸��FHc�� \ �k�s���ӢC��S�-z��=<�k��� }	��da�nGۛ'�*���M���G�]����"� �Ѩ��@<���k�x+"7�><n��^�� ����2gj�,���/���c���2|�6څ� �g�b�K��^ؒ���hv��u�\#��̖�  �U��Q�u"��w�!��fB"���`ru^���9J -�?bF��,U1�.Er;H�Ԡ`pI��4Mn ܇h���6
���d3�����:iW�jG^��t�� ˬ6�MDmc�Y��Z���D�͹˸J��2�� �fس!�m���o�0�(P5i�W��x��3�Ob� ��z!��<y5�1�aF�=)�;ђ�)YbčW ��(��ڲ�M�<K:��R��-�`�#���5 ��܆�f؇��"xU. @����;2΂}X��}Hc �F9�6K�v�/�|S��]t�RF�W2��I� �N�4�!Z�j��_ƒ���ﳝ3�Hf���e� �G�jp)X}��L�{&<ĥ��)oܽ�� �n�cil�S��8�r%��V�l��4��q��FT 4(���+C�h5J$t�J���h8�ϽgX��( �ܟ��-@��Q�ǩ��g:��y���G�J�O �5�-��MTo>���cߤ�K����͏��.~�!s �*f{�ً��n��2D�x?����s>���%�؞�� ��V���	Ť��ڃ"��?�f�R�s�[Y�%=�� �$�����+`�.?�ʿA��=Gݗ��'Lm� 43�$���s`!?GQ61�D��+�BNk��$ @�J���ۊ�މ
��H��s��P��˓YH�P H�}ӰWU����f1O_�d��Hf�
��N�nZ� p
y��f�9����|=6���4��n`�RM�� �YY�c*��}+�;hs�(s��f�i@��n��ܱ�� /��J��5\�Z��_g4�4�%]�L����3h�� X�Y
��m�kּg�L��~�g���x�5�
% k�3�G�� ��F2#�)�	ER�O|��v\;�J *s�4��bc�v�7���h\Sř�_s�	�4�h�k �p[F����ll�<��A�=��l}�K���R�� h҄��3(/�e��f��`�z&�e$P��MD�� F?�Z#��.Wi�/0��=��	�9*W�-�� &��8�i_u&��>�-Z%�f�>R69ϓ5�%�� ym�Z���yM����w�\lOU��3��)H�/ ;�]���)J��5م��s<`Γ|���Q m����Wc�L����z0� ���ٶ�$<x ��ˎ�jy*ƱT1A��`��#^$L�
�Ӭ�c� C���4�h��y��t:;K�͑\�Df��1�� PH<��R�N�-Ulֵ��S�O�7g�n�䯲*��� E���ҷ��;j�A!'���FR5��k�� �D&<�@)�Z?��as�z�����A��?p�G �A�T:�U	3�QZ�j-r76y�c~����f p�&;Tt<�ѝ0捶�K߿#56�f��� o�&���-�},��'�w��_�BIS;�§g
�7;� 焙vGI�������P�
��W�� )\��u��ݡ�_6mV����*���[�1�l&�! ��[��P���q�s���k̍�R���`�L' ���� k|)�E@���B�#���b�V�<�2Ǡ3J %:��qI0fI�J��ͪ���<l �*�o�&�\b_-=�-���~���IV���� ��S:c٭ؙo߮���qO>�)o��Z�� ���^br�ee���	���Nǐ����5�j�Ja� N���NE���\�H3�K4��9�|f�U	�Ӹ�r��onecore\internal\sdk\inc\ntseapi.honecore\external\sdk\inc\winver.honecore\external\sdk\inc\minwin\sysinfoapi.honecore\external\sdk\inc\minwin\minappmodel.honecore\internal\sdk\inc\ntseapi_x.honecore\external\sdk\inc\winnetwk.honecore\external\sdk\inc\minwin\verrsrc.honecore\external\sdk\inc\minwin\consoleapi.honecore\external\sdk\inc\minwin\memoryapi.honecore\external\shared\inc\wnnc.honecore\internal\sdk\inc\ntlpcapi.honecore\internal\sdk\inc\minwin\ntwmi.honecore\internal\sdk\inc\minwin\ntwmi_x.honecore\external\sdk\inc\minwin\timezoneapi.honecore\external\sdk\inc\minwin\debugapi.honecore\external\sdk\inc\winnls.honecore\external\sdk\inc\minwin\datetimeapi.honecore\external\sdk\inc\mincore\systemtopologyapi.honecore\internal\sdk\inc\ntiolog.honecore\external\sdk\inc\windows.honecore\external\shared\inc\windef.honecore\external\sdk\inc\minwin\jobapi.honecore\external\shared\inc\minwin\minwindef.honecore\internal\sdk\inc\ntelfapi.honecore\external\shared\inc\rpcnterr.honecore\external\sdk\inc\mincore\consoleapi2.honecore\internal\com\inc\ntrpcp.honecore\external\sdk\inc\minwin\threadpoollegacyapiset.honecore\external\ddk\inc\ntnls.honecore\internal\sdk\inc\ntconfig.honecore\external\shared\inc\evntrace.honecore\external\sdk\inc\mincore\jobapi2.honecore\external\sdk\inc\mincore\processtopologyapi.honecore\external\shared\inc\pshpack8.honecore\external\sdk\inc\minwin\ime_cmodes.honecore\internal\sdk\inc\ntrtlstringandbuffer.honecore\external\sdk\inc\wmium.honecore\external\shared\inc\wmistr.honecore\external\sdk\inc\minwin\synchapi.honecore\internal\sdk\inc\ntwow64.honecore\external\sdk\inc\minwin\libloaderapi.honecore\internal\sdk\inc\ntwow64_x.honecore\external\sdk\inc\crt\stdarg.honecore\external\shared\inc\minwin\ntdef.honecore\external\sdk\inc\crt\ctype.honecore\internal\sdk\inc\ntpsapi.honecore\external\shared\inc\pshpck16.honecore\internal\sdk\inc\ntpsapi_x.honecore\external\ddk\inc\ntpoapi.honecore\external\sdk\inc\imm.honecore\admin\wmi\events\advapi\objfre\amd64\pch_hdr.srconecore\internal\sdk\inc\minwin\ntpnpapi.honecore\external\shared\inc\cfg.honecore\admin\wmi\events\advapi\objfre\amd64\precomp.pchonecore\external\sdk\inc\minwin\securityappcontainer.honecore\external\sdk\inc\minwin\interlockedapi.honecore\external\sdk\inc\minwin\utilapiset.honecore\internal\sdk\inc\rtlhashdef.honecore\internal\sdk\inc\nturtl.honecore\internal\sdk\inc\minwin\umstls.honecore\internal\sdk\inc\nxamd64.honecore\internal\sdk\inc\ntrtlpath.honecore\external\shared\inc\pshpack1.honecore\external\sdk\inc\minwin\winreg.honecore\external\sdk\inc\minwin\realtimeapiset.honecore\external\sdk\inc\reason.honecore\external\sdk\inc\minwin\stringapiset.honecore\external\sdk\inc\minwin\fibersapi.honecore\external\sdk\inc\wincon.honecore\external\sdk\inc\wincontypes.honecore\internal\sdk\inc\warning.honecore\internal\sdk\inc\ntxcapi.hshared\inc\winapifamily.honecore\internal\sdk\inc\suppress_x.honecore\admin\wmi\events\advapi\precomp.honecore\internal\sdk\inc\ntxcapi_x.hshared\inc\winpackagefamily.honecore\external\sdk\inc\minwin\ioapiset.honecore\internal\sdk\inc\nt.honecore\external\shared\inc\kernelspecs.honecore\external\shared\inc\basetsd.honecore\external\sdk\inc\crt\excpt.honecore\admin\wmi\events\idl\elf\objfre\amd64\elf.honecore\external\sdk\inc\crt\crtdefs.honecore\external\shared\inc\rpcndr.honecore\external\shared\inc\specstrings.honecore\external\sdk\inc\rpcnsip.honecore\external\sdk\inc\minwin\enclaveapi.honecore\external\shared\inc\dpfilter.honecore\external\shared\inc\sal.honecore\internal\sdk\inc\nttpapi.honecore\internal\sdk\inc\ntobapi.honecore\external\shared\inc\concurrencysal.honecore\external\sdk\inc\minwin\threadpoolapiset.honecore\internal\sdk\inc\ntobapi_x.honecore\external\shared\inc\specstrings_strict.honecore\external\shared\inc\poppack.honecore\external\shared\inc\specstrings_undef.honecore\external\sdk\inc\minwin\processthreadsapi.honecore\internal\sdk\inc\ntrtl.honecore\external\shared\inc\driverspecs.honecore\internal\sdk\inc\ntrtl_x.honecore\external\shared\inc\sdv_driverspecs.honecore\external\shared\inc\ip2string.honecore\external\sdk\inc\crt\vadefs.honecore\external\shared\inc\rpcdcep.honecore\external\sdk\inc\mincore\consoleapi3.honecore\external\sdk\inc\minwin\namedpipeapi.honecore\external\sdk\inc\rpcnsi.honecore\external\sdk\inc\minwin\profileapi.honecore\external\sdk\inc\minwin\handleapi.honecore\external\shared\inc\sdkddkver.honecore\external\sdk\inc\wingdi.honecore\external\sdk\inc\fileapifromapp.honecore\external\sdk\inc\minwin\fileapi.honecore\internal\sdk\inc\minwin\ntregapi.honecore\external\sdk\inc\minwin\apiquery2.honecore\internal\sdk\inc\ntregapi_x.honecore\external\sdk\inc\minwin\heapapi.honecore\internal\sdk\inc\ntamd64.honecore\internal\sdk\inc\ntamd64_x.honecore\internal\sdk\inc\minwin\ntdef_p.honecore\internal\sdk\inc\affinity.honecore\external\ddk\inc\ntimage.honecore\external\sdk\inc\winbase.honecore\external\sdk\inc\minwin\processenv.honecore\external\shared\inc\pshpack4.honecore\external\sdk\inc\minwin\minwinbase.honecore\internal\sdk\inc\volatile_accessors.honecore\external\shared\inc\pshpack2.honecore\admin\wmi\events\advapi\elfcommn.honecore\internal\sdk\inc\minwin\ntetw.honecore\external\sdk\inc\evntcons.honecore\external\shared\inc\evntprov.honecore\admin\wmi\events\idl\imports.honecore\external\shared\inc\tvout.honecore\external\sdk\inc\minwin\wow64apiset.honecore\internal\sdk\inc\minwin\ntioapi.honecore\external\shared\inc\devioctl.honecore\external\sdk\inc\minwin\securitybaseapi.honecore\internal\sdk\inc\minwin\ntioapi_x.honecore\external\sdk\inc\minwin\rtlsupportapi.honecore\external\shared\inc\minwin\apiset.honecore\external\shared\inc\rpcsal.honecore\internal\sdk\inc\ntmmapi.honecore\external\shared\inc\minwin\apisetcconv.honecore\internal\sdk\inc\ntmmapi_x.honecore\internal\sdk\inc\ntldr.honecore\internal\sdk\inc\nttmapi.honecore\external\shared\inc\ktmtypes.honecore\external\shared\inc\guiddef.honecore\external\sdk\inc\ntassert.honecore\external\sdk\inc\mincore\namespaceapi.honecore\external\shared\inc\rpc.honecore\external\shared\inc\ntstatus.honecore\external\shared\inc\rpcdce.honecore\internal\sdk\inc\ntkeapi.honecore\internal\sdk\inc\ntkeapi_x.honecore\external\sdk\inc\minwin\errhandlingapi.honecore\internal\sdk\inc\rtlfeatureconfigtypes.honecore\external\ddk\inc\mce.honecore\external\shared\inc\stralign.honecore\internal\sdk\inc\rtlrbtree.honecore\external\sdk\inc\crt\string.honecore\internal\sdk\inc\minwin\xstateapi.honecore\external\sdk\inc\winuser.honecore\internal\sdk\inc\ntexapi.honecore\external\sdk\inc\winsvc.honecore\external\shared\inc\winerror.honecore\internal\sdk\inc\ntexapi_x.honecore\internal\sdk\inc\pebteb.honecore\external\sdk\inc\mcx.h�L�^حܭ
\\//

�'%
:RtlNtPathSeperatorString
�1/
:RtlAlternateDosPathSeperatorString
�)'
:RtlDosPathSeperatorsString

��

"��
��
t��
u��

�6�LIST_ENTRY64.?AULIST_ENTRY64@@��
"
#Flink
#Blink6	LIST_ENTRY64.?AULIST_ENTRY64@@��2onecore\external\shared\inc\minwin\ntdef.h�
�6�LIST_ENTRY32.?AULIST_ENTRY32@@��

"
"Flink
"Blink6LIST_ENTRY32.?AULIST_ENTRY32@@���
p��
##

q��
##

��

��

p��
 
p��
"
��
$
��
&
��
(
��
*
!p,
-
 ��
/
 ��
1#p3
4
 ��
6
 ��
8
%:
;
!��
='?
@
!��
B
)D
E
"��
GI
J
"��
L
+N
O
#��
QS
T
#��
V

X

Z�SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATEDSE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN��SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE�SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS��SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE���Nt\SE_WS_APPX_SIGNATURE_ORIGIN.?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@�*onecore\internal\sdk\inc\ntseapi.h�]^�PS_MITIGATION_OPTION_NX��PS_MITIGATION_OPTION_SEHOP���PS_MITIGATION_OPTION_FORCE_RELOCATE_IMAGES���PS_MITIGATION_OPTION_HEAP_TERMINATE��PS_MITIGATION_OPTION_BOTTOM_UP_ASLR��PS_MITIGATION_OPTION_HIGH_ENTROPY_ASLR���PS_MITIGATION_OPTION_STRICT_HANDLE_CHECKSPS_MITIGATION_OPTION_WIN32K_SYSTEM_CALL_DISABLE��PS_MITIGATION_OPTION_EXTENSION_POINT_DISABLE�	PS_MITIGATION_OPTION_PROHIBIT_DYNAMIC_CODE���
PS_MITIGATION_OPTION_CONTROL_FLOW_GUARD��PS_MITIGATION_OPTION_BLOCK_NON_MICROSOFT_BINARIESPS_MITIGATION_OPTION_FONT_DISABLE
PS_MITIGATION_OPTION_IMAGE_LOAD_NO_REMOTEPS_MITIGATION_OPTION_IMAGE_LOAD_NO_LOW_LABEL�PS_MITIGATION_OPTION_IMAGE_LOAD_PREFER_SYSTEM32��PS_MITIGATION_OPTION_RETURN_FLOW_GUARD���PS_MITIGATION_OPTION_LOADER_INTEGRITY_CONTINUITY�PS_MITIGATION_OPTION_STRICT_CONTROL_FLOW_GUARD���PS_MITIGATION_OPTION_RESTRICT_SET_THREAD_CONTEXT�PS_MITIGATION_OPTION_ROP_STACKPIVOT��PS_MITIGATION_OPTION_ROP_CALLER_CHECKPS_MITIGATION_OPTION_ROP_SIMEXEC�PS_MITIGATION_OPTION_EXPORT_ADDRESS_FILTER���PS_MITIGATION_OPTION_EXPORT_ADDRESS_FILTER_PLUS��PS_MITIGATION_OPTION_RESTRICT_CHILD_PROCESS_CREATION�PS_MITIGATION_OPTION_IMPORT_ADDRESS_FILTER���PS_MITIGATION_OPTION_MODULE_TAMPERING_PROTECTION�PS_MITIGATION_OPTION_RESTRICT_INDIRECT_BRANCH_PREDICTION�PS_MITIGATION_OPTION_SPECULATIVE_STORE_BYPASS_DISABLEPS_MITIGATION_OPTION_ALLOW_DOWNGRADE_DYNAMIC_CODE_POLICY�PS_MITIGATION_OPTION_CET_USER_SHADOW_STACKS�� PS_MITIGATION_OPTION_USER_CET_SET_CONTEXT_IP_VALIDATION��!PS_MITIGATION_OPTION_BLOCK_NON_CET_BINARIES��$PS_MITIGATION_OPTION_CET_DYNAMIC_APIS_OUT_OF_PROC_ONLY���B#t`_PS_MITIGATION_OPTION.?AW4_PS_MITIGATION_OPTION@@�*onecore\internal\sdk\inc\ntpsapi.h�ab�
#R�_PS_MITIGATION_OPTIONS_MAP.?AU_PS_MITIGATION_OPTIONS_MAP@@��##�
fMap��Rg_PS_MITIGATION_OPTIONS_MAP.?AU_PS_MITIGATION_OPTIONS_MAP@@��hbm
e^�_PS_MITIGATION_AUDIT_OPTIONS_MAP.?AU_PS_MITIGATION_AUDIT_OPTIONS_MAP@@��
fMap��^l_PS_MITIGATION_AUDIT_OPTIONS_MAP.?AU_PS_MITIGATION_AUDIT_OPTIONS_MAP@@��mb�
kB�_KUSER_SHARED_DATA.?AU_KUSER_SHARED_DATA@@��
p6�_KSYSTEM_TIME.?AU_KSYSTEM_TIME@@
r��q#�JNtProductWinNt���NtProductLanManNtNtProductServer��:tu_NT_PRODUCT_TYPE.?AW4_NT_PRODUCT_TYPE@@���v� #� #@�BStandardDesign���NEC98x86�EndAlternatives��Vtz_ALTERNATIVE_ARCHITECTURE_TYPE.?AW4_ALTERNATIVE_ARCHITECTURE_TYPE@@���.onecore\internal\sdk\inc\ntexapi_x.h���{|�2�_LARGE_INTEGER.?AT_LARGE_INTEGER@@��
 ��
 ��
 ��
 �� #�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��"#�##�"#�"#�!# �
#��F�_XSTATE_CONFIGURATION.?AU_XSTATE_CONFIGURATION@@B
"TickCountLowDeprecated���
"TickCountMultiplier��
sInterruptTime
sSystemTime���
s TimeZoneBias�
!,ImageNumberLow���
!.ImageNumberHigh��
t0NtSystemRoot�
"8MaxStackTraceDepth���
"<CryptoExponent���
"@TimeZoneId���
"DLargePageMinimum�
"HAitSamplingValue�
"LAppCompatFlag
#PRNGSeedVersion���
"XGlobalValidationRunlevel�
\TimeZoneBiasStamp
"`NtBuildNumber
vdNtProductType
 hProductTypeIsValid���
xiReserved0
!jNativeProcessorArchitecture��
"lNtMajorVersion���
"pNtMinorVersion���
ytProcessorFeatures
"�Reserved1
"�Reserved3
L�TimeSlip�
{�AlternativeArchitecture��
"�BootId���
~�SystemExpirationDate�
"�SuiteMask
 �KdDebuggerEnabled
 �MitigationPolicies���
�NXSupportPolicy��
��SEHValidationPolicy��
��CurDirDevicesSkippedForDlls��
��Reserved�
!�CyclesPerYield���
L�ActiveConsoleId��
L�DismountCount
"�ComPlusPackage���
"�LastSystemRITEventTickCount��
"�NumberOfPhysicalPages
 �SafeBootMode�
 �VirtualizationFlags��
��Reserved12���
"�SharedDataFlags��
��DbgErrorPortPresent��
��DbgElevationEnabled��
��DbgVirtEnabled���
��DbgInstallerDetectEnabled
��DbgLkgEnabled
��DbgDynProcessorEnabled���
��DbgConsoleBrokerEnabled��
��DbgSecureBootEnabled�
��DbgMultiSessionSku���
��DbgMultiUsersInSessionSku
��DbgStateSeparationEnabled
��SpareBits
��DataFlagsPad�
#�TestRetInstruction���
QpcFrequency�
"SystemCall���
"Reserved2
�SystemCallPad
s TickCount
V TickCountQuad
� ReservedTickCountOverlay�
�,TickCountPad�
"0Cookie���
�4CookiePad
8ConsoleSessionForegroundProcessId
#@TimeUpdateLock���
#HBaselineSystemTimeQpc
#PBaselineInterruptTimeQpc�
#XQpcSystemTimeIncrement���
#`QpcInterruptTimeIncrement
 hQpcSystemTimeIncrementShift��
 iQpcInterruptTimeIncrementShift���
!jUnparkedProcessorCount���
�lEnclaveFeatureMask���
"|TelemetryCoverageRound���
��UserModeGlobalLogger�
"�ImageFileExecutionOptions
"�LangGenerationCount��
#�Reserved4
��InterruptTimeBias
��QpcBias��
"�ActiveProcessorCount�
6�ActiveGroupCount�
 �Reserved9
!�QpcData��
6�QpcBypassEnabled�
 �QpcShift�
~�TimeZoneBiasEffectiveStart���
~�TimeZoneBiasEffectiveEnd�
��XState���
rFeatureConfigurationChangeStamp��
"SpareBd� _KUSER_SHARED_DATA.?AU_KUSER_SHARED_DATA@@���|
R#�
�2�_ULARGE_INTEGER.?AT_ULARGE_INTEGER@@*
"LowPart��
"HighPart�:�<anonymous-tag>.?AU<anonymous-tag>@@��J
"LowPart��
"HighPart�
�u
#QuadPart�2�_ULARGE_INTEGER.?AT_ULARGE_INTEGER@@��
�#�
�J�_TP_CALLBACK_ENVIRON_V3.?AU_TP_CALLBACK_ENVIRON_V3@@
�.�_TP_POOL.?AU_TP_POOL@@��
�>�_TP_CLEANUP_GROUP.?AU_TP_CLEANUP_GROUP@@
��
�B�_ACTIVATION_CONTEXT.?AU_ACTIVATION_CONTEXT@@
�F�_TP_CALLBACK_INSTANCE.?AU_TP_CALLBACK_INSTANCE@@
���
�
"��
"��
"��F
�LongFunction�
�Persistent���
�Private��:�<anonymous-tag>.?AU<anonymous-tag>@@*onecore\internal\sdk\inc\nttpapi.h���!
"Flags
�s2�<anonymous-tag>.?AT<anonymous-tag>@@���TP_CALLBACK_PRIORITY_HIGHTP_CALLBACK_PRIORITY_NORMAL��TP_CALLBACK_PRIORITY_LOW�TP_CALLBACK_PRIORITY_INVALID�TP_CALLBACK_PRIORITY_COUNT���Bt�_TP_CALLBACK_PRIORITY.?AW4_TP_CALLBACK_PRIORITY@@���J�
"Version��
�Pool�
�CleanupGroup�
�CleanupGroupCancelCallback���
 RaceDll��
�(ActivationContext
�0FinalizationCallback�
�8u
�<CallbackPriority�
"@Size�J
�H_TP_CALLBACK_ENVIRON_V3.?AU_TP_CALLBACK_ENVIRON_V3@@��
�
�
�

�
�
�&�_TEB.?AU_TEB@@��
�*�_NT_TIB.?AU_NT_TIB@@2�_CLIENT_ID.?AU_CLIENT_ID@@��&�_PEB.?AU_PEB@@��
�"#h�"#�#��#��p#
�N�_ACTIVATION_CONTEXT_STACK.?AU_ACTIVATION_CONTEXT_STACK@@ #� #�
�:�_GDI_TEB_BATCH.?AU_GDI_TEB_BATCH@@��##��#H�##��:�_UNICODE_STRING.?AU_UNICODE_STRING@@q#
� #�#�2�_LIST_ENTRY.?AU_LIST_ENTRY@@#�#X�&�_GUID.?AU_GUID@@>�_PROCESSOR_NUMBER.?AU_PROCESSOR_NUMBER@@
>�_TEB_ACTIVE_FRAME.?AU_TEB_ACTIVE_FRAME@@
�
!��
!��
!��
!��
!��
!��
!��
!��
!��
!��
!	��
!
��
!��
!��
!
��
!��
!��

�NtTib
8EnvironmentPointer���
�@ClientId�
PActiveRpcHandle��
XThreadLocalStoragePointer
�`ProcessEnvironmentBlock��
"hLastErrorValue���
"lCountOfOwnedCriticalSections�
pCsrClientThread��
xWin32ThreadInfo��
��User32Reserved���
��UserReserved�
WOW32Reserved
"CurrentLocale
"FpSoftwareStatusRegister�
�ReservedForDebuggerInstrumentation���
��SystemReserved1��
p�PlaceholderCompatibilityMode�
 �PlaceholderHydrationAlwaysExplicit���
��PlaceholderReserved��
"�ProxiedProcessId�
��_ActivationStack�
��WorkingOnBehalfTicket
�ExceptionCode
��Padding0�
��ActivationContextStackPointer
#�InstrumentationCallbackSp
#�InstrumentationCallbackPreviousPc
#�InstrumentationCallbackPreviousSp
"�TxFsContext��
 �InstrumentationCallbackDisabled��
 �UnalignedLoadStoreExceptions�
��Padding1�
��GdiTebBatch��
��RealClientId�
�GdiCachedProcessHandle���
"�GdiClientPID�
"�GdiClientTID�
�GdiThreadLocalInfo���
�Win32ClientInfo��
��	glDispatchTable��
�8glReserved1��
 glReserved2��
(glSectionInfo
0glSection
8glTable��
@glCurrentRC��
HglContext
"PLastStatusValue��
�TPadding2�
�XStaticUnicodeString��
�hStaticUnicodeBuffer��
�rPadding3�
xDeallocationStack
��TlsSlots�
��TlsLinks�
�Vdm��
�ReservedForNtRpc�
��DbgSsReserved
"�HardErrorMode
��Padding4�
��Instrumentation��
�ActivityId���
 SubProcessTag
(PerflibData��
0EtwTraceData�
8WinSockData��
"@GdiBatchCount
�DCurrentIdealProcessor
"DIdealProcessorValue��
 DReservedPad0�
 EReservedPad1�
 FReservedPad2�
 GIdealProcessor���
"HGuaranteedStackBytes�
�LPadding5�
PReservedForPerf��
XReservedForOle���
"`WaitingOnLoaderLock��
�dPadding6�
hSavedPriorityState���
#pReservedForCodeCoverage��
xThreadPoolData���
��TlsExpansionSlots
�DeallocationBStore���
�BStoreLimit��
"�MuiGeneration
"�IsImpersonating��
�NlsCache�
�pShimData
"�HeapData�
��Padding7�
�CurrentTransactionHandle�
��ActiveFrame��
�FlsData��
�PreferredLanguages���
�UserPrefLanguages
�MergedPrefLanguages��
"�MuiImpersonation�
B�CrossTebFlags
��SpareCrossTebBits
!�SameTebFlags�
��SafeThunkCall
��InDebugPrint�
��HasFiberData�
��SkipThreadAttach�
��WerInShipAssertCode��
��RanProcessInit���
��ClonedThread�
��SuppressDebugMsg�
��DisableUserStackWalk�
��RtlExceptionAttached�
��InitialThread
��SessionAware�
��LoadOwner
��LoaderWorker�
��SkipLoaderInit���
��SpareSameTebBits�
�TxnScopeEnterCallback
�TxnScopeExitCallback�
TxnScopeContext��
"LockCount
WowTebOffset�
ResourceRetValue�
ReservedForWdf���
# ReservedForCrt���
�(EffectiveContainerId�&�8_TEB.?AU_TEB@@��*onecore\internal\sdk\inc\pebteb.h����

�
�"
Flink
Blink2_LIST_ENTRY.?AU_LIST_ENTRY@@Y

���

�


"



B�_SINGLE_LIST_ENTRY.?AU_SINGLE_LIST_ENTRY@@��


Next�B_SINGLE_LIST_ENTRY.?AU_SINGLE_LIST_ENTRY@@��c
>�_RTL_SPLAY_LINKS.?AU_RTL_SPLAY_LINKS@@��

B
!Parent���
!LeftChild
!RightChild���>"_RTL_SPLAY_LINKS.?AU_RTL_SPLAY_LINKS@@��*onecore\internal\sdk\inc\ntrtl_x.h�#$x
!Z�_RTL_DYNAMIC_HASH_TABLE_CONTEXT.?AU_RTL_DYNAMIC_HASH_TABLE_CONTEXT@@
'B
ChainHead
PrevLinkage��
#SignatureZ)_RTL_DYNAMIC_HASH_TABLE_CONTEXT.?AU_RTL_DYNAMIC_HASH_TABLE_CONTEXT@@*$,	
b�_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR.?AU_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR@@��
-V�_RTL_DYNAMIC_HASH_TABLE_ENTRY.?AU_RTL_DYNAMIC_HASH_TABLE_ENTRY@@V
/HashEntry
CurEntry�
ChainHead
" BucketIndex��b0(_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR.?AU_RTL_DYNAMIC_HASH_TABLE_ENUMERATOR@@��1$2	J�_RTL_DYNAMIC_HASH_TABLE.?AU_RTL_DYNAMIC_HASH_TABLE@@
3�
"Flags
"Shift
"TableSize
"Pivot
"DivisorMask��
"NumEntries���
"NonEmptyBuckets��
"NumEnumerators���
 DirectoryJ	5(_RTL_DYNAMIC_HASH_TABLE.?AU_RTL_DYNAMIC_HASH_TABLE@@6$;	
�B
!Length���
!MaximumLength
qBuffer���:9_UNICODE_STRING.?AU_UNICODE_STRING@@:
q*�_STRING.?AU_STRING@@
=B
!Length���
!MaximumLength
pBuffer���*?_STRING.?AU_STRING@@@�
p
p��
C*
"LowPart��
HighPart�:E<anonymous-tag>.?AU<anonymous-tag>@@F�J
"LowPart��
HighPart�
Fu
QuadPart�2H_LARGE_INTEGER.?AT_LARGE_INTEGER@@��I�
~2�_RTL_BITMAP.?AU_RTL_BITMAP@@
L.
"SizeOfBitMap�
"Buffer���2N_RTL_BITMAP.?AU_RTL_BITMAP@@O$f
"
��
R&�_LUID.?AU_LUID@@*
"LowPart��
HighPart�&U_LUID.?AU_LUID@@V�b�_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG.?AU_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG@@
X
q��
Z&
"Size�
[TriggerIdb\_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG.?AU_CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG@@]$&
[B�_IMAGE_NT_HEADERS64.?AU_IMAGE_NT_HEADERS64@@
`B�_IMAGE_FILE_HEADER.?AU_IMAGE_FILE_HEADER@@��N�_IMAGE_OPTIONAL_HEADER64.?AU_IMAGE_OPTIONAL_HEADER64@@��J
"Signature
bFileHeader���
cOptionalHeader���Bd_IMAGE_NT_HEADERS64.?AU_IMAGE_NT_HEADERS64@@*onecore\external\ddk\inc\ntimage.h�efv>�_IMAGE_DOS_HEADER.?AU_IMAGE_DOS_HEADER@@
h!#�!#�n
!e_magic��
!e_cblp���
!e_cp�
!e_crlc���
!e_cparhdr
!
e_minalloc���
!e_maxalloc���
!e_ss�
!e_sp�
!e_csum���
!e_ip�
!e_cs�
!e_lfarlc�
!e_ovno���
je_res
!$e_oemid��
!&e_oeminfo
k(e_res2���
<e_lfanew�>l@_IMAGE_DOS_HEADER.?AU_IMAGE_DOS_HEADER@@mfE!#�!#�6�_RTL_RB_TREE.?AU_RTL_RB_TREE@@��
qB�_RTL_BALANCED_NODE.?AU_RTL_BALANCED_NODE@@��
s
 ��6
tRoot�
uEncoded��
tMin��6v_RTL_RB_TREE.?AU_RTL_RB_TREE@@��.onecore\internal\sdk\inc\rtlrbtree.h���wx,
t
s{#�
 ��
 ��r
|Children�
{Left�
{Right
}Red��
~Balance��
#ParentValue��B_RTL_BALANCED_NODE.?AU_RTL_BALANCED_NODE@@���r
s��
�
{tt"t�
�
st�
���"�
�t�
���"��
��� "��
���  "��
��"��
���  "��
�r"�
�
rt�
�rt t�
�6�_RTL_AVL_TREE.?AU_RTL_AVL_TREE@@
�
s
�Root�6�_RTL_AVL_TREE.?AU_RTL_AVL_TREE@@�x6
����
�
��
�����
��� ��
��� ��
�
� #�B
"Data1
!Data2
!Data3
�Data4&�_GUID.?AU_GUID@@.onecore\external\shared\inc\guiddef.h����
 &##"""�
�
��
����
�����
���
����
�
qq�
�
q��
�
���
�
Z��t�
�
q��
�
���t�
�
�t�
�
�t�
�qq�
�
�
��q��
�����
�q#t�
�
�#
t
J�_EVENT_DATA_DESCRIPTOR.?AU_EVENT_DATA_DESCRIPTOR@@��
n
#Ptr��
"Size�
"Reserved�
 Type�
 
Reserved1
!Reserved2J	_EVENT_DATA_DESCRIPTOR.?AU_EVENT_DATA_DESCRIPTOR@@��.onecore\external\shared\inc\evntprov.h�
�>�_EVENT_DESCRIPTOR.?AU_EVENT_DESCRIPTOR@@

�
!Id���
 Version��
 Channel��
 Level
 Opcode���
!Task�
#Keyword��>_EVENT_DESCRIPTOR.?AU_EVENT_DESCRIPTOR@@�

��

!��

 ��

#��
6�_EVENT_RECORD.?AU_EVENT_RECORD@@
��
6�_EVENT_HEADER.?AU_EVENT_HEADER@@B�_ETW_BUFFER_CONTEXT.?AU_ETW_BUFFER_CONTEXT@@^�_EVENT_HEADER_EXTENDED_DATA_ITEM.?AU_EVENT_HEADER_EXTENDED_DATA_ITEM@@��
�
EventHeader��
PBufferContext
!TExtendedDataCount
!VUserDataLength���
 XExtendedData�
`UserData�
hUserContext��6!p_EVENT_RECORD.?AU_EVENT_RECORD@@*onecore\external\sdk\inc\evntcons.h"#�
!��
%
p��
'
!��
)B�_PERFINFO_GROUPMASK.?AU_PERFINFO_GROUPMASK@@
+"# �
-MasksB. _PERFINFO_GROUPMASK.?AU_PERFINFO_GROUPMASK@@.onecore\internal\sdk\inc\minwin\ntwmi.h/0�
"
�###4
5
���
7p#��ProcThreadAttributeParentProcess�ProcThreadAttributeHandleListProcThreadAttributeGroupAffinity�ProcThreadAttributePreferredNode�ProcThreadAttributeIdealProcessorProcThreadAttributeUmsThread�ProcThreadAttributeMitigationPolicy��	ProcThreadAttributeSecurityCapabilities��ProcThreadAttributeProtectionLevel���
ProcThreadAttributeJobList���ProcThreadAttributeChildProcessPolicyProcThreadAttributeAllApplicationPackagesPolicy��ProcThreadAttributeWin32kFilter��ProcThreadAttributeSafeOpenPromptOriginClaim�ProcThreadAttributeDesktopAppPolicy��ProcThreadAttributePseudoConsole�ProcThreadAttributeMitigationAuditPolicy�Nt:_PROC_THREAD_ATTRIBUTE_NUM.?AW4_PROC_THREAD_ATTRIBUTE_NUM@@���*onecore\external\sdk\inc\winbase.h�;<�
*�HWND__.?AUHWND__@@��
tunused���*?HWND__.?AUHWND__@@��.onecore\external\shared\inc\windef.h���@A'JAuditEventObjectAccess���AuditEventDirectoryServiceAccess�:tC_AUDIT_EVENT_TYPE.?AW4_AUDIT_EVENT_TYPE@@�.onecore\internal\sdk\inc\ntseapi_x.h���DEN.�_ICONINFO.?AU_ICONINFO@@.�HBITMAP__.?AUHBITMAP__@@
Hb
tfIcon
"xHotspot�
"yHotspot�
IhbmMask��
IhbmColor�.J _ICONINFO.?AU_ICONINFO@@*onecore\external\sdk\inc\winuser.h�KL�)N�_WIN32_MEMORY_RANGE_ENTRY.?AU_WIN32_MEMORY_RANGE_ENTRY@@6
VirtualAddress���
#NumberOfBytesNO_WIN32_MEMORY_RANGE_ENTRY.?AU_WIN32_MEMORY_RANGE_ENTRY@@2onecore\external\sdk\inc\minwin\memoryapi.hPQ�jSmrGcActionStart�SmrGcActionStartFullSpeedSmrGcActionPause�SmrGcActionStop��NtS_REFS_SMR_VOLUME_GC_ACTION.?AW4_REFS_SMR_VOLUME_GC_ACTION@@���2onecore\internal\sdk\inc\minwin\ntioapi_x.hTU� Z�_FILE_LINKS_FULL_ID_INFORMATION.?AU_FILE_LINKS_FULL_ID_INFORMATION@@f�_FILE_LINK_ENTRY_FULL_ID_INFORMATION.?AU_FILE_LINK_ENTRY_FULL_ID_INFORMATION@@��F
"BytesNeeded��
"EntriesReturned��
XEntryZY$_FILE_LINKS_FULL_ID_INFORMATION.?AU_FILE_LINKS_FULL_ID_INFORMATION@@ZU�^�_IMAGE_ARM_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ARM_RUNTIME_FUNCTION_ENTRY@@
"��
"��
"
��
"��
"��
"��
"��
"��
"
���
"BeginAddress�
"UnwindData���
]Flag�
^FunctionLength���
_Ret��
`H
aReg��
bR
cL
dC
eStackAdjust��^f_IMAGE_ARM_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ARM_RUNTIME_FUNCTION_ENTRY@@gf�^�_SERVICE_DELAYED_AUTO_START_INFO.?AU_SERVICE_DELAYED_AUTO_START_INFO@@��
i
tfDelayedAutostart^k_SERVICE_DELAYED_AUTO_START_INFO.?AU_SERVICE_DELAYED_AUTO_START_INFO@@��*onecore\external\sdk\inc\winsvc.h��lm<2�HINSTANCE__.?AUHINSTANCE__@@
o
'pqq!tr
sN�_ENCLAVE_CREATE_INFO_SGX.?AU_ENCLAVE_CREATE_INFO_SGX@@�� #�
vSecs�Nw_ENCLAVE_CREATE_INFO_SGX.?AU_ENCLAVE_CREATE_INFO_SGX@@��.onecore\internal\sdk\inc\ntmmapi_x.h���xy��
ProcessBasicInformation��ProcessQuotaLimits���ProcessIoCountersProcessVmCountersProcessTimes�ProcessBasePriority��ProcessRaisePriority�ProcessDebugPort�ProcessExceptionPort�	ProcessAccessToken���
ProcessLdtInformationProcessLdtSize���ProcessDefaultHardErrorMode��
ProcessIoPortHandlersProcessPooledUsageAndLimits��ProcessWorkingSetWatch���ProcessUserModeIOPL��ProcessEnableAlignmentFaultFixup�ProcessPriorityClass�ProcessWx86Information���ProcessHandleCount���ProcessAffinityMask��ProcessPriorityBoost�ProcessDeviceMap�ProcessSessionInformationProcessForegroundInformation�ProcessWow64Information��ProcessImageFileName�ProcessLUIDDeviceMapsEnabled�ProcessBreakOnTerminationProcessDebugObjectHandle�ProcessDebugFlags ProcessHandleTracing�!ProcessIoPriority"ProcessExecuteFlags��#ProcessTlsInformation$ProcessCookie%ProcessImageInformation��&ProcessCycleTime�'ProcessPagePriority��(ProcessInstrumentationCallback���)ProcessThreadStackAllocation�*ProcessWorkingSetWatchEx�+ProcessImageFileNameWin32,ProcessImageFileMapping��-ProcessAffinityUpdateMode.ProcessMemoryAllocationMode��/ProcessGroupInformation��0ProcessTokenVirtualizationEnabled1ProcessOwnerInformation��2ProcessWindowInformation�3ProcessHandleInformation�4ProcessMitigationPolicy��5ProcessDynamicFunctionTableInformation���6ProcessHandleCheckingMode7ProcessKeepAliveCount8ProcessRevokeFileHandles�9ProcessWorkingSetControl�:ProcessHandleTable���;ProcessCheckStackExtentsMode�<ProcessCommandLineInformation=ProcessProtectionInformation�>ProcessMemoryExhaustion��?ProcessFaultInformation��@ProcessTelemetryIdInformationAProcessCommitReleaseInformation��BProcessDefaultCpuSetsInformation�CProcessAllowedCpuSetsInformation�BProcessReserved1Information��CProcessReserved2Information��DProcessSubsystemProcess��EProcessJobMemoryInformation��FProcessInPrivate�GProcessRaiseUMExceptionOnInvalidHandleClose��HProcessIumChallengeResponse��IProcessChildProcessInformation���JProcessHighGraphicsPriorityInformation���KProcessSubsystemInformation��LProcessEnergyValues��MProcessPowerThrottlingState��NProcessReserved3Information��OProcessWin32kSyscallFilterInformationPProcessDisableSystemAllowedCpuSets���QProcessWakeInformation���RProcessEnergyTrackingState���SProcessManageWritesToExecutableMemoryTProcessCaptureTrustletLiveDump���UProcessTelemetryCoverage�VProcessEnclaveInformationWProcessEnableReadWriteVmLogging��XProcessUptimeInformation�YProcessImageSection��ZProcessDebugAuthInformation��[ProcessSystemResourceManagement��\ProcessSequenceNumber]ProcessLoaderDetour��^ProcessSecurityDomainInformation�_ProcessCombineSecurityDomainsInformation�`ProcessEnableLogging�aProcessLeapSecondInformation�bProcessFiberShadowStackAllocationcProcessFreeFiberShadowStackAllocationdProcessAltSystemCallInformation��eProcessDynamicEHContinuationTargets��fProcessDynamicEnforcedCetCompatibleRangesgMaxProcessInfoClass��:jt{_PROCESSINFOCLASS.?AW4_PROCESSINFOCLASS@@�.onecore\internal\sdk\inc\ntpsapi_x.h���|}]J�_PERFINFO_IPI_SEND_DATA.?AU_PERFINFO_IPI_SEND_DATA@@v
#InitialTime��
WorkerRoutine
"RequestType��
"IpiType��
"TargetCount��J�_PERFINFO_IPI_SEND_DATA.?AU_PERFINFO_IPI_SEND_DATA@@�05b�_ASSEMBLY_FILE_DETAILED_INFORMATION.?AU_ASSEMBLY_FILE_DETAILED_INFORMATION@@z
"ulFlags��
"ulFilenameLength�
"ulPathLength�
[lpFileName���
[lpFilePath���b� _ASSEMBLY_FILE_DETAILED_INFORMATION.?AU_ASSEMBLY_FILE_DETAILED_INFORMATION@@*onecore\internal\sdk\inc\nturtl.h�����:�_PS_CREATE_INFO.?AU_PS_CREATE_INFO@@�PsCreateInitialState�PsCreateFailOnFileOpen���PsCreateFailOnSectionCreate��PsCreateFailExeFormatPsCreateFailMachineMismatch��PsCreateFailExeName��PsCreateSuccess��PsCreateMaximumStates6t�PS_CREATE_STATE.?AW4PS_CREATE_STATE@@��b)
 ��
 ��
 ��
 ��
 ��
 ��
!��
"InitFlags
�WriteOutputOnExit
�DetectManifest���
�IFEOSkipDebugger�
�IFEODoNotPropagateKeyState���
�SpareBits1���
�SpareBits2���
�ProhibitedImageCharacteristics���
"AdditionalFileAccess�:	�<anonymous-tag>.?AU<anonymous-tag>@@�b�	
FileHandle���:�<anonymous-tag>.?AU<anonymous-tag>@@�b�	"
!DllCharacteristics���:�<anonymous-tag>.?AU<anonymous-tag>@@�b�	
IFEOKey��:�<anonymous-tag>.?AU<anonymous-tag>@@�b�	
 ��
 ��
 ��
 ��
 ��
 ��
 ��
!��
"OutputFlags��
�ProtectedProcess�
�AddressSpaceOverride�
�DevOverrideEnabled���
�ManifestDetected�
�ProtectedProcessLight
�SpareBits1���
�SpareBits2���
�SpareBits3���
FileHandle���
SectionHandle
#UserProcessParametersNative��
" UserProcessParametersWow64���
"$CurrentParameterFlags
#(PebAddressNative�
"0PebAddressWow64��
#8ManifestAddress��
"@ManifestSize�:�H<anonymous-tag>.?AU<anonymous-tag>@@�b�	�
#Size�
�State
�InitState
�FailSection��
�ExeFormat
�ExeName��
�SuccessState�:�X_PS_CREATE_INFO.?AU_PS_CREATE_INFO@@�b�	J�MEM_EXTENDED_PARAMETER.?AUMEM_EXTENDED_PARAMETER@@��
�
#��
#8��
�Type�
�Reserved�
#ULong64��
Pointer��
#Size�
Handle���
"ULongJ�MEM_EXTENDED_PARAMETER.?AUMEM_EXTENDED_PARAMETER@@���y�r�_SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION.?AU_SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION@@��f�_SYSTEM_SECUREBOOT_POLICY_INFORMATION.?AU_SYSTEM_SECUREBOOT_POLICY_INFORMATION@@ #�J
�PolicyInformation
"PolicySize���
�Policy���r� _SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION.?AU_SYSTEM_SECUREBOOT_POLICY_FULL_INFORMATION@@��*onecore\internal\sdk\inc\ntexapi.h����>�_ALPC_TOKEN_ATTR.?AU_ALPC_TOKEN_ATTR@@��J
TTokenId��
TAuthenticationId�
TModifiedId���>�_ALPC_TOKEN_ATTR.?AU_ALPC_TOKEN_ATTR@@��*onecore\internal\sdk\inc\ntlpcapi.h��^F�_MIDL_METHOD_PROPERTY.?AU_MIDL_METHOD_PROPERTY@@
�"
"Id���
#ValueF�_MIDL_METHOD_PROPERTY.?AU_MIDL_METHOD_PROPERTY@@.onecore\external\shared\inc\rpcndr.h�����[^VrfSpecialPoolRuleClass��VrfForceIrqlRuleClassVrfAllocationFailuresRuleClass���VrfTrackingPoolAllocationsRuleClass��VrfIORuleClass���VrfDeadlockPreventionRuleClass���VrfEnhancedIORuleClass���VrfDMARuleClass��VrfSecurityRuleClass�	VrfForcePendingIORequestRuleClass
VrfIRPTrackingRuleClass��VrfMiscellaneousRuleClassVrfMoreDebuggingRuleClass
VrfMDLInvariantStackRuleClassVrfMDLInvariantDriverRuleClass���VrfPowerDelayFuzzingRuleClassVrfPortMiniportRuleClass�VrfStandardDDIRuleClass��VrfAutoFailRuleClass�VrfAdditionalDDIRuleClassVrfRuleClassBase�VrfNdisWifiRuleClass�VrfDriverLoggingRuleClassVrfSyncDelayFuzzingRuleClass�VrfVMSwitchingRuleClass��VrfCodeIntegrityRuleClassVrfBelow4GBAllocationRuleClass���VrfProcessorBranchTraceRuleClass�VrfAdvancedMMRuleClass���VrfExtendingXDVTimeLimit�VrfSystemBIOSRuleClass���VrfHardwareRuleClass� VrfStateSepRuleClass�!VrfWDFRuleClass��"VrfMoreIrqlRuleClass�#VrfXDVPlatformMode���$VrfStandalonePlatformMode%VrfPlatformModeTest��&VrfInfoDisclosureIRPRule�'VrfLwSpecialPool�(VrfAVXCorruption�)VrfAccessModeMismatch*ReservedForDVRF42+ReservedForDVRF43,ReservedForDVRF44-ReservedForDVRF45.ReservedForDVRF46/ReservedForDVRF470ReservedForDVRF481ReservedForDVRF492ReservedForDVRF503ReservedForDVRF514ReservedForDVRF525ReservedForDVRF536ReservedForDVRF547ReservedForDVRF558ReservedForDVRF569ReservedForDVRF57:ReservedForDVRF58;ReservedForDVRF59<ReservedForDVRF60=ReservedForDVRF61>ReservedForDVRF62?ReservedForDVRF63@VrfRuleClassSizeMax��>At�_VRF_RULE_CLASS_ID.?AW4_VRF_RULE_CLASS_ID@@�����w�TraceGuidQueryList���TraceGuidQueryInfo���TraceGuidQueryProcessTraceStackTracingInfoTraceSystemTraceEnableFlagsInfo��TraceSampledProfileIntervalInfo��TraceProfileSourceConfigInfo�TraceProfileSourceListInfo���TracePmcEventListInfo	TracePmcCounterListInfo��
TraceSetDisallowList�TraceVersionInfo�TraceGroupQueryList��
TraceGroupQueryInfo��TraceDisallowListQuery���TraceInfoReserved15��TracePeriodicCaptureStateListInfoTracePeriodicCaptureStateInfoTraceProviderBinaryTracking��TraceMaxLoggersQuery�TraceLbrConfigurationInfoTraceLbrEventListInfoTraceMaxPmcCounterQuery��MaxTraceSetInfoClass�Ft�_TRACE_QUERY_INFO_CLASS.?AW4_TRACE_QUERY_INFO_CLASS@@�.onecore\external\shared\inc\evntrace.h���EImageDepPolicy���ImageAslrPolicy��ImageDynamicCodePolicy���ImageStrictHandleCheckPolicy�ImageSystemCallDisablePolicy�ImageMitigationOptionsMask���ImageExtensionPointDisablePolicy�ImageControlFlowGuardPolicy��ImageSignaturePolicy�	ImageFontDisablePolicy���
ImageImageLoadPolicy�ImagePayloadRestrictionPolicyImageChildProcessPolicy��
ImageSehopPolicy�ImageHeapPolicy��ImageUserShadowStackPolicy���MaxImageMitigationPolicy�Jt�_IMAGE_MITIGATION_POLICY.?AW4_IMAGE_MITIGATION_POLICY@@���*onecore\internal\sdk\inc\ntrtl.h������J�_EISA_DMA_CONFIGURATION.?AU_EISA_DMA_CONFIGURATION@@
�N�_DMA_CONFIGURATION_BYTE0.?AU_DMA_CONFIGURATION_BYTE0@@��N�_DMA_CONFIGURATION_BYTE1.?AU_DMA_CONFIGURATION_BYTE1@@��B
�ConfigurationByte0���
�ConfigurationByte1���J�_EISA_DMA_CONFIGURATION.?AU_EISA_DMA_CONFIGURATION@@*onecore\internal\sdk\inc\ntconfig.h��DynamicTickVetoNone��DynamicTickVetoProcBusy��DynamicTickVetoSoftwareTimer�DynamicTickVetoClockConstraint���DynamicTickVetoClockOutOfSyncDynamicTickVetoClockUpdateFailed�DynamicTickVetoNoDeepSleep���DynamicTickVetoMax���^t�_PERFINFO_DYNAMIC_TICK_VETO_REASON.?AW4_PERFINFO_DYNAMIC_TICK_VETO_REASON@@����0�J�_WMI_JOB_ASSIGN_PROCESS.?AU_WMI_JOB_ASSIGN_PROCESS@@
�Z
�ContainerId��
"JobId
"UniqueProcessId��
Status���J�_WMI_JOB_ASSIGN_PROCESS.?AU_WMI_JOB_ASSIGN_PROCESS@@�0�
s#�j�_RTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS.?AU_RTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS@@j�_RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET.?AU_RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET@@��f
uFeatureId
!ReportingKind
!ReportingOptions�
�ReportingTarget��j�_RTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS.?AU_RTL_FEATURE_USAGE_SUBSCRIPTION_DETAILS@@:onecore\internal\sdk\inc\rtlfeatureconfigtypes.h������B�_MIDL_FORMAT_STRING.?AU_MIDL_FORMAT_STRING@@ #�&
Pad��
�Format���B�_MIDL_FORMAT_STRING.?AU_MIDL_FORMAT_STRING@@��?f�_PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA.?AU_PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA@@��
�>
"DeviceInstanceLength�
qDeviceInstance���f�_PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA.?AU_PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA@@��2onecore\internal\sdk\inc\minwin\ntpnpapi.h����b�_SYSTEM_PLATFORM_BINARY_INFORMATION.?AU_SYSTEM_PLATFORM_BINARY_INFORMATION@@�
#PhysicalAddress��
HandoffBuffer
CommandLineBuffer
"HandoffBufferSize
"CommandLineBufferSizeb� _SYSTEM_PLATFORM_BINARY_INFORMATION.?AU_SYSTEM_PLATFORM_BINARY_INFORMATION@@���
b�_FILE_MEMORY_PARTITION_INFORMATION.?AU_FILE_MEMORY_PARTITION_INFORMATION@@��
� #�J
 NoCrossPartitionAccess���
�Spare
"AllFlags�2�<anonymous-tag>.?AT<anonymous-tag>@@�U�2
#OwnerPartitionHandle�
�Flagsb�_FILE_MEMORY_PARTITION_INFORMATION.?AU_FILE_MEMORY_PARTITION_INFORMATION@@��U�z�_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION.?AU_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION@@j
ReflectionProcessHandle��
ReflectionThreadHandle���
�ReflectionClientId���z _RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION.?AU_RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION@@��Z�_JOBOBJECT_WAKE_INFORMATION_V1.?AU_JOBOBJECT_WAKE_INFORMATION_V1@@��## �:
#NotificationChannel��
WakeCounters�Z(_JOBOBJECT_WAKE_INFORMATION_V1.?AU_JOBOBJECT_WAKE_INFORMATION_V1@@��	b-f�_EVENT_TRACE_PROFILE_LIST_INFORMATION.?AU_EVENT_TRACE_PROFILE_LIST_INFORMATION@@
�EventTraceKernelVersionInformation���EventTraceGroupMaskInformation���EventTracePerformanceInformation�EventTraceTimeProfileInformation�EventTraceSessionSecurityInformation�EventTraceSpinlockInformationEventTraceStackTracingInformationEventTraceExecutiveResourceInformation���EventTraceHeapTracingInformation�	EventTraceHeapSummaryTracingInformation��
EventTracePoolTagFilterInformation���EventTracePebsTracingInformation�EventTraceProfileConfigInformation���
EventTraceProfileSourceListInformation���EventTraceProfileEventListInformationEventTraceProfileCounterListInformation��EventTraceStackCachingInformationEventTraceObjectTypeFilterInformationEventTraceSoftRestartInformation�EventTraceLastBranchConfigurationInformation�EventTraceLastBranchEventListInformation�EventTraceProfileSourceAddInformationEventTraceProfileSourceRemoveInformation�EventTraceProcessorTraceConfigurationInformation�EventTraceProcessorTraceEventListInformation�EventTraceCoverageSamplerInformation�MaxEventTraceInfoClass���Vt
_EVENT_TRACE_INFORMATION_CLASS.?AW4_EVENT_TRACE_INFORMATION_CLASS@@���.onecore\internal\sdk\inc\minwin\ntetw.h�F�_PROFILE_SOURCE_INFO.?AU_PROFILE_SOURCE_INFO@@��# �N
EventTraceInformationClass���
"Spare
Profile��f(_EVENT_TRACE_PROFILE_LIST_INFORMATION.?AU_EVENT_TRACE_PROFILE_LIST_INFORMATION@@@�TP_LOG_LEVEL_ERROR���TP_LOG_LEVEL_WARNING�TP_LOG_LEVEL_INFOTP_LOG_LEVEL_TRACE_ENTER�TP_LOG_LEVEL_TRACE_LEAVE�2t_TP_LOG_LEVEL.?AW4_TP_LOG_LEVEL@@��?>�_EFI_DRIVER_ENTRY.?AU_EFI_DRIVER_ENTRY@@z
"Version��
"Length���
"Id���
"FriendlyNameOffset���
"DriverFilePathOffset�>_EFI_DRIVER_ENTRY.?AU_EFI_DRIVER_ENTRY@@�F�_EVENT_FILTER_HEADER.?AU_EVENT_FILTER_HEADER@@�� #�z
!Id���
 Version��
Reserved�
#InstanceId���
"Size�
"NextOffset���F_EVENT_FILTER_HEADER.?AU_EVENT_FILTER_HEADER@@�� T6�_currencyfmtW.?AU_currencyfmtW@@�
uNumDigits
uLeadingZero��
uGrouping�
qlpDecimalSep�
qlpThousandSep
u NegativeOrder
u$PositiveOrder
q(lpCurrencySymbol�6#0_currencyfmtW.?AU_currencyfmtW@@*onecore\external\sdk\inc\winnls.h��$%�Z�_RTL_UMS_SCHEDULER_STARTUP_INFO.?AU_RTL_UMS_SCHEDULER_STARTUP_INFO@@N�_RTL_UMS_COMPLETION_LIST.?AU_RTL_UMS_COMPLETION_LIST@@��
(^UmsSchedulerStartup��UmsSchedulerThreadBlockedUmsSchedulerThreadYield��Jt*_RTL_UMS_SCHEDULER_REASON.?AW4_RTL_UMS_SCHEDULER_REASON@@�+$�!+#-
.j
"UmsVersion���
)CompletionList���
/SchedulerProc
SchedulerParam���Z0 _RTL_UMS_SCHEDULER_STARTUP_INFO.?AU_RTL_UMS_SCHEDULER_STARTUP_INFO@@1$"BDPFLTR_SYSTEM_ID�DPFLTR_SMSS_ID���DPFLTR_SETUP_ID��DPFLTR_NTFS_ID���DPFLTR_FSTUB_ID��DPFLTR_CRASHDUMP_ID��DPFLTR_CDAUDIO_IDDPFLTR_CDROM_ID��DPFLTR_CLASSPNP_ID���	DPFLTR_DISK_ID���
DPFLTR_REDBOOK_IDDPFLTR_STORPROP_ID���DPFLTR_SCSIPORT_ID���
DPFLTR_SCSIMINIPORT_ID���DPFLTR_CONFIG_ID�DPFLTR_I8042PRT_ID���DPFLTR_SERMOUSE_ID���DPFLTR_LSERMOUS_ID���DPFLTR_KBDHID_ID�DPFLTR_MOUHID_ID�DPFLTR_KBDCLASS_ID���DPFLTR_MOUCLASS_ID���DPFLTR_TWOTRACK_ID���DPFLTR_WMILIB_ID�DPFLTR_ACPI_ID���DPFLTR_AMLI_ID���DPFLTR_HALIA64_IDDPFLTR_VIDEO_ID��DPFLTR_SVCHOST_IDDPFLTR_VIDEOPRT_ID���DPFLTR_TCPIP_ID��DPFLTR_DMSYNTH_ID DPFLTR_NTOSPNP_ID!DPFLTR_FASTFAT_ID"DPFLTR_SAMSS_ID��#DPFLTR_PNPMGR_ID�$DPFLTR_NETAPI_ID�%DPFLTR_SCSERVER_ID���&DPFLTR_SCCLIENT_ID���'DPFLTR_SERIAL_ID�(DPFLTR_SERENUM_ID)DPFLTR_UHCD_ID���*DPFLTR_RPCPROXY_ID���+DPFLTR_AUTOCHK_ID,DPFLTR_DCOMSS_ID�-DPFLTR_UNIMODEM_ID���.DPFLTR_SIS_ID/DPFLTR_FLTMGR_ID�0DPFLTR_WMICORE_ID1DPFLTR_BURNENG_ID2DPFLTR_IMAPI_ID��3DPFLTR_SXS_ID4DPFLTR_FUSION_ID�5DPFLTR_IDLETASK_ID���6DPFLTR_SOFTPCI_ID7DPFLTR_TAPE_ID���8DPFLTR_MCHGR_ID��9DPFLTR_IDEP_ID���:DPFLTR_PCIIDE_ID�;DPFLTR_FLOPPY_ID�<DPFLTR_FDC_ID=DPFLTR_TERMSRV_ID>DPFLTR_W32TIME_ID?DPFLTR_PREFETCHER_ID�@DPFLTR_RSFILTER_ID���ADPFLTR_FCPORT_ID�BDPFLTR_PCI_IDCDPFLTR_DMIO_ID���DDPFLTR_DMCONFIG_ID���EDPFLTR_DMADMIN_IDFDPFLTR_WSOCKTRANSPORT_ID�GDPFLTR_VSS_IDHDPFLTR_PNPMEM_ID�IDPFLTR_PROCESSOR_ID��JDPFLTR_DMSERVER_ID���KDPFLTR_SR_ID�LDPFLTR_INFINIBAND_ID�MDPFLTR_IHVDRIVER_ID��NDPFLTR_IHVVIDEO_ID���ODPFLTR_IHVAUDIO_ID���PDPFLTR_IHVNETWORK_ID�QDPFLTR_IHVSTREAMING_ID���RDPFLTR_IHVBUS_ID�SDPFLTR_HPS_IDTDPFLTR_RTLTHREADPOOL_ID��UDPFLTR_LDR_IDVDPFLTR_TCPIP6_ID�WDPFLTR_ISAPNP_ID�XDPFLTR_SHPC_ID���YDPFLTR_STORPORT_ID���ZDPFLTR_STORMINIPORT_ID���[DPFLTR_PRINTSPOOLER_ID���\DPFLTR_VSSDYNDISK_ID�]DPFLTR_VERIFIER_ID���^DPFLTR_VDS_ID_DPFLTR_VDSBAS_ID�`DPFLTR_VDSDYN_ID�aDPFLTR_VDSDYNDR_ID���bDPFLTR_VDSLDR_ID�cDPFLTR_VDSUTIL_IDdDPFLTR_DFRGIFC_IDeDPFLTR_DEFAULT_IDfDPFLTR_MM_ID�gDPFLTR_DFSC_ID���hDPFLTR_WOW64_ID��iDPFLTR_ALPC_ID���jDPFLTR_WDI_IDkDPFLTR_PERFLIB_IDlDPFLTR_KTM_IDmDPFLTR_IOSTRESS_ID���nDPFLTR_HEAP_ID���oDPFLTR_WHEA_ID���pDPFLTR_USERGDI_IDqDPFLTR_MMCSS_ID��rDPFLTR_TPM_IDsDPFLTR_THREADORDER_IDtDPFLTR_ENVIRON_IDuDPFLTR_EMS_IDvDPFLTR_WDT_IDwDPFLTR_FVEVOL_ID�xDPFLTR_NDIS_ID���yDPFLTR_NVCTRACE_ID���zDPFLTR_LUAFV_ID��{DPFLTR_APPCOMPAT_ID��|DPFLTR_USBSTOR_ID}DPFLTR_SBP2PORT_ID���~DPFLTR_COVERAGE_ID���DPFLTR_CACHEMGR_ID����DPFLTR_MOUNTMGR_ID����DPFLTR_CFR_ID�DPFLTR_TXF_ID�DPFLTR_KSECDD_ID��DPFLTR_FLTREGRESS_ID��DPFLTR_MPIO_ID����DPFLTR_MSDSM_ID���DPFLTR_UDFS_ID����DPFLTR_PSHED_ID���DPFLTR_STORVSP_ID�DPFLTR_LSASS_ID���DPFLTR_SSPICLI_ID�DPFLTR_CNG_ID�DPFLTR_EXFAT_ID���DPFLTR_FILETRACE_ID���DPFLTR_XSAVE_ID���DPFLTR_SE_ID��DPFLTR_DRIVEEXTENDER_ID���DPFLTR_POWER_ID���DPFLTR_CRASHDUMPXHCI_ID���DPFLTR_GPIO_ID����DPFLTR_REFS_ID����DPFLTR_WER_ID�DPFLTR_CAPIMG_ID��DPFLTR_VPCI_ID����DPFLTR_STORAGECLASSMEMORY_ID��DPFLTR_FSLIB_ID���DPFLTR_ENDOFTABLE_ID�2�t3_DPFLTR_TYPE.?AW4_DPFLTR_TYPE@@���.onecore\external\shared\inc\dpfilter.h�45J�_HEAP_SUBSEGMENT_ALLOC.?AU_HEAP_SUBSEGMENT_ALLOC@@��F�_SYSTEM_TRACE_HEADER.?AU_SYSTEM_TRACE_HEADER@@��^�_HEAP_EVENT_SUBSEGMENT_ALLOC_FREE.?AU_HEAP_EVENT_SUBSEGMENT_ALLOC_FREE@@&
8Header���
9 EventJ:@_HEAP_SUBSEGMENT_ALLOC.?AU_HEAP_SUBSEGMENT_ALLOC@@��;0MWOW64_FUNCTION_NOP���WOW64_FUNCTION_QUERY_PROCESS_DEBUG_INFO��WOW64_FUNCTION_CPU_TURBO_THUNK_CONTROL���WOW64_FUNCTION_CPU_CFG_DISPATCH_CONTROL��WOW64_FUNCTION_CPU_OPTIMIZE_CHPE_IMPORT_THUNKS���WOW64_FUNCTION_MAXIMUM���Ft=_WOW64_FUNCTION_CODE64.?AW4_WOW64_FUNCTION_CODE64@@���>�bProcessWorkingSetSwapProcessWorkingSetEmpty���ProcessWorkingSetOperationMaxVt@_PROCESS_WORKING_SET_OPERATION.?AW4_PROCESS_WORKING_SET_OPERATION@@���*onecore\internal\sdk\inc\ntmmapi.h�ABF�PowerActionNone��PowerActionReserved��PowerActionSleep�PowerActionHibernate�PowerActionShutdown��PowerActionShutdownReset�PowerActionShutdownOff���PowerActionWarmEject�PowerActionDisplayOff2	tDPOWER_ACTION.?AW4POWER_ACTION@@���*onecore\external\ddk\inc\ntpoapi.h�EF�^�_FILE_FS_DRIVER_PATH_INFORMATION.?AU_FILE_FS_DRIVER_PATH_INFORMATION@@��
Hq#�N
 DriverInPath�
"DriverNameLength�
JDriverName���^K_FILE_FS_DRIVER_PATH_INFORMATION.?AU_FILE_FS_DRIVER_PATH_INFORMATION@@��LU�F�tagEMRSELECTCLIPPATH.?AUtagEMRSELECTCLIPPATH@@��
N*�tagEMR.?AUtagEMR@@��"
Pemr��
"iModeFQtagEMRSELECTCLIPPATH.?AUtagEMRSELECTCLIPPATH@@��*onecore\external\sdk\inc\wingdi.h��RSa�COPYFILE2_PROGRESS_CONTINUE��COPYFILE2_PROGRESS_CANCELCOPYFILE2_PROGRESS_STOP��COPYFILE2_PROGRESS_QUIET�COPYFILE2_PROGRESS_PAUSE�JtU_COPYFILE2_MESSAGE_ACTION.?AW4_COPYFILE2_MESSAGE_ACTION@@�V<F>�COPYFILE2_MESSAGE.?AUCOPYFILE2_MESSAGE@@
X��
YZV[
\R�_MEMORY_REGION_INFORMATION.?AU_MEMORY_REGION_INFORMATION@@��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
AllocationBase���
"AllocationProtect
"RegionType���
_Private��
`MappedDataFile���
aMappedImage��
bMappedPageFile���
cMappedPhysical���
dDirectMapped�
eSoftwareEnclave��
fPageSize64K��
gPlaceholderReservation���
hReserved�
#RegionSize���
#CommitSize���
# PartitionId��
#(NodePreference���Ri0_MEMORY_REGION_INFORMATION.?AU_MEMORY_REGION_INFORMATION@@��jB�F�_UNIVERSAL_NAME_INFOW.?AU_UNIVERSAL_NAME_INFOW@@
qlpUniversalName��Fm_UNIVERSAL_NAME_INFOW.?AU_UNIVERSAL_NAME_INFOW@@*onecore\external\sdk\inc\winnetwk.hno�J
RtlPhysicalMemoryPolicyLow���RtlPhysicalMemoryPolicyNormalNtqRTL_PHYSICAL_MEMORY_POLICY.?AW4RTL_PHYSICAL_MEMORY_POLICY@@���r�J�_SYSTEM_VERIFIER_ISSUE.?AU_SYSTEM_VERIFIER_ISSUE@@��##�B
#IssueType
Address��
uParameters���Jv _SYSTEM_VERIFIER_ISSUE.?AU_SYSTEM_VERIFIER_ISSUE@@��w��	�PoCsDeviceNotificationStoragePoCsDeviceNotificationWiFi���PoCsDeviceNotificationMbnPoCsDeviceNotificationAudio��PoCsDeviceNotificationEthernet���PoCsDeviceNotificationMaximumVty_PO_CS_DEVICE_NOTIFICATION_TYPE.?AW4_PO_CS_DEVICE_NOTIFICATION_TYPE@@�zF^
6�_IO_COUNTERS.?AU_IO_COUNTERS@@��
#ReadOperationCount���
#WriteOperationCount��
#OtherOperationCount��
#ReadTransferCount
# WriteTransferCount���
#(OtherTransferCount���6}0_IO_COUNTERS.?AU_IO_COUNTERS@@��~}�n�_ACTIVATION_CONTEXT_DETAILED_INFORMATION.?AU_ACTIVATION_CONTEXT_DETAILED_INFORMATION@@��
���
�z
"dwFlags��
"ulFormatVersion��
"ulAssemblyCount��
"ulRootManifestPathType���
"ulRootManifestPathChars��
"ulRootConfigurationPathType��
"ulRootConfigurationPathChars�
"ulAppDirPathType�
" ulAppDirPathChars
[(lpRootManifestPath���
[0lpRootConfigurationPath��
[8lpAppDirPath�n�@_ACTIVATION_CONTEXT_DETAILED_INFORMATION.?AU_ACTIVATION_CONTEXT_DETAILED_INFORMATION@@����~�_RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY.?AU_RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY@@��
�N�_RTL_IMAGE_MITIGATION_POLICY.?AT_RTL_IMAGE_MITIGATION_POLICY@@��&
�BlockWin32kSystemCalls���~�_RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY.?AU_RTL_IMAGE_MITIGATION_SYSTEM_CALL_DISABLE_POLICY@@����P�PowerSystemUnspecified���PowerSystemWorking���PowerSystemSleeping1�PowerSystemSleeping2�PowerSystemSleeping3�PowerSystemHibernate�PowerSystemShutdown��PowerSystemMaximum���>t�_SYSTEM_POWER_STATE.?AW4_SYSTEM_POWER_STATE@@��F�N�_DUPLICATE_EXTENTS_DATA32.?AU_DUPLICATE_EXTENTS_DATA32@@f
uFileHandle���
~SourceFileOffset�
~TargetFileOffset�
~ByteCountN� _DUPLICATE_EXTENTS_DATA32.?AU_DUPLICATE_EXTENTS_DATA32@@�U\ R�_FSCTL_OFFLOAD_WRITE_INPUT.?AU_FSCTL_OFFLOAD_WRITE_INPUT@@�� #�~
"Size�
"Flags
#FileOffset���
#CopyLength���
#TransferOffset���
� TokenR� _FSCTL_OFFLOAD_WRITE_INPUT.?AU_FSCTL_OFFLOAD_WRITE_INPUT@@���U�""~�#SystemBasicInformation���SystemProcessorInformation���SystemPerformanceInformation�SystemTimeOfDayInformation���SystemPathInformationSystemProcessInformation�SystemCallCountInformation���SystemDeviceInformation��SystemProcessorPerformanceInformation	SystemFlagsInformation���
SystemCallTimeInformationSystemModuleInformation��SystemLocksInformation���
SystemStackTraceInformation��SystemPagedPoolInformation���SystemNonPagedPoolInformationSystemHandleInformation��SystemObjectInformation��SystemPageFileInformationSystemVdmInstemulInformation�SystemVdmBopInformation��SystemFileCacheInformation���SystemPoolTagInformation�SystemInterruptInformation���SystemDpcBehaviorInformation�SystemFullMemoryInformation��SystemLoadGdiDriverInformation���SystemUnloadGdiDriverInformation�SystemTimeAdjustmentInformation��SystemSummaryMemoryInformation���SystemMirrorMemoryInformationSystemPerformanceTraceInformation SystemObsolete0��!SystemExceptionInformation���"SystemCrashDumpStateInformation��#SystemKernelDebuggerInformation��$SystemContextSwitchInformation���%SystemRegistryQuotaInformation���&SystemExtendServiceTableInformation��'SystemPrioritySeperation�(SystemVerifierAddDriverInformation���)SystemVerifierRemoveDriverInformation*SystemProcessorIdleInformation���+SystemLegacyDriverInformation,SystemCurrentTimeZoneInformation�-SystemLookasideInformation���.SystemTimeSlipNotification���/SystemSessionCreate��0SystemSessionDetach��1SystemSessionInformation�2SystemRangeStartInformation��3SystemVerifierInformation4SystemVerifierThunkExtend5SystemSessionProcessInformation��6SystemLoadGdiDriverInSystemSpace�7SystemNumaProcessorMap���8SystemPrefetcherInformation��9SystemExtendedProcessInformation�:SystemRecommendedSharedDataAlignment�;SystemComPlusPackage�<SystemNumaAvailableMemory=SystemProcessorPowerInformation��>SystemEmulationBasicInformation��?SystemEmulationProcessorInformation��@SystemExtendedHandleInformation��ASystemLostDelayedWriteInformationBSystemBigPoolInformation�CSystemSessionPoolTagInformation��DSystemSessionMappedViewInformation���ESystemHotpatchInformationFSystemObjectSecurityMode�GSystemWatchdogTimerHandler���HSystemWatchdogTimerInformation���ISystemLogicalProcessorInformationJSystemWow64SharedInformationObsolete�KSystemRegisterFirmwareTableInformationHandlerLSystemFirmwareTableInformation���MSystemModuleInformationExNSystemVerifierTriageInformation��OSystemSuperfetchInformation��PSystemMemoryListInformation��QSystemFileCacheInformationEx�RSystemThreadPriorityClientIdInformation��SSystemProcessorIdleCycleTimeInformation��TSystemVerifierCancellationInformationUSystemProcessorPowerInformationExVSystemRefTraceInformationWSystemSpecialPoolInformation�XSystemProcessIdInformation���YSystemErrorPortInformation���ZSystemBootEnvironmentInformation�[SystemHypervisorInformation��\SystemVerifierInformationEx��]SystemTimeZoneInformation^SystemImageFileExecutionOptionsInformation���_SystemCoverageInformation`SystemPrefetchPatchInformation���aSystemVerifierFaultsInformation��bSystemSystemPartitionInformation�cSystemSystemDiskInformation��dSystemProcessorPerformanceDistribution���eSystemNumaProximityNodeInformation���fSystemDynamicTimeZoneInformation�gSystemCodeIntegrityInformation���hSystemProcessorMicrocodeUpdateInformationiSystemProcessorBrandString���jSystemVirtualAddressInformation��kSystemLogicalProcessorAndGroupInformationlSystemProcessorCycleTimeInformation��mSystemStoreInformation���nSystemRegistryAppendString���oSystemAitSamplingValue���pSystemVhdBootInformation�qSystemCpuQuotaInformationrSystemNativeBasicInformation�sSystemErrorPortTimeouts��tSystemLowPriorityIoInformation���uSystemBootEntropyInformation�vSystemVerifierCountersInformationwSystemPagedPoolInformationEx�xSystemSystemPtesInformationExySystemNodeDistanceInformationzSystemAcpiAuditInformation���{SystemBasicPerformanceInformation|SystemQueryPerformanceCounterInformation�}SystemSessionBigPoolInformation��~SystemBootGraphicsInformationSystemScrubPhysicalMemoryInformation��SystemBadPageInformation��SystemProcessorProfileControlArea�SystemCombinePhysicalMemoryInformation����SystemEntropyInterruptTimingInformation���SystemConsoleInformation��SystemPlatformBinaryInformation���SystemPolicyInformation���SystemHypervisorProcessorCountInformation�SystemDeviceDataInformation���SystemDeviceDataEnumerationInformation����SystemMemoryTopologyInformation���SystemMemoryChannelInformation����SystemBootLogoInformation�SystemProcessorPerformanceInformationEx���SystemCriticalProcessErrorLogInformation��SystemSecureBootPolicyInformation�SystemPageFileInformationEx���SystemSecureBootInformation���SystemEntropyInterruptTimingRawInformation����SystemPortableWorkspaceEfiLauncherInformation�SystemFullProcessInformation��SystemKernelDebuggerInformationEx�SystemBootMetadataInformation�SystemSoftRebootInformation���SystemElamCertificateInformation��SystemOfflineDumpConfigInformation����SystemProcessorFeaturesInformation����SystemRegistryReconciliationInformation���SystemEdidInformation�SystemManufacturingInformation����SystemEnergyEstimationConfigInformation���SystemHypervisorDetailInformation�SystemProcessorCycleStatsInformation��SystemVmGenerationCountInformation����SystemTrustedPlatformModuleInformation����SystemKernelDebuggerFlags�SystemCodeIntegrityPolicyInformation��SystemIsolatedUserModeInformation�SystemHardwareSecurityTestInterfaceResultsInformation�SystemSingleModuleInformation�SystemAllowedCpuSetsInformation���SystemVsmProtectionInformation����SystemInterruptCpuSetsInformation�SystemSecureBootPolicyFullInformation�SystemCodeIntegrityPolicyFullInformation��SystemAffinitizedInterruptProcessorInformation����SystemRootSiloInformation�SystemCpuSetInformation���SystemCpuSetTagInformation����SystemWin32WerStartCallout����SystemSecureKernelProfileInformation��SystemCodeIntegrityPlatformManifestInformation����SystemInterruptSteeringInformation����SystemSupportedProcessorArchitectures�SystemMemoryUsageInformation��SystemCodeIntegrityCertificateInformation�SystemPhysicalMemoryInformation���SystemControlFlowTransition���SystemKernelDebuggingAllowed��SystemActivityModerationExeState��SystemActivityModerationUserSettings��SystemCodeIntegrityPoliciesFullInformation����SystemCodeIntegrityUnlockInformation��SystemIntegrityQuotaInformation���SystemFlushInformation����SystemProcessorIdleMaskInformation����SystemSecureDumpEncryptionInformation�SystemWriteConstraintInformation��SystemKernelVaShadowInformation���SystemHypervisorSharedPageInformation�SystemFirmwareBootPerformanceInformation��SystemCodeIntegrityVerificationInformation����SystemFirmwarePartitionInformation����SystemSpeculationControlInformation���SystemDmaGuardPolicyInformation���SystemEnclaveLaunchControlInformation�SystemWorkloadAllowedCpuSetsInformation���SystemCodeIntegrityUnlockModeInformation��SystemLeapSecondInformation���SystemFlags2Information���SystemSecurityModelInformation����SystemCodeIntegritySyntheticCacheInformation��SystemFeatureConfigurationInformation�SystemFeatureConfigurationSectionInformation��SystemFeatureUsageSubscriptionInformation�SystemSecureSpeculationControlInformation�SystemSpacesBootInformation���SystemFwRamdiskInformation����SystemWheaIpmiHardwareInformation�SystemDifSetRuleClassInformation��SystemDifClearRuleClassInformation����SystemDifApplyPluginVerificationOnDriver��SystemDifRemovePluginVerificationOnDriver�SystemShadowStackInformation��SystemBuildVersionInformation�SystemPoolLimitInformation����SystemCodeIntegrityAddDynamicStore����SystemCodeIntegrityClearDynamicStores�SystemPoolZeroingInformation��MaxSystemInfoClass���J�t�_SYSTEM_INFORMATION_CLASS.?AW4_SYSTEM_INFORMATION_CLASS@@����b�_FILE_FS_METADATA_SIZE_INFORMATION.?AU_FILE_FS_METADATA_SIZE_INFORMATION@@��
�j
~TotalMetadataAllocationUnits�
"SectorsPerAllocationUnit�
"BytesPerSector���b�_FILE_FS_METADATA_SIZE_INFORMATION.?AU_FILE_FS_METADATA_SIZE_INFORMATION@@���U|:�_MUISTRINGPOOL.?AU_MUISTRINGPOOL@@��
uTotalSize
!MaxNumStrings
!NumStrings���
!MaxNumCharsInPool
!
NumCharsInPool���
Strings��
qPool�:� _MUISTRINGPOOL.?AU_MUISTRINGPOOL@@����tJ�_MESSAGE_RESOURCE_BLOCK.?AU_MESSAGE_RESOURCE_BLOCK@@
�B
"LowId
"HighId���
"OffsetToEntries��J�_MESSAGE_RESOURCE_BLOCK.?AU_MESSAGE_RESOURCE_BLOCK@@�$���_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY.?AU_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY@@��>
#ChangeStamp��
Section��
#Size��_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY.?AU_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION_ENTRY@@����sJ�_LDR_SERVICE_TAG_RECORD.?AU_LDR_SERVICE_TAG_RECORD@@
�*
�Next�
"ServiceTag���J�_LDR_SERVICE_TAG_RECORD.?AU_LDR_SERVICE_TAG_RECORD@@*onecore\internal\sdk\inc\ntldr.h�����iF�tagMOUSEHOOKSTRUCTEX.?AUtagMOUSEHOOKSTRUCTEX@@��.�tagPOINT.?AUtagPOINT@@��
>f
�pt���
�hwnd�
uwHitTestCode�
#dwExtraInfo��
" mouseDataF�(tagMOUSEHOOKSTRUCTEX.?AUtagMOUSEHOOKSTRUCTEX@@���L�b�_SYSTEM_VERIFIER_TRIAGE_INFORMATION.?AU_SYSTEM_VERIFIER_TRIAGE_INFORMATION@@
�##(�q#�z
"ActionTaken��
�CrashData
"0VerifierMode�
"4VerifierFlags
�8VerifierTargets��b�8_SYSTEM_VERIFIER_TRIAGE_INFORMATION.?AU_SYSTEM_VERIFIER_TRIAGE_INFORMATION@@���	J�_SE_IMPERSONATION_STATE.?AU_SE_IMPERSONATION_STATE@@rSecurityAnonymousSecurityIdentification���SecurityImpersonationSecurityDelegation���Rt�_SECURITY_IMPERSONATION_LEVEL.?AW4_SECURITY_IMPERSONATION_LEVEL@@��E�R
Token
 CopyOnOpen���
 	EffectiveOnly
�LevelJ�_SE_IMPERSONATION_STATE.?AU_SE_IMPERSONATION_STATE@@�ER
jEnlistmentBasicInformation���EnlistmentRecoveryInformationEnlistmentCrmInformation�Rt�_ENLISTMENT_INFORMATION_CLASS.?AW4_ENLISTMENT_INFORMATION_CLASS@@�*onecore\internal\sdk\inc\nttmapi.h���c
�>�_OSVERSIONINFOEXA.?AU_OSVERSIONINFOEXA@@p#��
"dwOSVersionInfoSize��
"dwMajorVersion���
"dwMinorVersion���
"dwBuildNumber
"dwPlatformId�
�szCSDVersion�
!�wServicePackMajor
!�wServicePackMinor
!�wSuiteMask���
 �wProductType�
 �wReserved>��_OSVERSIONINFOEXA.?AU_OSVERSIONINFOEXA@@�$�J�SET_POWER_SETTING_VALUE.?AUSET_POWER_SETTING_VALUE@@
�BPoAc�PoDc�PoHotPoConditionMaximum���Ft�SYSTEM_POWER_CONDITION.?AW4SYSTEM_POWER_CONDITION@@����Fjj
"Version��
�Guid�
�PowerCondition���
"DataLength���
�Data�J� SET_POWER_SETTING_VALUE.?AUSET_POWER_SETTING_VALUE@@�FqF�_PERFINFO_VTL_CHANGE.?AU_PERFINFO_VTL_CHANGE@@��2
!OperationCode
!ServiceCode��F�_PERFINFO_VTL_CHANGE.?AU_PERFINFO_VTL_CHANGE@@���0-J�_FILESYSTEM_STATISTICS.?AU_FILESYSTEM_STATISTICS@@��
!FileSystemType���
!Version��
"SizeOfCompleteStructure��
"UserFileReads
"UserFileReadBytes
"UserDiskReads
"UserFileWrites���
"UserFileWriteBytes���
"UserDiskWrites���
" MetaDataReads
"$MetaDataReadBytes
"(MetaDataDiskReads
",MetaDataWrites���
"0MetaDataWriteBytes���
"4MetaDataDiskWrites���J�8_FILESYSTEM_STATISTICS.?AU_FILESYSTEM_STATISTICS@@���U:�_PS_PROTECTION.?AU_PS_PROTECTION@@��
�
 ��
 ��
 ��F
 Level
�Type�
�Audit
�Signer���:�_PS_PROTECTION.?AU_PS_PROTECTION@@���b[	B�_OUTLINETEXTMETRICA.?AU_OUTLINETEXTMETRICA@@
�:�tagTEXTMETRICA.?AUtagTEXTMETRICA@@��.�tagPANOSE.?AUtagPANOSE@@*�tagRECT.?AUtagRECT@@Z
uotmSize��
�otmTextMetrics���
 <otmFiller
�=otmPanoseNumber��
uHotmfsSelection���
uLotmfsType
tPotmsCharSlopeRise
tTotmsCharSlopeRun�
tXotmItalicAngle���
u\otmEMSquare��
t`otmAscent
tdotmDescent���
uhotmLineGap���
ulotmsCapEmHeight��
upotmsXHeight��
�totmrcFontBox�
t�otmMacAscent�
t�otmMacDescent
u�otmMacLineGap
u�otmusMinimumPPEM�
��otmptSubscriptSize���
��otmptSubscriptOffset�
��otmptSuperscriptSize�
��otmptSuperscriptOffset���
u�otmsStrikeoutSize
t�otmsStrikeoutPosition
t�otmsUnderscoreSize���
t�otmsUnderscorePosition���
p�otmpFamilyName���
p�otmpFaceName�
p�otmpStyleName
p�otmpFullName�B ��_OUTLINETEXTMETRICA.?AU_OUTLINETEXTMETRICA@@�S�
�
��MonitorRequestReasonUnknown��MonitorRequestReasonPowerButton��MonitorRequestReasonRemoteConnection�MonitorRequestReasonScMonitorpower���MonitorRequestReasonUserInputMonitorRequestReasonAcDcDisplayBurst�MonitorRequestReasonUserDisplayBurst�MonitorRequestReasonPoSetSystemState�MonitorRequestReasonSetThreadExecutionState��	MonitorRequestReasonFullWake�
MonitorRequestReasonSessionUnlockMonitorRequestReasonScreenOffRequest�MonitorRequestReasonIdleTimeout��
MonitorRequestReasonPolicyChange�MonitorRequestReasonSleepButton��MonitorRequestReasonLid��MonitorRequestReasonBatteryCountChange���MonitorRequestReasonGracePeriod��MonitorRequestReasonPnP��MonitorRequestReasonDP���MonitorRequestReasonSxTransition�MonitorRequestReasonSystemIdle���MonitorRequestReasonNearProximityMonitorRequestReasonThermalStandby���MonitorRequestReasonResumePdcMonitorRequestReasonResumeS4�MonitorRequestReasonTerminal�MonitorRequestReasonPdcSignalMonitorRequestReasonAcDcDisplayBurstSuppressed���MonitorRequestReasonSystemStateEntered���MonitorRequestReasonWinrtMonitorRequestReasonUserInputKeyboard MonitorRequestReasonUserInputMouse���!MonitorRequestReasonUserInputTouch���"MonitorRequestReasonUserInputPen�#MonitorRequestReasonUserInputAccelerometer���$MonitorRequestReasonUserInputHid�%MonitorRequestReasonUserInputPoUserPresent���&MonitorRequestReasonUserInputSessionSwitch���'MonitorRequestReasonUserInputInitialization��(MonitorRequestReasonPdcSignalWindowsMobilePwrNotif���)MonitorRequestReasonPdcSignalWindowsMobileShell��*MonitorRequestReasonPdcSignalHeyCortana��+MonitorRequestReasonPdcSignalHolographicShell,MonitorRequestReasonPdcSignalFingerprint�-MonitorRequestReasonDirectedDrips.MonitorRequestReasonDim��/MonitorRequestReasonBuiltinPanel�0MonitorRequestReasonDisplayRequiredUnDim�1MonitorRequestReasonBatteryCountChangeSuppressed�2MonitorRequestReasonResumeModernStandby��3MonitorRequestReasonMax��R4t�POWER_MONITOR_REQUEST_REASON.?AW4POWER_MONITOR_REQUEST_REASON@@����F2�_HSM_OPCODE.?AU_HSM_OPCODE@@"
"Tag��
"Code�2�_HSM_OPCODE.?AU_HSM_OPCODE@@�U�"b�_IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY@@
"��
"��
"
��
"��
"��
"��
"	��
"BeginAddress�
"UnwindData���
�Flag�
�FunctionLength���
RegF�
RegI�
H
CR���
FrameSizeb	_IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY@@fZPerfCSwapIdleShort���PerfCSwapIdlePerfCSwapLitePerfCSwapFullBt_PERFINFO_CCSWAP_TYPE.?AW4_PERFINFO_CCSWAP_TYPE@@�	0{.�_WMI_UDP.?AU_WMI_UDP@@��r
"PID��
!Size�
"DestAddr�
"SrcAddr��
!DestPort�
!SrcPort��._WMI_UDP.?AU_WMI_UDP@@��
0	J�_PERFINFO_HV_HYPERCALL.?AU_PERFINFO_HV_HYPERCALL@@��>
uCallCode�
 IsFast���
 IsNested�J_PERFINFO_HV_HYPERCALL.?AU_PERFINFO_HV_HYPERCALL@@��0@F�_UNIVERSAL_NAME_INFOA.?AU_UNIVERSAL_NAME_INFOA@@

plpUniversalName��F_UNIVERSAL_NAME_INFOA.?AU_UNIVERSAL_NAME_INFOA@@o~�ProfileTime��ProfileAlignmentFixupProfileTotalIssues���ProfilePipelineDry���ProfileLoadInstructions��ProfilePipelineFrozenProfileBranchInstructionsProfileTotalNonissuesProfileDcacheMisses��	ProfileIcacheMisses��
ProfileCacheMisses���ProfileBranchMispredictions��ProfileStoreInstructions�
ProfileFpInstructionsProfileIntegerInstructions���Profile2IssueProfile3IssueProfile4IssueProfileSpecialInstructions���ProfileTotalCycles���ProfileIcacheIssues��ProfileDcacheAccessesProfileMemoryBarrierCycles���ProfileLoadLinkedIssues��ProfileMaximum���:t_KPROFILE_SOURCE.?AW4_KPROFILE_SOURCE@@���.onecore\internal\sdk\inc\ntkeapi_x.h����Z�_USER_MARSHAL_ROUTINE_QUADRUPLE.?AU_USER_MARSHAL_ROUTINE_QUADRUPLE@@"""
"   
!
!"$
%^
pfnBufferSize
"pfnMarshall��
#pfnUnmarshall
&pfnFree��Z' _USER_MARSHAL_ROUTINE_QUADRUPLE.?AU_USER_MARSHAL_ROUTINE_QUADRUPLE@@(�n>�tagENHMETAHEADER.?AUtagENHMETAHEADER@@��
**�_RECTL.?AU_RECTL@@��*�tagSIZE.?AUtagSIZE@@�
"iType
"nSize
,rclBounds
,rclFrame�
"(dSignature���
",nVersion�
"0nBytes���
"4nRecords�
!8nHandles�
!:sReserved
"<nDescription�
"@offDescription���
"DnPalEntries��
-HszlDevice
-PszlMillimeters���
"XcbPixelFormat
"\offPixelFormat���
"`bOpenGL��
-dszlMicrometers���>.ltagENHMETAHEADER.?AUtagENHMETAHEADER@@��/S;JobObjectBasicAccountingInformation��JobObjectBasicLimitInformation���JobObjectBasicProcessIdList��JobObjectBasicUIRestrictions�JobObjectSecurityLimitInformationJobObjectEndOfJobTimeInformation�JobObjectAssociateCompletionPortInformation��JobObjectBasicAndIoAccountingInformation�	JobObjectExtendedLimitInformation
JobObjectJobSetInformation���JobObjectGroupInformationJobObjectNotificationLimitInformation
JobObjectLimitViolationInformation���JobObjectGroupInformationEx��JobObjectCpuRateControlInformation���JobObjectCompletionFilterJobObjectCompletionCounter���JobObjectFreezeInformation���JobObjectExtendedAccountingInformation���JobObjectWakeInformation�JobObjectBackgroundInformation���JobObjectSchedulingRankBiasInformation���JobObjectTimerVirtualizationInformation��JobObjectCycleTimeNotification���JobObjectClearEvent��JobObjectInterferenceInformation�JobObjectClearPeakJobMemoryUsed��JobObjectMemoryUsageInformation��JobObjectSharedCommitJobObjectContainerId�JobObjectIoRateControlInformation%JobObjectSiloRootDirectory���&JobObjectServerSiloBasicInformation��'JobObjectServerSiloUserSharedData(JobObjectServerSiloInitialize)JobObjectServerSiloRunningState��*JobObjectIoAttribution���+JobObjectMemoryPartitionInformation��,JobObjectContainerTelemetryId-JobObjectSiloSystemRoot��.JobObjectEnergyTrackingState�/JobObjectThreadImpersonationInformation��JobObjectReserved1InformationJobObjectReserved2InformationJobObjectReserved3InformationJobObjectReserved4InformationJobObjectReserved5InformationJobObjectReserved6InformationJobObjectReserved7InformationJobObjectReserved8InformationJobObjectReserved9InformationJobObjectReserved10Information���JobObjectReserved11Information���JobObjectReserved12Information���JobObjectReserved13Information���JobObjectReserved14Information��� JobObjectNetRateControlInformation���!JobObjectNotificationLimitInformation2���"JobObjectLimitViolationInformation2��#JobObjectCreateSilo��$JobObjectSiloBasicInformation%JobObjectReserved15Information���&JobObjectReserved16Information���'JobObjectReserved17Information���(JobObjectReserved18Information���)JobObjectReserved19Information���*JobObjectReserved20Information���+JobObjectReserved21Information���,JobObjectReserved22Information���-JobObjectReserved23Information���.JobObjectReserved24Information���/JobObjectReserved25Information���0MaxJobObjectInfoClass>It1_JOBOBJECTINFOCLASS.?AW4_JOBOBJECTINFOCLASS@@�2}PObjectBasicInformation���ObjectNameInformationObjectTypeInformationObjectTypesInformation���ObjectHandleFlagInformation��ObjectSessionInformation�ObjectSessionObjectInformation���MaxObjectInfoClass���Jt4_OBJECT_INFORMATION_CLASS.?AW4_OBJECT_INFORMATION_CLASS@@�.onecore\internal\sdk\inc\ntobapi_x.h���56eZ�_IMAGE_DYNAMIC_RELOCATION_TABLE.?AU_IMAGE_DYNAMIC_RELOCATION_TABLE@@&
"Version��
"Size�Z9_IMAGE_DYNAMIC_RELOCATION_TABLE.?AU_IMAGE_DYNAMIC_RELOCATION_TABLE@@:f��InternalWakeSourceDozeToHibernateInternalWakeSourcePredictedUserPresence��InternalWakeSourceTimerOverride��Rt<PO_INTERNAL_WAKE_SOURCE_TYPE.?AW4PO_INTERNAL_WAKE_SOURCE_TYPE@@���=F
�PsAttributeParentProcess�PsAttributeDebugObject���PsAttributeToken�PsAttributeClientId��PsAttributeTebAddressPsAttributeImageName�PsAttributeImageInfo�PsAttributeMemoryReserve�PsAttributePriorityClass�	PsAttributeErrorMode�
PsAttributeStdHandleInfo�PsAttributeHandleListPsAttributeGroupAffinity�
PsAttributePreferredNode�PsAttributeIdealProcessorPsAttributeUmsThread�PsAttributeMitigationOptions�PsAttributeProtectionLevel���PsAttributeSecureProcess�PsAttributeJobList���PsAttributeChildProcessPolicyPsAttributeAllApplicationPackagesPolicy��PsAttributeWin32kFilter��PsAttributeSafeOpenPromptOriginClaim�PsAttributeBnoIsolation��PsAttributeDesktopAppPolicy��PsAttributeChpe��PsAttributeMitigationAuditOptionsPsAttributeMax���:t?_PS_ATTRIBUTE_NUM.?AW4_PS_ATTRIBUTE_NUM@@�@b�SystemPowerPolicyAc��SystemPowerPolicyDc��VerifySystemPolicyAc�VerifySystemPolicyDc�SystemPowerCapabilities��SystemBatteryState���SystemPowerStateHandler��ProcessorStateHandlerSystemPowerPolicyCurrent�	AdministratorPowerPolicy�
SystemReserveHiberFile���ProcessorInformation�SystemPowerInformation���
ProcessorStateHandler2���LastWakeTime�LastSleepTimeSystemExecutionState�SystemPowerStateNotifyHandlerProcessorPowerPolicyAc���ProcessorPowerPolicyDc���VerifyProcessorPowerPolicyAc�VerifyProcessorPowerPolicyDc�ProcessorPowerPolicyCurrent��SystemPowerStateLogging��SystemPowerLoggingEntry��SetPowerSettingValue�NotifyUserPowerSetting���PowerInformationLevelUnused0�SystemMonitorHiberBootPowerOff���SystemVideoState�TraceApplicationPowerMessage�TraceApplicationPowerMessageEnd�� ProcessorPerfStates��!ProcessorIdleStates��"ProcessorCap�#SystemWakeSource�$SystemHiberFileInformation���%TraceServicePowerMessage�&ProcessorLoad'PowerShutdownNotification(MonitorCapabilities��)SessionPowerInit�*SessionDisplayState��+PowerRequestCreate���,PowerRequestAction���-GetPowerRequestList��.ProcessorInformationEx���/NotifyUserModeLegacyPowerEvent���0GroupPark1ProcessorIdleDomains�2WakeTimerList3SystemHiberFileSize��4ProcessorIdleStatesHv5ProcessorPerfStatesHv6ProcessorPerfCapHv���7ProcessorSetIdle�8LogicalProcessorIdling���9UserPresence�:PowerSettingNotificationName�;GetPowerSettingValue�<IdleResiliency���=SessionRITState��>SessionConnectNotification���?SessionPowerCleanup��@SessionLockState�ASystemHiberbootState�BPlatformInformation��CPdcInvocationDMonitorInvocationEFirmwareTableInformationRegistered���FSetShutdownSelectedTime��GSuspendResumeInvocation��HPlmPowerRequestCreateIScreenOffJCsDeviceNotification�KPlatformRole�LLastResumePerformanceMDisplayBurst�NExitLatencySamplingPercentageORegisterSpmPowerSettings�PPlatformIdleStates���QProcessorIdleVetoRPlatformIdleVeto�SSystemBatteryStatePreciseTThermalEvent�UPowerRequestActionInternal���VBatteryDeviceState���WPowerInformationInternal�XThermalStandby���YSystemHiberFileType��ZPhysicalPowerButtonPress�[QueryPotentialDripsConstraint\EnergyTrackerCreate��]EnergyTrackerQuery���^UpdateBlackBoxRecorder���_SessionAllowExternalDmaDevices���`PowerInformationLevelMaximum�FatBPOWER_INFORMATION_LEVEL.?AW4POWER_INFORMATION_LEVEL@@�CFq^
FileDirectoryInformation�FileFullDirectoryInformation�FileBothDirectoryInformation�FileBasicInformation�FileStandardInformation��FileInternalInformation��FileEaInformationFileAccessInformation	FileNameInformation��
FileRenameInformationFileLinkInformation��FileNamesInformation�
FileDispositionInformation���FilePositionInformation��FileFullEaInformationFileModeInformation��FileAlignmentInformation�FileAllInformation���FileAllocationInformationFileEndOfFileInformation�FileAlternateNameInformation�FileStreamInformationFilePipeInformation��FilePipeLocalInformation�FilePipeRemoteInformationFileMailslotQueryInformation�FileMailslotSetInformation���FileCompressionInformation���FileObjectIdInformation��FileCompletionInformationFileMoveClusterInformation��� FileQuotaInformation�!FileReparsePointInformation��"FileNetworkOpenInformation���#FileAttributeTagInformation��$FileTrackingInformation��%FileIdBothDirectoryInformation���&FileIdFullDirectoryInformation���'FileValidDataLengthInformation���(FileShortNameInformation�)FileIoCompletionNotificationInformation��*FileIoStatusBlockRangeInformation+FileIoPriorityHintInformation,FileSfioReserveInformation���-FileSfioVolumeInformation.FileHardLinkInformation��/FileProcessIdsUsingFileInformation���0FileNormalizedNameInformation1FileNetworkPhysicalNameInformation���2FileIdGlobalTxDirectoryInformation���3FileIsRemoteDeviceInformation4FileUnusedInformation5FileNumaNodeInformation��6FileStandardLinkInformation��7FileRemoteProtocolInformation8FileRenameInformationBypassAccessCheck���9FileLinkInformationBypassAccessCheck�:FileVolumeNameInformation;FileIdInformation<FileIdExtdDirectoryInformation���=FileReplaceCompletionInformation�>FileHardLinkFullIdInformation?FileIdExtdBothDirectoryInformation���@FileDispositionInformationEx�AFileRenameInformationEx��BFileRenameInformationExBypassAccessCheck�CFileDesiredStorageClassInformation���DFileStatInformation��EFileMemoryPartitionInformation���FFileStatLxInformationGFileCaseSensitiveInformation�HFileLinkInformationExIFileLinkInformationExBypassAccessCheck���JFileStorageReserveIdInformation��KFileCaseSensitiveInformationForceAccessCheck�LFileMaximumInformation���FLtE_FILE_INFORMATION_CLASS.?AW4_FILE_INFORMATION_CLASS@@�FU\V�_ENUM_SERVICE_STATUS_PROCESSA.?AU_ENUM_SERVICE_STATUS_PROCESSA@@J�_SERVICE_STATUS_PROCESS.?AU_SERVICE_STATUS_PROCESS@@R
plpServiceName
plpDisplayName
IServiceStatusProcess�VJ8_ENUM_SERVICE_STATUS_PROCESSA.?AU_ENUM_SERVICE_STATUS_PROCESSA@@KmJ�SERVICE_STATUS_HANDLE__.?AUSERVICE_STATUS_HANDLE__@@
M
tunused���JOSERVICE_STATUS_HANDLE__.?AUSERVICE_STATUS_HANDLE__@@Pm�q"tR
S�RtlPathTypeUnknown���RtlPathTypeUncAbsolute���RtlPathTypeDriveAbsolute�RtlPathTypeDriveRelative�RtlPathTypeRootedRtlPathTypeRelative��RtlPathTypeLocalDevice���RtlPathTypeRootLocalDevice���6tU_RTL_PATH_TYPE.?AW4_RTL_PATH_TYPE@@���V�g�PlugPlayControlEnumerateDevice���PlugPlayControlRegisterNewDevice�PlugPlayControlDeregisterDevice��PlugPlayControlInitializeDevice��PlugPlayControlStartDevice���PlugPlayControlUnlockDevice��PlugPlayControlQueryAndRemoveDevice��PlugPlayControlUserResponse��PlugPlayControlGenerateLegacyDevice��	PlugPlayControlGetInterfaceDeviceList
PlugPlayControlProperty��PlugPlayControlDeviceClassAssociationPlugPlayControlGetRelatedDevice��
PlugPlayControlGetInterfaceDeviceAlias���PlugPlayControlDeviceStatus��PlugPlayControlGetDeviceDepthPlugPlayControlQueryDeviceRelations��PlugPlayControlTargetDeviceRelation��PlugPlayControlQueryConflictList�PlugPlayControlRetrieveDock��PlugPlayControlResetDevice���PlugPlayControlHaltDevicePlugPlayControlGetBlockedDriverList��PlugPlayControlGetDeviceInterfaceEnabled�MaxPlugPlayControl���FtX_PLUGPLAY_CONTROL_CLASS.?AW4_PLUGPLAY_CONTROL_CLASS@@�Y��Z�_HEAP_REUSE_THRESHOLD_ACTIVATED.?AU_HEAP_REUSE_THRESHOLD_ACTIVATED@@^
8Header���
 HeapHandle���
(SubSegment���
"0BucketIndex��Z\4_HEAP_REUSE_THRESHOLD_ACTIVATED.?AU_HEAP_REUSE_THRESHOLD_ACTIVATED@@]0��AccessReasonNone��AccessReasonAllowedAce����AccessReasonDeniedAce�AccessReasonAllowedParentAce��AccessReasonDeniedParentAce���AccessReasonNotGrantedByCape��AccessReasonNotGrantedByParentCape����AccessReasonNotGrantedToAppContainer��AccessReasonMissingPrivilege�� AccessReasonFromPrivilege�0AccessReasonIntegrityLevel����@AccessReasonOwnership�PAccessReasonNullDacl��`AccessReasonEmptyDacl�pAccessReasonNoSD���AccessReasonNoGrant����AccessReasonTrustLabel�����AccessReasonFilterAce>t__ACCESS_REASON_TYPE.?AW4_ACCESS_REASON_TYPE@@�`E�b�_PERFINFO_DRIVER_MAJORFUNCTION_RET.?AU_PERFINFO_DRIVER_MAJORFUNCTION_RET@@��*
Irp��
"UniqMatchId��bc_PERFINFO_DRIVER_MAJORFUNCTION_RET.?AU_PERFINFO_DRIVER_MAJORFUNCTION_RET@@��d0�*COMIMAGE_FLAGS_ILONLYCOMIMAGE_FLAGS_32BITREQUIRED�COMIMAGE_FLAGS_IL_LIBRARYCOMIMAGE_FLAGS_STRONGNAMESIGNED��COMIMAGE_FLAGS_NATIVE_ENTRYPOINT��COMIMAGE_FLAGS_TRACKDEBUGDATA�COMIMAGE_FLAGS_32BITPREFERREDCOR_VERSION_MAJOR_V2�COR_VERSION_MAJORCOR_VERSION_MINORCOR_DELETED_NAME_LENGTH��COR_VTABLEGAP_NAME_LENGTHNATIVE_TYPE_MAX_CB����COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE�IMAGE_COR_MIH_METHODRVA��IMAGE_COR_MIH_EHRVA��IMAGE_COR_MIH_BASICBLOCK�COR_VTABLE_32BIT�COR_VTABLE_64BIT�COR_VTABLE_FROM_UNMANAGEDCOR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN���COR_VTABLE_CALL_MOST_DERIVED� IMAGE_COR_EATJ_THUNK_SIZEMAX_CLASS_NAME���MAX_PACKAGE_NAME�RtfReplacesCorHdrNumericDefines.?AW4ReplacesCorHdrNumericDefines@@���gf�	V�_GENERIC_BINDING_ROUTINE_PAIR.?AU_GENERIC_BINDING_ROUTINE_PAIR@@
i
k
l n
o*
mpfnBind��
ppfnUnbindVq_GENERIC_BINDING_ROUTINE_PAIR.?AU_GENERIC_BINDING_ROUTINE_PAIR@@r�5R�_MEMORY_BASIC_INFORMATION64.?AU_MEMORY_BASIC_INFORMATION64@@�
#BaseAddress��
#AllocationBase���
"AllocationProtect
"__alignment1�
#RegionSize���
" State
"$Protect��
"(Type�
",__alignment2�R	u0_MEMORY_BASIC_INFORMATION64.?AU_MEMORY_BASIC_INFORMATION64@@vyi^�_LEAP_SECOND_DATA_REGISTRY_ENTRY.?AU_LEAP_SECOND_DATA_REGISTRY_ENTRY@@��
xf
Year�
Month
Day��
Hour�
Flags

Reserved�^z_LEAP_SECOND_DATA_REGISTRY_ENTRY.?AU_LEAP_SECOND_DATA_REGISTRY_ENTRY@@��{��>�tagCANDIDATEFORM.?AUtagCANDIDATEFORM@@��
}V
"dwIndex��
"dwStyle��
�ptCurrentPos�
�rcArea���> tagCANDIDATEFORM.?AUtagCANDIDATEFORM@@��&onecore\external\sdk\inc\imm.h���<R�_FILE_IO_PRIORITY_HINT_INFO.?AU_FILE_IO_PRIORITY_HINT_INFO@@
�rIoPriorityHintVeryLowIoPriorityHintLowIoPriorityHintNormal�MaximumIoPriorityHintType6t�_PRIORITY_HINT.?AW4_PRIORITY_HINT@@����<�"
�PriorityHint�R�_FILE_IO_PRIORITY_HINT_INFO.?AU_FILE_IO_PRIORITY_HINT_INFO@@�<�"~~~�J�_IO_RESOURCE_DESCRIPTOR.?AU_IO_RESOURCE_DESCRIPTOR@@b
"Length���
"Alignment
~MinimumAddress���
~MaximumAddress���:�<anonymous-tag>.?AU<anonymous-tag>@@���b
"Length���
"Alignment
~MinimumAddress���
~MaximumAddress���:�<anonymous-tag>.?AU<anonymous-tag>@@���IrqPolicyMachineDefault��IrqPolicyAllCloseProcessors��IrqPolicyOneCloseProcessor���IrqPolicyAllProcessorsInMachine��IrqPolicySpecifiedProcessors�IrqPolicySpreadMessagesAcrossAllProcessors���IrqPolicyAllProcessorsInMachineWhenSteered���>t�_IRQ_DEVICE_POLICY.?AW4_IRQ_DEVICE_POLICY@@�����xfIrqPriorityUndefined�IrqPriorityLow���IrqPriorityNormalIrqPriorityHigh��2t�_IRQ_PRIORITY.?AW4_IRQ_PRIORITY@@�����
"MinimumVector
"MaximumVector
�AffinityPolicy���
�PriorityPolicy���
#TargetedProcessors���:�<anonymous-tag>.?AU<anonymous-tag>@@���:
"MinimumChannel���
"MaximumChannel���:�<anonymous-tag>.?AU<anonymous-tag>@@���Z
"RequestLine��
"Reserved�
"Channel��
"TransferWidth:�<anonymous-tag>.?AU<anonymous-tag>@@���b
"Length���
"Alignment
~MinimumAddress���
~MaximumAddress���:�<anonymous-tag>.?AU<anonymous-tag>@@���
�Data�:�<anonymous-tag>.?AU<anonymous-tag>@@���Z
"Length���
"MinBusNumber�
"MaxBusNumber�
"Reserved�:�<anonymous-tag>.?AU<anonymous-tag>@@���>
"Priority�
"Reserved1
"Reserved2:�<anonymous-tag>.?AU<anonymous-tag>@@���f
"Length40�
"Alignment40��
~MinimumAddress���
~MaximumAddress���:�<anonymous-tag>.?AU<anonymous-tag>@@���f
"Length48�
"Alignment48��
~MinimumAddress���
~MaximumAddress���:�<anonymous-tag>.?AU<anonymous-tag>@@���f
"Length64�
"Alignment64��
~MinimumAddress���
~MaximumAddress���:�<anonymous-tag>.?AU<anonymous-tag>@@���v
 Class
 Type�
 Reserved1
 Reserved2
"IdLowPart
"IdHighPart���:�<anonymous-tag>.?AU<anonymous-tag>@@��
�Port�
�Memory���
�Interrupt
�Dma��
�DmaV3
�Generic��
�DevicePrivate
�BusNumber
�ConfigData���
�Memory40�
�Memory48�
�Memory64�
�Connection���2
�<anonymous-tag>.?AT<anonymous-tag>@@����
 Option���
 Type�
 ShareDisposition�
 Spare1���
!Flags
!Spare2���
�uJ� _IO_RESOURCE_DESCRIPTOR.?AU_IO_RESOURCE_DESCRIPTOR@@���>KeyBasicInformation��KeyNodeInformation���KeyFullInformation���KeyNameInformation���KeyCachedInformation�KeyFlagsInformation��KeyVirtualizationInformation�KeyHandleTagsInformation�KeyTrustInformation��	KeyLayerInformation��
MaxKeyInfoClass��Ft�_KEY_INFORMATION_CLASS.?AW4_KEY_INFORMATION_CLASS@@���.onecore\internal\sdk\inc\ntregapi_x.h����b�_SYSTEM_SECURITY_MODEL_INFORMATION.?AU_SYSTEM_SECURITY_MODEL_INFORMATION@@��
"��
"��
"��f
�SModeAdminlessEnabled
�AllowDeviceOwnerProtectionDowngrade��
�Reserved�:�<anonymous-tag>.?AU<anonymous-tag>@@��<
"
�SecurityModelFlags���b�_SYSTEM_SECURITY_MODEL_INFORMATION.?AU_SYSTEM_SECURITY_MODEL_INFORMATION@@����;

z�_RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY.?AU_RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY@@��b
�UserShadowStack��
�SetContextIpValidation���
�BlockNonCetBinaries��z�_RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY.?AU_RTL_IMAGE_MITIGATION_USER_SHADOW_STACK_POLICY@@����^	V�_FILE_PIPE_LOCAL_INFORMATION.?AU_FILE_PIPE_LOCAL_INFORMATION@@��
�
"NamedPipeType
"NamedPipeConfiguration���
"MaximumInstances�
"CurrentInstances�
"InboundQuota�
"ReadDataAvailable
"OutboundQuota
"WriteQuotaAvailable��
" NamedPipeState���
"$NamedPipeEnd�V
�(_FILE_PIPE_LOCAL_INFORMATION.?AU_FILE_PIPE_LOCAL_INFORMATION@@���UM�LearningModeLogLevelPassive��LearningModeLogLevelNormalApcLearningModeLogLevelSpecialApc���LearningModeLogLevelMax��Jt�_LEARNING_MODE_LOG_LEVEL.?AW4_LEARNING_MODE_LOG_LEVEL@@����^�^�_IMAGE_RESOURCE_DIRECTORY_STRING.?AU_IMAGE_RESOURCE_DIRECTORY_STRING@@��
�p#�.
!Length���
�NameString���^�_IMAGE_RESOURCE_DIRECTORY_STRING.?AU_IMAGE_RESOURCE_DIRECTORY_STRING@@���ff2�DLGTEMPLATE.?AUDLGTEMPLATE@@
���
�v
"style
"dwExtendedStyle��
!cdit�

x
y
cx���
cy���2�DLGTEMPLATE.?AUDLGTEMPLATE@@�L(J�tagEMRSETVIEWPORTEXTEX.?AUtagEMRSETVIEWPORTEXTEX@@��
�&
Pemr��
-szlExtentJ�tagEMRSETVIEWPORTEXTEX.?AUtagEMRSETVIEWPORTEXTEX@@���S�RCacheUnified�CacheInstruction�CacheDataCacheTrace���Bt�_PROCESSOR_CACHE_TYPE.?AW4_PROCESSOR_CACHE_TYPE@@��|�J�_QUERY_SERVICE_CONFIGA.?AU_QUERY_SERVICE_CONFIGA@@���
"dwServiceType
"dwStartType��
"dwErrorControl���
plpBinaryPathName�
plpLoadOrderGroup�
" dwTagId��
p(lpDependencies���
p0lpServiceStartName���
p8lpDisplayNameJ	�@_QUERY_SERVICE_CONFIGA.?AU_QUERY_SERVICE_CONFIGA@@���m0>�tagMSGBOXPARAMSA.?AUtagMSGBOXPARAMSA@@��
o2�tagHELPINFO.?AUtagHELPINFO@@
�
��
��
ucbSize���
�hwndOwner
�hInstance
qlpszText�
q lpszCaption��
"(dwStyle��
q0lpszIcon�
#8dwContextHelpId��
�@lpfnMsgBoxCallback���
"HdwLanguageId�>
�PtagMSGBOXPARAMSA.?AUtagMSGBOXPARAMSA@@���L$V�_KEY_VALUE_LAYER_INFORMATION.?AU_KEY_VALUE_LAYER_INFORMATION@@��
"��
"��.
�IsTombstone��
Reserved�V_KEY_VALUE_LAYER_INFORMATION.?AU_KEY_VALUE_LAYER_INFORMATION@@���fF�_PEBS_DS_SAVE_AREA32.?AU_PEBS_DS_SAVE_AREA32@@��
##@�"
"BtsBufferBase
"BtsIndex�
"BtsAbsoluteMaximum���
"BtsInterruptThreshold
"PebsBufferBase���
"PebsIndex
"PebsAbsoluteMaximum��
"PebsInterruptThreshold���
 PebsGpCounterReset���
`PebsFixedCounterResetF
�_PEBS_DS_SAVE_AREA32.?AU_PEBS_DS_SAVE_AREA32@@����.�tagXFORM.?AUtagXFORM@@��b
@eM11�
@eM12�
@eM21�
@eM22�
@eDx��
@eDy��.
tagXFORM.?AUtagXFORM@@��SNV�_ACTIVATION_CONTEXT_MSIX_INFO.?AU_ACTIVATION_CONTEXT_MSIX_INFO@@q#�&
ApplicationUserModelId���V_ACTIVATION_CONTEXT_MSIX_INFO.?AU_ACTIVATION_CONTEXT_MSIX_INFO@@�/J�_FILE_STAT_INFORMATION.?AU_FILE_STAT_INFORMATION@@��
~FileId���
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(AllocationSize���
~0EndOfFile
"8FileAttributes���
"<ReparseTag���
"@NumberOfLinks
"DEffectiveAccess��JH_FILE_STAT_INFORMATION.?AU_FILE_STAT_INFORMATION@@��UI^�_PERFINFO_FILEOBJECT_INFORMATION.?AU_PERFINFO_FILEOBJECT_INFORMATION@@��

FileObject���^_PERFINFO_FILEOBJECT_INFORMATION.?AU_PERFINFO_FILEOBJECT_INFORMATION@@��0cf�_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W@@��

TransportCredentials�
"Flags
"AuthenticationTarget�
"NumberOfAuthnSchemes�
"AuthnSchemes�
q ServerCertificateSubject�
(ProxyCredentials�
"0NumberOfProxyAuthnSchemes
"8ProxyAuthnSchemesf	@_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W@@��.onecore\external\shared\inc\rpcdce.h����F�tagPOINTER_TYPE_INFO.?AUtagPOINTER_TYPE_INFO@@��
!F�tagPOINTER_TOUCH_INFO.?AUtagPOINTER_TOUCH_INFO@@B�tagPOINTER_PEN_INFO.?AUtagPOINTER_PEN_INFO@@:
"type�
#touchInfo
$penInfo��F%�tagPOINTER_TYPE_INFO.?AUtagPOINTER_TYPE_INFO@@��&LH�DISPLAYCONFIG_TOPOLOGY_INTERNAL��DISPLAYCONFIG_TOPOLOGY_CLONE�DISPLAYCONFIG_TOPOLOGY_EXTENDDISPLAYCONFIG_TOPOLOGY_EXTERNAL����DISPLAYCONFIG_TOPOLOGY_FORCE_UINT32�Jt(DISPLAYCONFIG_TOPOLOGY_ID.?AW4DISPLAYCONFIG_TOPOLOGY_ID@@�)S�a�V�_FILE_ID_EXTD_DIR_INFORMATION.?AU_FILE_ID_EXTD_DIR_INFORMATION@@
,6�_FILE_ID_128.?AU_FILE_ID_128@@��V
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
"DReparsePointTag��
.HFileId���
JXFileName�V/`_FILE_ID_EXTD_DIR_INFORMATION.?AU_FILE_ID_EXTD_DIR_INFORMATION@@0U@Z�_KAFFINITY_ENUMERATION_CONTEXT.?AU_KAFFINITY_ENUMERATION_CONTEXT@@��6�_KAFFINITY_EX.?AU_KAFFINITY_EX@@
3F
4Affinity�
#CurrentMask��
!CurrentIndex�Z5_KAFFINITY_ENUMERATION_CONTEXT.?AU_KAFFINITY_ENUMERATION_CONTEXT@@��*onecore\internal\sdk\inc\affinity.h67s:�tagKERNINGPAIR.?AUtagKERNINGPAIR@@��B
!wFirst���
!wSecond��
tiKernAmount��::tagKERNINGPAIR.?AUtagKERNINGPAIR@@��;S$R�_UMS_SCHEDULER_STARTUP_INFO.?AU_UMS_SCHEDULER_STARTUP_INFO@@
=
.j
"UmsVersion���
CompletionList���
?SchedulerProc
SchedulerParam���R@ _UMS_SCHEDULER_STARTUP_INFO.?AU_UMS_SCHEDULER_STARTUP_INFO@@A<2B�_WMI_PNP_RECORD_V3.?AU_WMI_PNP_RECORD_V3@@��f
"IDLength�
"DescriptionLength
"FriendlyNameLength���
JStrings��BD_WMI_PNP_RECORD_V3.?AU_WMI_PNP_RECORD_V3@@��E0�b�_FILE_ID_EXTD_BOTH_DIR_INFORMATION.?AU_FILE_ID_EXTD_BOTH_DIR_INFORMATION@@��
Gq#�
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
"DReparsePointTag��
.HFileId���
pXShortNameLength��
IZShortName
JrFileName�bJx_FILE_ID_EXTD_BOTH_DIR_INFORMATION.?AU_FILE_ID_EXTD_BOTH_DIR_INFORMATION@@��KUQR�_PROCESS_HANDLE_INFORMATION.?AU_PROCESS_HANDLE_INFORMATION@@
M>
"HandleCount��
"HandleCountHighWatermark�RO_PROCESS_HANDLE_INFORMATION.?AU_PROCESS_HANDLE_INFORMATION@@Pb#^�_EVENT_TRACE_SPINLOCK_INFORMATION.?AU_EVENT_TRACE_SPINLOCK_INFORMATION@@
R�
EventTraceInformationClass���
"SpinLockSpinThreshold
"SpinLockAcquireSampleRate
"SpinLockContentionSampleRate�
"SpinLockHoldThreshold^T_EVENT_TRACE_SPINLOCK_INFORMATION.?AU_EVENT_TRACE_SPINLOCK_INFORMATION@@UJ�_TRACE_LOGFILE_HEADER64.?AU_TRACE_LOGFILE_HEADER64@@
Wf
 MajorVersion�
 MinorVersion�
 SubVersion���
 SubMinorVersion��:Y<anonymous-tag>.?AU<anonymous-tag>@@Z�J�_TIME_ZONE_INFORMATION.?AU_TIME_ZONE_INFORMATION@@��.
"BufferSize���
"Version��
ZVersionDetail
"ProviderVersion��
"NumberOfProcessors���
~EndTime��
"TimerResolution��
"MaximumFileSize��
" LogFileMode��
"$BuffersWritten���
�(LogInstanceGuid��
"(StartBuffers�
",PointerSize��
"0EventsLost���
"4CpuSpeedInMHz
#8LoggerName���
#@LogFileName��
\HTimeZone�
~�BootTime�
~PerfFreq�
~StartTime
"ReservedFlags
"BuffersLost��J]_TRACE_LOGFILE_HEADER64.?AU_TRACE_LOGFILE_HEADER64@@^�B�_RESUME_PERFORMANCE.?AU_RESUME_PERFORMANCE@@
`Z
"PostTimeMs���
#TotalResumeTimeMs
#ResumeCompleteTimestamp��Bb_RESUME_PERFORMANCE.?AU_RESUME_PERFORMANCE@@cF`�FpFormatFp32�FpFormatFp64�FpFormatFp80�FpFormatFp128FpFormatI16��FpFormatI32��FpFormatI64��FpFormatU16��FpFormatU32��	FpFormatU64��
FpFormatCompare��FpFormatString���:te_FP__IEEE_FORMAT.?AW4_FP__IEEE_FORMAT@@���*onecore\internal\sdk\inc\ntxcapi.h�fgUJ�_APP_MEMORY_INFORMATION.?AU_APP_MEMORY_INFORMATION@@
i~
#AvailableCommit��
#PrivateCommitUsage���
#PeakPrivateCommitUsage���
#TotalCommitUsage�Jk _APP_MEMORY_INFORMATION.?AU_APP_MEMORY_INFORMATION@@:onecore\external\sdk\inc\minwin\processthreadsapi.hlm�B�tagWNODE_EVENT_ITEM.?AUtagWNODE_EVENT_ITEM@@
o6�_WNODE_HEADER.?AU_WNODE_HEADER@@
qWnodeHeader��Br0tagWNODE_EVENT_ITEM.?AUtagWNODE_EVENT_ITEM@@.onecore\external\shared\inc\wmistr.h���stJ�_POWER_IDLE_RESILIENCY.?AU_POWER_IDLE_RESILIENCY@@��>
"CoalescingTimeout
"IdleResiliencyPeriod�Jw_POWER_IDLE_RESILIENCY.?AU_POWER_IDLE_RESILIENCY@@��xF>PsProtectedSignerNonePsProtectedSignerAuthenticodePsProtectedSignerCodeGen�PsProtectedSignerAntimalware�PsProtectedSignerLsa�PsProtectedSignerWindows�PsProtectedSignerWinTcb��PsProtectedSignerWinSystem���PsProtectedSignerApp�	PsProtectedSignerMax�B
tz_PS_PROTECTED_SIGNER.?AW4_PS_PROTECTED_SIGNER@@���{bj	J�_TOKEN_MANDATORY_POLICY.?AU_TOKEN_MANDATORY_POLICY@@
"Policy���J~_TOKEN_MANDATORY_POLICY.?AU_TOKEN_MANDATORY_POLICY@@E�VTokenUserTokenGroups��TokenPrivileges��TokenOwner���TokenPrimaryGroupTokenDefaultDacl�TokenSource��TokenType	TokenImpersonationLevel��
TokenStatistics��TokenRestrictedSids��TokenSessionId���
TokenGroupsAndPrivileges�TokenSessionReferenceTokenSandBoxInertTokenAuditPolicy�TokenOrigin��TokenElevationType���TokenLinkedToken�TokenElevation���TokenHasRestrictions�TokenAccessInformation���TokenVirtualizationAllowed���TokenVirtualizationEnabled���TokenIntegrityLevel��TokenUIAccessTokenMandatoryPolicy�TokenLogonSidTokenIsAppContainer��TokenCapabilitiesTokenAppContainerSid� TokenAppContainerNumber��!TokenUserClaimAttributes�"TokenDeviceClaimAttributes���#TokenRestrictedUserClaimAttributes���$TokenRestrictedDeviceClaimAttributes�%TokenDeviceGroups&TokenRestrictedDeviceGroups��'TokenSecurityAttributes��(TokenIsRestricted)TokenProcessTrustLevel���*TokenPrivateNameSpace+TokenSingletonAttributes�,TokenBnoIsolation-TokenChildProcessFlags���.TokenIsLessPrivilegedAppContainer/TokenIsSandboxed�0TokenOriginatingProcessTrustLevel1MaxTokenInfoClassJ1t�_TOKEN_INFORMATION_CLASS.?AW4_TOKEN_INFORMATION_CLASS@@����E8:�tagEMRPOLYDRAW.?AUtagEMRPOLYDRAW@@��*�_POINTL.?AU_POINTL@@�#� #�Z
Pemr��
,rclBounds
"cptl�
�aptl�
�$abTypes��:�(tagEMRPOLYDRAW.?AUtagEMRPOLYDRAW@@���SQZ�_PROCESS_DEVICEMAP_INFORMATION.?AU_PROCESS_DEVICEMAP_INFORMATION@@��
DirectoryHandle��:�<anonymous-tag>.?AU<anonymous-tag>@@�} # �*
"DriveMap�
�DriveType:�$<anonymous-tag>.?AU<anonymous-tag>@@�}"
�Set��
�QueryZ�(_PROCESS_DEVICEMAP_INFORMATION.?AU_PROCESS_DEVICEMAP_INFORMATION@@���}zGEO_NATION���GEO_LATITUDE�GEO_LONGITUDEGEO_ISO2�GEO_ISO3�GEO_RFC1766��GEO_LCID�GEO_FRIENDLYNAME�	GEO_OFFICIALNAME�
GEO_TIMEZONESGEO_OFFICIALLANGUAGESGEO_ISO_UN_NUMBER
GEO_PARENT���GEO_DIALINGCODE��GEO_CURRENCYCODE�GEO_CURRENCYSYMBOL���GEO_NAME�GEO_ID���.t�SYSGEOTYPE.?AW4SYSGEOTYPE@@����%>�_OVERLAPPED_ENTRY.?AU_OVERLAPPED_ENTRY@@
�2�_OVERLAPPED.?AU_OVERLAPPED@@
�r
#lpCompletionKey��
�lpOverlapped�
#Internal�
"dwNumberOfBytesTransferred���>� _OVERLAPPED_ENTRY.?AU_OVERLAPPED_ENTRY@@6onecore\external\sdk\inc\minwin\minwinbase.h�����BZ�_IMAGE_DYNAMIC_RELOCATION64_V2.?AU_IMAGE_DYNAMIC_RELOCATION64_V2@@��n
"HeaderSize���
"FixupInfoSize
#Symbol���
"SymbolGroup��
"FlagsZ�_IMAGE_DYNAMIC_RELOCATION64_V2.?AU_IMAGE_DYNAMIC_RELOCATION64_V2@@���f�B�tagBITMAPINFOHEADER.?AUtagBITMAPINFOHEADER@@
�
"biSize���
biWidth��
biHeight�
!biPlanes�
!biBitCount���
"biCompression
"biSizeImage��
biXPelsPerMeter��
biYPelsPerMeter��
" biClrUsed
"$biClrImportant���B�(tagBITMAPINFOHEADER.?AUtagBITMAPINFOHEADER@@�S,Z�_SYSTEM_RESOURCE_ATTRIBUTE_ACE.?AU_SYSTEM_RESOURCE_ATTRIBUTE_ACE@@��2�_ACE_HEADER.?AU_ACE_HEADER@@:
�Header���
"Mask�
"SidStart�Z�_SYSTEM_RESOURCE_ATTRIBUTE_ACE.?AU_SYSTEM_RESOURCE_ATTRIBUTE_ACE@@���E�R�_EVENT_TRACE_PROPERTIES_V2.?AU_EVENT_TRACE_PROPERTIES_V2@@��
"��N�_EVENT_FILTER_DESCRIPTOR.?AU_EVENT_FILTER_DESCRIPTOR@@��
�
"��
"��
"��
"���
qWnode
"0BufferSize���
"4MinimumBuffers���
"8MaximumBuffers���
"<MaximumFileSize��
"@LogFileMode��
"DFlushTimer���
"HEnableFlags��
LAgeLimit�
LFlushThreshold���
"PNumberOfBuffers��
"TFreeBuffers��
"XEventsLost���
"\BuffersWritten���
"`LogBuffersLost���
"dRealTimeBuffersLost��
hLoggerThreadId���
"pLogFileNameOffset
"tLoggerNameOffset�
�xVersionNumber
"xV2Control
"|FilterDescCount��
��FilterDesc���
��Wow��
��QpcDeltaTracking�
��LargeMdlPages
��ExcludeKernelStack���
#�V2OptionsR��_EVENT_TRACE_PROPERTIES_V2.?AU_EVENT_TRACE_PROPERTIES_V2@@����zF�_ENUM_SERVICE_STATUSW.?AU_ENUM_SERVICE_STATUSW@@:�_SERVICE_STATUS.?AU_SERVICE_STATUS@@J
qlpServiceName
qlpDisplayName
�ServiceStatusF�0_ENUM_SERVICE_STATUSW.?AU_ENUM_SERVICE_STATUSW@@�m�R�_PROCESS_MEMORY_ALLOCATION_MODE.?AT_PROCESS_MEMORY_ALLOCATION_MODE@@
"��
"��:
"Flags
�TopDown��
�Reserved�R�_PROCESS_MEMORY_ALLOCATION_MODE.?AT_PROCESS_MEMORY_ALLOCATION_MODE@@�b�>�_CM_PERF_COUNTERS.?AU_CM_PERF_COUNTERS@@*
#OpenedKeys���
#DelayCloseKCBs���
#PrivateAllocPages
#PrivateAllocFree�
# PrivateAllocUsed�
#(LookupCacheHit���
#0LookupCacheMissFound�
#8LookupCacheMissNotFound��
#@ViewMap��
#HViewUnMap
#PHiveShrink���>�X_CM_PERF_COUNTERS.?AU_CM_PERF_COUNTERS@@�00B�_EVENT_TRACE_HEADER.?AU_EVENT_TRACE_HEADER@@6
 Type�
 Level
!Version��:�<anonymous-tag>.?AU<anonymous-tag>@@��+N
!Size�
!FieldTypeFlags���
 HeaderType���
 MarkerFlags��
"Version��
�Class
"ThreadId�
"ProcessId
~TimeStamp
�Guid�
#GuidPtr��
"(KernelTime���
",UserTime�
#(ProcessorTime
"(ClientContext
",FlagsB�0_EVENT_TRACE_HEADER.?AU_EVENT_TRACE_HEADER@@�� :�tagTEXTMETRICW.?AUtagTEXTMETRICW@@���
tmHeight�
tmAscent�
tmDescent
tmInternalLeading
tmExternalLeading
tmAveCharWidth���
tmMaxCharWidth���
tmWeight�
 tmOverhang���
$tmDigitizedAspectX���
(tmDigitizedAspectY���
q,tmFirstChar��
q.tmLastChar���
q0tmDefaultChar
q2tmBreakChar��
 4tmItalic�
 5tmUnderlined�
 6tmStruckOut��
 7tmPitchAndFamily�
 8tmCharSet:�<tagTEXTMETRICW.?AUtagTEXTMETRICW@@���S��BackTraceDatabaseCreate��BackTraceDatabaseDelete��BackTraceDatabaseFlush���BackTraceDatabaseMaxControl��Zt�_RTL_STACK_TRACE_DATABASE_CONTROL.?AW4_RTL_STACK_TRACE_DATABASE_CONTROL@@�����FpCodeUnspecifiedFpCodeAddFpCodeSubtract���FpCodeMultiply���FpCodeDivide�FpCodeSquareRoot�FpCodeRemainder��FpCodeCompareFpCodeConvert	FpCodeRound��
FpCodeTruncate���FpCodeFloor��FpCodeCeil���
FpCodeAcos���FpCodeAsin���FpCodeAtan���FpCodeAtan2��FpCodeCabs���FpCodeCosFpCodeCosh���FpCodeExpFpCodeFabs���FpCodeFmod���FpCodeFrexp��FpCodeHypot��FpCodeLdexp��FpCodeLogFpCodeLog10��FpCodeModf���FpCodePowFpCodeSinFpCodeSinh��� FpCodeTan!FpCodeTanh���"FpCodeY0�#FpCodeY1�$FpCodeYn�F%t�_FP_IEEE_OPERATION_CODE.?AW4_FP_IEEE_OPERATION_CODE@@��ghR�_IMAGE_DELAYLOAD_DESCRIPTOR.?AU_IMAGE_DELAYLOAD_DESCRIPTOR@@
"��
"��N
"AllAttributes
�RvaBased�
�ReservedAttributes���2�<anonymous-tag>.?AT<anonymous-tag>@@�f�
�Attributes���
"DllNameRVA���
"ModuleHandleRVA��
"ImportAddressTableRVA
"ImportNameTableRVA���
"BoundImportAddressTableRVA���
"UnloadInformationTableRVA
"TimeDateStampR� _IMAGE_DELAYLOAD_DESCRIPTOR.?AU_IMAGE_DELAYLOAD_DESCRIPTOR@@�f�SystemVaTypeAll��SystemVaTypeNonPagedPool�SystemVaTypePagedPoolSystemVaTypeSystemCache��SystemVaTypeSystemPtes���SystemVaTypeSessionSpace�SystemVaTypeMax��6t�_SYSTEM_VA_TYPE.?AW4_SYSTEM_VA_TYPE@@����
:VRF_TRIAGE_CONTEXT_NONE��VRF_TRIAGE_CONTEXT_DEFAULT���VRF_TRIAGE_CONTEXT_DEVELOPMENT���VRF_TRIAGE_CONTEXT_CERTIFICATION�VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED���VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICSVRF_TRIAGE_CONTEXT_FLIGHT_MONITORING�NUM_VRF_TRIAGE_CONTEXTS��>t�_VRF_TRIAGE_CONTEXT.?AW4_VRF_TRIAGE_CONTEXT@@����6�_PS_PKG_CLAIM.?AU_PS_PKG_CLAIM@@
"��&
"Flags
�Origin���6�_PS_PKG_CLAIM.?AU_PS_PKG_CLAIM@@�bj
R�_ETW_DISABLE_KTIMER2_EVENT.?AU_ETW_DISABLE_KTIMER2_EVENT@@��^
#TimerKey�
#DisableCallback��
#DisableContextKey
 FlagsR� _ETW_DISABLE_KTIMER2_EVENT.?AU_ETW_DISABLE_KTIMER2_EVENT@@���0��SystemPixelFormatUnknown�SystemPixelFormatR8G8B8��SystemPixelFormatR8G8B8X8SystemPixelFormatB8G8R8��SystemPixelFormatB8G8R8X8Bt�_SYSTEM_PIXEL_FORMAT.?AW4_SYSTEM_PIXEL_FORMAT@@�����U
�"#�
�Data�j�_RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET.?AU_RTL_FEATURE_USAGE_SUBSCRIPTION_TARGET@@�����bFpCompareEqual���FpCompareGreater�FpCompareLessFpCompareUnordered���Ft�_FP_IEEE_COMPARE_RESULT.?AW4_FP_IEEE_COMPARE_RESULT@@��gJ:�_ETW_LBR_ENTRY.?AU_ETW_LBR_ENTRY@@��B
FromAddress��
ToAddress
Reserved�:�_ETW_LBR_ENTRY.?AU_ETW_LBR_ENTRY@@���0R�_FILE_FS_DEVICE_INFORMATION.?AU_FILE_FS_DEVICE_INFORMATION@@
6
"DeviceType���
"Characteristics��R_FILE_FS_DEVICE_INFORMATION.?AU_FILE_FS_DEVICE_INFORMATION@@U�R�_FILE_FS_VOLUME_INFORMATION.?AU_FILE_FS_VOLUME_INFORMATION@@�
~VolumeCreationTime���
"VolumeSerialNumber���
"VolumeLabelLength
 SupportsObjects��
JVolumeLabel��R_FILE_FS_VOLUME_INFORMATION.?AU_FILE_FS_VOLUME_INFORMATION@@U�SmallBusinessEnterprise���BackOffice���CommunicationServer��TerminalServer���SmallBusinessRestricted��EmbeddedNT���DataCenter���SingleUserTS�	Personal�
BladeEmbeddedRestricted���SecurityAppliance
StorageServerComputeServerWHServer�PhoneNT��MultiUserTS��MaxSuiteType�.t
_SUITE_TYPE.?AW4_SUITE_TYPE@@��&MemExtendedParameterInvalidType��MemExtendedParameterAddressRequirements��MemExtendedParameterNumaNode�MemExtendedParameterPartitionHandle��MemExtendedParameterUserPhysicalHandle���MemExtendedParameterAttributeFlags���MemExtendedParameterMax��Nt
MEM_EXTENDED_PARAMETER_TYPE.?AW4MEM_EXTENDED_PARAMETER_TYPE@@�y��PnpQueryEjectRelations���PnpQueryRemovalRelations�PnpQueryPowerRelations���PnpQueryBusRelations�PnpQueryTransportRelations���MaxPnpQueryRelations�>t_PNP_QUERY_RELATION.?AW4_PNP_QUERY_RELATION@@���6�_CM_ROM_BLOCK.?AU_CM_ROM_BLOCK@@
&
"Address��
"Size�6_CM_ROM_BLOCK.?AU_CM_ROM_BLOCK@@��B�_LOAD_ASDATA_TABLE.?AU_LOAD_ASDATA_TABLE@@��
Module���
qFilePath�
#Size�
Handle���
 RefCount�
�(EntryPointActivationContext��B0_LOAD_ASDATA_TABLE.?AU_LOAD_ASDATA_TABLE@@���PvEDIT_CONTROL_FEATURE_ENTERPRISE_DATA_PROTECTION_PASTE_SUPPORTEDIT_CONTROL_FEATURE_PASTE_NOTIFICATIONS�BtEDIT_CONTROL_FEATURE.?AW4EDIT_CONTROL_FEATURE@@���L
,F�_RTL_TRACE_ENUMERATE.?AU_RTL_TRACE_ENUMERATE@@��
B�_RTL_TRACE_DATABASE.?AU_RTL_TRACE_DATABASE@@
!>�_RTL_TRACE_BLOCK.?AU_RTL_TRACE_BLOCK@@��
#6
"Database�
"Index
$BlockF%_RTL_TRACE_ENUMERATE.?AU_RTL_TRACE_ENUMERATE@@��&�(J�_DUPLICATE_EXTENTS_DATA.?AU_DUPLICATE_EXTENTS_DATA@@
(f
FileHandle���
~SourceFileOffset�
~TargetFileOffset�
~ByteCountJ* _DUPLICATE_EXTENTS_DATA.?AU_DUPLICATE_EXTENTS_DATA@@+UO V�_IMAGE_ARCHIVE_MEMBER_HEADER.?AU_IMAGE_ARCHIVE_MEMBER_HEADER@@�� #� #� #
�~
.Name�
/Date�
�UserID���
�"GroupID��
�(Mode�
00Size�
�:EndHeaderV1<_IMAGE_ARCHIVE_MEMBER_HEADER.?AU_IMAGE_ARCHIVE_MEMBER_HEADER@@��2fU>�_WIN32_FIND_DATAA.?AU_WIN32_FIND_DATAA@@
4.�_FILETIME.?AU_FILETIME@@p#�p#�
"dwFileAttributes�
6ftCreationTime���
6ftLastAccessTime�
6ftLastWriteTime��
"nFileSizeHigh
" nFileSizeLow�
"$dwReserved0��
"(dwReserved1��
7,cFileName
80cAlternateFileName���>
9@_WIN32_FIND_DATAA.?AU_WIN32_FIND_DATAA@@:�fB�_EXCEPTION_POINTERS.?AU_EXCEPTION_POINTERS@@
<
=">
?~�_IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION.?AU_IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION@@
A��
B
"��
"��
"
��N
DPageRelativeOffset���
EIndirectCall�
FIATIndex�~G_IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION.?AU_IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION@@Hf�V�_TRANSACTION_ENLISTMENT_PAIR.?AU_TRANSACTION_ENLISTMENT_PAIR@@��6
�EnlistmentId�
�ResourceManagerIdVK _TRANSACTION_ENLISTMENT_PAIR.?AU_TRANSACTION_ENLISTMENT_PAIR@@��L�F�_PROCESSOR_GROUP_INFO.?AU_PROCESSOR_GROUP_INFO@@
N #&�v
 MaximumProcessorCount
 ActiveProcessorCount�
PReserved�
#(ActiveProcessorMask��FQ0_PROCESSOR_GROUP_INFO.?AU_PROCESSOR_GROUP_INFO@@R|5B�PPM_WMI_IDLE_STATES.?AUPPM_WMI_IDLE_STATES@@
TB�PPM_WMI_IDLE_STATE.?AUPPM_WMI_IDLE_STATE@@��V# �z
"Type�
"Count
"TargetState��
"OldState�
#TargetProcessors�
WStateBX8PPM_WMI_IDLE_STATES.?AUPPM_WMI_IDLE_STATES@@YF�	N�_TRACE_ENABLE_CONTEXT_EX.?AU_TRACE_ENABLE_CONTEXT_EX@@��
!LoggerId�
 Level
 InternalFlag�
"EnableFlags��
"EnableFlagsHigh��
"Reserved�N\_TRACE_ENABLE_CONTEXT_EX.?AU_TRACE_ENABLE_CONTEXT_EX@@��2onecore\internal\sdk\inc\minwin\ntwmi_x.h��]^>V�_PERFINFO_PPM_IDLE_STATE_EXIT.?AU_PERFINFO_PPM_IDLE_STATE_EXIT@@
`&
"State
"Status���Vb_PERFINFO_PPM_IDLE_STATE_EXIT.?AU_PERFINFO_PPM_IDLE_STATE_EXIT@@c0'R�_EVENT_INSTANCE_GUID_HEADER.?AU_EVENT_INSTANCE_GUID_HEADER@@6
 Type�
 Level
!Version��:f<anonymous-tag>.?AU<anonymous-tag>@@g0�
!Size�
!FieldTypeFlags���
 HeaderType���
 MarkerFlags��
"Version��
gClass
"ThreadId�
"ProcessId
~TimeStamp
�Guid�
#GuidPtr��
"(ClientContext
",Flags
"(KernelTime���
",UserTime�
#(ProcessorTime
"0InstanceId���
"4ParentInstanceId�
�8ParentGuid���RiH_EVENT_INSTANCE_GUID_HEADER.?AU_EVENT_INSTANCE_GUID_HEADER@@j0V�_IMAGE_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_RUNTIME_FUNCTION_ENTRY@@
l#mnf
"BeginAddress�
"EndAddress���
"UnwindInfoAddress
"UnwindData���Vp_IMAGE_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_RUNTIME_FUNCTION_ENTRY@@qf3F�tagEMRSETARCDIRECTION.?AUtagEMRSETARCDIRECTION@@
s*
Pemr��
"iArcDirectionFutagEMRSETARCDIRECTION.?AUtagEMRSETARCDIRECTION@@vS}J�_REDIRECTION_DESCRIPTOR.?AU_REDIRECTION_DESCRIPTOR@@^�_REDIRECTION_FUNCTION_DESCRIPTOR.?AU_REDIRECTION_FUNCTION_DESCRIPTOR@@��
y��
zF
"Version��
"FunctionCount
{Redirections�J|_REDIRECTION_DESCRIPTOR.?AU_REDIRECTION_DESCRIPTOR@@6onecore\external\sdk\inc\minwin\libloaderapi.h�}~fZ�_RTL_RETPOLINE_RELOCATION_INDEX.?AU_RTL_RETPOLINE_RELOCATION_INDEX@@
�~�_IMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATION.?AU_IMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATION@@��v�_IMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION.?AU_IMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION@@��>
AImport���
�Indir
�SwitchJump���2�<anonymous-tag>.?AT<anonymous-tag>@@��e�
!ImportRelocationSize�
!IndirectRelocationSize���
!SwitchJumpRelocationSize�
!StraddleType�
�StraddleRelocZ�_RTL_RETPOLINE_RELOCATION_INDEX.?AU_RTL_RETPOLINE_RELOCATION_INDEX@@��`b�_SYSTEM_PHYSICAL_MEMORY_INFORMATION.?AU_SYSTEM_PHYSICAL_MEMORY_INFORMATION@@
�f
#TotalPhysicalBytes���
#LowestPhysicalAddress
#HighestPhysicalAddress���b�_SYSTEM_PHYSICAL_MEMORY_INFORMATION.?AU_SYSTEM_PHYSICAL_MEMORY_INFORMATION@@���zPsEnergyComponentTypeCpu�PsEnergyComponentTypeStorage�PsEnergyComponentTypeNetwork�PsEnergyComponentTypeMBB�PsEnergyComponentTypeForegroundTime��PsEnergyComponentTypeDesktopVisibleTime��PsEnergyComponentTypeWindowResource��PsEnergyComponentTypeCompositorResource��PsEnergyComponentTypeTrackingState���	PsEnergyComponentTypeInput���
PsEnergyComponentTypeAudioIn�PsEnergyComponentTypeAudioOutPsEnergyComponentTypeDisplayRequired�
PsEnergyComponentTypeKeyboardInput���PsEnergyComponentTypeMouseInput��PsEnergyComponentTypeMax�^t�_PROCESS_ENERGY_COMPONENT_TYPE_NUM.?AW4_PROCESS_ENERGY_COMPONENT_TYPE_NUM@@����b�6�_WMI_FILE_IO.?AU_WMI_FILE_IO@@��.
FileObject���
JFileName�6�_WMI_FILE_IO.?AU_WMI_FILE_IO@@���0	j�_MEMORY_PARTITION_TRANSFER_INFORMATION.?AU_MEMORY_PARTITION_TRANSFER_INFORMATION@@��
�>
#NumberOfPages
"NumaNode�
"Flagsj�_MEMORY_PARTITION_TRANSFER_INFORMATION.?AU_MEMORY_PARTITION_TRANSFER_INFORMATION@@���B�N�_MUTANT_OWNER_INFORMATION.?AU_MUTANT_OWNER_INFORMATION@@
�ClientId�N�_MUTANT_OWNER_INFORMATION.?AU_MUTANT_OWNER_INFORMATION@@��8^�_PERFINFO_PPM_THERMAL_CONSTRAINT.?AU_PERFINFO_PPM_THERMAL_CONSTRAINT@@��2
"Constraint���
#Processors���^�_PERFINFO_PPM_THERMAL_CONSTRAINT.?AU_PERFINFO_PPM_THERMAL_CONSTRAINT@@���0Z:�tagPAINTSTRUCT.?AUtagPAINTSTRUCT@@��&�HDC__.?AUHDC__@@
� # �~
�hdc��
tfErase���
�rcPaint��
tfRestore�
t fIncUpdate���
�$rgbReserved��:�HtagPAINTSTRUCT.?AUtagPAINTSTRUCT@@���LkV�_REQUEST_OPLOCK_OUTPUT_BUFFER.?AU_REQUEST_OPLOCK_OUTPUT_BUFFER@@�
!StructureVersion�
!StructureLength��
"OriginalOplockLevel��
"NewOplockLevel���
"Flags
"AccessMode���
!ShareModeV�_REQUEST_OPLOCK_OUTPUT_BUFFER.?AU_REQUEST_OPLOCK_OUTPUT_BUFFER@@�U�EtwCoverageSamplerCreateInformation��EtwCoverageSamplerQueryInformation���EtwCoverageSamplerBloomInformation���EtwCoverageSamplerPerfInformationEtwCoverageSamplerStatusInformation��MaxEtwCoverageSamplerInfoClass���ft�_ETW_COVERAGE_SAMPLER_INFORMATION_CLASS.?AW4_ETW_COVERAGE_SAMPLER_INFORMATION_CLASS@@���.�_FLS_DATA.?AU_FLS_DATA@@#�"
�Entry
�Slots.�_FLS_DATA.?AU_FLS_DATA@@���
Z�_FILE_REPARSE_POINT_INFORMATION.?AU_FILE_REPARSE_POINT_INFORMATION@@
�*
FileReference
"Tag��Z�_FILE_REPARSE_POINT_INFORMATION.?AU_FILE_REPARSE_POINT_INFORMATION@@�UsN�tagWNODE_SINGLE_INSTANCE.?AUtagWNODE_SINGLE_INSTANCE@@�� #�
qWnodeHeader��
"0OffsetInstanceName���
"4InstanceIndex
"8DataBlockOffset��
"<SizeDataBlock
�@VariableData�N�@tagWNODE_SINGLE_INSTANCE.?AUtagWNODE_SINGLE_INSTANCE@@���t�2�_TRIVERTEX.?AU_TRIVERTEX@@��
�Z
x
y
!Red��
!
Green
!Blue�
!Alpha2�_TRIVERTEX.?AU_TRIVERTEX@@���S#j�_PROCESS_MITIGATION_POLICY_INFORMATION.?AU_PROCESS_MITIGATION_POLICY_INFORMATION@@��RProcessDEPPolicy�ProcessASLRPolicyProcessDynamicCodePolicy�ProcessStrictHandleCheckPolicy���ProcessSystemCallDisablePolicy���ProcessMitigationOptionsMask�ProcessExtensionPointDisablePolicy���ProcessControlFlowGuardPolicyProcessSignaturePolicy���	ProcessFontDisablePolicy�
ProcessImageLoadPolicy���ProcessSystemCallFilterPolicyProcessPayloadRestrictionPolicy��
ProcessChildProcessPolicyProcessSideChannelIsolationPolicyProcessUserShadowStackPolicy�MaxProcessMitigationPolicy���Nt�_PROCESS_MITIGATION_POLICY.?AW4_PROCESS_MITIGATION_POLICY@@����}&Z�_PROCESS_MITIGATION_ASLR_POLICY.?AU_PROCESS_MITIGATION_ASLR_POLICY@@z�_PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY.?AU_PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY@@��z�_PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY.?AU_PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY@@���_PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY.?AU_PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY@@��j�_PROCESS_MITIGATION_DYNAMIC_CODE_POLICY.?AU_PROCESS_MITIGATION_DYNAMIC_CODE_POLICY@@v�_PROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY.?AU_PROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY@@r�_PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY.?AU_PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY@@j�_PROCESS_MITIGATION_FONT_DISABLE_POLICY.?AU_PROCESS_MITIGATION_FONT_DISABLE_POLICY@@f�_PROCESS_MITIGATION_IMAGE_LOAD_POLICY.?AU_PROCESS_MITIGATION_IMAGE_LOAD_POLICY@@v�_PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY.?AU_PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY@@z�_PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY.?AU_PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY@@��n�_PROCESS_MITIGATION_CHILD_PROCESS_POLICY.?AU_PROCESS_MITIGATION_CHILD_PROCESS_POLICY@@��~�_PROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICY.?AU_PROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICY@@v�_PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY.?AU_PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY@@���
�Policy���
�ASLRPolicy���
�StrictHandleCheckPolicy��
�SystemCallDisablePolicy��
�ExtensionPointDisablePolicy��
�DynamicCodePolicy
�ControlFlowGuardPolicy���
�SignaturePolicy��
�FontDisablePolicy
�ImageLoadPolicy��
�SystemCallFilterPolicy���
�PayloadRestrictionPolicy�
�ChildProcessPolicy���
�SideChannelIsolationPolicy���
�UserShadowStackPolicyj�_PROCESS_MITIGATION_POLICY_INFORMATION.?AU_PROCESS_MITIGATION_POLICY_INFORMATION@@���b"�FilterBootOptionOperationOpenSystemStore�FilterBootOptionOperationSetElement��FilterBootOptionOperationDeleteElement���FilterBootOptionOperationMax�Rt�_FILTER_BOOT_OPTION_OPERATION.?AW4_FILTER_BOOT_OPTION_OPERATION@@��^�B�tagENUMLOGFONTEXDVA.?AUtagENUMLOGFONTEXDVA@@>�tagENUMLOGFONTEXA.?AUtagENUMLOGFONTEXA@@:�tagDESIGNVECTOR.?AUtagDESIGNVECTOR@@:
�elfEnumLogfontEx�
��elfDesignVector��B�tagENUMLOGFONTEXDVA.?AUtagENUMLOGFONTEXDVA@@�SP.�_COMMPROP.?AU_COMMPROP@@�
!wPacketLength
!wPacketVersion���
"dwServiceMask
"dwReserved1��
"dwMaxTxQueue�
"dwMaxRxQueue�
"dwMaxBaud
"dwProvSubType
"dwProvCapabilities���
" dwSettableParams�
"$dwSettableBaud���
!(wSettableData
!*wSettableStopParity��
",dwCurrentTxQueue�
"0dwCurrentRxQueue�
"4dwProvSpec1��
"8dwProvSpec2��
J<wcProvChar���.�@_COMMPROP.?AU_COMMPROP@@�<��FileFsVolumeInformation��FileFsLabelInformation���FileFsSizeInformationFileFsDeviceInformation��FileFsAttributeInformation���FileFsControlInformation�FileFsFullSizeInformationFileFsObjectIdInformation	FileFsDriverPathInformation��
FileFsVolumeFlagsInformation�FileFsSectorSizeInformation��FileFsDataCopyInformation
FileFsMetadataSizeInformationFileFsFullSizeInformationEx��FileFsMaximumInformation�2t�_FSINFOCLASS.?AW4_FSINFOCLASS@@����U��
�JOB_OBJECT_IO_RATE_CONTROL_ENABLEJOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME�JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL�JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP�JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS���Zt�JOB_OBJECT_IO_RATE_CONTROL_FLAGS.?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@����}NN�_SERVICE_PRESHUTDOWN_INFO.?AU_SERVICE_PRESHUTDOWN_INFO@@"
"dwPreshutdownTimeout�N�_SERVICE_PRESHUTDOWN_INFO.?AU_SERVICE_PRESHUTDOWN_INFO@@�me�EtwQueryPartitionInformation�EtwQueryPartitionInformationV2���EtwQueryLastDroppedTimes�EtwQueryProcessHandleInfoMax�Rt�_ETW_PROCESS_HANDLE_INFO_TYPE.?AW4_ETW_PROCESS_HANDLE_INFO_TYPE@@���w.LT_DONT_CARE�LT_LOWEST_LATENCY2t�LATENCY_TIME.?AW4LATENCY_TIME@@����F-�MmEtwWorkingSetTypeUser��MmEtwWorkingSetTypeSession���MmEtwWorkingSetTypeSystemMmEtwWorkingSetTypeMaximum���Jt�_MM_ETW_WORKING_SET_TYPE.?AW4_MM_ETW_WORKING_SET_TYPE@@����B;:�_RPC_CLIENT_ID.?AU_RPC_CLIENT_ID@@��2
"UniqueProcess
"UniqueThread�:�_RPC_CLIENT_ID.?AU_RPC_CLIENT_ID@@��:onecore\admin\wmi\events\idl\elf\objfre\amd64\elf.h��Q6FeatureConfigurationPriorityImageDefault�FeatureConfigurationPriorityService��FeatureConfigurationPriorityUser�
FeatureConfigurationPriorityUserPolicy���FeatureConfigurationPriorityTest�FeatureConfigurationPriorityImageOverrideFeatureConfigurationPriorityMax��^t_RTL_FEATURE_CONFIGURATION_PRIORITY.?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@��6^Compatible���TypeATypeBTypeCTypeFMaximumDmaSpeed��.t_DMA_SPEED.?AW4_DMA_SPEED@@���U�+�AuditPrivilegeObject�AuditPrivilegeServiceAuditAccessCheck�AuditOpenObject��AuditOpenObjectWithTransaction���AuditCloseObject�AuditDeleteObjectAuditOpenObjectForDelete�AuditOpenObjectForDeleteWithTransaction��	AuditCloseNonObject��
AuditOpenNonObject���AuditObjectReference�AuditHandleCreation��>
t_SE_AUDIT_OPERATION.?AW4_SE_AUDIT_OPERATION@@�EB�tagIMEMENUITEMINFOA.?AUtagIMEMENUITEMINFOA@@p#P�
ucbSize���
ufType
ufState���
uwID��
IhbmpChecked��
IhbmpUnchecked
" dwItemData���
$szString�
IxhbmpItem�B	�tagIMEMENUITEMINFOA.?AUtagIMEMENUITEMINFOA@@
��^�_APPLICATIONLAUNCH_SETTING_VALUE.?AU_APPLICATIONLAUNCH_SETTING_VALUE@@��J
~ActivationTime���
"Flags
"ButtonInstanceID�^_APPLICATIONLAUNCH_SETTING_VALUE.?AU_APPLICATIONLAUNCH_SETTING_VALUE@@��F�b�_LDR_DLL_UNLOADED_NOTIFICATION_DATA.?AU_LDR_DLL_UNLOADED_NOTIFICATION_DATA@@

���
n
"Flags
FullDllName��
BaseDllName��
DllBase��
" SizeOfImage��b(_LDR_DLL_UNLOADED_NOTIFICATION_DATA.?AU_LDR_DLL_UNLOADED_NOTIFICATION_DATA@@��
�R�_FILE_REMOTE_PROTOCOL_INFO.?AU_FILE_REMOTE_PROTOCOL_INFO@@��
-Reserved�: <anonymous-tag>.?AU<anonymous-tag>@@<u#
"Capabilities�:<anonymous-tag>.?AU<anonymous-tag>@@ <�#2
"Capabilities�
"CachingFlags�:"<anonymous-tag>.?AU<anonymous-tag>@@#<�#&
 Server���
#Share:%<anonymous-tag>.?AU<anonymous-tag>@@&<�#"#@�&
&Smb2�
(Reserved�2)@<anonymous-tag>.?AT<anonymous-tag>@@*<�#
!StructureVersion�
!StructureSize
"Protocol�
!ProtocolMajorVersion�
!
ProtocolMinorVersion�
!ProtocolRevision�
!Reserved�
"Flags
GenericReserved��
*4ProtocolSpecific�R
,t_FILE_REMOTE_PROTOCOL_INFO.?AU_FILE_REMOTE_PROTOCOL_INFO@@��-<c#nTransactionOutcomeUndetermined���TransactionOutcomeCommitted��TransactionOutcomeAbortedBt/_TRANSACTION_OUTCOME.?AW4_TRANSACTION_OUTCOME@@���0�����LdrModulesMerged��LdrModulesInitError���LdrModulesSnapError���LdrModulesUnloaded����LdrModulesUnloading�LdrModulesPlaceHolderLdrModulesMappingLdrModulesMapped�LdrModulesWaitingForDependencies�LdrModulesSnapping���LdrModulesSnappedLdrModulesCondensed��LdrModulesReadyToInitLdrModulesInitializing���	LdrModulesReadyToRun�6t2_LDR_DDAG_STATE.?AW4_LDR_DDAG_STATE@@�3�nF�tagEMRPOLYPOLYLINE16.?AUtagEMRPOLYPOLYLINE16@@��
5"#�.�tagPOINTS.?AUtagPOINTS@@8#�r
Pemr��
,rclBounds
"nPolys���
"cpts�
7 aPolyCounts��
9$apts�F:(tagEMRPOLYPOLYLINE16.?AUtagEMRPOLYPOLYLINE16@@��;Sn.�_TP_TASK.?AU_TP_TASK@@��B�_TP_TASK_CALLBACKS.?AU_TP_TASK_CALLBACKS@@��
>��
?Z
@Callbacks
"NumaNode�
 IdealProcessor���
�ListEntry.A _TP_TASK.?AU_TP_TASK@@��B��^ToleranceIntervalShort���ToleranceIntervalMedium��ToleranceIntervalLongntD_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL.?AW4_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL@@���E}��SE_VALIDATE_MAPPING_HEADER_ONLY��SE_VALIDATE_MAPPING_ENTIRE_IMAGE�SE_VALIDATE_MAPPING_ENTIRE_IMAGE_CLEAN���JtG_SE_VALIDATE_MAPPING_TYPE.?AW4_SE_VALIDATE_MAPPING_TYPE@@�H^�WinNullSid���WinWorldSid��WinLocalSid��WinCreatorOwnerSid���WinCreatorGroupSid���WinCreatorOwnerServerSid�WinCreatorGroupServerSid�WinNtAuthoritySidWinDialupSid�	WinNetworkSid
WinBatchSid��WinInteractiveSidWinServiceSid
WinAnonymousSid��WinProxySid��WinEnterpriseControllersSid��WinSelfSid���WinAuthenticatedUserSid��WinRestrictedCodeSid�WinTerminalServerSid�WinRemoteLogonIdSid��WinLogonIdsSid���WinLocalSystemSidWinLocalServiceSid���WinNetworkServiceSid�WinBuiltinDomainSid��WinBuiltinAdministratorsSid��WinBuiltinUsersSid���WinBuiltinGuestsSid��WinBuiltinPowerUsersSid��WinBuiltinAccountOperatorsSidWinBuiltinSystemOperatorsSid� WinBuiltinPrintOperatorsSid��!WinBuiltinBackupOperatorsSid�"WinBuiltinReplicatorSid��#WinBuiltinPreWindows2000CompatibleAccessSid��$WinBuiltinRemoteDesktopUsersSid��%WinBuiltinNetworkConfigurationOperatorsSid���&WinAccountAdministratorSid���'WinAccountGuestSid���(WinAccountKrbtgtSid��)WinAccountDomainAdminsSid*WinAccountDomainUsersSid�+WinAccountDomainGuestsSid,WinAccountComputersSid���-WinAccountControllersSid�.WinAccountCertAdminsSid��/WinAccountSchemaAdminsSid0WinAccountEnterpriseAdminsSid1WinAccountPolicyAdminsSid2WinAccountRasAndIasServersSid3WinNTLMAuthenticationSid�4WinDigestAuthenticationSid���5WinSChannelAuthenticationSid�6WinThisOrganizationSid���7WinOtherOrganizationSid��8WinBuiltinIncomingForestTrustBuildersSid�9WinBuiltinPerfMonitoringUsersSid�:WinBuiltinPerfLoggingUsersSid;WinBuiltinAuthorizationAccessSid�<WinBuiltinTerminalServerLicenseServersSid=WinBuiltinDCOMUsersSid���>WinBuiltinIUsersSid��?WinIUserSid��@WinBuiltinCryptoOperatorsSid�AWinUntrustedLabelSid�BWinLowLabelSid���CWinMediumLabelSidDWinHighLabelSid��EWinSystemLabelSidFWinWriteRestrictedCodeSidGWinCreatorOwnerRightsSid�HWinCacheablePrincipalsGroupSid���IWinNonCacheablePrincipalsGroupSidJWinEnterpriseReadonlyControllersSid��KWinAccountReadonlyControllersSid�LWinBuiltinEventLogReadersGroup���MWinNewEnterpriseReadonlyControllersSid���NWinBuiltinCertSvcDComAccessGroup�OWinMediumPlusLabelSidPWinLocalLogonSid�QWinConsoleLogonSid���RWinThisOrganizationCertificateSidSWinApplicationPackageAuthoritySidTWinBuiltinAnyPackageSid��UWinCapabilityInternetClientSid���VWinCapabilityInternetClientServerSid�WWinCapabilityPrivateNetworkClientServerSid���XWinCapabilityPicturesLibrarySid��YWinCapabilityVideosLibrarySidZWinCapabilityMusicLibrarySid�[WinCapabilityDocumentsLibrarySid�\WinCapabilitySharedUserCertificatesSid���]WinCapabilityEnterpriseAuthenticationSid�^WinCapabilityRemovableStorageSid�_WinBuiltinRDSRemoteAccessServersSid��`WinBuiltinRDSEndpointServersSid��aWinBuiltinRDSManagementServersSidbWinUserModeDriversSidcWinBuiltinHyperVAdminsSiddWinAccountCloneableControllersSideWinBuiltinAccessControlAssistanceOperatorsSidfWinBuiltinRemoteManagementUsersSid���gWinAuthenticationAuthorityAssertedSidhWinAuthenticationServiceAssertedSid��iWinLocalAccountSid���jWinLocalAccountAndAdministratorSid���kWinAccountProtectedUsersSid��lWinCapabilityAppointmentsSid�mWinCapabilityContactsSid�nWinAccountDefaultSystemManagedSidoWinBuiltinDefaultSystemManagedGroupSid���pWinBuiltinStorageReplicaAdminsSidqWinAccountKeyAdminsSid���rWinAccountEnterpriseKeyAdminsSid�sWinAuthenticationKeyTrustSid�tWinAuthenticationKeyPropertyMFASid���uWinAuthenticationKeyPropertyAttestationSid���vWinAuthenticationFreshKeyAuthSid�wWinBuiltinDeviceOwnersSid>xtJWELL_KNOWN_SID_TYPE.?AW4WELL_KNOWN_SID_TYPE@@�KE�RTpTraceThreadPriorityTpTraceThreadAffinityMaxTpTraceType���6tM_TP_TRACE_TYPE.?AW4_TP_TRACE_TYPE@@���N�uN�_CM_INT13_DRIVE_PARAMETER.?AU_CM_INT13_DRIVE_PARAMETER@@z
!DriveSelect��
"MaxCylinders�
!SectorsPerTrack��
!MaxHeads�
!
NumberDrives�NQ_CM_INT13_DRIVE_PARAMETER.?AU_CM_INT13_DRIVE_PARAMETER@@R��:�tagCURSORSHAPE.?AUtagCURSORSHAPE@@��
txHotSpot�
tyHotSpot�
tcx���
tcy���
tcbWidth��
 Planes���
 BitsPixel:UtagCURSORSHAPE.?AUtagCURSORSHAPE@@��VL*6�tagCWPSTRUCT.?AUtagCWPSTRUCT@@��
XN
lParam���
#wParam���
umessage��
�hwnd�6Z tagCWPSTRUCT.?AUtagCWPSTRUCT@@��[L..�_WGLSWAP.?AU_WGLSWAP@@��&
�hdc��
uuiFlags��.^_WGLSWAP.?AU_WGLSWAP@@��_S�.�_STRING64.?AU_STRING64@@
aB
!Length���
!MaximumLength
#Buffer���.c_STRING64.?AU_STRING64@@d�~�_RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY.?AU_RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY@@��
fq#��
�EnableExportAddressFilter
�EnableExportAddressFilterPlus
�EnableImportAddressFilter
�EnableRopStackPivot��
� EnableRopCallerCheck�
�(EnableRopSimExec�
h0EafPlusModuleList~i0_RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY.?AU_RTL_IMAGE_MITIGATION_PAYLOAD_RESTRICTION_POLICY@@��j��B�_SD_ENUM_SDS_INPUT.?AU_SD_ENUM_SDS_INPUT@@��>
#StartingOffset���
#MaxSDEntriesToReturn�Bm_SD_ENUM_SDS_INPUT.?AU_SD_ENUM_SDS_INPUT@@��nU�N�_RTL_QUERY_REGISTRY_TABLE.?AU_RTL_QUERY_REGISTRY_TABLE@@q""r
s�
tQueryRoutine�
"Flags
qName�
EntryContext�
" DefaultType��
(DefaultData��
"0DefaultLengthNu8_RTL_QUERY_REGISTRY_TABLE.?AU_RTL_QUERY_REGISTRY_TABLE@@v$�R�_HEAP_SUBSEGMENT_ACTIVATED.?AU_HEAP_SUBSEGMENT_ACTIVATED@@��F
8Header���
 HeapHandle���
(SubSegment���Ry0_HEAP_SUBSEGMENT_ACTIVATED.?AU_HEAP_SUBSEGMENT_ACTIVATED@@��z0�6�tagEMRBITBLT.?AUtagEMRBITBLT@@��
|2
Pemr��
,rclBounds
xDest
yDest
 cxDest���
$cyDest���
"(dwRop
,xSrc�
0ySrc�

4xformSrc�
"LcrBkColorSrc�
"PiUsageSrc
"ToffBmiSrc
"XcbBmiSrc�
"\offBitsSrc���
"`cbBitsSrc6~dtagEMRBITBLT.?AUtagEMRBITBLT@@��S�J�_PARSE_MESSAGE_CONTEXT.?AU_PARSE_MESSAGE_CONTEXT@@��
�~
"fFlags���
"cwSavColumn��
#iwSrc
#iwDst
#iwDstSpace���
p lpvArgStart��J�(_PARSE_MESSAGE_CONTEXT.?AU_PARSE_MESSAGE_CONTEXT@@�����F�PROCESSOR_IDLE_TIMES.?AUPROCESSOR_IDLE_TIMES@@��
�>
#StartTime
#EndTime��
�Reserved�F� PROCESSOR_IDLE_TIMES.?AUPROCESSOR_IDLE_TIMES@@���F_	V�_TXFS_LIST_TRANSACTIONS_ENTRY.?AU_TXFS_LIST_TRANSACTIONS_ENTRY@@
�r
�TransactionId
"TransactionState�
"Reserved1
"Reserved2
 Reserved3V�(_TXFS_LIST_TRANSACTIONS_ENTRY.?AU_TXFS_LIST_TRANSACTIONS_ENTRY@@�U,z�_SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION.?AU_SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION@@��
�
"Operationz�_SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION.?AU_SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION@@�����
F�_FILE_EA_INFORMATION.?AU_FILE_EA_INFORMATION@@��
"EaSize���F�_FILE_EA_INFORMATION.?AU_FILE_EA_INFORMATION@@���U�R�_SYSTEM_AUDIT_CALLBACK_ACE.?AU_SYSTEM_AUDIT_CALLBACK_ACE@@��
�:
�Header���
"Mask�
"SidStart�R�_SYSTEM_AUDIT_CALLBACK_ACE.?AU_SYSTEM_AUDIT_CALLBACK_ACE@@���E2�_numberfmtA.?AU_numberfmtA@@�
uNumDigits
uLeadingZero��
uGrouping�
plpDecimalSep�
plpThousandSep
u NegativeOrder2�(_numberfmtA.?AU_numberfmtA@@�%�Z�_MEMORY_WORKING_SET_INFORMATION.?AU_MEMORY_WORKING_SET_INFORMATION@@N�_MEMORY_WORKING_SET_BLOCK.?AU_MEMORY_WORKING_SET_BLOCK@@�#�:
#NumberOfEntries��
�WorkingSetInfo���Z�_MEMORY_WORKING_SET_INFORMATION.?AU_MEMORY_WORKING_SET_INFORMATION@@�B�6�tagDIBSECTION.?AUtagDIBSECTION@@
�.�tagBITMAP.?AUtagBITMAP@@"#�j
�dsBm�
� dsBmih���
�HdsBitfields��
XdshSection���
"`dsOffset�6�htagDIBSECTION.?AUtagDIBSECTION@@�S#�FileBasicInfoFileStandardInfo�FileNameInfo�FileRenameInfo���FileDispositionInfo��FileAllocationInfo���FileEndOfFileInfoFileStreamInfo���FileCompressionInfo��	FileAttributeTagInfo�
FileIdBothDirectoryInfo��FileIdBothDirectoryRestartInfo���FileIoPriorityHintInfo���
FileRemoteProtocolInfo���FileFullDirectoryInfoFileFullDirectoryRestartInfo�FileStorageInfo��FileAlignmentInfoFileIdInfo���FileIdExtdDirectoryInfo��FileIdExtdDirectoryRestartInfo���FileDispositionInfoExFileRenameInfoEx�FileCaseSensitiveInfoFileNormalizedNameInfo���MaximumFileInfoByHandleClass�Nt�_FILE_INFO_BY_HANDLE_CLASS.?AW4_FILE_INFO_BY_HANDLE_CLASS@@�������DISPLAYCONFIG_DEVICE_INFO_GET_SOURCE_NAMEDISPLAYCONFIG_DEVICE_INFO_GET_TARGET_NAMEDISPLAYCONFIG_DEVICE_INFO_GET_TARGET_PREFERRED_MODE��DISPLAYCONFIG_DEVICE_INFO_GET_ADAPTER_NAME���DISPLAYCONFIG_DEVICE_INFO_SET_TARGET_PERSISTENCE�DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_BASE_TYPE���DISPLAYCONFIG_DEVICE_INFO_GET_SUPPORT_VIRTUAL_RESOLUTION�DISPLAYCONFIG_DEVICE_INFO_SET_SUPPORT_VIRTUAL_RESOLUTION�	DISPLAYCONFIG_DEVICE_INFO_GET_ADVANCED_COLOR_INFO
DISPLAYCONFIG_DEVICE_INFO_SET_ADVANCED_COLOR_STATE���DISPLAYCONFIG_DEVICE_INFO_GET_SDR_WHITE_LEVEL��DISPLAYCONFIG_DEVICE_INFO_FORCE_UINT32��Vt�DISPLAYCONFIG_DEVICE_INFO_TYPE.?AW4DISPLAYCONFIG_DEVICE_INFO_TYPE@@����S�f�_PLUGPLAY_CONTROL_USER_RESPONSE_DATA.?AU_PLUGPLAY_CONTROL_USER_RESPONSE_DATA@@��
��PNP_VetoTypeUnknown��PNP_VetoLegacyDevice�PNP_VetoPendingClose�PNP_VetoWindowsApp���PNP_VetoWindowsService���PNP_VetoOutstandingOpen��PNP_VetoDevice���PNP_VetoDriver���PNP_VetoIllegalDeviceRequest�	PNP_VetoInsufficientPower
PNP_VetoNonDisableable���PNP_VetoLegacyDriver�PNP_VetoInsufficientRights���
PNP_VetoAlreadyRemoved���6t�_PNP_VETO_TYPE.?AW4_PNP_VETO_TYPE@@���*onecore\external\shared\inc\cfg.h����/Z
"Response�
�VetoType�
qVetoName�
"VetoNameLength���f�_PLUGPLAY_CONTROL_USER_RESPONSE_DATA.?AU_PLUGPLAY_CONTROL_USER_RESPONSE_DATA@@����VFeatureEnabledStateOptionsNone���FeatureEnabledStateOptionsWexpConfig�^t�_RTL_FEATURE_ENABLED_STATE_OPTIONS.?AW4_RTL_FEATURE_ENABLED_STATE_OPTIONS@@�����AB�_WMI_PNP_RECORD_V5.?AU_WMI_PNP_RECORD_V5@@��
��
�ClassGuid
"UpperFilterCount�
"LowerFilterCount�
"DevStatus
"DevProblem���
J Strings��B�$_WMI_PNP_RECORD_V5.?AU_WMI_PNP_RECORD_V5@@���0�2�tagRAWMOUSE.?AUtagRAWMOUSE@@
��
!usFlags��
"ulButtons
!usButtonFlags
!usButtonData�
"ulRawButtons�
lLastX���
lLastY���
"ulExtraInformation���2�tagRAWMOUSE.?AUtagRAWMOUSE@@�L9::�tagEMRPOLYLINE.?AUtagEMRPOLYLINE@@��F
Pemr��
,rclBounds
"cptl�
�aptl�:�$tagEMRPOLYLINE.?AUtagEMRPOLYLINE@@���S9:�_JIT_DEBUG_INFO.?AU_JIT_DEBUG_INFO@@�
"dwSize���
"dwProcessorArchitecture��
"dwThreadID���
"dwReserved0��
#lpExceptionAddress���
#lpExceptionRecord
# lpContextRecord��:�(_JIT_DEBUG_INFO.?AU_JIT_DEBUG_INFO@@�<��ACTCTX_RUN_LEVEL_UNSPECIFIED�ACTCTX_RUN_LEVEL_AS_INVOKER��ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE���ACTCTX_RUN_LEVEL_REQUIRE_ADMIN���ACTCTX_RUN_LEVEL_NUMBERS�Nt�ACTCTX_REQUESTED_RUN_LEVEL.?AW4ACTCTX_REQUESTED_RUN_LEVEL@@������
.Identifier���6�_FILE_ID_128.?AU_FILE_ID_128@@���UR2�_XSAVE_AREA.?AU_XSAVE_AREA@@6�_XSAVE_FORMAT.?AU_XSAVE_FORMAT@@B�_XSAVE_AREA_HEADER.?AU_XSAVE_AREA_HEADER@@��.
�LegacyState��
�Header���2�@_XSAVE_AREA.?AU_XSAVE_AREA@@�:�_GROUP_AFFINITY.?AU_GROUP_AFFINITY@@!#�6
#Mask�
!Group
�
Reserved�:�_GROUP_AFFINITY.?AU_GROUP_AFFINITY@@�.WMI_GET_ALL_DATA�WMI_GET_SINGLE_INSTANCE��WMI_SET_SINGLE_INSTANCE��WMI_SET_SINGLE_ITEM��WMI_ENABLE_EVENTSWMI_DISABLE_EVENTS���WMI_ENABLE_COLLECTIONWMI_DISABLE_COLLECTION���WMI_REGINFO��	WMI_EXECUTE_METHOD���
WMI_CAPTURE_STATE:t�WMIDPREQUESTCODE.?AW4WMIDPREQUESTCODE@@����t�V�_REQUEST_OPLOCK_INPUT_BUFFER.?AU_REQUEST_OPLOCK_INPUT_BUFFER@@��j
!StructureVersion�
!StructureLength��
"RequestedOplockLevel�
"FlagsV�_REQUEST_OPLOCK_INPUT_BUFFER.?AU_REQUEST_OPLOCK_INPUT_BUFFER@@���U�.�tagACCEL.?AUtagACCEL@@��
�2
 fVirt
!key��
!cmd��.�tagACCEL.?AUtagACCEL@@���L_f�IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY_XDATA.?ATIMAGE_ARM64_RUNTIME_FUNCTION_ENTRY_XDATA@@��
"��
"��
"��
"��
"��
"��
"HeaderData���
�FunctionLength���
�Version��
�ExceptionDataPresent�
�EpilogInHeader���
�EpilogCount��
�CodeWordsf�IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY_XDATA.?ATIMAGE_ARM64_RUNTIME_FUNCTION_ENTRY_XDATA@@���ff�_FILE_SYSTEM_RECOGNITION_INFORMATION.?AU_FILE_SYSTEM_RECOGNITION_INFORMATION@@��p#	�
�FileSystem���f�	_FILE_SYSTEM_RECOGNITION_INFORMATION.?AU_FILE_SYSTEM_RECOGNITION_INFORMATION@@���U�UWOP_PUSH_NONVOL�UWOP_ALLOC_LARGE�UWOP_ALLOC_SMALL�UWOP_SET_FPREG���UWOP_SAVE_NONVOL�UWOP_SAVE_NONVOL_FAR�UWOP_EPILOG��UWOP_SPARE_CODE��UWOP_SAVE_XMM128�	UWOP_SAVE_XMM128_FAR�
UWOP_PUSH_MACHFRAME��:t�_UNWIND_OP_CODES.?AW4_UNWIND_OP_CODES@@���*onecore\internal\sdk\inc\ntamd64.h��
E
pt
�WnfDataScopeSystem���WnfDataScopeSession��WnfDataScopeUser�WnfDataScopeProcess��WnfDataScopeMachine��WnfDataScopePhysicalMachine��6t_WNF_DATA_SCOPE.?AW4_WNF_DATA_SCOPE@@��u"SemaphoreBasicInformationRt
_SEMAPHORE_INFORMATION_CLASS.?AW4_SEMAPHORE_INFORMATION_CLASS@@�����BToleranceLow�ToleranceMedium��ToleranceHighZt
_JOBOBJECT_RATE_CONTROL_TOLERANCE.?AW4_JOBOBJECT_RATE_CONTROL_TOLERANCE@@�}�
NWaitAll��WaitAny��WaitNotification�WaitDequeue��.t_WAIT_TYPE.?AW4_WAIT_TYPE@@����b�_PERFINFO_BOOT_PREFETCH_INFORMATION.?AU_PERFINFO_BOOT_PREFETCH_INFORMATION@@
:
Action���
Status���
Pagesb_PERFINFO_BOOT_PREFETCH_INFORMATION.?AU_PERFINFO_BOOT_PREFETCH_INFORMATION@@0�RLogExceptionEmptyLogExceptionDispatch�LogExceptionHandler��>t_EXCEPTION_LOG_TYPE.?AW4_EXCEPTION_LOG_TYPE@@��
F�_STREAM_EXTENT_ENTRY.?AU_STREAM_EXTENT_ENTRY@@��
N�RETRIEVAL_POINTERS_BUFFER.?AURETRIEVAL_POINTERS_BUFFER@@
RetrievalPointers2 <anonymous-tag>.?AT<anonymous-tag>@@ U�.
"Flags
 ExtentInformationF"(_STREAM_EXTENT_ENTRY.?AU_STREAM_EXTENT_ENTRY@@��#U�>�USN_RECORD_EXTENT.?AUUSN_RECORD_EXTENT@@*
Offset���
Length���>&USN_RECORD_EXTENT.?AUUSN_RECORD_EXTENT@@'U��VERIFIER_MODE_UNUSED�VERIFIER_MODE_TRIAGE�VERIFIER_MODE_FIELD��VERIFIER_MODE_LOGO���VERIFIER_MODE_TEST���2t)VERIFIER_MODE.?AW4VERIFIER_MODE@@�*��	&�_ABC.?AU_ABC@@��
,2
tabcA�
uabcB�
tabcC�&._ABC.?AU_ABC@@��/S�>�tagREGISTERWORDW.?AUtagREGISTERWORDW@@��
1*
qlpReading
qlpWord���>3tagREGISTERWORDW.?AUtagREGISTERWORDW@@��4�`j�_SECURE_SPECULATION_CONTROL_INFORMATION.?AU_SECURE_SPECULATION_CONTROL_INFORMATION@@
6
"��
"��
"��
"��
"��
"��
8KvaShadowSupported���
9KvaShadowEnabled�
:KvaShadowUserGlobal��
;KvaShadowPcid
<MbClearEnabled���
=Reserved�:><anonymous-tag>.?AU<anonymous-tag>@@?��&
?SecureSpeculationFlags���jA_SECURE_SPECULATION_CONTROL_INFORMATION.?AU_SECURE_SPECULATION_CONTROL_INFORMATION@@B��b�_RTL_PROCESS_BACKTRACE_INFORMATION.?AU_RTL_PROCESS_BACKTRACE_INFORMATION@@��#�j
pSymbolicBackTrace
"TraceCount���
!Index
!Depth
EBackTracebF_RTL_PROCESS_BACKTRACE_INFORMATION.?AU_RTL_PROCESS_BACKTRACE_INFORMATION@@��G��:�tagSOUNDSENTRYA.?AUtagSOUNDSENTRYA@@R
ucbSize���
"dwFlags��
"iFSTextEffect
"iFSTextEffectMSec
"iFSTextEffectColorBits���
"iFSGrafEffect
"iFSGrafEffectMSec
"iFSGrafEffectColor���
" iWindowsEffect���
"$iWindowsEffectMSec���
p(lpszWindowsEffectDLL�
"0iWindowsEffectOrdinal:J8tagSOUNDSENTRYA.?AUtagSOUNDSENTRYA@@KL46�_STARTUPINFOW.?AU_STARTUPINFOW@@
M�
"cb���
qlpReserved���
qlpDesktop
qlpTitle��
" dwX��
"$dwY��
"(dwXSize��
",dwYSize��
"0dwXCountChars
"4dwYCountChars
"8dwFillAttribute��
"<dwFlags��
!@wShowWindow��
!BcbReserved2��
 HlpReserved2��
PhStdInput
XhStdOutput���
`hStdError6Oh_STARTUPINFOW.?AU_STARTUPINFOW@@Pm7f�_EVENT_TRACE_SPINLOCK_INFORMATION_V1.?AU_EVENT_TRACE_SPINLOCK_INFORMATION_V1@@��
EventTraceInformationClass���
"SpinLockSpinThreshold
"SpinLockAcquireSampleRate
"SpinLockContentionSampleRate�fS_EVENT_TRACE_SPINLOCK_INFORMATION_V1.?AU_EVENT_TRACE_SPINLOCK_INFORMATION_V1@@��T6�_devicemodeA.?AU_devicemodeA@@��
�dmDeviceName�
! dmSpecVersion
!"dmDriverVersion��
!$dmSize���
!&dmDriverExtra
"(dmFields�
,dmOrientation
.dmPaperSize��
0dmPaperLength
2dmPaperWidth�
4dmScale��
6dmCopies�
8dmDefaultSource��
:dmPrintQuality���
�,dmPosition���
"4dmDisplayOrientation�
"8dmDisplayFixedOutput�
<dmColor��
>dmDuplex�
@dmYResolution
BdmTTOption���
DdmCollate
�FdmFormName���
!fdmLogPixels��
"hdmBitsPerPel�
"ldmPelsWidth��
"pdmPelsHeight�
"tdmDisplayFlags���
"tdmNup
"xdmDisplayFrequency���
"|dmICMMethod��
"�dmICMIntent��
"�dmMediaType��
"�dmDitherType�
"�dmReserved1��
"�dmReserved2��
"�dmPanningWidth���
"�dmPanningHeight��6&W�_devicemodeA.?AU_devicemodeA@@��XS�N�_CM_KEYBOARD_DEVICE_DATA.?AU_CM_KEYBOARD_DEVICE_DATA@@��f
!Version��
!Revision�
 Type�
 Subtype��
!KeyboardFlagsN[_CM_KEYBOARD_DEVICE_DATA.?AU_CM_KEYBOARD_DEVICE_DATA@@��\�&>�MARK_HANDLE_INFO.?AUMARK_HANDLE_INFO@@��b
"UsnSourceInfo
"CopyNumber���
VolumeHandle�
"HandleInfo���>_MARK_HANDLE_INFO.?AUMARK_HANDLE_INFO@@��`U.F�_SERVICE_TABLE_ENTRYW.?AU_SERVICE_TABLE_ENTRYW@@
q"cd
e2
qlpServiceName
flpServiceProcFg_SERVICE_TABLE_ENTRYW.?AU_SERVICE_TABLE_ENTRYW@@hm}J�DPI_AWARENESS_CONTEXT__.?AUDPI_AWARENESS_CONTEXT__@@
tunused���JkDPI_AWARENESS_CONTEXT__.?AUDPI_AWARENESS_CONTEXT__@@lA2SystemPowerState�DevicePowerState�:tn_POWER_STATE_TYPE.?AW4_POWER_STATE_TYPE@@�oF�2�tagGLYPHSET.?AUtagGLYPHSET@@2�tagWCRANGE.?AUtagWCRANGE@@��r#�n
"cbThis���
"flAccel��
"cGlyphsSupported�
"cRanges��
sranges���2ttagGLYPHSET.?AUtagGLYPHSET@@uS�Z�_JOURNAL_RENAME_KEY_INFORMATION.?AU_JOURNAL_RENAME_KEY_INFORMATION@@ZJournalCreateKey�JournalDeleteKey�JournalRenameKey�JournalSetValue��JournalDeleteValue���JournalSetKeySecurityJournalSetKeyUserFlags���JournalSetLastWriteTime��JournalBeginTransaction��	JournalCommitTransaction�
JournalAbortTransaction��MaxJournalChangeAction���Ztx_JOURNAL_CHANGE_INFORMATION_CLASS.?AW4_JOURNAL_CHANGE_INFORMATION_CLASS@@�2onecore\internal\sdk\inc\minwin\ntregapi.h�yz�r
yAction���
#RecordNumber�
~TimeStamp
�KeyPathName��
�(KeyKeyName���Z|8_JOURNAL_RENAME_KEY_INFORMATION.?AU_JOURNAL_RENAME_KEY_INFORMATION@@}z�2ThreadBasicInformation���ThreadTimes��ThreadPriority���ThreadBasePriority���ThreadAffinityMask���ThreadImpersonationToken�ThreadDescriptorTableEntry���ThreadEnableAlignmentFaultFixup��ThreadEventPair_Reusable�	ThreadQuerySetWin32StartAddress��
ThreadZeroTlsCellThreadPerformanceCount���ThreadAmILastThread��
ThreadIdealProcessor�ThreadPriorityBoost��ThreadSetTlsArrayAddress�ThreadIsIoPendingThreadHideFromDebugger���ThreadBreakOnTermination�ThreadSwitchLegacyState��ThreadIsTerminated���ThreadLastSystemCall�ThreadIoPriority�ThreadCycleTime��ThreadPagePriority���ThreadActualBasePriority�ThreadTebInformation�ThreadCSwitchMon�ThreadCSwitchPmu�ThreadWow64Context���ThreadGroupInformation���ThreadUmsInformation� ThreadCounterProfiling���!ThreadIdealProcessorEx���"ThreadCpuAccountingInformation���#ThreadSuspendCount���$ThreadHeterogeneousCpuPolicy�%ThreadContainerId&ThreadNameInformation'ThreadSelectedCpuSets(ThreadSystemThreadInformation)ThreadActualGroupAffinity*ThreadDynamicCodePolicyInfo��+ThreadExplicitCaseSensitivity,ThreadWorkOnBehalfTicket�-ThreadSubsystemInformation���.ThreadDbgkWerReportActive/ThreadAttachContainer0ThreadManageWritesToExecutableMemory�1ThreadPowerThrottlingState���2ThreadWorkloadClass��3MaxThreadInfoClass���:4t_THREADINFOCLASS.?AW4_THREADINFOCLASS@@����}�k
�2�tagACTCTXA.?AUtagACTCTXA@@���
"cbSize���
"dwFlags��
qlpSource�
!wProcessorArchitecture���
!wLangId��
qlpAssemblyDirectory��
q lpResourceName���
q(lpApplicationName
p0hModule��2	�8tagACTCTXA.?AUtagACTCTXA@@���<F VResourceManagerBasicInformation��ResourceManagerCompletionInformation�^t�_RESOURCEMANAGER_INFORMATION_CLASS.?AW4_RESOURCEMANAGER_INFORMATION_CLASS@@�����O~�_MEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATION.?AU_MEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATION@@��
��
"Flags
"NumaNode�
#LargePageSize
#NumberOfLargePagesToCreate���
#NumberOfLargePagesCreated~� _MEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATION.?AU_MEMORY_PARTITION_CREATE_LARGE_PAGES_INFORMATION@@���B�nSubsystemInformationTypeWin32SubsystemInformationTypeWSL��MaxSubsystemInformationType��Nt�_SUBSYSTEM_INFORMATION_TYPE.?AW4_SUBSYSTEM_INFORMATION_TYPE@@��}��RtlSparseBitmapOperationClearRtlSparseBitmapOperationSet��RtlSparseBitmapOperationAny��RtlSparseBitmapOperationMax��Zt�_RTL_SPARSE_BITMAP_CTX_OPERATION.?AW4_RTL_SPARSE_BITMAP_CTX_OPERATION@@������J�_SILO_USER_SHARED_DATA.?AU_SILO_USER_SHARED_DATA@@��
�
"ServiceSessionId�
"ActiveConsoleId��
ConsoleSessionForegroundProcessId
vNtProductType
"SuiteMask
"SharedUserSessionId��
 IsMultiSessionSku
tNtSystemRoot�
�&UserModeGlobalLogger�J	�H_SILO_USER_SHARED_DATA.?AU_SILO_USER_SHARED_DATA@@���bu
>AclRevisionInformation���AclSizeInformation���Ft�_ACL_INFORMATION_CLASS.?AW4_ACL_INFORMATION_CLASS@@����EIB�tagDELETEITEMSTRUCT.?AUtagDELETEITEMSTRUCT@@
�b
uCtlType��
uCtlID
uitemID���
�hwndItem�
#itemData�B� tagDELETEITEMSTRUCT.?AUtagDELETEITEMSTRUCT@@�L!
��_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT@@v
ResolutionContext
#RootIndex
 CancelResolution�
 NoMoreEntries
�Root��(_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT@@���B�_CACHE_RELATIONSHIP.?AU_CACHE_RELATIONSHIP@@
� #�
 Level
 Associativity
!LineSize�
"CacheSize
�Type�
�Reserved�
� GroupMaskB�0_CACHE_RELATIONSHIP.?AU_CACHE_RELATIONSHIP@@�|+V�_FILE_MAKE_COMPATIBLE_BUFFER.?AU_FILE_MAKE_COMPATIBLE_BUFFER@@��
 CloseDiscV�_FILE_MAKE_COMPATIBLE_BUFFER.?AU_FILE_MAKE_COMPATIBLE_BUFFER@@���UZ�_ETW_THREAD_EVENT_SUBPROCESSTAG.?AU_ETW_THREAD_EVENT_SUBPROCESSTAG@@>
8Header���
" OldTag���
"$NewTag���Z�(_ETW_THREAD_EVENT_SUBPROCESSTAG.?AU_ETW_THREAD_EVENT_SUBPROCESSTAG@@�0U
9b
HeapHandle���
SubSegment���
#SubSegmentSize���
#BlockSize^� _HEAP_EVENT_SUBSEGMENT_ALLOC_FREE.?AU_HEAP_EVENT_SUBSEGMENT_ALLOC_FREE@@�0=
"��
"��>
"Flags
�FilterId�
�ReservedFlagsv�_PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY.?AU_PROCESS_MITIGATION_SYSTEM_CALL_FILTER_POLICY@@�}�>�tagDEBUGHOOKINFO.?AUtagDEBUGHOOKINFO@@��j
"idThread�
"idThreadInstaller
lParam���
#wParam���
tcode�>� tagDEBUGHOOKINFO.?AUtagDEBUGHOOKINFO@@���LyN�_STREAM_INFORMATION_ENTRY.?AU_STREAM_INFORMATION_ENTRY@@
�:�_StreamInformation.?AT_StreamInformation@@��B
"Version��
"Flags
�StreamInformationN�_STREAM_INFORMATION_ENTRY.?AU_STREAM_INFORMATION_ENTRY@@�UpJ�_ImageArchitectureEntry.?AU_ImageArchitectureEntry@@.
"FixupInstRVA�
"NewInst��J�_ImageArchitectureEntry.?AU_ImageArchitectureEntry@@�fc	�EtwBufferStateFree���EtwBufferStateGeneralLogging�EtwBufferStateCSwitchEtwBufferStateFlush��EtwBufferStatePendingCompression�EtwBufferStateCompressed�EtwBufferStatePlaceholderEtwBufferStateMaximum:t�_ETW_BUFFER_STATE.?AW4_ETW_BUFFER_STATE@@��0�
�>�_COVERAGE_MODULES.?AU_COVERAGE_MODULES@@N�_COVERAGE_MODULE_REQUEST.?AU_COVERAGE_MODULE_REQUEST@@��F�_COVERAGE_MODULE_INFO.?AU_COVERAGE_MODULE_INFO@@�# �f
"ListAndReset�
"NumberOfModules��
�ModuleRequestInfo
� Modules��>�@_COVERAGE_MODULES.?AU_COVERAGE_MODULES@@���R�_ACCESS_DENIED_CALLBACK_ACE.?AU_ACCESS_DENIED_CALLBACK_ACE@@:
�Header���
"Mask�
"SidStart�R�_ACCESS_DENIED_CALLBACK_ACE.?AU_ACCESS_DENIED_CALLBACK_ACE@@�E�.�tagINPUT.?AUtagINPUT@@��6�tagMOUSEINPUT.?AUtagMOUSEINPUT@@6�tagKEYBDINPUT.?AUtagKEYBDINPUT@@>�tagHARDWAREINPUT.?AUtagHARDWAREINPUT@@��B
"type�
�mi���
�ki���
�hi���.�(tagINPUT.?AUtagINPUT@@���L�r�t�N�_FILE_DISPOSITION_INFO_EX.?AU_FILE_DISPOSITION_INFO_EX@@
�
"FlagsN�_FILE_DISPOSITION_INFO_EX.?AU_FILE_DISPOSITION_INFO_EX@@�<�"R�_TXFS_SAVEPOINT_INFORMATION.?AU_TXFS_SAVEPOINT_INFORMATION@@N
KtmTransaction���
"ActionCode���
"SavepointId��R�_TXFS_SAVEPOINT_INFORMATION.?AU_TXFS_SAVEPOINT_INFORMATION@@�U�
6�_RPC_MESSAGE.?AU_RPC_MESSAGE@@��
�J�_RPC_SYNTAX_IDENTIFIER.?AU_RPC_SYNTAX_IDENTIFIER@@��
�
Handle���
"DataRepresentation���
Buffer���
uBufferLength�
uProcNum��
� TransferSyntax���
(RpcInterfaceInformation��
0ReservedForRuntime���
8ManagerEpv���
@ImportContext
"HRpcFlags�6�P_RPC_MESSAGE.?AU_RPC_MESSAGE@@��.onecore\external\shared\inc\rpcdcep.h����3
�Z�_EXCEPTION_REGISTRATION_RECORD.?AU_EXCEPTION_REGISTRATION_RECORD@@��
�
��
�ExceptionList
StackBase
StackLimit���
SubSystemTib�
 FiberData
" Version��
(ArbitraryUserPointer�
�0Self�*�8_NT_TIB.?AU_NT_TIB@@�}6�_currencyfmtA.?AU_currencyfmtA@@�
uNumDigits
uLeadingZero��
uGrouping�
plpDecimalSep�
plpThousandSep
u NegativeOrder
u$PositiveOrder
p(lpCurrencySymbol�6�0_currencyfmtA.?AU_currencyfmtA@@�%�>�tagRAWINPUTDEVICE.?AUtagRAWINPUTDEVICE@@
Z
!usUsagePage��
!usUsage��
"dwFlags��
�hwndTarget���>tagRAWINPUTDEVICE.?AUtagRAWINPUTDEVICE@@L^;F�_PERFINFO_PO_PRESLEEP.?AU_PERFINFO_PO_PRESLEEP@@B
~PerformanceCounter���
~PerformanceFrequency�F_PERFINFO_PO_PRESLEEP.?AU_PERFINFO_PO_PRESLEEP@@0�6�tagAXESLISTA.?AUtagAXESLISTA@@��

6�tagAXISINFOA.?AUtagAXISINFOA@@��#��J
"axlReserved��
"axlNumAxes���

axlAxisInfo��6�tagAXESLISTA.?AUtagAXESLISTA@@��S6N�_HEAP_REGION_INFORMATION.?AU_HEAP_REGION_INFORMATION@@��
�
#Address��
#ReserveSize��
#CommitSize���
#FirstRangeInformationOffset��
# NextRegionInformationOffset��N(_HEAP_REGION_INFORMATION.?AU_HEAP_REGION_INFORMATION@@����R�_FILE_GET_QUOTA_INFORMATION.?AU_FILE_GET_QUOTA_INFORMATION@@&�_SID.?AU_SID@@��B
"NextEntryOffset��
"SidLength
Sid��R_FILE_GET_QUOTA_INFORMATION.?AU_FILE_GET_QUOTA_INFORMATION@@U�F�_ALPC_PORT_ATTRIBUTES.?AU_ALPC_PORT_ATTRIBUTES@@
V�_SECURITY_QUALITY_OF_SERVICE.?AU_SECURITY_QUALITY_OF_SERVICE@@��
"Flags
SecurityQos��
#MaxMessageLength�
#MemoryBandwidth��
# MaxPoolUsage�
#(MaxSectionSize���
#0MaxViewSize��
#8MaxTotalSectionSize��
"@DupObjectTypes���
"DReserved�F
H_ALPC_PORT_ATTRIBUTES.?AU_ALPC_PORT_ATTRIBUTES@@��B�_REMOTE_NAME_INFOW.?AU_REMOTE_NAME_INFOW@@��
!V
qlpUniversalName��
qlpConnectionName�
qlpRemainingPath��B#_REMOTE_NAME_INFOW.?AU_REMOTE_NAME_INFOW@@��$o�R�_ALPC_WORK_ON_BEHALF_TICKET.?AU_ALPC_WORK_ON_BEHALF_TICKET@@6
"ThreadId�
"ThreadCreationTimeLowR'_ALPC_WORK_ON_BEHALF_TICKET.?AU_ALPC_WORK_ON_BEHALF_TICKET@@(�l>�_WMI_POWER_RECORD.?AU_WMI_POWER_RECORD@@
*�
 SystemS1�
 SystemS2�
 SystemS3�
 SystemS4�
 SystemS5�
 AoAc�
pPad2�
pPad3�>,_WMI_POWER_RECORD.?AU_WMI_POWER_RECORD@@-0sN�_SERVICE_FAILURE_ACTIONSA.?AU_SERVICE_FAILURE_ACTIONSA@@2�_SC_ACTION.?AU_SC_ACTION@@��
0r
"dwResetPeriod
plpRebootMsg��
plpCommand
"cActions�
1 lpsaActions��N2(_SERVICE_FAILURE_ACTIONSA.?AU_SERVICE_FAILURE_ACTIONSA@@3m2
UniqueProcess
UniqueThread�25_CLIENT_ID.?AU_CLIENT_ID@@��6}�
�*�_M128A.?AU_M128A@@��9#��9#� #`�j
!ControlWord��
!StatusWord���
 TagWord��
 Reserved1
!ErrorOpcode��
"ErrorOffset��
!ErrorSelector
!Reserved2
"DataOffset���
!DataSelector�
!Reserved3
"MxCsr
"MxCsr_Mask���
: FloatRegisters���
;�XmmRegisters�
<�Reserved46=_XSAVE_FORMAT.?AU_XSAVE_FORMAT@@>��SERVERSILO_INITING���SERVERSILO_STARTED���SERVERSILO_SHUTTING_DOWN�SERVERSILO_TERMINATING���SERVERSILO_TERMINATED:t@_SERVERSILO_STATE.?AW4_SERVERSILO_STATE@@�A}�N�_FILE_GET_EA_INFORMATION.?AU_FILE_GET_EA_INFORMATION@@��
CJ
"NextEntryOffset��
 EaNameLength�
�EaName���NE_FILE_GET_EA_INFORMATION.?AU_FILE_GET_EA_INFORMATION@@��FU�^�_CI_LOG_SCHEDULER_SLEEP_RESPONSE.?AU_CI_LOG_SCHEDULER_SLEEP_RESPONSE@@��
�Header���^I0_CI_LOG_SCHEDULER_SLEEP_RESPONSE.?AU_CI_LOG_SCHEDULER_SLEEP_RESPONSE@@��J0[:�_WMI_PAGE_FAULT.?AU_WMI_PAGE_FAULT@@
L:
VirtualAddress���
ProgramCounter���:N_WMI_PAGE_FAULT.?AU_WMI_PAGE_FAULT@@O0	2�_CHAR_INFO.?AU_CHAR_INFO@@��
Q.
qUnicodeChar��
pAsciiChar2S<anonymous-tag>.?AT<anonymous-tag>@@.onecore\external\sdk\inc\wincontypes.h�TU�*
TChar�
!Attributes���2W_CHAR_INFO.?AU_CHAR_INFO@@��XU��ThreadMemoryPriority�ThreadAbsoluteCpuPriorityThreadDynamicCodePolicy��ThreadPowerThrottlingThreadInformationClassMaxJtZ_THREAD_INFORMATION_CLASS.?AW4_THREAD_INFORMATION_CLASS@@�[m0�IoPriorityVeryLowIoPriorityLowIoPriorityNormal�IoPriorityHigh���IoPriorityCritical���MaxIoPriorityTypes���:t]_IO_PRIORITY_HINT.?AW4_IO_PRIORITY_HINT@@�^U�J�_THREAD_UMS_INFORMATION.?AU_THREAD_UMS_INFORMATION@@�UmsInformationCommandInvalid�UmsInformationCommandAttach��UmsInformationCommandDetach��UmsInformationCommandQuery���Vta_THREAD_UMS_INFORMATION_COMMAND.?AW4_THREAD_UMS_INFORMATION_COMMAND@@�b} 
(>�_RTL_UMS_CONTEXT.?AU_RTL_UMS_CONTEXT@@��
e
"��
"��
bCommand��
dCompletionList���
fUmsContext���
"Flags
gIsUmsSchedulerThread�
hIsUmsWorkerThreadJi_THREAD_UMS_INFORMATION.?AU_THREAD_UMS_INFORMATION@@j}'B�EVENT_INSTANCE_INFO.?AUEVENT_INSTANCE_INFO@@.
RegHandle
"InstanceId���BmEVENT_INSTANCE_INFO.?AUEVENT_INSTANCE_INFO@@n�D&IoSessionStateCreatedIoSessionStateInitializedIoSessionStateConnected��IoSessionStateDisconnected���IoSessionStateDisconnectedLoggedOn���IoSessionStateLoggedOn���IoSessionStateLoggedOff��IoSessionStateTerminated�	IoSessionStateMax:	tp_IO_SESSION_STATE.?AW4_IO_SESSION_STATE@@�qUR�_SYSTEM_ALARM_CALLBACK_ACE.?AU_SYSTEM_ALARM_CALLBACK_ACE@@��:
�Header���
"Mask�
"SidStart�Rt_SYSTEM_ALARM_CALLBACK_ACE.?AU_SYSTEM_ALARM_CALLBACK_ACE@@��uEj�_SYSTEM_ISOLATED_USER_MODE_INFORMATION.?AU_SYSTEM_ISOLATED_USER_MODE_INFORMATION@@��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 �� #�J
xSecureKernelRunning��
yHvciEnabled��
zHvciStrictMode���
{DebugEnabled�
|FirmwarePageProtection���
}EncryptionKeyAvailable���
~SpareFlags���
TrustletRunning��
�HvciDisableAllowed���
�SpareFlags2��
�Spare0���
#Spare1���j�_SYSTEM_ISOLATED_USER_MODE_INFORMATION.?AU_SYSTEM_ISOLATED_USER_MODE_INFORMATION@@����NV�_FILE_DISPOSITION_INFORMATION.?AU_FILE_DISPOSITION_INFORMATION@@
�
 DeleteFile���V�_FILE_DISPOSITION_INFORMATION.?AU_FILE_DISPOSITION_INFORMATION@@�U�F�_LOGICAL_DISK_EXTENTS.?AU_LOGICAL_DISK_EXTENTS@@
�q#�q# �b
#StartingOffset���
#PartitionSize
"DiskNumber���
"Size�
"DriveType
�DriveLetterString
"$Pad��
"(PartitionNumber��
",SectorsPerCluster
"0BytesPerSector���
8NumberOfFreeClusters�
@TotalNumberOfClusters
�HFileSystemType���
"hVolumeExtF�p_LOGICAL_DISK_EXTENTS.?AU_LOGICAL_DISK_EXTENTS@@�0�B�_SERVICE_NOTIFY_2W.?AU_SERVICE_NOTIFY_2W@@��
��
"dwVersion
�pfnNotifyCallback
pContext�
"dwNotificationStatus�
IServiceStatus
"@dwNotificationTriggered��
qHpszServiceNames��B�P_SERVICE_NOTIFY_2W.?AU_SERVICE_NOTIFY_2W@@���m�6�_RTL_BARRIER.?AU_RTL_BARRIER@@��#�f
"Reserved1
"Reserved2
uReserved3
"Reserved4
"Reserved5:� <anonymous-tag>.?AU<anonymous-tag>@@�$g�
Barrier��
LeftBarrier��
�WaitEvent
TotalProcessors��
"Spins
�DUMMYRESERVEDSTRUCTNAME��6� _RTL_BARRIER.?AU_RTL_BARRIER@@���$W
"��
"��
"��
"��
"Flags
�NoChildProcessCreation���
�AuditNoChildProcessCreation��
�AllowSecureProcessCreation���
�ReservedFlagsn�_PROCESS_MITIGATION_CHILD_PROCESS_POLICY.?AU_PROCESS_MITIGATION_CHILD_PROCESS_POLICY@@���}�:�_SE_TOKEN_USER.?AU_SE_TOKEN_USER@@��2�_TOKEN_USER.?AU_TOKEN_USER@@B�_SID_AND_ATTRIBUTES.?AU_SID_AND_ATTRIBUTES@@ #D�J
�TokenUser
�User�
Sid��
�Buffer���:�X_SE_TOKEN_USER.?AU_SE_TOKEN_USER@@���Ev
HJ�_EFI_DRIVER_ENTRY_LIST.?AU_EFI_DRIVER_ENTRY_LIST@@��6
"NextEntryOffset��
DriverEntry��J�_EFI_DRIVER_ENTRY_LIST.?AU_EFI_DRIVER_ENTRY_LIST@@����">�tagHIGHCONTRASTW.?AUtagHIGHCONTRASTW@@��
�F
ucbSize���
"dwFlags��
qlpszDefaultScheme>�tagHIGHCONTRASTW.?AUtagHIGHCONTRASTW@@���Lp2"ViewShareViewUnmap:t�_SECTION_INHERIT.?AW4_SECTION_INHERIT@@����y��PowerDeviceUnspecified���PowerDeviceD0PowerDeviceD1PowerDeviceD2PowerDeviceD3PowerDeviceMaximum���>t�_DEVICE_POWER_STATE.?AW4_DEVICE_POWER_STATE@@��F�vPerfInfoMemReset�PerfInfoMemResetUndo�PerfInfoMemResetUndoFailed���PerfInfoMemResetMax��Rt�_PERFINFO_MEM_RESET_INFO_TYPE.?AW4_PERFINFO_MEM_RESET_INFO_TYPE@@��0q>�_TRACE_GUID_INFO.?AU_TRACE_GUID_INFO@@��.
"InstanceCount
"Reserved�>�_TRACE_GUID_INFO.?AU_TRACE_GUID_INFO@@�����CrossProcOperationMemoryAllocPreNotify���CrossProcOperationMemoryAllocPostNotify��CrossProcOperationMemoryFreePreNotifyCrossProcOperationMemoryFreePostNotify���CrossProcOperationMemoryProtectPreNotify�CrossProcOperationMemoryProtectPostNotifyCrossProcOperationInstructionCacheFlush��CrossProcOperationInstructionCacheFlushHeavy�CrossProcOperationMemoryDirtyNotify��b	t�RTLWOW64_CROSSPROCESS_WORK_OPERATION.?AW4RTLWOW64_CROSSPROCESS_WORK_OPERATION@@������J�_PROCESS_DISK_COUNTERS.?AU_PROCESS_DISK_COUNTERS@@��
��
#BytesRead
#BytesWritten�
#ReadOperationCount���
#WriteOperationCount��
# FlushOperationCount��J�(_PROCESS_DISK_COUNTERS.?AU_PROCESS_DISK_COUNTERS@@���b�j�_SYSTEM_CODEINTEGRITYPOLICY_INFORMATION.?AU_SYSTEM_CODEINTEGRITYPOLICY_INFORMATION@@
�Z
"Options��
"HVCIOptions��
#Version��
�PolicyGuid���j� _SYSTEM_CODEINTEGRITYPOLICY_INFORMATION.?AU_SYSTEM_CODEINTEGRITYPOLICY_INFORMATION@@���nBootEntropySourceNoneBootEntropySourceSeedfileBootEntropySourceExternalBootEntropySourceTpm�BootEntropySourceRdrand��BootEntropySourceTimeBootEntropySourceAcpiOem0BootEntropySourceUefiBootEntropySourceCng�	BootEntropySourceTcbTpm��
BootEntropySourceTcbRdrand���
BootMaxEntropySourcesFt�_BOOT_ENTROPY_SOURCE_ID.?AW4_BOOT_ENTROPY_SOURCE_ID@@���
Z�_RTL_PROCESS_MODULE_INFORMATION.?AU_RTL_PROCESS_MODULE_INFORMATION@@ #��
Section��
MappedBase���
ImageBase
"ImageSize
"Flags
! LoadOrderIndex���
!"InitOrderIndex���
!$LoadCount
!&OffsetToFileName�
�(FullPathName�Z
�(_RTL_PROCESS_MODULE_INFORMATION.?AU_RTL_PROCESS_MODULE_INFORMATION@@���R�_PERFINFO_PROCESS_PERFCTR64.?AU_PERFINFO_PROCESS_PERFCTR64@@
��
"ProcessId
"PageFaultCount���
"HandleCount��
"Reserved�
#PeakVirtualSize��
#PeakWorkingSetSize���
# PeakPagefileUsage
#(QuotaPeakPagedPoolUsage��
#0QuotaPeakNonPagedPoolUsage���
#8VirtualSize��
#@WorkingSetSize���
#HPagefileUsage
#PQuotaPagedPoolUsage��
#XQuotaNonPagedPoolUsage���
#`PrivatePageCount�R�h_PERFINFO_PROCESS_PERFCTR64.?AU_PERFINFO_PROCESS_PERFCTR64@@�0	�EventSecuritySetDACL�EventSecuritySetSACL�EventSecurityAddDACL�EventSecurityAddSACL�EventSecurityMax�Ft�EVENTSECURITYOPERATION.?AW4EVENTSECURITYOPERATION@@����#2^POINTER_FEEDBACK_DEFAULT�POINTER_FEEDBACK_INDIRECTPOINTER_FEEDBACK_NONEBt�POINTER_FEEDBACK_MODE.?AW4POINTER_FEEDBACK_MODE@@��L$F�_SECURITY_ATTRIBUTES.?AU_SECURITY_ATTRIBUTES@@��R
"nLength��
lpSecurityDescriptor�
tbInheritHandle���F�_SECURITY_ATTRIBUTES.?AU_SECURITY_ATTRIBUTES@@����.�SectionBasicInformation��SectionImageInformation��SectionRelocationInformation�SectionOriginalBaseInformation���SectionInternalImageInformation��MaxSectionInfoClass��Nt�_SECTION_INFORMATION_CLASS.?AW4_SECTION_INFORMATION_CLASS@@����B^"""�
�^�_FILE_FS_VOLUME_FLAGS_INFORMATION.?AU_FILE_FS_VOLUME_FLAGS_INFORMATION@@
"Flags^�_FILE_FS_VOLUME_FLAGS_INFORMATION.?AU_FILE_FS_VOLUME_FLAGS_INFORMATION@@�U�^�_ETW_SESSION_NOTIFICATION_PACKET.?AU_ETW_SESSION_NOTIFICATION_PACKET@@��N�_ETW_NOTIFICATION_HEADER.?AU_ETW_NOTIFICATION_HEADER@@��EtwSessionNotificationMediaChanged���EtwSessionNotificationSessionTerminated��EtwSessionNotificationLogfileError���EtwSessionNotificationRealtimeError��EtwSessionNotificationSessionStarted�EtwSessionNotificationMaxVt�_ETW_SESSION_NOTIFICATION_TYPE.?AW4_ETW_SESSION_NOTIFICATION_TYPE@@����hr
�NotificationHeader���
�HType�
LStatus���
#PTraceHandle��
�XReserved�^�`_ETW_SESSION_NOTIFICATION_PACKET.?AU_ETW_SESSION_NOTIFICATION_PACKET@@���qZ�_ETW_CREATEDELETE_OBJECT_EVENT.?AU_ETW_CREATEDELETE_OBJECT_EVENT@@��
�.
Object���
!ObjectType���Z�_ETW_CREATEDELETE_OBJECT_EVENT.?AU_ETW_CREATEDELETE_OBJECT_EVENT@@���0v
Z�_ETW_COVERAGE_SAMPLER_OPTION_FLAGS.?AT_ETW_COVERAGE_SAMPLER_OPTION_FLAGS@@��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��n
"AllFlags�
RequireProfileTotalIssuesSource��
ForceProfileTimeSource���
NoProfileSampling
NoCSwitchSampling
NoReadyThreadSampling
NoFaultSampling��
NoStackCache�
NoSampleBuffers��
	NoPauseWhenFull��

NoLowPriority
WithAppId
FilterKernel�Z

_ETW_COVERAGE_SAMPLER_OPTION_FLAGS.?AT_ETW_COVERAGE_SAMPLER_OPTION_FLAGS@@���v�_PERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION.?AU_PERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION@@
.
SectionObject
RangeBasev_PERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION.?AU_PERFINFO_PFMAPPED_SECTION_OBJECT_INFORMATION@@0r�WorkerFactoryCallbackNormal��WorkerFactoryCallbackLongRunning�WorkerFactoryCallbackIndependent�WorkerFactoryCallbackDetectedUnrecoverableError��Vt_WORKER_FACTORY_CALLBACK_CLASS.?AW4_WORKER_FACTORY_CALLBACK_CLASS@@������RelationProcessorCoreRelationNumaNode�RelationCacheRelationProcessorPackage�RelationGroup���RelationAllVt_LOGICAL_PROCESSOR_RELATIONSHIP.?AW4_LOGICAL_PROCESSOR_RELATIONSHIP@@�|�J�DISK_SPACE_INFORMATION.?AUDISK_SPACE_INFORMATION@@��
#ActualTotalAllocationUnits���
#ActualAvailableAllocationUnits���
#ActualPoolUnavailableAllocationUnits�
#CallerTotalAllocationUnits���
# CallerAvailableAllocationUnits���
#(CallerPoolUnavailableAllocationUnits�
#0UsedAllocationUnits��
#8TotalReservedAllocationUnits�
#@VolumeStorageReserveAllocationUnits��
#HAvailableCommittedAllocationUnits
#PPoolAvailableAllocationUnits�
"XSectorsPerAllocationUnit�
"\BytesPerSector���J
`DISK_SPACE_INFORMATION.?AUDISK_SPACE_INFORMATION@@��2onecore\external\sdk\inc\minwin\fileapi.h���^�_PERFINFO_SAMPLED_PROFILE_CONFIG.?AU_PERFINFO_SAMPLED_PROFILE_CONFIG@@��F
"Source���
"NewInterval��
"OldInterval��^!_PERFINFO_SAMPLED_PROFILE_CONFIG.?AU_PERFINFO_SAMPLED_PROFILE_CONFIG@@��"0�zIMDT_UNAVAILABLE�IMDT_KEYBOARDIMDT_MOUSE���IMDT_TOUCH���IMDT_PEN�IMDT_TOUCHPADRt$tagINPUT_MESSAGE_DEVICE_TYPE.?AW4tagINPUT_MESSAGE_DEVICE_TYPE@@���%L�=n�_EVENT_TRACE_PROFILE_COUNTER_INFORMATION.?AU_EVENT_TRACE_PROFILE_COUNTER_INFORMATION@@��Z
EventTraceInformationClass���
#TraceHandle��
�ProfileSourcen(_EVENT_TRACE_PROFILE_COUNTER_INFORMATION.?AU_EVENT_TRACE_PROFILE_COUNTER_INFORMATION@@��)F6�_TOKEN_GROUPS.?AU_TOKEN_GROUPS@@�#�.
"GroupCount���
,Groups���6-_TOKEN_GROUPS.?AU_TOKEN_GROUPS@@.E�N�_ETW_KQUEUE_DEQUEUE_EVENT.?AU_ETW_KQUEUE_DEQUEUE_EVENT@@
0#�B
"ThreadId�
"EntryCount���
2Entries��N3_ETW_KQUEUE_DEQUEUE_EVENT.?AU_ETW_KQUEUE_DEQUEUE_EVENT@@40�	
�User�26_TOKEN_USER.?AU_TOKEN_USER@@7Ep 9FGEOCLASS_NATION��GEOCLASS_REGION��GEOCLASS_ALL�.t;SYSGEOCLASS.?AW4SYSGEOCLASS@@�<%)FUNSPECIFIED_COMPARTMENT_ID���DEFAULT_COMPARTMENT_ID���6t>COMPARTMENT_ID.?AW4COMPARTMENT_ID@@���?�
"AB�_SHUFFLE_FILE_DATA.?AU_SHUFFLE_FILE_DATA@@��
CB
StartingOffset���
Length���
"FlagsBE_SHUFFLE_FILE_DATA.?AU_SHUFFLE_FILE_DATA@@��FUQ(R�_FILE_QUERY_SPARING_BUFFER.?AU_FILE_QUERY_SPARING_BUFFER@@��r
"SparingUnitBytes�
 SoftwareSparing��
"TotalSpareBlocks�
"FreeSpareBlocks��RI_FILE_QUERY_SPARING_BUFFER.?AU_FILE_QUERY_SPARING_BUFFER@@��JU1B�_RASTERIZER_STATUS.?AU_RASTERIZER_STATUS@@��>
nSize
wFlags���
nLanguageID��BM_RASTERIZER_STATUS.?AU_RASTERIZER_STATUS@@��NS
*�_FIBER.?AU_FIBER@@��.�_CONTEXT.?AU_CONTEXT@@��.�_Wx86TIB.?AU_Wx86TIB@@��
R
�B
FiberData
�ExceptionList
StackBase
StackLimit���
 DeallocationStack
Q0FiberContext�
SWx86Tib��
TActivationContextStackPointer
FlsData��
"GuaranteedStackBytes�
!TebFlags�
!ReservedPad��
# FiberCookie��*
U0_FIBER.?AU_FIBER@@��Vb,6�_MEMORYSTATUS.?AU_MEMORYSTATUS@@�
"dwLength�
"dwMemoryLoad�
#dwTotalPhys��
#dwAvailPhys��
#dwTotalPageFile��
# dwAvailPageFile��
#(dwTotalVirtual���
#0dwAvailVirtual���6Y8_MEMORYSTATUS.?AU_MEMORYSTATUS@@Z<V6�tagAXISINFOW.?AUtagAXISINFOW@@��J
axMinValue���
axMaxValue���
�axAxisName���6](tagAXISINFOW.?AUtagAXISINFOW@@��^S&:�_WOW64_CONTEXT.?AU_WOW64_CONTEXT@@��N�_WOW64_FLOATING_SAVE_AREA.?AU_WOW64_FLOATING_SAVE_AREA@@�
"ContextFlags�
"Dr0��
"Dr1��
"Dr2��
"Dr3��
"Dr6��
"Dr7��
aFloatSave
"�SegGs
"�SegFs
"�SegEs
"�SegDs
"�Edi��
"�Esi��
"�Ebx��
"�Edx��
"�Ecx��
"�Eax��
"�Ebp��
"�Eip��
"�SegCs
"�EFlags���
"�Esp��
"�SegSs
��ExtendedRegisters:b�_WOW64_CONTEXT.?AU_WOW64_CONTEXT@@��.onecore\internal\sdk\inc\ntwow64_x.h���cd\BMutantBasicInformation���MutantOwnerInformation���Jtf_MUTANT_INFORMATION_CLASS.?AW4_MUTANT_INFORMATION_CLASS@@�g�)>�_KSPIN_LOCK_QUEUE.?AU_KSPIN_LOCK_QUEUE@@
i
#"
jNext�
kLock�>l_KSPIN_LOCK_QUEUE.?AU_KSPIN_LOCK_QUEUE@@m�V�_PERFINFO_CC_LAZY_WRITE_SCAN.?AU_PERFINFO_CC_LAZY_WRITE_SCAN@@��
or
#WorkItemKey��
"ReasonForFlush���
"PagesToWrite�
#TotalDirtyPages��
#AvailablePages���
# DirtyPageThreshold���
#(NumberOfMappedVacbs��
#0TopDirtyPageThreshold
#8BottomDirtyPageThreshold�
#@AverageAvailablePages
#HAverageDirtyPages
#PConsecutiveWorklessLazywriteScansVqX_PERFINFO_CC_LAZY_WRITE_SCAN.?AU_PERFINFO_CC_LAZY_WRITE_SCAN@@��r0�
lJ�_LDR_DLL_NOTIFICATION_DATA.?AT_LDR_DLL_NOTIFICATION_DATA@@��
u^�_LDR_DLL_LOADED_NOTIFICATION_DATA.?AU_LDR_DLL_LOADED_NOTIFICATION_DATA@@*
wLoaded���
Unloaded�Jx(_LDR_DLL_NOTIFICATION_DATA.?AT_LDR_DLL_NOTIFICATION_DATA@@��y��>�tagMENUITEMINFOA.?AUtagMENUITEMINFOA@@��
{��
|*�HMENU__.?AUHMENU__@@
~�
ucbSize���
ufMask
ufType
ufState���
uwID��
hSubMenu�
I hbmpChecked��
I(hbmpUnchecked
#0dwItemData���
p8dwTypeData���
u@cch��
IHhbmpItem�>�PtagMENUITEMINFOA.?AUtagMENUITEMINFOA@@���L�N�_SYSTEM_POWER_INFORMATION.?AU_SYSTEM_POWER_INFORMATION@@
�f
"MaxIdlenessAllowed���
"Idleness�
"TimeRemaining
 CoolingMode��N�_SYSTEM_POWER_INFORMATION.?AU_SYSTEM_POWER_INFORMATION@@�F�:�tagICEXYZTRIPLE.?AUtagICEXYZTRIPLE@@.�tagCIEXYZ.?AUtagCIEXYZ@@F
�ciexyzRed
�ciexyzGreen��
�ciexyzBlue���:�$tagICEXYZTRIPLE.?AUtagICEXYZTRIPLE@@�S�>�_X86_NT5_CONTEXT.?AU_X86_NT5_CONTEXT@@���"""�B�_LAST_EXCEPTION_LOG.?AU_LAST_EXCEPTION_LOG@@
�>�_EXCEPTION_RECORD.?AU_EXCEPTION_RECORD@@�ExceptionContinueExecution���ExceptionContinueSearch��ExceptionNestedException�ExceptionCollidedUnwind��Ft�_EXCEPTION_DISPOSITION.?AW4_EXCEPTION_DISPOSITION@@���.onecore\external\sdk\inc\crt\excpt.h�����'z
�ExceptionRecord��
Q�ContextRecord
"pControlPc
�tDisposition��
�xHandlerData��B��_LAST_EXCEPTION_LOG.?AU_LAST_EXCEPTION_LOG@@��,*�_FIXED.?AU_FIXED@@��"
!fract
value*�_FIXED.?AU_FIXED@@���Sc
ManageHotPatchLoadPatch��ManageHotPatchUnloadPatchManageHotPatchQueryPatches���ManageHotPatchLoadPatchForUser���ManageHotPatchUnloadPatchForUser�ManageHotPatchQueryPatchesForUserManageHotPatchQueryActivePatches�ManageHotPatchMaxRt�_HOT_PATCH_INFORMATION_CLASS.?AW4_HOT_PATCH_INFORMATION_CLASS@@����B:
�R�_SYSTEM_DEVICE_INFORMATION.?AU_SYSTEM_DEVICE_INFORMATION@@��
��
"NumberOfDisks
"NumberOfFloppies�
"NumberOfCdRoms���
"NumberOfTapes
"NumberOfSerialPorts��
"NumberOfParallelPortsR�_SYSTEM_DEVICE_INFORMATION.?AU_SYSTEM_DEVICE_INFORMATION@@����x^�_RTL_STACK_TRACE_DATABASE_CREATE.?AU_RTL_STACK_TRACE_DATABASE_CREATE@@��J
CommitBase���
#CommitSize���
#ReserveSize��^�_RTL_STACK_TRACE_DATABASE_CREATE.?AU_RTL_STACK_TRACE_DATABASE_CREATE@@�����F�_EISA_PORT_DESCRIPTOR.?AU_EISA_PORT_DESCRIPTOR@@
 ��
 ��
 ��
 ��Z
�NumberPorts��
�Reserved�
�Shared���
�MoreEntries��F�_EISA_PORT_DESCRIPTOR.?AU_EISA_PORT_DESCRIPTOR@@��f�_SYSTEM_PROCESSOR_POLICY_INFORMATION.?AU_SYSTEM_PROCESSOR_POLICY_INFORMATION@@��
�6�_XSAVE_POLICY.?AU_XSAVE_POLICY@@>
"Length���
"PolicyId�
�Policy���f�8_SYSTEM_PROCESSOR_POLICY_INFORMATION.?AU_SYSTEM_PROCESSOR_POLICY_INFORMATION@@����d:�tagICONMETRICSA.?AUtagICONMETRICSA@@2�tagLOGFONTA.?AUtagLOGFONTA@@r
ucbSize���
tiHorzSpacing�
tiVertSpacing�
tiTitleWrap���
�lfFont���:�LtagICONMETRICSA.?AUtagICONMETRICSA@@�L&2Z�_INVERTED_FUNCTION_TABLE_ENTRY.?AU_INVERTED_FUNCTION_TABLE_ENTRY@@��J�_DYNAMIC_FUNCTION_TABLE.?AU_DYNAMIC_FUNCTION_TABLE@@
�v
mFunctionTable
�DynamicTable�
ImageBase
"SizeOfImage��
"SizeOfTable��Z�_INVERTED_FUNCTION_TABLE_ENTRY.?AU_INVERTED_FUNCTION_TABLE_ENTRY@@�����j�_JOBOBJECT_LIMIT_VIOLATION_INFORMATION.?AU_JOBOBJECT_LIMIT_VIOLATION_INFORMATION@@��R
"LimitFlags���
"ViolationLimitFlags��
#IoReadBytes��
#IoReadBytesLimit�
#IoWriteBytes�
# IoWriteBytesLimit
~(PerJobUserTime���
~0PerJobUserTimeLimit��
#8JobMemory
#@JobMemoryLimit���
HRateControlTolerance�
LRateControlToleranceLimitj�P_JOBOBJECT_LIMIT_VIOLATION_INFORMATION.?AU_JOBOBJECT_LIMIT_VIOLATION_INFORMATION@@���}�6�tagTOGGLEKEYS.?AUtagTOGGLEKEYS@@*
ucbSize���
"dwFlags��6�tagTOGGLEKEYS.?AUtagTOGGLEKEYS@@�LZ42�tagRAWINPUT.?AUtagRAWINPUT@@
�>�tagRAWINPUTHEADER.?AUtagRAWINPUTHEADER@@:�tagRAWKEYBOARD.?AUtagRAWKEYBOARD@@��.�tagRAWHID.?AUtagRAWHID@@6
�mouse
�keyboard�
�hid��2�<anonymous-tag>.?AT<anonymous-tag>@@�L�:&
�header���
�data�2�0tagRAWINPUT.?AUtagRAWINPUT@@�L�:vFeatureVariantPayloadKindNoneFeatureVariantPayloadKindResidentFeatureVariantPayloadKindExternalZt�_RTL_FEATURE_VARIANT_PAYLOAD_KIND.?AW4_RTL_FEATURE_VARIANT_PAYLOAD_KIND@@���M
�f�_PROCESS_EXTENDED_BASIC_INFORMATION64.?AU_PROCESS_EXTENDED_BASIC_INFORMATION64@@
�V�_PROCESS_BASIC_INFORMATION64.?AU_PROCESS_BASIC_INFORMATION64@@��
u��
u��
u��
u��
u��
u��
u��
u��
u��
u	��>
#Size�
�BasicInfo
u8Flags
�8IsProtectedProcess���
�8IsWow64Process���
�8IsProcessDeleting
�8IsCrossSessionCreate�
�8IsFrozen�
�8IsBackground�
�8IsStronglyNamed��
�8IsSecureProcess��
�8IsPicoProcess
�8SpareBitsf
�@_PROCESS_EXTENDED_BASIC_INFORMATION64.?AU_PROCESS_EXTENDED_BASIC_INFORMATION64@@�b�>�tagCOPYDATASTRUCT.?AUtagCOPYDATASTRUCT@@
�>
#dwData���
"cbData���
lpData���>�tagCOPYDATASTRUCT.?AUtagCOPYDATASTRUCT@@�L)F�_RTL_PROTECTED_ACCESS.?AU_RTL_PROTECTED_ACCESS@@Z
"DominateMask�
"DeniedProcessAccess��
"DeniedThreadAccess���F�_RTL_PROTECTED_ACCESS.?AU_RTL_PROTECTED_ACCESS@@���	>�MFT_ENUM_DATA_V1.?AUMFT_ENUM_DATA_V1@@��
��
#StartFileReferenceNumber�
LowUsn���
HighUsn��
!MinMajorVersion��
!MaxMajorVersion��>� MFT_ENUM_DATA_V1.?AUMFT_ENUM_DATA_V1@@���U�
V�_PS_CPU_QUOTA_SET_INFORMATION.?AU_PS_CPU_QUOTA_SET_INFORMATION@@.
SessionHandle
"Weight���V�_PS_CPU_QUOTA_SET_INFORMATION.?AU_PS_CPU_QUOTA_SET_INFORMATION@@�b*RTL_RESOURCE_POLICY_FLAGS_NONE���Nt�_RTL_RESOURCE_POLICY_FLAGS.?AW4_RTL_RESOURCE_POLICY_FLAGS@@�����C>�_FILE_SEGMENT_ELEMENT.?AT_FILE_SEGMENT_ELEMENT@@
*
Buffer���
#Alignment>_FILE_SEGMENT_ELEMENT.?AT_FILE_SEGMENT_ELEMENT@@U	ZWnfInfoStateNameExistWnfInfoSubscribersPresentWnfInfoIsQuiescent���Nt_WNF_STATE_NAME_INFORMATION.?AW4_WNF_STATE_NAME_INFORMATION@@��
6�_COMMTIMEOUTS.?AU_COMMTIMEOUTS@@�
"ReadIntervalTimeout��
"ReadTotalTimeoutMultiplier���
"ReadTotalTimeoutConstant�
"WriteTotalTimeoutMultiplier��
"WriteTotalTimeoutConstant6	_COMMTIMEOUTS.?AU_COMMTIMEOUTS@@
<2�_RTL_TICK_LOCK.?AT_RTL_TICK_LOCK@@��
#��
#?��6
#AsULong64

Busy�
Ticks2_RTL_TICK_LOCK.?AT_RTL_TICK_LOCK@@����f�_FILE_STORAGE_RESERVE_ID_INFORMATION.?AU_FILE_STORAGE_RESERVE_ID_INFORMATION@@��
�StorageReserveIdNone�StorageReserveIdHard�StorageReserveIdSoft�StorageReserveIdUpdateScratchStorageReserveIdMax��>t_STORAGE_RESERVE_ID.?AW4_STORAGE_RESERVE_ID@@�U
StorageReserveId�f_FILE_STORAGE_RESERVE_ID_INFORMATION.?AU_FILE_STORAGE_RESERVE_ID_INFORMATION@@��US+6�_FILE_ID_INFO.?AU_FILE_ID_INFO@@
6
#VolumeSerialNumber���
.FileId���6_FILE_ID_INFO.?AU_FILE_ID_INFO@@<&#R�_RTL_CRITICAL_SECTION_DEBUG.?AU_RTL_CRITICAL_SECTION_DEBUG@@F�_RTL_CRITICAL_SECTION.?AU_RTL_CRITICAL_SECTION@@
 �
!Type�
!CreatorBackTraceIndex
!CriticalSection��
�ProcessLocksList�
" EntryCount���
"$ContentionCount��
"(Flags
!,CreatorBackTraceIndexHigh
!.SpareUSHORT��R	"0_RTL_CRITICAL_SECTION_DEBUG.?AU_RTL_CRITICAL_SECTION_DEBUG@@#�<V�_FILE_PIPE_REMOTE_INFORMATION.?AU_FILE_PIPE_REMOTE_INFORMATION@@
%B
~CollectDataTime��
"MaximumCollectionCount���V'_FILE_PIPE_REMOTE_INFORMATION.?AU_FILE_PIPE_REMOTE_INFORMATION@@(U\^�_RTL_FEATURE_CONFIGURATION_TABLE.?AU_RTL_FEATURE_CONFIGURATION_TABLE@@��R�_RTL_FEATURE_CONFIGURATION.?AU_RTL_FEATURE_CONFIGURATION@@��+#�.
"FeatureCount�
,Features�^-_RTL_FEATURE_CONFIGURATION_TABLE.?AU_RTL_FEATURE_CONFIGURATION_TABLE@@��.�o^�_THREAD_LAST_SYSCALL_INFORMATION.?AU_THREAD_LAST_SYSCALL_INFORMATION@@��Z
FirstArgument
!SystemCallNumber�
�
Pad��
#WaitTime�^1_THREAD_LAST_SYSCALL_INFORMATION.?AU_THREAD_LAST_SYSCALL_INFORMATION@@��2b�>�_WIN32_FIND_DATAW.?AU_WIN32_FIND_DATAW@@
4q#�
"dwFileAttributes�
6ftCreationTime���
6ftLastAccessTime�
6ftLastWriteTime��
"nFileSizeHigh
" nFileSizeLow�
"$dwReserved0��
"(dwReserved1��
t,cFileName
64cAlternateFileName���>
7P_WIN32_FIND_DATAW.?AU_WIN32_FIND_DATAW@@8�w^�__PUBLIC_OBJECT_TYPE_INFORMATION.?AU__PUBLIC_OBJECT_TYPE_INFORMATION@@��"#X�*
�TypeName�
;Reserved�^<h__PUBLIC_OBJECT_TYPE_INFORMATION.?AU__PUBLIC_OBJECT_TYPE_INFORMATION@@��=6�
VV�_RTL_CRITICAL_SECTION_DEBUG32.?AU_RTL_CRITICAL_SECTION_DEBUG32@@
@�
!Type�
!CreatorBackTraceIndex
"CriticalSection��

ProcessLocksList�
"EntryCount���
"ContentionCount��
�SpareVB _RTL_CRITICAL_SECTION_DEBUG32.?AU_RTL_CRITICAL_SECTION_DEBUG32@@C�q^�_SYSTEM_SHADOW_STACK_INFORMATION.?AU_SYSTEM_SHADOW_STACK_INFORMATION@@��
"��
"��
"��
"��
"	��
"��
"Flags
FCetCapable���
GUserCetAllowed���
HReservedForUserCet���
IKernelCetEnabled�
JReservedForKernelCet�
KReserved�^L_SYSTEM_SHADOW_STACK_INFORMATION.?AU_SYSTEM_SHADOW_STACK_INFORMATION@@��M�)
jRpcCurrentUniqueUser�RpcBackEndConnectionAttempts�RpcBackEndConnectionFailed���RpcRequestsPerSecond�RpcIncomingConnections���RpcIncomingBandwidth�RpcOutgoingBandwidth�RpcAttemptedLbsDecisions�	RpcFailedLbsDecisions
RpcAttemptedLbsMessages��RpcFailedLbsMessages�RpcLastCounter���BtORpcProxyPerfCounters.?AW4RpcProxyPerfCounters@@���P�`Pt"R
SB�IMAGE_COR20_HEADER.?AUIMAGE_COR20_HEADER@@��F�_IMAGE_DATA_DIRECTORY.?AU_IMAGE_DATA_DIRECTORY@@V
"cb���
!MajorRuntimeVersion��
!MinorRuntimeVersion��
VMetaData�
"Flags
"EntryPointToken��
"EntryPointRVA
VResources
V StrongNameSignature��
V(CodeManagerTable�
V0VTableFixups�
V8ExportAddressTableJumps��
V@ManagedNativeHeader��B
WHIMAGE_COR20_HEADER.?AUIMAGE_COR20_HEADER@@��Xf�	

!��
!��z
!Reserved1
!ExtType��
[Linkage��
\Reserved2
!DataSize�
#DataPtr��^]_EVENT_HEADER_EXTENDED_DATA_ITEM.?AU_EVENT_HEADER_EXTENDED_DATA_ITEM@@��^#Gt#`
a
8
x
y.dtagPOINTS.?AUtagPOINTS@@eA�:�_RTL_HASH_TABLE.?AU_RTL_HASH_TABLE@@
"��
"��
^
"EntryCount���
hMaskBitCount�
iBucketCount��
jBuckets��:k_RTL_HASH_TABLE.?AU_RTL_HASH_TABLE@@.onecore\internal\sdk\inc\rtlhashdef.h��lmn�_RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY.?AU_RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY@@
o"
�DisableNonSystemFontsnq_RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY.?AU_RTL_IMAGE_MITIGATION_FONT_DISABLE_POLICY@@r���FileStorageTierClassUnspecified��FileStorageTierClassCapacity�FileStorageTierClassPerformance��FileStorageTierClassMax��Jtt_FILE_STORAGE_TIER_CLASS.?AW4_FILE_STORAGE_TIER_CLASS@@���uU�
u>�tagTITLEBARINFOEX.?AUtagTITLEBARINFOEX@@
x"#��#`�V
"cbSize���
�rcTitleBar���
zrgstate��
{,rgrect���>|�tagTITLEBARINFOEX.?AUtagTITLEBARINFOEX@@}L9RRF_SORTEDRF_UNSORTED��RF_CALLBACK��RF_KERNEL_DYNAMICBt_FUNCTION_TABLE_TYPE.?AW4_FUNCTION_TABLE_TYPE@@�����DfPerfInfoDebugEventReceived���PerfInfoDebugEventContinued��PerfInfoDebugEventMaxRt�_PERFINFO_DEBUG_EVENT_REASON.?AW4_PERFINFO_DEBUG_EVENT_REASON@@����0
6�_WMI_SPINLOCK.?AU_WMI_SPINLOCK@@
�
 ��
 ��
 ��Z
SpinLockAddress��
CallerAddress
#AcquireTime��
#ReleaseTime��
" WaitTimeInCycles�
"$SpinCount
"(ThreadId�
",InterruptCount���
 0Irql�
 1AcquireDepth�
�2AcquireMode��
�2ExecuteDpc���
�2ExecuteIsr���
 2Flags
3Reserved�6�8_WMI_SPINLOCK.?AU_WMI_SPINLOCK@@�0D	>�_PERFINFO_CCSWAP.?AU_PERFINFO_CCSWAP@@��
"��
"��
"��
"��
"
��
"��
�DataType�
�TimeDelta
�OldThreadIdIndex�
�OldThreadStateWr�
�OldThreadPriority
�NewThreadWaitTime>�_PERFINFO_CCSWAP.?AU_PERFINFO_CCSWAP@@���0�B�_TRACE_ENABLE_INFO.?AU_TRACE_ENABLE_INFO@@��
��
"IsEnabled
 Level
 Reserved1
!LoggerId�
"EnableProperty���
"Reserved2
#MatchAnyKeyword��
#MatchAllKeyword��B� _TRACE_ENABLE_INFO.?AU_TRACE_ENABLE_INFO@@�����f�_VIRTUALIZATION_INSTANCE_INFO_OUTPUT.?AU_VIRTUALIZATION_INSTANCE_INFO_OUTPUT@@��&
�VirtualizationInstanceID�f�_VIRTUALIZATION_INSTANCE_INFO_OUTPUT.?AU_VIRTUALIZATION_INSTANCE_INFO_OUTPUT@@���U�"V�_FILE_TYPE_NOTIFICATION_INPUT.?AU_FILE_TYPE_NOTIFICATION_INPUT@@�#�F
"Flags
"NumFileTypeIDs���
�FileTypeID���V�_FILE_TYPE_NOTIFICATION_INPUT.?AU_FILE_TYPE_NOTIFICATION_INPUT@@�U^�_RTL_QUERY_DEBUG_INFORMATION_INFO.?AU_RTL_QUERY_DEBUG_INFORMATION_INFO@@B
"UniqueProcessId��
"Flags
#Buffer���^�_RTL_QUERY_DEBUG_INFORMATION_INFO.?AU_RTL_QUERY_DEBUG_INFORMATION_INFO@@��	
8�f�_PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA.?AU_PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA@@.
�DeviceInstance���
"Flagsf�_PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA.?AU_PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA@@���F�_SYSDBG_CONTROL_SPACE.?AU_SYSDBG_CONTROL_SPACE@@
�R
#Address��
Buffer���
"Request��
"ProcessorF�_SYSDBG_CONTROL_SPACE.?AU_SYSDBG_CONTROL_SPACE@@��:�_TXFS_MODIFY_RM.?AU_TXFS_MODIFY_RM@@�
"Flags
"LogContainerCountMax�
"LogContainerCountMin�
"LogContainerCount
"LogGrowthIncrement���
"LogAutoShrinkPercentage��
#Reserved�
! LoggingMode��:�(_TXFS_MODIFY_RM.?AU_TXFS_MODIFY_RM@@�U�RDirectoryNotifyInformation���DirectoryNotifyExtendedInformation���^t�_DIRECTORY_NOTIFY_INFORMATION_CLASS.?AW4_DIRECTORY_NOTIFY_INFORMATION_CLASS@@��U�
�>
 AceType��
 AceFlags�
!AceSize��2�_ACE_HEADER.?AU_ACE_HEADER@@�E�F�_HEAP_SUBSEGMENT_FREE.?AU_HEAP_SUBSEGMENT_FREE@@&
8Header���
9 EventF�@_HEAP_SUBSEGMENT_FREE.?AU_HEAP_SUBSEGMENT_FREE@@�0F*�_cpinfo.?AU_cpinfo@@
� #� #�F
uMaxCharSize��
�DefaultChar��
�LeadByte�*�_cpinfo.?AU_cpinfo@@�%?:�tagENUMLOGFONTW.?AUtagENUMLOGFONTW@@
�2�tagLOGFONTW.?AUtagLOGFONTW@@q#��q#@�F
�elfLogFont���
�\elfFullName��
��elfStyle�:�tagENUMLOGFONTW.?AUtagENUMLOGFONTW@@�S�J�_FILE_LINK_INFORMATION.?AU_FILE_LINK_INFORMATION@@��
�v
 ReplaceIfExists��
"Flags
RootDirectory
"FileNameLength���
JFileName�J�_FILE_LINK_INFORMATION.?AU_FILE_LINK_INFORMATION@@���U�b�_PERFINFO_DRIVER_COMPLETIONROUTINE.?AU_PERFINFO_DRIVER_COMPLETIONROUTINE@@��
�B
Routine��
IrpPtr���
"UniqMatchId��b�_PERFINFO_DRIVER_COMPLETIONROUTINE.?AU_PERFINFO_DRIVER_COMPLETIONROUTINE@@���0%6�_XSAVE_VENDOR.?AU_XSAVE_VENDOR@@
�F�_XSAVE_SUPPORTED_CPU.?AU_XSAVE_SUPPORTED_CPU@@��.
�VendorId�
�SupportedCpu�6�8_XSAVE_VENDOR.?AU_XSAVE_VENDOR@@*onecore\internal\sdk\inc\ntkeapi.h����B�_KLOCK_QUEUE_HANDLE.?AU_KLOCK_QUEUE_HANDLE@@
�*
iLockQueue
 OldIrql��B�_KLOCK_QUEUE_HANDLE.?AU_KLOCK_QUEUE_HANDLE@@��j�_JOBOBJECT_MEMORY_USAGE_INFORMATION_V2.?AU_JOBOBJECT_MEMORY_USAGE_INFORMATION_V2@@��b�_JOBOBJECT_MEMORY_USAGE_INFORMATION.?AU_JOBOBJECT_MEMORY_USAGE_INFORMATION@@##�F
�BasicInfo
#JobSharedMemory��
�Reserved�j�(_JOBOBJECT_MEMORY_USAGE_INFORMATION_V2.?AU_JOBOBJECT_MEMORY_USAGE_INFORMATION_V2@@���bV^�_IMAGE_LOAD_CONFIG_CODE_INTEGRITY.?AU_IMAGE_LOAD_CONFIG_CODE_INTEGRITY@@R
!Flags
!Catalog��
"CatalogOffset
"Reserved�^�_IMAGE_LOAD_CONFIG_CODE_INTEGRITY.?AU_IMAGE_LOAD_CONFIG_CODE_INTEGRITY@@�f�:�tagSERIALKEYSW.?AUtagSERIALKEYSW@@��
ucbSize���
"dwFlags��
qlpszActivePort���
qlpszPort�
uiBaudRate
uiPortState���
u iActive��:�(tagSERIALKEYSW.?AUtagSERIALKEYSW@@���LR2:�tagEXTLOGPEN32.?AUtagEXTLOGPEN32@@��
"elpPenStyle��
"elpWidth�
uelpBrushStyle
"elpColor�
"elpHatch�
"elpNumEntries
7elpStyleEntry:�tagEXTLOGPEN32.?AUtagEXTLOGPEN32@@���S�6�_RTL_RESOURCE.?AU_RTL_RESOURCE@@
�
�
 CriticalSection��
(SharedSemaphore��
L0NumberOfWaitingShared
8ExclusiveSemaphore���
L@NumberOfWaitingExclusive�
DNumberOfActive���
HExclusiveOwnerThread�
"PFlags
�XDebugInfo6	�`_RTL_RESOURCE.?AU_RTL_RESOURCE@@���R�_RTL_HEAP_MEMORY_LIMIT_INFO.?AU_RTL_HEAP_MEMORY_LIMIT_INFO@@
R�_RTL_HEAP_MEMORY_LIMIT_DATA.?AU_RTL_HEAP_MEMORY_LIMIT_DATA@@&
"Version��
Data�R(_RTL_HEAP_MEMORY_LIMIT_INFO.?AU_RTL_HEAP_MEMORY_LIMIT_INFO@@$�
�SYSTEM_HANDLE_FILE���SYSTEM_HANDLE_SEMAPHORE��SYSTEM_HANDLE_EVENT��SYSTEM_HANDLE_MUTEX��SYSTEM_HANDLE_PROCESSSYSTEM_HANDLE_TOKEN��SYSTEM_HANDLE_SECTIONSYSTEM_HANDLE_REG_KEYSYSTEM_HANDLE_THREAD�	SYSTEM_HANDLE_COMPOSITION_OBJECT�
SYSTEM_HANDLE_SOCKET�SYSTEM_HANDLE_JOBSYSTEM_HANDLE_PIPE���SYSTEM_HANDLE_MAX�SYSTEM_HANDLE_INVALID:t_system_handle_t.?AW4_system_handle_t@@�����TransactionManagerBasicInformation���TransactionManagerLogInformation�TransactionManagerLogPathInformation�TransactionManagerRecoveryInformationTransactionManagerOnlineProbeInformation�TransactionManagerOldestTransactionInformation���bt	_TRANSACTIONMANAGER_INFORMATION_CLASS.?AW4_TRANSACTIONMANAGER_INFORMATION_CLASS@@�
�<V�_SYSTEM_FILECACHE_INFORMATION.?AU_SYSTEM_FILECACHE_INFORMATION@@
#CurrentSize��
#PeakSize�
"PageFaultCount���
#MinimumWorkingSet
# MaximumWorkingSet
#(CurrentSizeIncludingTransitionInPages
#0PeakSizeIncludingTransitionInPages���
"8TransitionRePurposeCount�
"<FlagsV	
@_SYSTEM_FILECACHE_INFORMATION.?AU_SYSTEM_FILECACHE_INFORMATION@@�
qt
B�_FILE_STANDARD_INFO.?AU_FILE_STANDARD_INFO@@v
~AllocationSize���
~EndOfFile
"NumberOfLinks
 DeletePending
 DirectoryB_FILE_STANDARD_INFO.?AU_FILE_STANDARD_INFO@@<y"n�_SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX.?AU_SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX@@��J�_PROCESSOR_RELATIONSHIP.?AU_PROCESSOR_RELATIONSHIP@@J�_NUMA_NODE_RELATIONSHIP.?AU_NUMA_NODE_RELATIONSHIP@@B�_GROUP_RELATIONSHIP.?AU_GROUP_RELATIONSHIP@@r
Relationship�
"Size�
Processor
NumaNode�
�Cache
GroupnP_SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX.?AU_SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX@@��|C>�_HIBERFILE_BUCKET.?AU_HIBERFILE_BUCKET@@
>
#MaxPhysicalMemory
�PhysicalMemoryPercent> _HIBERFILE_BUCKET.?AU_HIBERFILE_BUCKET@@!F�
�>�_CM_MCA_POS_DATA.?AU_CM_MCA_POS_DATA@@��f
!AdapterId
 PosData1�
 PosData2�
 PosData3�
 PosData4�>%_CM_MCA_POS_DATA.?AU_CM_MCA_POS_DATA@@��&��F�_SYSTEM_BIGPOOL_ENTRY.?AU_SYSTEM_BIGPOOL_ENTRY@@
(
#��n
VirtualAddress���
*NonPaged�
#SizeInBytes��
�Tag��
"TagUlong�F+_SYSTEM_BIGPOOL_ENTRY.?AU_SYSTEM_BIGPOOL_ENTRY@@,��
J�_PLEX_READ_DATA_REQUEST.?AU_PLEX_READ_DATA_REQUEST@@J
~ByteOffset���
"ByteLength���
"PlexNumber���J/_PLEX_READ_DATA_REQUEST.?AU_PLEX_READ_DATA_REQUEST@@0U�J�_WMI_THREAD_INFORMATION.?AU_WMI_THREAD_INFORMATION@@
2*
"ProcessId
"ThreadId�J4_WMI_THREAD_INFORMATION.?AU_WMI_THREAD_INFORMATION@@50j�_RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY.?AU_RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY@@b
�BlockRemoteImageLoads
�BlockLowLabelImageLoads��
�PreferSystem32���j8_RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY.?AU_RTL_IMAGE_MITIGATION_IMAGE_LOAD_POLICY@@9��fTableEmptyTree���TableFoundNode���TableInsertAsLeftTableInsertAsRight���Bt;_TABLE_SEARCH_RESULT.?AW4_TABLE_SEARCH_RESULT@@���<$DN�_NETWORK_APP_INSTANCE_EA.?AU_NETWORK_APP_INSTANCE_EA@@��.
�AppInstanceID
"CsvFlags�N?_NETWORK_APP_INSTANCE_EA.?AU_NETWORK_APP_INSTANCE_EA@@��@U,V�_REFS_SMR_VOLUME_INFO_OUTPUT.?AU_REFS_SMR_VOLUME_INFO_OUTPUT@@��nSmrGcStateInactive���SmrGcStatePaused�SmrGcStateActive�SmrGcStateActiveFullSpeedJtC_REFS_SMR_VOLUME_GC_STATE.?AW4_REFS_SMR_VOLUME_GC_STATE@@�DU� ##8�"
"Version��
"Flags
~SizeOfRandomlyWritableTier���
~FreeSpaceInRandomlyWritableTier��
~SizeofSMRTier
~ FreeSpaceInSMRTier���
~(UsableFreeSpaceInSMRTier�
D0VolumeGcState
4VolumeGcLastStatus���
F8Unused���V
Gp_REFS_SMR_VOLUME_INFO_OUTPUT.?AU_REFS_SMR_VOLUME_INFO_OUTPUT@@��HU� >�_REMOTE_PORT_VIEW.?AU_REMOTE_PORT_VIEW@@>
"Length���
#ViewSize�
ViewBase�>K_REMOTE_PORT_VIEW.?AU_REMOTE_PORT_VIEW@@L��SidTypeUser��SidTypeGroup�SidTypeDomainSidTypeAlias�SidTypeWellKnownGroupSidTypeDeletedAccountSidTypeInvalid���SidTypeUnknown���	SidTypeComputer��
SidTypeLabel�SidTypeLogonSession��2tN_SID_NAME_USE.?AW4_SID_NAME_USE@@�OE;�EventProviderBinaryTrackInfo�EventProviderSetReserved1EventProviderSetTraits���EventProviderUseDescriptorType���MaxEventInfo�:tQ_EVENT_INFO_CLASS.?AW4_EVENT_INFO_CLASS@@�R�F�_ACL_SIZE_INFORMATION.?AU_ACL_SIZE_INFORMATION@@F
"AceCount�
"AclBytesInUse
"AclBytesFree�FU_ACL_SIZE_INFORMATION.?AU_ACL_SIZE_INFORMATION@@VE\J�tagRID_DEVICE_INFO_HID.?AUtagRID_DEVICE_INFO_HID@@��z
"dwVendorId���
"dwProductId��
"dwVersionNumber��
!usUsagePage��
!usUsage��JYtagRID_DEVICE_INFO_HID.?AUtagRID_DEVICE_INFO_HID@@��ZL#;F�_REPARSE_DATA_BUFFER.?AU_REPARSE_DATA_BUFFER@@��
\�
!SubstituteNameOffset�
!SubstituteNameLength�
!PrintNameOffset��
!PrintNameLength��
"Flags
JPathBuffer���:^<anonymous-tag>.?AU<anonymous-tag>@@_U*#�
!SubstituteNameOffset�
!SubstituteNameLength�
!PrintNameOffset��
!PrintNameLength��
JPathBuffer���:a
<anonymous-tag>.?AU<anonymous-tag>@@bU2#
�DataBuffer���:d<anonymous-tag>.?AU<anonymous-tag>@@eU9#�
"ReparseTag���
!ReparseDataLength
!Reserved�
_SymbolicLinkReparseBuffer
bMountPointReparseBuffer��
eGenericReparseBuffer�Fg_REPARSE_DATA_BUFFER.?AU_REPARSE_DATA_BUFFER@@��hU##b�_VIRTUALIZATION_INSTANCE_INFO_INPUT.?AU_VIRTUALIZATION_INSTANCE_INFO_INPUT@@2
"NumberOfWorkerThreads
"Flagsbk_VIRTUALIZATION_INSTANCE_INFO_INPUT.?AU_VIRTUALIZATION_INSTANCE_INFO_INPUT@@lU�"jThreadWorkloadClassDefault���ThreadWorkloadClassGraphics��MaxThreadWorkloadClass���Ftn_THREAD_WORKLOAD_CLASS.?AW4_THREAD_WORKLOAD_CLASS@@���o}�6PMCCounter���MaxHardwareCounterType���Ftq_HARDWARE_COUNTER_TYPE.?AW4_HARDWARE_COUNTER_TYPE@@���r}�DEPPolicyAlwaysOff���DEPPolicyAlwaysOnDEPPolicyOptIn���DEPPolicyOptOut��DEPTotalPolicyCount��Ftt_DEP_SYSTEM_POLICY_TYPE.?AW4_DEP_SYSTEM_POLICY_TYPE@@�u<R	�OptionAbortRetryIgnore���OptionOk�OptionOkCancel���OptionRetryCancelOptionYesNo��OptionYesNoCancelOptionShutdownSystem�OptionOkNoWait���OptionCancelTryContinue��N	tw_HARDERROR_RESPONSE_OPTION.?AW4_HARDERROR_RESPONSE_OPTION@@���x��J�_TRACE_PROFILE_INTERVAL.?AU_TRACE_PROFILE_INTERVAL@@
z*
"Source���
"Interval�J|_TRACE_PROFILE_INTERVAL.?AU_TRACE_PROFILE_INTERVAL@@}�~"##""B�_FXSAVE_FORMAT_WX86.?AU_FXSAVE_FORMAT_WX86@@ #�� #��&
!ControlWord��
!StatusWord���
!TagWord��
!ErrorOpcode��
"ErrorOffset��
"ErrorSelector
"DataOffset���
"DataSelector�
"MXCsr
"MXCsr_Mask���
� RegisterArea�
��Reserved3
� Reserved4B
�_FXSAVE_FORMAT_WX86.?AU_FXSAVE_FORMAT_WX86@@*onecore\internal\sdk\inc\ntwow64.h���<B�_KCRM_PROTOCOL_BLOB.?AU_KCRM_PROTOCOL_BLOB@@
��
�ProtocolId���
"StaticInfoLength�
"TransactionIdInfoLength��
"Unused1��
"Unused2��B� _KCRM_PROTOCOL_BLOB.?AU_KCRM_PROTOCOL_BLOB@@.onecore\external\shared\inc\ktmtypes.h�����SharedVirtualDisksUnsupportedSharedVirtualDisksSupported��SharedVirtualDiskSnapshotsSupported��SharedVirtualDiskCDPSnapshotsSupported���Rt�_SharedVirtualDiskSupportType.?AW4_SharedVirtualDiskSupportType@@��U�'R�_IMAGE_ROM_OPTIONAL_HEADER.?AU_IMAGE_ROM_OPTIONAL_HEADER@@��
�N
!Magic
 MajorLinkerVersion���
 MinorLinkerVersion���
"SizeOfCode���
"SizeOfInitializedData
"SizeOfUninitializedData��
"AddressOfEntryPoint��
"BaseOfCode���
"BaseOfData���
"BaseOfBss
" GprMask��
�$CprMask��
"4GpValue��R
�8_IMAGE_ROM_OPTIONAL_HEADER.?AU_IMAGE_ROM_OPTIONAL_HEADER@@���f7�
 bFamilyType��
 bSerifStyle��
 bWeight��
 bProportion��
 bContrast
 bStrokeVariation�
 bArmStyle
 bLetterform��
 bMidline�
 	bXHeight�.
�
tagPANOSE.?AUtagPANOSE@@�S�J�_SYSTEM_TPM_INFORMATION.?AU_SYSTEM_TPM_INFORMATION@@
"FlagsJ�_SYSTEM_TPM_INFORMATION.?AU_SYSTEM_TPM_INFORMATION@@���R�_WMI_JOB_SET_QUERY_NET_RATE.?AU_WMI_JOB_SET_QUERY_NET_RATE@@>
"Flags
#MaxBandwidth�
 DscpTag��R�_WMI_JOB_SET_QUERY_NET_RATE.?AU_WMI_JOB_SET_QUERY_NET_RATE@@�0�>�_FILE_BASIC_INFO.?AU_FILE_BASIC_INFO@@��
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ChangeTime���
" FileAttributes���>�(_FILE_BASIC_INFO.?AU_FILE_BASIC_INFO@@���<q"^�_RTL_FEATURE_CONFIGURATION_UPDATE.?AU_RTL_FEATURE_CONFIGURATION_UPDATE@@nFeatureEnabledStateDefault���FeatureEnabledStateDisabled��FeatureEnabledStateEnabled���Nt�_RTL_FEATURE_ENABLED_STATE.?AW4_RTL_FEATURE_ENABLED_STATE@@�����/�FeatureConfigurationOperationNoneFeatureConfigurationOperationFeatureStateFeatureConfigurationOperationVariantStateFeatureConfigurationOperationResetState��bt�_RTL_FEATURE_CONFIGURATION_OPERATION.?AW4_RTL_FEATURE_CONFIGURATION_OPERATION@@�����!�
uFeatureId
Priority�
�EnabledState�
�EnabledStateOptions��
 Variant��
�Reserved�
�VariantPayloadKind���
uVariantPayload���
�Operation^	� _RTL_FEATURE_CONFIGURATION_UPDATE.?AU_RTL_FEATURE_CONFIGURATION_UPDATE@@��WJ�_FILE_COMPRESSION_INFO.?AU_FILE_COMPRESSION_INFO@@��
~CompressedFileSize���
!CompressionFormat
 
CompressionUnitShift�
 ChunkShift���
 ClusterShift�
�
Reserved�J�_FILE_COMPRESSION_INFO.?AU_FILE_COMPRESSION_INFO@@���<�"N�_TRANSACTION_NOTIFICATION.?AU_TRANSACTION_NOTIFICATION@@z
TransactionKey���
"TransactionNotification��
~TmVirtualClock���
"ArgumentLength���N� _TRANSACTION_NOTIFICATION.?AU_TRANSACTION_NOTIFICATION@@���
�

�j�_DISPLAYCONFIG_GET_ADVANCED_COLOR_INFO.?AU_DISPLAYCONFIG_GET_ADVANCED_COLOR_INFO@@��^�DISPLAYCONFIG_DEVICE_INFO_HEADER.?AUDISPLAYCONFIG_DEVICE_INFO_HEADER@@��
u��
u��
u��
u��
u��DISPLAYCONFIG_COLOR_ENCODING_RGB�DISPLAYCONFIG_COLOR_ENCODING_YCBCR444DISPLAYCONFIG_COLOR_ENCODING_YCBCR422DISPLAYCONFIG_COLOR_ENCODING_YCBCR420DISPLAYCONFIG_COLOR_ENCODING_INTENSITY�����DISPLAYCONFIG_COLOR_ENCODING_FORCE_UINT32���Rt�_DISPLAYCONFIG_COLOR_ENCODING.?AW4_DISPLAYCONFIG_COLOR_ENCODING@@��SJ�
�header���
�advancedColorSupported���
�advancedColorEnabled�
�wideColorEnforced
�advancedColorForceDisabled���
�reserved�
uvalue
�colorEncoding
ubitsPerColorChannel��j	� _DISPLAYCONFIG_GET_ADVANCED_COLOR_INFO.?AU_DISPLAYCONFIG_GET_ADVANCED_COLOR_INFO@@���ST
"��
"��
"��
"��
"��
"���
"Flags
�MicrosoftSignedOnly��
�StoreSignedOnly��
�MitigationOptIn��
�AuditMicrosoftSignedOnly�
�AuditStoreSignedOnly�
�ReservedFlagsr�_PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY.?AU_PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY@@�}�R�_HEAP_EVENT_COMMIT_DECOMMIT.?AU_HEAP_EVENT_COMMIT_DECOMMIT@@
�N
HeapHandle���
Block
#Size�
"Caller���R� _HEAP_EVENT_COMMIT_DECOMMIT.?AU_HEAP_EVENT_COMMIT_DECOMMIT@@�0'
�
�V�_PERFINFO_PO_SESSION_CALLOUT.?AU_PERFINFO_PO_SESSION_CALLOUT@@��b
ESystemAction�
�MinSystemState���
"Flags
"PowerStateTask���V�_PERFINFO_PO_SESSION_CALLOUT.?AU_PERFINFO_PO_SESSION_CALLOUT@@���0��
#CommitLimitBytes�
#CommitLimitFailureCode���
#MaxAllocationSizeBytes���
#AllocationLimitFailureCode���R� _RTL_HEAP_MEMORY_LIMIT_DATA.?AU_RTL_HEAP_MEMORY_LIMIT_DATA@@�$�
N�NOTIFY_USER_POWER_SETTING.?AUNOTIFY_USER_POWER_SETTING@@
�
�Guid�N�NOTIFY_USER_POWER_SETTING.?AUNOTIFY_USER_POWER_SETTING@@�F�:�_nlsversioninfo.?AU_nlsversioninfo@@�
"dwNLSVersionInfoSize�
"dwNLSVersion�
"dwDefinedVersion�
"dwEffectiveId
�guidCustomVersion:� _nlsversioninfo.?AU_nlsversioninfo@@�%�Y[�b�_SYSTEM_SESSION_BIGPOOL_INFORMATION.?AU_SYSTEM_SESSION_BIGPOOL_INFORMATION@@
�(#�Z
#NextEntryOffset��
"SessionId
"Count
�AllocatedInfob�(_SYSTEM_SESSION_BIGPOOL_INFORMATION.?AU_SYSTEM_SESSION_BIGPOOL_INFORMATION@@���
~ImagePolicyIdNoneImagePolicyIdEtw�ImagePolicyIdDebug���ImagePolicyIdCrashDump���ImagePolicyIdCrashDumpKeyImagePolicyIdCrashDumpKeyGuidImagePolicyIdParentSdImagePolicyIdParentSdRev�ImagePolicyIdSvn�	ImagePolicyIdDeviceId
ImagePolicyIdCapability��ImagePolicyIdScenarioId��ImagePolicyIdMaximum�:
t�_IMAGE_POLICY_ID.?AW4_IMAGE_POLICY_ID@@����$]&V�_KEY_WOW64_FLAGS_INFORMATION.?AU_KEY_WOW64_FLAGS_INFORMATION@@��
"UserFlagsV�_KEY_WOW64_FLAGS_INFORMATION.?AU_KEY_WOW64_FLAGS_INFORMATION@@����n�_SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION.?AU_SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION@@�#@�
�Cycles���n�@_SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION.?AU_SYSTEM_PROCESSOR_CYCLE_STATS_INFORMATION@@��_N�_FILE_ACCESS_INFORMATION.?AU_FILE_ACCESS_INFORMATION@@��
"AccessFlags��N�_FILE_ACCESS_INFORMATION.?AU_FILE_ACCESS_INFORMATION@@���U�
p��
�R�_POWER_PLATFORM_INFORMATION.?AU_POWER_PLATFORM_INFORMATION@@

 AoAc�R_POWER_PLATFORM_INFORMATION.?AU_POWER_PLATFORM_INFORMATION@@F�R�_PROCESS_BASIC_INFORMATION.?AU_PROCESS_BASIC_INFORMATION@@��
ExitStatus���
�PebBaseAddress���
#AffinityMask�
BasePriority�
# UniqueProcessId��
#(InheritedFromUniqueProcessId�R0_PROCESS_BASIC_INFORMATION.?AU_PROCESS_BASIC_INFORMATION@@��}�R�_ETW_FINALIZE_KTIMER2_EVENT.?AU_ETW_FINALIZE_KTIMER2_EVENT@@

N
#TimerKey�
#DisableCallback��
#DisableContextKeyR_ETW_FINALIZE_KTIMER2_EVENT.?AU_ETW_FINALIZE_KTIMER2_EVENT@@
0�B�tagENUMTEXTMETRICA.?AUtagENUMTEXTMETRICA@@��
B�tagNEWTEXTMETRICEXA.?AUtagNEWTEXTMETRICEXA@@:
etmNewTextMetricEx���

`etmAxesList��B�tagENUMTEXTMETRICA.?AUtagENUMTEXTMETRICA@@��Sm
N�_SID_AND_ATTRIBUTES_HASH.?AU_SID_AND_ATTRIBUTES_HASH@@��

�##�:
"SidCount�
SidAttr��
Hash�N_SID_AND_ATTRIBUTES_HASH.?AU_SID_AND_ATTRIBUTES_HASH@@��EXF�_TRACE_ENABLE_CONTEXT.?AU_TRACE_ENABLE_CONTEXT@@V
!LoggerId�
 Level
 InternalFlag�
"EnableFlags��F_TRACE_ENABLE_CONTEXT.?AU_TRACE_ENABLE_CONTEXT@@^7N�_FILE_STAT_LX_INFORMATION.?AU_FILE_STAT_LX_INFORMATION@@
!�
~FileId���
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(AllocationSize���
~0EndOfFile
"8FileAttributes���
"<ReparseTag���
"@NumberOfLinks
"DEffectiveAccess��
"HLxFlags��
"LLxUid
"PLxGid
"TLxMode���
"XLxDeviceIdMajor��
"\LxDeviceIdMinor��N#`_FILE_STAT_LX_INFORMATION.?AU_FILE_STAT_LX_INFORMATION@@$UbR�_SEC_WINNT_AUTH_IDENTITY_A.?AU_SEC_WINNT_AUTH_IDENTITY_A@@��
 User�
"UserLength���
 Domain���
"DomainLength�
  Password�
"(PasswordLength���
",FlagsR'0_SEC_WINNT_AUTH_IDENTITY_A.?AU_SEC_WINNT_AUTH_IDENTITY_A@@��(�Z�_TRANSACTION_BASIC_INFORMATION.?AU_TRANSACTION_BASIC_INFORMATION@@��>
�TransactionId
"State
"Outcome��Z+_TRANSACTION_BASIC_INFORMATION.?AU_TRANSACTION_BASIC_INFORMATION@@��,��>�_LDR_SECTION_INFO.?AU_LDR_SECTION_INFO@@B�_OBJECT_ATTRIBUTES.?AU_OBJECT_ATTRIBUTES@@��
/�
SectionHandle
"DesiredAccess
0ObjA�
"SectionPageProtection
"AllocationAttributes�>1 _LDR_SECTION_INFO.?AU_LDR_SECTION_INFO@@2��6�tagAXESLISTW.?AUtagAXESLISTW@@��\#��J
"axlReserved��
"axlNumAxes���
5axlAxisInfo��66�tagAXESLISTW.?AUtagAXESLISTW@@��7S<~�_SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION.?AU_SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION@@��
96
"FlagsToEnable
"FlagsToDisable���~;_SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION.?AU_SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION@@��<�)
B�_CSV_CONTROL_PARAM.?AU_CSV_CONTROL_PARAM@@��
>>CsvControlStartRedirectFile��CsvControlStopRedirectFile���CsvControlQueryRedirectState�CsvControlQueryFileRevision��CsvControlQueryMdsPath���	CsvControlQueryFileRevisionFileId128�
CsvControlQueryVolumeRedirectState���
CsvControlEnableUSNRangeModificationTracking�CsvControlMarkHandleLocalVolumeMount�CsvControlUnmarkHandleLocalVolumeMount���CsvControlGetCsvFsMdsPathV2��CsvControlDisableCaching�CsvControlEnableCaching��CsvControlStartForceDFO��CsvControlStopForceDFO���6t@_CSV_CONTROL_OP.?AW4_CSV_CONTROL_OP@@�AUF*
AOperation
Unused���BC_CSV_CONTROL_PARAM.?AU_CSV_CONTROL_PARAM@@��DUXZ�_PROCESS_HANDLE_TRACING_ENABLE.?AU_PROCESS_HANDLE_TRACING_ENABLE@@��
F
"FlagsZH_PROCESS_HANDLE_TRACING_ENABLE.?AU_PROCESS_HANDLE_TRACING_ENABLE@@��I}>2�_numberfmtW.?AU_numberfmtW@@�
uNumDigits
uLeadingZero��
uGrouping�
qlpDecimalSep�
qlpThousandSep
u NegativeOrder2L(_numberfmtW.?AU_numberfmtW@@M%�bKHeteroCpuPolicyAll��KHeteroCpuPolicyLargeKHeteroCpuPolicyLargeOrIdle��KHeteroCpuPolicySmallKHeteroCpuPolicySmallOrIdle��KHeteroCpuPolicyDynamic��KHeteroCpuPolicyStaticMaxKHeteroCpuPolicyBiasedSmall��KHeteroCpuPolicyBiasedLarge��KHeteroCpuPolicyDefault��	KHeteroCpuPolicyMax��>tO_KHETERO_CPU_POLICY.?AW4_KHETERO_CPU_POLICY@@�P7~B�_CSV_NAMESPACE_INFO.?AU_CSV_NAMESPACE_INFO@@
Rb
"Version��
"DeviceNumber�
~StartingOffset���
"SectorSize���BT_CSV_NAMESPACE_INFO.?AU_CSV_NAMESPACE_INFO@@UU66�_LUTF8_STRING.?AU_LUTF8_STRING@@
W��
XB
#Length���
#MaximumLength
 Buffer���6Z_LUTF8_STRING.?AU_LUTF8_STRING@@2onecore\internal\sdk\inc\minwin\ntdef_p.h��[\
UB�tagEMRSETCOLORSPACE.?AUtagEMRSETCOLORSPACE@@"
Pemr��
"ihCS�B`tagEMRSETCOLORSPACE.?AUtagEMRSETCOLORSPACE@@aS�Z�_PLUGPLAY_CONTROL_PROPERTY_DATA.?AU_PLUGPLAY_CONTROL_PROPERTY_DATA@@
cb
�DeviceInstance���
"PropertyType�
Buffer���
" BufferSize���Ze(_PLUGPLAY_CONTROL_PROPERTY_DATA.?AU_PLUGPLAY_CONTROL_PROPERTY_DATA@@f�8>GroupAffinityAllGroupZeroGroupAffinityDontCare:th_IRQ_GROUP_POLICY.?AW4_IRQ_GROUP_POLICY@@�i��^�_FILE_CASE_SENSITIVE_INFORMATION.?AU_FILE_CASE_SENSITIVE_INFORMATION@@��
k
"Flags^m_FILE_CASE_SENSITIVE_INFORMATION.?AU_FILE_CASE_SENSITIVE_INFORMATION@@��nU�N�_PERFINFO_DPC_INFORMATION.?AU_PERFINFO_DPC_INFORMATION@@2
#InitialTime��
DpcRoutine���Nq_PERFINFO_DPC_INFORMATION.?AU_PERFINFO_DPC_INFORMATION@@r0�>�_WIN32_STREAM_ID.?AU_WIN32_STREAM_ID@@��~
"dwStreamId���
"dwStreamAttributes���
~Size�
"dwStreamNameSize�
JcStreamName��>u_WIN32_STREAM_ID.?AU_WIN32_STREAM_ID@@��v<�B�_TOKEN_AUDIT_POLICY.?AU_TOKEN_AUDIT_POLICY@@ #�
yPerUserPolicyBz_TOKEN_AUDIT_POLICY.?AU_TOKEN_AUDIT_POLICY@@{E�6�_PSINJECTDATA.?AU_PSINJECTDATA@@J
"DataBytes
!InjectionPoint���
!PageNumber���6~_PSINJECTDATA.?AU_PSINJECTDATA@@S�N�_ETW_OBJECT_HANDLE_EVENT.?AU_ETW_OBJECT_HANDLE_EVENT@@��
�V
Object���
"ProcessId
"Handle���
!ObjectType���N�_ETW_OBJECT_HANDLE_EVENT.?AU_ETW_OBJECT_HANDLE_EVENT@@���0i
2�value_entA.?AUvalue_entA@@��^
pve_valuename�
"ve_valuelen��
#ve_valueptr��
"ve_type��2� value_entA.?AUvalue_entA@@��2onecore\external\sdk\inc\minwin\winreg.h������J�_SD_GLOBAL_CHANGE_INPUT.?AU_SD_GLOBAL_CHANGE_INPUT@@V�_SD_CHANGE_MACHINE_SID_INPUT.?AU_SD_CHANGE_MACHINE_SID_INPUT@@��F�_SD_QUERY_STATS_INPUT.?AU_SD_QUERY_STATS_INPUT@@j
"Flags
"ChangeType���
�SdChange�
�SdQueryStats�
lSdEnumSdsJ�_SD_GLOBAL_CHANGE_INPUT.?AU_SD_GLOBAL_CHANGE_INPUT@@�UmF�_VIRTUAL_STORAGE_TYPE.?AU_VIRTUAL_STORAGE_TYPE@@*
"DeviceId�
�VendorId�F�_VIRTUAL_STORAGE_TYPE.?AU_VIRTUAL_STORAGE_TYPE@@�U0F�tagRAWINPUTDEVICELIST.?AUtagRAWINPUTDEVICELIST@@*
hDevice��
"dwType���F�tagRAWINPUTDEVICELIST.?AUtagRAWINPUTDEVICELIST@@�L�;R�_RTL_IMAGE_POLICY_METADATA.?AU_RTL_IMAGE_POLICY_METADATA@@��
�J�_IMAGE_POLICY_METADATA.?AU_IMAGE_POLICY_METADATA@@��
���
�F
�PolicyMetadata���
#LBound���
#UBound���R�_RTL_IMAGE_POLICY_METADATA.?AU_RTL_IMAGE_POLICY_METADATA@@���$�&�FileStorageTierMediaTypeUnspecified��FileStorageTierMediaTypeDisk�FileStorageTierMediaTypeSsd��FileStorageTierMediaTypeScm��FileStorageTierMediaTypeMax��Rt�_FILE_STORAGE_TIER_MEDIA_TYPE.?AW4_FILE_STORAGE_TIER_MEDIA_TYPE@@��U�^�_PROCESS_TELEMETRY_ID_INFORMATION.?AU_PROCESS_TELEMETRY_ID_INFORMATION@@�
"HeaderSize���
"ProcessId
#ProcessStartKey��
#CreateTime���
#CreateInterruptTime��
# CreateUnbiasedInterruptTime��
#(ProcessSequenceNumber
#0SessionCreateTime
"8SessionId
"<BootId���
"@ImageChecksum
"DImageTimeDateStamp���
"HUserSidOffset
"LImagePathOffset��
"PPackageNameOffset
"TRelativeAppNameOffset
"XCommandLineOffset^�`_PROCESS_TELEMETRY_ID_INFORMATION.?AU_PROCESS_TELEMETRY_ID_INFORMATION@@�bk6�_FILEMUIINFO.?AU_FILEMUIINFO@@�� #� #�Z
"dwSize���
"dwVersion
"dwFileType���
�pChecksum
�pServiceChecksum�
",dwLanguageNameOffset�
"0dwTypeIDMainSize�
"4dwTypeIDMainOffset���
"8dwTypeNameMainOffset�
"<dwTypeIDMUISize��
"@dwTypeIDMUIOffset
"DdwTypeNameMUIOffset��
�HabBuffer�6
�P_FILEMUIINFO.?AU_FILEMUIINFO@@���%�v�_ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION.?AU_ACTIVATION_CONTEXT_DATA_ASSEMBLY_INFORMATION@@*�_LBLOB.?AU_LBLOB@@��B
#Length���
#MaximumLength
 Buffer���*�_LBLOB.?AU_LBLOB@@���\/"""��v�_SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT.?AU_SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT@@
"��
"��>
�Enabled��
�Reserved�
"AsULONG��v�_SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT.?AU_SYSTEM_INTERRUPT_STEERING_INFORMATION_OUTPUT@@��
Z�_WIM_PROVIDER_INTEGRITY_STATUS.?AU_WIM_PROVIDER_INTEGRITY_STATUS@@��v
 IntegrityComplete
 IntegrityRunning�
#IntegrityAvailable���
#IntegrityRequiredZ�_WIM_PROVIDER_INTEGRITY_STATUS.?AU_WIM_PROVIDER_INTEGRITY_STATUS@@���UV"j�_PLUGPLAY_CONTROL_TARGET_RELATION_DATA.?AU_PLUGPLAY_CONTROL_TARGET_RELATION_DATA@@��j
UserFileHandle���
Status���
"DeviceInstanceLen
qDeviceInstance���j�_PLUGPLAY_CONTROL_TARGET_RELATION_DATA.?AU_PLUGPLAY_CONTROL_TARGET_RELATION_DATA@@�����V�_TXFS_TRANSACTION_ACTIVE_INFO.?AU_TXFS_TRANSACTION_ACTIVE_INFO@@*
 TransactionsActiveAtSnapshot�V�_TXFS_TRANSACTION_ACTIVE_INFO.?AU_TXFS_TRANSACTION_ACTIVE_INFO@@�U&��_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATION.?AU_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATION@@��j�_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE.?AU_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE@@
�Z
!NumberOfRanges���
!Reserved�
"Reserved2
�Ranges����_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATION.?AU_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGES_INFORMATION@@���}�V�_TRACE_ENABLE_FLAG_EXTENSION.?AU_TRACE_ENABLE_FLAG_EXTENSION@@��
�:
!Offset���
 Length���
 Flag�V�_TRACE_ENABLE_FLAG_EXTENSION.?AU_TRACE_ENABLE_FLAG_EXTENSION@@���0F�_HEAP_SUBSEGMENT_INIT.?AU_HEAP_SUBSEGMENT_INIT@@
��
8Header���
 HeapHandle���
(SubSegment���
#0BlockSize
#8BlockCount���
"@AffinityIndexF�D_HEAP_SUBSEGMENT_INIT.?AU_HEAP_SUBSEGMENT_INIT@@�0WfFirmwareTypeUnknown��FirmwareTypeBios�FirmwareTypeUefi�FirmwareTypeMax��6t�_FIRMWARE_TYPE.?AW4_FIRMWARE_TYPE@@����|@J�_TRANSACTION_LIST_ENTRY.?AU_TRANSACTION_LIST_ENTRY@@
�
�UOW��J�_TRANSACTION_LIST_ENTRY.?AU_TRANSACTION_LIST_ENTRY@@��ib�_TRACE_PERIODIC_CAPTURE_STATE_INFO.?AU_TRACE_PERIODIC_CAPTURE_STATE_INFO@@��
�Z
"CaptureStateFrequencyInSeconds���
!ProviderCount
!Reserved�b�_TRACE_PERIODIC_CAPTURE_STATE_INFO.?AU_TRACE_PERIODIC_CAPTURE_STATE_INFO@@�����
R�_REQUEST_RAW_ENCRYPTED_DATA.?AU_REQUEST_RAW_ENCRYPTED_DATA@@.
FileOffset���
"Length���R�_REQUEST_RAW_ENCRYPTED_DATA.?AU_REQUEST_RAW_ENCRYPTED_DATA@@�UN�_FILE_FS_SIZE_INFORMATION.?AU_FILE_FS_SIZE_INFORMATION@@�
~TotalAllocationUnits�
~AvailableAllocationUnits�
"SectorsPerAllocationUnit�
"BytesPerSector���N�_FILE_FS_SIZE_INFORMATION.?AU_FILE_FS_SIZE_INFORMATION@@�UF�RPC_IMPORT_CONTEXT_P.?AURPC_IMPORT_CONTEXT_P@@��B�_RPC_BINDING_VECTOR.?AU_RPC_BINDING_VECTOR@@
�J
LookupContext
ProposedHandle���
�Bindings�F�RPC_IMPORT_CONTEXT_P.?AURPC_IMPORT_CONTEXT_P@@��*onecore\external\sdk\inc\rpcnsip.h���!j�_PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA.?AU_PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA@@
�^
�DeviceInstance���
Operation
"BufferLength�
qBuffer���j� _PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA.?AU_PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA@@���r�_MEMORY_PARTITION_PAGE_COMBINE_INFORMATION.?AU_MEMORY_PARTITION_PAGE_COMBINE_INFORMATION@@��J
StopHandle���
"Flags
#TotalNumberOfPages���r�_MEMORY_PARTITION_PAGE_COMBINE_INFORMATION.?AU_MEMORY_PARTITION_PAGE_COMBINE_INFORMATION@@���B�>�tagWNODE_ALL_DATA.?AUtagWNODE_ALL_DATA@@R�OFFSETINSTANCEDATAANDLENGTH.?AUOFFSETINSTANCEDATAANDLENGTH@@�#�
qWnodeHeader��
"0DataBlockOffset��
"4InstanceCount
"8OffsetInstanceNameOffsets
"<FixedInstanceSize
�<OffsetInstanceDataAndLength��>HtagWNODE_ALL_DATA.?AUtagWNODE_ALL_DATA@@t�n�_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUT.?AU_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUT@@��J
"ExtentCount��
"TotalExtentCount�
�Extents��n_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUT.?AU_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_OUTPUT@@��U�*�SharedVirtualDiskHandleStateNone�SharedVirtualDiskHandleStateFileShared���SharedVirtualDiskHandleStateHandleShared�Rt_SharedVirtualDiskHandleState.?AW4_SharedVirtualDiskHandleState@@�U�':�_NDR_EXPR_DESC.?AU_NDR_EXPR_DESC@@��
!��

 ��

.
pOffset��
pFormatExpr��:_NDR_EXPR_DESC.?AU_NDR_EXPR_DESC@@����V�_RTL_WORK_ON_BEHALF_TICKET_EX.?AU_RTL_WORK_ON_BEHALF_TICKET_EX@@

"��
"��f
&Ticket���
"Flags
CurrentThread
Reserved1
"Reserved2V_RTL_WORK_ON_BEHALF_TICKET_EX.?AU_RTL_WORK_ON_BEHALF_TICKET_EX@@��SysDbgQueryModuleInformation�SysDbgQueryTraceInformation��SysDbgSetTracepoint��SysDbgSetSpecialCall�SysDbgClearSpecialCalls��SysDbgQuerySpecialCalls��SysDbgBreakPoint�SysDbgQueryVersion���SysDbgReadVirtual	SysDbgWriteVirtual���
SysDbgReadPhysical���SysDbgWritePhysical��SysDbgReadControlSpace���
SysDbgWriteControlSpace��SysDbgReadIoSpaceSysDbgWriteIoSpace���SysDbgReadMsrSysDbgWriteMsr���SysDbgReadBusDataSysDbgWriteBusData���SysDbgCheckLowMemory�SysDbgEnableKernelDebugger���SysDbgDisableKernelDebugger��SysDbgGetAutoKdEnableSysDbgSetAutoKdEnableSysDbgGetPrintBufferSize�SysDbgSetPrintBufferSize�SysDbgGetKdUmExceptionEnable�SysDbgSetKdUmExceptionEnable�SysDbgGetTriageDump��SysDbgGetKdBlockEnable���SysDbgSetKdBlockEnable��� SysDbgRegisterForUmBreakInfo�!SysDbgGetUmBreakPid��"SysDbgClearUmBreakPid#SysDbgGetUmAttachPid�$SysDbgClearUmAttachPid���%SysDbgGetLiveKernelDump��&SysDbgKdPullRemoteFile���6't_SYSDBG_COMMAND.?AW4_SYSDBG_COMMAND@@���N�_ALPC_WORK_ON_BEHALF_ATTR.?AU_ALPC_WORK_ON_BEHALF_ATTR@@
&Ticket���N_ALPC_WORK_ON_BEHALF_ATTR.?AU_ALPC_WORK_ON_BEHALF_ATTR@@�q
�
��
tmHeight�
tmAscent�
tmDescent
tmInternalLeading
tmExternalLeading
tmAveCharWidth���
tmMaxCharWidth���
tmWeight�
 tmOverhang���
$tmDigitizedAspectX���
(tmDigitizedAspectY���
 ,tmFirstChar��
 -tmLastChar���
 .tmDefaultChar
 /tmBreakChar��
 0tmItalic�
 1tmUnderlined�
 2tmStruckOut��
 3tmPitchAndFamily�
 4tmCharSet:"8tagTEXTMETRICA.?AUtagTEXTMETRICA@@��#S�Z�_CM_PARTIAL_RESOURCE_DESCRIPTOR.?AU_CM_PARTIAL_RESOURCE_DESCRIPTOR@@
%&
~Start
"Length���:'<anonymous-tag>.?AU<anonymous-tag>@@(��&
~Start
"Length���:*<anonymous-tag>.?AU<anonymous-tag>@@+��:
"Level
"Vector���
#Affinity�:-<anonymous-tag>.?AU<anonymous-tag>@@.��V
!Reserved�
!MessageCount�
"Vector���
#Affinity�:0<anonymous-tag>.?AU<anonymous-tag>@@1��:
"Level
"Vector���
#Affinity�:3<anonymous-tag>.?AU<anonymous-tag>@@4��*
1Raw��
4Translated���:6<anonymous-tag>.?AU<anonymous-tag>@@7��&
~Start
"Length���:9<anonymous-tag>.?AU<anonymous-tag>@@:��:
"Channel��
"Port�
"Reserved1:<<anonymous-tag>.?AU<anonymous-tag>@@=���
"Channel��
"RequestLine��
 TransferWidth
 	Reserved1
 
Reserved2
 Reserved3:?<anonymous-tag>.?AU<anonymous-tag>@@@�
�Data�:B<anonymous-tag>.?AU<anonymous-tag>@@C�:
"Start
"Length���
"Reserved�:E<anonymous-tag>.?AU<anonymous-tag>@@F�>
"DataSize�
"Reserved1
"Reserved2:H<anonymous-tag>.?AU<anonymous-tag>@@I�$&
~Start
"Length40�:K<anonymous-tag>.?AU<anonymous-tag>@@L�,&
~Start
"Length48�:N<anonymous-tag>.?AU<anonymous-tag>@@O�1&
~Start
"Length64�:Q<anonymous-tag>.?AU<anonymous-tag>@@R�6v
 Class
 Type�
 Reserved1
 Reserved2
"IdLowPart
"IdHighPart���:T<anonymous-tag>.?AU<anonymous-tag>@@U�;*
(Generic��
+Port�
.Interrupt
7MessageInterrupt�
:Memory���
=Dma��
@DmaV3
CDevicePrivate
FBusNumber
IDeviceSpecificData���
LMemory40�
OMemory48�
RMemory64�
UConnection���2W<anonymous-tag>.?AT<anonymous-tag>@@X��J
 Type�
 ShareDisposition�
!Flags
XuZZ_CM_PARTIAL_RESOURCE_DESCRIPTOR.?AU_CM_PARTIAL_RESOURCE_DESCRIPTOR@@[��Z�_MEMORY_COMBINE_INFORMATION_EX.?AU_MEMORY_COMBINE_INFORMATION_EX@@��
]>
Handle���
#PagesCombined
"FlagsZ__MEMORY_COMBINE_INFORMATION_EX.?AU_MEMORY_COMBINE_INFORMATION_EX@@��`��	B�_ENERGY_STATE_DURATION.?AT_ENERGY_STATE_DURATION@@��
"��
"��V
#Value
"LastChangeTime���
cDuration�
dIsInStateBe_ENERGY_STATE_DURATION.?AT_ENERGY_STATE_DURATION@@��fb�B�_IMAGE_THUNK_DATA64.?AU_IMAGE_THUNK_DATA64@@
h^
#ForwarderString��
#Function�
#Ordinal��
#AddressOfData2j<anonymous-tag>.?AT<anonymous-tag>@@kf�
ku1���Bm_IMAGE_THUNK_DATA64.?AU_IMAGE_THUNK_DATA64@@nf�>�tagMULTIKEYHELPA.?AUtagMULTIKEYHELPA@@��
pB
"mkSize���
pmkKeylist
�szKeyphrase��>rtagMULTIKEYHELPA.?AUtagMULTIKEYHELPA@@��sL�/
�
J
axMinValue���
axMaxValue���
�axAxisName���6wtagAXISINFOA.?AUtagAXISINFOA@@��xS �B�_KCONTINUE_ARGUMENT.?AU_KCONTINUE_ARGUMENT@@zKCONTINUE_UNWIND�KCONTINUE_RESUME�KCONTINUE_LONGJUMP���KCONTINUE_SETKCONTINUE_LAST���6t|_KCONTINUE_TYPE.?AW4_KCONTINUE_TYPE@@�}g�F
}ContinueType�
"ContinueFlags
uReserved�B_KCONTINUE_ARGUMENT.?AU_KCONTINUE_ARGUMENT@@�g
lj�_SYSTEM_PROCESSOR_FEATURES_INFORMATION.?AU_SYSTEM_PROCESSOR_FEATURES_INFORMATION@@��##�6
#ProcessorFeatureBits�
�Reserved�j� _SYSTEM_PROCESSOR_FEATURES_INFORMATION.?AU_SYSTEM_PROCESSOR_FEATURES_INFORMATION@@����<V�_SERVERSILO_INIT_INFORMATION.?AU_SERVERSILO_INIT_INFORMATION@@��
�:
DeleteEvent��
 IsDownlevelContainer�V�_SERVERSILO_INIT_INFORMATION.?AU_SERVERSILO_INIT_INFORMATION@@���}�^�_PERFINFO_DPC_ENQUEUE_INFORMATION.?AU_PERFINFO_DPC_ENQUEUE_INFORMATION@@�
#Key��
DpcQueueDepth
"DpcCount�
"TargetProcessorIndex�
 Importance���
�Reserved�^�_PERFINFO_DPC_ENQUEUE_INFORMATION.?AU_PERFINFO_DPC_ENQUEUE_INFORMATION@@�0�V�_ETW_HEAP_EVENT_RUNDOWN_RANGE.?AU_ETW_HEAP_EVENT_RUNDOWN_RANGE@@&
Address��
#Size�V�_ETW_HEAP_EVENT_RUNDOWN_RANGE.?AU_ETW_HEAP_EVENT_RUNDOWN_RANGE@@�0�
4:�_RTL_HEAP_ENTRY.?AU_RTL_HEAP_ENTRY@@
�&
#Settable�
"Tag��:�<anonymous-tag>.?AU<anonymous-tag>@@��2
#CommittedSize
FirstBlock���:�<anonymous-tag>.?AU<anonymous-tag>@@��"
�s1���
�s2���2�<anonymous-tag>.?AT<anonymous-tag>@@��R
#Size�
!Flags
!
AllocatorBackTraceIndex��
�u:� _RTL_HEAP_ENTRY.?AU_RTL_HEAP_ENTRY@@��
BSystemNetRateControlSet��SystemNetRateControlQuotaRt�_SYSTEM_NET_RATE_CONTROL_TYPE.?AW4_SYSTEM_NET_RATE_CONTROL_TYPE@@��|�
�N�_TEB_ACTIVE_FRAME_CONTEXT.?AU_TEB_ACTIVE_FRAME_CONTEXT@@
���
�:
"Flags
�Previous�
�Context��>�_TEB_ACTIVE_FRAME.?AU_TEB_ACTIVE_FRAME@@��
���
�N�_ETW_WNF_EVENT_SUBSCRIBE.?AU_ETW_WNF_EVENT_SUBSCRIBE@@��
8Header���
~ StateName
(Subscription�
0NameSub��
8Callback�
"@RefCount�
"DDeliveryFlagsN�H_ETW_WNF_EVENT_SUBSCRIBE.?AU_ETW_WNF_EVENT_SUBSCRIBE@@���0_:�_MIDL_STUB_DESC.?AU_MIDL_STUB_DESC@@
#�
�
J�__GENERIC_BINDING_INFO.?AU__GENERIC_BINDING_INFO@@��
�V
�pAutoHandle��
�pPrimitiveHandle�
�pGenericBindingInfo��2�<anonymous-tag>.?AT<anonymous-tag>@@��
�
�
i��
�B�_MIDL_STUB_MESSAGE.?AU_MIDL_STUB_MESSAGE@@��
�
��
�
�J�_XMIT_ROUTINE_QUINTUPLE.?AU_XMIT_ROUTINE_QUINTUPLE@@
���
�

B�_MALLOC_FREE_STRUCT.?AU_MALLOC_FREE_STRUCT@@
�B�_COMM_FAULT_OFFSETS.?AU_COMM_FAULT_OFFSETS@@
���
�
��
��
�
�>�_NDR_CS_ROUTINES.?AU_NDR_CS_ROUTINES@@��
���
�

��
�&
RpcInterfaceInformation��
�pfnAllocate��
�pfnFree��
�IMPLICIT_HANDLE_INFO�
� apfnNdrRundownRoutines���
�(aGenericBindingRoutinePairs��
�0apfnExprEval�
�8aXmitQuintuple���
�@pFormatTypes�
tHfCheckBounds�
"LVersion��
�PpMallocFreeStruct
XMIDLVersion��
�`CommFaultOffsets�
�haUserMarshalQuadruple
�pNotifyRoutineTable���
#xmFlags���
��CsRoutineTables��
�ProxyServerInfo��
��pExprInfo:��_MIDL_STUB_DESC.?AU_MIDL_STUB_DESC@@����TransactionBasicInformation��TransactionPropertiesInformation�TransactionEnlistmentInformation�TransactionSuperiorEnlistmentInformation�TransactionBindInformation���TransactionDTCPrivateInformation�Vt�_TRANSACTION_INFORMATION_CLASS.?AW4_TRANSACTION_INFORMATION_CLASS@@�����,�WdInfoTimeoutValue���WdInfoResetTimer�WdInfoStopTimer��WdInfoStartTimer�WdInfoTriggerAction��WdInfoState��WdInfoTriggerReset���WdInfoNopWdInfoGeneratedLastReset�	WdInfoInvalidN
t�_WATCHDOG_INFORMATION_CLASS.?AW4_WATCHDOG_INFORMATION_CLASS@@���@

"��
"��N
"Flags
�DisableExtensionPoints���
�ReservedFlags��_PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY.?AU_PROCESS_MITIGATION_EXTENSION_POINT_DISABLE_POLICY@@���}nJ�_FILE_LINKS_INFORMATION.?AU_FILE_LINKS_INFORMATION@@V�_FILE_LINK_ENTRY_INFORMATION.?AU_FILE_LINK_ENTRY_INFORMATION@@��F
"BytesNeeded��
"EntriesReturned��
�EntryJ� _FILE_LINKS_INFORMATION.?AU_FILE_LINKS_INFORMATION@@�U�
��
ExitStatus���
uPad1�
#PebBaseAddress���
#AffinityMask�
BasePriority�
uPad2�
# UniqueProcessId��
#(InheritedFromUniqueProcessId�V�0_PROCESS_BASIC_INFORMATION64.?AU_PROCESS_BASIC_INFORMATION64@@���b�>�_SYSTEM_AUDIT_ACE.?AU_SYSTEM_AUDIT_ACE@@:
�Header���
"Mask�
"SidStart�>�_SYSTEM_AUDIT_ACE.?AU_SYSTEM_AUDIT_ACE@@�E�6�tagBITMAPINFO.?AUtagBITMAPINFO@@2�tagRGBQUAD.?AUtagRGBQUAD@@���#�*
�bmiHeader
�(bmiColors6�,tagBITMAPINFO.?AUtagBITMAPINFO@@�S�ZLocationTypeRegistry�LocationTypeFileSystem���LocationTypeMaximum��Bt�_STATE_LOCATION_TYPE.?AW4_STATE_LOCATION_TYPE@@����$($:�_MCA_EXCEPTION.?AU_MCA_EXCEPTION@@��2HAL_MCE_RECORD���HAL_MCA_RECORD���>tMCA_EXCEPTION_TYPE.?AW4MCA_EXCEPTION_TYPE@@���&onecore\external\ddk\inc\mce.h�$ #�*�_MCI_STATS.?AT_MCI_STATS@@��&�_MCI_ADDR.?AT_MCI_ADDR@@f
 BankNumber���
Reserved2
Status���
Address��
#Misc�: <anonymous-tag>.?AU<anonymous-tag>@@�&
#Address��
#Type�:
<anonymous-tag>.?AU<anonymous-tag>@@�"
Mca��
Mce��2
 <anonymous-tag>.?AT<anonymous-tag>@@�##��
"VersionNumber
ExceptionType
~TimeStamp
"ProcessorNumber��
"Reserved1
u
"8ExtCnt���
"<Reserved3
@ExtReg���:	_MCA_EXCEPTION.?AU_MCA_EXCEPTION@@����EtwNotificationTypeNoReply���EtwNotificationTypeLegacyEnable��EtwNotificationTypeEnableEtwNotificationTypePrivateLogger�EtwNotificationTypePerflib���EtwNotificationTypeAudio�EtwNotificationTypeSession���EtwNotificationTypeReserved��	EtwNotificationTypeCredentialUI��
EtwNotificationTypeInProcSession�EtwNotificationTypeFilteredPrivateLogger�EtwNotificationTypeMax���Ft_ETW_NOTIFICATION_TYPE.?AW4_ETW_NOTIFICATION_TYPE@@���*V�_SYSTEM_PROCESSOR_INFORMATION.?AU_SYSTEM_PROCESSOR_INFORMATION@@�
!ProcessorArchitecture
!ProcessorLevel���
!ProcessorRevision
!MaximumProcessors
"ProcessorFeatureBits�V_SYSTEM_PROCESSOR_INFORMATION.?AU_SYSTEM_PROCESSOR_INFORMATION@@��
�V�_JOBOBJECT_ENERGY_TRACKING_STATE.?AT_JOBOBJECT_ENERGY_TRACKING_STATE@@��B
#Value
"UpdateMask���
"DesiredState�V_JOBOBJECT_ENERGY_TRACKING_STATE.?AT_JOBOBJECT_ENERGY_TRACKING_STATE@@��bGf�_TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1.?AU_TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1@@
 f
�pInt64���
�pUint64��
�ppString�
�pFqbn
�pOctetString�2"<anonymous-tag>.?AT<anonymous-tag>@@#^v
"Name�
!ValueType
!Reserved�
"Flags
"ValueCount���
#Values���f%_TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1.?AU_TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1@@&^�b�_PERFINFO_FILENAME_SAME_INFORMATION.?AU_PERFINFO_FILENAME_SAME_INFORMATION@@
(*
OldFile��
NewFile��b*_PERFINFO_FILENAME_SAME_INFORMATION.?AU_PERFINFO_FILENAME_SAME_INFORMATION@@+0gj�_MEMORY_PARTITION_NODE_PAGE_INFORMATION.?AU_MEMORY_PARTITION_NODE_PAGE_INFORMATION@@
#TotalPageCount���
#SmallFreePageCount���
#SmallZeroPageCount���
#MediumFreePageCount��
# MediumZeroPageCount��
#(LargeFreePageCount���
#0LargeZeroPageCount���
#8HugeFreePageCount
#@HugeZeroPageCountj	.H_MEMORY_PARTITION_NODE_PAGE_INFORMATION.?AU_MEMORY_PARTITION_NODE_PAGE_INFORMATION@@/B�


=v�_TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT@@��*
�TmIdentity���
"Flagsv4_TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT@@��5��6�_PORT_MESSAGE.?AU_PORT_MESSAGE@@
72
DataLength���
TotalLength��:9<anonymous-tag>.?AU<anonymous-tag>@@:�<&
:s1���
"Length���2<<anonymous-tag>.?AT<anonymous-tag>@@=�;.
Type�
DataInfoOffset���:?<anonymous-tag>.?AU<anonymous-tag>@@@�C&
@s2���
"ZeroInit�2B<anonymous-tag>.?AT<anonymous-tag>@@C�B�
=u1���
Cu2���
�ClientId�
ADoNotUseThisField
"MessageId
# ClientViewSize���
" CallbackId���6E(_PORT_MESSAGE.?AU_PORT_MESSAGE@@F�:f�_PERFINFO_CLOCK_INTERRUPT_INFORMATION.?AU_PERFINFO_CLOCK_INTERRUPT_INFORMATION@@*
#InterruptTime
FlagsfI_PERFINFO_CLOCK_INTERRUPT_INFORMATION.?AU_PERFINFO_CLOCK_INTERRUPT_INFORMATION@@J0�>�tagMOUSEMOVEPOINT.?AUtagMOUSEMOVEPOINT@@B
tx
ty
"time�
#dwExtraInfo��>MtagMOUSEMOVEPOINT.?AUtagMOUSEMOVEPOINT@@NL2
�
�v�_MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION.?AU_MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION@@��
"��
"��B
SState
TReserved�
"AllInformation���vU_MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION.?AU_MEMORY_PHYSICAL_CONTIGUITY_UNIT_INFORMATION@@��VB�f�_SYSTEM_BOOT_ENVIRONMENT_INFORMATION.?AU_SYSTEM_BOOT_ENVIRONMENT_INFORMATION@@��
#��
#��
#��
#��
#��
#��
#��
#��J
�BootIdentifier���
�FirmwareType�
#BootFlags
YDbgMenuOsSelection���
ZDbgHiberBoot�
[DbgSoftBoot��
\DbgMeasuredLaunch
]DbgMeasuredLaunchCapable�
^DbgSystemHiveReplace�
_DbgMeasuredLaunchSmmProtections��
`DbgMeasuredLaunchSmmLevelfa _SYSTEM_BOOT_ENVIRONMENT_INFORMATION.?AU_SYSTEM_BOOT_ENVIRONMENT_INFORMATION@@��b�
Z�_DEDUP_CHUNK_INFORMATION_HASH32.?AU_DEDUP_CHUNK_INFORMATION_HASH32@@^
"ChunkFlags���
ChunkOffsetInFile
ChunkSize
�HashVal��Ze8_DEDUP_CHUNK_INFORMATION_HASH32.?AU_DEDUP_CHUNK_INFORMATION_HASH32@@fUZ�_SYSTEM_SYSTEM_DISK_INFORMATION.?AU_SYSTEM_SYSTEM_DISK_INFORMATION@@
�SystemDisk���Zi_SYSTEM_SYSTEM_DISK_INFORMATION.?AU_SYSTEM_SYSTEM_DISK_INFORMATION@@j�]
r�_SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION.?AU_SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION@@��2
"ProcessorCount���
�Offsets��rm_SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION.?AU_SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION@@��n�Z�_PERFINFO_INTERRUPT_INFORMATION.?AU_PERFINFO_INTERRUPT_INFORMATION@@
pv
#InitialTime��
ServiceRoutine���
 ReturnValue��
!Vector���
 Reserved�Zr_PERFINFO_INTERRUPT_INFORMATION.?AU_PERFINFO_INTERRUPT_INFORMATION@@s0�:�tagHANDLETABLE.?AUtagHANDLETABLE@@��#�
vobjectHandle�:wtagHANDLETABLE.?AUtagHANDLETABLE@@��xS���tzJ�tagCOLORCORRECTPALETTE.?AUtagCOLORCORRECTPALETTE@@��j
Pemr��
"ihPalette
"nFirstEntry��
"nPalEntries��
"nReservedJ}tagCOLORCORRECTPALETTE.?AUtagCOLORCORRECTPALETTE@@��~S��AlpcBasicInformation�AlpcPortInformation��AlpcAssociateCompletionPortInformation���AlpcConnectedSIDInformation��AlpcServerInformationAlpcMessageZoneInformation���AlpcRegisterCompletionListInformationAlpcUnregisterCompletionListInformation��AlpcAdjustCompletionListConcurrencyCountInformation��	AlpcRegisterCallbackInformation��
AlpcCompletionListRundownInformation�AlpcWaitForPortReferencesAlpcServerSessionInformation�R
t�_ALPC_PORT_INFORMATION_CLASS.?AW4_ALPC_PORT_INFORMATION_CLASS@@�����Z�_PERFINFO_PPM_IDLE_EXIT_LATENCY.?AU_PERFINFO_PPM_IDLE_EXIT_LATENCY@@v
"Flags
"PlatformState
"ProcessorState���
"ReturnLatency
"TotalLatency�Z�_PERFINFO_PPM_IDLE_EXIT_LATENCY.?AU_PERFINFO_PPM_IDLE_EXIT_LATENCY@@�0GBMarshalDirectionMarshal��MarshalDirectionUnmarshalbt�_LRPC_SYSTEM_HANDLE_MARSHAL_DIRECTION.?AW4_LRPC_SYSTEM_HANDLE_MARSHAL_DIRECTION@@����B�tagEMRPOLYPOLYLINE.?AUtagEMRPOLYPOLYLINE@@��
�r
Pemr��
,rclBounds
"nPolys���
"cptl�
7 aPolyCounts��
�$aptl�B�,tagEMRPOLYPOLYLINE.?AUtagEMRPOLYPOLYLINE@@���Sc��_SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION.?AU_SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION@@��
�~
"ExtentCount��
"ValidStructureSize���
"NextExtentIndex��
"ExtentRestart
"CycleCount���
"TimeoutCount�
#CycleTime
# CycleTimeMax�
#(ExtentTime���
"0ExtentTimeIndex��
"4ExtentTimeMaxIndex���
#8ExtentTimeMax
#@HyperFlushTimeMax
#HTranslateVaTimeMax���
#PDebugExemptionCount��
#XTbHitCount���
#`TbMissCount��
#hVinaPendingYield�
#pHashCycles���
"xHistogramOffset��
"|HistogramBuckets�
"�HistogramShift���
"�Reserved1
#�PageNotPresentCount����_SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION.?AU_SYSTEM_SECURE_KERNEL_HYPERGUARD_PROFILE_INFORMATION@@�����
��MemoryCaptureAccessedBitsMemoryCaptureAndResetAccessedBitsMemoryEmptyWorkingSets���MemoryFlushModifiedList��MemoryPurgeStandbyList���MemoryPurgeLowPriorityStandbyListMemoryCommandMax�Nt�_SYSTEM_MEMORY_LIST_COMMAND.?AW4_SYSTEM_MEMORY_LIST_COMMAND@@����R�_SYSTEM_VA_LIST_INFORMATION.?AU_SYSTEM_VA_LIST_INFORMATION@@j
#VirtualSize��
#VirtualPeak��
#VirtualLimit�
#AllocationFailures���R� _SYSTEM_VA_LIST_INFORMATION.?AU_SYSTEM_VA_LIST_INFORMATION@@���
N�PROCESSOR_IDLESTATE_INFO.?AUPROCESSOR_IDLESTATE_INFO@@��Z
"TimeCheck
 DemotePercent
 PromotePercent���
�SpareN�PROCESSOR_IDLESTATE_INFO.?AUPROCESSOR_IDLESTATE_INFO@@���F3>�_LUNICODE_STRING.?AU_LUNICODE_STRING@@��
�B
#Length���
#MaximumLength
qBuffer���>�_LUNICODE_STRING.?AU_LUNICODE_STRING@@���\
F�_SERVICE_TRIGGER_INFO.?AU_SERVICE_TRIGGER_INFO@@>�_SERVICE_TRIGGER.?AU_SERVICE_TRIGGER@@��
�>
"cTriggers
�pTriggers
 pReservedF�_SERVICE_TRIGGER_INFO.?AU_SERVICE_TRIGGER_INFO@@�m�J�_KEY_TRUST_INFORMATION.?AU_KEY_TRUST_INFORMATION@@��
"��
"��.
�TrustedKey���
�Reserved�J�_KEY_TRUST_INFORMATION.?AU_KEY_TRUST_INFORMATION@@����~>�_FILE_REGION_INFO.?AU_FILE_REGION_INFO@@
�R
FileOffset���
Length���
"Usage
"Reserved�>�_FILE_REGION_INFO.?AU_FILE_REGION_INFO@@�UiZ�_IMAGE_DYNAMIC_RELOCATION32_V2.?AU_IMAGE_DYNAMIC_RELOCATION32_V2@@��n
"HeaderSize���
"FixupInfoSize
"Symbol���
"SymbolGroup��
"FlagsZ�_IMAGE_DYNAMIC_RELOCATION32_V2.?AU_IMAGE_DYNAMIC_RELOCATION32_V2@@���f���RtlResTypePhysicalMemoryTier�RtlResTypeDiskSpaceTier��RtlResTypeDiskSpeedTier��RtlResTypeDiskWriteConstraintTierRtlResTypeMaxFt�_RTL_RESOURCE_CATEGORY.?AW4_RTL_RESOURCE_CATEGORY@@�����;
 �Z�_IO_RESOURCE_REQUIREMENTS_LIST.?AU_IO_RESOURCE_REQUIREMENTS_LIST@@��b��InterfaceTypeUndefined��Internal�Isa��Eisa�MicroChannel�TurboChannel�PCIBus���VMEBus���NuBusPCMCIABus	CBus�
MPIBus���MPSABus��ProcessorInternal
InternalPowerBus�PNPISABusPNPBus���Vmcs�ACPIBus��MaximumInterfaceType�6t�_INTERFACE_TYPE.?AW4_INTERFACE_TYPE@@��U�+>�_IO_RESOURCE_LIST.?AU_IO_RESOURCE_LIST@@�#(�
"ListSize�
�InterfaceType
"BusNumber
"SlotNumber���
�Reserved�
"AlternativeLists�
� List�Z�H_IO_RESOURCE_REQUIREMENTS_LIST.?AU_IO_RESOURCE_REQUIREMENTS_LIST@@����j�_SYSTEM_SPECULATION_CONTROL_INFORMATION.?AU_SYSTEM_SPECULATION_CONTROL_INFORMATION@@
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"��
"
��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
�BpbEnabled���
�BpbDisabledSystemPolicy��
�BpbDisabledNoHardwareSupport�
�SpecCtrlEnumerated���
�SpecCmdEnumerated
�IbrsPresent��
�StibpPresent�
�SmepPresent��
�SpeculativeStoreBypassDisableAvailable���
�SpeculativeStoreBypassDisableSupported���
�SpeculativeStoreBypassDisabledSystemWide�
�SpeculativeStoreBypassDisabledKernel�
�SpeculativeStoreBypassDisableRequired
�BpbDisabledKernelToUser��
�SpecCtrlRetpolineEnabled�
�SpecCtrlImportOptimizationEnabled
�EnhancedIbrs�
�HvL1tfStatusAvailable
�HvL1tfProcessorNotAffected���
�HvL1tfMigitationEnabled��
�HvL1tfMigitationNotEnabled_Hardware��
�HvL1tfMigitationNotEnabled_LoadOption
�HvL1tfMigitationNotEnabled_CoreScheduler�
�EnhancedIbrsReported�
�MdsHardwareProtected�
�MbClearEnabled���
�MbClearReported��
�Reserved�:�<anonymous-tag>.?AU<anonymous-tag>@@���&
�SpeculationControlFlags��j�_SYSTEM_SPECULATION_CONTROL_INFORMATION.?AU_SYSTEM_SPECULATION_CONTROL_INFORMATION@@���Z�_REFS_SMR_VOLUME_GC_PARAMETERS.?AU_REFS_SMR_VOLUME_GC_PARAMETERS@@��ZSmrGcMethodCompactionSmrGcMethodCompression���SmrGcMethodRotation��Nt�_REFS_SMR_VOLUME_GC_METHOD.?AW4_REFS_SMR_VOLUME_GC_METHOD@@����U� ##@�
"Version��
"Flags
TAction���
�Method���
"IoGranularity
"CompressionFormat
�Unused���Z�X_REFS_SMR_VOLUME_GC_PARAMETERS.?AU_REFS_SMR_VOLUME_GC_PARAMETERS@@���U� ^�_ETW_COVERAGE_SAMPLER_QUERY_INFO.?AU_ETW_COVERAGE_SAMPLER_QUERY_INFO@@��
�n�_EVENT_TRACE_COVERAGE_SAMPLER_INFORMATION.?AU_EVENT_TRACE_COVERAGE_SAMPLER_INFORMATION@@
"��R�_ETW_COVERAGE_SAMPLER_DATA.?AU_ETW_COVERAGE_SAMPLER_DATA@@��F
�Common���
�EmptyStackCache��
�Header���^�@_ETW_COVERAGE_SAMPLER_QUERY_INFO.?AU_ETW_COVERAGE_SAMPLER_QUERY_INFO@@���^f�_PROCESS_HANDLE_SNAPSHOT_INFORMATION.?AU_PROCESS_HANDLE_SNAPSHOT_INFORMATION@@��^�_PROCESS_HANDLE_TABLE_ENTRY_INFO.?AU_PROCESS_HANDLE_TABLE_ENTRY_INFO@@���#(�F
#NumberOfHandles��
#Reserved�
�Handles��f�8_PROCESS_HANDLE_SNAPSHOT_INFORMATION.?AU_PROCESS_HANDLE_SNAPSHOT_INFORMATION@@�� b�FSymbolicLinkGlobalInformationSymbolicLinkAccessMask���Jt _SYMBOLIC_LINK_INFO_CLASS.?AW4_SYMBOLIC_LINK_INFO_CLASS@@�*onecore\internal\sdk\inc\ntobapi.h�  �DEBUG_CONTROL_SPACE_PCR��DEBUG_CONTROL_SPACE_PRCB�DEBUG_CONTROL_SPACE_KSPECIAL�DEBUG_CONTROL_SPACE_THREAD���DEBUG_CONTROL_SPACE_MAXIMUM��Jt _DEBUG_CONTROL_SPACE_ITEM.?AW4_DEBUG_CONTROL_SPACE_ITEM@@� S�ORIENTATION_PREFERENCE_NONE��ORIENTATION_PREFERENCE_LANDSCAPE�ORIENTATION_PREFERENCE_PORTRAIT��ORIENTATION_PREFERENCE_LANDSCAPE_FLIPPED�ORIENTATION_PREFERENCE_PORTRAIT_FLIPPED��Ft	 ORIENTATION_PREFERENCE.?AW4ORIENTATION_PREFERENCE@@���
 L�=
\2�_SYSTEMTIME.?AU_SYSTEMTIME@@�
Bias�
�StandardName�

 DStandardDate�
TStandardBias�
�XDaylightName�

 �DaylightDate�
�DaylightBias�J �_TIME_ZONE_INFORMATION.?AU_TIME_ZONE_INFORMATION@@��6onecore\external\sdk\inc\minwin\timezoneapi.h��  #Z�_PROCESSOR_PROFILE_CONTROL_AREA.?AU_PROCESSOR_PROFILE_CONTROL_AREA@@
 B�_PEBS_DS_SAVE_AREA.?AU_PEBS_DS_SAVE_AREA@@��
 PebsDsSaveArea���Z �_PROCESSOR_PROFILE_CONTROL_AREA.?AU_PROCESSOR_PROFILE_CONTROL_AREA@@ ��J�_FILE_MODE_INFORMATION.?AU_FILE_MODE_INFORMATION@@��
"Mode�J _FILE_MODE_INFORMATION.?AU_FILE_MODE_INFORMATION@@�� U�f�_ETW_TP_EVENT_TIMER_EXPIRATION_BEGIN.?AU_ETW_TP_EVENT_TIMER_EXPIRATION_BEGIN@@��
 *
8Header���
 SubQueue�f (_ETW_TP_EVENT_TIMER_EXPIRATION_BEGIN.?AU_ETW_TP_EVENT_TIMER_EXPIRATION_BEGIN@@�� 06
q! 
" 6NotificationTimerSynchronizationTimer�.t$ _TIMER_TYPE.?AW4_TIMER_TYPE@@�% �:�_SCONTEXT_QUEUE.?AU_SCONTEXT_QUEUE@@#�*
( pad��
userContext��:) <anonymous-tag>.?AU<anonymous-tag>@@* �
* 
, :
"NumberOfObjects��
- ArrayOfObjects���:. _SCONTEXT_QUEUE.?AU_SCONTEXT_QUEUE@@/ �#V�_SYSTEM_REF_TRACE_INFORMATION.?AU_SYSTEM_REF_TRACE_INFORMATION@@j
 TraceEnable��
 TracePermanent���
�TraceProcessName�
�TracePoolTagsV2 (_SYSTEM_REF_TRACE_INFORMATION.?AU_SYSTEM_REF_TRACE_INFORMATION@@3 ��N�_MUTANT_BASIC_INFORMATION.?AU_MUTANT_BASIC_INFORMATION@@
5 N
CurrentCount�
 OwnedByCaller
 AbandonedState���N7 _MUTANT_BASIC_INFORMATION.?AU_MUTANT_BASIC_INFORMATION@@8 �2F�tagCLIENTCREATESTRUCT.?AUtagCLIENTCREATESTRUCT@@2
hWindowMenu��
uidFirstChild�F; tagCLIENTCREATESTRUCT.?AUtagCLIENTCREATESTRUCT@@< L/B�tagBITMAPCOREHEADER.?AUtagBITMAPCOREHEADER@@
> j
"bcSize���
!bcWidth��
!bcHeight�
!bcPlanes�
!
bcBitCount���B@ tagBITMAPCOREHEADER.?AUtagBITMAPCOREHEADER@@A SV�_QUERY_STORAGE_RESERVE_INPUT.?AU_QUERY_STORAGE_RESERVE_INPUT@@��
C #�j
"Version��
"Flags
"AreaIdOffset�
"AreaIdCount��
E AreaId���VF _QUERY_STORAGE_RESERVE_INPUT.?AU_QUERY_STORAGE_RESERVE_INPUT@@��G U+J�_RPC_SECURITY_QOS_V2_W.?AU_RPC_SECURITY_QOS_V2_W@@��^�_RPC_HTTP_TRANSPORT_CREDENTIALS_W.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_W@@
J 
K HttpCredentials��2L <anonymous-tag>.?AT<anonymous-tag>@@M �
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
M uJO  _RPC_SECURITY_QOS_V2_W.?AU_RPC_SECURITY_QOS_V2_W@@��P .�HBRUSH__.?AUHBRUSH__@@��
R 
tunused���.T HBRUSH__.?AUHBRUSH__@@��U AJj�_PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA.?AU_PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA@@��
�SymbolicLinkName�
�AliasClassGuid���
qAliasSymbolicLinkName
" AliasSymbolicLinkNameLength��jX (_PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA.?AU_PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA@@��Y �vn�_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE.?AU_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE@@z�_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRY.?AU_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRY@@\ #�.
"UpdateCount��
] Updates��n^ _SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE.?AU_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE@@_ ��6�_STARTUPINFOA.?AU_STARTUPINFOA@@
a �
"cb���
plpReserved���
plpDesktop
plpTitle��
" dwX��
"$dwY��
"(dwXSize��
",dwYSize��
"0dwXCountChars
"4dwYCountChars
"8dwFillAttribute��
"<dwFlags��
!@wShowWindow��
!BcbReserved2��
 HlpReserved2��
PhStdInput
XhStdOutput���
`hStdError6c h_STARTUPINFOA.?AU_STARTUPINFOA@@d m#^�_RTL_IMAGE_MITIGATION_ASLR_POLICY.?AU_RTL_IMAGE_MITIGATION_ASLR_POLICY@@f
�ForceRelocateImages��
�BottomUpRandomization
�HighEntropyRandomization�^g _RTL_IMAGE_MITIGATION_ASLR_POLICY.?AU_RTL_IMAGE_MITIGATION_ASLR_POLICY@@h �R�_UNICODE_PREFIX_TABLE_ENTRY.?AU_UNICODE_PREFIX_TABLE_ENTRY@@
j �
NodeTypeCode�
NameLength���
k NextPrefixTree���
k CaseMatch
Links
80Prefix���Rl 8_UNICODE_PREFIX_TABLE_ENTRY.?AU_UNICODE_PREFIX_TABLE_ENTRY@@m $RF�_REPAIR_COPIES_INPUT.?AU_REPAIR_COPIES_INPUT@@��
"Size�
"Flags
~FileOffset���
"Length���
"SourceCopy���
"NumberOfRepairCopies�
�RepairCopies�Fp  _REPAIR_COPIES_INPUT.?AU_REPAIR_COPIES_INPUT@@��q U4n�_PROCESS_STACK_ALLOCATION_INFORMATION_EX.?AU_PROCESS_STACK_ALLOCATION_INFORMATION_EX@@��f�_PROCESS_STACK_ALLOCATION_INFORMATION.?AU_PROCESS_STACK_ALLOCATION_INFORMATION@@j
"PreferredNode
"Reserved0
"Reserved1
"Reserved2
t AllocInfonu (_PROCESS_STACK_ALLOCATION_INFORMATION_EX.?AU_PROCESS_STACK_ALLOCATION_INFORMATION_EX@@��v b�
'F�_KCRM_MARSHAL_HEADER.?AU_KCRM_MARSHAL_HEADER@@��
y ^
"VersionMajor�
"VersionMinor�
"NumProtocols�
"Unused���F{ _KCRM_MARSHAL_HEADER.?AU_KCRM_MARSHAL_HEADER@@��| ���RPCHTTP_RS_REDIRECT��RPCHTTP_RS_ACCESS_1��RPCHTTP_RS_SESSION���RPCHTTP_RS_ACCESS_2��RPCHTTP_RS_INTERFACE�Nt~ _RPC_HTTP_REDIRECTOR_STAGE.?AW4_RPC_HTTP_REDIRECTOR_STAGE@@��� �2ComputerNameNetBIOS��ComputerNameDnsHostname��ComputerNameDnsDomainComputerNameDnsFullyQualifiedComputerNamePhysicalNetBIOS��ComputerNamePhysicalDnsHostname��ComputerNamePhysicalDnsDomainComputerNamePhysicalDnsFullyQualifiedComputerNameMax��B	t� _COMPUTER_NAME_FORMAT.?AW4_COMPUTER_NAME_FORMAT@@�6onecore\external\sdk\inc\minwin\sysinfoapi.h���� � R:�_SYSTEM_POOLTAG.?AU_SYSTEM_POOLTAG@@
� �
�Tag��
"TagUlong�
"PagedAllocs��
"PagedFrees���
#PagedUsed
"NonPagedAllocs���
"NonPagedFrees
# NonPagedUsed�:� (_SYSTEM_POOLTAG.?AU_SYSTEM_POOLTAG@@� �u
V�_TXFS_GET_TRANSACTED_VERSION.?AU_TXFS_GET_TRANSACTED_VERSION@@��
"ThisBaseVersion��
"LatestVersion
!ThisMiniVersion��
!
FirstMiniVersion�
!LatestMiniVersionV� _TXFS_GET_TRANSACTED_VERSION.?AU_TXFS_GET_TRANSACTED_VERSION@@��� U�j�_ALPC_PORT_COMPLETION_LIST_INFORMATION.?AU_ALPC_PORT_COMPLETION_LIST_INFORMATION@@��^
Buffer���
"Size�
"ConcurrencyCount�
"AttributeFlags���j� _ALPC_PORT_COMPLETION_LIST_INFORMATION.?AU_ALPC_PORT_COMPLETION_LIST_INFORMATION@@��� �6�_CLIENT_ID64.?AU_CLIENT_ID64@@��2
#UniqueProcess
#UniqueThread�6� _CLIENT_ID64.?AU_CLIENT_ID64@@��� }}>�_WMI_WAIT_SINGLE.?AU_WMI_WAIT_SINGLE@@��
� B
"ThreadId�
Object���
 ObjectType���>� _WMI_WAIT_SINGLE.?AU_WMI_WAIT_SINGLE@@��� 0�	>�_SERVICE_SID_INFO.?AU_SERVICE_SID_INFO@@
� 
"dwServiceSidType�>� _SERVICE_SID_INFO.?AU_SERVICE_SID_INFO@@� mJ
�
7J�tagGESTURENOTIFYSTRUCT.?AUtagGESTURENOTIFYSTRUCT@@��r
ucbSize���
"dwFlags��
�hwndTarget���
8ptsLocation��
"dwInstanceID�J� tagGESTURENOTIFYSTRUCT.?AUtagGESTURENOTIFYSTRUCT@@��� L�<B�tagMINIMIZEDMETRICS.?AUtagMINIMIZEDMETRICS@@f
ucbSize���
tiWidth���
tiHorzGap�
tiVertGap�
tiArrange�B� tagMINIMIZEDMETRICS.?AUtagMINIMIZEDMETRICS@@� L2>�tagEMRGDICOMMENT.?AUtagEMRGDICOMMENT@@��6
Pemr��
"cbData���
�Data�>� tagEMRGDICOMMENT.?AUtagEMRGDICOMMENT@@��� S�Z�_FILE_PIPE_DELETE_SYMLINK_INPUT.?AU_FILE_PIPE_DELETE_SYMLINK_INPUT@@2
!NameOffset���
!NameLength���Z� _FILE_PIPE_DELETE_SYMLINK_INPUT.?AU_FILE_PIPE_DELETE_SYMLINK_INPUT@@� U�)
/bProcessTlsReplaceIndex���ProcessTlsReplaceVector��MaxProcessTlsOperation���Rt� _PROCESS_TLS_INFORMATION_TYPE.?AW4_PROCESS_TLS_INFORMATION_TYPE@@�� bYF�_SYSTEM_POWER_POLICY.?AU_SYSTEM_POWER_POLICY@@��
� B�POWER_ACTION_POLICY.?AUPOWER_ACTION_POLICY@@B�SYSTEM_POWER_LEVEL.?AUSYSTEM_POWER_LEVEL@@��� #`�
"Revision�
� PowerButton��
� SleepButton��
� LidClose�
�(LidOpenWake��
",Reserved�
� 0Idle�
"<IdleTimeout��
 @IdleSensitivity��
 ADynamicThrottle��
�BSpare2���
�DMinSleep�
�HMaxSleep�
�LReducedLatencySleep��
"PWinLogonFlags
"TSpare3���
"XDozeS4Timeout
"\BroadcastCapacityResolution��
� `DischargePolicy��
"�VideoTimeout�
 �VideoDimDisplay��
��VideoReserved
"�SpindownTimeout��
 �OptimizeForPower�
 �FanThrottleTolerance�
 �ForcedThrottle���
 �MinThrottle��
� �OverThrottledF� �_SYSTEM_POWER_POLICY.?AU_SYSTEM_POWER_POLICY@@��� F�
r�_EVENT_TRACE_LBR_CONFIGURATION_INFORMATION.?AU_EVENT_TRACE_LBR_CONFIGURATION_INFORMATION@@��b
EventTraceInformationClass���
#TraceHandle��
"ConfigurationOptions�r� _EVENT_TRACE_LBR_CONFIGURATION_INFORMATION.?AU_EVENT_TRACE_LBR_CONFIGURATION_INFORMATION@@��� rV�_DELETE_STORAGE_RESERVE_INPUT.?AU_DELETE_STORAGE_RESERVE_INPUT@@
� j
"Version��
"Flags
"AreaIdOffset�
"AreaIdCount��
E AreaId���V� _DELETE_STORAGE_RESERVE_INPUT.?AU_DELETE_STORAGE_RESERVE_INPUT@@� U,+N�_PROCESS_WAKE_INFORMATION.?AU_PROCESS_WAKE_INFORMATION@@"#�J�_JOBOBJECT_WAKE_FILTER.?AU_JOBOBJECT_WAKE_FILTER@@��R
#NotificationChannel��
� WakeCounters�
� $WakeFilter���N� 0_PROCESS_WAKE_INFORMATION.?AU_PROCESS_WAKE_INFORMATION@@� b8r�_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA.?AT_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA@@���_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING@@��_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL@@���_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING@@��r
� ResolutionBeginning��
�GetRoot��
� ResolutionSuccessful�
� ResolutionEnding�r� @_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA.?AT_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA@@��� ��>�_RTLP_CURDIR_REF.?AU_RTLP_CURDIR_REF@@��j�_PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA.?AU_PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA@@r
�DeviceInstance���
"Flags
�VetoType�
qVetoName�
" VetoNameLength���j� (_PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA.?AU_PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA@@� �
� �UmsThreadInvalidInfoClassUmsThreadUserContext�UmsThreadPriorityUmsThreadAffinityUmsThreadTeb�UmsThreadIsSuspended�UmsThreadIsTerminatedUmsThreadMaxInfoClassNt� _RTL_UMS_THREAD_INFO_CLASS.?AW4_RTL_UMS_THREAD_INFO_CLASS@@���� $�!j�_MEMORY_PARTITION_ATTRIBUTE_INFORMATION.?AU_MEMORY_PARTITION_ATTRIBUTE_INFORMATION@@
#Flagsj� _MEMORY_PARTITION_ATTRIBUTE_INFORMATION.?AU_MEMORY_PARTITION_ATTRIBUTE_INFORMATION@@� B�F�_PEBS_DS_SAVE_AREA64.?AU_PEBS_DS_SAVE_AREA64@@��"
#BtsBufferBase
#BtsIndex�
#BtsAbsoluteMaximum���
#BtsInterruptThreshold
# PebsBufferBase���
#(PebsIndex
#0PebsAbsoluteMaximum��
#8PebsInterruptThreshold���
@PebsGpCounterReset���
�PebsFixedCounterResetF
� �_PEBS_DS_SAVE_AREA64.?AU_PEBS_DS_SAVE_AREA64@@��� ��b�_WIM_PROVIDER_UPDATE_OVERLAY_INPUT.?AU_WIM_PROVIDER_UPDATE_OVERLAY_INPUT@@��R
~DataSourceId�
"WimFileNameOffset
"WimFileNameLengthb� _WIM_PROVIDER_UPDATE_OVERLAY_INPUT.?AU_WIM_PROVIDER_UPDATE_OVERLAY_INPUT@@��� U-"�SecureSettingValueTypeBooleanSecureSettingValueTypeUlong��SecureSettingValueTypeBinary�SecureSettingValueTypeString�SecureSettingValueTypeUnknownNt� _SECURE_SETTING_VALUE_TYPE.?AW4_SECURE_SETTING_VALUE_TYPE@@���� ^b
�Z�_PROCESS_POWER_THROTTLING_STATE.?AU_PROCESS_POWER_THROTTLING_STATE@@B
"Version��
"ControlMask��
"StateMaskZ� _PROCESS_POWER_THROTTLING_STATE.?AU_PROCESS_POWER_THROTTLING_STATE@@� m�f�_PLUGPLAY_CONTROL_INTERFACE_LIST_DATA.?AU_PLUGPLAY_CONTROL_INTERFACE_LIST_DATA@@z
�DeviceInstance���
�InterfaceGuid
qInterfaceList
" InterfaceListSize
"$Flagsf� (_PLUGPLAY_CONTROL_INTERFACE_LIST_DATA.?AU_PLUGPLAY_CONTROL_INTERFACE_LIST_DATA@@� �+N�_SYSTEM_POOL_INFORMATION.?AU_SYSTEM_POOL_INFORMATION@@��B�_SYSTEM_POOL_ENTRY.?AU_SYSTEM_POOL_ENTRY@@��� #�
#TotalSize
FirstEntry���
!EntryOverhead
 PoolTagPresent���
 Spare0���
"NumberOfEntries��
� Entries��N� (_SYSTEM_POOL_INFORMATION.?AU_SYSTEM_POOL_INFORMATION@@��� �k
V�_ETW_DFSS_START_NEW_INTERVAL.?AU_ETW_DFSS_START_NEW_INTERVAL@@��J�_ETW_PER_SESSION_QUOTA.?AU_ETW_PER_SESSION_QUOTA@@��� #�
"CurrentGeneration
"SessionCount�
#TotalCycleCredit�
#TotalCyclesAccumulated���
� SessionQuota�V� 0_ETW_DFSS_START_NEW_INTERVAL.?AU_ETW_DFSS_START_NEW_INTERVAL@@��!03
b�_SERVICE_REQUIRED_PRIVILEGES_INFOW.?AU_SERVICE_REQUIRED_PRIVILEGES_INFOW@@��&
qpmszRequiredPrivileges���b!_SERVICE_REQUIRED_PRIVILEGES_INFOW.?AU_SERVICE_REQUIRED_PRIVILEGES_INFOW@@��!mW
wn
"Flags
FullDllName��
BaseDllName��
DllBase��
" SizeOfImage��^!(_LDR_DLL_LOADED_NOTIFICATION_DATA.?AU_LDR_DLL_LOADED_NOTIFICATION_DATA@@!��n�tagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION.?AUtagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION@@*
!score
�adjustedPointn!tagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION.?AUtagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION@@!L"^�_SYSTEM_HOT_PATCH_REGISTRY_VALUE.?AU_SYSTEM_HOT_PATCH_REGISTRY_VALUE@@��2
!ImageNameLength��
JImageName^!_SYSTEM_HOT_PATCH_REGISTRY_VALUE.?AU_SYSTEM_HOT_PATCH_REGISTRY_VALUE@@��2onecore\internal\sdk\inc\minwin\ntioapi.h��!!
J�_KLDR_DATA_TABLE_ENTRY.?AU_KLDR_DATA_TABLE_ENTRY@@��F�_NON_PAGED_DEBUG_INFO.?AU_NON_PAGED_DEBUG_INFO@@
!
!��
!��
!	��b
!SignatureLevel���
!SignatureType
!Unused���
!EntireField��2!<anonymous-tag>.?AT<anonymous-tag>@@!��
�InLoadOrderLinks�
ExceptionTable���
"ExceptionTableSize���
 GpValue��
!(NonPagedDebugInfo
0DllBase��
8EntryPoint���
"@SizeOfImage��
�HFullDllName��
�XBaseDllName��
"hFlags
!lLoadCount
!nu1���
pSectionPointer���
"xCheckSum�
"|CoverageSectionSize��
�CoverageSection��
�LoadedImports
�Spare
"�SizeOfImageNotRounded
"�TimeDateStampJ!�_KLDR_DATA_TABLE_ENTRY.?AU_KLDR_DATA_TABLE_ENTRY@@��!��
�BProcessActivityTypeAudio�ProcessActivityTypeMax���Ft !_PROCESS_ACTIVITY_TYPE.?AW4_PROCESS_ACTIVITY_TYPE@@���!!b&
R�_BY_HANDLE_FILE_INFORMATION.?AU_BY_HANDLE_FILE_INFORMATION@@
#!
"dwFileAttributes�
6ftCreationTime���
6ftLastAccessTime�
6ftLastWriteTime��
"dwVolumeSerialNumber�
" nFileSizeHigh
"$nFileSizeLow�
"(nNumberOfLinks���
",nFileIndexHigh���
"0nFileIndexLowR
%!4_BY_HANDLE_FILE_INFORMATION.?AU_BY_HANDLE_FILE_INFORMATION@@&!�2�tagMENUINFO.?AUtagMENUINFO@@
(!��
)!
R �
"cbSize���
"fMask
"dwStyle��
ucyMax
+!hbrBack��
"dwContextHelpID��
# dwMenuData���2,!(tagMENUINFO.?AUtagMENUINFO@@-!LBr�/!^�_ALPC_MESSAGE_HANDLE_INFORMATION.?AU_ALPC_MESSAGE_HANDLE_INFORMATION@@��f
"Index
"Flags
"Handle���
"ObjectType���
"GrantedAccess^2!_ALPC_MESSAGE_HANDLE_INFORMATION.?AU_ALPC_MESSAGE_HANDLE_INFORMATION@@��3!�R�_PERFINFO_CCSWAP_IDLE_SHORT.?AU_PERFINFO_CCSWAP_IDLE_SHORT@@
!��
!��*
6!DataType�
7!TimeDeltaR8!_PERFINFO_CCSWAP_IDLE_SHORT.?AU_PERFINFO_CCSWAP_IDLE_SHORT@@9!0�
p:�_STARTUPINFOEXW.?AU_STARTUPINFOEXW@@
<!R�_PROC_THREAD_ATTRIBUTE_LIST.?AU_PROC_THREAD_ATTRIBUTE_LIST@@
>!6
MStartupInfo��
?!hlpAttributeList��:@!p_STARTUPINFOEXW.?AU_STARTUPINFOEXW@@A!<5j�JOBOBJECT_LIMIT_VIOLATION_INFORMATION_2.?AUJOBOBJECT_LIMIT_VIOLATION_INFORMATION_2@@r
"LimitFlags���
"ViolationLimitFlags��
#IoReadBytes��
#IoReadBytesLimit�
#IoWriteBytes�
# IoWriteBytesLimit
~(PerJobUserTime���
~0PerJobUserTimeLimit��
#8JobMemory
#@JobHighMemoryLimit���
#@JobMemoryLimit���
HRateControlTolerance�
HCpuRateControlTolerance��
LRateControlToleranceLimit
LCpuRateControlToleranceLimit�
#PJobLowMemoryLimit
XIoRateControlTolerance���
\IoRateControlToleranceLimit��
`NetRateControlTolerance��
dNetRateControlToleranceLimit�jD!hJOBOBJECT_LIMIT_VIOLATION_INFORMATION_2.?AUJOBOBJECT_LIMIT_VIOLATION_INFORMATION_2@@E!}�:�_OSVERSIONINFOA.?AU_OSVERSIONINFOA@@�
"dwOSVersionInfoSize��
"dwMajorVersion���
"dwMinorVersion���
"dwBuildNumber
"dwPlatformId�
�szCSDVersion�:H!�_OSVERSIONINFOA.?AU_OSVERSIONINFOA@@I!$�2�_BOOT_ENTRY.?AU_BOOT_ENTRY@@�
"Version��
"Length���
"Id���
"Attributes���
"FriendlyNameOffset���
"BootFilePathOffset���
"OsOptionsLength��
�OsOptions2L! _BOOT_ENTRY.?AU_BOOT_ENTRY@@M!��J�_PERFINFO_FILE_DIRENUM.?AU_PERFINFO_FILE_DIRENUM@@��
#Irp��
#FileObject���
#FileKey��
"IssuingThreadId��
"Length���
" InfoClass
"$FileIndex
J(FileName�JP!0_PERFINFO_FILE_DIRENUM.?AU_PERFINFO_FILE_DIRENUM@@��Q!0iF�_RPC_CLIENT_INTERFACE.?AU_RPC_CLIENT_INTERFACE@@
S!B�RPC_DISPATCH_TABLE.?AURPC_DISPATCH_TABLE@@��
U!F�_RPC_PROTSEQ_ENDPOINT.?AU_RPC_PROTSEQ_ENDPOINT@@
W!�
uLength���
�InterfaceId��
�TransferSyntax���
V!0DispatchTable
u8RpcProtseqEndpointCount��
X!@RpcProtseqEndpoint���
#HReserved�
PInterpreterInfo��
uXFlagsF	Y!`_RPC_CLIENT_INTERFACE.?AU_RPC_CLIENT_INTERFACE@@Z!��v�_SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION.?AU_SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION@@
\!
#CycleTimev^!_SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION.?AU_SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION@@_!�
jTransactionStateNormal���TransactionStateIndoubt��TransactionStateCommittedNotify��>ta!_TRANSACTION_STATE.?AW4_TRANSACTION_STATE@@���b!��F�_WMI_JOB_INFORMATION.?AU_WMI_JOB_INFORMATION@@��
d!N
�ContainerId��
"JobId
"Flags
Status���Ff!_WMI_JOB_INFORMATION.?AU_WMI_JOB_INFORMATION@@��g!0�2�_RPC_STRING.?AU_RPC_STRING@@B
!Length���
!MaximumLength
pBuffer���2j!_RPC_STRING.?AU_RPC_STRING@@k!�DB�tagIMEMENUITEMINFOW.?AUtagIMEMENUITEMINFOW@@q#��
ucbSize���
ufType
ufState���
uwID��
IhbmpChecked��
IhbmpUnchecked
" dwItemData���
n!$szString�
I�hbmpItem�B	o!�tagIMEMENUITEMINFOW.?AUtagIMEMENUITEMINFOW@@p!��jSTUB_UNMARSHAL���STUB_CALL_SERVER�STUB_MARSHAL�STUB_CALL_SERVER_NO_HRESULT��.tr!STUB_PHASE.?AW4STUB_PHASE@@���s!�G
VmPrefetchInformationVmPagePriorityInformationVmCfgCallTargetInformation���VmPageDirtyStateInformation��VmImageHotPatchInformation���VmPhysicalContiguityInformation��VmVirtualMachinePrepopulateInformation���Ztu!_VIRTUAL_MEMORY_INFORMATION_CLASS.?AW4_VIRTUAL_MEMORY_INFORMATION_CLASS@@�v!y1
� *
Sid��
"Attributes���By!_SID_AND_ATTRIBUTES.?AU_SID_AND_ATTRIBUTES@@z!EIj�_EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID.?AU_EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID@@
�RelatedActivityIdj}!_EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID.?AU_EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID@@~!#`
BJ�tagEMRSETVIEWPORTORGEX.?AUtagEMRSETVIEWPORTORGEX@@��&
Pemr��
�ptlOriginJ�!tagEMRSETVIEWPORTORGEX.?AUtagEMRSETVIEWPORTORGEX@@���!S�>�tagHIGHCONTRASTA.?AUtagHIGHCONTRASTA@@��
�!F
ucbSize���
"dwFlags��
plpszDefaultScheme>�!tagHIGHCONTRASTA.?AUtagHIGHCONTRASTA@@���!Lj2:�tagGCP_RESULTSA.?AUtagGCP_RESULTSA@@�
"lStructSize��
plpOutString��
ulpOrder��
tlpDx�
t lpCaretPos���
p(lpClass��
q0lpGlyphs�
u8nGlyphs��
t<nMaxFit��:	�!@tagGCP_RESULTSA.?AUtagGCP_RESULTSA@@�!S�
6�tagABORTPATH.?AUtagABORTPATH@@��
Pemr��6�!tagABORTPATH.?AUtagABORTPATH@@���!ST��_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED.?AU_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED@@b�_RTL_ACTIVATION_CONTEXT_STACK_FRAME.?AU_RTL_ACTIVATION_CONTEXT_STACK_FRAME@@�
#Size�
"Format���
�!Frame
(Extra1���
0Extra2���
8Extra3���
@Extra4����!H_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED.?AU_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED@@�!�
j�_JOBOBJECT_END_OF_JOB_TIME_INFORMATION.?AU_JOBOBJECT_END_OF_JOB_TIME_INFORMATION@@��"
"EndOfJobTimeAction���j�!_JOBOBJECT_END_OF_JOB_TIME_INFORMATION.?AU_JOBOBJECT_END_OF_JOB_TIME_INFORMATION@@���!}���
XB�_MM_ETW_PAGE_EXTRA_INFO.?AT_MM_ETW_PAGE_EXTRA_INFO@@
#��
�!SharedInitial:�!<anonymous-tag>.?AU<anonymous-tag>@@�!BC
#��
#��
#��J
�!WorkingSetType���
�!NotAddedtoWS�
�!COWFault�:�!<anonymous-tag>.?AU<anonymous-tag>@@�!BFR
�!e1���
�!e2���
#ProtoPte�
VirtualAddress���B�!_MM_ETW_PAGE_EXTRA_INFO.?AT_MM_ETW_PAGE_EXTRA_INFO@@�!BB6�_ICONINFOEXA.?AU_ICONINFOEXA@@��
"cbSize���
tfIcon
"xHotspot�
"yHotspot�
IhbmMask��
IhbmColor�
! wResID���
7"szModName
7&szResName6	�!0_ICONINFOEXA.?AU_ICONINFOEXA@@���!L�*~VmOfferPriorityVeryLow���VmOfferPriorityLow���VmOfferPriorityBelowNormal���VmOfferPriorityNormal6t�!OFFER_PRIORITY.?AW4OFFER_PRIORITY@@����!Q�Z�_FILE_FS_DATA_COPY_INFORMATION.?AU_FILE_FS_DATA_COPY_INFORMATION@@��
"NumberOfCopies���Z�!_FILE_FS_DATA_COPY_INFORMATION.?AU_FILE_FS_DATA_COPY_INFORMATION@@���!U	�PowerStateSleeping1��PowerStateSleeping2��PowerStateSleeping3��PowerStateSleeping4��PowerStateShutdownOffPowerStateShutdownReset��PowerStateSleeping4Firmware��PowerStateMaximumJt�!POWER_STATE_HANDLER_TYPE.?AW4POWER_STATE_HANDLER_TYPE@@����!F�j�RETRIEVAL_POINTERS_AND_REFCOUNT_BUFFER.?AURETRIEVAL_POINTERS_AND_REFCOUNT_BUFFER@@��B
~NextVcn��
~Lcn��
"ReferenceCount���:�!<anonymous-tag>.?AU<anonymous-tag>@@�!Uu
�!#�F
"ExtentCount��
~StartingVcn��
�!Extents��j�!(RETRIEVAL_POINTERS_AND_REFCOUNT_BUFFER.?AURETRIEVAL_POINTERS_AND_REFCOUNT_BUFFER@@���!Uq

W
�!
�B
�!Previous�
�!ActivationContext
"Flagsb�!_RTL_ACTIVATION_CONTEXT_STACK_FRAME.?AU_RTL_ACTIVATION_CONTEXT_STACK_FRAME@@�!�o
:�_LDR_DDAG_NODE.?AU_LDR_DDAG_NODE@@��
�!
�6�_LDRP_CSLIST.?AU_LDRP_CSLIST@@��
�Modules��
�!ServiceTagList���
"LoadCount
"LoadWhileUnloadingCount��
" LowestLink���
�!(Dependencies�
�!0IncomingDependencies�
38State
@CondenseLink�
"HPreorderNumber���:
�!P_LDR_DDAG_NODE.?AU_LDR_DDAG_NODE@@���!��b�_JOBOBJECT_INTERFERENCE_INFORMATION.?AU_JOBOBJECT_INTERFERENCE_INFORMATION@@
#Countb�!_JOBOBJECT_INTERFERENCE_INFORMATION.?AU_JOBOBJECT_INTERFERENCE_INFORMATION@@�!bC6�tagEMRPLGBLT.?AUtagEMRPLGBLT@@���#�
Pemr��
,rclBounds
�!aptlDest�
0xSrc�
4ySrc�
8cxSrc
<cySrc

@xformSrc�
"XcrBkColorSrc�
"\iUsageSrc
"`offBmiSrc
"dcbBmiSrc�
"hoffBitsSrc���
"lcbBitsSrc
pxMask
tyMask
"xiUsageMask���
"|offBmiMask���
"�cbBmiMask
"�offBitsMask��
"�cbBitsMask���6�!�tagEMRPLGBLT.?AUtagEMRPLGBLT@@���!S�:�tagEMRINVERTRGN.?AUtagEMRINVERTRGN@@
�!N
Pemr��
,rclBounds
"cbRgnData
�RgnData��:�! tagEMRINVERTRGN.?AUtagEMRINVERTRGN@@�!SyZ�_SYSTEM_FIRMWARE_TABLE_HANDLER.?AU_SYSTEM_FIRMWARE_TABLE_HANDLER@@��b�_SYSTEM_FIRMWARE_TABLE_INFORMATION.?AU_SYSTEM_FIRMWARE_TABLE_INFORMATION@@��
�!
�!�!
�!j
"ProviderSignature
 Register�
�!FirmwareTableHandler�
DriverObject�Z�!_SYSTEM_FIRMWARE_TABLE_HANDLER.?AU_SYSTEM_FIRMWARE_TABLE_HANDLER@@���!|dF�_OBJECT_ATTRIBUTES32.?AU_OBJECT_ATTRIBUTES32@@��
"Length���
"RootDirectory
"ObjectName���
"Attributes���
"SecurityDescriptor���
"SecurityQualityOfService�F�!_OBJECT_ATTRIBUTES32.?AU_OBJECT_ATTRIBUTES32@@���!F�_SERVICE_DESCRIPTIONW.?AU_SERVICE_DESCRIPTIONW@@
�!
qlpDescriptionF�!_SERVICE_DESCRIPTIONW.?AU_SERVICE_DESCRIPTIONW@@�!m�B�PPM_IDLE_ACCOUNTING.?AUPPM_IDLE_ACCOUNTING@@
�!N�PPM_IDLE_STATE_ACCOUNTING.?AUPPM_IDLE_STATE_ACCOUNTING@@�!#0�r
"StateCount���
"TotalTransitions�
"ResetCount���
#StartTime
�!StateB�!HPPM_IDLE_ACCOUNTING.?AUPPM_IDLE_ACCOUNTING@@�!F	
.�_POWER_STATE.?AT_POWER_STATE@@��
�!2
�SystemState��
�DeviceState��.�!_POWER_STATE.?AT_POWER_STATE@@���!F�R�_SYSTEM_MANDATORY_LABEL_ACE.?AU_SYSTEM_MANDATORY_LABEL_ACE@@:
�Header���
"Mask�
"SidStart�R�!_SYSTEM_MANDATORY_LABEL_ACE.?AU_SYSTEM_MANDATORY_LABEL_ACE@@�!E�.�_DOCINFOA.?AU_DOCINFOA@@
�!r
tcbSize���
qlpszDocName��
qlpszOutput���
qlpszDatatype�
" fwType���."(_DOCINFOA.?AU_DOCINFOA@@"S�j�_WMI_JOB_SEND_NOTIFICATION_INFORMATION.?AU_WMI_JOB_SEND_NOTIFICATION_INFORMATION@@��F
�ContainerId��
"JobId
"NotificationId���j"_WMI_JOB_SEND_NOTIFICATION_INFORMATION.?AU_WMI_JOB_SEND_NOTIFICATION_INFORMATION@@��"0�>�_nlsversioninfoex.?AU_nlsversioninfoex@@�
"dwNLSVersionInfoSize�
"dwNLSVersion�
"dwDefinedVersion�
"dwEffectiveId
�guidCustomVersion>" _nlsversioninfoex.?AU_nlsversioninfoex@@	"%�N�_RTL_SPARSE_BITMAP_RANGE.?AU_RTL_SPARSE_BITMAP_RANGE@@��:
#Lock�
LRangeBitmap��
Next�N"_RTL_SPARSE_BITMAP_RANGE.?AU_RTL_SPARSE_BITMAP_RANGE@@��
"��F�_CM_VIDEO_DEVICE_DATA.?AU_CM_VIDEO_DEVICE_DATA@@
"B
!Version��
!Revision�
"VideoClock���F"_CM_VIDEO_DEVICE_DATA.?AU_CM_VIDEO_DEVICE_DATA@@"��rSystemCrashDumpDisable���SystemCrashDumpReconfigure���SystemCrashDumpInitializationCompleteft"_SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS.?AW4_SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS@@���"�&N�_FILE_STREAM_INFORMATION.?AU_FILE_STREAM_INFORMATION@@��
"�
"NextEntryOffset��
"StreamNameLength�
~StreamSize���
~StreamAllocationSize�
JStreamName���N" _FILE_STREAM_INFORMATION.?AU_FILE_STREAM_INFORMATION@@��"U-J�_MIDL_INTERCEPTION_INFO.?AU_MIDL_INTERCEPTION_INFO@@z
"Version��
ProcString���
ProcFormatOffsetTable
"ProcCount
 TypeString���J"(_MIDL_INTERCEPTION_INFO.?AU_MIDL_INTERCEPTION_INFO@@"��:�_RTL_BITMAP_EX.?AU_RTL_BITMAP_EX@@��.
#SizeOfBitMap�
#Buffer���:!"_RTL_BITMAP_EX.?AU_RTL_BITMAP_EX@@��""��>�_EXFAT_STATISTICS.?AU_EXFAT_STATISTICS@@
"CreateHits���
"SuccessfulCreates
"FailedCreates
"NonCachedReads���
"NonCachedReadBytes���
"NonCachedWrites��
"NonCachedWriteBytes��
"NonCachedDiskReads���
" NonCachedDiskWrites��>	%"$_EXFAT_STATISTICS.?AU_EXFAT_STATISTICS@@&"UNjFpRoundNearest���FpRoundMinusInfinity�FpRoundPlusInfinity��FpRoundChopped���Ft("_FP__IEEE_ROUNDING_MODE.?AW4_FP__IEEE_ROUNDING_MODE@@�)"g�B�HSAVEDUILANGUAGES__.?AUHSAVEDUILANGUAGES__@@
+"
tunused���B-"HSAVEDUILANGUAGES__.?AUHSAVEDUILANGUAGES__@@."%
.HeapCompatibilityInformation�HeapEnableTerminationOnCorruptionHeapExtendedInformation��HeapOptimizeResourcesHeapTaggingInformation���HeapStackDatabaseHeapMemoryLimit����HeapDetailedFailureInformation�����HeapSetDebuggingInformation��F	t0"_HEAP_INFORMATION_CLASS.?AW4_HEAP_INFORMATION_CLASS@@�1"�Q"3"
4"N�_QUERY_FILE_LAYOUT_OUTPUT.?AU_QUERY_FILE_LAYOUT_OUTPUT@@
6"^
"FileEntryCount���
"FirstFileOffset��
"Flags
"Reserved�N8"_QUERY_FILE_LAYOUT_OUTPUT.?AU_QUERY_FILE_LAYOUT_OUTPUT@@9"UY
�
�6�tagEMRLINETO.?AUtagEMRLINETO@@��
=""
Pemr��
�ptl��6?"tagEMRLINETO.?AUtagEMRLINETO@@��@"S�
�!""" ""C"
D">�_DISPLAY_DEVICEA.?AU_DISPLAY_DEVICEA@@��p# �
"cb���
G"DeviceName���
�$DeviceString�
"�StateFlags���
��DeviceID�
�(DeviceKey>H"�_DISPLAY_DEVICEA.?AU_DISPLAY_DEVICEA@@��I"S�
F�_RTL_PERTHREAD_CURDIR.?AU_RTL_PERTHREAD_CURDIR@@N�_RTL_DRIVE_LETTER_CURDIR.?AU_RTL_DRIVE_LETTER_CURDIR@@��
L"N
M"CurrentDirectories���
8ImageName
Environment��FN"_RTL_PERTHREAD_CURDIR.?AU_RTL_PERTHREAD_CURDIR@@O"�4fEtwProviderTraitTypeGroupEtwProviderTraitDecodeGuid���EtwProviderTraitTypeMax��FtQ"ETW_PROVIDER_TRAIT_TYPE.?AW4ETW_PROVIDER_TRAIT_TYPE@@�R"#��FEEDBACK_TOUCH_CONTACTVISUALIZATION��FEEDBACK_PEN_BARRELVISUALIZATION�FEEDBACK_PEN_TAP�FEEDBACK_PEN_DOUBLETAP���FEEDBACK_PEN_PRESSANDHOLDFEEDBACK_PEN_RIGHTTAPFEEDBACK_TOUCH_TAP���FEEDBACK_TOUCH_DOUBLETAP�	FEEDBACK_TOUCH_PRESSANDHOLD��
FEEDBACK_TOUCH_RIGHTTAP��FEEDBACK_GESTURE_PRESSANDTAP���FEEDBACK_MAX:tT"tagFEEDBACK_TYPE.?AW4tagFEEDBACK_TYPE@@���U"LRZ�_JOBOBJECT_IO_ATTRIBUTION_STATS.?AU_JOBOBJECT_IO_ATTRIBUTION_STATS@@
W"z
#IoCount��
#TotalNonOverlappedQueueTime��
#TotalNonOverlappedServiceTime
#TotalSizeZY" _JOBOBJECT_IO_ATTRIBUTION_STATS.?AU_JOBOBJECT_IO_ATTRIBUTION_STATS@@Z"}�:�_JOB_SET_ARRAY.?AU_JOB_SET_ARRAY@@��>
JobHandle
"MemberLevel��
"Flags:]"_JOB_SET_ARRAY.?AU_JOB_SET_ARRAY@@��^"}�V�_PERFINFO_SYSCALL_ENTER_DATA.?AU_PERFINFO_SYSCALL_ENTER_DATA@@��
SysCallAddr��Va"_PERFINFO_SYSCALL_ENTER_DATA.?AU_PERFINFO_SYSCALL_ENTER_DATA@@��b"0&f�_IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY@@
d"�
#BeginAddress�
#EndAddress���
#ExceptionHandler�
#HandlerData��
# PrologEndAddress�ff"(_IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY@@g"f#B�_MOUSE_EVENT_RECORD.?AU_MOUSE_EVENT_RECORD@@*�_COORD.?AU_COORD@@��j
j"dwMousePosition��
"dwButtonState
"dwControlKeyState
"dwEventFlags�Bk"_MOUSE_EVENT_RECORD.?AU_MOUSE_EVENT_RECORD@@l"URB�POWER_STATE_HANDLER.?AUPOWER_STATE_HANDLER@@
n"�
p"q"r"
s"^
�!Type�
 RtcWake��
�Spare
t"Handler��
Context��Bu"POWER_STATE_HANDLER.?AUPOWER_STATE_HANDLER@@v"F-	>�tagREGISTERWORDA.?AUtagREGISTERWORDA@@��
x"*
plpReading
plpWord���>z"tagREGISTERWORDA.?AUtagREGISTERWORDA@@��{"�\
=�}"~"
"�HiberFileBucket1GB���HiberFileBucket2GB���HiberFileBucket4GB���HiberFileBucket8GB���HiberFileBucket16GB��HiberFileBucket32GB��HiberFileBucketUnlimited�HiberFileBucketMax���Ft�"_HIBERFILE_BUCKET_SIZE.?AW4_HIBERFILE_BUCKET_SIZE@@����"F�V�_FILE_ALLOCATION_INFORMATION.?AU_FILE_ALLOCATION_INFORMATION@@��
~AllocationSize���V�"_FILE_ALLOCATION_INFORMATION.?AU_FILE_ALLOCATION_INFORMATION@@���"U�^�_ETW_TIMER_EXPIRATION_START_EVENT.?AU_ETW_TIMER_EXPIRATION_START_EVENT@@:
#InterruptTime
 HrTimerExpirationOnly^�"_ETW_TIMER_EXPIRATION_START_EVENT.?AU_ETW_TIMER_EXPIRATION_START_EVENT@@�"0�>�tagACCESSTIMEOUT.?AUtagACCESSTIMEOUT@@��
�"B
ucbSize���
"dwFlags��
"iTimeOutMSec�>�"tagACCESSTIMEOUT.?AUtagACCESSTIMEOUT@@���"L�3R�_FILE_ALIGNMENT_INFORMATION.?AU_FILE_ALIGNMENT_INFORMATION@@
�""
"AlignmentRequirement�R�"_FILE_ALIGNMENT_INFORMATION.?AU_FILE_ALIGNMENT_INFORMATION@@�"U�
� B�tagENUMTEXTMETRICW.?AUtagENUMTEXTMETRICW@@��
�"B�tagNEWTEXTMETRICEXW.?AUtagNEWTEXTMETRICEXW@@:
�"etmNewTextMetricEx���
4detmAxesList��B�"�tagENUMTEXTMETRICW.?AUtagENUMTEXTMETRICW@@���"Sr
x
y.�"tagPOINT.?AUtagPOINT@@���"A�:WdActionSetTimeoutValue��WdActionQueryTimeoutValueWdActionResetTimer���WdActionStopTimerWdActionStartTimer���WdActionSetTriggerAction�WdActionQueryTriggerAction���WdActionQueryState���WdActionSleep	WdActionWake�
WdActionMarkHiberPhase���Jt�"_WATCHDOG_HANDLER_ACTION.?AW4_WATCHDOG_HANDLER_ACTION@@����"�2
F�_SECURITY_DESCRIPTOR.?AU_SECURITY_DESCRIPTOR@@��
�"&�_ACL.?AU_ACL@@��
�"z
 Revision�
 Sbz1�
!Control��
Owner
Group
�"Sacl�
�" Dacl�F�"(_SECURITY_DESCRIPTOR.?AU_SECURITY_DESCRIPTOR@@���"E�J�_PERFINFO_CCSWAP_BUFFER.?AU_PERFINFO_CCSWAP_BUFFER@@
�"p#�R
FirstTimeStamp���
(TidTable�
�"HThreadBasePriority���J�"X_PERFINFO_CCSWAP_BUFFER.?AU_PERFINFO_CCSWAP_BUFFER@@�"0�^�_PERFINFO_CC_EXTRA_WB_THREAD_INFO.?AU_PERFINFO_CC_EXTRA_WB_THREAD_INFO@@�
"ThreadAction�
"ActiveExtraWBThreads�
#TotalDirtyPages��
#DirtyPageThreshold���
#AvailablePages���^�" _PERFINFO_CC_EXTRA_WB_THREAD_INFO.?AU_PERFINFO_CC_EXTRA_WB_THREAD_INFO@@�"0V�_PERFINFO_CC_WORKITEM_ENQUEUE.?AU_PERFINFO_CC_WORKITEM_ENQUEUE@@
�"�
#WorkItemKey��
#FileObjectKey
 QueueType
 WorkItemType�
 Requeue��
 Reserved�V�"_PERFINFO_CC_WORKITEM_ENQUEUE.?AU_PERFINFO_CC_WORKITEM_ENQUEUE@@�"0�b�_MEMORY_PARTITION_NODE_INFORMATION.?AU_MEMORY_PARTITION_NODE_INFORMATION@@��
-J
"NumaNodeCount
"Flags
�"NodePageInformation��b�"_MEMORY_PARTITION_NODE_INFORMATION.?AU_MEMORY_PARTITION_NODE_INFORMATION@@���"B�R�_WMI_IMAGEID_INFORMATION32.?AU_WMI_IMAGEID_INFORMATION32@@��z
uImageBase32��
uImageSize32��
"ProcessId
"TimeDateStamp
JOriginalFileName�R�"_WMI_IMAGEID_INFORMATION32.?AU_WMI_IMAGEID_INFORMATION32@@���"0�N�_PROCESS_LEAP_SECOND_INFO.?AU_PROCESS_LEAP_SECOND_INFO@@&
"Flags
"Reserved�N�"_PROCESS_LEAP_SECOND_INFO.?AU_PROCESS_LEAP_SECOND_INFO@@�"m�F�_KEY_FULL_INFORMATION.?AU_KEY_FULL_INFORMATION@@
�"
~LastWriteTime
"TitleIndex���
"ClassOffset��
"ClassLength��
"SubKeys��
"MaxNameLen���
"MaxClassLen��
" Values���
"$MaxValueNameLen��
"(MaxValueDataLen��
J,ClassF�"0_KEY_FULL_INFORMATION.?AU_KEY_FULL_INFORMATION@@�"��J�_ETW_OBJECT_TYPE_EVENT.?AU_ETW_OBJECT_TYPE_EVENT@@��>
!ObjectType���
!Reserved�
JName�J�"_ETW_OBJECT_TYPE_EVENT.?AU_ETW_OBJECT_TYPE_EVENT@@���"0c
2�tagEVENTMSG.?AUtagEVENTMSG@@^
umessage��
uparamL���
uparamH���
"time�
�hwnd�2�"tagEVENTMSG.?AUtagEVENTMSG@@�"L!
�F
lfHeight�
lfWidth��
lfEscapement�
lfOrientation
lfWeight�
 lfItalic�
 lfUnderline��
 lfStrikeOut��
 lfCharSet
 lfOutPrecision���
 lfClipPrecision��
 lfQuality
 lfPitchAndFamily�
�lfFaceName���2�"\tagLOGFONTW.?AUtagLOGFONTW@@�"S�V�_HEAP_AFINITY_MANAGER_ENABLE.?AU_HEAP_AFINITY_MANAGER_ENABLE@@��F
8Header���
 HeapHandle���
"(BucketIndex��V�",_HEAP_AFINITY_MANAGER_ENABLE.?AU_HEAP_AFINITY_MANAGER_ENABLE@@���"0gJ�_POWER_SESSION_TIMEOUTS.?AU_POWER_SESSION_TIMEOUTS@@
�"6
"InputTimeout�
"DisplayTimeout���J�"_POWER_SESSION_TIMEOUTS.?AU_POWER_SESSION_TIMEOUTS@@�"F�
�J�tagEMREXTSELECTCLIPRGN.?AUtagEMREXTSELECTCLIPRGN@@��J
Pemr��
"cbRgnData
"iMode
�RgnData��J�"tagEMREXTSELECTCLIPRGN.?AUtagEMREXTSELECTCLIPRGN@@���"S�B�tagEMRSETMITERLIMIT.?AUtagEMRSETMITERLIMIT@@*
Pemr��
@eMiterLimit��B�"tagEMRSETMITERLIMIT.?AUtagEMRSETMITERLIMIT@@�"SqR�_WMI_IMAGEID_INFORMATION64.?AU_WMI_IMAGEID_INFORMATION64@@��z
#ImageBase64��
#ImageSize64��
"ProcessId
"TimeDateStamp
JOriginalFileName�R�"_WMI_IMAGEID_INFORMATION64.?AU_WMI_IMAGEID_INFORMATION64@@���"0�J�_CSV_QUERY_MDS_PATH_V2.?AU_CSV_QUERY_MDS_PATH_V2@@��CsvFsDiskConnectivityNoneCsvFsDiskConnectivityMdsNodeOnly�CsvFsDiskConnectivitySubsetOfNodes���CsvFsDiskConnectivityAllNodesJt�"_CSVFS_DISK_CONNECTIVITY.?AW4_CSVFS_DISK_CONNECTIVITY@@����"U��
Version��
"RequiredSize�
"MdsNodeId
"DsNodeId�
"Flags
�"DiskConnectivity�
�VolumeId�
",IpAddressOffset��
"0IpAddressLength��
"4PathOffset���
"8PathLength���J�"@_CSV_QUERY_MDS_PATH_V2.?AU_CSV_QUERY_MDS_PATH_V2@@���"U�6�_TOKEN_ORIGIN.?AU_TOKEN_ORIGIN@@&
TOriginatingLogonSession��6�"_TOKEN_ORIGIN.?AU_TOKEN_ORIGIN@@�"E	^��ConfigurationSpaceUndefined�Cmos�EisaConfigurationPos��CbusConfigurationPCIConfiguration�VMEConfiguration�NuBusConfiguration���PCMCIAConfiguration��MPIConfiguration�	MPSAConfiguration
PNPISAConfiguration��SgiInternalConfiguration�MaximumBusDataType���6t�"_BUS_DATA_TYPE.?AW4_BUS_DATA_TYPE@@����"U�+
�"B�_MEMORY_RANGE_ENTRY.?AU_MEMORY_RANGE_ENTRY@@6
VirtualAddress���
#NumberOfBytesB�"_MEMORY_RANGE_ENTRY.?AU_MEMORY_RANGE_ENTRY@@�"y�:�tagCWPRETSTRUCT.?AUtagCWPRETSTRUCT@@
#b
lResult��
lParam���
#wParam���
umessage��
� hwnd�:#(tagCWPRETSTRUCT.?AUtagCWPRETSTRUCT@@#L9v�_TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION.?AU_TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION@@��&
JSuperiorEnlistmentPair���v# _TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION.?AU_TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION@@��#�V�_SYSTEM_KERNEL_DEBUGGER_FLAGS.?AU_SYSTEM_KERNEL_DEBUGGER_FLAGS@@.
 KernelDebuggerIgnoreUmExceptions�V
#_SYSTEM_KERNEL_DEBUGGER_FLAGS.?AU_SYSTEM_KERNEL_DEBUGGER_FLAGS@@#��JPowerMonitorOff��PowerMonitorOn���PowerMonitorDim��Ft
#_MONITOR_DISPLAY_STATE.?AW4_MONITOR_DISPLAY_STATE@@���#F�
#b�_ETW_TP_EVENT_TIMER_CANCEL_NTTIMER.?AU_ETW_TP_EVENT_TIMER_CANCEL_NTTIMER@@��*
8Header���
 SubQueue�b#(_ETW_TP_EVENT_TIMER_CANCEL_NTTIMER.?AU_ETW_TP_EVENT_TIMER_CANCEL_NTTIMER@@��#0/n�_JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2.?AU_JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2@@r
"LimitFlags���
"ViolationLimitFlags��
#IoReadBytes��
#IoReadBytesLimit�
#IoWriteBytes�
# IoWriteBytesLimit
~(PerJobUserTime���
~0PerJobUserTimeLimit��
#8JobMemory
#@JobLowMemoryLimit
#HJobHighMemoryLimit���
PRateControlTolerance�
TRateControlToleranceLimitn
#X_JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2.?AU_JOBOBJECT_LIMIT_VIOLATION_INFORMATION_V2@@#b�J�_SE_SECURITY_DESCRIPTOR.?AU_SE_SECURITY_DESCRIPTOR@@B
"Size�
"Flags
SecurityDescriptor���J#_SE_SECURITY_DESCRIPTOR.?AU_SE_SECURITY_DESCRIPTOR@@#E�V�_SERVICE_PREFERRED_NODE_INFO.?AU_SERVICE_PREFERRED_NODE_INFO@@��
#2
!usPreferredNode��
 fDelete��V#_SERVICE_PREFERRED_NODE_INFO.?AU_SERVICE_PREFERRED_NODE_INFO@@�� #m�
�N�_PROCESS_HEAP_INFORMATION.?AU_PROCESS_HEAP_INFORMATION@@
##r
#ReserveSize��
#CommitSize���
"NumberOfHeaps
#FirstHeapInformationOffset���N%# _PROCESS_HEAP_INFORMATION.?AU_PROCESS_HEAP_INFORMATION@@&#��V�_TEB_ACTIVE_FRAME_CONTEXT_EX.?AU_TEB_ACTIVE_FRAME_CONTEXT_EX@@��6
�BasicContext�
(SourceLocation���V)#_TEB_ACTIVE_FRAME_CONTEXT_EX.?AU_TEB_ACTIVE_FRAME_CONTEXT_EX@@��*#�B�_WMI_BUFFER_HEADER.?AU_WMI_BUFFER_HEADER@@��
#��
#=��
,#:�_ETW_REF_CLOCK.?AU_ETW_REF_CLOCK@@���
"BufferSize���
"SavedOffset��
LCurrentOffset
ReferenceCount���
~TimeStamp
SequenceNumber���
-# ClockType
.# Frequency
 SlistEntry���
/# NextBuffer���
(ClientContext
�,State
"0Offset���
!4BufferFlag���
!6BufferType���
�8Padding1�
0#8ReferenceTime
�8GlobalEntry��
8Pointer0�
@Pointer1�B1#H_WMI_BUFFER_HEADER.?AU_WMI_BUFFER_HEADER@@��2#0�J�_RPC_SECURITY_QOS_V3_W.?AU_RPC_SECURITY_QOS_V3_W@@��
K HttpCredentials��25#<anonymous-tag>.?AT<anonymous-tag>@@6#.�
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
6#u
 Sid��J8#(_RPC_SECURITY_QOS_V3_W.?AU_RPC_SECURITY_QOS_V3_W@@��9#'J�_RTL_MODULE_BASIC_INFO.?AU_RTL_MODULE_BASIC_INFO@@��
;#
ImageBaseJ=#_RTL_MODULE_BASIC_INFO.?AU_RTL_MODULE_BASIC_INFO@@��>#��>�_WMI_TRACE_PACKET.?AU_WMI_TRACE_PACKET@@F
!Size�
!HookId���
 Type�
 Group>A#_WMI_TRACE_PACKET.?AU_WMI_TRACE_PACKET@@B#0
b&DISPLAYCONFIG_SCALING_IDENTITY���DISPLAYCONFIG_SCALING_CENTERED���DISPLAYCONFIG_SCALING_STRETCHED��DISPLAYCONFIG_SCALING_ASPECTRATIOCENTEREDMAX�DISPLAYCONFIG_SCALING_CUSTOM��DISPLAYCONFIG_SCALING_PREFERRED����DISPLAYCONFIG_SCALING_FORCE_UINT32��BtE#DISPLAYCONFIG_SCALING.?AW4DISPLAYCONFIG_SCALING@@�F#S6>ProcessMemoryPriorityProcessMemoryExhaustionInfo��ProcessAppMemoryInfo�ProcessInPrivateInfo�ProcessPowerThrottling���ProcessReservedValue1ProcessTelemetryCoverageInfo�ProcessProtectionLevelInfo���ProcessLeapSecondInfo	ProcessInformationClassMax���N
tH#_PROCESS_INFORMATION_CLASS.?AW4_PROCESS_INFORMATION_CLASS@@���I#m���_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION.?AU_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION@@���#H�:
#OverallChangeStamp���
L#Descriptors��M#P_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION.?AU_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_INFORMATION@@��N#��6�_MUICCHEADER.?AU_MUICCHEADER@@���
uulMaxStringsSize�
uulSizeStrings
uulMaxNumInstalledCultures
uulNumInstalledCultures���
uulMaxNumUnverifiedCultures���
uulNumUnverifiedCultures��6Q#_MUICCHEADER.?AU_MUICCHEADER@@��R#�j�_EVENT_TRACE_PROFILE_REMOVE_INFORMATION.?AU_EVENT_TRACE_PROFILE_REMOVE_INFORMATION@@^
EventTraceInformationClass���
ProfileSource
�CpuInfoHierarchy�jU#_EVENT_TRACE_PROFILE_REMOVE_INFORMATION.?AU_EVENT_TRACE_PROFILE_REMOVE_INFORMATION@@V#�*
�Linkage��
#SignatureVX#_RTL_DYNAMIC_HASH_TABLE_ENTRY.?AU_RTL_DYNAMIC_HASH_TABLE_ENTRY@@Y#$	N�_OBJECT_NAME_INFORMATION.?AU_OBJECT_NAME_INFORMATION@@��
[#
�Name�N]#_OBJECT_NAME_INFORMATION.?AU_OBJECT_NAME_INFORMATION@@��^#6Nv�_SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION.?AU_SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION@@
`#^�_QUERY_PERFORMANCE_COUNTER_FLAGS.?AU_QUERY_PERFORMANCE_COUNTER_FLAGS@@��>
"Version��
b#Flags
b#ValidFlags���vc#_SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION.?AU_SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION@@d#��

�F�_IO_ERROR_LOG_PACKET.?AU_IO_ERROR_LOG_PACKET@@��B
 MajorFunctionCode
 RetryCount���
!DumpDataSize�
!NumberOfStrings��
!StringOffset�
!EventCategory
ErrorCode
"UniqueErrorValue�
FinalStatus��
"SequenceNumber���
"IoControlCode
~ DeviceOffset�
�(DumpData�F
h#0_IO_ERROR_LOG_PACKET.?AU_IO_ERROR_LOG_PACKET@@��*onecore\internal\sdk\inc\ntiolog.h�i#j#/J�_RTL_CRITICAL_SECTION32.?AU_RTL_CRITICAL_SECTION32@@
l#�
"DebugInfo
LockCount
RecursionCount���
"OwningThread�
"LockSemaphore
"SpinCountJn#_RTL_CRITICAL_SECTION32.?AU_RTL_CRITICAL_SECTION32@@o#��~HardwareProfileChangeEvent���TargetDeviceChangeEvent��DeviceClassChangeEvent���CustomDeviceEventDeviceInstallEvent���DeviceArrivalEvent���VetoEventBlockedDriverEvent���InvalidIDEvent���	DevicePropertyChangeEvent
DeviceInstanceRemovalEvent���DeviceInstanceStartedEvent���MaxPlugEventCategory�J
tq#_PLUGPLAY_EVENT_CATEGORY.?AW4_PLUGPLAY_EVENT_CATEGORY@@���r#�/:
!Group
 Number���
 Reserved�>t#_PROCESSOR_NUMBER.?AU_PROCESSOR_NUMBER@@u#J�_FILE_LAYOUT_INFO_ENTRY.?AU_FILE_LAYOUT_INFO_ENTRY@@
w#�
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ChangeTime���
" FileAttributes���:y#(<anonymous-tag>.?AU<anonymous-tag>@@z#U�v
z#BasicInformation�
"(OwnerId��
",SecurityId���
0Usn��
8StorageReserveId�J|#@_FILE_LAYOUT_INFO_ENTRY.?AU_FILE_LAYOUT_INFO_ENTRY@@}#U�b�_PERFINFO_HARDPAGEFAULT_INFORMATION.?AU_PERFINFO_HARDPAGEFAULT_INFORMATION@@
#v
~ReadOffset���
VirtualAddress���
FileObject���
"ThreadId�
"ByteCountb�# _PERFINFO_HARDPAGEFAULT_INFORMATION.?AU_PERFINFO_HARDPAGEFAULT_INFORMATION@@�#0M^�_JOBOBJECT_BASIC_PROCESS_ID_LIST.?AU_JOBOBJECT_BASIC_PROCESS_ID_LIST@@��
�###�b
"NumberOfAssignedProcesses
"NumberOfProcessIdsInList�
�#ProcessIdList^�#_JOBOBJECT_BASIC_PROCESS_ID_LIST.?AU_JOBOBJECT_BASIC_PROCESS_ID_LIST@@���#}�B�tagWNODE_TOO_SMALL.?AUtagWNODE_TOO_SMALL@@��
�#2
qWnodeHeader��
"0SizeNeeded���B�#8tagWNODE_TOO_SMALL.?AUtagWNODE_TOO_SMALL@@���#t"�QUERY_FILE_LAYOUT_FILTER_TYPE_NONE���QUERY_FILE_LAYOUT_FILTER_TYPE_CLUSTERS���QUERY_FILE_LAYOUT_FILTER_TYPE_FILEID�QUERY_FILE_LAYOUT_FILTER_TYPE_STORAGE_RESERVE_ID�QUERY_FILE_LAYOUT_NUM_FILTER_TYPES���Vt�#_QUERY_FILE_LAYOUT_FILTER_TYPE.?AW4_QUERY_FILE_LAYOUT_FILTER_TYPE@@����#U�jPsNeverDuplicate�PsRequestDuplicate���PsAlwaysDuplicatePsMaxStdHandleStates�Bt�#_PS_STD_HANDLE_STATE.?AW4_PS_STD_HANDLE_STATE@@����#bF�SeImageSignatureNone�SeImageSignatureEmbedded�SeImageSignatureCacheSeImageSignatureCatalogCachedSeImageSignatureCatalogNotCached�SeImageSignatureCatalogHint��SeImageSignaturePackageCatalog���Jt�#_SE_IMAGE_SIGNATURE_TYPE.?AW4_SE_IMAGE_SIGNATURE_TYPE@@����#E�
>�_VIDEOPARAMETERS.?AU_VIDEOPARAMETERS@@��
�#2
�Guid�
"dwOffset�
"dwCommand
"dwFlags��
"dwMode���
" dwTVStandard�
"$dwAvailableModes�
"(dwAvailableTVStandard
",dwFlickerFilter��
"0dwOverScanX��
"4dwOverScanY��
"8dwMaxUnscaledX���
"<dwMaxUnscaledY���
"@dwPositionX��
"DdwPositionY��
"HdwBrightness�
"LdwContrast���
"PdwCPType�
"TdwCPCommand��
"XdwCPStandard�
"\dwCPKey��
"`bCP_APSTriggerBits���
�dbOEMCopyProtection���>�#d_VIDEOPARAMETERS.?AU_VIDEOPARAMETERS@@��*onecore\external\shared\inc\tvout.h�#�#VIMPORT_OBJECT_CODE���IMPORT_OBJECT_DATA���IMPORT_OBJECT_CONST��>t�#IMPORT_OBJECT_TYPE.?AW4IMPORT_OBJECT_TYPE@@����#f�	
�">�_SYSDBG_IO_SPACE.?AU_SYSDBG_IO_SPACE@@��
#Address��
Buffer���
"Request��
�InterfaceType
"BusNumber
"AddressSpace�>�# _SYSDBG_IO_SPACE.?AU_SYSDBG_IO_SPACE@@���#�V�STARTING_LCN_INPUT_BUFFER_EX.?AUSTARTING_LCN_INPUT_BUFFER_EX@@��
�#*
~StartingLcn��
"FlagsV�#STARTING_LCN_INPUT_BUFFER_EX.?AUSTARTING_LCN_INPUT_BUFFER_EX@@���#U;
R�_SECURITY_OBJECT_AI_PARAMS.?AU_SECURITY_OBJECT_AI_PARAMS@@��.
"Size�
"ConstraintMask���R�#_SECURITY_OBJECT_AI_PARAMS.?AU_SECURITY_OBJECT_AI_PARAMS@@���#EJ�_RTL_CONDITION_VARIABLE.?AU_RTL_CONDITION_VARIABLE@@
�#
#��
#��J
�#WakeCount
�#Waking���
#Value
Ptr��J�#_RTL_CONDITION_VARIABLE.?AU_RTL_CONDITION_VARIABLE@@�#�<
�B�_IMAGE_POLICY_ENTRY.?AU_IMAGE_POLICY_ENTRY@@
�#��
�#�#�#�#
�#J�_REPARSE_DATA_BUFFER_EX.?AU_REPARSE_DATA_BUFFER_EX@@N�_REPARSE_GUID_DATA_BUFFER.?AU_REPARSE_GUID_DATA_BUFFER@@�
"Flags
"ExistingReparseTag���
�ExistingReparseGuid��
#Reserved�
\ ReparseDataBuffer
�# ReparseGuidDataBufferJ�#@_REPARSE_DATA_BUFFER_EX.?AU_REPARSE_DATA_BUFFER_EX@@�#UC&
�"B�_IO_STATUS_BLOCK32.?AU_IO_STATUS_BLOCK32@@��.
Status���
"Information��B�#_IO_STATUS_BLOCK32.?AU_IO_STATUS_BLOCK32@@���#U�>�tagNEWTEXTMETRICW.?AUtagNEWTEXTMETRICW@@
�#F
tmHeight�
tmAscent�
tmDescent
tmInternalLeading
tmExternalLeading
tmAveCharWidth���
tmMaxCharWidth���
tmWeight�
 tmOverhang���
$tmDigitizedAspectX���
(tmDigitizedAspectY���
q,tmFirstChar��
q.tmLastChar���
q0tmDefaultChar
q2tmBreakChar��
 4tmItalic�
 5tmUnderlined�
 6tmStruckOut��
 7tmPitchAndFamily�
 8tmCharSet
"<ntmFlags�
u@ntmSizeEM
uDntmCellHeight
uHntmAvgWidth��>�#LtagNEWTEXTMETRICW.?AUtagNEWTEXTMETRICW@@�#S�
r>
"LowPart��
High1Time
High2Time6�#_KSYSTEM_TIME.?AU_KSYSTEM_TIME@@�#/
pF�_ENUM_SERVICE_STATUSA.?AU_ENUM_SERVICE_STATUSA@@
�#J
plpServiceName
plpDisplayName
�ServiceStatusF�#0_ENUM_SERVICE_STATUSA.?AU_ENUM_SERVICE_STATUSA@@�#m�6�tagWINDOWINFO.?AUtagWINDOWINFO@@�
"cbSize���
�rcWindow�
�rcClient�
"$dwStyle��
"(dwExStyle
",dwWindowStatus���
u0cxWindowBorders��
u4cyWindowBorders��
!8atomWindowType���
!:wCreatorVersion��6
�#<tagWINDOWINFO.?AUtagWINDOWINFO@@�#L�8r�_PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION.?AU_PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION@@6
�DynamicFunctionTable�
 Remove���r�#_PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION.?AU_PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION@@�#bNB�_TOKEN_DEFAULT_DACL.?AU_TOKEN_DEFAULT_DACL@@
�"DefaultDacl��B�#_TOKEN_DEFAULT_DACL.?AU_TOKEN_DEFAULT_DACL@@�#E�#�
�#
=
�BWorkerFactoryTimeout�WorkerFactoryRetryTimeoutWorkerFactoryIdleTimeout�WorkerFactoryBindingCountWorkerFactoryThreadMinimum���WorkerFactoryThreadMaximum���WorkerFactoryPaused��WorkerFactoryBasicInformationWorkerFactoryAdjustThreadGoal	WorkerFactoryCallbackType
WorkerFactoryStackInformationWorkerFactoryThreadBasePriority��WorkerFactoryTimeoutWaiters��
WorkerFactoryFlags���WorkerFactoryThreadSoftMaximum���WorkerFactoryThreadCpuSets���MaxWorkerFactoryInfoClassFt�#_WORKERFACTORYINFOCLASS.?AW4_WORKERFACTORYINFOCLASS@@��#��ResponseReturnToCaller���ResponseNotHandled���ResponseAbortResponseCancel���ResponseIgnore���ResponseNo���ResponseOk���ResponseRetryResponseYes��	ResponseTryAgain�
ResponseContinue�>t�#_HARDERROR_RESPONSE.?AW4_HARDERROR_RESPONSE@@��#��B�tagLOCALESIGNATURE.?AUtagLOCALESIGNATURE@@��
�#"#�"#�F
�#lsUsb
�#lsCsbDefault�
�#lsCsbSupported���B�# tagLOCALESIGNATURE.?AUtagLOCALESIGNATURE@@���#S��MemoryNotContiguous��MemoryAlignedAndContiguous���MemoryNotResidentMemoryNotEligibleToMakeContiguousMemoryContiguityStateMax�ft�#_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE.?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@����#B�RDCDC_DEFAULT�DCDC_DISABLE_FONT_UPDATE�DCDC_DISABLE_RELAYOUT^t�#DIALOG_CONTROL_DPI_CHANGE_BEHAVIORS.?AW4DIALOG_CONTROL_DPI_CHANGE_BEHAVIORS@@��#L�N�_SERVICE_TIMECHANGE_INFO.?AU_SERVICE_TIMECHANGE_INFO@@��*
~liNewTime
~liOldTimeN�#_SERVICE_TIMECHANGE_INFO.?AU_SERVICE_TIMECHANGE_INFO@@���#m�6�tagCURSORINFO.?AUtagCURSORINFO@@*�HICON__.?AUHICON__@@
�#R
"cbSize���
"flags
�#hCursor��
�ptScreenPos��6$tagCURSORINFO.?AUtagCURSORINFO@@$L�8�DISPLAYCONFIG_ROTATION_IDENTITY��DISPLAYCONFIG_ROTATION_ROTATE90��DISPLAYCONFIG_ROTATION_ROTATE180�DISPLAYCONFIG_ROTATION_ROTATE270���DISPLAYCONFIG_ROTATION_FORCE_UINT32�Ft$DISPLAYCONFIG_ROTATION.?AW4DISPLAYCONFIG_ROTATION@@���$SAj�_KEY_VALUE_PARTIAL_INFORMATION_ALIGN64.?AU_KEY_VALUE_PARTIAL_INFORMATION_ALIGN64@@��
$:
"Type�
"DataLength���
�Data�j$_KEY_VALUE_PARTIAL_INFORMATION_ALIGN64.?AU_KEY_VALUE_PARTIAL_INFORMATION_ALIGN64@@��	$�`TimerBasicInformationJt$_TIMER_INFORMATION_CLASS.?AW4_TIMER_INFORMATION_CLASS@@���$��N�_FSCTL_UNMAP_SPACE_OUTPUT.?AU_FSCTL_UNMAP_SPACE_OUTPUT@@
~BytesUnmappedN$_FSCTL_UNMAP_SPACE_OUTPUT.?AU_FSCTL_UNMAP_SPACE_OUTPUT@@$U�*Z�_ETW_TP_EVENT_CALLBACK_ENQUEUE.?AU_ETW_TP_EVENT_CALLBACK_ENQUEUE@@��
$~
8Header���
 PoolId���
(TaskId���
0Callback�
8Context��
@SubProcessTagZ$H_ETW_TP_EVENT_CALLBACK_ENQUEUE.?AU_ETW_TP_EVENT_CALLBACK_ENQUEUE@@��$0�^�_SYSTEM_DPC_BEHAVIOR_INFORMATION.?AU_SYSTEM_DPC_BEHAVIOR_INFORMATION@@��~
"Spare
"DpcQueueDepth
"MinimumDpcRate���
"AdjustDpcThreshold���
"IdealDpcRate�^$_SYSTEM_DPC_BEHAVIOR_INFORMATION.?AU_SYSTEM_DPC_BEHAVIOR_INFORMATION@@��$��

B
"NodeNumber���
�Reserved�
�GroupMaskJ$(_NUMA_NODE_RELATIONSHIP.?AU_NUMA_NODE_RELATIONSHIP@@$|%N�_POOLED_USAGE_AND_LIMITS.?AU_POOLED_USAGE_AND_LIMITS@@��
#PeakPagedPoolUsage���
#PagedPoolUsage���
#PagedPoolLimit���
#PeakNonPagedPoolUsage
# NonPagedPoolUsage
#(NonPagedPoolLimit
#0PeakPagefileUsage
#8PagefileUsage
#@PagefileLimitN	 $H_POOLED_USAGE_AND_LIMITS.?AU_POOLED_USAGE_AND_LIMITS@@��!$}l6�_ETW_UMGL_KEY.?AU_ETW_UMGL_KEY@@&
 LoggerId�
 Flags6$$_ETW_UMGL_KEY.?AU_ETW_UMGL_KEY@@%$RR�_PERFINFO_CC_CAN_WRITE_FAIL.?AU_PERFINFO_CC_CAN_WRITE_FAIL@@n
#FileObjectKey
#TotalDirtyPages��
#DirtyPageThreshold���
"BytesToWrite�R($ _PERFINFO_CC_CAN_WRITE_FAIL.?AU_PERFINFO_CC_CAN_WRITE_FAIL@@)$0�V�_ETW_TP_EVENT_POOL_TH_MAX_SET.?AU_ETW_TP_EVENT_POOL_TH_MAX_SET@@>
8Header���
 PoolId���
"(ThreadNumV,$0_ETW_TP_EVENT_POOL_TH_MAX_SET.?AU_ETW_TP_EVENT_POOL_TH_MAX_SET@@-$0� #P��
"ControlWord��
"StatusWord���
"TagWord��
"ErrorOffset��
"ErrorSelector
"DataOffset���
"DataSelector�
/$RegisterArea�
"lCr0NpxState��N	0$p_WOW64_FLOATING_SAVE_AREA.?AU_WOW64_FLOATING_SAVE_AREA@@1$dBV�_PERFINFO_PPM_STATE_SELECTION.?AU_PERFINFO_PPM_STATE_SELECTION@@
3$J
"SelectedState
"VetoedStates�
�VetoReason���V5$_PERFINFO_PPM_STATE_SELECTION.?AU_PERFINFO_PPM_STATE_SELECTION@@6$0,
-"
cx���
cy���*9$tagSIZE.?AUtagSIZE@@:$A�J�_RTL_SPARSE_BITMAP_RUN.?AU_RTL_SPARSE_BITMAP_RUN@@��
<$b
"StartingIndexLow�
"StartingIndexHigh
"Length���
Metadata�J>$_RTL_SPARSE_BITMAP_RUN.?AU_RTL_SPARSE_BITMAP_RUN@@��?$��
�R�IMAGE_AUX_SYMBOL_TOKEN_DEF.?AUIMAGE_AUX_SYMBOL_TOKEN_DEF@@��
B$��
C$^
 bAuxType�
 bReserved
"SymbolTableIndex�
/rgbReserved��RE$IMAGE_AUX_SYMBOL_TOKEN_DEF.?AUIMAGE_AUX_SYMBOL_TOKEN_DEF@@��F$fJ�_RTL_RETPOLINE_ROUTINES.?AU_RTL_RETPOLINE_ROUTINES@@�
"UnwindDataOffset�
(SwitchtableJump��
"DCfgIndirectRax���
"HNonCfgIndirectRax
"LImportR10JI$P_RTL_RETPOLINE_ROUTINES.?AU_RTL_RETPOLINE_ROUTINES@@J$�XJ�_REG_NOTIFY_INFORMATION.?AU_REG_NOTIFY_INFORMATION@@:KeyAdded�KeyRemoved���KeyModified��.tM$_REG_ACTION.?AW4_REG_ACTION@@�N$zbV
"NextEntryOffset��
N$Action���
"KeyLength
JKey��JP$_REG_NOTIFY_INFORMATION.?AU_REG_NOTIFY_INFORMATION@@Q$zhNLowMemoryResourceNotificationHighMemoryResourceNotification���^tS$_MEMORY_RESOURCE_NOTIFICATION_TYPE.?AW4_MEMORY_RESOURCE_NOTIFICATION_TYPE@@���T$Q�F�_RTL_DISK_SPACE_INFO.?AU_RTL_DISK_SPACE_INFO@@��
V$�RtlDiskSpacePolicyVeryLow
RtlDiskSpacePolicyLowRtlDiskSpacePolicyBelowNormalRtlDiskSpacePolicyNormal�BtX$RTL_DISK_SPACE_POLICY.?AW4RTL_DISK_SPACE_POLICY@@�Y$�'
Y$Policy���F[$_RTL_DISK_SPACE_INFO.?AU_RTL_DISK_SPACE_INFO@@��\$�.^�_ETW_PARTITION_INFO_EXTENSION_V2.?AU_ETW_PARTITION_INFO_EXTENSION_V2@@��b
!EventVersion�
!Reserved�
"PartitionType
~QpcOffsetFromRoot^_$_ETW_PARTITION_INFO_EXTENSION_V2.?AU_ETW_PARTITION_INFO_EXTENSION_V2@@��`$�6�tagSTYLEBUFA.?AUtagSTYLEBUFA@@��.
"dwStyle��
G"szDescription6c$$tagSTYLEBUFA.?AUtagSTYLEBUFA@@��d$���RtlRXactOperationDelete��RtlRXactOperationSetValueRtlRXactOperationDelAttributeRtlRXactOperationSetAttributeBtf$_RTL_RXACT_OPERATION.?AW4_RTL_RXACT_OPERATION@@���g$��jMonitorRequestTypeOffMonitorRequestTypeOnAndPresent���MonitorRequestTypeToggleOn���Nti$_POWER_MONITOR_REQUEST_TYPE.?AW4_POWER_MONITOR_REQUEST_TYPE@@�j$FNJ�_CI_LOG_SCHEDULER_EVENT.?AU_CI_LOG_SCHEDULER_EVENT@@f
�Header���
"0ProcessId
"4ThreadId�
"8Priority�
"<TaskIndexJm$@_CI_LOG_SCHEDULER_EVENT.?AU_CI_LOG_SCHEDULER_EVENT@@n$0B2�_WOW64INFO.?AU_WOW64INFO@@��V�_ETW_COVERAGE_SAMPLER_OPTIONS.?AU_ETW_COVERAGE_SAMPLER_OPTIONS@@q#�
Flags
"HashSeed�
"ImageLruSize�
"SampleTableMinEntries
"SampleTableMaxEntries
"SampleTableMaxQueued�
"SampleBufferSize�
"SampleBufferMaxCountPerProc��
" CaptureBufferMaxCountPerProc�
"$ApcMaxCountPerProc���
"(ProfileSamplePeriodUS
",ProfileSampleCountPerPeriod��
"0CSwitchSamplePeriodUS
"4CSwitchSampleCountPerPeriod��
"8RThreadSamplePeriodUS
"<RThreadSampleCountPerPeriod��
"@PGFaultSamplePeriodUS
"DPGFaultSampleCountPerPeriod��
"HStackDepth���
"LStackCacheEntries
r$PPathInclusionList
r$PPathExclusionListVs$P_ETW_COVERAGE_SAMPLER_OPTIONS.?AU_ETW_COVERAGE_SAMPLER_OPTIONS@@t$
x"F�_WMI_DELAY_EXECUTION.?AU_WMI_DELAY_EXECUTION@@��&
"ThreadId�
#DeltaFx$_WMI_DELAY_EXECUTION.?AU_WMI_DELAY_EXECUTION@@��y$0�	
]Z�_ALPC_PORT_CALLBACK_INFORMATION.?AU_ALPC_PORT_CALLBACK_INFORMATION@@2
CallbackObject���
Context��Z}$_ALPC_PORT_CALLBACK_INFORMATION.?AU_ALPC_PORT_CALLBACK_INFORMATION@@~$�,.�tagEMREOF.?AUtagEMREOF@@V
Pemr��
"nPalEntries��
"offPalEntries
"nSizeLast.�$tagEMREOF.?AUtagEMREOF@@�$S�
�N�_TOKEN_ACCESS_INFORMATION.?AU_TOKEN_ACCESS_INFORMATION@@
>�_TOKEN_PRIVILEGES.?AU_TOKEN_PRIVILEGES@@
�$2TokenPrimary�TokenImpersonation���.t�$_TOKEN_TYPE.?AW4_TOKEN_TYPE@@��$E!R
�$SidHash��
�$RestrictedSidHash
�$Privileges���
TAuthenticationId�
�$ TokenType
�$ImpersonationLevel���
}(MandatoryPolicy��
",Flags
"0AppContainerNumber���
8PackageSid���
�$@CapabilitiesHash�
HTrustLevelSid
PSecurityAttributes���N
�$X_TOKEN_ACCESS_INFORMATION.?AU_TOKEN_ACCESS_INFORMATION@@�$E��KeyValueBasicInformation�KeyValueFullInformation��KeyValuePartialInformation���KeyValueFullInformationAlign64���KeyValuePartialInformationAlign64KeyValueLayerInformation�MaxKeyValueInfoClass�Rt�$_KEY_VALUE_INFORMATION_CLASS.?AW4_KEY_VALUE_INFORMATION_CLASS@@����$�r:�_RTL_AVL_TABLE.?AU_RTL_AVL_TABLE@@��
�$B�_RTL_BALANCED_LINKS.?AU_RTL_BALANCED_LINKS@@
�$JGenericLessThan��GenericGreaterThan���GenericEqual�Rt�$_RTL_GENERIC_COMPARE_RESULTS.?AW4_RTL_GENERIC_COMPARE_RESULTS@@����$$O
�$�$�$�$
�$�$"�$
�$�$�$
�$.
�$BalancedRoot�
 OrderedPointer���
"(WhichOrderedElement��
",NumberGenericTableElements���
"0DepthOfTree��
�$8RestartKey���
"@DeleteCount��
�$HCompareRoutine���
�$PAllocateRoutine��
�$XFreeRoutine��
`TableContext�:�$h_RTL_AVL_TABLE.?AU_RTL_AVL_TABLE@@���$$����DISPLAYCONFIG_OUTPUT_TECHNOLOGY_OTHER���DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HD15�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SVIDEO���DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPOSITE_VIDEO��DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPONENT_VIDEO��DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DVI��DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HDMI�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_LVDS�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_D_JPN	DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDI��
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EXTERNAL�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EMBEDDED�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EXTERNAL�
DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EMBEDDED�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDTVDONGLE���DISPLAYCONFIG_OUTPUT_TECHNOLOGY_MIRACAST�DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INDIRECT_WIRED���DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INDIRECT_VIRTUAL���DISPLAYCONFIG_OUTPUT_TECHNOLOGY_INTERNAL���DISPLAYCONFIG_OUTPUT_TECHNOLOGY_FORCE_UINT32bt�$DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY.?AW4DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY@@��$S�

�
�F�_RTL_DISK_SPEED_INFO.?AU_RTL_DISK_SPEED_INFO@@��B
RtlDiskSpeedPolicyNormal�RtlDiskSpeedPolicyFast���Bt�$RTL_DISK_SPEED_POLICY.?AW4RTL_DISK_SPEED_POLICY@@��$�
�$Policy���F�$_RTL_DISK_SPEED_INFO.?AU_RTL_DISK_SPEED_INFO@@���$�#�NotAppContainerSidType���ChildAppContainerSidType�ParentAppContainerSidTypeInvalidAppContainerSidType���MaxAppContainerSidType���Ft�$_APPCONTAINER_SID_TYPE.?AW4_APPCONTAINER_SID_TYPE@@����$$�"^�_IO_COMPLETION_BASIC_INFORMATION.?AU_IO_COMPLETION_BASIC_INFORMATION@@��
Depth^�$_IO_COMPLETION_BASIC_INFORMATION.?AU_IO_COMPLETION_BASIC_INFORMATION@@���$!CJ�RETRIEVAL_POINTER_COUNT.?AURETRIEVAL_POINTER_COUNT@@
"ExtentCount��J�$RETRIEVAL_POINTER_COUNT.?AURETRIEVAL_POINTER_COUNT@@�$U�
J�_ETW_READY_THREAD_EVENT.?AU_ETW_READY_THREAD_EVENT@@
 ��
 ��
 ��
 ��
 ��
"ThreadId�
 AdjustReason�
pAdjustIncrement��
�$ExecutingDpc�
�$KernelStackNotResident���
�$ProcessOutOfMemory���
�$DirectSwitchAttempt��
�$Reserved�
 Flags
 SpareByteJ
�$_ETW_READY_THREAD_EVENT.?AU_ETW_READY_THREAD_EVENT@@�$0�	
"
 *
As32Bit��
� As64Bit��B�$�_PEBS_DS_SAVE_AREA.?AU_PEBS_DS_SAVE_AREA@@���$���PsWakeReasonUser�PsWakeReasonExecutionRequiredPsWakeReasonKernel���PsWakeReasonInstrumentation��PsWakeReasonPreserveProcess��PsWakeReasonActivityReferencePsWakeReasonWorkOnBehalf�PsMaxWakeReasons�6t�$_PS_WAKE_REASON.?AW4_PS_WAKE_REASON@@��$b^�_ETW_COVERAGE_SAMPLER_CREATE_INFO.?AU_ETW_COVERAGE_SAMPLER_CREATE_INFO@@
�$b�_ETW_COVERAGE_SAMPLER_BLOOM_FILTER.?AU_ETW_COVERAGE_SAMPLER_BLOOM_FILTER@@��V
�Common���
q$Options��
�$`Bloom
#xSamplesReadyEvent^�$�_ETW_COVERAGE_SAMPLER_CREATE_INFO.?AU_ETW_COVERAGE_SAMPLER_CREATE_INFO@@�$
l.�tagEMRARC.?AUtagEMRARC@@N
Pemr��
,rclBox���
�ptlStart�
� ptlEnd���.�$(tagEMRARC.?AUtagEMRARC@@�$S%:�_GRADIENT_RECT.?AU_GRADIENT_RECT@@��.
"UpperLeft
"LowerRight���:�$_GRADIENT_RECT.?AU_GRADIENT_RECT@@���$S:ZErrorRecoverable�ErrorFatal���ErrorCorrected���ErrorOthers��Bt�$_ERROR_SEVERITY_VALUE.?AW4_ERROR_SEVERITY_VALUE@@��$�~Width8Bits���Width16Bits��Width32Bits��Width64Bits��WidthNoWrap��MaximumDmaWidth��.t�$_DMA_WIDTH.?AW4_DMA_WIDTH@@����$U�+
�$^�_FILE_PIPE_CLIENT_PROCESS_BUFFER.?AU_FILE_PIPE_CLIENT_PROCESS_BUFFER@@��
�$2
ClientSession
ClientProcess^�$_FILE_PIPE_CLIENT_PROCESS_BUFFER.?AU_FILE_PIPE_CLIENT_PROCESS_BUFFER@@���$U1)J�_HEAP_RANGE_INFORMATION.?AU_HEAP_RANGE_INFORMATION@@�
#Address��
#Size�
"Type�
"Protection���
#FirstBlockInformationOffset��
# NextRangeInformationOffset���J�$(_HEAP_RANGE_INFORMATION.?AU_HEAP_RANGE_INFORMATION@@�$��f�_HEAP_OPTIMIZE_RESOURCES_INFORMATION.?AU_HEAP_OPTIMIZE_RESOURCES_INFORMATION@@��
�$&
"Version��
"Flagsf�$_HEAP_OPTIMIZE_RESOURCES_INFORMATION.?AU_HEAP_OPTIMIZE_RESOURCES_INFORMATION@@���$�|Z�_PROCESS_ENERGY_TRACKING_STATE.?AU_PROCESS_ENERGY_TRACKING_STATE@@��
"��v
"StateUpdateMask��
"StateDesiredValue
"StateSequence
�$UpdateTag
�Tag��Z�$�_PROCESS_ENERGY_TRACKING_STATE.?AU_PROCESS_ENERGY_TRACKING_STATE@@���$bpZ�_SERVICE_LAUNCH_PROTECTED_INFO.?AU_SERVICE_LAUNCH_PROTECTED_INFO@@��
�$
"dwLaunchProtectedZ�$_SERVICE_LAUNCH_PROTECTED_INFO.?AU_SERVICE_LAUNCH_PROTECTED_INFO@@���$m�R�_FILE_NUMA_NODE_INFORMATION.?AU_FILE_NUMA_NODE_INFORMATION@@
!NodeNumber���R�$_FILE_NUMA_NODE_INFORMATION.?AU_FILE_NUMA_NODE_INFORMATION@@�$U
�MemoryTypePaged��MemoryTypeNonPaged���MemoryTypeLargePage��MemoryTypeHugePage���MemoryTypeMax:t%_RTL_MEMORY_TYPE.?AW4_RTL_MEMORY_TYPE@@���%$�
V�_NDR_CS_SIZE_CONVERT_ROUTINES.?AU_NDR_CS_SIZE_CONVERT_ROUTINES@@ZIDL_CS_NO_CONVERTIDL_CS_IN_PLACE_CONVERT��IDL_CS_NEW_BUFFER_CONVERT6t%_IDL_CS_CONVERT.?AW4_IDL_CS_CONVERT@@�%��
%""%""%
	%
D"
	%&" """"
%
%b

%pfnNetSize���
%pfnToNetCs���
%pfnLocalSize�
%pfnFromNetCs�V% _NDR_CS_SIZE_CONVERT_ROUTINES.?AU_NDR_CS_SIZE_CONVERT_ROUTINES@@%��F�_CONSOLE_FONT_INFOEX.?AU_CONSOLE_FONT_INFOEX@@��
"cbSize���
"nFont
j"dwFontSize���
uFontFamily���
uFontWeight���
�FaceName�F%T_CONSOLE_FONT_INFOEX.?AU_CONSOLE_FONT_INFOEX@@��6onecore\external\sdk\inc\mincore\consoleapi3.h�%%BB�_SE_ACCESS_REQUEST.?AU_SE_ACCESS_REQUEST@@��
#>�_GENERIC_MAPPING.?AU_GENERIC_MAPPING@@��
%>�_OBJECT_TYPE_LIST.?AU_OBJECT_TYPE_LIST@@
%�
"Size�
%SeSecurityDescriptor�
"DesiredAccess
"PreviouslyGrantedAccess��
PrincipalSelfSid�
% GenericMapping���
"(ObjectTypeListCount��
%0ObjectTypeList���B%8_SE_ACCESS_REQUEST.?AU_SE_ACCESS_REQUEST@@��%E�
�$��  �"%:�_XSTATE_FEATURE.?AU_XSTATE_FEATURE@@&
"Offset���
"Size�:%%_XSTATE_FEATURE.?AU_XSTATE_FEATURE@@&%|_j�_REFS_VOLUME_COUNTER_INFO_INPUT_BUFFER.?AU_REFS_VOLUME_COUNTER_INFO_INPUT_BUFFER@@��
 ResetCountersj)%_REFS_VOLUME_COUNTER_INFO_INPUT_BUFFER.?AU_REFS_VOLUME_COUNTER_INFO_INPUT_BUFFER@@��*%U�)^PdataRefToFullXdata��PdataPackedUnwindFunctionPdataPackedUnwindFragment>t,%ARM64_FNPDATA_FLAGS.?AW4ARM64_FNPDATA_FLAGS@@�-%f�6�provider_info.?AUprovider_info@@2�val_context.?AUval_context@@
0%1%""""2%
3%�
4%pi_R0_1val���
4%pi_R0_allvals
4%pi_R3_1val���
4%pi_R3_allvals
" pi_flags�
(pi_key_context���65%0provider_info.?AUprovider_info@@6%��:�tagWNDCLASSEXA.?AUtagWNDCLASSEXA@@���u#9%
:%
�#
ucbSize���
ustyle
;%lpfnWndProc��
tcbClsExtra���
tcbWndExtra���
�hInstance
<% hIcon
�#(hCursor��
+!0hbrBackground
q8lpszMenuName�
q@lpszClassName
<%HhIconSm��:=%PtagWNDCLASSEXA.?AUtagWNDCLASSEXA@@��>%L�
�pptA%
B%r
ThreadListHead���
CompletionEvent��
"CompletionFlags��
InternalListHead�ND% _RTL_UMS_COMPLETION_LIST.?AU_RTL_UMS_COMPLETION_LIST@@��E%$�!:�tagEMRGLSRECORD.?AUtagEMRGLSRECORD@@6
Pemr��
"cbData���
�Data�:H%tagEMRGLSRECORD.?AUtagEMRGLSRECORD@@I%S�
VppupK%"L%
M%F�_KEY_NODE_INFORMATION.?AU_KEY_NODE_INFORMATION@@
O%�
~LastWriteTime
"TitleIndex���
"ClassOffset��
"ClassLength��
"NameLength���
JName�FQ% _KEY_NODE_INFORMATION.?AU_KEY_NODE_INFORMATION@@R%��*�pvalueW.?AUpvalueW@@
T%b
qpv_valuename�
tpv_valuelen��
pv_value_context�
"pv_type��*V% pvalueW.?AUpvalueW@@W%���CmExtendedParameterInvalidType���CmExtendedParameterTrustClassKey�CmExtendedParameterEvent�CmExtendedParameterFileAccessToken���CmExtendedParameterMax���NtY%CM_EXTENDED_PARAMETER_TYPE.?AW4CM_EXTENDED_PARAMETER_TYPE@@���Z%z
Z%
�$r�_MEMORY_PARTITION_CONFIGURATION_INFORMATION.?AU_MEMORY_PARTITION_CONFIGURATION_INFORMATION@@##@��
"Flags
"NumaNode�
"Channel��
"NumberOfNumaNodes
#ResidentAvailablePages���
#CommittedPages���
# CommitLimit��
#(PeakCommitment���
#0TotalNumberOfPages���
#8AvailablePages���
#@ZeroPages
#HFreePages
#PStandbyPages�
_%XStandbyPageCountByPriority���
_%�RepurposedPagesByPriority
#�MaximumCommitLimit���
#�DonatedPagesToPartitions�
"�PartitionId��r`%�_MEMORY_PARTITION_CONFIGURATION_INFORMATION.?AU_MEMORY_PARTITION_CONFIGURATION_INFORMATION@@a%B�
�
�##x�
ExceptionCode
"ExceptionFlags���
d%ExceptionRecord��
ExceptionAddress�
"NumberParameters�
e% ExceptionInformation�>f%�_EXCEPTION_RECORD.?AU_EXCEPTION_RECORD@@.onecore\internal\sdk\inc\ntxcapi_x.h���g%h%MV�_TOKEN_SECURITY_ATTRIBUTE_V1.?AU_TOKEN_SECURITY_ATTRIBUTE_V1@@��f�_TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE.?AU_TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE@@��
k%v�_TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE.?AU_TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE@@��
m%f
pInt64���
#pUint64��
8pString��
l%pFqbn
n%pOctetString�2o%<anonymous-tag>.?AT<anonymous-tag>@@p%^�v
�Name�
!ValueType
!Reserved�
"Flags
"ValueCount���
p% Values���Vr%(_TOKEN_SECURITY_ATTRIBUTE_V1.?AU_TOKEN_SECURITY_ATTRIBUTE_V1@@��s%^�F�_PERFINFO_CCSWAP_IDLE.?AU_PERFINFO_CCSWAP_IDLE@@
u%
"��
"��*
w%DataType�
x%TimeDeltaFy%_PERFINFO_CCSWAP_IDLE.?AU_PERFINFO_CCSWAP_IDLE@@z%0��
|%}%~%R�_UNIQUE_PROCESS_INFORMATION.?AU_UNIQUE_PROCESS_INFORMATION@@
#	��
#0	��
#9��F
�%DontUse��
�%UniqueProcessKey�
�%Reserved�R�%_UNIQUE_PROCESS_INFORMATION.?AU_UNIQUE_PROCESS_INFORMATION@@�%BV�_ACCESS_ALLOWED_CALLBACK_ACE.?AU_ACCESS_ALLOWED_CALLBACK_ACE@@��:
�Header���
"Mask�
"SidStart�V�%_ACCESS_ALLOWED_CALLBACK_ACE.?AU_ACCESS_ALLOWED_CALLBACK_ACE@@���%E�
u��
�%"�%�%
�%B�tagCOMPOSITIONFORM.?AUtagCOMPOSITIONFORM@@��
�%B
"dwStyle��
�ptCurrentPos�
�rcArea���B�%tagCOMPOSITIONFORM.?AUtagCOMPOSITIONFORM@@���%�5R�_WMI_JOB_SET_QUERY_CPU_RATE.?AU_WMI_JOB_SET_QUERY_CPU_RATE@@&
"AllFlags�
"ValueR�%_WMI_JOB_SET_QUERY_CPU_RATE.?AU_WMI_JOB_SET_QUERY_CPU_RATE@@�%0�^�_ACTIVATION_CONTEXT_ASSEMBLY_DATA.?AU_ACTIVATION_CONTEXT_ASSEMBLY_DATA@@
Z�
"Size�
"Flags
�%AssemblyName�
"AssemblyNameLength���
"HashAlgorithm
"PseudoKey^�% _ACTIVATION_CONTEXT_ASSEMBLY_DATA.?AU_ACTIVATION_CONTEXT_ASSEMBLY_DATA@@�%�
v�_JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION.?AU_JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION@@��
yAction���
#RecordNumber�
~TimeStamp
�KeyPathName��
~(OldLastWriteTime�
~0NewLastWriteTime�v�%8_JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION.?AU_JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION@@���%z�
GN�tagEMRSCALEVIEWPORTEXTEX.?AUtagEMRSCALEVIEWPORTEXTEX@@��Z
Pemr��
xNum�
xDenom���
yNum�
yDenom���N�%tagEMRSCALEVIEWPORTEXTEX.?AUtagEMRSCALEVIEWPORTEXTEX@@���%S�
� �
 Allocated
 Spare0���
!AllocatorBackTraceIndex��
"Size�
�Tag��
"TagUlong�
ProcessChargedQuota��B�%_SYSTEM_POOL_ENTRY.?AU_SYSTEM_POOL_ENTRY@@���%�_
6�_WMI_REGISTRY.?AU_WMI_REGISTRY@@
�%r
InitialTime��
"Status���
"Index
"InfoClass
Kcb��
JName�6�% _WMI_REGISTRY.?AU_WMI_REGISTRY@@�%0�J�_STACK_WALK_EVENT_DATA.?AU_STACK_WALK_EVENT_DATA@@��R
#TimeStamp
"ProcessId
"ThreadId�
2AddressesJ�%_STACK_WALK_EVENT_DATA.?AU_STACK_WALK_EVENT_DATA@@���%0
�%:�_CLUSTER_RANGE.?AU_CLUSTER_RANGE@@��
�%6
~StartingCluster��
~ClusterCount�:�%_CLUSTER_RANGE.?AU_CLUSTER_RANGE@@���%U�Z�_QUERY_BAD_RANGES_OUTPUT_RANGE.?AU_QUERY_BAD_RANGES_OUTPUT_RANGE@@��V
"Flags
"Reserved�
#StartOffset��
#LengthInBytesZ�%_QUERY_BAD_RANGES_OUTPUT_RANGE.?AU_QUERY_BAD_RANGES_OUTPUT_RANGE@@���%U7!b�_PERFINFO_SYSTEM_MEMORY_INFORMATION.?AU_PERFINFO_SYSTEM_MEMORY_INFORMATION@@z
#PagedPoolCommitPageCount�
#NonPagedPoolPageCount
#MdlPageCount�
#CommitPageCount��b�% _PERFINFO_SYSTEM_MEMORY_INFORMATION.?AU_PERFINFO_SYSTEM_MEMORY_INFORMATION@@�%0�R�_ETW_IDEAL_PROCESSOR_EVENT.?AU_ETW_IDEAL_PROCESSOR_EVENT@@��N
"ThreadId�
"OldIdealProcessor
"NewIdealProcessorR�%_ETW_IDEAL_PROCESSOR_EVENT.?AU_ETW_IDEAL_PROCESSOR_EVENT@@���%0

* f�_PROCESS_KEEPALIVE_COUNT_INFORMATION.?AU_PROCESS_KEEPALIVE_COUNT_INFORMATION@@��
�%.
"WakeCount
"NoWakeCount��f�%_PROCESS_KEEPALIVE_COUNT_INFORMATION.?AU_PROCESS_KEEPALIVE_COUNT_INFORMATION@@���%}1N�_ETW_CANCEL_KTIMER2_EVENT.?AU_ETW_CANCEL_KTIMER2_EVENT@@
#TimerKey�N�%_ETW_CANCEL_KTIMER2_EVENT.?AU_ETW_CANCEL_KTIMER2_EVENT@@�%0�
_^�_TXFS_READ_BACKUP_INFORMATION_OUT.?AU_TXFS_READ_BACKUP_INFORMATION_OUT@@.
"BufferLength�
�Buffer���^�%_TXFS_READ_BACKUP_INFORMATION_OUT.?AU_TXFS_READ_BACKUP_INFORMATION_OUT@@�%U`F�_THREAD_ENERGY_VALUES.?AU_THREAD_ENERGY_VALUES@@
�%6�_TIMELINE_BITMAP.?AT_TIMELINE_BITMAP@@��j
�Cycles���
�@AttributedCycles�
��WorkOnBehalfCycles���
�%�CpuTimeline��F�%�_THREAD_ENERGY_VALUES.?AU_THREAD_ENERGY_VALUES@@�%b��_SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION.?AU_SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION@@"
 EfiLauncherEnabled����%_SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION.?AU_SYSTEM_PORTABLE_WORKSPACE_EFI_LAUNCHER_INFORMATION@@�%��N�_LDR_ENUM_RESOURCE_ENTRY.?AU_LDR_ENUM_RESOURCE_ENTRY@@��
�N
#NameOrId�
�%Name�
!Id���
!NameIsPresent2�%<anonymous-tag>.?AT<anonymous-tag>@@�%�a�%#�F
�%Path�
Data�
" Size�
"$Reserved�N�%(_LDR_ENUM_RESOURCE_ENTRY.?AU_LDR_ENUM_RESOURCE_ENTRY@@���%�`b�_SYSTEM_REGISTRY_QUOTA_INFORMATION.?AU_SYSTEM_REGISTRY_QUOTA_INFORMATION@@��V
"RegistryQuotaAllowed�
"RegistryQuotaUsed
#PagedPoolSizeb�%_SYSTEM_REGISTRY_QUOTA_INFORMATION.?AU_SYSTEM_REGISTRY_QUOTA_INFORMATION@@���%��R�_PERFINFO_BATTERY_LIFE_INFO.?AU_PERFINFO_BATTERY_LIFE_INFO@@.
"RemainingCapacity
"Rate�R�%_PERFINFO_BATTERY_LIFE_INFO.?AU_PERFINFO_BATTERY_LIFE_INFO@@�%0/b�_WIM_PROVIDER_SUSPEND_OVERLAY_INPUT.?AU_WIM_PROVIDER_SUSPEND_OVERLAY_INPUT@@
�%
~DataSourceId�b�%_WIM_PROVIDER_SUSPEND_OVERLAY_INPUT.?AU_WIM_PROVIDER_SUSPEND_OVERLAY_INPUT@@�%U7"B�_ALPC_CONTEXT_ATTR.?AU_ALPC_CONTEXT_ATTR@@��v
PortContext��
MessageContext���
"Sequence�
"MessageId
"CallbackId���B�% _ALPC_CONTEXT_ATTR.?AU_ALPC_CONTEXT_ATTR@@���%�
�%f�_JOURNAL_SET_DELETE_VALUE_INFORMATION.?AU_JOURNAL_SET_DELETE_VALUE_INFORMATION@@�
yAction���
#RecordNumber�
~TimeStamp
�KeyPathName��
�(ValueName
"8OldValueType�
"<OldDataLength
@OldData��
"HNewValueType�
"LNewDataLength
PNewData��f�%X_JOURNAL_SET_DELETE_VALUE_INFORMATION.?AU_JOURNAL_SET_DELETE_VALUE_INFORMATION@@�%z�KeyWriteTimeInformation��KeyWow64FlagsInformation�KeyControlFlagsInformation���KeySetVirtualizationInformation��KeySetDebugInformation���KeySetHandleTagsInformation��KeySetLayerInformation���MaxKeySetInfoClass���Nt�%_KEY_SET_INFORMATION_CLASS.?AW4_KEY_SET_INFORMATION_CLASS@@���&�8N�_QUERY_FILE_LAYOUT_INPUT.?AU_QUERY_FILE_LAYOUT_INPUT@@��
&�%#�F�_FILE_REFERENCE_RANGE.?AU_FILE_REFERENCE_RANGE@@&#�V
&ClusterRanges
&FileReferenceRanges��
E StorageReserveIds2&<anonymous-tag>.?AT<anonymous-tag>@@&U0�
"FilterEntryCount�
"NumberOfPairs
"Flags
�#FilterType���
"Reserved�
&Filter���N
& _QUERY_FILE_LAYOUT_INPUT.?AU_QUERY_FILE_LAYOUT_INPUT@@��&U	N�_CSV_QUERY_REDIRECT_STATE.?AU_CSV_QUERY_REDIRECT_STATE@@F
"MdsNodeId
"DsNodeId�
 FileRedirected���N&_CSV_QUERY_REDIRECT_STATE.?AU_CSV_QUERY_REDIRECT_STATE@@&U`
�%��
&n�_POWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICES.?AU_POWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICES@@
 IsAllowedn&_POWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICES.?AU_POWER_SESSION_ALLOW_EXTERNAL_DMA_DEVICES@@&FC!&.�_RTL_RUN_ONCE.?AT_RTL_RUN_ONCE@@
#��2
Ptr��
#Value
&State.&_RTL_RUN_ONCE.?AT_RTL_RUN_ONCE@@&$V�_QUERY_BAD_RANGES_INPUT_RANGE.?AU_QUERY_BAD_RANGES_INPUT_RANGE@@2
#StartOffset��
#LengthInBytesV&_QUERY_BAD_RANGES_INPUT_RANGE.?AU_QUERY_BAD_RANGES_INPUT_RANGE@@ &U!z�_RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY.?AU_RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY@@
"&B
�ControlFlowGuard�
�StrictControlFlowGuard���z$&_RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY.?AU_RTL_IMAGE_MITIGATION_CONTROL_FLOW_GUARD_POLICY@@%&�x�
ucbSize���
tiContextType�
tiCtrlId��
hItemHandle��
#dwContextId��
� MousePos�2'&(tagHELPINFO.?AUtagHELPINFO@@(&LK#6�tagWNDCLASSW.?AUtagWNDCLASSW@@��
*&�
ustyle
;%lpfnWndProc��
tcbClsExtra���
tcbWndExtra���
�hInstance
<% hIcon
�#(hCursor��
+!0hbrBackground
�8lpszMenuName�
�@lpszClassName6
,&HtagWNDCLASSW.?AUtagWNDCLASSW@@��-&LJ�_WNF_USER_SUBSCRIPTION.?AU_WNF_USER_SUBSCRIPTION@@��>�tagLOGCOLORSPACEA.?AUtagLOGCOLORSPACEA@@
0&�
"lcsSignature�
"lcsVersion���
"lcsSize��
lcsCSType
lcsIntent
�lcsEndpoints�
"8lcsGammaRed��
"<lcsGammaGreen
"@lcsGammaBlue�
7DlcsFilename��>
2&HtagLOGCOLORSPACEA.?AUtagLOGCOLORSPACEA@@3&S�R�_SYSTEM_OBJECT_INFORMATION.?AU_SYSTEM_OBJECT_INFORMATION@@��B
"NextEntryOffset��
Object���
CreatorUniqueProcess�
!CreatorBackTraceIndex
!Flags
PointerCount�
 HandleCount��
"$PagedPoolCharge��
"(NonPagedPoolCharge���
0ExclusiveProcessId���
8SecurityDescriptor���
[#@NameInfo�R6&P_SYSTEM_OBJECT_INFORMATION.?AU_SYSTEM_OBJECT_INFORMATION@@��7&�0	
(!V�COPYFILE2_EXTENDED_PARAMETERS.?AUCOPYFILE2_EXTENDED_PARAMETERS@@
\z
"dwSize���
"dwCopyFlags��
tpfCancel�
;&pProgressRoutine�
pvCallbackContextV<& COPYFILE2_EXTENDED_PARAMETERS.?AUCOPYFILE2_EXTENDED_PARAMETERS@@=&<�^�_SYSTEM_ALARM_CALLBACK_OBJECT_ACE.?AU_SYSTEM_ALARM_CALLBACK_OBJECT_ACE@@�
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�^@&0_SYSTEM_ALARM_CALLBACK_OBJECT_ACE.?AU_SYSTEM_ALARM_CALLBACK_OBJECT_ACE@@A&E1
X
Y*C&_COORD.?AU_COORD@@��D&U$
�^�_EVENT_TRACE_VERSION_INFORMATION.?AU_EVENT_TRACE_VERSION_INFORMATION@@��N
EventTraceInformationClass���
"EventTraceKernelVersion��^H&_EVENT_TRACE_VERSION_INFORMATION.?AU_EVENT_TRACE_VERSION_INFORMATION@@��I&�
&�POINTER_CHANGE_NONE��POINTER_CHANGE_FIRSTBUTTON_DOWN��POINTER_CHANGE_FIRSTBUTTON_UPPOINTER_CHANGE_SECONDBUTTON_DOWN�POINTER_CHANGE_SECONDBUTTON_UP���POINTER_CHANGE_THIRDBUTTON_DOWN��POINTER_CHANGE_THIRDBUTTON_UPPOINTER_CHANGE_FOURTHBUTTON_DOWN�POINTER_CHANGE_FOURTHBUTTON_UP���	POINTER_CHANGE_FIFTHBUTTON_DOWN��
POINTER_CHANGE_FIFTHBUTTON_UPRtL&tagPOINTER_BUTTON_CHANGE_TYPE.?AW4tagPOINTER_BUTTON_CHANGE_TYPE@@�M&L�V�_HEAP_BLOCK_EXTRA_INFORMATION.?AU_HEAP_BLOCK_EXTRA_INFORMATION@@
O&2
 Next�
"Type�
#Size�VQ&_HEAP_BLOCK_EXTRA_INFORMATION.?AU_HEAP_BLOCK_EXTRA_INFORMATION@@R&��j�_SYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT.?AU_SYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT@@��j�_SYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER.?AU_SYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER@@j
U&Header���
#OverQuotaHistory�
"IntervalLength���
"NumberOfIntervalsjV& _SYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT.?AU_SYSTEM_NET_RATE_CONTROL_QUOTA_CONTEXT@@��W&|�nLdrpNoDevice�LdrpWebDAV���LdrpRemote�����LdrpAnyDevice���LdrpAnyDevice2bitNtY&<unnamed-enum-LdrpNoDevice>.?AW4<unnamed-enum-LdrpNoDevice>@@�Z&��.�_UNWIND_CODE.?AT_UNWIND_CODE@@��
\&
 ��
 ��
 ��
 ��B
 OffsetLow
`&UnwindOp�
a&OffsetHigh���:b&<anonymous-tag>.?AU<anonymous-tag>@@c&�r
 CodeOffset���
^&UnwindOp�
_&OpInfo���
c&EpilogueCode�
!FrameOffset��.e&_UNWIND_CODE.?AT_UNWIND_CODE@@��f&�^�_ETW_DFSS_RELEASE_THREAD_ON_IDLE.?AU_ETW_DFSS_RELEASE_THREAD_ON_IDLE@@��z
"CurrentGeneration
"SessionSelectedToRun�
#CycleBaseAllowance���
CyclesRemaining��^i&_ETW_DFSS_RELEASE_THREAD_ON_IDLE.?AU_ETW_DFSS_RELEASE_THREAD_ON_IDLE@@��j&0B
^�_RPC_BINDING_HANDLE_TEMPLATE_V1_A.?AU_RPC_BINDING_HANDLE_TEMPLATE_V1_A@@
l&
 Reserved�2n&<anonymous-tag>.?AT<anonymous-tag>@@o&�
"Version��
"Flags
"ProtocolSequence�
 NetworkAddress���
 StringEndpoint���
o& u1���
�(ObjectUuid���^q&8_RPC_BINDING_HANDLE_TEMPLATE_V1_A.?AU_RPC_BINDING_HANDLE_TEMPLATE_V1_A@@r&:�_EVENTLOGRECORD.?AU_EVENTLOGRECORD@@z
"Length���
"Reserved�
"RecordNumber�
"TimeGenerated
"TimeWritten��
"EventID��
!EventType
!NumStrings���
!EventCategory
!ReservedFlags
" ClosingRecordNumber��
"$StringOffset�
"(UserSidLength
",UserSidOffset
"0DataLength���
"4DataOffset���:u&8_EVENTLOGRECORD.?AU_EVENTLOGRECORD@@*onecore\internal\sdk\inc\ntelfapi.hv&w&EV�_FILE_ID_FULL_DIR_INFORMATION.?AU_FILE_ID_FULL_DIR_INFORMATION@@:
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
~HFileId���
JPFileName�V
z&X_FILE_ID_FULL_DIR_INFORMATION.?AU_FILE_ID_FULL_DIR_INFORMATION@@{&U�Z�_PERFINFO_PPM_IDLE_STATE_ENTER.?AU_PERFINFO_PPM_IDLE_STATE_ENTER@@��
}&�
"State
!Properties���
 ExpectedWakeReason���
 Reserved�
"Flags
#ExpectedDuration�Z&_PERFINFO_PPM_IDLE_STATE_ENTER.?AU_PERFINFO_PPM_IDLE_STATE_ENTER@@���&0�
"Marker���
!Version��
 HeaderType���
 Flags
"Header���
@#Packet���
"ThreadId�
"ProcessId
~SystemTime���
"KernelTime���
"UserTime�F�& _SYSTEM_TRACE_HEADER.?AU_SYSTEM_TRACE_HEADER@@���&0_V�_RTL_CRITICAL_SECTION_DEBUG64.?AU_RTL_CRITICAL_SECTION_DEBUG64@@
�&�
!Type�
!CreatorBackTraceIndex
#CriticalSection��
ProcessLocksList�
" EntryCount���
"$ContentionCount��
�(SpareV�&0_RTL_CRITICAL_SECTION_DEBUG64.?AU_RTL_CRITICAL_SECTION_DEBUG64@@�&�{V�_SYSTEM_VERIFIER_INFORMATION.?AU_SYSTEM_VERIFIER_INFORMATION@@��
�&
"��
"��
"��V
�&AreAllDriversBeingVerified���
�&DisabledFromCrash
�&Spare:�&<anonymous-tag>.?AU<anonymous-tag>@@�&�V	"
�&Flags
"Whole2�&<anonymous-tag>.?AT<anonymous-tag>@@�&�T	>
"NextEntryOffset��
"Level
�RuleClasses��
"TriageContext
�&u1���
�DriverName���
"(RaiseIrqls���
",AcquireSpinLocks�
"0SynchronizeExecutions
"4AllocationsAttempted�
"8AllocationsSucceeded�
"<AllocationsSucceededSpecialPool��
"@AllocationsWithNoTag�
"DTrimRequests�
"HTrims
"LAllocationsFailed
"PAllocationsFailedDeliberately
"TLoads
"XUnloads��
"\UnTrackedPool
"`CurrentPagedPoolAllocations��
"dCurrentNonPagedPoolAllocations���
"hPeakPagedPoolAllocations�
"lPeakNonPagedPoolAllocations��
#pPagedPoolUsageInBytes
#xNonPagedPoolUsageInBytes�
#�PeakPagedPoolUsageInBytes
#�PeakNonPagedPoolUsageInBytes�V�&�_SYSTEM_VERIFIER_INFORMATION.?AU_SYSTEM_VERIFIER_INFORMATION@@���&�N	J�_RTL_HANDLE_TABLE_ENTRY.?AU_RTL_HANDLE_TABLE_ENTRY@@
�&&
"Flags
�&NextFree�J�&_RTL_HANDLE_TABLE_ENTRY.?AU_RTL_HANDLE_TABLE_ENTRY@@�&��	N�_SPARSE_OVERALLOCATE_DATA.?AU_SPARSE_OVERALLOCATE_DATA@@&
"SparseOverAllocateSize���N�&_SPARSE_OVERALLOCATE_DATA.?AU_SPARSE_OVERALLOCATE_DATA@@�&Uj(N�USN_RECORD_COMMON_HEADER.?AUUSN_RECORD_COMMON_HEADER@@��
�&J
"RecordLength�
!MajorVersion�
!MinorVersion�N�&USN_RECORD_COMMON_HEADER.?AUUSN_RECORD_COMMON_HEADER@@���&U�j�_EVENT_TRACE_PROFILE_ADD_INFORMATION_V2.?AU_EVENT_TRACE_PROFILE_ADD_INFORMATION_V2@@�
 PerfEvtEventSelect���
 PerfEvtUnitSelect
 PerfEvtCMask�
 PerfEvtCInv��
 PerfEvtAnyThread�
 PerfEvtEdgeDetect:�&<anonymous-tag>.?AU<anonymous-tag>@@�&|>
 PerfEvtEventSelect���
 PerfEvtUnitSelect:�&<anonymous-tag>.?AU<anonymous-tag>@@�&�2
"PerfEvtType��
 AllowsHalt���:�&<anonymous-tag>.?AU<anonymous-tag>@@�&�2
�&Intel
�&Amd��
�&Arm��j�&_EVENT_TRACE_PROFILE_ADD_INFORMATION_V2.?AU_EVENT_TRACE_PROFILE_ADD_INFORMATION_V2@@�&z
�
L��
L��
L��
L��
L��
L��
L��
V��
V>���
Link�
QContext��
�Teb��
�UserContext��
�&�ScheduledThread��
�&�Suspended
�&�VolatileContext��
�&�Terminated���
�&�DebugActive��
�&�RunningOnSelfThread��
�&�DenyRunningOnSelfThread��
�Flags
�&�KernelUpdateLock�
�&�PrimaryClientID��
V�ContextLock��
fPrimaryUmsContext
"SwitchCount��
"KernelYieldCount�
"MixedYieldCount��
"YieldCount���>�& _RTL_UMS_CONTEXT.?AU_RTL_UMS_CONTEXT@@���&$!B�_DISPATCHER_CONTEXT.?AU_DISPATCHER_CONTEXT@@
Q
Qd%�&��&
�&F�_UNWIND_HISTORY_TABLE.?AU_UNWIND_HISTORY_TABLE@@
�&�
#ControlPc
#ImageBase
mFunctionEntry
#EstablisherFrame�
# TargetIp�
�&(ContextRecord
�&0LanguageHandler��
8HandlerData��
�&@HistoryTable�
"HScopeIndex���
"LFill0B�&P_DISPATCHER_CONTEXT.?AU_DISPATCHER_CONTEXT@@.onecore\internal\sdk\inc\ntamd64_x.h����&�&c6�_RPC_VERSION.?AU_RPC_VERSION@@��2
!MajorVersion�
!MinorVersion�6�&_RPC_VERSION.?AU_RPC_VERSION@@���&�)R�_ENCRYPTION_KEY_CTRL_INPUT.?AU_ENCRYPTION_KEY_CTRL_INPUT@@��
�&�
"HeaderSize���
"StructureSize
!KeyOffset
!
KeySize��
"DplLock��
#DplUserId
#DplCredentialId��R�& _ENCRYPTION_KEY_CTRL_INPUT.?AU_ENCRYPTION_KEY_CTRL_INPUT@@���&U�!:�_SL_APPX_CACHE.?AU_SL_APPX_CACHE@@��Z�_SL_APPX_CACHE_VALUE_DESCRIPTOR.?AU_SL_APPX_CACHE_VALUE_DESCRIPTOR@@�&#0�j
"Version��
"Flags
"DataSize�
#DataCheckSum�
�&Descriptors��:�&H_SL_APPX_CACHE.?AU_SL_APPX_CACHE@@���&��6�_VM_COUNTERS.?AU_VM_COUNTERS@@��R
#PeakVirtualSize��
#VirtualSize��
"PageFaultCount���
#PeakWorkingSetSize���
# WorkingSetSize���
#(QuotaPeakPagedPoolUsage��
#0QuotaPagedPoolUsage��
#8QuotaPeakNonPagedPoolUsage���
#@QuotaNonPagedPoolUsage���
#HPagefileUsage
#PPeakPagefileUsage6�&X_VM_COUNTERS.?AU_VM_COUNTERS@@���&}�B�_PREFIX_TABLE_ENTRY.?AU_PREFIX_TABLE_ENTRY@@
�&r
NodeTypeCode�
NameLength���
�&NextPrefixTree���
Links
�#(Prefix���B�&0_PREFIX_TABLE_ENTRY.?AU_PREFIX_TABLE_ENTRY@@�&$>�_COUNTER_READING.?AU_COUNTER_READING@@��B
rType�
"Index
#Start
#Total>�&_COUNTER_READING.?AU_COUNTER_READING@@���&b|J�_TRACE_LOGFILE_HEADER32.?AU_TRACE_LOGFILE_HEADER32@@f
 MajorVersion�
 MinorVersion�
 SubVersion���
 SubMinorVersion��:�&<anonymous-tag>.?AU<anonymous-tag>@@�&��.
"BufferSize���
"Version��
�&VersionDetail
"ProviderVersion��
"NumberOfProcessors���
~EndTime��
"TimerResolution��
"MaximumFileSize��
" LogFileMode��
"$BuffersWritten���
�(LogInstanceGuid��
"(StartBuffers�
",PointerSize��
"0EventsLost���
"4CpuSpeedInMHz
u8LoggerName���
u<LogFileName��
\@TimeZone�
~�BootTime�
~�PerfFreq�
~StartTime
"ReservedFlags
"BuffersLost��J�&_TRACE_LOGFILE_HEADER32.?AU_TRACE_LOGFILE_HEADER32@@�&��J�_TOKEN_MANDATORY_LABEL.?AU_TOKEN_MANDATORY_LABEL@@��
�&
�LabelJ�&_TOKEN_MANDATORY_LABEL.?AU_TOKEN_MANDATORY_LABEL@@���&E�v�_SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM.?AU_SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM@@
�&Z�SERVICE_TRIGGER_CUSTOM_STATE_ID.?AUSERVICE_TRIGGER_CUSTOM_STATE_ID@@*
"DataOffset���
�Data�:�&<anonymous-tag>.?AU<anonymous-tag>@@�&m�&
�&CustomStateId
�&s2�&<anonymous-tag>.?AT<anonymous-tag>@@�&m�
�&uv�&_SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM.?AU_SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM@@�&m�6�tagEMRFORMAT.?AUtagEMRFORMAT@@��V
"dSignature���
"nVersion�
"cbData���
"offData��6'tagEMRFORMAT.?AUtagEMRFORMAT@@��'S�b�_PLUGPLAY_CONTROL_CONFLICT_STRINGS.?AU_PLUGPLAY_CONTROL_CONFLICT_STRINGS@@��B
"NullDeviceInstance���
JDeviceInstanceStringsb'_PLUGPLAY_CONTROL_CONFLICT_STRINGS.?AU_PLUGPLAY_CONTROL_CONFLICT_STRINGS@@��'��j�_SYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE.?AU_SYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE@@
'
U&

''
'&

'NetRateControlDispatch���j'_SYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE.?AU_SYSTEM_NET_RATE_CONTROL_CALLBACK_TABLE@@'|�.COPYFILE2_CALLBACK_NONE��COPYFILE2_CALLBACK_CHUNK_STARTED�COPYFILE2_CALLBACK_CHUNK_FINISHEDCOPYFILE2_CALLBACK_STREAM_STARTEDCOPYFILE2_CALLBACK_STREAM_FINISHED���COPYFILE2_CALLBACK_POLL_CONTINUE�COPYFILE2_CALLBACK_ERROR�COPYFILE2_CALLBACK_MAX���Ft'_COPYFILE2_MESSAGE_TYPE.?AW4_COPYFILE2_MESSAGE_TYPE@@�'<;R�_LINK_TRACKING_INFORMATION.?AU_LINK_TRACKING_INFORMATION@@��JNtfsLinkTrackingInformation��DfsLinkTrackingInformation���Vt'_LINK_TRACKING_INFORMATION_TYPE.?AW4_LINK_TRACKING_INFORMATION_TYPE@@�'U�)&
'Type�
.VolumeId�R'_LINK_TRACKING_INFORMATION.?AU_LINK_TRACKING_INFORMATION@@��'U�)Z�_IMAGE_LOAD_CONFIG_DIRECTORY64.?AU_IMAGE_LOAD_CONFIG_DIRECTORY64@@��
"Size�
"TimeDateStamp
!MajorVersion�
!
MinorVersion�
"GlobalFlagsClear�
"GlobalFlagsSet���
"CriticalSectionDefaultTimeout
#DeCommitFreeBlockThreshold���
# DeCommitTotalFreeThreshold���
#(LockPrefixTable��
#0MaximumAllocationSize
#8VirtualMemoryThreshold���
#@ProcessAffinityMask��
"HProcessHeapFlags�
!LCSDVersion���
!NDependentLoadFlags���
#PEditList�
#XSecurityCookie���
#`SEHandlerTable���
#hSEHandlerCount���
#pGuardCFCheckFunctionPointer��
#xGuardCFDispatchFunctionPointer���
#�GuardCFFunctionTable�
#�GuardCFFunctionCount�
"�GuardFlags���
��CodeIntegrity
#�GuardAddressTakenIatEntryTable���
#�GuardAddressTakenIatEntryCount���
#�GuardLongJumpTargetTable�
#�GuardLongJumpTargetCount�
#�DynamicValueRelocTable���
#�CHPEMetadataPointer��
#�GuardRFFailureRoutine
#�GuardRFFailureRoutineFunctionPointer�
"�DynamicValueRelocTableOffset�
!�DynamicValueRelocTableSection
!�Reserved2
#�GuardRFVerifyStackPointerFunctionPointer�
"�HotPatchTableOffset��
"�Reserved3
#�EnclaveConfigurationPointer��
#VolatileMetadataPointer��
#GuardEHContinuationTable�
#GuardEHContinuationCount�Z,'_IMAGE_LOAD_CONFIG_DIRECTORY64.?AU_IMAGE_LOAD_CONFIG_DIRECTORY64@@��'f5J�_TRACE_GUID_PROPERTIES.?AU_TRACE_GUID_PROPERTIES@@��~
�Guid�
"GuidType�
"LoggerId�
"EnableLevel��
"EnableFlags��
  IsEnable�J '$_TRACE_GUID_PROPERTIES.?AU_TRACE_GUID_PROPERTIES@@��!'��B�tagEMRSTRETCHDIBITS.?AUtagEMRSTRETCHDIBITS@@&
Pemr��
,rclBounds
xDest
yDest
 xSrc�
$ySrc�
(cxSrc
,cySrc
"0offBmiSrc
"4cbBmiSrc�
"8offBitsSrc���
"<cbBitsSrc
"@iUsageSrc
"DdwRop
HcxDest���
LcyDest���B$'PtagEMRSTRETCHDIBITS.?AUtagEMRSTRETCHDIBITS@@%'S+V�_TRANSACTION_LIST_INFORMATION.?AU_TRANSACTION_LIST_INFORMATION@@�#�F
"NumberOfTransactions�
('TransactionInformation���V)'_TRANSACTION_LIST_INFORMATION.?AU_TRANSACTION_LIST_INFORMATION@@*'�mV�_FILE_COMPLETION_INFORMATION.?AU_FILE_COMPLETION_INFORMATION@@��
,'"
Port�
Key��V.'_FILE_COMPLETION_INFORMATION.?AU_FILE_COMPLETION_INFORMATION@@��/'U?V�_ETW_TP_EVENT_CALLBACK_START.?AU_ETW_TP_EVENT_CALLBACK_START@@��
1'~
8Header���
 PoolId���
(TaskId���
0Callback�
8Context��
@SubProcessTagV3'H_ETW_TP_EVENT_CALLBACK_START.?AU_ETW_TP_EVENT_CALLBACK_START@@��4'0�j�_TRANSACTIONMANAGER_LOGPATH_INFORMATION.?AU_TRANSACTIONMANAGER_LOGPATH_INFORMATION@@.
"LogPathLength
JLogPath��j7'_TRANSACTIONMANAGER_LOGPATH_INFORMATION.?AU_TRANSACTIONMANAGER_LOGPATH_INFORMATION@@8'��B�_CONSOLE_FONT_INFO.?AU_CONSOLE_FONT_INFO@@��
:'*
"nFont
j"dwFontSize���B<'_CONSOLE_FONT_INFO.?AU_CONSOLE_FONT_INFO@@��='U�
 
�
@'DebugInfo
LockCount
RecursionCount���
OwningThread�
LockSemaphore
# SpinCountFA'(_RTL_CRITICAL_SECTION.?AU_RTL_CRITICAL_SECTION@@B'�Z
�N�_SD_GLOBAL_CHANGE_OUTPUT.?AU_SD_GLOBAL_CHANGE_OUTPUT@@��V�_SD_CHANGE_MACHINE_SID_OUTPUT.?AU_SD_CHANGE_MACHINE_SID_OUTPUT@@J�_SD_QUERY_STATS_OUTPUT.?AU_SD_QUERY_STATS_OUTPUT@@��B�_SD_ENUM_SDS_OUTPUT.?AU_SD_ENUM_SDS_OUTPUT@@j
"Flags
"ChangeType���
F'SdChange�
G'SdQueryStats�
H'SdEnumSdsNI'H_SD_GLOBAL_CHANGE_OUTPUT.?AU_SD_GLOBAL_CHANGE_OUTPUT@@��J'U�:�tagHELPWININFOW.?AUtagHELPWININFOW@@
L'q#�z
twStructSize��
tx
ty
tdx���
tdy���
twMax�
N'rgchMember���:O'tagHELPWININFOW.?AUtagHELPWININFOW@@P'L�/.�tagNMHDR.?AUtagNMHDR@@��:
�hwndFrom�
#idFrom���
ucode�.S'tagNMHDR.?AUtagNMHDR@@��T'L�:�_CONTEXT_CHUNK.?AU_CONTEXT_CHUNK@@��*
Offset���
"Length���:W'_CONTEXT_CHUNK.?AU_CONTEXT_CHUNK@@��X'B2�_cpinfoexW.?AU_cpinfoexW@@��
uMaxCharSize��
�DefaultChar��
�LeadByte�
qUnicodeDefaultChar���
uCodePage�
tCodePageName�2[' _cpinfoexW.?AU_cpinfoexW@@��\'%l
VJ�_PROCESS_EXCEPTION_PORT.?AU_PROCESS_EXCEPTION_PORT@@
_':
ExceptionPortHandle��
"StateFlags���Ja'_PROCESS_EXCEPTION_PORT.?AU_PROCESS_EXCEPTION_PORT@@b'}�6�_ICONINFOEXW.?AU_ICONINFOEXW@@��
d'�
"cbSize���
tfIcon
"xHotspot�
"yHotspot�
IhbmMask��
IhbmColor�
! wResID���
t"szModName
t*szResName6	f'8_ICONINFOEXW.?AU_ICONINFOEXW@@��g'L�*>�_NV_MEMORY_RANGE.?AU_NV_MEMORY_RANGE@@��.
BaseAddress��
#Length���>j'_NV_MEMORY_RANGE.?AU_NV_MEMORY_RANGE@@��k'$�$F�_IMAGE_HOT_PATCH_INFO.?AU_IMAGE_HOT_PATCH_INFO@@
m'�
"Version��
"Size�
"SequenceNumber���
"BaseImageList
"BaseImageCount���
"BufferOffset�
"ExtraPatchSize���Fo'_IMAGE_HOT_PATCH_INFO.?AU_IMAGE_HOT_PATCH_INFO@@p'f�^FileIdType���ObjectIdType�ExtendedFileIdType���MaximumFileIdType2tr'_FILE_ID_TYPE.?AW4_FILE_ID_TYPE@@�s'<�#*�HSTR__.?AUHSTR__@@��
u'
tunused���*w'HSTR__.?AUHSTR__@@��6onecore\external\shared\inc\minwin\minwindef.h�x'y'f�_SYSTEM_HYPERVISOR_DETAIL_INFORMATION.?AU_SYSTEM_HYPERVISOR_DETAIL_INFORMATION@@2�_HV_DETAILS.?AU_HV_DETAILS@@�
|'HvVendorAndMaxFunction���
|'HypervisorInterface��
|' HypervisorVersion
|'0HvFeatures���
|'@HwFeatures���
|'PEnlightenmentInfo
|'`ImplementationLimits�f}'p_SYSTEM_HYPERVISOR_DETAIL_INFORMATION.?AU_SYSTEM_HYPERVISOR_DETAIL_INFORMATION@@~'�=:�_WMI_DPI_RECORD.?AU_WMI_DPI_RECORD@@.
"MachineDPI���
"UserDPI��:�'_WMI_DPI_RECORD.?AU_WMI_DPI_RECORD@@�'0jB�_RTL_PROCESS_HEAPS.?AU_RTL_PROCESS_HEAPS@@��F�_RTL_HEAP_INFORMATION.?AU_RTL_HEAP_INFORMATION@@�'#X�*
"NumberOfHeaps
�'HeapsB�'`_RTL_PROCESS_HEAPS.?AU_RTL_PROCESS_HEAPS@@���'�FVLoadReasonStaticDependency���LoadReasonStaticForwarderDependency��LoadReasonDynamicForwarderDependency�LoadReasonDelayloadDependencyLoadReasonDynamicLoadLoadReasonAsImageLoadLoadReasonAsDataLoad�LoadReasonEnclavePrimary�LoadReasonEnclaveDependency����LoadReasonUnknown���B
t�'_LDR_DLL_LOAD_REASON.?AW4_LDR_DLL_LOAD_REASON@@����'��
%t""""�'
�'
�'B
�'pSizeConvertRoutines�
�'pTagGettingRoutines��>�'_NDR_CS_ROUTINES.?AU_NDR_CS_ROUTINES@@���'��"SC_STATUS_PROCESS_INFO���6t�'_SC_STATUS_TYPE.?AW4_SC_STATUS_TYPE@@��'m�>�_DISPLAY_DEVICEW.?AU_DISPLAY_DEVICEW@@��
�'�
"cb���
�DeviceName���
r$DDeviceString�
"DStateFlags���
r$HDeviceID�
r$HDeviceKey>�'H_DISPLAY_DEVICEW.?AU_DISPLAY_DEVICEW@@���'S�
oa  �'V�_TOKEN_GROUPS_AND_PRIVILEGES.?AU_TOKEN_GROUPS_AND_PRIVILEGES@@��F�_LUID_AND_ATTRIBUTES.?AU_LUID_AND_ATTRIBUTES@@��
�'
"SidCount�
"SidLength
Sids�
"RestrictedSidCount���
"RestrictedSidLength��
RestrictedSids���
" PrivilegeCount���
"$PrivilegeLength��
�'(Privileges���
T0AuthenticationId�V
�'8_TOKEN_GROUPS_AND_PRIVILEGES.?AU_TOKEN_GROUPS_AND_PRIVILEGES@@���'E�:�tagMENUBARINFO.?AUtagMENUBARINFO@@��
�'
t��
t��
t��
"cbSize���
�rcBar
hMenu
� hwndMenu�
�'(fBarFocused��
�'(fFocused�
�'(fUnused��:�'0tagMENUBARINFO.?AUtagMENUBARINFO@@���'L 9>�_USER_MARSHAL_CB.?AU_USER_MARSHAL_CB@@��
��USER_MARSHAL_CB_BUFFER_SIZE��USER_MARSHAL_CB_MARSHALL�USER_MARSHAL_CB_UNMARSHALL���USER_MARSHAL_CB_FREE�Bt�'_USER_MARSHAL_CB_TYPE.?AW4_USER_MARSHAL_CB_TYPE@@��'�x�
"Flags
�'pStubMsg�
pReserve�
"Signature
�'CBType���
 pFormat��
(pTypeFormat��>�'0_USER_MARSHAL_CB.?AU_USER_MARSHAL_CB@@���'��R�tagRID_DEVICE_INFO_KEYBOARD.?AUtagRID_DEVICE_INFO_KEYBOARD@@�
"dwType���
"dwSubType
"dwKeyboardMode���
"dwNumberOfFunctionKeys���
"dwNumberOfIndicators�
"dwNumberOfKeysTotal��R�'tagRID_DEVICE_INFO_KEYBOARD.?AUtagRID_DEVICE_INFO_KEYBOARD@@�'L;B�tagEMRPOLYTEXTOUTA.?AUtagEMRPOLYTEXTOUTA@@��
�'2�tagEMRTEXT.?AUtagEMRTEXT@@���'#(�
Pemr��
,rclBounds
"iGraphicsMode
@exScale��
@ eyScale��
$cStrings�
�'(aemrtext�B�'PtagEMRPOLYTEXTOUTA.?AUtagEMRPOLYTEXTOUTA@@���'S��ActivationContextBasicInformationActivationContextDetailedInformation�AssemblyDetailedInformationInActivationContext���FileInformationInAssemblyOfAssemblyInActivationContext���RunlevelInformationInActivationContext���CompatibilityInformationInActivationContext��ActivationContextManifestResourceNameMaxActivationContextInfoClassAssemblyDetailedInformationInActivationContxtFileInformationInAssemblyOfAssemblyInActivationContxtV
t�'_ACTIVATION_CONTEXT_INFO_CLASS.?AW4_ACTIVATION_CONTEXT_INFO_CLASS@@����'�DR�_SYSTEM_NUMA_PROXIMITY_MAP.?AU_SYSTEM_NUMA_PROXIMITY_MAP@@��6
"NodeProximityId��
!NodeNumber���R�'_SYSTEM_NUMA_PROXIMITY_MAP.?AU_SYSTEM_NUMA_PROXIMITY_MAP@@���'�5f�_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A@@��

TransportCredentials�
"Flags
"AuthenticationTarget�
"NumberOfAuthnSchemes�
"AuthnSchemes�
  ServerCertificateSubject�
(ProxyCredentials�
"0NumberOfProxyAuthnSchemes
"8ProxyAuthnSchemesf	�'@_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A@@���'�n�_IMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER.?AU_IMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER@@
 PrologueByteCountn�'_IMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER.?AU_IMAGE_PROLOGUE_DYNAMIC_RELOCATION_HEADER@@�'f�>PMETypeFailFastOnCommitFailure���PMETypeMax���Vt�'_PROCESS_MEMORY_EXHAUSTION_TYPE.?AW4_PROCESS_MEMORY_EXHAUSTION_TYPE@@��'m�N�tagRID_DEVICE_INFO_MOUSE.?AUtagRID_DEVICE_INFO_MOUSE@@��f
"dwId�
"dwNumberOfButtons
"dwSampleRate�
tfHasHorizontalWheel��N�'tagRID_DEVICE_INFO_MOUSE.?AUtagRID_DEVICE_INFO_MOUSE@@���'L;.�_OFSTRUCT.?AU_OFSTRUCT@@
�'�
 cBytes���
 fFixedDisk���
!nErrCode�
!Reserved1
!Reserved2
�szPathName���.�'�_OFSTRUCT.?AU_OFSTRUCT@@�'<��
"Length���
RootDirectory
8ObjectName���
"Attributes���
 SecurityDescriptor���
(SecurityQualityOfService�B�'0_OBJECT_ATTRIBUTES.?AU_OBJECT_ATTRIBUTES@@���'.�tagLC_ID.?AUtagLC_ID@@��>
!wLanguage
!wCountry�
!wCodePage.�'tagLC_ID.?AUtagLC_ID@@��.onecore\external\sdk\inc\crt\crtdefs.h��'�'�j�_PERFINFO_PFMAPPED_SECTION_INFORMATION.?AU_PERFINFO_PFMAPPED_SECTION_INFORMATION@@��F
RangeBase
RangeEnd�
"CreatingProcessIdj�'_PERFINFO_PFMAPPED_SECTION_INFORMATION.?AU_PERFINFO_PFMAPPED_SECTION_INFORMATION@@���'0lZ�_SYSTEM_VERIFIER_INFORMATION_EX.?AU_SYSTEM_VERIFIER_INFORMATION_EX@@�
"VerifyMode���
"OptionChanges
�PreviousBucketName���
"IrpCancelTimeoutMsec�
"VerifierExtensionEnabled�
� Reserved�Z�'(_SYSTEM_VERIFIER_INFORMATION_EX.?AU_SYSTEM_VERIFIER_INFORMATION_EX@@�'��	~
�!ActiveFrame��
�FrameListCache���
"Flags
"NextCookieSequenceNumber�
" StackId��N�'(_ACTIVATION_CONTEXT_STACK.?AU_ACTIVATION_CONTEXT_STACK@@�'�V�_PROCESS_WORKING_SET_CONTROL.?AU_PROCESS_WORKING_SET_CONTROL@@��:
"Version��
AOperation
"FlagsV�'_PROCESS_WORKING_SET_CONTROL.?AU_PROCESS_WORKING_SET_CONTROL@@���'BW*�_FP_64.?AU_FP_64@@��
�W*�'_FP_64.?AU_FP_64@@���'g:^BootLoad�SystemLoad���AutoLoad�DemandLoad���DisableLoad��Bt�'_CM_SERVICE_LOAD_TYPE.?AW4_CM_SERVICE_LOAD_TYPE@@��'�n�_IMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADER.?AU_IMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADER@@
�'��
�'~
"EpilogueCount
 EpilogueByteCount
 BranchDescriptorElementSize��
!BranchDescriptorCountn�'_IMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADER.?AU_IMAGE_EPILOGUE_DYNAMIC_RELOCATION_HEADER@@�'f�F�_POWER_USER_PRESENCE.?AU_POWER_USER_PRESENCE@@��
�'BUserNotPresent���UserPresent���UserUnknown��Jt(POWER_USER_PRESENCE_TYPE.?AW4POWER_USER_PRESENCE_TYPE@@���(F�
(UserPresence�F(_POWER_USER_PRESENCE.?AU_POWER_USER_PRESENCE@@��(F�J�tagEMRCREATECOLORSPACEW.?AUtagEMRCREATECOLORSPACEW@@
(>�tagLOGCOLORSPACEW.?AUtagLOGCOLORSPACEW@@j
Pemr��
"ihCS�
	(lcs��
"XdwFlags��
"\cbData���
�`Data�J
(dtagEMRCREATECOLORSPACEW.?AUtagEMRCREATECOLORSPACEW@@(S�^�_RPC_BINDING_HANDLE_SECURITY_V1_W.?AU_RPC_BINDING_HANDLE_SECURITY_V1_W@@R�_SEC_WINNT_AUTH_IDENTITY_W.?AU_SEC_WINNT_AUTH_IDENTITY_W@@��
(>�_RPC_SECURITY_QOS.?AU_RPC_SECURITY_QOS@@
(�
"Version��
qServerPrincName��
"AuthnLevel���
"AuthnSvc�
(AuthIdentity�
( SecurityQos��^((_RPC_BINDING_HANDLE_SECURITY_V1_W.?AU_RPC_BINDING_HANDLE_SECURITY_V1_W@@(:�tagGESTUREINFO.?AUtagGESTUREINFO@@���
ucbSize���
"dwFlags��
"dwID�
�hwndTarget���
8ptsLocation��
"dwInstanceID�
" dwSequenceID�
#(ullArguments�
u0cbExtraArgs��:	(8tagGESTUREINFO.?AUtagGESTUREINFO@@��(L�<>�tagEMRPOLYLINE16.?AUtagEMRPOLYLINE16@@��
(F
Pemr��
,rclBounds
"cpts�
9apts�>( tagEMRPOLYLINE16.?AUtagEMRPOLYLINE16@@��(SE
(#
h��
(
K">�_WOW64_LDT_ENTRY.?AU_WOW64_LDT_ENTRY@@��R
 BaseMid��
 Flags1���
 Flags2���
 BaseHi���:#(<anonymous-tag>.?AU<anonymous-tag>@@$(d�
"��
"��
"
��
"��
"��
"��
"��
"��
"��
"���
&(BaseMid��
'(Type�
((Dpl��
)(Pres�
*(LimitHi��
+(Sys��
,(Reserved_0���
-(Default_Big��
.(Granularity��
/(BaseHi���:
0(<anonymous-tag>.?AU<anonymous-tag>@@1(d�"
$(Bytes
1(Bits�23(<anonymous-tag>.?AT<anonymous-tag>@@4(d�>
!LimitLow�
!BaseLow��
4(HighWord�>6(_WOW64_LDT_ENTRY.?AU_WOW64_LDT_ENTRY@@��7(d�
{B�_MIDL_SERVER_INFO_.?AU_MIDL_SERVER_INFO_@@��
���
;(
=(
>(
?(
�'A(
B(
C(>�_MIDL_SYNTAX_INFO.?AU_MIDL_SYNTAX_INFO@@
E(�
<(pStubDesc
@(DispatchTable
ProcString���
FmtStringOffset��
D( ThunkTable���
�(pTransferSyntax��
#0nCount���
F(8pSyntaxInfo��BG(@_MIDL_SERVER_INFO_.?AU_MIDL_SERVER_INFO_@@��H(�pv�_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2.?AU_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2@@
J(j�_JOBOBJECT_BASIC_ACCOUNTING_INFORMATION.?AU_JOBOBJECT_BASIC_ACCOUNTING_INFORMATION@@J�_PROCESS_ENERGY_VALUES.?AU_PROCESS_ENERGY_VALUES@@���
L(BasicInfo
|0IoInfo���
�`DiskIoInfo���
#�ContextSwitches��
~�TotalCycleTime���
#�ReadyTime
M(�EnergyValues�
#�KernelWaitTime���
#�UserWaitTime�v	N(�_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2.?AU_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION_V2@@O(b�
�
�%
��MandatoryLevelUntrusted��MandatoryLevelLowMandatoryLevelMedium�MandatoryLevelHigh���MandatoryLevelSystem�MandatoryLevelSecureProcess��MandatoryLevelCount��:tT(_MANDATORY_LEVEL.?AW4_MANDATORY_LEVEL@@���U(E	6�_RTL_BSD_ITEM.?AU_RTL_BSD_ITEM@@^RtlBsdItemVersionNumber��RtlBsdItemProductTypeRtlBsdItemAabEnabled�RtlBsdItemAabTimeout�RtlBsdItemBootGood���RtlBsdItemBootShutdown���RtlBsdSleepInProgressRtlBsdPowerTransitionRtlBsdItemBootAttemptCount���	RtlBsdItemBootCheckpoint�
RtlBsdItemBootId�RtlBsdItemShutdownBootId�RtlBsdItemReportedAbnormalShutdownBootId�
RtlBsdItemErrorInfo��RtlBsdItemPowerButtonPressInfo���RtlBsdItemChecksum���RtlBsdPowerTransitionExtension���RtlBsdItemFeatureConfigurationState��RtlBsdItemMax:tX(RTL_BSD_ITEM_TYPE.?AW4RTL_BSD_ITEM_TYPE@@�Y(�BB
Y(Type�
DataBuffer���
"DataLength���6[(_RTL_BSD_ITEM.?AU_RTL_BSD_ITEM@@\(�X
B(r
^(pfnTranslateToXmit���
^(pfnTranslateFromXmit�
^(pfnFreeXmit��
^(pfnFreeInst��J_( _XMIT_ROUTINE_QUINTUPLE.?AU_XMIT_ROUTINE_QUINTUPLE@@`(�PF�tagMEASUREITEMSTRUCT.?AUtagMEASUREITEMSTRUCT@@��z
uCtlType��
uCtlID
uitemID���
uitemWidth
uitemHeight���
#itemData�Fc( tagMEASUREITEMSTRUCT.?AUtagMEASUREITEMSTRUCT@@��d(L
v�_SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT.?AU_SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT@@��
f(�
"Gsiv�
 ControllerInterrupt��
 EdgeInterrupt
 IsPrimaryInterrupt���
�TargetAffinity���vh(_SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT.?AU_SYSTEM_INTERRUPT_STEERING_INFORMATION_INPUT@@��i(�R�_SYSTEM_BIGPOOL_INFORMATION.?AU_SYSTEM_BIGPOOL_INFORMATION@@
k(*
"Count
�AllocatedInfoRm( _SYSTEM_BIGPOOL_INFORMATION.?AU_SYSTEM_BIGPOOL_INFORMATION@@n(��
EventBasicInformationJtp(_EVENT_INFORMATION_CLASS.?AW4_EVENT_INFORMATION_CLASS@@���q(�aF�_NDR_CORRELATION_INFO.?AU_NDR_CORRELATION_INFO@@Z�_TIME_DYNAMIC_ZONE_INFORMATION.?AU_TIME_DYNAMIC_ZONE_INFORMATION@@��
t(�
Bias�
�StandardName�

 DStandardDate�
TStandardBias�
�XDaylightName�

 �DaylightDate�
�DaylightBias�
r$�TimeZoneKeyName��
 �DynamicDaylightTimeDisabled��Z	v(�_TIME_DYNAMIC_ZONE_INFORMATION.?AU_TIME_DYNAMIC_ZONE_INFORMATION@@��w( -
� Z�_SYSTEM_GDI_DRIVER_INFORMATION.?AU_SYSTEM_GDI_DRIVER_INFORMATION@@��J�_IMAGE_EXPORT_DIRECTORY.?AU_IMAGE_EXPORT_DIRECTORY@@
{(�
�DriverName���
ImageAddress�
SectionPointer���
 EntryPoint���
|((ExportSectionPointer�
"0ImageLength��Z}(8_SYSTEM_GDI_DRIVER_INFORMATION.?AU_SYSTEM_GDI_DRIVER_INFORMATION@@��~(��J�_PO_WAKE_SOURCE_HISTORY.?AU_PO_WAKE_SOURCE_HISTORY@@
�(&
"Count
�Offsets��J�(_PO_WAKE_SOURCE_HISTORY.?AU_PO_WAKE_SOURCE_HISTORY@@�(F:
2�ARRAY_INFO.?AUARRAY_INFO@@��
Dimension
"BufferConformanceMark
"BufferVarianceMark���
"MaxCountArray
" OffsetArray��
"(ActualCountArray�2�(0ARRAY_INFO.?AUARRAY_INFO@@���(�5N�_ACCESS_DENIED_OBJECT_ACE.?AU_ACCESS_DENIED_OBJECT_ACE@@
�(�
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�N�(0_ACCESS_DENIED_OBJECT_ACE.?AU_ACCESS_DENIED_OBJECT_ACE@@�(E�F�_IMAGE_SECTION_HEADER.?AU_IMAGE_SECTION_HEADER@@
�(6
"PhysicalAddress��
"VirtualSize��2�(<anonymous-tag>.?AT<anonymous-tag>@@�(f
�Name�
�(Misc�
"VirtualAddress���
"SizeOfRawData
"PointerToRawData�
"PointerToRelocations�
"PointerToLinenumbers�
! NumberOfRelocations��
!"NumberOfLinenumbers��
"$Characteristics��F
�((_IMAGE_SECTION_HEADER.?AU_IMAGE_SECTION_HEADER@@�(fZ�_SYSTEM_CALL_COUNT_INFORMATION.?AU_SYSTEM_CALL_COUNT_INFORMATION@@��
�(2
"Length���
"NumberOfTables���Z�(_SYSTEM_CALL_COUNT_INFORMATION.?AU_SYSTEM_CALL_COUNT_INFORMATION@@���(�eR�_FILE_INTERNAL_INFORMATION.?AU_FILE_INTERNAL_INFORMATION@@��
~IndexNumber��R�(_FILE_INTERNAL_INFORMATION.?AU_FILE_INTERNAL_INFORMATION@@���(U�B�_SCOPE_TABLE_AMD64.?AU_SCOPE_TABLE_AMD64@@��f
"BeginAddress�
"EndAddress���
"HandlerAddress���
"JumpTarget���:�(<anonymous-tag>.?AU<anonymous-tag>@@�(�&�(#�*
"Count
�(ScopeRecord��B�(_SCOPE_TABLE_AMD64.?AU_SCOPE_TABLE_AMD64@@���(�&
� >�tagCREATESTRUCTW.?AUtagCREATESTRUCTW@@��
�(�
lpCreateParams���
�hInstance
hMenu
�hwndParent���
t cy���
t$cx���
t(y
t,x
0style
�8lpszName�
�@lpszClass
"HdwExStyle>�(PtagCREATESTRUCTW.?AUtagCREATESTRUCTW@@���(L�V�_RTL_USER_PROCESS_INFORMATION.?AU_RTL_USER_PROCESS_INFORMATION@@R�_SECTION_IMAGE_INFORMATION.?AU_SECTION_IMAGE_INFORMATION@@��n
"Length���
Process��
Thread���
�ClientId�
�((ImageInformation�V�(h_RTL_USER_PROCESS_INFORMATION.?AU_RTL_USER_PROCESS_INFORMATION@@�(�-N�_TRACE_GUID_REGISTRATION.?AU_TRACE_GUID_REGISTRATION@@��&
8Guid�
RegHandleN�(_TRACE_GUID_REGISTRATION.?AU_TRACE_GUID_REGISTRATION@@���(��B�tagRID_DEVICE_INFO.?AUtagRID_DEVICE_INFO@@��^
"cbSize���
"dwType���
�'mouse
�'keyboard�
Xhid��B�( tagRID_DEVICE_INFO.?AUtagRID_DEVICE_INFO@@���(L/;:�tagHELPWININFOA.?AUtagHELPWININFOA@@p#�z
twStructSize��
tx
ty
tdx���
tdy���
twMax�
�(rgchMember���:�(tagHELPWININFOA.?AUtagHELPWININFOA@@�(L�/^�_SYSTEM_SPECIAL_POOL_INFORMATION.?AU_SYSTEM_SPECIAL_POOL_INFORMATION@@��&
"PoolTag��
"Flags^�(_SYSTEM_SPECIAL_POOL_INFORMATION.?AU_SYSTEM_SPECIAL_POOL_INFORMATION@@���(�"
R�_SYSTEM_CPU_SET_INFORMATION.?AU_SYSTEM_CPU_SET_INFORMATION@@CpuSetInformationJt�(_CPU_SET_INFORMATION_TYPE.?AW4_CPU_SET_INFORMATION_TYPE@@��(|P
 ��
 ��
 ��
 ��
 ��~
"Id���
!Group
 LogicalProcessorIndex
 CoreIndex
 LastLevelCacheIndex��
 	NumaNodeIndex
 
EfficiencyClass��
 AllFlags�
�(Parked���
�(Allocated
�(AllocatedToTargetProcess�
�(RealTime�
�(ReservedFlags
"Reserved�
 SchedulingClass��
#AllocationTag:�(<anonymous-tag>.?AU<anonymous-tag>@@�(|X6
"Size�
�(Type�
�(CpuSet���R�( _SYSTEM_CPU_SET_INFORMATION.?AU_SYSTEM_CPU_SET_INFORMATION@@�(|Tj�_EVENT_EXTENDED_ITEM_PROCESS_START_KEY.?AU_EVENT_EXTENDED_ITEM_PROCESS_START_KEY@@��
�(
#ProcessStartKey��j�(_EVENT_EXTENDED_ITEM_PROCESS_START_KEY.?AU_EVENT_EXTENDED_ITEM_PROCESS_START_KEY@@���(#z�(
�(F�_TOKEN_DEVICE_CLAIMS.?AU_TOKEN_DEVICE_CLAIMS@@��
�(
DeviceClaims�F�(_TOKEN_DEVICE_CLAIMS.?AU_TOKEN_DEVICE_CLAIMS@@���(E�2�tagLOGBRUSH.?AUtagLOGBRUSH@@
�(>
ulbStyle��
"lbColor��
#lbHatch��2�(tagLOGBRUSH.?AUtagLOGBRUSH@@�(SK
�!>�_WOF_VERSION_INFO.?AU_WOF_VERSION_INFO@@
"WofVersion���>�(_WOF_VERSION_INFO.?AU_WOF_VERSION_INFO@@�(U".
pValue���
"ValueLength��v�(_TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE.?AU_TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE@@���(^ 
"��
"��B
�(KernelTransition�
�(Reserved�
"ul���^�(_QUERY_PERFORMANCE_COUNTER_FLAGS.?AU_QUERY_PERFORMANCE_COUNTER_FLAGS@@���(��
~PsProtectedTypeNone��PsProtectedTypeProtectedLightPsProtectedTypeProtected�PsProtectedTypeMax���>t�(_PS_PROTECTED_TYPE.?AW4_PS_PROTECTED_TYPE@@����(b{	:AtomBasicInformation�AtomTableInformation�Ft�(_ATOM_INFORMATION_CLASS.?AW4_ATOM_INFORMATION_CLASS@@��(�	b�_FILE_ID_GLOBAL_TX_DIR_INFORMATION.?AU_FILE_ID_GLOBAL_TX_DIR_INFORMATION@@��^
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
~@FileId���
�HLockingTransactionId�
"XTxInfoFlags��
J\FileName�b�(`_FILE_ID_GLOBAL_TX_DIR_INFORMATION.?AU_FILE_ID_GLOBAL_TX_DIR_INFORMATION@@���(U+&�_DCB.?AU_DCB@@��
�(
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"��
"��
"��R
"DCBlength
"BaudRate�
�(fBinary��
�(fParity��
�(fOutxCtsFlow�
)fOutxDsrFlow�
)fDtrControl��
)fDsrSensitivity��
)fTXContinueOnXoff
)fOutX
)fInX�
)fErrorChar���
)fNull
)fRtsControl��
	)fAbortOnError

)fDummy2��
!wReserved
!XonLim���
!XoffLim��
 ByteSize�
 Parity���
 StopBits�
pXonChar��
pXoffChar�
pErrorChar
pEofChar��
pEvtChar��
!wReserved1���&)_DCB.?AU_DCB@@��)<�F�tagCOLORMATCHTOTARGET.?AUtagCOLORMATCHTOTARGET@@
)r
Pemr��
"dwAction�
"dwFlags��
"cbName���
"cbData���
�Data�F)tagCOLORMATCHTOTARGET.?AUtagCOLORMATCHTOTARGET@@)S�B�_ALPC_SECURITY_ATTR.?AU_ALPC_SECURITY_ATTR@@
:
"Flags
)QoS��
ContextHandleB)_ALPC_SECURITY_ATTR.?AU_ALPC_SECURITY_ATTR@@)��N�_SYSTEM_PREFETCH_OPTIONS.?AU_SYSTEM_PREFETCH_OPTIONS@@��
"��
"��
"��
"��
"��
"��
"��
"���
)LowerPriority
)VirtualOffsets���
)TrickleIOs���
)SkipInStorePages�
)PrefetchFilesByVa
)SkipMemoryStorePages�
)Spare
 )ScenarioType�N!)_SYSTEM_PREFETCH_OPTIONS.?AU_SYSTEM_PREFETCH_OPTIONS@@��")��R�_PERFINFO_IPI_RECEIVE_DATA.?AU_PERFINFO_IPI_RECEIVE_DATA@@��J
#InitialTime��
WorkerRoutine
"RequestType��R%)_PERFINFO_IPI_RECEIVE_DATA.?AU_PERFINFO_IPI_RECEIVE_DATA@@��&)0>f�_ETW_UMS_EVENT_DIRECTED_SWITCH_START.?AU_ETW_UMS_EVENT_DIRECTED_SWITCH_START@@��
()f
"ProcessId
"ScheduledThreadId
"PrimaryThreadId��
"SwitchFlags��f*)_ETW_UMS_EVENT_DIRECTED_SWITCH_START.?AU_ETW_UMS_EVENT_DIRECTED_SWITCH_START@@��+)0s^�tagACTCTX_SECTION_KEYED_DATA_2600.?AUtagACTCTX_SECTION_KEYED_DATA_2600@@
"cbSize���
"ulDataFormatVersion��
lpData���
"ulLength�
lpSectionGlobalData��
" ulSectionGlobalDataLength
(lpSectionBase
"0ulSectionTotalLength�
8hActCtx��
"@ulAssemblyRosterIndex^
.)HtagACTCTX_SECTION_KEYED_DATA_2600.?AUtagACTCTX_SECTION_KEYED_DATA_2600@@/)<� 
�
�&�IoSessionEventIgnore�IoSessionEventCreatedIoSessionEventTerminated�IoSessionEventConnected��IoSessionEventDisconnected���IoSessionEventLogon��IoSessionEventLogoff�IoSessionEventMax:t3)_IO_SESSION_EVENT.?AW4_IO_SESSION_EVENT@@�4)U��SystemMemoryPartitionInformation�SystemMemoryPartitionMoveMemory��SystemMemoryPartitionAddPagefile�SystemMemoryPartitionCombineMemory���SystemMemoryPartitionInitialAddMemorySystemMemoryPartitionGetMemoryEvents�SystemMemoryPartitionSetAttributes���SystemMemoryPartitionNodeInformation�SystemMemoryPartitionCreateLargePages	SystemMemoryPartitionMax�R
t6)_PARTITION_INFORMATION_CLASS.?AW4_PARTITION_INFORMATION_CLASS@@���7)b�
n
"Length���
�ImpersonationLevel���
 ContextTrackingMode��
 	EffectiveOnlyV9)_SECURITY_QUALITY_OF_SERVICE.?AU_SECURITY_QUALITY_OF_SERVICE@@��:)ED
f�_PLUGPLAY_CONTROL_RELATED_DEVICE_DATA.?AU_PLUGPLAY_CONTROL_RELATED_DEVICE_DATA@@
<)~
�TargetDeviceInstance�
"Relation�
qRelatedDeviceInstance
" RelatedDeviceInstanceLength��f>)(_PLUGPLAY_CONTROL_RELATED_DEVICE_DATA.?AU_PLUGPLAY_CONTROL_RELATED_DEVICE_DATA@@?)�cN�_TIMER_BASIC_INFORMATION.?AU_TIMER_BASIC_INFORMATION@@��
A)2
~RemainingTime
 TimerState���NC)_TIMER_BASIC_INFORMATION.?AU_TIMER_BASIC_INFORMATION@@��D)��
m"F)G)b�_EVENT_TRACE_TAG_FILTER_INFORMATION.?AU_EVENT_TRACE_TAG_FILTER_INFORMATION@@V
EventTraceInformationClass���
#TraceHandle��
�Filter���bJ)_EVENT_TRACE_TAG_FILTER_INFORMATION.?AU_EVENT_TRACE_TAG_FILTER_INFORMATION@@K):�_XSAVE_FEATURE.?AU_XSAVE_FEATURE@@��M)#�
"Version��
"Size�
"Flags
"MaxSaveAreaLength
#FeatureBitmask���
"NumberOfFeatures�
N) Features�6O)0_XSAVE_POLICY.?AU_XSAVE_POLICY@@P)��V�_SET_PURGE_FAILURE_MODE_INPUT.?AU_SET_PURGE_FAILURE_MODE_INPUT@@
"FlagsVS)_SET_PURGE_FAILURE_MODE_INPUT.?AU_SET_PURGE_FAILURE_MODE_INPUT@@T)U�
:�MOVE_FILE_DATA.?AUMOVE_FILE_DATA@@��
W)b
FileHandle���
~StartingVcn��
~StartingLcn��
"ClusterCount�:Y) MOVE_FILE_DATA.?AUMOVE_FILE_DATA@@��Z)U�
r�_EVENT_TRACE_IPT_CONFIGURATION_INFORMATION.?AU_EVENT_TRACE_IPT_CONFIGURATION_INFORMATION@@��b
EventTraceInformationClass���
#TraceHandle��
#ConfigurationOptions�r])_EVENT_TRACE_IPT_CONFIGURATION_INFORMATION.?AU_EVENT_TRACE_IPT_CONFIGURATION_INFORMATION@@��^)�N�_ETW_SET_MARK_INFORMATION.?AU_ETW_SET_MARK_INFORMATION@@"
"Flag�
JMark�Na)_ETW_SET_MARK_INFORMATION.?AU_ETW_SET_MARK_INFORMATION@@b)�V�_WMI_IMAGELOAD_INFORMATION64.?AU_WMI_IMAGELOAD_INFORMATION64@@��
d):
#ImageBase64��
#ImageSize64��
"ProcessId
"ImageChecksum
"TimeDateStamp
 SignatureLevel���
 SignatureType
!Reserved0
# DefaultBase64
"(Reserved1
",Reserved2
"0Reserved3
"4Reserved4
J8FileName�Vf)@_WMI_IMAGELOAD_INFORMATION64.?AU_WMI_IMAGELOAD_INFORMATION64@@��g)0f
b(
4"j)
�%J�_ETW_WAKE_COUNTER_EVENT.?AU_ETW_WAKE_COUNTER_EVENT@@J
Object���
#Tag��
"ProcessId
CountJn)_ETW_WAKE_COUNTER_EVENT.?AU_ETW_WAKE_COUNTER_EVENT@@o)0
V�_MEMORY_WORKING_SET_EX_BLOCK.?AU_MEMORY_WORKING_SET_EX_BLOCK@@��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
# ��
#$��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#  ��
)Valid
�)Reserved0
�)Shared���
�)Reserved1
�)PageTable
�)Location�
�)Priority�
�)ModifiedList�
�)Reserved2
�)SharedOriginal���
�)Bad��
�)ReservedUlong:�)<anonymous-tag>.?AU<anonymous-tag>@@�)B^6
r)Valid
s)ShareCount���
t)Win32Protection��
u)Shared���
v)Node�
w)Locked���
x)LargePage
y)Priority�
z)Reserved�
{)SharedOriginal���
|)Bad��
})Win32GraphicsProtection��
~)ReservedUlong
�)Invalid��V�)_MEMORY_WORKING_SET_EX_BLOCK.?AU_MEMORY_WORKING_SET_EX_BLOCK@@���)BJV�_THREAD_PROFILING_INFORMATION.?AU_THREAD_PROFILING_INFORMATION@@N�_THREAD_PERFORMANCE_DATA.?AU_THREAD_PERFORMANCE_DATA@@��
�)^
#HardwareCounters�
"Flags
"Enable���
�)PerformanceData��V�)_THREAD_PROFILING_INFORMATION.?AU_THREAD_PROFILING_INFORMATION@@�)b�zEtwRtEventNoLoss�EtwRtEventLost���EtwRtBufferLost��EtwRtBackupLost��EtwRtEventLossMax>t�)_ETW_RT_EVENT_LOSS.?AW4_ETW_RT_EVENT_LOSS@@����)0��DeviceWakeSourceType�FixedWakeSourceType��TimerWakeSourceType��TimerPresumedWakeSourceType��InternalWakeSourceType���>t�)PO_WAKE_SOURCE_TYPE.?AW4PO_WAKE_SOURCE_TYPE@@��)F
V�_PROCESS_HANDLE_TRACING_QUERY.?AU_PROCESS_HANDLE_TRACING_QUERY@@
�)V�_PROCESS_HANDLE_TRACING_ENTRY.?AU_PROCESS_HANDLE_TRACING_ENTRY@@�)#��F
Handle���
"TotalTraces��
�)HandleTrace��V�)�_PROCESS_HANDLE_TRACING_QUERY.?AU_PROCESS_HANDLE_TRACING_QUERY@@�)}U
b$>�tagMULTIKEYHELPW.?AUtagMULTIKEYHELPW@@��
�)B
"mkSize���
qmkKeylist
JszKeyphrase��>�)tagMULTIKEYHELPW.?AUtagMULTIKEYHELPW@@���)L�/
� :
EAction���
"Flags
"EventCodeB�)POWER_ACTION_POLICY.?AUPOWER_ACTION_POLICY@@�)F�
:�_X86_CALL_FRAME.?AU_X86_CALL_FRAME@@^
"ReturnAddress
"Param1���
"Param2���
"CompatibilityArea:�)_X86_CALL_FRAME.?AU_X86_CALL_FRAME@@�)b�
.�_STRING32.?AU_STRING32@@B
!Length���
!MaximumLength
"Buffer���.�)_STRING32.?AU_STRING32@@�)�j�_SYSTEM_THREAD_CID_PRIORITY_INFORMATION.?AU_SYSTEM_THREAD_CID_PRIORITY_INFORMATION@@*
�ClientId�
Priority�j�)_SYSTEM_THREAD_CID_PRIORITY_INFORMATION.?AU_SYSTEM_THREAD_CID_PRIORITY_INFORMATION@@�)�
Z�_PERFINFO_PPM_PERF_STATE_CHANGE.?AU_PERFINFO_PPM_PERF_STATE_CHANGE@@f
"Type�
"NewState�
"OldState�
Result���
#Processors���Z�)_PERFINFO_PPM_PERF_STATE_CHANGE.?AU_PERFINFO_PPM_PERF_STATE_CHANGE@@�)0R>�tagGESTURECONFIG.?AUtagGESTURECONFIG@@��
�):
"dwID�
"dwWant���
"dwBlock��>�)tagGESTURECONFIG.?AUtagGESTURECONFIG@@���)L=
9"
#Low��
High�*�)_M128A.?AU_M128A@@���)�SR�_SYSTEM_CONSOLE_INFORMATION.?AU_SYSTEM_CONSOLE_INFORMATION@@
"��
"��*
�)DriverLoaded�
�)SpareR�)_SYSTEM_CONSOLE_INFORMATION.?AU_SYSTEM_CONSOLE_INFORMATION@@�)��V�_PERFINFO_FILE_PATH_OPERATION.?AU_PERFINFO_FILE_PATH_OPERATION@@
�)�
#Irp��
#FileObject���
#FileKey��
#ExtraInformation�
" IssuingThreadId��
"$InfoClass
J(Path�V�)0_PERFINFO_FILE_PATH_OPERATION.?AU_PERFINFO_FILE_PATH_OPERATION@@�)0t3""�)
�!.�_NT_TIB64.?AU_NT_TIB64@@
�)�
#ExceptionList
#StackBase
#StackLimit���
#SubSystemTib�
# FiberData
" Version��
#(ArbitraryUserPointer�
#0Self�.�)8_NT_TIB64.?AU_NT_TIB64@@�)}?b�_SE_LEARNING_MODE_USER_OBJECT_DATA.?AU_SE_LEARNING_MODE_USER_OBJECT_DATA@@��F
"Cookie���
8ObjectType���
8ObjectName���b�)_SE_LEARNING_MODE_USER_OBJECT_DATA.?AU_SE_LEARNING_MODE_USER_OBJECT_DATA@@���)^:�_ACCESS_REASONS.?AU_ACCESS_REASONS@@
�)"#��
�)Data�:�)�_ACCESS_REASONS.?AU_ACCESS_REASONS@@�)E��
"NextEntryOffset��
"Source���
"MinInterval��
"MaxInterval��
#Reserved�
JDescription��F�) _PROFILE_SOURCE_INFO.?AU_PROFILE_SOURCE_INFO@@���)�:�_FAT_STATISTICS.?AU_FAT_STATISTICS@@
"CreateHits���
"SuccessfulCreates
"FailedCreates
"NonCachedReads���
"NonCachedReadBytes���
"NonCachedWrites��
"NonCachedWriteBytes��
"NonCachedDiskReads���
" NonCachedDiskWrites��:	�)$_FAT_STATISTICS.?AU_FAT_STATISTICS@@�)U@

,#&�_MAT2.?AU_MAT2@@
�)B
�eM11�
�eM12�
�eM21�
�eM22�&�)_MAT2.?AU_MAT2@@�)Sn
:�BITMAPV4HEADER.?AUBITMAPV4HEADER@@��
�)�
"bV4Size��
bV4Width�
bV4Height
!bV4Planes
!bV4BitCount��
"bV4V4Compression�
"bV4SizeImage�
bV4XPelsPerMeter�
bV4YPelsPerMeter�
" bV4ClrUsed���
"$bV4ClrImportant��
"(bV4RedMask���
",bV4GreenMask�
"0bV4BlueMask��
"4bV4AlphaMask�
"8bV4CSType
�<bV4Endpoints�
"`bV4GammaRed��
"dbV4GammaGreen
"hbV4GammaBlue�:�)lBITMAPV4HEADER.?AUBITMAPV4HEADER@@���)SBF�_PLUGPLAY_EVENT_BLOCK.?AU_PLUGPLAY_EVENT_BLOCK@@2
�ClassGuid
JSymbolicLinkName�:�)<anonymous-tag>.?AU<anonymous-tag>@@�)�L
JDeviceId�:�)<anonymous-tag>.?AU<anonymous-tag>@@�)�Q
JDeviceId�:�)<anonymous-tag>.?AU<anonymous-tag>@@*�U6
NotificationStructure
JDeviceId�:*<anonymous-tag>.?AU<anonymous-tag>@@*�Y
Notification�:*<anonymous-tag>.?AU<anonymous-tag>@@*�^:
"NotificationCode�
"NotificationData�:*<anonymous-tag>.?AU<anonymous-tag>@@	*�b:
�VetoType�
JDeviceIdVetoNameBuffer���:*<anonymous-tag>.?AU<anonymous-tag>@@*�g
�BlockedDriverGuid:*<anonymous-tag>.?AU<anonymous-tag>@@*�l
JParentId�:*<anonymous-tag>.?AU<anonymous-tag>@@*�pj
�PowerSettingGuid�
"Flags
"SessionId
"DataLength���
�Data�:* <anonymous-tag>.?AU<anonymous-tag>@@*�t
JDeviceId�:*<anonymous-tag>.?AU<anonymous-tag>@@*�|
JDeviceId�:*<anonymous-tag>.?AU<anonymous-tag>@@*��z
�)DeviceClass��
�)TargetDevice�
*InstallDevice
*CustomNotification���
*ProfileNotification��
	*PowerNotification
*VetoNotification�
*BlockedDriverNotification
*InvalidIDNotification
*PowerSettingNotification�
*PropertyChangeNotification���
*DeviceInstanceNotification���2* <anonymous-tag>.?AT<anonymous-tag>@@*�J�
�EventGuid
r#EventCategory
"Result���
" Flags
"$TotalSize
(DeviceObject�
*0uF *P_PLUGPLAY_EVENT_BLOCK.?AU_PLUGPLAY_EVENT_BLOCK@@!*�?
bN�_ALPC_MESSAGE_ATTRIBUTES.?AU_ALPC_MESSAGE_ATTRIBUTES@@��
$*>
"AllocatedAttributes��
"ValidAttributes��N&*_ALPC_MESSAGE_ATTRIBUTES.?AU_ALPC_MESSAGE_ATTRIBUTES@@��'*��~NormalizationOther���NormalizationC���NormalizationD���NormalizationKC��NormalizationKD��.t)*_NORM_FORM.?AW4_NORM_FORM@@���**%AB�tagMDICREATESTRUCTA.?AUtagMDICREATESTRUCTA@@�
qszClass��
qszTitle��
hOwner���
tx
ty
t cx���
t$cy���
"(style
0lParam���B	-*8tagMDICREATESTRUCTA.?AUtagMDICREATESTRUCTA@@.*L�.6�tagPOLYTEXTA.?AUtagPOLYTEXTA@@��
0*j
tx
ty
un
qlpstr
uuiFlags��
�rcl��
t0pdx��62*8tagPOLYTEXTA.?AUtagPOLYTEXTA@@��3*S=
�EtwStartLoggerCode���EtwStopLoggerCodeEtwQueryLoggerCode���EtwUpdateLoggerCode��EtwFlushLoggerCode���EtwIncrementFileCode�EtwActivityIdCreate��
EtwWdiScenarioCode���EtwWdiSemUpdate��>	t5*ETWTRACECONTROLCODE.?AW4ETWTRACECONTROLCODE@@�6*<f�_PERFINFO_SAMPLED_PROFILE_INFORMATION.?AU_PERFINFO_SAMPLED_PROFILE_INFORMATION@@
8*
 ��
 ��
 ��
 ��
InstructionPointer���
"ThreadId�
!Count
:*ExecutingDpc�
;*ExecutingIsr�
<*Reserved�
=*Priority�
 Flags
 Rank�f	>*_PERFINFO_SAMPLED_PROFILE_INFORMATION.?AU_PERFINFO_SAMPLED_PROFILE_INFORMATION@@?*0{vServiceRegistryStateParameters���ServiceRegistryStatePersistent���MaxServiceRegistryStateType��NtA*SERVICE_REGISTRY_STATE_TYPE.?AW4SERVICE_REGISTRY_STATE_TYPE@@�B*mJ�_ENCLAVE_INIT_INFO_VBS.?AU_ENCLAVE_INIT_INFO_VBS@@��.
"Length���
"ThreadCount��JE*_ENCLAVE_INIT_INFO_VBS.?AU_ENCLAVE_INIT_INFO_VBS@@��F*y�f�_FSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT.?AU_FSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT@@��
"NumaNode�fI*_FSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT.?AU_FSCTL_QUERY_VOLUME_NUMA_INFO_OUTPUT@@��J*U�*V�_ETW_TP_EVENT_CALLBACK_CANCEL.?AU_ETW_TP_EVENT_CALLBACK_CANCEL@@
L*�
8Header���
 PoolId���
(TaskId���
0Callback�
8Context��
@SubProcessTag
"HCancelCount��VN*P_ETW_TP_EVENT_CALLBACK_CANCEL.?AU_ETW_TP_EVENT_CALLBACK_CANCEL@@O*0�J�_FILE_PIPE_PEEK_BUFFER.?AU_FILE_PIPE_PEEK_BUFFER@@��~
"NamedPipeState���
"ReadDataAvailable
"NumberOfMessages�
"MessageLength
�Data�JR*_FILE_PIPE_PEEK_BUFFER.?AU_FILE_PIPE_PEEK_BUFFER@@��S*U)�
"dwStreamNumber���
"dwReserved���
hSourceFile��
hDestinationFile�
�uliChunkNumber���
� uliChunkSize�
�(uliStreamSize
�0uliTotalFileSize�:U*8<anonymous-tag>.?AU<anonymous-tag>@@V*<c
"dwStreamNumber���
"dwFlags��
hSourceFile��
hDestinationFile�
�uliChunkNumber���
� uliChunkSize�
�(uliStreamSize
�0uliStreamBytesTransferred
�8uliTotalFileSize�
�@uliTotalBytesTransferred�:
X*H<anonymous-tag>.?AU<anonymous-tag>@@Y*<n�
"dwStreamNumber���
"dwReserved���
hSourceFile��
hDestinationFile�
�uliStreamSize
� uliTotalFileSize�:[*(<anonymous-tag>.?AU<anonymous-tag>@@\*<{�
"dwStreamNumber���
"dwReserved���
hSourceFile��
hDestinationFile�
�uliStreamSize
� uliStreamBytesTransferred
�(uliTotalFileSize�
�0uliTotalBytesTransferred�:^*8<anonymous-tag>.?AU<anonymous-tag>@@_*<�
"dwReserved���:a*<anonymous-tag>.?AU<anonymous-tag>@@b*<�COPYFILE2_PHASE_NONE�COPYFILE2_PHASE_PREPARE_SOURCE���COPYFILE2_PHASE_PREPARE_DEST�COPYFILE2_PHASE_READ_SOURCE��COPYFILE2_PHASE_WRITE_DESTINATIONCOPYFILE2_PHASE_SERVER_COPY��COPYFILE2_PHASE_NAMEGRAFT_COPY���COPYFILE2_PHASE_MAX��Btd*_COPYFILE2_COPY_PHASE.?AW4_COPYFILE2_COPY_PHASE@@�e*<N�
e*CopyPhase
"dwStreamNumber���
hrFailure
"dwReserved���
�uliChunkNumber���
�uliStreamSize
� uliStreamBytesTransferred
�(uliTotalFileSize�
�0uliTotalBytesTransferred�:	g*8<anonymous-tag>.?AU<anonymous-tag>@@h*<��
V*ChunkStarted�
Y*ChunkFinished
\*StreamStarted
_*StreamFinished���
b*PollContinue�
h*Error2j*H<anonymous-tag>.?AT<anonymous-tag>@@k*<a6
'Type�
"dwPadding
k*Info�>m*PCOPYFILE2_MESSAGE.?AUCOPYFILE2_MESSAGE@@n*<\V�_MEMORY_PRIORITY_INFORMATION.?AU_MEMORY_PRIORITY_INFORMATION@@��
"MemoryPriority���Vq*_MEMORY_PRIORITY_INFORMATION.?AU_MEMORY_PRIORITY_INFORMATION@@��r*m:
~>�_KEY_EVENT_RECORD.?AU_KEY_EVENT_RECORD@@.
qUnicodeChar��
pAsciiChar2v*<anonymous-tag>.?AT<anonymous-tag>@@w*U5�
tbKeyDown�
!wRepeatCount�
!wVirtualKeyCode��
!wVirtualScanCode�
w*
uChar
"dwControlKeyState>y*_KEY_EVENT_RECORD.?AU_KEY_EVENT_RECORD@@z*U0Z�_PLUGPLAY_CONTROL_INSTALL_DATA.?AU_PLUGPLAY_CONTROL_INSTALL_DATA@@��.
"BufferLength�
qBuffer���Z}*_PLUGPLAY_CONTROL_INSTALL_DATA.?AU_PLUGPLAY_CONTROL_INSTALL_DATA@@��~*��.�_TP_TIMER.?AU_TP_TIMER@@
�*��*�*
�*6�tagTOUCHINPUT.?AUtagTOUCHINPUT@@�
x
y
hSource��
"dwID�
"dwFlags��
"dwMask���
"dwTime���
# dwExtraInfo��
"(cxContact
",cyContact6
�*0tagTOUCHINPUT.?AUtagTOUCHINPUT@@�*Lb�_FILE_PIPE_CLIENT_PROCESS_BUFFER_EX.?AU_FILE_PIPE_CLIENT_PROCESS_BUFFER_EX@@v
ClientSession
ClientProcess
!ClientComputerNameLength�
�ClientComputerBuffer�b�*8_FILE_PIPE_CLIENT_PROCESS_BUFFER_EX.?AU_FILE_PIPE_CLIENT_PROCESS_BUFFER_EX@@�*UK)�JOBOBJECT_IO_ATTRIBUTION_CONTROL_ENABLE��JOBOBJECT_IO_ATTRIBUTION_CONTROL_DISABLE�JOBOBJECT_IO_ATTRIBUTION_CONTROL_VALID_FLAGS�ft�*JOBOBJECT_IO_ATTRIBUTION_CONTROL_FLAGS.?AW4JOBOBJECT_IO_ATTRIBUTION_CONTROL_FLAGS@@����*}��DISPLAYCONFIG_PIXELFORMAT_8BPP���DISPLAYCONFIG_PIXELFORMAT_16BPP��DISPLAYCONFIG_PIXELFORMAT_24BPP��DISPLAYCONFIG_PIXELFORMAT_32BPP��DISPLAYCONFIG_PIXELFORMAT_NONGDI���DISPLAYCONFIG_PIXELFORMAT_FORCE_UINT32��Jt�*DISPLAYCONFIG_PIXELFORMAT.?AW4DISPLAYCONFIG_PIXELFORMAT@@��*SR
�PoSleepDisableReasonVideoPoSleepDisableReasonHypervisor���PoSleepDisableReasonVhdBoot��PoSleepDisableReasonPortableWorkspacePoSleepDisableReasonPolicy���PoSleepDisableReasonGuardedHost��PoSleepDisableReasonMax��Jt�*_PO_SLEEP_DISABLE_REASON.?AW4_PO_SLEEP_DISABLE_REASON@@����*FF
R�_HEAP_AFFINITY_SLOT_ASSIGN.?AU_HEAP_AFFINITY_SLOT_ASSIGN@@��Z
8Header���
 HeapHandle���
(SubSegment���
"0SlotIndexR�*4_HEAP_AFFINITY_SLOT_ASSIGN.?AU_HEAP_AFFINITY_SLOT_ASSIGN@@���*0t
T#6NotificationEventSynchronizationEvent�.t�*_EVENT_TYPE.?AW4_EVENT_TYPE@@��*�t�
�*
�DataBuffer���:�*<anonymous-tag>.?AU<anonymous-tag>@@�*UV#�
"ReparseTag���
!ReparseDataLength
!Reserved�
�ReparseGuid��
�*GenericReparseBuffer�N�*_REPARSE_GUID_DATA_BUFFER.?AU_REPARSE_GUID_DATA_BUFFER@@�*UQ#F�tagWNODE_SINGLE_ITEM.?AUtagWNODE_SINGLE_ITEM@@��
qWnodeHeader��
"0OffsetInstanceName���
"4InstanceIndex
"8ItemId���
"<DataBlockOffset��
"@SizeDataItem�
�DVariableData�F�*HtagWNODE_SINGLE_ITEM.?AUtagWNODE_SINGLE_ITEM@@���*t�>�tagDRAWITEMSTRUCT.?AUtagDRAWITEMSTRUCT@@
�*�
uCtlType��
uCtlID
uitemID���
uitemAction���
uitemState
�hwndItem�
� hDC��
�(rcItem���
#8itemData�>	�*@tagDRAWITEMSTRUCT.?AUtagDRAWITEMSTRUCT@@�*L

L"N
!Flags
!Length���
"TimeStamp
=DosPath��N�*_RTL_DRIVE_LETTER_CURDIR.?AU_RTL_DRIVE_LETTER_CURDIR@@���*
lB�tagKBDLLHOOKSTRUCT.?AUtagKBDLLHOOKSTRUCT@@��
�*b
"vkCode���
"scanCode�
"flags
"time�
#dwExtraInfo��B�*tagKBDLLHOOKSTRUCT.?AUtagKBDLLHOOKSTRUCT@@���*L[V�_SECTION_IMAGE_INFORMATION32.?AU_SECTION_IMAGE_INFORMATION32@@��
�*
 ��
 ��
 ��n
"TransferAddress��
"ZeroBits�
"MaximumStackSize�
"CommittedStackSize���
"SubSystemType
!SubSystemMinorVersion
!SubSystemMajorVersion
"SubSystemVersion�
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��
"OperatingSystemVersion���
!ImageCharacteristics�
!DllCharacteristics���
! Machine��
 "ImageContainsCode
 #ImageFlags���
�*#ComPlus��
�*#ImageDynamicallyRelocated
�*#Reserved�
"$LoaderFlags��
"(ImageFileSize
",CheckSum�V�*0_SECTION_IMAGE_INFORMATION32.?AU_SECTION_IMAGE_INFORMATION32@@���*B�Z�_FILE_IO_COMPLETION_INFORMATION.?AU_FILE_IO_COMPLETION_INFORMATION@@>�_IO_STATUS_BLOCK.?AU_IO_STATUS_BLOCK@@��J
KeyContext���
ApcContext���
�*IoStatusBlockZ�* _FILE_IO_COMPLETION_INFORMATION.?AU_FILE_IO_COMPLETION_INFORMATION@@�*!�
1!b�_SYSTEM_SESSION_PROCESS_INFORMATION.?AU_SYSTEM_SESSION_PROCESS_INFORMATION@@
�*>
"SessionId
"SizeOfBuf
Buffer���b�*_SYSTEM_SESSION_PROCESS_INFORMATION.?AU_SYSTEM_SESSION_PROCESS_INFORMATION@@�*�@:�tagEXTLOGFONTW.?AUtagEXTLOGFONTW@@��
�* #��
�elfLogFont���
�\elfFullName��
��elfStyle�
"elfVersion���
" elfStyleSize�
"$elfMatch�
"(elfReserved��
�*,elfVendorId��
"0elfCulture���
�4elfPanose:
�*@tagEXTLOGFONTW.?AUtagEXTLOGFONTW@@���*Sb�_TRANSACTION_PROPERTIES_INFORMATION.?AU_TRANSACTION_PROPERTIES_INFORMATION@@
�*�
"IsolationLevel���
"IsolationFlags���
~Timeout��
"Outcome��
"DescriptionLength
JDescription��b�* _TRANSACTION_PROPERTIES_INFORMATION.?AU_TRANSACTION_PROPERTIES_INFORMATION@@�*��B�_FOCUS_EVENT_RECORD.?AU_FOCUS_EVENT_RECORD@@
�*
tbSetFocusB�*_FOCUS_EVENT_RECORD.?AU_FOCUS_EVENT_RECORD@@�*Uv
`R�_ETW_UMS_EVENT_DISASSOCIATE.?AU_ETW_UMS_EVENT_DISASSOCIATE@@�
"ProcessId
"ScheduledThreadId
"PrimaryThreadId��
"UmsApcControlFlags���
Status���R�*_ETW_UMS_EVENT_DISASSOCIATE.?AU_ETW_UMS_EVENT_DISASSOCIATE@@�*0�J�_ETW_HEAP_EVENT_CREATE.?AU_ETW_HEAP_EVENT_CREATE@@��
8Header���
 HeapHandle���
"(Flags
#,ReserveSize��
#4CommitSize���
#<AllocatedSizeJ�*D_ETW_HEAP_EVENT_CREATE.?AU_ETW_HEAP_EVENT_CREATE@@���*0>�tagCREATESTRUCTA.?AUtagCREATESTRUCTA@@��
�*�
lpCreateParams���
�hInstance
hMenu
�hwndParent���
t cy���
t$cx���
t(y
t,x
0style
q8lpszName�
q@lpszClass
"HdwExStyle>�*PtagCREATESTRUCTA.?AUtagCREATESTRUCTA@@���*LzB�_OUTLINETEXTMETRICW.?AU_OUTLINETEXTMETRICW@@
�*Z
uotmSize��
�otmTextMetrics���
 @otmFiller
�AotmPanoseNumber��
uLotmfsSelection���
uPotmfsType
tTotmsCharSlopeRise
tXotmsCharSlopeRun�
t\otmItalicAngle���
u`otmEMSquare��
tdotmAscent
thotmDescent���
ulotmLineGap���
upotmsCapEmHeight��
utotmsXHeight��
�xotmrcFontBox�
t�otmMacAscent�
t�otmMacDescent
u�otmMacLineGap
u�otmusMinimumPPEM�
��otmptSubscriptSize���
��otmptSubscriptOffset�
��otmptSuperscriptSize�
��otmptSuperscriptOffset���
u�otmsStrikeoutSize
t�otmsStrikeoutPosition
t�otmsUnderscoreSize���
t�otmsUnderscorePosition���
p�otmpFamilyName���
p�otmpFaceName�
p�otmpStyleName
p�otmpFullName�B �*�_OUTLINETEXTMETRICW.?AU_OUTLINETEXTMETRICW@@�*S
�CmResourceShareUndetermined��CmResourceShareDeviceExclusive���CmResourceShareDriverExclusive���CmResourceShareSharedBt�*_CM_SHARE_DISPOSITION.?AW4_CM_SHARE_DISPOSITION@@��*�b�_MEMORY_WORKING_SET_EX_INFORMATION.?AU_MEMORY_WORKING_SET_EX_INFORMATION@@��.
q)VirtualAttributes
#Long�2�*<anonymous-tag>.?AT<anonymous-tag>@@�*Bz.
VirtualAddress���
�*u1���b�*_MEMORY_WORKING_SET_EX_INFORMATION.?AU_MEMORY_WORKING_SET_EX_INFORMATION@@���*Bxn�_JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2.?AU_JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2@@��b�_JOBOBJECT_BASIC_LIMIT_INFORMATION.?AU_JOBOBJECT_BASIC_LIMIT_INFORMATION@@���
�*BasicLimitInformation
|@IoInfo���
#pProcessMemoryLimit���
#xJobMemoryLimit���
#�PeakProcessMemoryUsed
#�PeakJobMemoryUsed
#�JobTotalMemoryLimit��n�*�_JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2.?AU_JOBOBJECT_EXTENDED_LIMIT_INFORMATION_V2@@���*}oj�_MEMORY_PHYSICAL_CONTIGUITY_INFORMATION.?AU_MEMORY_PHYSICAL_CONTIGUITY_INFORMATION@@
R�
VirtualAddress���
#Size�
#ContiguityUnitSize���
"Flags
+ ContiguityUnitInformationj+(_MEMORY_PHYSICAL_CONTIGUITY_INFORMATION.?AU_MEMORY_PHYSICAL_CONTIGUITY_INFORMATION@@+B�
	#B�PPM_IDLESTATE_EVENT.?AUPPM_IDLESTATE_EVENT@@
+B
"NewState�
"OldState�
#Processors���B+PPM_IDLESTATE_EVENT.?AUPPM_IDLESTATE_EVENT@@+F�
N�_VOLUME_REFS_INFO_BUFFER.?AU_VOLUME_REFS_INFO_BUFFER@@��b
~CacheSizeInBytes�
~AllocatedCacheInBytes
~PopulatedCacheInBytes
~InErrorCacheInBytes��
~ MemoryUsedForCacheMetadata���
"(CacheLineSize
,CacheTransactionsOutstanding�
0CacheLinesFree���
4CacheLinesInError
~8CacheHitsInBytes�
~@CacheMissesInBytes���
~HCachePopulationUpdatesInBytes
~PCacheWriteThroughUpdatesInBytes��
~XCacheInvalidationsInBytes
~`CacheOverReadsInBytes
~hMetadataWrittenBytes�
pCacheHitCounter��
tCacheMissCounter�
xCacheLineAllocationCounter���
|CacheInvalidationsCounter
�CachePopulationUpdatesCounter
�CacheWriteThroughUpdatesCounter��
�MaxCacheTransactionsOutstanding��
�DataWritesReallocationCount��
�DataInPlaceWriteCount
�MetadataAllocationsFastTierCount�
�MetadataAllocationsSlowTierCount�
�DataAllocationsFastTierCount�
�DataAllocationsSlowTierCount�
�DestagesSlowTierToFastTier���
�DestagesFastTierToSlowTier���
�SlowTierDataFillRatio
�FastTierDataFillRatio
�SlowTierMetadataFillRatio
�FastTierMetadataFillRatio
�SlowToFastDestageReadLatency�
�SlowToFastDestageReadLatencyBase�
�SlowToFastDestageWriteLatency
�SlowToFastDestageWriteLatencyBase
�FastToSlowDestageReadLatency�
�FastToSlowDestageReadLatencyBase�
�FastToSlowDestageWriteLatency
�FastToSlowDestageWriteLatencyBase
�SlowTierContainerFillRatio���
�SlowTierContainerFillRatioBase���
�FastTierContainerFillRatio���
�FastTierContainerFillRatioBase���
�TreeUpdateLatency
�TreeUpdateLatencyBase
�CheckpointLatency
�CheckpointLatencyBase
�TreeUpdateCount��
CheckpointCount��
LogWriteCount
LogFillRatio�
ReadCacheInvalidationsForOverwrite���
ReadCacheInvalidationsForReuse���
ReadCacheInvalidationsGeneral
ReadCacheChecksOnMount���
ReadCacheIssuesOnMount���
 TrimLatency��
$TrimLatencyBase��
(DataCompactionCount��
,CompactionReadLatency
0CompactionReadLatencyBase
4CompactionWriteLatency���
8CompactionWriteLatencyBase���
~@DataInPlaceWriteClusterCount�
HCompactionFailedDueToIneligibleContainer�
LCompactionFailedDueToMaxFragmentation
PCompactedContainerFillRatio��
TCompactedContainerFillRatioBase��
XContainerMoveRetryCount��
\ContainerMoveFailedDueToIneligibleContainer��
`CompactionFailureCount���
dContainerMoveFailureCount
~hNumberOfDirtyMetadataPages���
pNumberOfDirtyTableListEntries
tNumberOfDeleteQueueEntries���NO+x_VOLUME_REFS_INFO_BUFFER.?AU_VOLUME_REFS_INFO_BUFFER@@��+U�)
�!
>
"Address��
"Reserved�
#QuadPart�&+_MCI_ADDR.?AT_MCI_ADDR@@+/n�_SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION.?AU_SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION@@��
#CycleTimen+_SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION.?AU_SYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION@@��+|�J�_RTL_UNLOAD_EVENT_TRACE.?AU_RTL_UNLOAD_EVENT_TRACE@@�
BaseAddress��
#SizeOfImage��
"Sequence�
"TimeDateStamp
"CheckSum�
�ImageName
�\Version��J+h_RTL_UNLOAD_EVENT_TRACE.?AU_RTL_UNLOAD_EVENT_TRACE@@+��J�_RTL_CIRCULAR_LIST_HEAD.?AU_RTL_CIRCULAR_LIST_HEAD@@
�
+HeadEntryJ+_RTL_CIRCULAR_LIST_HEAD.?AU_RTL_CIRCULAR_LIST_HEAD@@+��jShutdownNoReboot�ShutdownReboot���ShutdownPowerOff�ShutdownRebootForRecovery:t +_SHUTDOWN_ACTION.?AW4_SHUTDOWN_ACTION@@���!+�9Z�_FSCTL_UNMAP_SPACE_INPUT_BUFFER.?AU_FSCTL_UNMAP_SPACE_INPUT_BUFFER@@
~BytesToUnmap�Z$+_FSCTL_UNMAP_SPACE_INPUT_BUFFER.?AU_FSCTL_UNMAP_SPACE_INPUT_BUFFER@@%+U�*z�_JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION.?AU_JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION@@��*
L(BasicInfo
|0IoInfo���z(+`_JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION.?AU_JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION@@��)+}�b�_SYSTEM_FEATURE_CONFIGURATION_QUERY.?AU_SYSTEM_FEATURE_CONFIGURATION_QUERY@@
++rRtlFeatureConfigurationBoot��RtlFeatureConfigurationRuntime���RtlFeatureConfigurationCount�Vt-+_RTL_FEATURE_CONFIGURATION_TYPE.?AW4_RTL_FEATURE_CONFIGURATION_TYPE@@�.+�t2
.+ConfigurationType
uFeatureIdb0+_SYSTEM_FEATURE_CONFIGURATION_QUERY.?AU_SYSTEM_FEATURE_CONFIGURATION_QUERY@@1+�^
 3+*�HIMC__.?AUHIMC__@@��
5+
tunused���*7+HIMC__.?AUHIMC__@@��8+�:GetFileExInfoStandardGetFileExMaxInfoLevelFt:+_GET_FILEEX_INFO_LEVELS.?AW4_GET_FILEEX_INFO_LEVELS@@�;+��

!B�tagEMRSETICMPROFILE.?AUtagEMRSETICMPROFILE@@^
Pemr��
"dwFlags��
"cbName���
"cbData���
�Data�B?+tagEMRSETICMPROFILE.?AUtagEMRSETICMPROFILE@@@+S�J�_ENCLAVE_LOAD_INFO_VBS.?AU_ENCLAVE_LOAD_INFO_VBS@@��V
ImageHandle��
#Unused���
!NameLength���
J
Name�JC+_ENCLAVE_LOAD_INFO_VBS.?AU_ENCLAVE_LOAD_INFO_VBS@@��D+y�>�_WAKE_TIMER_INFO.?AU_WAKE_TIMER_INFO@@��B�_DIAGNOSTIC_BUFFER.?AU_DIAGNOSTIC_BUFFER@@��Z
#OffsetToNext�
�DueTime��
"Period���
G+ReasonContext>H+@_WAKE_TIMER_INFO.?AU_WAKE_TIMER_INFO@@��I+F�*�BSMINFO.?AUBSMINFO@@
K+*�HDESK__.?AUHDESK__@@
M+F
ucbSize���
N+hdesk
�hwnd�
Tluid�*O+ BSMINFO.?AUBSMINFO@@P+L�:�tagMDINEXTMENU.?AUtagMDINEXTMENU@@��
R+>
hmenuIn��
hmenuNext
�hwndNext�:T+tagMDINEXTMENU.?AUtagMDINEXTMENU@@��U+L0n�_PROCESS_REVOKE_FILE_HANDLES_INFORMATION.?AU_PROCESS_REVOKE_FILE_HANDLES_INFORMATION@@��
�TargetDevicePath�nX+_PROCESS_REVOKE_FILE_HANDLES_INFORMATION.?AU_PROCESS_REVOKE_FILE_HANDLES_INFORMATION@@��Y+}:F�_ETW_SET_TIMER_EVENT.?AU_ETW_SET_TIMER_EVENT@@���
#ExpectedDueTime��
#TimerAddress�
!TargetProcessorGroup�
 TargetProcessorIndex�
 Flags
"Period���
 EncodedDelay�
 Reserved0
!UniqueProcessId��F	\+ _ETW_SET_TIMER_EVENT.?AU_ETW_SET_TIMER_EVENT@@��]+0�B�_CONNECTDLGSTRUCTW.?AU_CONNECTDLGSTRUCTW@@��6�_NETRESOURCEW.?AU_NETRESOURCEW@@
`+j
"cbStructure��
�hwndOwner
a+lpConnRes
"dwFlags��
"dwDevNum�Bb+ _CONNECTDLGSTRUCTW.?AU_CONNECTDLGSTRUCTW@@��c+o�
�J�_ETW_REGNOTIF_REGISTER.?AU_ETW_REGNOTIF_REGISTER@@��b
Notification�
Kcb��
 Type�
 WatchTree
 Primary��Jg+_ETW_REGNOTIF_REGISTER.?AU_ETW_REGNOTIF_REGISTER@@��h+0�:�tagSERIALKEYSA.?AUtagSERIALKEYSA@@��
ucbSize���
"dwFlags��
plpszActivePort���
plpszPort�
uiBaudRate
uiPortState���
u iActive��:k+(tagSERIALKEYSA.?AUtagSERIALKEYSA@@��l+LH2B�tagMOUSEHOOKSTRUCT.?AUtagMOUSEHOOKSTRUCT@@��
n+R
�pt���
�hwnd�
uwHitTestCode�
#dwExtraInfo��Bp+ tagMOUSEHOOKSTRUCT.?AUtagMOUSEHOOKSTRUCT@@��q+L�F�IMPORT_OBJECT_HEADER.?AUIMPORT_OBJECT_HEADER@@��
!��
!��
!���
!Sig1�
!Sig2�
!Version��
!Machine��
"TimeDateStamp
"SizeOfData���
!Ordinal��
!Hint�
t+Type�
u+NameType�
v+Reserved�Fw+IMPORT_OBJECT_HEADER.?AUIMPORT_OBJECT_HEADER@@��x+fq	:�_REASON_CONTEXT.?AU_REASON_CONTEXT@@
z+r
pLocalizedReasonModule
"LocalizedReasonId
"ReasonStringCount
cReasonStrings:|+<anonymous-tag>.?AU<anonymous-tag>@@}+�
6
}+Detailed�
qSimpleReasonString���2+<anonymous-tag>.?AT<anonymous-tag>@@�+�:
"Version��
"Flags
�+Reason���:�+ _REASON_CONTEXT.?AU_REASON_CONTEXT@@�+�	>OS_DEPLOYMENT_STANDARD���OS_DEPLOYMENT_COMPACTRt�+_OS_DEPLOYEMENT_STATE_VALUES.?AW4_OS_DEPLOYEMENT_STATE_VALUES@@����+$�#^�_SYSTEM_POOL_ZEROING_INFORMATION.?AU_SYSTEM_POOL_ZEROING_INFORMATION@@��
�+&
 PoolZeroingSupportPresent^�+_SYSTEM_POOL_ZEROING_INFORMATION.?AU_SYSTEM_POOL_ZEROING_INFORMATION@@���+|�Z�_PERFINFO_FILE_SIMPLE_OPERATION.?AU_PERFINFO_FILE_SIMPLE_OPERATION@@Z
#Irp��
#FileObject���
#FileKey��
"IssuingThreadId��Z�+_PERFINFO_FILE_SIMPLE_OPERATION.?AU_PERFINFO_FILE_SIMPLE_OPERATION@@�+0�
SystemProcessClassificationNormalSystemProcessClassificationSystemSystemProcessClassificationSecureSystem��SystemProcessClassificationMemCompressionSystemProcessClassificationRegistry��SystemProcessClassificationMaximum���Vt�+_SYSTEM_PROCESS_CLASSIFICATION.?AW4_SYSTEM_PROCESS_CLASSIFICATION@@����+�
���
�+v�_ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION.?AU_ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION@@
�+��
�+Z�_COMPATIBILITY_CONTEXT_ELEMENT.?AU_COMPATIBILITY_CONTEXT_ELEMENT@@���+#�.
"ElementCount�
�+Elements�v�+_ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION.?AU_ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION@@�+�J�_RTLP_HEAP_TAGGING_INFO.?AU_RTLP_HEAP_TAGGING_INFO@@:�_RTLP_TAG_INFO.?AU_RTLP_TAG_INFO@@���+#�f
!Version��
!Flags
Process��
#EntriesCount�
�+Entries��J�+0_RTLP_HEAP_TAGGING_INFO.?AU_RTLP_HEAP_TAGGING_INFO@@�+��
� #@�Z
�elfLogFont���
�+<elfFullName��
�|elfStyle�
��elfScript>�+�tagENUMLOGFONTEXA.?AUtagENUMLOGFONTEXA@@�+S�F�_MM_ETW_PAGE_INFO_EX.?AU_MM_ETW_PAGE_INFO_EX@@��
�+>�_MM_ETW_PAGE_INFO.?AU_MM_ETW_PAGE_INFO@@&
�+PageInfo�
�!Info�F�+ _MM_ETW_PAGE_INFO_EX.?AU_MM_ETW_PAGE_INFO_EX@@���+BSVIMO_UNAVAILABLE��IMO_HARDWARE�IMO_INJECTED�IMO_SYSTEM���Nt�+tagINPUT_MESSAGE_ORIGIN_ID.?AW4tagINPUT_MESSAGE_ORIGIN_ID@@����+L�=
4J�_IMAGE_BASE_RELOCATION.?AU_IMAGE_BASE_RELOCATION@@��
�+��
�+6
"VirtualAddress���
"SizeOfBlock��J�+_IMAGE_BASE_RELOCATION.?AU_IMAGE_BASE_RELOCATION@@���+f$^�_RTL_QUERY_DEBUG_VIRTUAL_PROCESS.?AU_RTL_QUERY_DEBUG_VIRTUAL_PROCESS@@��##�+
�+|""�+
�+V
Context��
�+ReadMemoryRoutine
�+QueryInformationRoutine��^�+_RTL_QUERY_DEBUG_VIRTUAL_PROCESS.?AU_RTL_QUERY_DEBUG_VIRTUAL_PROCESS@@���+�.	>�_OSVERSIONINFOEXW.?AU_OSVERSIONINFOEXW@@
�+
"dwOSVersionInfoSize��
"dwMajorVersion���
"dwMinorVersion���
"dwBuildNumber
"dwPlatformId�
r$szCSDVersion�
!wServicePackMajor
!wServicePackMinor
!wSuiteMask���
 wProductType�
 wReserved>�+_OSVERSIONINFOEXW.?AU_OSVERSIONINFOEXW@@�+$�

2�_MUICCENTRY.?AU_MUICCENTRY@@
�+�+# �t#�
ulCultureNameOffset���
uulCultureID��
"ulLanguageType���
�+pNeutralCulture��
�+lBaseLanguageIndices�
�+8lParentLanguageIndices���2�+H_MUICCENTRY.?AU_MUICCENTRY@@�+�:�_CLIENT_CALL_RETURN.?AT_CLIENT_CALL_RETURN@@*
Pointer��
Simple���:�+_CLIENT_CALL_RETURN.?AT_CLIENT_CALL_RETURN@@�+��V�_MEMORY_PARTITION_PAGE_RANGE.?AU_MEMORY_PARTITION_PAGE_RANGE@@��.
#StartPage
#NumberOfPagesV�+_MEMORY_PARTITION_PAGE_RANGE.?AU_MEMORY_PARTITION_PAGE_RANGE@@���+B�Z�_PERFINFO_DRIVER_MAJORFUNCTION.?AU_PERFINFO_DRIVER_MAJORFUNCTION@@��
�+�
"MajorFunction
"MinorFunction
RoutineAddr��
FileNamePointer��
Irp��
" UniqMatchId��Z�+$_PERFINFO_DRIVER_MAJORFUNCTION.?AU_PERFINFO_DRIVER_MAJORFUNCTION@@���+0�q"qt�+
�+:�_MODEMSETTINGS.?AU_MODEMSETTINGS@@��j
"dwActualSize�
"dwRequiredSize���
"dwDevSpecificOffset��
"dwDevSpecificSize
"dwCallSetupFailTimer�
"dwInactivityTimeout��
"dwSpeakerVolume��
"dwSpeakerMode
" dwPreferredModemOptions��
"$dwNegotiatedModemOptions�
"(dwNegotiatedDCERate��
�,abVariablePortion:�+0_MODEMSETTINGS.?AU_MODEMSETTINGS@@��&onecore\external\sdk\inc\mcx.h��+�+2
,*R�_FILE_DIRECTORY_INFORMATION.?AU_FILE_DIRECTORY_INFORMATION@@
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
J@FileName�R�+H_FILE_DIRECTORY_INFORMATION.?AU_FILE_DIRECTORY_INFORMATION@@�+U�Z�_RTL_SEGMENT_HEAP_MEMORY_SOURCE.?AU_RTL_SEGMENT_HEAP_MEMORY_SOURCE@@##�r
"Flags
"MemoryTypeMask���
"NumaNode�
PartitionHandle��
�+Reserved�Z�+(_RTL_SEGMENT_HEAP_MEMORY_SOURCE.?AU_RTL_SEGMENT_HEAP_MEMORY_SOURCE@@�+$�
6
"dwLowDateTime
"dwHighDateTime���.�+_FILETIME.?AU_FILETIME@@�+y'N�_CM_PARTIAL_RESOURCE_LIST.?AU_CM_PARTIAL_RESOURCE_LIST@@
�+%#�Z
!Version��
!Revision�
"Count
�+PartialDescriptors���N�+_CM_PARTIAL_RESOURCE_LIST.?AU_CM_PARTIAL_RESOURCE_LIST@@�+�U2�FLASHWINFO.?AUFLASHWINFO@@��
�+b
ucbSize���
�hwnd�
"dwFlags��
uuCount���
"dwTimeout2�+ FLASHWINFO.?AUFLASHWINFO@@���+L:M"�+
�f�_RTL_USER_PROCESS_EXTENDED_PARAMETERS.?AU_RTL_USER_PROCESS_EXTENDED_PARAMETERS@@
,�
!Version��
!NodeNumber���
ProcessSecurityDescriptor
ThreadSecurityDescriptor�
ParentProcess
 DebugPort
(TokenHandle��
0JobHandlef,8_RTL_USER_PROCESS_EXTENDED_PARAMETERS.?AU_RTL_USER_PROCESS_EXTENDED_PARAMETERS@@,�Wf�_JOURNAL_SET_KEY_SECURITY_INFORMATION.?AU_JOURNAL_SET_KEY_SECURITY_INFORMATION@@�
yAction���
#RecordNumber�
~TimeStamp
�KeyPathName��
"(OldSecurityDescriptorLength��
0OldSecurityDescriptor
"8NewSecurityDescriptorLength��
@NewSecurityDescriptorf,H_JOURNAL_SET_KEY_SECURITY_INFORMATION.?AU_JOURNAL_SET_KEY_SECURITY_INFORMATION@@,z�N�PPM_IDLE_STATE_BUCKET_EX.?AUPPM_IDLE_STATE_BUCKET_EX@@��R
#TotalTimeUs��
"MinTimeUs
"MaxTimeUs
"CountN
,PPM_IDLE_STATE_BUCKET_EX.?AUPPM_IDLE_STATE_BUCKET_EX@@��,F
&�_QUAD.?AU_QUAD@@

,��
,>
UseThisFieldToCopy���
ADoNotUseThisField&,_QUAD.?AU_QUAD@@,�J�_SECURITY_CAPABILITIES.?AU_SECURITY_CAPABILITIES@@��
,f
AppContainerSid��
Capabilities�
"CapabilityCount��
"Reserved�J,_SECURITY_CAPABILITIES.?AU_SECURITY_CAPABILITIES@@��,E;Z�_IMAGE_RESOURCE_DIRECTORY_ENTRY.?AU_IMAGE_RESOURCE_DIRECTORY_ENTRY@@
,
"��
"��
"��
"��
,NameOffset���
,NameIsString�
"Name�
!Id���
"OffsetToData�
,OffsetToDirectory
,DataIsDirectory��Z,_IMAGE_RESOURCE_DIRECTORY_ENTRY.?AU_IMAGE_RESOURCE_DIRECTORY_ENTRY@@,fKV�_PERFINFO_PAGE_RANGE_IDENTITY.?AU_PERFINFO_PAGE_RANGE_IDENTITY@@
#��
#0��
#4��
",UseDescription���
#,UniqueKey
$,Reserved�
ProtoPteAddress��
#PageFrameIndex���
VirtualAddress���
#PageCountV%,_PERFINFO_PAGE_RANGE_IDENTITY.?AU_PERFINFO_PAGE_RANGE_IDENTITY@@&,0�bTokenElevationTypeDefaultTokenElevationTypeFull���TokenElevationTypeLimitedBt(,_TOKEN_ELEVATION_TYPE.?AW4_TOKEN_ELEVATION_TYPE@@�),E-
o 
�R�_ENLISTMENT_CRM_INFORMATION.?AU_ENLISTMENT_CRM_INFORMATION@@
-,b
�CrmTransactionManagerId��
�CrmResourceManagerId�
� CrmEnlistmentId��R/,0_ENLISTMENT_CRM_INFORMATION.?AU_ENLISTMENT_CRM_INFORMATION@@0,�[n�_FILE_QUERY_METADATA_OPTIMIZATION_OUTPUT.?AU_FILE_QUERY_METADATA_OPTIMIZATION_OUTPUT@@��
2,zFileMetadataOptimizationNone�FileMetadataOptimizationInProgress���FileMetadataOptimizationPending��Zt4,_FILE_METADATA_OPTIMIZATION_STATE.?AW4_FILE_METADATA_OPTIMIZATION_STATE@@�5,U�(
5,State
"AttributeListSize
"MetadataSpaceUsed
"MetadataSpaceAllocated���
"NumberOfFileRecords��
"NumberOfResidentAttributes���
"NumberOfNonresidentAttributes
"TotalInProgress��
" TotalPending�n	7,$_FILE_QUERY_METADATA_OPTIMIZATION_OUTPUT.?AU_FILE_QUERY_METADATA_OPTIMIZATION_OUTPUT@@��8,U�(B�_XSAVE_CET_U_FORMAT.?AU_XSAVE_CET_U_FORMAT@@
:,2
#Ia32CetUMsr��
#Ia32Pl3SspMsrB<,_XSAVE_CET_U_FORMAT.?AU_XSAVE_CET_U_FORMAT@@=,F�_LOAD_DLL_EVENT_DATA.?AU_LOAD_DLL_EVENT_DATA@@��
JImageNameF@,_LOAD_DLL_EVENT_DATA.?AU_LOAD_DLL_EVENT_DATA@@��A,0*Z�_SYSTEM_MEMORY_LIST_INFORMATION.?AU_SYSTEM_MEMORY_LIST_INFORMATION@@##@��
#ZeroPageCount
#FreePageCount
#ModifiedPageCount
#ModifiedNoWritePageCount�
# BadPageCount�
D,(PageCountByPriority��
D,hRepurposedPagesByPriority
#�ModifiedPageCountPageFileZE,�_SYSTEM_MEMORY_LIST_INFORMATION.?AU_SYSTEM_MEMORY_LIST_INFORMATION@@F,��Z�_FILE_ATTRIBUTE_TAG_INFORMATION.?AU_FILE_ATTRIBUTE_TAG_INFORMATION@@6
"FileAttributes���
"ReparseTag���ZI,_FILE_ATTRIBUTE_TAG_INFORMATION.?AU_FILE_ATTRIBUTE_TAG_INFORMATION@@J,U?6PlatformRoleUnspecified��PlatformRoleDesktop��PlatformRoleMobile���PlatformRoleWorkstation��PlatformRoleEnterpriseServer�PlatformRoleSOHOServer���PlatformRoleAppliancePC��PlatformRolePerformanceServerPlatformRoleSlate	PlatformRoleMaximum��B
tL,_POWER_PLATFORM_ROLE.?AW4_POWER_PLATFORM_ROLE@@���M,F�
B�_SERVICE_NOTIFY_2A.?AU_SERVICE_NOTIFY_2A@@��
"dwVersion
�pfnNotifyCallback
pContext�
"dwNotificationStatus�
IServiceStatus
"@dwNotificationTriggered��
pHpszServiceNames��BQ,P_SERVICE_NOTIFY_2A.?AU_SERVICE_NOTIFY_2A@@��R,m�
�#
x
y*U,_POINTL.?AU_POINTL@@V,A�
tunused���*X,HDESK__.?AUHDESK__@@Y,AS.�_RGNDATA.?AU_RGNDATA@@��
[,:�_RGNDATAHEADER.?AU_RGNDATAHEADER@@��&
],rdh��
9 Buffer���.^,$_RGNDATA.?AU_RGNDATA@@��_,S��CI_WINDOWS_LOCKDOWN_RESTRICTION_NONE�CI_WINDOWS_LOCKDOWN_RESTRICTION_NOUNLOCK�CI_WINDOWS_LOCKDOWN_RESTRICTION_NOUNLOCK_PERMANENT���CI_WINDOWS_LOCKDOWN_RESTRICTION_MAX��Vta,CI_WINDOWS_LOCKDOWN_RESTRICTION.?AW4CI_WINDOWS_LOCKDOWN_RESTRICTION@@�b,��
 ^�_PUBLIC_OBJECT_BASIC_INFORMATION.?AU_PUBLIC_OBJECT_BASIC_INFORMATION@@��"#(�v
"Attributes���
"GrantedAccess
"HandleCount��
"PointerCount�
f,Reserved�^g,8_PUBLIC_OBJECT_BASIC_INFORMATION.?AU_PUBLIC_OBJECT_BASIC_INFORMATION@@��h,6�J�REFS_VOLUME_DATA_BUFFER.?AUREFS_VOLUME_DATA_BUFFER@@~#H��
"ByteCount
"MajorVersion�
"MinorVersion�
"BytesPerPhysicalSector���
~VolumeSerialNumber���
~NumberSectors
~ TotalClusters
~(FreeClusters�
~0TotalReserved
"8BytesPerSector���
"<BytesPerCluster��
~@MaximumSizeOfResidentFile
!HFastTierDataFillRatio
!JSlowTierDataFillRatio
"LDestagesFastTierToSlowTierRate���
k,PReserved�Jl,�REFS_VOLUME_DATA_BUFFER.?AUREFS_VOLUME_DATA_BUFFER@@m,U

v�_PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION.?AU_PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION@@>
"Version��
"Reserved�
#Callback�vp,_PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION.?AU_PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION@@q,b�.�tagLOGPEN.?AUtagLOGPEN@@
s,>
ulopnStyle
�lopnWidth
"lopnColor.u,tagLOGPEN.?AUtagLOGPEN@@v,Sk�POINTER_DEVICE_TYPE_INTEGRATED_PEN���POINTER_DEVICE_TYPE_EXTERNAL_PEN�POINTER_DEVICE_TYPE_TOUCHPOINTER_DEVICE_TYPE_TOUCH_PAD��POINTER_DEVICE_TYPE_MAX�Ftx,tagPOINTER_DEVICE_TYPE.?AW4tagPOINTER_DEVICE_TYPE@@���y,L�;6�HCOLORSPACE__.?AUHCOLORSPACE__@@
{,
tunused���6},HCOLORSPACE__.?AUHCOLORSPACE__@@~,AMb�_RTL_PROCESS_MODULE_INFORMATION_EX.?AU_RTL_PROCESS_MODULE_INFORMATION_EX@@��v
!NextOffset���
�BaseInfo�
"0ImageChecksum
"4TimeDateStamp
8DefaultBase��b�,@_RTL_PROCESS_MODULE_INFORMATION_EX.?AU_RTL_PROCESS_MODULE_INFORMATION_EX@@���,��N�_ETW_TP_EVENT_POOL_CREATE.?AU_ETW_TP_EVENT_POOL_CREATE@@
�,*
8Header���
 PoolId���N�,(_ETW_TP_EVENT_POOL_CREATE.?AU_ETW_TP_EVENT_POOL_CREATE@@�,0�
b�ImagePolicyEntryTypeNone�ImagePolicyEntryTypeBool�ImagePolicyEntryTypeInt8�ImagePolicyEntryTypeUInt8ImagePolicyEntryTypeInt16ImagePolicyEntryTypeUInt16���ImagePolicyEntryTypeInt32ImagePolicyEntryTypeUInt32���ImagePolicyEntryTypeInt64	ImagePolicyEntryTypeUInt64���
ImagePolicyEntryTypeAnsiString���ImagePolicyEntryTypeUnicodeStringImagePolicyEntryTypeOverride�
ImagePolicyEntryTypeMaximum��Jt�,_IMAGE_POLICY_ENTRY_TYPE.?AW4_IMAGE_POLICY_ENTRY_TYPE@@����,$L&.�_FLOAT128.?AU_FLOAT128@@
�,*
LowPart��
HighPart�.�,_FLOAT128.?AU_FLOAT128@@�,Uqtttt�,
�,b�_RESOURCEMANAGER_BASIC_INFORMATION.?AU_RESOURCEMANAGER_BASIC_INFORMATION@@��R
�ResourceManagerId
"DescriptionLength
JDescription��b�,_RESOURCEMANAGER_BASIC_INFORMATION.?AU_RESOURCEMANAGER_BASIC_INFORMATION@@���,�6�_MODEMDEVCAPS.?AU_MODEMDEVCAPS@@N
"dwActualSize�
"dwRequiredSize���
"dwDevSpecificOffset��
"dwDevSpecificSize
"dwModemProviderVersion���
"dwModemManufacturerOffset
"dwModemManufacturerSize��
"dwModemModelOffset���
" dwModemModelSize�
"$dwModemVersionOffset�
"(dwModemVersionSize���
",dwDialOptions
"0dwCallSetupFailTimer�
"4dwInactivityTimeout��
"8dwSpeakerVolume��
"<dwSpeakerMode
"@dwModemOptions���
"DdwMaxDTERate�
"HdwMaxDCERate�
�LabVariablePortion6�,P_MODEMDEVCAPS.?AU_MODEMDEVCAPS@@�,�+Z�_SYSTEM_ACPI_AUDIT_INFORMATION.?AU_SYSTEM_ACPI_AUDIT_INFORMATION@@��
"��
"��
"��Z
"RsdpCount
�,SameRsdt�
�,SlicPresent��
�,SlicDifferentZ�,_SYSTEM_ACPI_AUDIT_INFORMATION.?AU_SYSTEM_ACPI_AUDIT_INFORMATION@@���,��
v�_TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT@@��
�,^
"PropagationCookie
�UOW��
�TmIdentity���
"$BufferLength�v�,(_TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT@@���,��N�_HEAP_EVENT_RANGE_CREATE.?AU_HEAP_EVENT_RANGE_CREATE@@��F
HeapHandle���
#FirstRangeSize���
"FlagsN�,_HEAP_EVENT_RANGE_CREATE.?AU_HEAP_EVENT_RANGE_CREATE@@���,0�.�_RPC_SID.?AU_RPC_SID@@��N�_SID_IDENTIFIER_AUTHORITY.?AU_SID_IDENTIFIER_AUTHORITY@@j
 Revision�
 SubAuthorityCount
�,IdentifierAuthority��
�SubAuthority�.�,_RPC_SID.?AU_RPC_SID@@���,�86�_DRAWPATRECT.?AU_DRAWPATRECT@@��V
�ptPosition���
�ptSize���
!wStyle���
!wPattern�6�,_DRAWPATRECT.?AU_DRAWPATRECT@@���,S%

�
~~�,J�_IMAGE_HOT_PATCH_HASHES.?AU_IMAGE_HOT_PATCH_HASHES@@&
�SHA256���
� SHA1�J�,4_IMAGE_HOT_PATCH_HASHES.?AU_IMAGE_HOT_PATCH_HASHES@@�,f�^�_PERFINFO_CC_SCHEDULE_READ_AHEAD.?AU_PERFINFO_CC_SCHEDULE_READ_AHEAD@@��
"��
"��j
#WorkItemKey��
#FileObjectKey
#FileOffset���
"Length���
"ReadAheadUnit
" ReadAheadLength��
#(ReadAheadOffset��
#0ReadAheadBeyondLastByte��
 8ReadPattern��
"<SequentialReadCount��
"@SharedCacheMapFlags��
�,DReadAheadSettingsChanged�
�,DReadAheadActive��^
�,H_PERFINFO_CC_SCHEDULE_READ_AHEAD.?AU_PERFINFO_CC_SCHEDULE_READ_AHEAD@@���,0�.�_DOCINFOW.?AU_DOCINFOW@@r
tcbSize���
�lpszDocName��
�lpszOutput���
�lpszDatatype�
" fwType���.�,(_DOCINFOW.?AU_DOCINFOW@@�,S�V�_KEY_HANDLE_TAGS_INFORMATION.?AU_KEY_HANDLE_TAGS_INFORMATION@@��
"HandleTags���V�,_KEY_HANDLE_TAGS_INFORMATION.?AU_KEY_HANDLE_TAGS_INFORMATION@@���,zZV�_REFS_DEALLOCATE_RANGES_RANGE.?AU_REFS_DEALLOCATE_RANGES_RANGE@@2
#StartOfRange�
#CountOfRange�V�,_REFS_DEALLOCATE_RANGES_RANGE.?AU_REFS_DEALLOCATE_RANGES_RANGE@@�,U�*V�_FILE_COMPRESSION_INFORMATION.?AU_FILE_COMPRESSION_INFORMATION@@�
~CompressedFileSize���
!CompressionFormat
 
CompressionUnitShift�
 ChunkShift���
 ClusterShift�
�
Reserved�V�,_FILE_COMPRESSION_INFORMATION.?AU_FILE_COMPRESSION_INFORMATION@@�,U�R�_IMAGE_COFF_SYMBOLS_HEADER.?AU_IMAGE_COFF_SYMBOLS_HEADER@@��
�,�
"NumberOfSymbols��
"LvaToFirstSymbol�
"NumberOfLinenumbers��
"LvaToFirstLinenumber�
"RvaToFirstByteOfCode�
"RvaToLastByteOfCode��
"RvaToFirstByteOfData�
"RvaToLastByteOfData��R�, _IMAGE_COFF_SYMBOLS_HEADER.?AU_IMAGE_COFF_SYMBOLS_HEADER@@���,f�z�JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2@@�
MaxIops��
MaxBandwidth�
ReservationIops��
qVolumeName���
" BaseIoSize���
�$ControlFlags�
!(VolumeNameLength�
0CriticalReservationIops��
8ReservationBandwidth�
@CriticalReservationBandwidth�
HMaxTimePercent���
PReservationTimePercent���
XCriticalReservationTimePercent���z
�,`JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2@@�,}l>�MENUITEMTEMPLATE.?AUMENUITEMTEMPLATE@@��:
!mtOption�
!mtID�
JmtString�>�,MENUITEMTEMPLATE.?AUMENUITEMTEMPLATE@@���,L�(
�

 �
!wYear
!wMonth���
!wDayOfWeek���
!wDay�
!wHour
!
wMinute��
!wSecond��
!wMilliseconds2�,_SYSTEMTIME.?AU_SYSTEMTIME@@�,�Z
�
�V�NTFS_FILE_RECORD_INPUT_BUFFER.?AUNTFS_FILE_RECORD_INPUT_BUFFER@@"
~FileReferenceNumber��V�,NTFS_FILE_RECORD_INPUT_BUFFER.?AUNTFS_FILE_RECORD_INPUT_BUFFER@@�,U�

H"�,
�B�tagRECONVERTSTRING.?AUtagRECONVERTSTRING@@���
"dwSize���
"dwVersion
"dwStrLen�
"dwStrOffset��
"dwCompStrLen�
"dwCompStrOffset��
"dwTargetStrLen���
"dwTargetStrOffsetB�, tagRECONVERTSTRING.?AUtagRECONVERTSTRING@@���,�xB�_OSVERSIONINFOEX2W.?AU_OSVERSIONINFOEX2W@@��
�,N
"dwOSVersionInfoSize��
"dwMajorVersion���
"dwMinorVersion���
"dwBuildNumber
"dwPlatformId�
r$szCSDVersion�
!wServicePackMajor
!wServicePackMinor
!wSuiteMask���
 wProductType�
 wReserved
"wSuiteMaskEx�
" wReserved2���B
�,$_OSVERSIONINFOEX2W.?AU_OSVERSIONINFOEX2W@@���,$�j�_RESOURCEMANAGER_COMPLETION_INFORMATION.?AU_RESOURCEMANAGER_COMPLETION_INFORMATION@@
�,>
IoCompletionPortHandle���
#CompletionKeyj�,_RESOURCEMANAGER_COMPLETION_INFORMATION.?AU_RESOURCEMANAGER_COMPLETION_INFORMATION@@�,�$^�_SYSTEM_SINGLE_MODULE_INFORMATION.?AU_SYSTEM_SINGLE_MODULE_INFORMATION@@6
TargetModuleAddress��
�,ExInfo���^�,H_SYSTEM_SINGLE_MODULE_INFORMATION.?AU_SYSTEM_SINGLE_MODULE_INFORMATION@@�,�]
�F�_REARRANGE_FILE_DATA.?AU_REARRANGE_FILE_DATA@@��
-z
#SourceStartingOffset�
#TargetOffset�
SourceFileHandle�
"Length���
"FlagsF- _REARRANGE_FILE_DATA.?AU_REARRANGE_FILE_DATA@@��-U(J�CREATE_USN_JOURNAL_DATA.?AUCREATE_USN_JOURNAL_DATA@@6
#MaximumSize��
#AllocationDelta��J-CREATE_USN_JOURNAL_DATA.?AUCREATE_USN_JOURNAL_DATA@@	-U
v�_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V2.?AU_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V2@@��
-�
#IoReadBytesLimit�
#IoWriteBytesLimit
~PerJobUserTimeLimit��
#JobLowMemoryLimit
# JobHighMemoryLimit���
(RateControlTolerance�
E,RateControlToleranceInterval�
"0LimitFlags���v
-8_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V2.?AU_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_V2@@��-b�J�_IMAGE_CHPE_RANGE_ENTRY.?AU_IMAGE_CHPE_RANGE_ENTRY@@
-
"��
"��^
"StartOffset��
-NativeCode���
-AddressBits��
"Length���J-_IMAGE_CHPE_RANGE_ENTRY.?AU_IMAGE_CHPE_RANGE_ENTRY@@-fvB�_ACCESS_ALLOWED_ACE.?AU_ACCESS_ALLOWED_ACE@@:
�Header���
"Mask�
"SidStart�B-_ACCESS_ALLOWED_ACE.?AU_ACCESS_ALLOWED_ACE@@-EVFindExInfoStandard���FindExInfoBasic��FindExInfoMaxInfoLevel���>t-_FINDEX_INFO_LEVELS.?AW4_FINDEX_INFO_LEVELS@@�-��J�_CM_MONITOR_DEVICE_DATA.?AU_CM_MONITOR_DEVICE_DATA@@J
!Version��
!Revision�
!HorizontalScreenSize�
!VerticalScreenSize���
!HorizontalResolution�
!
VerticalResolution���
!HorizontalDisplayTimeLow�
!HorizontalDisplayTime
!HorizontalDisplayTimeHigh
!HorizontalBackPorchLow���
!HorizontalBackPorch��
!HorizontalBackPorchHigh��
!HorizontalFrontPorchLow��
!HorizontalFrontPorch�
!HorizontalFrontPorchHigh�
!HorizontalSyncLow
! HorizontalSync���
!"HorizontalSyncHigh���
!$VerticalBackPorchLow�
!&VerticalBackPorch
!(VerticalBackPorchHigh
!*VerticalFrontPorchLow
!,VerticalFrontPorch���
!.VerticalFrontPorchHigh���
!0VerticalSyncLow��
!2VerticalSync�
!4VerticalSyncHigh�J-6_CM_MONITOR_DEVICE_DATA.?AU_CM_MONITOR_DEVICE_DATA@@ -��B�_SD_ENUM_SDS_ENTRY.?AU_SD_ENUM_SDS_ENTRY@@��j
"Hash�
"SecurityId���
#Offset���
"Length���
�Descriptor���B#-_SD_ENUM_SDS_ENTRY.?AU_SD_ENUM_SDS_ENTRY@@��$-UV�_SC_NOTIFICATION_REGISTRATION.?AU_SC_NOTIFICATION_REGISTRATION@@
&-
�:�tagEMRANGLEARC.?AUtagEMRANGLEARC@@��j
Pemr��
�ptlCenter
"nRadius��
@eStartAngle��
@eSweepAngle��:*-tagEMRANGLEARC.?AUtagEMRANGLEARC@@��+-S0
"}"�.-
/-2
--ExecuteCallback��
0-Unposted�B1-_TP_TASK_CALLBACKS.?AU_TP_TASK_CALLBACKS@@��2-��F�_EX_WNF_SUBSCRIPTION.?AU_EX_WNF_SUBSCRIPTION@@��
4-:�_WNF_STATE_NAME.?AU_WNF_STATE_NAME@@
6-��
7-6�_WNF_TYPE_ID.?AU_WNF_TYPE_ID@@��
9-��
:-5-8-"";-<-n�_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION.?AU_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION@@�
#IoReadBytesLimit�
#IoWriteBytesLimit
~PerJobUserTimeLimit��
#JobMemoryLimit���
 RateControlTolerance�
E$RateControlToleranceInterval�
"(LimitFlags���n?-0_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION.?AU_JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION@@@-}�6�_NLSTABLEINFO.?AU_NLSTABLEINFO@@6�_CPTABLEINFO.?AU_CPTABLEINFO@@��j
C-OemTableInfo�
C-@AnsiTableInfo
q�UpperCaseTable���
q�LowerCaseTable���6D-�_NLSTABLEINFO.?AU_NLSTABLEINFO@@*onecore\external\ddk\inc\ntnls.h���E-F-3
R�_IMAGE_RESOURCE_DATA_ENTRY.?AU_IMAGE_RESOURCE_DATA_ENTRY@@��R
"OffsetToData�
"Size�
"CodePage�
"Reserved�RJ-_IMAGE_RESOURCE_DATA_ENTRY.?AU_IMAGE_RESOURCE_DATA_ENTRY@@��K-f|Z�_PLUGPLAY_CONTROL_CONFLICT_LIST.?AU_PLUGPLAY_CONTROL_CONFLICT_LIST@@^�_PLUGPLAY_CONTROL_CONFLICT_ENTRY.?AU_PLUGPLAY_CONTROL_CONFLICT_ENTRY@@��N-#(�
"Reserved1
"Reserved2
"ConflictsCounted�
"ConflictsListed��
"RequiredBufferSize���
O-ConflictEntryZP-@_PLUGPLAY_CONTROL_CONFLICT_LIST.?AU_PLUGPLAY_CONTROL_CONFLICT_LIST@@Q-��
[6�_RTL_HEAP_TAG.?AU_RTL_HEAP_TAG@@q#0�
"NumberOfAllocations��
"NumberOfFrees
#BytesAllocated���
!TagIndex�
!CreatorBackTraceIndex
U-TagName��6V-H_RTL_HEAP_TAG.?AU_RTL_HEAP_TAG@@W-�-6�tagMOUSEKEYS.?AUtagMOUSEKEYS@@��
ucbSize���
"dwFlags��
"iMaxSpeed
"iTimeToMaxSpeed��
"iCtrlSpeed���
"dwReserved1��
"dwReserved2��6Z-tagMOUSEKEYS.?AUtagMOUSEKEYS@@��[-L�3>�tagEMREXTTEXTOUTA.?AUtagEMREXTTEXTOUTA@@z
Pemr��
,rclBounds
"iGraphicsMode
@exScale��
@ eyScale��
�'$emrtext��>^-LtagEMREXTTEXTOUTA.?AUtagEMREXTTEXTOUTA@@_-S�zPoHiberForceDisableReasonPolicy��PoHiberForceDisableReasonGuardedHost�PoHiberForceDisableReasonMax�Vta-_PO_HIBER_FORCE_DISABLE_REASON.?AW4_PO_HIBER_FORCE_DISABLE_REASON@@���b-FS
ZMemoryReserveUserApc�MemoryReserveIoCompletionMemoryReserveTypeMax�Btd-_MEMORY_RESERVE_TYPE.?AW4_MEMORY_RESERVE_TYPE@@���e-b
6�tagWINDOWPOS.?AUtagWINDOWPOS@@��v
�hwnd�
�hwndInsertAfter��
tx
ty
tcx���
tcy���
u flags6h-(tagWINDOWPOS.?AUtagWINDOWPOS@@��i-Ly
V�_RTL_SPARSE_BITMAP_PARAMETER.?AU_RTL_SPARSE_BITMAP_PARAMETER@@��
#l-
m-
�
"��
"��
"��
"��

#BitCountMax��
"MetadataSizePerBit���
"BitsPerRange�
"RangeCountMax
n-AllocateRoutine��
o- FreeRoutine��
p-(DefaultBitsSet���
q-(SparseRangeArray�
r-(NoInternalLocking
s-(SpareFlags���V
t-0_RTL_SPARSE_BITMAP_PARAMETER.?AU_RTL_SPARSE_BITMAP_PARAMETER@@��u-��6�tagTPMPARAMS.?AUtagTPMPARAMS@@��*
ucbSize���
�rcExclude6x-tagTPMPARAMS.?AUtagTPMPARAMS@@��y-L6�_SLIST_ENTRY.?AU_SLIST_ENTRY@@��
{-
|-Next�6}-_SLIST_ENTRY.?AU_SLIST_ENTRY@@��~-$TN�_SYSTEM_FLAGS_INFORMATION.?AU_SYSTEM_FLAGS_INFORMATION@@
"FlagsN�-_SYSTEM_FLAGS_INFORMATION.?AU_SYSTEM_FLAGS_INFORMATION@@�-��Z�_MM_ETW_WORKING_SET_PFN_RUNDOWN.?AU_MM_ETW_WORKING_SET_PFN_RUNDOWN@@
�-�+# �J
#ProcessId
#EntryCount���
�-WorkingSetInfo���Z�-0_MM_ETW_WORKING_SET_PFN_RUNDOWN.?AU_MM_ETW_WORKING_SET_PFN_RUNDOWN@@�-BXJ�_QUERY_BAD_RANGES_INPUT.?AU_QUERY_BAD_RANGES_INPUT@@
�-&#�:
"Flags
"NumRanges
�-Ranges���J�-_QUERY_BAD_RANGES_INPUT.?AU_QUERY_BAD_RANGES_INPUT@@�-U!!^�_FILE_NOTIFY_EXTENDED_INFORMATION.?AU_FILE_NOTIFY_EXTENDED_INFORMATION@@
�-f
"NextEntryOffset��
"Action���
~CreationTime�
~LastModificationTime�
~LastChangeTime���
~ LastAccessTime���
~(AllocatedLength��
~0FileSize�
"8FileAttributes���
"<ReparsePointTag��
~@FileId���
~HParentFileId�
"PFileNameLength���
JTFileName�^�-X_FILE_NOTIFY_EXTENDED_INFORMATION.?AU_FILE_NOTIFY_EXTENDED_INFORMATION@@�-U@
���
�-
qN�_MIDL_STUBLESS_PROXY_INFO.?AU_MIDL_STUBLESS_PROXY_INFO@@
�-�
<(pStubDesc
ProcFormatString�
FormatStringOffset���
�pTransferSyntax��
# nCount���
F((pSyntaxInfo��N�-0_MIDL_STUBLESS_PROXY_INFO.?AU_MIDL_STUBLESS_PROXY_INFO@@�-��
s"6�_DEVICE_FLAGS.?AU_DEVICE_FLAGS@@
�-
"��
"��
"��
"��
"��
"��
"��
�-Failed���
�-ReadOnly�
�-Removable
�-ConsoleIn
�-ConsoleOut���
�-Input
�-Output���6�-_DEVICE_FLAGS.?AU_DEVICE_FLAGS@@�-��R�_MEMORY_COMBINE_INFORMATION.?AU_MEMORY_COMBINE_INFORMATION@@.
Handle���
#PagesCombinedR�-_MEMORY_COMBINE_INFORMATION.?AU_MEMORY_COMBINE_INFORMATION@@�-��	V�_PROCESSOR_POWER_POLICY_INFO.?AU_PROCESSOR_POWER_POLICY_INFO@@��
"��
"��
"���
"TimeCheck
"DemoteLimit��
"PromoteLimit�
 DemotePercent
 
PromotePercent���
�Spare
�-AllowDemotion
�-AllowPromotion���
�-Reserved�V	�-_PROCESSOR_POWER_POLICY_INFO.?AU_PROCESSOR_POWER_POLICY_INFO@@���-FVR�_SYSDBG_LIVEDUMP_CONTROL_FLAGS.?AT_SYSDBG_LIVEDUMP_CONTROL_FLAGS@@��
"��
"��
"��
"��
"��
�-UseDumpStorageStack��
�-CompressMemoryPagesData��
�-IncludeUserSpaceMemoryPages��
�-AbortIfMemoryPressure
�-Reserved�
"AsUlong��R�-_SYSDBG_LIVEDUMP_CONTROL_FLAGS.?AT_SYSDBG_LIVEDUMP_CONTROL_FLAGS@@���-�<:�_MEMORYSTATUSEX.?AU_MEMORYSTATUSEX@@�
"dwLength�
"dwMemoryLoad�
#ullTotalPhys�
#ullAvailPhys�
#ullTotalPageFile�
# ullAvailPageFile�
#(ullTotalVirtual��
#0ullAvailVirtual��
#8ullAvailExtendedVirtual��:	�-@_MEMORYSTATUSEX.?AU_MEMORYSTATUSEX@@�-� BR�_QUERY_SERVICE_LOCK_STATUSW.?AU_QUERY_SERVICE_LOCK_STATUSW@@J
"fIsLocked
qlpLockOwner��
"dwLockDuration���R�-_QUERY_SERVICE_LOCK_STATUSW.?AU_QUERY_SERVICE_LOCK_STATUSW@@�-mZ�_COVERAGE_UNLOADED_MODULE_ENTRY.?AU_COVERAGE_UNLOADED_MODULE_ENTRY@@
�-�
�NextEntry
�BaseDllName��
� FullDllName��
"0CoverageSectionSize��
8CoverageSection��Z�-@_COVERAGE_UNLOADED_MODULE_ENTRY.?AU_COVERAGE_UNLOADED_MODULE_ENTRY@@�-�l �
�N�STARTING_LCN_INPUT_BUFFER.?AUSTARTING_LCN_INPUT_BUFFER@@
~StartingLcn��N�-STARTING_LCN_INPUT_BUFFER.?AUSTARTING_LCN_INPUT_BUFFER@@�-U1
F�tagNONCLIENTMETRICSW.?AUtagNONCLIENTMETRICSW@@��
�-�
ucbSize���
tiBorderWidth�
tiScrollWidth�
tiScrollHeight
tiCaptionWidth
tiCaptionHeight���
�lfCaptionFont
ttiSmCaptionWidth��
txiSmCaptionHeight�
�|lfSmCaptionFont��
t�iMenuWidth���
t�iMenuHeight��
��lfMenuFont���
�<lfStatusFont�
��lfMessageFont
t�iPaddedBorderWidth���F�-�tagNONCLIENTMETRICSW.?AUtagNONCLIENTMETRICSW@@���-L�1J�_PROCESSOR_IDLE_STATES.?AU_PROCESSOR_IDLE_STATES@@��
�-F�_PROCESSOR_IDLE_STATE.?AU_PROCESSOR_IDLE_STATE@@�-# �r
"Size�
"Revision�
"Count
"Type�
#TargetProcessors�
�-StateJ�-8_PROCESSOR_IDLE_STATES.?AU_PROCESSOR_IDLE_STATES@@���-F�	f
"NextEntryOffset��
ParentFileId�
"FileNameLength���
JFileName�V�-_FILE_LINK_ENTRY_INFORMATION.?AU_FILE_LINK_ENTRY_INFORMATION@@���-UzB�tagHW_PROFILE_INFOA.?AUtagHW_PROFILE_INFOA@@p#'�R
"dwDockInfo���
�-szHwProfileGuid��
+szHwProfileName��B�-|tagHW_PROFILE_INFOA.?AUtagHW_PROFILE_INFOA@@�-<�
A:�_VM_COUNTERS_EX.?AU_VM_COUNTERS_EX@@j
#PeakVirtualSize��
#VirtualSize��
"PageFaultCount���
#PeakWorkingSetSize���
# WorkingSetSize���
#(QuotaPeakPagedPoolUsage��
#0QuotaPagedPoolUsage��
#8QuotaPeakNonPagedPoolUsage���
#@QuotaNonPagedPoolUsage���
#HPagefileUsage
#PPeakPagefileUsage
#XPrivateUsage�:�-`_VM_COUNTERS_EX.?AU_VM_COUNTERS_EX@@�-}�J�_KEY_BASIC_INFORMATION.?AU_KEY_BASIC_INFORMATION@@��Z
~LastWriteTime
"TitleIndex���
"NameLength���
JName�J�-_KEY_BASIC_INFORMATION.?AU_KEY_BASIC_INFORMATION@@���-��Z�NTFS_FILE_RECORD_OUTPUT_BUFFER.?AUNTFS_FILE_RECORD_OUTPUT_BUFFER@@��Z
~FileReferenceNumber��
"FileRecordLength�
�FileRecordBuffer�Z�-NTFS_FILE_RECORD_OUTPUT_BUFFER.?AUNTFS_FILE_RECORD_OUTPUT_BUFFER@@���-U�
*�HGLRC__.?AUHGLRC__@@
�-
tunused���*�-HGLRC__.?AUHGLRC__@@�-AR~~K~�-F�_DEDUP_FILE_OPERATION.?AU_DEDUP_FILE_OPERATION@@
�-
"Code�F�-_DEDUP_FILE_OPERATION.?AU_DEDUP_FILE_OPERATION@@�-U
� ""�-
.
<..
.n�_TRANSACTIONMANAGER_RECOVERY_INFORMATION.?AU_TRANSACTIONMANAGER_RECOVERY_INFORMATION@@��
#LastRecoveredLsn�n._TRANSACTIONMANAGER_RECOVERY_INFORMATION.?AU_TRANSACTIONMANAGER_RECOVERY_INFORMATION@@��.��f�_SYSTEM_SYSTEM_PARTITION_INFORMATION.?AU_SYSTEM_SYSTEM_PARTITION_INFORMATION@@��
�SystemPartition��f._SYSTEM_SYSTEM_PARTITION_INFORMATION.?AU_SYSTEM_SYSTEM_PARTITION_INFORMATION@@��.�Y
J�_IMAGE_TLS_DIRECTORY64.?AU_IMAGE_TLS_DIRECTORY64@@��
.��
.
"��
"��
"���
#StartAddressOfRawData
#EndAddressOfRawData��
#AddressOfIndex���
#AddressOfCallBacks���
" SizeOfZeroFill���
"$Characteristics��
.$Reserved0
.$Alignment
.$Reserved1J	.(_IMAGE_TLS_DIRECTORY64.?AU_IMAGE_TLS_DIRECTORY64@@��.f�
�$j
.Parent���
.LeftChild
.RightChild���
pBalance��
�Reserved�B. _RTL_BALANCED_LINKS.?AU_RTL_BALANCED_LINKS@@.$�Z�_TXFS_WRITE_BACKUP_INFORMATION.?AU_TXFS_WRITE_BACKUP_INFORMATION@@��
�Buffer���Z._TXFS_WRITE_BACKUP_INFORMATION.?AU_TXFS_WRITE_BACKUP_INFORMATION@@��.U}
ResolutionContext�._ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING@@�� .���N�_OBJECT_BASIC_INFORMATION.?AU_OBJECT_BASIC_INFORMATION@@
#.
"Attributes���
"GrantedAccess
"HandleCount��
"PointerCount�
"PagedPoolCharge��
"NonPagedPoolCharge���
�Reserved�
"$NameInfoSize�
"(TypeInfoSize�
",SecurityDescriptorSize���
~0CreationTime�N%.8_OBJECT_BASIC_INFORMATION.?AU_OBJECT_BASIC_INFORMATION@@&. )R�_OPERATION_START_PARAMETERS.?AU_OPERATION_START_PARAMETERS@@
(.>
"Version��
"OperationId��
"FlagsR*._OPERATION_START_PARAMETERS.?AU_OPERATION_START_PARAMETERS@@+.<�J�_UNLOAD_DLL_DEBUG_INFO.?AU_UNLOAD_DLL_DEBUG_INFO@@��
lpBaseOfDll��J.._UNLOAD_DLL_DEBUG_INFO.?AU_UNLOAD_DLL_DEBUG_INFO@@��/.�Y
G'�
#SdsStreamSize
#SdsAllocationSize
#SiiStreamSize
#SiiAllocationSize
# SdhStreamSize
#(SdhAllocationSize
#0NumSDTotal���
#8NumSDUnused��J2.@_SD_QUERY_STATS_OUTPUT.?AU_SD_QUERY_STATS_OUTPUT@@��3.U�
)-�#""6.
7.~�_RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY.?AU_RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY@@��"
�StrictHandleChecks���~:._RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY.?AU_RTL_IMAGE_MITIGATION_STRICT_HANDLE_CHECK_POLICY@@��;.�E �
=.
^�_CRITICAL_PROCESS_EXCEPTION_DATA.?AU_CRITICAL_PROCESS_EXCEPTION_DATA@@��v
�ReportId�
�ModuleName���
" ModuleTimestamp��
"$ModuleSize���
#(Offset���^A.0_CRITICAL_PROCESS_EXCEPTION_DATA.?AU_CRITICAL_PROCESS_EXCEPTION_DATA@@��B.�V�_ETW_OPTICALIO_FLUSH_BUFFERS.?AU_ETW_OPTICALIO_FLUSH_BUFFERS@@��~
"DiskNumber���
"IrpFlags�
#HighResResponseTime��
IrpAddr��
"IssuingThreadId��VE. _ETW_OPTICALIO_FLUSH_BUFFERS.?AU_ETW_OPTICALIO_FLUSH_BUFFERS@@��F.0�J�_RPC_SECURITY_QOS_V4_A.?AU_RPC_SECURITY_QOS_V4_A@@��^�_RPC_HTTP_TRANSPORT_CREDENTIALS_A.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_A@@
I.
J.HttpCredentials��2K.<anonymous-tag>.?AT<anonymous-tag>@@L.[�
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
L.u
 Sid��
u(EffectiveOnlyJN.0_RPC_SECURITY_QOS_V4_A.?AU_RPC_SECURITY_QOS_V4_A@@��O.TF�_PSFEATURE_CUSTPAPER.?AU_PSFEATURE_CUSTPAPER@@��r
lOrientation�
lWidth���
lHeight��
lWidthOffset�
lHeightOffsetFR._PSFEATURE_CUSTPAPER.?AU_PSFEATURE_CUSTPAPER@@��S.SJ
pObj�
uSize�
mpfnBind��
ppfnUnbindJU. __GENERIC_BINDING_INFO.?AU__GENERIC_BINDING_INFO@@��V.�;>�_ALPC_HANDLE_ATTR.?AU_ALPC_HANDLE_ATTR@@
"��
"��
"��
"��
"��
"��B�_ALPC_HANDLE_ATTR32.?AU_ALPC_HANDLE_ATTR32@@
_.&
"Flags
Y.Reserved0
Z.SameAccess���
[.SameAttributes���
\.Indirect�
].Inherit��
^.Reserved1
Handle���
`.HandleAttrArray��
"ObjectType���
"HandleCount��
"DesiredAccess
"GrantedAccess>
a._ALPC_HANDLE_ATTR.?AU_ALPC_HANDLE_ATTR@@b.�?B�threadmbcinfostruct.?AUthreadmbcinfostruct@@
d.
�(:�tagCHARSETINFO.?AUtagCHARSETINFO@@��
g.>�tagFONTSIGNATURE.?AUtagFONTSIGNATURE@@��6
uciCharset
uciACP
i.fs���:j. tagCHARSETINFO.?AUtagCHARSETINFO@@��k.S�vWnfWellKnownStateNameWnfPermanentStateNameWnfPersistentStateName���WnfTemporaryStateNameJtm._WNF_STATE_NAME_LIFETIME.?AW4_WNF_STATE_NAME_LIFETIME@@���n.�@V�_SYSTEM_HANDLE_INFORMATION_EX.?AU_SYSTEM_HANDLE_INFORMATION_EX@@b�_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX.?AU_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX@@��q.#(�F
#NumberOfHandles��
#Reserved�
r.Handles��Vs.8_SYSTEM_HANDLE_INFORMATION_EX.?AU_SYSTEM_HANDLE_INFORMATION_EX@@t.�	N�_ETW_OPTICALIO_READWRITE.?AU_ETW_OPTICALIO_READWRITE@@���
"DiskNumber���
"IrpFlags�
"Size�
"Reserved�
#ByteOffset���
FileObject���
 IrpAddr��
#(HighResResponseTime��
"0IssuingThreadId��N	w.8_ETW_OPTICALIO_READWRITE.?AU_ETW_OPTICALIO_READWRITE@@��x.0�
�'
�
�R�_IMAGE_DYNAMIC_RELOCATION32.?AU_IMAGE_DYNAMIC_RELOCATION32@@.
"Symbol���
"BaseRelocSizeR~._IMAGE_DYNAMIC_RELOCATION32.?AU_IMAGE_DYNAMIC_RELOCATION32@@.f�F�_DesiredStorageClass.?AU_DesiredStorageClass@@��"
uClass
"FlagsF�._DesiredStorageClass.?AU_DesiredStorageClass@@���.U�N�_THREAD_NAME_INFORMATION.?AU_THREAD_NAME_INFORMATION@@��
�.
�ThreadName���N�._THREAD_NAME_INFORMATION.?AU_THREAD_NAME_INFORMATION@@���.b�B�_HEAP_RANGE_DESTROY.?AU_HEAP_RANGE_DESTROY@@.
8Header���
 HeapHandle���B�.(_HEAP_RANGE_DESTROY.?AU_HEAP_RANGE_DESTROY@@�.0�F�_SERVICE_START_REASON.?AU_SERVICE_START_REASON@@
"dwReason�F�._SERVICE_START_REASON.?AU_SERVICE_START_REASON@@�.m�
�
�N�NTFS_EXTENDED_VOLUME_DATA.?AUNTFS_EXTENDED_VOLUME_DATA@@2
"ByteCount
!MajorVersion�
!MinorVersion�
"BytesPerPhysicalSector���
!LfsMajorVersion��
!LfsMinorVersion��
"MaxDeviceTrimExtentCount�
"MaxDeviceTrimByteCount���
"MaxVolumeTrimExtentCount�
"MaxVolumeTrimByteCount���N
�. NTFS_EXTENDED_VOLUME_DATA.?AUNTFS_EXTENDED_VOLUME_DATA@@�.U�R�_ETW_THREAD_SET_NAME_EVENT.?AU_ETW_THREAD_SET_NAME_EVENT@@��B
"ProcessId
"ThreadId�
JThreadName���R�._ETW_THREAD_SET_NAME_EVENT.?AU_ETW_THREAD_SET_NAME_EVENT@@���.0,

,F
left�
top��
right
bottom���*�._RECTL.?AU_RECTL@@���.A�>�_MOVE_FILE_DATA32.?AU_MOVE_FILE_DATA32@@b
uFileHandle���
~StartingVcn��
~StartingLcn��
"ClusterCount�>�. _MOVE_FILE_DATA32.?AU_MOVE_FILE_DATA32@@�.U�
N�tagEMRCREATEBRUSHINDIRECT.?AUtagEMRCREATEBRUSHINDIRECT@@6�tagLOGBRUSH32.?AUtagLOGBRUSH32@@6
Pemr��
"ihBrush��
�.lb���N�.tagEMRCREATEBRUSHINDIRECT.?AUtagEMRCREATEBRUSHINDIRECT@@�.Sb6�_SI_COPYFILE.?AU_SI_COPYFILE@@��
�.r
"SourceFileNameLength�
"DestinationFileNameLength
"Flags
JFileNameBuffer���6�._SI_COPYFILE.?AU_SI_COPYFILE@@���.UF�_PHYSICAL_CHANNEL_RUN.?AU_PHYSICAL_CHANNEL_RUN@@
�.j
"NodeNumber���
"ChannelNumber
#BasePage�
#PageCount
#FlagsF�. _PHYSICAL_CHANNEL_RUN.?AU_PHYSICAL_CHANNEL_RUN@@�.Bj�_PROCESS_DYNAMIC_EH_CONTINUATION_TARGET.?AU_PROCESS_DYNAMIC_EH_CONTINUATION_TARGET@@
�.*
#TargetAddress
#Flagsj�._PROCESS_DYNAMIC_EH_CONTINUATION_TARGET.?AU_PROCESS_DYNAMIC_EH_CONTINUATION_TARGET@@�.}rJ�_PERFINFO_VIRTUAL_ALLOC.?AU_PERFINFO_VIRTUAL_ALLOC@@
�.^
CapturedBase�
#CapturedRegionSize���
"ProcessId
"FlagsJ�._PERFINFO_VIRTUAL_ALLOC.?AU_PERFINFO_VIRTUAL_ALLOC@@�.0Y
�r
dx���
dy���
"mouseData
"dwFlags��
"time�
#dwExtraInfo��6�. tagMOUSEINPUT.?AUtagMOUSEINPUT@@�.L�n�_ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION.?AU_ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION@@
�.>
"ulFlags��
�RunLevel�
"UiAccess�n�._ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION.?AU_ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION@@�.��J�_ETW_HEAP_EVENT_REALLOC.?AU_ETW_HEAP_EVENT_REALLOC@@�
8Header���
 HeapHandle���
(NewAddress���
0OldAddress���
#8NewSize��
#@OldSize��
"HSource���J�.L_ETW_HEAP_EVENT_REALLOC.?AU_ETW_HEAP_EVENT_REALLOC@@�.0�
v�_FILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EX.?AU_FILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EX@@2
StorageReserveId�
SpaceUsedv�._FILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EX.?AU_FILE_QUERY_STORAGE_RESERVE_ID_INFORMATION_EX@@�.Us+
V*�_TP_IO.?AU_TP_IO@@��
z+J�_MAXVERSIONTESTED_INFO.?AU_MAXVERSIONTESTED_INFO@@��
�.
#MaxVersionTested�J�._MAXVERSIONTESTED_INFO.?AU_MAXVERSIONTESTED_INFO@@���.�^�_DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK.?AU_DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK@@
�.�
"Signature
!Revision�
!Size�
!DpcWatchdogProfileOffset�
"DpcWatchdogProfileLength�^�._DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK.?AU_DPC_WATCHDOG_GLOBAL_TRIAGE_BLOCK@@�.�
"��
�.V�_PERFINFO_FILE_OPERATION_END.?AU_PERFINFO_FILE_OPERATION_END@@��
�.B
#Irp��
#ExtraInformation�
Status���V�._PERFINFO_FILE_OPERATION_END.?AU_PERFINFO_FILE_OPERATION_END@@���.0�
� R�_TXFS_START_RM_INFORMATION.?AU_TXFS_START_RM_INFORMATION@@��
�.B
"Flags
#LogContainerSize�
"LogContainerCountMin�
"LogContainerCountMax�
"LogGrowthIncrement���
"LogAutoShrinkPercentage��
" TmLogPathOffset��
!$TmLogPathLength��
!&LoggingMode��
!(LogPathLength
!*Reserved�
J,LogPath��R�.0_TXFS_START_RM_INFORMATION.?AU_TXFS_START_RM_INFORMATION@@���.UNf�_SYSTEM_HYPERVISOR_QUERY_INFORMATION.?AU_SYSTEM_HYPERVISOR_QUERY_INFORMATION@@��
�. #�
 HypervisorConnected��
 HypervisorDebuggingEnabled���
 HypervisorPresent
 HypervisorSchedulerType��
�.Spare0���
#EnabledEnlightenmentsf�._SYSTEM_HYPERVISOR_QUERY_INFORMATION.?AU_SYSTEM_HYPERVISOR_QUERY_INFORMATION@@���.�0FSystemFirmwareTable_EnumerateSystemFirmwareTable_Get��Rt�._SYSTEM_FIRMWARE_TABLE_ACTION.?AW4_SYSTEM_FIRMWARE_TABLE_ACTION@@��.|Qz
"ProviderSignature
�.Action���
"TableID��
"TableBufferLength
�TableBuffer��b�._SYSTEM_FIRMWARE_TABLE_INFORMATION.?AU_SYSTEM_FIRMWARE_TABLE_INFORMATION@@���.|V
&v�_FILE_IO_COMPLETION_NOTIFICATION_INFORMATION.?AU_FILE_IO_COMPLETION_NOTIFICATION_INFORMATION@@��
"Flagsv�._FILE_IO_COMPLETION_NOTIFICATION_INFORMATION.?AU_FILE_IO_COMPLETION_NOTIFICATION_INFORMATION@@���.UV�_WMI_IMAGELOAD_INFORMATION32.?AU_WMI_IMAGELOAD_INFORMATION32@@��:
uImageBase32��
uImageSize32��
"ProcessId
"ImageChecksum
"TimeDateStamp
 SignatureLevel���
 SignatureType
!Reserved0
uDefaultBase32
"Reserved1
" Reserved2
"$Reserved3
"(Reserved4
J,FileName�V�.0_WMI_IMAGELOAD_INFORMATION32.?AU_WMI_IMAGELOAD_INFORMATION32@@���.0Ub�_SYSTEM_PROCESSOR_IDLE_INFORMATION.?AU_SYSTEM_PROCESSOR_IDLE_INFORMATION@@��
�.�
#IdleTime�
#C1Time���
#C2Time���
#C3Time���
" C1Transitions
"$C2Transitions
"(C3Transitions
",Padding��b�.0_SYSTEM_PROCESSOR_IDLE_INFORMATION.?AU_SYSTEM_PROCESSOR_IDLE_INFORMATION@@��/�Z�_MANAGE_HOT_PATCH_QUERY_PATCHES.?AU_MANAGE_HOT_PATCH_QUERY_PATCHES@@&
Sid��
�Buffer���2/D<anonymous-tag>.?AT<anonymous-tag>@@/B�F�_HOT_PATCH_IMAGE_INFO.?AU_HOT_PATCH_IMAGE_INFO@@
/r
"Version��
/UserSid��
"HPatchCount���
8PPatchPathStrings�
/XBaseInfosZ/`_MANAGE_HOT_PATCH_QUERY_PATCHES.?AU_MANAGE_HOT_PATCH_QUERY_PATCHES@@	/B�>�_CLASSIC_EVENT_ID.?AU_CLASSIC_EVENT_ID@@:
�EventGuid
 Type�
Reserved�>/_CLASSIC_EVENT_ID.?AU_CLASSIC_EVENT_ID@@
/�x
YN�_WMI_PROCESS_INFORMATION.?AU_WMI_PROCESS_INFORMATION@@��
/�
#UniqueProcessKey�
"ProcessId
"ParentId�
"SessionId
ExitStatus���
#DirectoryTableBase���
" Flags
"$Sid��N/(_WMI_PROCESS_INFORMATION.?AU_WMI_PROCESS_INFORMATION@@��/0�Z�_UMS_SYSTEM_THREAD_INFORMATION.?AU_UMS_SYSTEM_THREAD_INFORMATION@@��
"��
"��r
"UmsVersion���
/IsUmsSchedulerThread�
/IsUmsWorkerThread
"ThreadUmsFlags���Z/_UMS_SYSTEM_THREAD_INFORMATION.?AU_UMS_SYSTEM_THREAD_INFORMATION@@��/<KN�_POWER_MONITOR_INVOCATION.?AU_POWER_MONITOR_INVOCATION@@.
 Console��
�RequestReasonN/_POWER_MONITOR_INVOCATION.?AU_POWER_MONITOR_INVOCATION@@/FW
q"/ /
!/B�_WOW64_CPUAREA_INFO.?AU_WOW64_CPUAREA_INFO@@
�:�_AMD64_CONTEXT.?AU_AMD64_CONTEXT@@��
%/6�_ARM_CONTEXT.?AU_ARM_CONTEXT@@��
'/:�_ARM64_CONTEXT.?AU_ARM64_CONTEXT@@��
)/J
Context��
$/ContextX86���
&/ContextAmd64�
(/ContextArm���
*/ContextArm64�
�PerThreadDataLocation
"ContextFlagsLocation�
"CpuAreaFlagsLocation�
" ArchContextFlag��
!$Machine��
!&Pad1�
(KernelWriteToExecutableSignaledLocation��B+/0_WOW64_CPUAREA_INFO.?AU_WOW64_CPUAREA_INFO@@,/�S�%
./�CI_WINDOWS_LOCKDOWN_MODE_UNLOCKEDCI_WINDOWS_LOCKDOWN_MODE_TRIAL���CI_WINDOWS_LOCKDOWN_MODE_LOCKED��CI_WINDOWS_LOCKDOWN_MODE_MAX�Jt0/_CI_WINDOWS_LOCKDOWN_MODE.?AW4_CI_WINDOWS_LOCKDOWN_MODE@@�1/��j�_SERVICE_CONTROL_STATUS_REASON_PARAMSA.?AU_SERVICE_CONTROL_STATUS_REASON_PARAMSA@@��F
"dwReason�
ppszComment���
IServiceStatusj4/8_SERVICE_CONTROL_STATUS_REASON_PARAMSA.?AU_SERVICE_CONTROL_STATUS_REASON_PARAMSA@@��5/m�N�_MIDL_METHOD_PROPERTY_MAP.?AU_MIDL_METHOD_PROPERTY_MAP@@
���
8/*
"Count
9/Properties���N:/_MIDL_METHOD_PROPERTY_MAP.?AU_MIDL_METHOD_PROPERTY_MAP@@;/�aJ�_RPC_SECURITY_QOS_V4_W.?AU_RPC_SECURITY_QOS_V4_W@@��
=/
K HttpCredentials��2?/<anonymous-tag>.?AT<anonymous-tag>@@@/M�
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
@/u
 Sid��
u(EffectiveOnlyJB/0_RPC_SECURITY_QOS_V4_W.?AU_RPC_SECURITY_QOS_V4_W@@��C/FZ�_PROCESS_SYSTEM_RESOURCE_MANAGEMENT.?AT_PROCESS_SYSTEM_RESOURCE_MANAGEMENT@@
"��
"��>
"Flags
F/Foreground���
G/Reserved�ZH/_PROCESS_SYSTEM_RESOURCE_MANAGEMENT.?AT_PROCESS_SYSTEM_RESOURCE_MANAGEMENT@@I/bBj�_JOBOBJECT_CPU_RATE_CONTROL_INFORMATION.?AU_JOBOBJECT_CPU_RATE_CONTROL_INFORMATION@@j
"ControlFlags�
"CpuRate��
"Weight���
!MinRate��
!MaxRate��jL/_JOBOBJECT_CPU_RATE_CONTROL_INFORMATION.?AU_JOBOBJECT_CPU_RATE_CONTROL_INFORMATION@@M/}
�%R�PROCESSOR_PERFSTATE_POLICY.?AUPROCESSOR_PERFSTATE_POLICY@@��
 ��
 ��
 ��
 ��
 AsUCHAR��
Q/NoDomainAccounting���
R/IncreasePolicy���
S/DecreasePolicy���
T/Reserved�2U/<anonymous-tag>.?AT<anonymous-tag>@@V/F��
"Revision�
 MaxThrottle��
 MinThrottle��
 BusyAdjThreshold�
 Spare
V/Flags
"TimeCheck
"IncreaseTime�
"DecreaseTime�
"IncreasePercent��
"DecreasePercent��RX/PROCESSOR_PERFSTATE_POLICY.?AUPROCESSOR_PERFSTATE_POLICY@@��Y/F�R�_PERFINFO_MEMORY_NODE_ENTRY.?AU_PERFINFO_MEMORY_NODE_ENTRY@@
[/.
"NodeNumber���
#TotalPageCount���
#SmallFreePageCount���
#SmallZeroPageCount���
#MediumFreePageCount��
#$MediumZeroPageCount��
#,LargeFreePageCount���
#4LargeZeroPageCount���
#<HugeFreePageCount
#DHugeZeroPageCountR
]/L_PERFINFO_MEMORY_NODE_ENTRY.?AU_PERFINFO_MEMORY_NODE_ENTRY@@^/0�
4J�_PERFINFO_TRACE_HEADER.?AU_PERFINFO_TRACE_HEADER@@��
"Marker���
!Version��
 HeaderType���
 Flags
"Header���
@#Packet���
#TS���
~SystemTime���
�Data�J	b/_PERFINFO_TRACE_HEADER.?AU_PERFINFO_TRACE_HEADER@@��c/0G
 e/*�HHOOK__.?AUHHOOK__@@
tunused���*h/HHOOK__.?AUHHOOK__@@i/A(
#��
#��
#��
#	��
#4��n
k/Protection���
l/ShareCount���
m/Shared���
n/Node�
o/VirtualPage��Np/_MEMORY_WORKING_SET_BLOCK.?AU_MEMORY_WORKING_SET_BLOCK@@q/B2N�_FILE_RENAME_INFORMATION.?AU_FILE_RENAME_INFORMATION@@��v
 ReplaceIfExists��
"Flags
RootDirectory
"FileNameLength���
JFileName�Nt/_FILE_RENAME_INFORMATION.?AU_FILE_RENAME_INFORMATION@@��u/U2�_WMI_QUEUE.?AU_WMI_QUEUE@@��
w/:
Queue
"ThreadId�
 Action���2y/_WMI_QUEUE.?AU_WMI_QUEUE@@��z/0�	"�_SE_SID.?AT_SE_SID@@&
Sid��
�Buffer���"}/D_SE_SID.?AT_SE_SID@@~/E3�IMPORT_OBJECT_ORDINALIMPORT_OBJECT_NAME���IMPORT_OBJECT_NAME_NO_PREFIX�IMPORT_OBJECT_NAME_UNDECORATEIMPORT_OBJECT_NAME_EXPORTAS��Ft�/IMPORT_OBJECT_NAME_TYPE.?AW4IMPORT_OBJECT_NAME_TYPE@@��/f�	b�_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE.?AU_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE@@�
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�b�/0_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE.?AU_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE@@�/Eb�DISPLAYCONFIG_TARGET_PREFERRED_MODE.?AUDISPLAYCONFIG_TARGET_PREFERRED_MODE@@N�DISPLAYCONFIG_TARGET_MODE.?AUDISPLAYCONFIG_TARGET_MODE@@R
�header���
uwidth
uheight���
�/ targetMode���b�/PDISPLAYCONFIG_TARGET_PREFERRED_MODE.?AUDISPLAYCONFIG_TARGET_PREFERRED_MODE@@�/S
Q.
-.:�_OSVERSIONINFOW.?AU_OSVERSIONINFOW@@
�/�
"dwOSVersionInfoSize��
"dwMajorVersion���
"dwMinorVersion���
"dwBuildNumber
"dwPlatformId�
r$szCSDVersion�:�/_OSVERSIONINFOW.?AU_OSVERSIONINFOW@@�/$��SystemFeatureConfigurationSectionTypeBootSystemFeatureConfigurationSectionTypeRuntime�SystemFeatureConfigurationSectionTypeUsageTriggers���SystemFeatureConfigurationSectionTypeCount���nt�/_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE.?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@����/�y
�/j�_VIRTUALIZATION_INSTANCE_INFO_INPUT_EX.?AU_VIRTUALIZATION_INSTANCE_INFO_INPUT_EX@@��
!HeaderSize���
"Flags
"NotificationInfoSize�
!NotificationInfoOffset���
!ProviderMajorVersion�j�/_VIRTUALIZATION_INSTANCE_INFO_INPUT_EX.?AU_VIRTUALIZATION_INSTANCE_INFO_INPUT_EX@@���/U�"J�tagEMRSETDIBITSTODEVICE.?AUtagEMRSETDIBITSTODEVICE@@
�/
Pemr��
,rclBounds
xDest
yDest
 xSrc�
$ySrc�
(cxSrc
,cySrc
"0offBmiSrc
"4cbBmiSrc�
"8offBitsSrc���
"<cbBitsSrc
"@iUsageSrc
"DiStartScan���
"HcScans���J�/LtagEMRSETDIBITSTODEVICE.?AUtagEMRSETDIBITSTODEVICE@@�/SZ�_ETW_AUTOBOOST_NO_ENTRIES_EVENT.?AU_ETW_AUTOBOOST_NO_ENTRIES_EVENT@@
�/&
Lock�
"ThreadId�Z�/_ETW_AUTOBOOST_NO_ENTRIES_EVENT.?AU_ETW_AUTOBOOST_NO_ENTRIES_EVENT@@�/0
F�tagEMRTRANSPARENTBLT.?AUtagEMRTRANSPARENTBLT@@��R
Pemr��
,rclBounds
xDest
yDest
 cxDest���
$cyDest���
"(dwRop
,xSrc�
0ySrc�

4xformSrc�
"LcrBkColorSrc�
"PiUsageSrc
"ToffBmiSrc
"XcbBmiSrc�
"\offBitsSrc���
"`cbBitsSrc
dcxSrc
hcySrcF�/ltagEMRTRANSPARENTBLT.?AUtagEMRTRANSPARENTBLT@@���/SR�_PERFINFO_SET_DEVICES_STATE.?AU_PERFINFO_SET_DEVICES_STATE@@V
"SystemState��
 Waking���
 Shutdown�
 IrpMinor�R�/_PERFINFO_SET_DEVICES_STATE.?AU_PERFINFO_SET_DEVICES_STATE@@�/0Z
6�USN_RECORD_UNION.?ATUSN_RECORD_UNION@@��6�USN_RECORD_V2.?AUUSN_RECORD_V2@@6�USN_RECORD_V3.?AUUSN_RECORD_V3@@6�USN_RECORD_V4.?AUUSN_RECORD_V4@@F
�&Header���
�/V2���
�/V3���
�/V4���6�/PUSN_RECORD_UNION.?ATUSN_RECORD_UNION@@���/U�6�_INITIAL_TEB.?AU_INITIAL_TEB@@��
�/2
OldStackBase�
OldStackLimit:�/<anonymous-tag>.?AU<anonymous-tag>@@�/b"f
�/OldInitialTeb
StackBase
StackLimit���
 StackAllocationBase��6�/(_INITIAL_TEB.?AU_INITIAL_TEB@@���/b!>�_IMAGE_LINENUMBER.?AU_IMAGE_LINENUMBER@@
�/��
�/:
"SymbolTableIndex�
"VirtualAddress���2�/<anonymous-tag>.?AT<anonymous-tag>@@�/f*
�/Type�
!Linenumber���>�/_IMAGE_LINENUMBER.?AU_IMAGE_LINENUMBER@@�/f���DPI_AWARENESS_INVALID���DPI_AWARENESS_UNAWAREDPI_AWARENESS_SYSTEM_AWARE���DPI_AWARENESS_PER_MONITOR_AWARE��2t�/DPI_AWARENESS.?AW4DPI_AWARENESS@@��/A
�b#��
�Cycles���
#@DiskEnergy���
#HNetworkTailEnergy
#PMBBTailEnergy
#XNetworkTxRxBytes�
#`MBBTxRxBytes�
�/hDurations
bhForegroundDuration���
bpDesktopVisibleDuration���
bxPSMForegroundDuration
"�CompositionRendered��
"�CompositionDirtyGenerated
"�CompositionDirtyPropagated���
"�Reserved1
��AttributedCycles�
��WorkOnBehalfCycles���J�/_PROCESS_ENERGY_VALUES.?AU_PROCESS_ENERGY_VALUES@@���/b$*�_CURDIR.?AU_CURDIR@@*
�DosPath��
Handle���*�/_CURDIR.?AU_CURDIR@@�/�
Y�/Z�_FILE_SFIO_RESERVE_INFORMATION.?AU_FILE_SFIO_RESERVE_INFORMATION@@��
"RequestsPerPeriod
"Period���
 RetryFailures
 	Discardable��
"RequestSize��
"NumOutstandingRequests���Z�/_FILE_SFIO_RESERVE_INFORMATION.?AU_FILE_SFIO_RESERVE_INFORMATION@@���/U�.�HSPRITE__.?AUHSPRITE__@@
tunused���.�/HSPRITE__.?AUHSPRITE__@@�/y'�
/Z�_PERFINFO_SET_DEVICES_STATE_RET.?AU_PERFINFO_SET_DEVICES_STATE_RET@@
Status���Z�/_PERFINFO_SET_DEVICES_STATE_RET.?AU_PERFINFO_SET_DEVICES_STATE_RET@@�/0ef�_DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER.?AU_DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER@@z
"Version��
"QueryFlags���
"HashAlgorithm
~RangeOffsetInFile
~RangeLength��f�/ _DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER.?AU_DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER@@�/U>�_FILE_PREFETCH_EX.?AU_FILE_PREFETCH_EX@@
�/##�J
"Type�
"Count
Context��
�/Prefetch�>�/_FILE_PREFETCH_EX.?AU_FILE_PREFETCH_EX@@�/U
G&B�tagEMRSELECTPALETTE.?AUtagEMRSELECTPALETTE@@"
Pemr��
"ihPalB�/tagEMRSELECTPALETTE.?AUtagEMRSELECTPALETTE@@�/S�
���
�/
���
�/�/�/"t�/
�/N�tagPIXELFORMATDESCRIPTOR.?AUtagPIXELFORMATDESCRIPTOR@@��^
!nSize
!nVersion�
"dwFlags��
 iPixelType���
 	cColorBits���
 
cRedBits�
 cRedShift
 cGreenBits���
 
cGreenShift��
 cBlueBits
 cBlueShift���
 cAlphaBits���
 cAlphaShift��
 cAccumBits���
 cAccumRedBits
 cAccumGreenBits��
 cAccumBlueBits���
 cAccumAlphaBits��
 cDepthBits���
 cStencilBits�
 cAuxBuffers��
 iLayerType���
 bReserved
"dwLayerMask��
" dwVisibleMask
"$dwDamageMask�N�/(tagPIXELFORMATDESCRIPTOR.?AUtagPIXELFORMATDESCRIPTOR@@���/SZ�_IMAGE_LOAD_CONFIG_DIRECTORY32.?AU_IMAGE_LOAD_CONFIG_DIRECTORY32@@��
�/�
"Size�
"TimeDateStamp
!MajorVersion�
!
MinorVersion�
"GlobalFlagsClear�
"GlobalFlagsSet���
"CriticalSectionDefaultTimeout
"DeCommitFreeBlockThreshold���
"DeCommitTotalFreeThreshold���
" LockPrefixTable��
"$MaximumAllocationSize
"(VirtualMemoryThreshold���
",ProcessHeapFlags�
"0ProcessAffinityMask��
!4CSDVersion���
!6DependentLoadFlags���
"8EditList�
"<SecurityCookie���
"@SEHandlerTable���
"DSEHandlerCount���
"HGuardCFCheckFunctionPointer��
"LGuardCFDispatchFunctionPointer���
"PGuardCFFunctionTable�
"TGuardCFFunctionCount�
"XGuardFlags���
�\CodeIntegrity
"hGuardAddressTakenIatEntryTable���
"lGuardAddressTakenIatEntryCount���
"pGuardLongJumpTargetTable�
"tGuardLongJumpTargetCount�
"xDynamicValueRelocTable���
"|CHPEMetadataPointer��
"�GuardRFFailureRoutine
"�GuardRFFailureRoutineFunctionPointer�
"�DynamicValueRelocTableOffset�
!�DynamicValueRelocTableSection
!�Reserved2
"�GuardRFVerifyStackPointerFunctionPointer�
"�HotPatchTableOffset��
"�Reserved3
"�EnclaveConfigurationPointer��
"�VolatileMetadataPointer��
"�GuardEHContinuationTable�
"�GuardEHContinuationCount�Z,�/�_IMAGE_LOAD_CONFIG_DIRECTORY32.?AU_IMAGE_LOAD_CONFIG_DIRECTORY32@@���/fF�tagNCCALCSIZE_PARAMS.?AUtagNCCALCSIZE_PARAMS@@���#0�
g-"
0rgrc�
00lpposF08tagNCCALCSIZE_PARAMS.?AUtagNCCALCSIZE_PARAMS@@��0L�
���0
[+
�
^�_FILE_FS_SECTOR_SIZE_INFORMATION.?AU_FILE_FS_SECTOR_SIZE_INFORMATION@@��&
"LogicalBytesPerSector
"PhysicalBytesPerSectorForAtomicity���
"PhysicalBytesPerSectorForPerformance�
"FileSystemEffectivePhysicalBytesPerSectorForAtomicity
"Flags
"ByteOffsetForSectorAlignment�
"ByteOffsetForPartitionAlignment��^0_FILE_FS_SECTOR_SIZE_INFORMATION.?AU_FILE_FS_SECTOR_SIZE_INFORMATION@@��
0U�
�b�_SET_DAX_ALLOC_ALIGNMENT_HINT_INPUT.?AU_SET_DAX_ALLOC_ALIGNMENT_HINT_INPUT@@
0n
"Flags
"AlignmentShift���
#FileOffsetToAlign
"FallbackAlignmentShift���b0_SET_DAX_ALLOC_ALIGNMENT_HINT_INPUT.?AU_SET_DAX_ALLOC_ALIGNMENT_HINT_INPUT@@0U�!
�^�_TOKEN_BNO_ISOLATION_INFORMATION.?AU_TOKEN_BNO_ISOLATION_INFORMATION@@��:
qIsolationPrefix��
 IsolationEnabled�^0_TOKEN_BNO_ISOLATION_INFORMATION.?AU_TOKEN_BNO_ISOLATION_INFORMATION@@��0E-	J�_TOKEN_SID_INFORMATION.?AU_TOKEN_SID_INFORMATION@@��
0
Sid��J0_TOKEN_SID_INFORMATION.?AU_TOKEN_SID_INFORMATION@@��0E)	
�!
&��_PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION.?AU_PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION@@��n
#ReserveSize��
#CommitSize���
"PreferredNode
"Reserved�
Ssp��"0 _PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION.?AU_PROCESS_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION@@��#0b
�PerfInfoMMStatNotUsedPerfInfoMMStatAggregatePageCombine���PerfInfoMMStatIterationPageCombine���PerfInfoMMStatMax:t%0_PERFINFO_MM_STAT.?AW4_PERFINFO_MM_STAT@@�&00:�_VARIABLE_NAME.?AU_VARIABLE_NAME@@��
(0F
"NextEntryOffset��
�VendorGuid���
JName�:*0_VARIABLE_NAME.?AU_VARIABLE_NAME@@��+0|-
�
"��
"��"#��Z
.0Offset���
/0HasRenderingCommand��
#HDC��
00Buffer���:10�_GDI_TEB_BATCH.?AU_GDI_TEB_BATCH@@��20}Z
�!V�_FILE_SFIO_VOLUME_INFORMATION.?AU_FILE_SFIO_VOLUME_INFORMATION@@
50^
"MaximumRequestsPerPeriod�
"MinimumPeriod
"MinimumTransferSize��V70_FILE_SFIO_VOLUME_INFORMATION.?AU_FILE_SFIO_VOLUME_INFORMATION@@80U�R�tagPOINTER_DEVICE_PROPERTY.?AUtagPOINTER_DEVICE_PROPERTY@@��
tlogicalMin���
tlogicalMax���
tphysicalMin��
tphysicalMax��
uunit�
uunitExponent�
!usagePageId��
!usageId��R;0tagPOINTER_DEVICE_PROPERTY.?AUtagPOINTER_DEVICE_PROPERTY@@��<0L�;>�tagANIMATIONINFO.?AUtagANIMATIONINFO@@��
>0.
ucbSize���
tiMinAnimate��>@0tagANIMATIONINFO.?AUtagANIMATIONINFO@@��A0LB2
� 6
"HighEdgeFilter���
"LowEdgeFilterJD0_JOBOBJECT_WAKE_FILTER.?AU_JOBOBJECT_WAKE_FILTER@@��E0b�
�6
G0ExceptionRecord��
�&ContextRecordBH0_EXCEPTION_POINTERS.?AU_EXCEPTION_POINTERS@@I0h%oV�_ETW_COVERAGE_SAMPLER_MODULE.?AU_ETW_COVERAGE_SAMPLER_MODULE@@��
K0*
"PathOffset���
"PathLength���
"DebugInfoOffset��
"DebugInfoLength��
"TimeDateStamp
"ImageChecksum
"ImageSize
"ModuleId�
" ModuleSequence���
"$ExeModuleId��
"(ExeModuleSequence
",ExeProcessId�VM00_ETW_COVERAGE_SAMPLER_MODULE.?AU_ETW_COVERAGE_SAMPLER_MODULE@@��N02B�tagENUMLOGFONTEXDVW.?AUtagENUMLOGFONTEXDVW@@>�tagENUMLOGFONTEXW.?AUtagENUMLOGFONTEXW@@:
Q0elfEnumLogfontEx�
�\elfDesignVector��BR0�tagENUMLOGFONTEXDVW.?AUtagENUMLOGFONTEXDVW@@S0SUV�_KEY_OPEN_SUBKEYS_INFORMATION.?AU_KEY_OPEN_SUBKEYS_INFORMATION@@6�KEY_PID_ARRAY.?AUKEY_PID_ARRAY@@V0#�&
"Count
W0KeyArray�VX0 _KEY_OPEN_SUBKEYS_INFORMATION.?AU_KEY_OPEN_SUBKEYS_INFORMATION@@Y0zt
TV�_ETW_TP_EVENT_POOL_TH_MIN_SET.?AU_ETW_TP_EVENT_POOL_TH_MIN_SET@@>
8Header���
 PoolId���
"(ThreadNumV]00_ETW_TP_EVENT_POOL_TH_MIN_SET.?AU_ETW_TP_EVENT_POOL_TH_MIN_SET@@^00�f�_PERFINFO_YIELD_PROCESSOR_INFORMATION.?AU_PERFINFO_YIELD_PROCESSOR_INFORMATION@@N
"YieldReason��
"DpcWatchdogCount�
"DpcTimeCount�fa0_PERFINFO_YIELD_PROCESSOR_INFORMATION.?AU_PERFINFO_YIELD_PROCESSOR_INFORMATION@@b00�B�_RTL_LFG_RNG_STATE.?AU_RTL_LFG_RNG_STATE@@��
d0"#��6
f0SeedArray
"�Next�
"�NextPBg0�_RTL_LFG_RNG_STATE.?AU_RTL_LFG_RNG_STATE@@��h0$�
�BootEntropySourceStructureUninitialized��BootEntropySourceDisabledByPolicyBootEntropySourceNotPresent��BootEntropySourceError���BootEntropySourceSuccess�Ztj0_BOOT_ENTROPY_SOURCE_RESULT_CODE.?AW4_BOOT_ENTROPY_SOURCE_RESULT_CODE@@���k0�Z�_SYSTEM_PAGEFILE_INFORMATION_EX.?AU_SYSTEM_PAGEFILE_INFORMATION_EX@@V�_SYSTEM_PAGEFILE_INFORMATION.?AU_SYSTEM_PAGEFILE_INFORMATION@@��B
n0Info�
" MinimumSize��
"$MaximumSize��Zo0(_SYSTEM_PAGEFILE_INFORMATION_EX.?AU_SYSTEM_PAGEFILE_INFORMATION_EX@@p0�G	>�_Wx86ThreadState.?AU_Wx86ThreadState@@��
r0n
"CallBx86Eip��
DeallocationCpu��
 UseKnownWx86Dll��
pOleStubInvoked���>t0_Wx86ThreadState.?AU_Wx86ThreadState@@��u0}g>�tagSCROLLBARINFO.?AUtagSCROLLBARINFO@@��
w0�
"cbSize���
�rcScrollBar��
tdxyLineButton
txyThumbTop���
txyThumbBottom
t reserved�
z$rgstate��>y0<tagSCROLLBARINFO.?AUtagSCROLLBARINFO@@��z0L79
�6�_MUILANGUAGES.?AU_MUILANGUAGES@@6�_MUILANGINFO.?AU_MUILANGINFO@@��
~0~
uTotalSize
!MaxNumLanguages��
!NumLanguages�
!NumInstalledLanguages
0LangInfos6�0_MUILANGUAGES.?AU_MUILANGUAGES@@�0�<
�F
left�
top��
right
bottom���*�0tagRECT.?AUtagRECT@@�0A�
~
tunused���*�0HMENU__.?AUHMENU__@@�0AZF�_GHOSTED_FILE_EXTENT.?AU_GHOSTED_FILE_EXTENT@@��
~FileOffset���
~ByteCount
�RecallOwnerGuid��
" NextEntryOffset��
"$RecallMetadataBufferSize�
�(RecallMetadataBuffer�F�00_GHOSTED_FILE_EXTENT.?AU_GHOSTED_FILE_EXTENT@@���0U�*J�_KCRM_TRANSACTION_BLOB.?AU_KCRM_TRANSACTION_BLOB@@��
�UOW��
�TmIdentity���
" IsolationLevel���
"$IsolationFlags���
"(Timeout��
�,Description��J�0�_KCRM_TRANSACTION_BLOB.?AU_KCRM_TRANSACTION_BLOB@@���0��^�_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE.?AU_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE@@�
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�^�00_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE.?AU_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE@@�0E'�DynamicTickDisableReasonNone�DynamicTickDisableReasonBcdOverride��DynamicTickDisableReasonNoHwSupport��DynamicTickDisableReasonEmOverride���DynamicTickDisableReasonMax��bt�0_PERFINFO_DYNAMIC_TICK_DISABLE_REASON.?AW4_PERFINFO_DYNAMIC_TICK_DISABLE_REASON@@��00
B�_RTL_STACK_CONTEXT.?AU_RTL_STACK_CONTEXT@@��N�_RTL_STACK_CONTEXT_ENTRY.?AU_RTL_STACK_CONTEXT_ENTRY@@���0#�.
"NumberOfEntries��
�0EntryB�0_RTL_STACK_CONTEXT.?AU_RTL_STACK_CONTEXT@@���0���
"DeviceInstance���
"DeviceFlags��
"ResourceType�
#ResourceStart
#ResourceEnd��
" ResourceFlags^�0(_PLUGPLAY_CONTROL_CONFLICT_ENTRY.?AU_PLUGPLAY_CONTROL_CONFLICT_ENTRY@@���0��
"��
"��
"��n
"Flags
�0DisableNonSystemFonts
�0AuditNonSystemFontLoading
�0ReservedFlagsj�0_PROCESS_MITIGATION_FONT_DISABLE_POLICY.?AU_PROCESS_MITIGATION_FONT_DISABLE_POLICY@@�0}�
%:
!Level
!Sbz��
�ObjectType���>�0_OBJECT_TYPE_LIST.?AU_OBJECT_TYPE_LIST@@�0E:
 F�tagNONCLIENTMETRICSA.?AUtagNONCLIENTMETRICSA@@��
ucbSize���
tiBorderWidth�
tiScrollWidth�
tiScrollHeight
tiCaptionWidth
tiCaptionHeight���
�lfCaptionFont
tTiSmCaptionWidth��
tXiSmCaptionHeight�
�\lfSmCaptionFont��
t�iMenuWidth���
t�iMenuHeight��
��lfMenuFont���
��lfStatusFont�
�lfMessageFont
tTiPaddedBorderWidth���F�0XtagNONCLIENTMETRICSA.?AUtagNONCLIENTMETRICSA@@���0L�1F�tagEMRCREATEMONOBRUSH.?AUtagEMRCREATEMONOBRUSH@@
�0�
Pemr��
"ihBrush��
"iUsage���
"offBmi���
"cbBmi
"offBits��
"cbBits���F�0 tagEMRCREATEMONOBRUSH.?AUtagEMRCREATEMONOBRUSH@@�0Sj
\v�_SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION.?AU_SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION@@&
ImageFile
"Type�v�0_SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION.?AU_SYSTEM_CODEINTEGRITY_CERTIFICATE_INFORMATION@@�0�3R�_LPC_UNREGISTER_PROCESS_MSG.?AU_LPC_UNREGISTER_PROCESS_MSG@@
�02
7PortMsg��
(UniqueProcessId��R�00_LPC_UNREGISTER_PROCESS_MSG.?AU_LPC_UNREGISTER_PROCESS_MSG@@�0��F�_PERFINFO_CCSWAP_LITE.?AU_PERFINFO_CCSWAP_LITE@@
�0
"��
"��
"��
"	��
"��~
�0DataType�
�0OldThreadIdIndex�
�0OldThreadPriInc��
�0OldThreadStateWr�
�0TimeDeltaF�0_PERFINFO_CCSWAP_LITE.?AU_PERFINFO_CCSWAP_LITE@@�00�B�_PROCESS_HEAP_ENTRY.?AU_PROCESS_HEAP_ENTRY@@
�0*
hMem�
�dwReserved���:�0<anonymous-tag>.?AU<anonymous-tag>@@�0��j
"dwCommittedSize��
"dwUnCommittedSize
lpFirstBlock�
lpLastBlock��:�0<anonymous-tag>.?AU<anonymous-tag>@@�0���
lpData���
"cbData���
 cbOverhead���
 
iRegionIndex�
!wFlags���
�0Block
�0Region���B�0(_PROCESS_HEAP_ENTRY.?AU_PROCESS_HEAP_ENTRY@@�0��f�_SYSTEM_WRITE_CONSTRAINT_INFORMATION.?AU_SYSTEM_WRITE_CONSTRAINT_INFORMATION@@��
�06
"WriteConstraintPolicy
"Reserved�f�0_SYSTEM_WRITE_CONSTRAINT_INFORMATION.?AU_SYSTEM_WRITE_CONSTRAINT_INFORMATION@@���0�sb�_TXFS_ROLLFORWARD_REDO_INFORMATION.?AU_TXFS_ROLLFORWARD_REDO_INFORMATION@@��f
~LastVirtualClock�
#LastRedoLsn��
#HighestRecoveryLsn���
"Flagsb�0 _TXFS_ROLLFORWARD_REDO_INFORMATION.?AU_TXFS_ROLLFORWARD_REDO_INFORMATION@@���0U�f�_TRANSACTION_ENLISTMENTS_INFORMATION.?AU_TRANSACTION_ENLISTMENTS_INFORMATION@@��J# �>
"NumberOfEnlistments��
�0EnlistmentPair���f�0$_TRANSACTION_ENLISTMENTS_INFORMATION.?AU_TRANSACTION_ENLISTMENTS_INFORMATION@@���0�
�
!Machine��
!NumberOfSections�
"TimeDateStamp
"PointerToSymbolTable�
"NumberOfSymbols��
!SizeOfOptionalHeader�
!Characteristics��B�0_IMAGE_FILE_HEADER.?AU_IMAGE_FILE_HEADER@@���0f�J�tagEMRSETWORLDTRANSFORM.?AUtagEMRSETWORLDTRANSFORM@@"
Pemr��

xformJ�0 tagEMRSETWORLDTRANSFORM.?AUtagEMRSETWORLDTRANSFORM@@�0S�b�_FINDFIRSTACTIVATIONCONTEXTSECTION.?AU_FINDFIRSTACTIVATIONCONTEXTSECTION@@��n
"Size�
"Flags
� ExtensionGuid
"Id���
"Depth
"OutFlags�b�0 _FINDFIRSTACTIVATIONCONTEXTSECTION.?AU_FINDFIRSTACTIVATIONCONTEXTSECTION@@���0�3^�_WORKER_FACTORY_BASIC_INFORMATION.?AU_WORKER_FACTORY_BASIC_INFORMATION@@
|%^
~Timeout��
~RetryTimeout�
~IdleTimeout��
 Paused���
 TimerSet�
 QueuedToExWorker�
 MayCreate
 CreateInProgress�
 InsertedIntoQueue
 Shutdown�
" BindingCount�
"$ThreadMinimum
"(ThreadMaximum
",PendingWorkerCount���
"0WaitingWorkerCount���
"4TotalWorkerCount�
"8ReleaseCount�
@InfiniteWaitGoal�
�0HStartRoutine�
PStartParameter���
XProcessId
#`StackReserve�
#hStackCommit��
pLastThreadCreationStatus�^�0x_WORKER_FACTORY_BASIC_INFORMATION.?AU_WORKER_FACTORY_BASIC_INFORMATION@@�0��PoDisabledStateSleeping1�PoDisabledStateSleeping2�PoDisabledStateSleeping3�PoDisabledStateSleeping4�PoDisabledStateSleeping0Idle�PoDisabledStateReserved5�PoDisabledStateSleeping4Firmware�PoDisabledStateMaximum���Jt�0POWER_STATE_DISABLED_TYPE.?AW4POWER_STATE_DISABLED_TYPE@@��0F	N�_ETW_TP_EVENT_POOL_CLOSE.?AU_ETW_TP_EVENT_POOL_CLOSE@@��*
8Header���
 PoolId���N�0(_ETW_TP_EVENT_POOL_CLOSE.?AU_ETW_TP_EVENT_POOL_CLOSE@@���00�
�)N�_WMI_IMAGEID_INFORMATION.?AU_WMI_IMAGEID_INFORMATION@@��r
ImageBase
#ImageSize
"ProcessId
"TimeDateStamp
JOriginalFileName�N�0_WMI_IMAGEID_INFORMATION.?AU_WMI_IMAGEID_INFORMATION@@��10yr�_SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION.?AU_SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION@@��"
�EnclaveLaunchSigner��r1 _SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION.?AU_SYSTEM_ENCLAVE_LAUNCH_CONTROL_INFORMATION@@��1�N
�1!t1
1j�_TRANSACTIONMANAGER_OLDEST_INFORMATION.?AU_TRANSACTIONMANAGER_OLDEST_INFORMATION@@��

1"
�OldestTransactionGuidj1_TRANSACTIONMANAGER_OLDEST_INFORMATION.?AU_TRANSACTIONMANAGER_OLDEST_INFORMATION@@��
1��N�_ENCLAVE_CREATE_INFO_VBS.?AU_ENCLAVE_CREATE_INFO_VBS@@��&
"Flags
�OwnerID��N1$_ENCLAVE_CREATE_INFO_VBS.?AU_ENCLAVE_CREATE_INFO_VBS@@��1y�
cV#��N
!Magic
 MajorLinkerVersion���
 MinorLinkerVersion���
"SizeOfCode���
"SizeOfInitializedData
"SizeOfUninitializedData��
"AddressOfEntryPoint��
"BaseOfCode���
#ImageBase
" SectionAlignment�
"$FileAlignment
!(MajorOperatingSystemVersion��
!*MinorOperatingSystemVersion��
!,MajorImageVersion
!.MinorImageVersion
!0MajorSubsystemVersion
!2MinorSubsystemVersion
"4Win32VersionValue
"8SizeOfImage��
"<SizeOfHeaders
"@CheckSum�
!DSubsystem
!FDllCharacteristics���
#HSizeOfStackReserve���
#PSizeOfStackCommit
#XSizeOfHeapReserve
#`SizeOfHeapCommit�
"hLoaderFlags��
"lNumberOfRvaAndSizes��
1pDataDirectoryN1�_IMAGE_OPTIONAL_HEADER64.?AU_IMAGE_OPTIONAL_HEADER64@@��1fGJ�RPC_INTERFACE_TEMPLATEW.?AURPC_INTERFACE_TEMPLATEW@@
11
16�_UUID_VECTOR.?AU_UUID_VECTOR@@��
1�
"Version��
IfSpec���
1MgrTypeUuid��
MgrEpv���
u Flags
u$MaxCalls�
u(MaxRpcSize���
10IfCallback���
18UuidVector���
q@Annotation���
HSecurityDescriptor���J1PRPC_INTERFACE_TEMPLATEW.?AURPC_INTERFACE_TEMPLATEW@@ 1V�_RTL_SEGMENT_HEAP_PARAMETERS.?AU_RTL_SEGMENT_HEAP_PARAMETERS@@��## �b
!Version��
!Size�
"Flags
�+MemorySource�
#10Reserved�V$1P_RTL_SEGMENT_HEAP_PARAMETERS.?AU_RTL_SEGMENT_HEAP_PARAMETERS@@��%1$�
N�_SYSTEM_FLUSH_INFORMATION.?AU_SYSTEM_FLUSH_INFORMATION@@
'1~
"SupportedFlushMethods
"ProcessorCacheFlushSize��
#SystemFlushCapabilities��
�Reserved�N)1 _SYSTEM_FLUSH_INFORMATION.?AU_SYSTEM_FLUSH_INFORMATION@@*1�QR�_PROCESS_WINDOW_INFORMATION.?AU_PROCESS_WINDOW_INFORMATION@@
,1N
"WindowFlags��
!WindowTitleLength
JWindowTitle��R.1_PROCESS_WINDOW_INFORMATION.?AU_PROCESS_WINDOW_INFORMATION@@/1b�f�_PERFINFO_IMAGELOAD_IN_PAGEFILE_INFO.?AU_PERFINFO_IMAGELOAD_IN_PAGEFILE_INFO@@��
!��
!��
!��j
!Flags
21ActiveDataReference��
31DeviceEjectable��
41WritableHandles��251<anonymous-tag>.?AT<anonymous-tag>@@610j
FileObject���
"DeviceCharacteristics
!FileCharacteristics��
61Flagsf81_PERFINFO_IMAGELOAD_IN_PAGEFILE_INFO.?AU_PERFINFO_IMAGELOAD_IN_PAGEFILE_INFO@@��910^�_PERFINFO_PMC_SAMPLE_INFORMATION.?AU_PERFINFO_PMC_SAMPLE_INFORMATION@@��
;1b
InstructionPointer���
"ThreadId�
!ProfileSource
!Reserved�^=1_PERFINFO_PMC_SAMPLE_INFORMATION.?AU_PERFINFO_PMC_SAMPLE_INFORMATION@@��>10�b�_SERVICE_TRIGGER_SPECIFIC_DATA_ITEM.?AU_SERVICE_TRIGGER_SPECIFIC_DATA_ITEM@@
@1z
"dwTriggerType
"dwAction�
�pTriggerSubtype��
"cDataItems���
A1pDataItems���>B1 _SERVICE_TRIGGER.?AU_SERVICE_TRIGGER@@��C1m|9 E1
'N�_PERFINFO_PROCESS_INSWAP.?AU_PERFINFO_PROCESS_INSWAP@@��6
#DirectoryTableBase���
"ProcessIdNI1_PERFINFO_PROCESS_INSWAP.?AU_PERFINFO_PROCESS_INSWAP@@��J10#
�%f�_TRANSACTIONMANAGER_BASIC_INFORMATION.?AU_TRANSACTIONMANAGER_BASIC_INFORMATION@@
M12
�TmIdentity���
~VirtualClock�fO1_TRANSACTIONMANAGER_BASIC_INFORMATION.?AU_TRANSACTIONMANAGER_BASIC_INFORMATION@@P1��
x"B�tagCOLORADJUSTMENT.?AUtagCOLORADJUSTMENT@@��
S1.
!caSize���
!caFlags��
!caIlluminantIndex
!caRedGamma���
!caGreenGamma�
!
caBlueGamma��
!caReferenceBlack�
!caReferenceWhite�
caContrast���
caBrightness�
caColorfulness���
caRedGreenTint���BU1tagCOLORADJUSTMENT.?AUtagCOLORADJUSTMENT@@��V1SpV�_SYSTEM_HIBERFILE_INFORMATION.?AU_SYSTEM_HIBERFILE_INFORMATION@@
X1~#�.
"NumberOfMcbPairs�
Z1Mcb��V[1_SYSTEM_HIBERFILE_INFORMATION.?AU_SYSTEM_HIBERFILE_INFORMATION@@\1F�6�_IELF_HANDLE.?AU_IELF_HANDLE@@��
�Next�
#LastRecordRead���
WorkItem�
 LogPublisher�
(LogModule
"0RefCount�
"4Signature
"8Flags
"<MajorVersion�
"@MinorVersion�
"DdwNotifyRequests�
"HNameLength���
JLName�6
_1P_IELF_HANDLE.?AU_IELF_HANDLE@@��`1�_z
!MakeCode�
!Flags
!Reserved�
!VKey�
uMessage��
"ExtraInformation�:b1tagRAWKEYBOARD.?AUtagRAWKEYBOARD@@��c1L�:
 ��
 ��
 ��
 ��V
e1Channel��
f1Reserved�
g1Shared���
h1MoreEntries��Ni1_DMA_CONFIGURATION_BYTE0.?AU_DMA_CONFIGURATION_BYTE0@@��j1��N�USN_TRACK_MODIFIED_RANGES.?AUUSN_TRACK_MODIFIED_RANGES@@V
"Flags
"Unused���
#ChunkSize
FileSizeThresholdNm1USN_TRACK_MODIFIED_RANGES.?AUUSN_TRACK_MODIFIED_RANGES@@n1UR
�!N�_ETW_STACK_CACHING_CONFIG.?AU_ETW_STACK_CACHING_CONFIG@@.
"CacheSize
"BucketCount��Nr1_ETW_STACK_CACHING_CONFIG.?AU_ETW_STACK_CACHING_CONFIG@@s10>V�_SYSTEM_CALL_TIME_INFORMATION.?AU_SYSTEM_CALL_TIME_INFORMATION@@
u1F
"Length���
"TotalCalls���
Z1TimeOfCalls��Vw1_SYSTEM_CALL_TIME_INFORMATION.?AU_SYSTEM_CALL_TIME_INFORMATION@@x1��R�tagWTSSESSION_NOTIFICATION.?AUtagWTSSESSION_NOTIFICATION@@��
z1.
"cbSize���
"dwSessionId��R|1tagWTSSESSION_NOTIFICATION.?AUtagWTSSESSION_NOTIFICATION@@��}1L~J�_KEY_FLAGS_INFORMATION.?AU_KEY_FLAGS_INFORMATION@@��F
"Wow64Flags���
"KeyFlags�
"ControlFlags�J�1_KEY_FLAGS_INFORMATION.?AU_KEY_FLAGS_INFORMATION@@���1zRJ�_FILEOFFSET_INFORMATION.?AU_FILEOFFSET_INFORMATION@@
#	��
#0	��
#9��>
�1DontUse��
�1Offset���
�1Reserved�J�1_FILEOFFSET_INFORMATION.?AU_FILEOFFSET_INFORMATION@@�1Bb�_PROCESS_COMMIT_RELEASE_INFORMATION.?AU_PROCESS_COMMIT_RELEASE_INFORMATION@@
�1
"��
"��
"��
"���
"Version��
�1Eligible�
�1ReleaseRepurposedMemResetCommit��
�1ForceReleaseMemResetCommit���
�1Spare
#CommitDebt���
#CommittedMemResetSize
#RepurposedMemResetSize���b�1 _PROCESS_COMMIT_RELEASE_INFORMATION.?AU_PROCESS_COMMIT_RELEASE_INFORMATION@@�1b�
�.
t*�HIMCC__.?AUHIMCC__@@
tunused���*�1HIMCC__.?AUHIMCC__@@�1� 6�tagMINMAXINFO.?AUtagMINMAXINFO@@
�1~
�ptReserved���
�ptMaxSize
�ptMaxPosition
�ptMinTrackSize���
� ptMaxTrackSize���6�1(tagMINMAXINFO.?AUtagMINMAXINFO@@�1L�B�_EXCEPTION_RECORD64.?AU_EXCEPTION_RECORD64@@##x��
ExceptionCode
"ExceptionFlags���
#ExceptionRecord��
#ExceptionAddress�
"NumberParameters�
"__unusedAlignment
�1 ExceptionInformation�B�1�_EXCEPTION_RECORD64.?AU_EXCEPTION_RECORD64@@�1h%a
�,*�pvalueA.?AUpvalueA@@b
ppv_valuename�
tpv_valuelen��
pv_value_context�
"pv_type��*�1 pvalueA.?AUpvalueA@@�1��:
"uMsg�
!wParamL��
!wParamH��>�1tagHARDWAREINPUT.?AUtagHARDWAREINPUT@@���1L�R�_FSCTL_OFFLOAD_WRITE_OUTPUT.?AU_FSCTL_OFFLOAD_WRITE_OUTPUT@@:
"Size�
"Flags
#LengthWrittenR�1_FSCTL_OFFLOAD_WRITE_OUTPUT.?AU_FSCTL_OFFLOAD_WRITE_OUTPUT@@�1U�>�tagENHMETARECORD.?AUtagENHMETARECORD@@��2
"iType
"nSize
7dParm>�1tagENHMETARECORD.?AUtagENHMETARECORD@@���1S4^�_RTLP_PROCESS_REFLECTION_CONTEXT.?AU_RTLP_PROCESS_REFLECTION_CONTEXT@@��
�1
|%
#ReflectionContextSize
"ReflectionFlags��
�1ReflectionRoutine
ReflectionParameter��
 ReflectedProcessCreatedEvent�
(ReflectedProcessHandlesDuplicatedEvent���
0ReflectionStartEvent�
8ReflectionInformation^�1X_RTLP_PROCESS_REFLECTION_CONTEXT.?AU_RTLP_PROCESS_REFLECTION_CONTEXT@@���1��6�_RTL_BACKOFF.?AU_RTL_BACKOFF@@��
"Delay6�1_RTL_BACKOFF.?AU_RTL_BACKOFF@@���1��b�_FILE_VALID_DATA_LENGTH_INFORMATION.?AU_FILE_VALID_DATA_LENGTH_INFORMATION@@
~ValidDataLength��b�1_FILE_VALID_DATA_LENGTH_INFORMATION.?AU_FILE_VALID_DATA_LENGTH_INFORMATION@@�1U�
�)6�tagSTICKYKEYS.?AUtagSTICKYKEYS@@
�1*
ucbSize���
"dwFlags��6�1tagSTICKYKEYS.?AUtagSTICKYKEYS@@�1L�3J�_FILE_LEVEL_TRIM_RANGE.?AU_FILE_LEVEL_TRIM_RANGE@@��*
#Offset���
#Length���J�1_FILE_LEVEL_TRIM_RANGE.?AU_FILE_LEVEL_TRIM_RANGE@@���1U9J�_IMAGE_ENCLAVE_CONFIG64.?AU_IMAGE_ENCLAVE_CONFIG64@@F
"Size�
"MinimumRequiredConfigSize
"PolicyFlags��
"NumberOfImports��
"ImportList���
"ImportEntrySize��
.FamilyID�
.(ImageID��
"8ImageVersion�
"<SecurityVersion��
#@EnclaveSize��
"HNumberOfThreads��
"LEnclaveFlags�J
�1P_IMAGE_ENCLAVE_CONFIG64.?AU_IMAGE_ENCLAVE_CONFIG64@@�1fs�
(TransportCredentials�
"Flags
"AuthenticationTarget�
"NumberOfAuthnSchemes�
"AuthnSchemes�
q ServerCertificateSubject�^�1(_RPC_HTTP_TRANSPORT_CREDENTIALS_W.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_W@@�1�6�tagSTYLEBUFW.?AUtagSTYLEBUFW@@��.
"dwStyle��
�szDescription6�1DtagSTYLEBUFW.?AUtagSTYLEBUFW@@���1��F�tagEMRSETMAPPERFLAGS.?AUtagEMRSETMAPPERFLAGS@@��
�1&
Pemr��
"dwFlags��F�1tagEMRSETMAPPERFLAGS.?AUtagEMRSETMAPPERFLAGS@@���1S�~�1
�J�_PERFINFO_CC_READ_AHEAD.?AU_PERFINFO_CC_READ_AHEAD@@�
#WorkItemKey��
#FileOffset���
"Size�
"PagePriority�
"DetectedPattern��
"Reserved�J�1 _PERFINFO_CC_READ_AHEAD.?AU_PERFINFO_CC_READ_AHEAD@@�10�#e/B�_GLYPHMETRICSFLOAT.?AU_GLYPHMETRICSFLOAT@@��
�12�_POINTFLOAT.?AU_POINTFLOAT@@~
@gmfBlackBoxX�
@gmfBlackBoxY�
�1gmfptGlyphOrigin�
@gmfCellIncX��
@gmfCellIncY��B
�1_GLYPHMETRICSFLOAT.?AU_GLYPHMETRICSFLOAT@@���1SUJ�_EXIT_THREAD_DEBUG_INFO.?AU_EXIT_THREAD_DEBUG_INFO@@
"dwExitCode���J�1_EXIT_THREAD_DEBUG_INFO.?AU_EXIT_THREAD_DEBUG_INFO@@�1�H:�DLGITEMTEMPLATE.?AUDLGITEMTEMPLATE@@v
"style
"dwExtendedStyle��
x

y
cx���
cy���
!id���:�1DLGITEMTEMPLATE.?AUDLGITEMTEMPLATE@@�1LXJ�_IMAGE_ENCLAVE_CONFIG32.?AU_IMAGE_ENCLAVE_CONFIG32@@F
"Size�
"MinimumRequiredConfigSize
"PolicyFlags��
"NumberOfImports��
"ImportList���
"ImportEntrySize��
.FamilyID�
.(ImageID��
"8ImageVersion�
"<SecurityVersion��
"@EnclaveSize��
"DNumberOfThreads��
"HEnclaveFlags�J
�1L_IMAGE_ENCLAVE_CONFIG32.?AU_IMAGE_ENCLAVE_CONFIG32@@�1fcJ�_WMI_JOB_REMOVE_PROCESS.?AU_WMI_JOB_REMOVE_PROCESS@@v
�ContainerId��
"JobId
"UniqueProcessId��
"RemovalFlags�
ExitStatus���J�1 _WMI_JOB_REMOVE_PROCESS.?AU_WMI_JOB_REMOVE_PROCESS@@�10�B�_WINDOWS_OS_OPTIONS.?AU_WINDOWS_OS_OPTIONS@@r
�Signature
"Version��
"Length���
"OsLoadPathOffset�
JOsLoadOptionsB�1_WINDOWS_OS_OPTIONS.?AU_WINDOWS_OS_OPTIONS@@�1��>�localeinfo_struct.?AUlocaleinfo_struct@@J�threadlocaleinfostruct.?AUthreadlocaleinfostruct@@��
�1
d.*
�1locinfo��
2mbcinfo��>2localeinfo_struct.?AUlocaleinfo_struct@@2�'�N�_PROCESS_TLS_INFORMATION.?AU_PROCESS_TLS_INFORMATION@@��J�_THREAD_TLS_INFORMATION.?AU_THREAD_TLS_INFORMATION@@2#�
"Flags
"OperationType
"ThreadDataCount��
"TlsIndex�
"PreviousCount
2ThreadData���N2(_PROCESS_TLS_INFORMATION.?AU_PROCESS_TLS_INFORMATION@@��2bo
�&BPerfInfoMemUsagePfnMetadata��PerfInfoMemUsageMax��Zt2_PERFINFO_KERNELMEMORY_USAGE_TYPE.?AW4_PERFINFO_KERNELMEMORY_USAGE_TYPE@@�20	R�_PERFINFO_IDLE_STATE_CHANGE.?AU_PERFINFO_IDLE_STATE_CHANGE@@:
"State
"Throttle�
"DirectionR2_PERFINFO_IDLE_STATE_CHANGE.?AU_PERFINFO_IDLE_STATE_CHANGE@@2046�tagEMRELLIPSE.?AUtagEMRELLIPSE@@&
Pemr��
,rclBox���62tagEMRELLIPSE.?AUtagEMRELLIPSE@@2S
	(�
"lcsSignature�
"lcsVersion���
"lcsSize��
lcsCSType
lcsIntent
�lcsEndpoints�
"8lcsGammaRed��
"<lcsGammaGreen
"@lcsGammaBlue�
tDlcsFilename��>
2LtagLOGCOLORSPACEW.?AUtagLOGCOLORSPACEW@@2S
G!
h��
2^�_SYSTEM_CODEINTEGRITY_INFORMATION.?AU_SYSTEM_CODEINTEGRITY_INFORMATION@@6
"Length���
"CodeIntegrityOptions�^2_SYSTEM_CODEINTEGRITY_INFORMATION.?AU_SYSTEM_CODEINTEGRITY_INFORMATION@@2��
R�_SHRINK_VOLUME_INFORMATION.?AU_SHRINK_VOLUME_INFORMATION@@��>ShrinkPrepareShrinkCommit�ShrinkAbort��Rt"2_SHRINK_VOLUME_REQUEST_TYPES.?AW4_SHRINK_VOLUME_REQUEST_TYPES@@���#2U�N
#2ShrinkRequestType
#Flags
NewNumberOfSectors���R%2_SHRINK_VOLUME_INFORMATION.?AU_SHRINK_VOLUME_INFORMATION@@��&2U�*�_FP_80.?AU_FP_80@@��
(2
�W**2_FP_80.?AU_FP_80@@��+2g>
�
"��
"��
"��
"��
"��
"Flags
.2EnableBottomUpRandomization��
/2EnableForceRelocateImages
02EnableHighEntropy
12DisallowStrippedImages���
22ReservedFlagsZ32_PROCESS_MITIGATION_ASLR_POLICY.?AU_PROCESS_MITIGATION_ASLR_POLICY@@42}?Z�_ETW_WNF_EVENT_NAME_SUB_RUNDOWN.?AU_ETW_WNF_EVENT_NAME_SUB_RUNDOWN@@
62>
8Header���
~ StateName
(NameSub��Z820_ETW_WNF_EVENT_NAME_SUB_RUNDOWN.?AU_ETW_WNF_EVENT_NAME_SUB_RUNDOWN@@920�FFindStreamInfoStandard���FindStreamInfoMaxInfoLevel���>t;2_STREAM_INFO_LEVELS.?AW4_STREAM_INFO_LEVELS@@�<2L
\":�XSAVE_CPU_INFO.?AUXSAVE_CPU_INFO@@��>�XSAVE_CPU_ERRATA.?AUXSAVE_CPU_ERRATA@@��
@2>
?2CpuInfo��
A2 CpuErrata
# Unused���FB2(_XSAVE_SUPPORTED_CPU.?AU_XSAVE_SUPPORTED_CPU@@��C2��>�_CACHE_DESCRIPTOR.?AU_CACHE_DESCRIPTOR@@
E2^
 Level
 Associativity
!LineSize�
"Size�
�Type�>G2_CACHE_DESCRIPTOR.?AU_CACHE_DESCRIPTOR@@H2|
C!
�b�_SECTION_INTERNAL_IMAGE_INFORMATION.?AU_SECTION_INTERNAL_IMAGE_INFORMATION@@
"��
"��
"��
"��
"��
"��
"��
"��
"��
�(SectionInformation���
"@ExtendedFlags
M2@ImageExportSuppressionEnabled
N2@ImageCetShadowStacksReady
O2@ImageXfgEnabled��
P2@ImageCetShadowStacksStrictMode���
Q2@ImageCetSetContextIpValidationRelaxedMode
R2@ImageCetDynamicApisAllowInProc���
S2@ImageCetDowngradeReserved1���
T2@ImageCetDowngradeReserved2���
U2@Reserved�bV2H_SECTION_INTERNAL_IMAGE_INFORMATION.?AU_SECTION_INTERNAL_IMAGE_INFORMATION@@W2B�^�_SYSTEM_MEMORY_USAGE_INFORMATION.?AU_SYSTEM_MEMORY_USAGE_INFORMATION@@��
Y2�
#TotalPhysicalBytes���
#AvailableBytes���
ResidentAvailableBytes���
#CommittedBytes���
# SharedCommittedBytes�
#(CommitLimitBytes�
#0PeakCommitmentBytes��^[28_SYSTEM_MEMORY_USAGE_INFORMATION.?AU_SYSTEM_MEMORY_USAGE_INFORMATION@@��\2�yv�_PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION.?AU_PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION@@
^2
ProcessHandlev`2_PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION.?AU_PROCESS_COMBINE_SECURITY_DOMAINS_INFORMATION@@a2bP
'"""##td2
e2
�*R�_WMI_DISKIO_READWRITE_INIT.?AU_WMI_DISKIO_READWRITE_INIT@@��
h2.
Irp��
"IssuingThreadId��Rj2_WMI_DISKIO_READWRITE_INIT.?AU_WMI_DISKIO_READWRITE_INIT@@��k20�:�_HEAP_RANGE_LOG.?AU_HEAP_RANGE_LOG@@
m2>�_HEAP_EVENT_RANGE.?AU_HEAP_EVENT_RANGE@@&
8Header���
o2 Range:p28_HEAP_RANGE_LOG.?AU_HEAP_RANGE_LOG@@q20�
�+.�_TP_ALPC.?AU_TP_ALPC@@��
t2�u2v2
w2&
~NextVcn��
~Lcn��:y2<anonymous-tag>.?AU<anonymous-tag>@@z2U^
z2#�F
"ExtentCount��
~StartingVcn��
|2Extents��N}2 RETRIEVAL_POINTERS_BUFFER.?AURETRIEVAL_POINTERS_BUFFER@@~2UZ
f�_CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE.?AU_CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE@@��&
#Version��
qName�f�2_CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE.?AU_CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE@@���2EO	B�_CI_LOG_MMCSS_STOP.?AU_CI_LOG_MMCSS_STOP@@��
�Header���B�20_CI_LOG_MMCSS_STOP.?AU_CI_LOG_MMCSS_STOP@@���20gB�_HEAP_RANGE_CREATE.?AU_HEAP_RANGE_CREATE@@��&
8Header���
�, EventB�28_HEAP_RANGE_CREATE.?AU_HEAP_RANGE_CREATE@@���20�V�_CONSOLE_READCONSOLE_CONTROL.?AU_CONSOLE_READCONSOLE_CONTROL@@��
�2f
"nLength��
"nInitialChars
"dwCtrlWakeupMask�
"dwControlKeyStateV�2_CONSOLE_READCONSOLE_CONTROL.?AU_CONSOLE_READCONSOLE_CONTROL@@��6onecore\external\sdk\inc\minwin\consoleapi.h����2�2�>
ciexyzX��
ciexyzY��
ciexyzZ��.�2tagCIEXYZ.?AUtagCIEXYZ@@�2S�R�_SYSTEM_ERROR_PORT_TIMEOUTS.?AU_SYSTEM_ERROR_PORT_TIMEOUTS@@2
"StartTimeout�
"CommTimeout��R�2_SYSTEM_ERROR_PORT_TIMEOUTS.?AU_SYSTEM_ERROR_PORT_TIMEOUTS@@�2�
OR�_FILE_STANDARD_INFORMATION.?AU_FILE_STANDARD_INFORMATION@@��v
~AllocationSize���
~EndOfFile
"NumberOfLinks
 DeletePending
 DirectoryR�2_FILE_STANDARD_INFORMATION.?AU_FILE_STANDARD_INFORMATION@@���2U�
x��
�2
P#V�_CM_EISA_FUNCTION_INFORMATION.?AU_CM_EISA_FUNCTION_INFORMATION@@ #�R�_EISA_MEMORY_CONFIGURATION.?AU_EISA_MEMORY_CONFIGURATION@@���2#?�J�_EISA_IRQ_CONFIGURATION.?AU_EISA_IRQ_CONFIGURATION@@�2#��#�N�_EISA_PORT_CONFIGURATION.?AU_EISA_PORT_CONFIGURATION@@���2#<� #<�6
"CompressedId�
 IdSlotFlags1�
 IdSlotFlags2�
 MinorRevision
 MajorRevision
�2Selections���
 "FunctionFlags
/$#TypeString���
�2sEisaMemory���
�2�EisaIrq��
�2�EisaDma��
�2�EisaPort�
�2InitializationData���V
�2@_CM_EISA_FUNCTION_INFORMATION.?AU_CM_EISA_FUNCTION_INFORMATION@@�2�9Z�_THREAD_CYCLE_TIME_INFORMATION.?AU_THREAD_CYCLE_TIME_INFORMATION@@��:
#AccumulatedCycles
#CurrentCycleCountZ�2_THREAD_CYCLE_TIME_INFORMATION.?AU_THREAD_CYCLE_TIME_INFORMATION@@���2b�F�_EVENT_TRACE_LOGFILEA.?AU_EVENT_TRACE_LOGFILEA@@
�2
�2"�2
�2
 ��
 ��
 ��
 ��V
�2Reserved0
�2TransferSize�
�2Timing���
�2Reserved1N�2_DMA_CONFIGURATION_BYTE1.?AU_DMA_CONFIGURATION_BYTE1@@���2�b�_FILE_INITIATE_REPAIR_OUTPUT_BUFFER.?AU_FILE_INITIATE_REPAIR_OUTPUT_BUFFER@@
�2F
#Hint1
#Hint2
#Clsn�
Status���b�2 _FILE_INITIATE_REPAIR_OUTPUT_BUFFER.?AU_FILE_INITIATE_REPAIR_OUTPUT_BUFFER@@�2U�*�tagMSG.?AUtagMSG@@��
�2n
�hwnd�
umessage��
#wParam���
lParam���
" time�
�$pt���*�20tagMSG.?AUtagMSG@@���2LPJ�_LDR_DATA_TABLE_ENTRY64.?AU_LDR_DATA_TABLE_ENTRY64@@
�2�
InLoadOrderLinks�
InMemoryOrderLinks���
 InInitializationOrderLinks���
#0DllBase��
#8EntryPoint���
"@SizeOfImage��
aHFullDllName��
aXBaseDllName��
"hFlags
!lLoadCount
!nTlsIndex�
pHashLinks
#pSectionPointer���
"xCheckSum�
"�TimeDateStamp
#�LoadedImportsJ�2�_LDR_DATA_TABLE_ENTRY64.?AU_LDR_DATA_TABLE_ENTRY64@@�2�>F�_ETW_HEAP_EVENT_ALLOC.?AU_ETW_HEAP_EVENT_ALLOC@@
�2f
8Header���
 HeapHandle���
#(Size�
0Address��
"8Source���F�2<_ETW_HEAP_EVENT_ALLOC.?AU_ETW_HEAP_EVENT_ALLOC@@�20�

F"
�0>�tagCBT_CREATEWNDW.?AUtagCBT_CREATEWNDW@@
�2.
�(lpcs�
�hwndInsertAfter��>�2tagCBT_CREATEWNDW.?AUtagCBT_CREATEWNDW@@�2L]N�_CM_COMPONENT_INFORMATION.?AU_CM_COMPONENT_INFORMATION@@N
�-Flags
"Version��
"Key��
#AffinityMask�N�2_CM_COMPONENT_INFORMATION.?AU_CM_COMPONENT_INFORMATION@@�2��J�tagEMRCREATECOLORSPACE.?AUtagEMRCREATECOLORSPACE@@��2
Pemr��
"ihCS�
0&lcs��J�2TtagEMRCREATECOLORSPACE.?AUtagEMRCREATECOLORSPACE@@���2S�6�tagMETAHEADER.?AUtagMETAHEADER@@�
!mtType���
!mtHeaderSize�
!mtVersion
"mtSize���
!
mtNoObjects��
"mtMaxRecord��
!mtNoParameters���6�2tagMETAHEADER.?AUtagMETAHEADER@@�2S>�MOFRESOURCEINFOA.?AUMOFRESOURCEINFOA@@��
�2b
pImagePath
pResourceName�
"ResourceSize�
 ResourceBuffer���>�2 MOFRESOURCEINFOA.?AUMOFRESOURCEINFOA@@��*onecore\external\sdk\inc\wmium.h����2�2Lf�_SYSTEM_KERNEL_VA_SHADOW_INFORMATION.?AU_SYSTEM_KERNEL_VA_SHADOW_INFORMATION@@��
"��
"��
"��
"��
"��
"��
"��
"��
"
��
"��2
�2KvaShadowEnabled�
�2KvaShadowUserGlobal��
�2KvaShadowPcid
�2KvaShadowInvpcid�
�2KvaShadowRequired
�2KvaShadowRequiredAvailable���
�2InvalidPteBit
�2L1DataCacheFlushSupported
�2L1TerminalFaultMitigationPresent�
�2Reserved�:
�2<anonymous-tag>.?AU<anonymous-tag>@@�2��
�2KvaShadowFlags���f�2_SYSTEM_KERNEL_VA_SHADOW_INFORMATION.?AU_SYSTEM_KERNEL_VA_SHADOW_INFORMATION@@���2��j�_FSCTL_GET_INTEGRITY_INFORMATION_BUFFER.?AU_FSCTL_GET_INTEGRITY_INFORMATION_BUFFER@@�
!ChecksumAlgorithm
!Reserved�
"Flags
"ChecksumChunkSizeInBytes�
"ClusterSizeInBytes���j�2_FSCTL_GET_INTEGRITY_INFORMATION_BUFFER.?AU_FSCTL_GET_INTEGRITY_INFORMATION_BUFFER@@�2U�
M,2�WMIREGGUIDW.?AUWMIREGGUIDW@@
3�
�Guid�
"Flags
"InstanceCount
"InstanceNameList�
"BaseNameOffset���
#Pdo��
#InstanceInfo�23 WMIREGGUIDW.?AUWMIREGGUIDW@@3t*>�_FILE_STREAM_INFO.?AU_FILE_STREAM_INFO@@
3�
"NextEntryOffset��
"StreamNameLength�
~StreamSize���
~StreamAllocationSize�
JStreamName���>3 _FILE_STREAM_INFO.?AU_FILE_STREAM_INFO@@	3<�"j�_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER.?AU_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER@@B
!ChecksumAlgorithm
!Reserved�
"Flagsj3_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER.?AU_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER@@
3U�Z�DISPLAYCONFIG_PATH_TARGET_INFO.?AUDISPLAYCONFIG_PATH_TARGET_INFO@@��
u��
u��J�DISPLAYCONFIG_RATIONAL.?AUDISPLAYCONFIG_RATIONAL@@��ZDISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED��DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE��DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED���DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST���DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST�����DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32Vt3DISPLAYCONFIG_SCANLINE_ORDERING.?AW4DISPLAYCONFIG_SCANLINE_ORDERING@@�3S&
TadapterId
uid���
umodeInfoIdx��
3desktopModeInfoIdx���
3targetModeInfoIdx
�$outputTechnology�
$rotation�
F#scaling��
3refreshRate��
3$scanLineOrdering�
t(targetAvailable��
u,statusFlags��Z30DISPLAYCONFIG_PATH_TARGET_INFO.?AUDISPLAYCONFIG_PATH_TARGET_INFO@@��3S�R�_SYSTEM_MEMORY_INFORMATION.?AU_SYSTEM_MEMORY_INFORMATION@@��
3z
#PagedPoolCommitPageCount�
#NonPagedPoolPageCount
#MdlPageCount�
#CommitPageCount��R3 _SYSTEM_MEMORY_INFORMATION.?AU_SYSTEM_MEMORY_INFORMATION@@��3��
`0
+N�READ_USN_JOURNAL_DATA_V0.?AUREAD_USN_JOURNAL_DATA_V0@@��
 3�
StartUsn�
"ReasonMask���
"ReturnOnlyOnClose
#Timeout��
#BytesToWaitFor���
# UsnJournalID�N"3(READ_USN_JOURNAL_DATA_V0.?AUREAD_USN_JOURNAL_DATA_V0@@��#3U.>�_SYSTEM_ALARM_ACE.?AU_SYSTEM_ALARM_ACE@@:
�Header���
"Mask�
"SidStart�>&3_SYSTEM_ALARM_ACE.?AU_SYSTEM_ALARM_ACE@@'3E��q#t)3
*3V�_DUPLICATE_EXTENTS_DATA_EX32.?AU_DUPLICATE_EXTENTS_DATA_EX32@@��
uSize�
uFileHandle���
~SourceFileOffset�
~TargetFileOffset�
~ByteCount
" FlagsV-3(_DUPLICATE_EXTENTS_DATA_EX32.?AU_DUPLICATE_EXTENTS_DATA_EX32@@��.3U� 
�"b
 AclRevision��
 Sbz1�
!AclSize��
!AceCount�
!Sbz2�&13_ACL.?AU_ACL@@��23E�F�_EISA_IRQ_DESCRIPTOR.?AU_EISA_IRQ_DESCRIPTOR@@��2
43ConfigurationByte
 Reserved�J53_EISA_IRQ_CONFIGURATION.?AU_EISA_IRQ_CONFIGURATION@@63��N�_KLDR_DATA_TABLE_ENTRY64.?AU_KLDR_DATA_TABLE_ENTRY64@@��
InLoadOrderLinks�
#__Undefined1�
#__Undefined2�
# __Undefined3�
#(NonPagedDebugInfo
#0DllBase��
#8EntryPoint���
"@SizeOfImage��
aHFullDllName��
aXBaseDllName��
"hFlags
!lLoadCount
!n__Undefined5�
#p__Undefined6�
"xCheckSum�
"|__padding1���
"�TimeDateStamp
"�__padding2���N93�_KLDR_DATA_TABLE_ENTRY64.?AU_KLDR_DATA_TABLE_ENTRY64@@��:3�z�FindExSearchNameMatchFindExSearchLimitToDirectories���FindExSearchLimitToDevices���FindExSearchMaxSearchOp��>t<3_FINDEX_SEARCH_OPS.?AW4_FINDEX_SEARCH_OPS@@���=3��
'
?3

(J
(DllName��
(FunctionName�
RedirectionTarget^B3_REDIRECTION_FUNCTION_DESCRIPTOR.?AU_REDIRECTION_FUNCTION_DESCRIPTOR@@��C3~^b�_FILE_IO_PRIORITY_HINT_INFORMATION.?AU_FILE_IO_PRIORITY_HINT_INFORMATION@@��
^PriorityHint�bF3_FILE_IO_PRIORITY_HINT_INFORMATION.?AU_FILE_IO_PRIORITY_HINT_INFORMATION@@��G3U�6
 RpcProtocolSequence��
 Endpoint�FI3_RPC_PROTSEQ_ENDPOINT.?AU_RPC_PROTSEQ_ENDPOINT@@J3��^�_GET_FILTER_FILE_IDENTIFIER_INPUT.?AU_GET_FILTER_FILE_IDENTIFIER_INPUT@@2
!AltitudeLength���
JAltitude�^M3_GET_FILTER_FILE_IDENTIFIER_INPUT.?AU_GET_FILTER_FILE_IDENTIFIER_INPUT@@N3U�"6�_IMAGE_AUX_SYMBOL.?AT_IMAGE_AUX_SYMBOL@@*
!Linenumber���
!Size�:Q3<anonymous-tag>.?AU<anonymous-tag>@@R3f&
R3LnSz�
"TotalSize2T3<anonymous-tag>.?AT<anonymous-tag>@@U3fB
"PointerToLinenumber��
"PointerToNextFunction:W3<anonymous-tag>.?AU<anonymous-tag>@@X3f
jDimension:Z3<anonymous-tag>.?AU<anonymous-tag>@@[3f!&
X3Function�
[3Array2]3<anonymous-tag>.?AT<anonymous-tag>@@^3fN
"TagIndex�
U3Misc�
^3FcnAry���
!TvIndex��:`3<anonymous-tag>.?AU<anonymous-tag>@@a3f #�
c3Name�:d3<anonymous-tag>.?AU<anonymous-tag>@@e3f'�
"Length���
!NumberOfRelocations��
!NumberOfLinenumbers��
"CheckSum�
Number���
 Selection
 bReserved
HighNumber���:g3<anonymous-tag>.?AU<anonymous-tag>@@h3f* #�*
"crc��
j3rgbReserved��:k3<anonymous-tag>.?AU<anonymous-tag>@@l3f5Z
a3Sym��
e3File�
h3Section��
B$TokenDef�
l3CRC��6n3_IMAGE_AUX_SYMBOL.?AT_IMAGE_AUX_SYMBOL@@o3f
"��
q36�tagRGBTRIPLE.?AUtagRGBTRIPLE@@��>
 rgbtBlue�
 rgbtGreen
 rgbtRed��6t3tagRGBTRIPLE.?AUtagRGBTRIPLE@@��u3Sl
w3
x3N�_MEMORY_SCRUB_INFORMATION.?AU_MEMORY_SCRUB_INFORMATION@@.
Handle���
#PagesScrubbedN{3_MEMORY_SCRUB_INFORMATION.?AU_MEMORY_SCRUB_INFORMATION@@|3��	VPROTOCOL_NOT_LOADED��PROTOCOL_LOADED��PROTOCOL_ADDRESS_CHANGE��Ft~3RPC_ADDRESS_CHANGE_TYPE.?AW4RPC_ADDRESS_CHANGE_TYPE@@�3�P
�:�tagEMRFRAMERGN.?AUtagEMRFRAMERGN@@��v
Pemr��
,rclBounds
"cbRgnData
"ihBrush��
- szlStroke
�(RgnData��:�3,tagEMRFRAMERGN.?AUtagEMRFRAMERGN@@���3S�
�F
lfHeight�
lfWidth��
lfEscapement�
lfOrientation
lfWeight�
 lfItalic�
 lfUnderline��
 lfStrikeOut��
 lfCharSet
 lfOutPrecision���
 lfClipPrecision��
 lfQuality
 lfPitchAndFamily�
G"lfFaceName���2�3<tagLOGFONTA.?AUtagLOGFONTA@@�3S�
r#B�_FILE_REGION_OUTPUT.?AU_FILE_REGION_OUTPUT@@�#�v
"Flags
"TotalRegionEntryCount
"RegionEntryCount�
"Reserved�
�3Region���B�3(_FILE_REGION_OUTPUT.?AU_FILE_REGION_OUTPUT@@�3Up6�_RTL_SRWLOCK.?AU_RTL_SRWLOCK@@��
�3
#��
#��
#��
#��
#<��
�3Locked���
�3Waiting��
�3Waking���
�3MultipleShared���
�3Shared���
#Value
Ptr��6�3_RTL_SRWLOCK.?AU_RTL_SRWLOCK@@���3��n�_SYSTEM_ACTIVITY_MODERATION_USER_SETTINGS.?AU_SYSTEM_ACTIVITY_MODERATION_USER_SETTINGS@@
�3
UserKeyHandlen�3_SYSTEM_ACTIVITY_MODERATION_USER_SETTINGS.?AU_SYSTEM_ACTIVITY_MODERATION_USER_SETTINGS@@�3�0
}.F�_IO_ERROR_LOG_MESSAGE.?AU_IO_ERROR_LOG_MESSAGE@@
�3�
!Type�
!Size�
!DriverNameLength�
~TimeStamp
"DriverNameOffset�
g#EntryDataF�3H_IO_ERROR_LOG_MESSAGE.?AU_IO_ERROR_LOG_MESSAGE@@�3j#DV�_DEFINE_STORAGE_RESERVE_INPUT.?AU_DEFINE_STORAGE_RESERVE_INPUT@@^�_STORAGE_RESERVE_AREA_DEFINITION.?AU_STORAGE_RESERVE_AREA_DEFINITION@@���3#�
"Version��
"Flags
"AreaDefinitionOffset�
"AreaDefinitionCount��
�3AreaDefinition���V�3 _DEFINE_STORAGE_RESERVE_INPUT.?AU_DEFINE_STORAGE_RESERVE_INPUT@@�3U+j�_TOKEN_SECURITY_ATTRIBUTES_INFORMATION.?AU_TOKEN_SECURITY_ATTRIBUTES_INFORMATION@@��
j%
�3pAttributeV1�2�3<anonymous-tag>.?AT<anonymous-tag>@@�3^1Z
!Version��
!Reserved�
"AttributeCount���
�3Attributej�3_TOKEN_SECURITY_ATTRIBUTES_INFORMATION.?AU_TOKEN_SECURITY_ATTRIBUTES_INFORMATION@@���3^"^�_FILE_FS_FULL_SIZE_INFORMATION_EX.?AU_FILE_FS_FULL_SIZE_INFORMATION_EX@@
�3
#ActualTotalAllocationUnits���
#ActualAvailableAllocationUnits���
#ActualPoolUnavailableAllocationUnits�
#CallerTotalAllocationUnits���
# CallerAvailableAllocationUnits���
#(CallerPoolUnavailableAllocationUnits�
#0UsedAllocationUnits��
#8TotalReservedAllocationUnits�
#@VolumeStorageReserveAllocationUnits��
#HAvailableCommittedAllocationUnits
#PPoolAvailableAllocationUnits�
"XSectorsPerAllocationUnit�
"\BytesPerSector���^
�3`_FILE_FS_FULL_SIZE_INFORMATION_EX.?AU_FILE_FS_FULL_SIZE_INFORMATION_EX@@�3U$��_PROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATION.?AU_PROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATION@@��
�3
�.Z
!NumberOfTargets��
!Reserved�
"Reserved2
�3Targets���3_PROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATION.?AU_PROCESS_DYNAMIC_EH_CONTINUATION_TARGETS_INFORMATION@@���3}w
�R�NDR_ALLOC_ALL_NODES_CONTEXT.?AUNDR_ALLOC_ALL_NODES_CONTEXT@@
�3J�NDR_POINTER_QUEUE_STATE.?AUNDR_POINTER_QUEUE_STATE@@
�3
���
�3F�_FULL_PTR_XLAT_TABLES.?AU_FULL_PTR_XLAT_TABLES@@
�3
t��
t��
t��
t��
t��
t��
t��
t��
t��
t	��
t
��
t��
t��
t
��
t��>�IRpcChannelBuffer.?AUIRpcChannelBuffer@@
�3
�(B�_NDR_ASYNC_MESSAGE.?AU_NDR_ASYNC_MESSAGE@@��
�3
s(>�_NDR_PROC_CONTEXT.?AU_NDR_PROC_CONTEXT@@
�3�
�3RpcMsg���
 Buffer���
 BufferStart��
 BufferEnd
  BufferMark���
"(BufferLength�
",MemorySize���
 0Memory���
 8IsClient�
 9Pad��
!:uFlags2��
t<ReuseBuffer��
�3@pAllocAllNodesContext
�3HpPointerQueueState���
tPIgnoreEmbeddedPointers���
 XPointerBufferMark
 `CorrDespIncrement
 auFlags���
!bUniquePtrCount���
#hMaxCount�
"pOffset���
"tActualCount��
�xpfnAllocate��
��pfnFree��
 �StackTop�
 �pPresentedType���
 �pTransmitType
�SavedHandle��
�3�StubDesc�
�3�FullPtrXlatTables
"�FullPtrRefId�
"�PointerLength
�3�fInDontFree��
�3�fDontCallFreeInst
�3�fUnused1�
�3�fHasReturn���
�3�fHasExtensions���
�3�fHasNewCorrDesc��
�3�fIsIn
�3�fIsOut���
�3�fIsOicf��
�3�fBufferValid�
�3�fHasMemoryValidateCallback���
�3�fInFree��
�3�fNeedMCCP
�3�fUnused2�
�3�fUnused3�
"�dwDestContext
�pvDestContext
- �SavedContextHandles��
�ParamNumber��
�3�pRpcChannelBuffer
�3�pArrayInfo���
"�SizePtrCountArray
"�SizePtrOffsetArray���
"SizePtrLengthArray���
pArgQueue
"dwStubPhase��
LowStackMark�
�3 pAsyncMsg
�3(pCorrInfo
 0pCorrMemory��
8pMemoryList��
@pCSInfo��
 HConformanceMark��
 PVarianceMark�
XUnused���
�3`pContext�
hContextHandleHash
ppUserMarshalList�
xReserved51_3�
�Reserved51_4�
�Reserved51_5�BI�3�_MIDL_STUB_MESSAGE.?AU_MIDL_STUB_MESSAGE@@���3�Q
�*tA
�3
�/:�_SE_AUDIT_INFO.?AU_SE_AUDIT_INFO@@��
T"
"Size�
DAuditType
AuditOperation���
"AuditFlags���
�SubsystemName
� ObjectTypeName���
�0ObjectName���
@HandleId�
�HTransactionId
�3POperationId��
 XObjectCreation���
 YGenerateOnClose��:�3`_SE_AUDIT_INFO.?AU_SE_AUDIT_INFO@@���3E&�
�3>�_PATHNAME_BUFFER.?AU_PATHNAME_BUFFER@@��
�3.
"PathNameLength���
JName�>�3_PATHNAME_BUFFER.?AU_PATHNAME_BUFFER@@���3U�6�_PREFIX_TABLE.?AU_PREFIX_TABLE@@
�3
�&N
NodeTypeCode�
NameLength���
�3NextPrefixTree���6�3_PREFIX_TABLE.?AU_PREFIX_TABLE@@�3$b�_FSCTL_QUERY_STORAGE_CLASSES_OUTPUT.?AU_FSCTL_QUERY_STORAGE_CLASSES_OUTPUT@@B�_FILE_STORAGE_TIER.?AU_FILE_STORAGE_TIER@@���3#(�
"Version��
"Size�
"Flags
"TotalNumberOfTiers���
"NumberOfTiersReturned
�3Tiersb�3@_FSCTL_QUERY_STORAGE_CLASSES_OUTPUT.?AU_FSCTL_QUERY_STORAGE_CLASSES_OUTPUT@@�3U8SC_ENUM_PROCESS_INFO�2t�3_SC_ENUM_TYPE.?AW4_SC_ENUM_TYPE@@��3m�^�_ETW_TRACE_PARTITION_INFORMATION.?AU_ETW_TRACE_PARTITION_INFORMATION@@��b
�PartitionId��
�ParentId�
 QpcOffsetFromRoot
"(PartitionType^40_ETW_TRACE_PARTITION_INFORMATION.?AU_ETW_TRACE_PARTITION_INFORMATION@@��4�~
�
LN�_ENABLE_TRACE_PARAMETERS.?AU_ENABLE_TRACE_PARAMETERS@@��
"Version��
"EnableProperty���
"ControlFlags�
�SourceId�
� EnableFilterDesc�
"(FilterDescCount��N40_ENABLE_TRACE_PARAMETERS.?AU_ENABLE_TRACE_PARAMETERS@@��4�
�V�_ETW_UMS_EVENT_CONTEXT_SWITCH.?AU_ETW_UMS_EVENT_CONTEXT_SWITCH@@
4�
8Header���
" ScheduledThreadId
"$SwitchCount��
"(KernelYieldCount�
",MixedYieldCount��
"0YieldCount���V
48_ETW_UMS_EVENT_CONTEXT_SWITCH.?AU_ETW_UMS_EVENT_CONTEXT_SWITCH@@40�R�_ETW_DUPLICATE_HANDLE_EVENT.?AU_ETW_DUPLICATE_HANDLE_EVENT@@�
Object���
"SourceHandle�
"TargetHandle�
"TargetProcessId��
!ObjectType���
"SourceProcessId��R4_ETW_DUPLICATE_HANDLE_EVENT.?AU_ETW_DUPLICATE_HANDLE_EVENT@@40X
B�tagTTPOLYGONHEADER.?AUtagTTPOLYGONHEADER@@��
42�tagPOINTFX.?AUtagPOINTFX@@��:
"cb���
"dwType���
4pfxStart�B4tagTTPOLYGONHEADER.?AUtagTTPOLYGONHEADER@@��4S�

�+B�_RTL_HEAP_TAG_INFO.?AU_RTL_HEAP_TAG_INFO@@��
4V
"NumberOfAllocations��
"NumberOfFrees
#BytesAllocated���B4_RTL_HEAP_TAG_INFO.?AU_RTL_HEAP_TAG_INFO@@��4��b�_PERFINFO_EXECUTIVE_RESOURCE_CONFIG.?AU_PERFINFO_EXECUTIVE_RESOURCE_CONFIG@@j
"ReleaseSamplingRate��
"ContentionSamplingRate���
"NumberOfExcessiveTimeoutsb!4_PERFINFO_EXECUTIVE_RESOURCE_CONFIG.?AU_PERFINFO_EXECUTIVE_RESOURCE_CONFIG@@"40�:�tagPOINTER_INFO.?AUtagPOINTER_INFO@@�
$4pointerInfo��
u`touchFlags���
udtouchMask
�hrcContact
�xrcContactRaw�
u�orientation��
u�pressure�F%4�tagPOINTER_TOUCH_INFO.?AUtagPOINTER_TOUCH_INFO@@&4L�^�_FILE_REMOTE_PROTOCOL_INFORMATION.?AU_FILE_REMOTE_PROTOCOL_INFORMATION@@
-Reserved�:)4 <anonymous-tag>.?AU<anonymous-tag>@@*4Ut
"Capabilities�:,4<anonymous-tag>.?AU<anonymous-tag>@@-4U�n
"Capabilities�
"CachingFlags�
 ShareType
�	Reserved0
"Reserved1:/4<anonymous-tag>.?AU<anonymous-tag>@@04U�&
-4Server���
04Share:24<anonymous-tag>.?AU<anonymous-tag>@@34U�&
34Smb2�
(Reserved�254@<anonymous-tag>.?AT<anonymous-tag>@@64U�
!StructureVersion�
!StructureSize
"Protocol�
!ProtocolMajorVersion�
!
ProtocolMinorVersion�
!ProtocolRevision�
!Reserved�
"Flags
*4GenericReserved��
644ProtocolSpecific�^
84t_FILE_REMOTE_PROTOCOL_INFORMATION.?AU_FILE_REMOTE_PROTOCOL_INFORMATION@@94Ub^�_PERFINFO_PO_SESSION_CALLOUT_RET.?AU_PERFINFO_PO_SESSION_CALLOUT_RET@@��
Status���^<4_PERFINFO_PO_SESSION_CALLOUT_RET.?AU_PERFINFO_PO_SESSION_CALLOUT_RET@@��=40�
%
�R�_PERFINFO_CC_FLUSH_SECTION.?AU_PERFINFO_CC_FLUSH_SECTION@@��r
#WorkItemKey��
#FileObjectKey
#Offset���
"Length���
"MmFlushFlags�RB4 _PERFINFO_CC_FLUSH_SECTION.?AU_PERFINFO_CC_FLUSH_SECTION@@��C40�f�_REFS_DEALLOCATE_RANGES_INPUT_BUFFER.?AU_REFS_DEALLOCATE_RANGES_INPUT_BUFFER@@��
E4�,#�.
"RangeCount���
G4Ranges���fH4_REFS_DEALLOCATE_RANGES_INPUT_BUFFER.?AU_REFS_DEALLOCATE_RANGES_INPUT_BUFFER@@��I4U�*
b,R�_FILE_TRACKING_INFORMATION.?AU_FILE_TRACKING_INFORMATION@@��^
DestinationFile��
"ObjectInformationLength��
�ObjectInformationRM4_FILE_TRACKING_INFORMATION.?AU_FILE_TRACKING_INFORMATION@@��N4U7N�_EVENT_FILTER_EVENT_NAME.?AU_EVENT_FILTER_EVENT_NAME@@��
#MatchAnyKeyword��
#MatchAllKeyword��
 Level
 FilterIn�
!NameCount
�NamesNQ4_EVENT_FILTER_EVENT_NAME.?AU_EVENT_FILTER_EVENT_NAME@@��R4zV�_PROCESS_SESSION_INFORMATION.?AU_PROCESS_SESSION_INFORMATION@@��
"SessionIdVU4_PROCESS_SESSION_INFORMATION.?AU_PROCESS_SESSION_INFORMATION@@��V4}:R�_IMAGE_BOUND_FORWARDER_REF.?AU_IMAGE_BOUND_FORWARDER_REF@@��J
"TimeDateStamp
!OffsetModuleName�
!Reserved�RY4_IMAGE_BOUND_FORWARDER_REF.?AU_IMAGE_BOUND_FORWARDER_REF@@��Z4fZ�_PERFINFO_CC_LOGGED_STREAM_INFO.?AU_PERFINFO_CC_LOGGED_STREAM_INFO@@�
#FileObjectKey
"ReasonForFlush���
"PagesToWrite�
#DirtyLoggedPages�
#DirtyLoggedPageThreshold�
~ LargestLsnForLWS�Z]4(_PERFINFO_CC_LOGGED_STREAM_INFO.?AU_PERFINFO_CC_LOGGED_STREAM_INFO@@^40�
�1>�tagEMRPIXELFORMAT.?AUtagEMRPIXELFORMAT@@"
Pemr��
�/pfd��>b40tagEMRPIXELFORMAT.?AUtagEMRPIXELFORMAT@@c4S�B�CORRELATION_VECTOR.?AUCORRELATION_VECTOR@@��
e4p#��*
pVersion��
g4Vector���Bh4�CORRELATION_VECTOR.?AUCORRELATION_VECTOR@@��i4$�%
�*Z�_ETW_LAST_DROPPED_EVENT_STRUCT.?AU_ETW_LAST_DROPPED_EVENT_STRUCT@@��6
"Count
"Padding��
Z1TimesZm4_ETW_LAST_DROPPED_EVENT_STRUCT.?AU_ETW_LAST_DROPPED_EVENT_STRUCT@@��n4�
v.f�_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A@@��
&

r4TransportCredentials�
"Flags
"AuthenticationTarget�
"NumberOfAuthnSchemes�
"AuthnSchemes�
  ServerCertificateSubject�
r4(ProxyCredentials�
"0NumberOfProxyAuthnSchemes
"8ProxyAuthnSchemesf	s4@_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A@@��t4�R�_HEAP_EXTENDED_INFORMATION.?AU_HEAP_EXTENDED_INFORMATION@@��J�_HEAP_INFORMATION_ITEM.?AU_HEAP_INFORMATION_ITEM@@��
w4x4y4
z4>�_HEAP_INFORMATION.?AU_HEAP_INFORMATION@@�
Process��
#Heap�
"Level
{4CallbackRoutine��
 CallbackContext��
##(ProcessHeapInformation���
|4(HeapInformation��R}4X_HEAP_EXTENDED_INFORMATION.?AU_HEAP_EXTENDED_INFORMATION@@��~4�X
4J�_VIRTUALIZATION_RECORD.?AU_VIRTUALIZATION_RECORD@@��b
 VbsEnabled���
 HvciEnabled��
 HyperVisorEnabled
 Reserved�J�4_VIRTUALIZATION_RECORD.?AU_VIRTUALIZATION_RECORD@@���40�
	%
I.�
r4TransportCredentials�
"Flags
"AuthenticationTarget�
"NumberOfAuthnSchemes�
"AuthnSchemes�
  ServerCertificateSubject�^�4(_RPC_HTTP_TRANSPORT_CREDENTIALS_A.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_A@@�4�
�!b�_MANAGE_WRITES_TO_EXECUTABLE_MEMORY.?AU_MANAGE_WRITES_TO_EXECUTABLE_MEMORY@@
�4
"��
"��
"	��
"
��
�4Version��
�4ProcessEnableWriteExceptions�
�4ThreadAllowWrites
�4Spare
KernelWriteToExecutableSignalb�4_MANAGE_WRITES_TO_EXECUTABLE_MEMORY.?AU_MANAGE_WRITES_TO_EXECUTABLE_MEMORY@@�4b�
�*�_TP_JOB.?AU_TP_JOB@@&�HKL__.?AUHKL__@@
�4
�4
tunused���&�4HKL__.?AUHKL__@@�4y'n�_RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY.?AU_RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY@@
�4
�BlockDynamicCode�n�4_RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY.?AU_RTL_IMAGE_MITIGATION_DYNAMIC_CODE_POLICY@@�4�fZ�_SYSTEM_DEVICE_DATA_INFORMATION.?AU_SYSTEM_DEVICE_DATA_INFORMATION@@r
�DeviceId�
�DataName�
" DataType�
"$DataBufferLength�
(DataBuffer���Z�40_SYSTEM_DEVICE_DATA_INFORMATION.?AU_SYSTEM_DEVICE_DATA_INFORMATION@@�4�nr�_STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY@@��
�4z
"EntryLength��
"DependencyTypeFlags��
"ProviderSpecificFlags
�VirtualStorageType���r�4 _STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY@@���4UC>�tagDRAWTEXTPARAMS.?AUtagDRAWTEXTPARAMS@@
�4v
ucbSize���
tiTabLength���
tiLeftMargin��
tiRightMargin�
uuiLengthDrawn>�4tagDRAWTEXTPARAMS.?AUtagDRAWTEXTPARAMS@@�4L�
H
tunused���.�4HBITMAP__.?AUHBITMAP__@@�4AIZ�_FILE_MAILSLOT_SET_INFORMATION.?AU_FILE_MAILSLOT_SET_INFORMATION@@��
KReadTimeout��Z�4_FILE_MAILSLOT_SET_INFORMATION.?AU_FILE_MAILSLOT_SET_INFORMATION@@���4UmJ�_GENERATE_NAME_CONTEXT.?AU_GENERATE_NAME_CONTEXT@@��q#�
!Checksum�
 ChecksumInserted�
 NameLength���
�4NameBuffer���
"ExtensionLength��
�ExtensionBuffer��
" LastIndexValue���J�4$_GENERATE_NAME_CONTEXT.?AU_GENERATE_NAME_CONTEXT@@���4$�
+N�_ETW_CREATE_HANDLE_EVENT.?AU_ETW_CREATE_HANDLE_EVENT@@��B
Object���
"Handle���
!ObjectType���N�4_ETW_CREATE_HANDLE_EVENT.?AU_ETW_CREATE_HANDLE_EVENT@@���40M
B�tagBITMAPFILEHEADER.?AUtagBITMAPFILEHEADER@@n
!bfType���
"bfSize���
!bfReserved1��
!bfReserved2��
"
bfOffBitsB�4tagBITMAPFILEHEADER.?AUtagBITMAPFILEHEADER@@�4S�b�_TXFS_LIST_TRANSACTION_LOCKED_FILES.?AU_TXFS_LIST_TRANSACTION_LOCKED_FILES@@j
�KtmTransaction���
#NumberOfFiles
#BufferSizeRequired���
# Offset���b�4(_TXFS_LIST_TRANSACTION_LOCKED_FILES.?AU_TXFS_LIST_TRANSACTION_LOCKED_FILES@@�4U	
{V�_CM_FULL_RESOURCE_DESCRIPTOR.?AU_CM_FULL_RESOURCE_DESCRIPTOR@@��N
�InterfaceType
"BusNumber
�+PartialResourceList��V�4$_CM_FULL_RESOURCE_DESCRIPTOR.?AU_CM_FULL_RESOURCE_DESCRIPTOR@@���4�mn�_SYSTEM_VERIFIER_CANCELLATION_INFORMATION.?AU_SYSTEM_VERIFIER_CANCELLATION_INFORMATION@@t#�
"CancelProbability
"CancelThreshold��
"CompletionThreshold��
"CancellationVerifierDisabled�
"AvailableIssues��
�4Issues���n�4_SYSTEM_VERIFIER_CANCELLATION_INFORMATION.?AU_SYSTEM_VERIFIER_CANCELLATION_INFORMATION@@�4��	
�TypeId���6�4_WNF_TYPE_ID.?AU_WNF_TYPE_ID@@���4��V�_SERVERSILO_BASIC_INFORMATION.?AU_SERVERSILO_BASIC_INFORMATION@@�
"ServiceSessionId�
AState
ExitStatus���
 IsDownlevelContainer�
ApiSetSchema�
HostApiSetSchema�V�4 _SERVERSILO_BASIC_INFORMATION.?AU_SERVERSILO_BASIC_INFORMATION@@�4}�b�_TRANSACTIONMANAGER_LOG_INFORMATION.?AU_TRANSACTIONMANAGER_LOG_INFORMATION@@
�LogIdentity��b�4_TRANSACTIONMANAGER_LOG_INFORMATION.?AU_TRANSACTIONMANAGER_LOG_INFORMATION@@�4��
�
"��
"��
"��
"��
"��
"Flags
�4SmtBranchTargetIsolation�
�4IsolateSecurityDomain
�4DisablePageCombine���
�4SpeculativeStoreBypassDisable
�4ReservedFlags~�4_PROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICY.?AU_PROCESS_MITIGATION_SIDE_CHANNEL_ISOLATION_POLICY@@�4}�>�_SERVICE_NOTIFY_1.?AU_SERVICE_NOTIFY_1@@~
"dwVersion
�pfnNotifyCallback
pContext�
"dwNotificationStatus�
IServiceStatus>�4@_SERVICE_NOTIFY_1.?AU_SERVICE_NOTIFY_1@@�4m�6�tagWNDCLASSA.?AUtagWNDCLASSA@@��
�4�
ustyle
;%lpfnWndProc��
tcbClsExtra���
tcbWndExtra���
�hInstance
<% hIcon
�#(hCursor��
+!0hbrBackground
q8lpszMenuName�
q@lpszClassName6
�4HtagWNDCLASSA.?AUtagWNDCLASSA@@���4L
�:�tagWNDCLASSEXW.?AUtagWNDCLASSEXW@@��
�4
ucbSize���
ustyle
;%lpfnWndProc��
tcbClsExtra���
tcbWndExtra���
�hInstance
<% hIcon
�#(hCursor��
+!0hbrBackground
�8lpszMenuName�
�@lpszClassName
<%HhIconSm��:�4PtagWNDCLASSEXW.?AUtagWNDCLASSEXW@@���4L�:�_HARDERROR_MSG.?AU_HARDERROR_MSG@@���
7h
(Status���
~0ErrorTime
"8ValidResponseOptions�
"<Response�
"@NumberOfParameters���
"DUnicodeStringParameterMask���
�HParameters���:�4p_HARDERROR_MSG.?AU_HARDERROR_MSG@@���4��V�_RTL_USER_PROCESS_PARAMETERS.?AU_RTL_USER_PROCESS_PARAMETERS@@��L"#��
"MaximumLength
"Length���
"Flags
"DebugFlags���
ConsoleHandle
"ConsoleFlags�
 StandardInput
(StandardOutput���
0StandardError
�/8CurrentDirectory�
�PDllPath��
�`ImagePathName
�pCommandLine��
�Environment��
"�StartingX
"�StartingY
"�CountX���
"�CountY���
"�CountCharsX��
"�CountCharsY��
"�FillAttribute
"�WindowFlags��
"�ShowWindowFlags��
��WindowTitle��
��DesktopInfo��
��ShellInfo
��RuntimeData��
�4�CurrentDirectores
#�EnvironmentSize��
#�EnvironmentVersion���
PackageDependencyData
"ProcessGroupId���
"LoaderThreads
�RedirectionDllName���
� HeapPartitionName
#0DefaultThreadpoolCpuSetMasks�
"8DefaultThreadpoolCpuSetMaskCount�
"<DefaultThreadpoolThreadMaximum���V&�4@_RTL_USER_PROCESS_PARAMETERS.?AU_RTL_USER_PROCESS_PARAMETERS@@���4k>�_PROCESSOR_RECORD.?AU_PROCESSOR_RECORD@@
�4�
"Index
"FeatureSet���
"ProcessorSpeed���
�ProcessorName
r$�ProcessorIdentifier��
��VendorIdentifier�>5�_PROCESSOR_RECORD.?AU_PROCESSOR_RECORD@@50�
B�_RTL_PROCESS_LOCKS.?AU_RTL_PROCESS_LOCKS@@��
5V�_RTL_PROCESS_LOCK_INFORMATION.?AU_RTL_PROCESS_LOCK_INFORMATION@@5#0�*
"NumberOfLocks
5LocksB	58_RTL_PROCESS_LOCKS.?AU_RTL_PROCESS_LOCKS@@��
5��b�_FILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER.?AU_FILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER@@
"EventTypes���b
5_FILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER.?AU_FILE_PIPE_EVENT_ENUM_OUTPUT_BUFFER@@5U�)>�tagMSLLHOOKSTRUCT.?AUtagMSLLHOOKSTRUCT@@^
�pt���
"mouseData
"flags
"time�
#dwExtraInfo��>5 tagMSLLHOOKSTRUCT.?AUtagMSLLHOOKSTRUCT@@5LfN�_CREATE_THREAD_DEBUG_INFO.?AU_CREATE_THREAD_DEBUG_INFO@@
5"w3
5N
hThread��
lpThreadLocalBase
5lpStartAddress���N5_CREATE_THREAD_DEBUG_INFO.?AU_CREATE_THREAD_DEBUG_INFO@@5�5b�_SYSTEM_POWER_STATE_DISABLE_REASON.?AU_SYSTEM_POWER_STATE_DISABLE_REASON@@�� #�R
5AffectedState
"PowerReasonCode��
"PowerReasonLengthb5_SYSTEM_POWER_STATE_DISABLE_REASON.?AU_SYSTEM_POWER_STATE_DISABLE_REASON@@��5F
P/p"t!5
"5VCoverageAllModules���CoverageSearchByHash�CoverageSearchByName�Ft$5_COVERAGE_REQUEST_CODES.?AW4_COVERAGE_REQUEST_CODES@@�%5��
%5
�
�2>�_EISA_MEMORY_TYPE.?AU_EISA_MEMORY_TYPE@@�
*5ConfigurationByte
 DataSize�
!AddressLowWord���
 AddressHighByte��
!MemorySize���R+5_EISA_MEMORY_CONFIGURATION.?AU_EISA_MEMORY_CONFIGURATION@@��,5��R�_CONTAINER_ROOT_INFO_OUTPUT.?AU_CONTAINER_ROOT_INFO_OUTPUT@@
.5>
!ContainerRootIdLength
�ContainerRootId��R05_CONTAINER_ROOT_INFO_OUTPUT.?AU_CONTAINER_ROOT_INFO_OUTPUT@@15U�"
V�_SECURITY_DESCRIPTOR_RELATIVE.?AU_SECURITY_DESCRIPTOR_RELATIVE@@z
 Revision�
 Sbz1�
!Control��
"Owner
"Group
"Sacl�
"Dacl�V55_SECURITY_DESCRIPTOR_RELATIVE.?AU_SECURITY_DESCRIPTOR_RELATIVE@@65E�f�_EVENT_TRACE_SYSTEM_EVENT_INFORMATION.?AU_EVENT_TRACE_SYSTEM_EVENT_INFORMATION@@
85V
EventTraceInformationClass���
#TraceHandle��
�HookId���f:5_EVENT_TRACE_SYSTEM_EVENT_INFORMATION.?AU_EVENT_TRACE_SYSTEM_EVENT_INFORMATION@@;5j�_SYSTEM_SESSION_MAPPED_VIEW_INFORMATION.?AU_SYSTEM_SESSION_MAPPED_VIEW_INFORMATION@@�
#NextEntryOffset��
"SessionId
"ViewFailures�
#NumberOfBytesAvailable���
#NumberOfBytesAvailableContiguous�j>5 _SYSTEM_SESSION_MAPPED_VIEW_INFORMATION.?AU_SYSTEM_SESSION_MAPPED_VIEW_INFORMATION@@?5��
b�_SYSTEM_KERNEL_DEBUGGER_INFORMATION.?AU_SYSTEM_KERNEL_DEBUGGER_INFORMATION@@F
 KernelDebuggerEnabled
 KernelDebuggerNotPresent�bB5_SYSTEM_KERNEL_DEBUGGER_INFORMATION.?AU_SYSTEM_KERNEL_DEBUGGER_INFORMATION@@C5��>�tagMSGBOXPARAMSW.?AUtagMSGBOXPARAMSW@@���
ucbSize���
�hwndOwner
�hInstance
�lpszText�
� lpszCaption��
"(dwStyle��
�0lpszIcon�
#8dwContextHelpId��
�@lpfnMsgBoxCallback���
"HdwLanguageId�>
F5PtagMSGBOXPARAMSW.?AUtagMSGBOXPARAMSW@@��G5L$F�tagCOMPAREITEMSTRUCT.?AUtagCOMPAREITEMSTRUCT@@��
I5�
uCtlType��
uCtlID
�hwndItem�
uitemID1��
#itemData1
u itemID2��
#(itemData2
"0dwLocaleId���FK58tagCOMPAREITEMSTRUCT.?AUtagCOMPAREITEMSTRUCT@@��L5L,
^�_LOOKUP_STREAM_FROM_CLUSTER_INPUT.?AU_LOOKUP_STREAM_FROM_CLUSTER_INPUT@@B
"Flags
"NumberOfClusters�
Z1Cluster��^O5_LOOKUP_STREAM_FROM_CLUSTER_INPUT.?AU_LOOKUP_STREAM_FROM_CLUSTER_INPUT@@P5U��MemoryBasicInformation���MemoryWorkingSetInformation��MemoryMappedFilenameInformation��MemoryRegionInformation��MemoryWorkingSetExInformationMemorySharedCommitInformationMemoryImageInformation���MemoryRegionInformationExMemoryPrivilegedBasicInformation�	MemoryEnclaveImageInformation
MemoryBasicInformationCapped�MemoryPhysicalContiguityInformation��JtR5_MEMORY_INFORMATION_CLASS.?AW4_MEMORY_INFORMATION_CLASS@@�S5y 
hb�_KEY_SET_VIRTUALIZATION_INFORMATION.?AU_KEY_SET_VIRTUALIZATION_INFORMATION@@
V5
"��
"��
"��
"��^
X5VirtualTarget
Y5VirtualStore�
Z5VirtualSource
[5Reserved�b\5_KEY_SET_VIRTUALIZATION_INFORMATION.?AU_KEY_SET_VIRTUALIZATION_INFORMATION@@]5�%B�_TOKEN_USER_CLAIMS.?AU_TOKEN_USER_CLAIMS@@��
_5
UserClaims���Ba5_TOKEN_USER_CLAIMS.?AU_TOKEN_USER_CLAIMS@@��b5E�N�_PERFINFO_MEM_RESET_INFO.?AU_PERFINFO_MEM_RESET_INFO@@��
d5
"��
"��f
BaseAddress��
#SizeInBytes��
f5TypeInfo�
g5Spare
"FlagsNh5_PERFINFO_MEM_RESET_INFO.?AU_PERFINFO_MEM_RESET_INFO@@��i50x
!��_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA.?AU_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA@@��
l5��
m5
��
o5Information��
SectionBase��
"SectionLength
SectionGlobalDataBase
" SectionGlobalDataLength��p5(_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA.?AU_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA@@��q5��Z�_KEY_CONTROL_FLAGS_INFORMATION.?AU_KEY_CONTROL_FLAGS_INFORMATION@@��
s5
"ControlFlags�Zu5_KEY_CONTROL_FLAGS_INFORMATION.?AU_KEY_CONTROL_FLAGS_INFORMATION@@��v5�!N�_SYSTEM_NUMA_INFORMATION.?AU_SYSTEM_NUMA_INFORMATION@@���#�##�##�
"HighestNodeNumber
"Reserved�
y5ActiveProcessorsGroupAffinity
z5AvailableMemory��
{5Pad��N|5_SYSTEM_NUMA_INFORMATION.?AU_SYSTEM_NUMA_INFORMATION@@��}5�:V�_FILE_ID_BOTH_DIR_INFORMATION.?AU_FILE_ID_BOTH_DIR_INFORMATION@@
5j
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
pDShortNameLength��
IFShortName
~`FileId���
JhFileName�V�5p_FILE_ID_BOTH_DIR_INFORMATION.?AU_FILE_ID_BOTH_DIR_INFORMATION@@�5U
�,V�_TRANSACTION_BIND_INFORMATION.?AU_TRANSACTION_BIND_INFORMATION@@
TmHandle�V�5_TRANSACTION_BIND_INFORMATION.?AU_TRANSACTION_BIND_INFORMATION@@�5�
�b�_SYSTEM_EXTENDED_THREAD_INFORMATION.?AU_SYSTEM_EXTENDED_THREAD_INFORMATION@@R�_SYSTEM_THREAD_INFORMATION.?AU_SYSTEM_THREAD_INFORMATION@@��
�5ThreadInfo���
PStackBase
XStackLimit���
`Win32StartAddress
hTebBase��
#pReserved2
#xReserved3
#�Reserved4b�5�_SYSTEM_EXTENDED_THREAD_INFORMATION.?AU_SYSTEM_EXTENDED_THREAD_INFORMATION@@�5�UV�_QUERY_STORAGE_RESERVE_OUTPUT.?AU_QUERY_STORAGE_RESERVE_OUTPUT@@R�_STORAGE_RESERVE_AREA_INFO.?AU_STORAGE_RESERVE_AREA_INFO@@���5#�B
"Version��
"AreaInfoCount
�5AreaInfo�V�5 _QUERY_STORAGE_RESERVE_OUTPUT.?AU_QUERY_STORAGE_RESERVE_OUTPUT@@�5U+N�HSYNTHETICPOINTERDEVICE__.?AUHSYNTHETICPOINTERDEVICE__@@
tunused���N�5HSYNTHETICPOINTERDEVICE__.?AUHSYNTHETICPOINTERDEVICE__@@�5L�^�_ETW_COVERAGE_SAMPLER_BLOOM_INFO.?AU_ETW_COVERAGE_SAMPLER_BLOOM_INFO@@��
�5&
�Common���
�$Bloom^�5(_ETW_COVERAGE_SAMPLER_BLOOM_INFO.?AU_ETW_COVERAGE_SAMPLER_BLOOM_INFO@@���5#J�_CI_LOG_SCHEDULER_SLEEP.?AU_CI_LOG_SCHEDULER_SLEEP@@
�Header���J�50_CI_LOG_SCHEDULER_SLEEP.?AU_CI_LOG_SCHEDULER_SLEEP@@�50U^�_WMI_EXTENDED_THREAD_INFORMATION.?AU_WMI_EXTENDED_THREAD_INFORMATION@@��j
"ProcessId
"ThreadId�
StackBase
StackLimit���
UserStackBase
 UserStackLimit���
(StartAddr
#(Affinity�
0Win32StartAddr���
8TebBase��
"@SubProcessTag
pDBasePriority�
 EPagePriority�
 FIoPriority���
 GFlags
JHThreadName���^�5P_WMI_EXTENDED_THREAD_INFORMATION.?AU_WMI_EXTENDED_THREAD_INFORMATION@@���50j�_SYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1.?AU_SYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1@@
�56
�BootIdentifier���
�FirmwareType�j�5_SYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1.?AU_SYSTEM_BOOT_ENVIRONMENT_INFORMATION_V1@@�5�
7-
�Data�:�5_WNF_STATE_NAME.?AU_WNF_STATE_NAME@@�5�
 4Z�_ETW_CLOCK_CONFIGURATION_EVENT.?AU_ETW_CLOCK_CONFIGURATION_EVENT@@��F
"KnownType
"Capabilities�
�0DisableReasonZ�5_ETW_CLOCK_CONFIGURATION_EVENT.?AU_ETW_CLOCK_CONFIGURATION_EVENT@@���50

���5f�_PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA.?AU_PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA@@��V
�ServiceName��
qDeviceInstance���
"DeviceInstanceLength�f�5 _PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA.?AU_PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA@@���5�!
$B�_WMI_PNP_RECORD_V4.?AU_WMI_PNP_RECORD_V4@@��
�5b
�ClassGuid
"UpperFilterCount�
"LowerFilterCount�
JStrings��B�5_WMI_PNP_RECORD_V4.?AU_WMI_PNP_RECORD_V4@@���50��DriverType���FileSystemType���Win32ServiceOwnProcess��� Win32ServiceShareProcess�AdapterType��RecognizerType���Bt�5_CM_SERVICE_NODE_TYPE.?AW4_CM_SERVICE_NODE_TYPE@@��5�v
�
#�5
�5bSC_EVENT_DATABASE_CHANGE�SC_EVENT_PROPERTY_CHANGE�SC_EVENT_STATUS_CHANGE���6t�5_SC_EVENT_TYPE.?AW4_SC_EVENT_TYPE@@����5m�
�5�5
TR�_DUPLICATE_EXTENTS_DATA_EX.?AU_DUPLICATE_EXTENTS_DATA_EX@@��
#Size�
FileHandle���
~SourceFileOffset�
~TargetFileOffset�
~ ByteCount
"(FlagsR�50_DUPLICATE_EXTENTS_DATA_EX.?AU_DUPLICATE_EXTENTS_DATA_EX@@���5Ur N�_SCRUB_PARITY_EXTENT_DATA.?AU_SCRUB_PARITY_EXTENT_DATA@@F�_SCRUB_PARITY_EXTENT.?AU_SCRUB_PARITY_EXTENT@@���5#�
!Size�
!Flags
!NumberOfParityExtents
!MaximumNumberOfParityExtents�
�5ParityExtentsN�5_SCRUB_PARITY_EXTENT_DATA.?AU_SCRUB_PARITY_EXTENT_DATA@@�5U'�
#Address��
"Mode�
#ReserveSize��
#CommitSize���
# FirstRegionInformationOffset�
#(NextHeapInformationOffset>�50_HEAP_INFORMATION.?AU_HEAP_INFORMATION@@�5��
$"
s/J�_FILE_NAMES_INFORMATION.?AU_FILE_NAMES_INFORMATION@@
�5b
"NextEntryOffset��
"FileIndex
"FileNameLength���
JFileName�J�5_FILE_NAMES_INFORMATION.?AU_FILE_NAMES_INFORMATION@@�5U$:�_MUILANGCFGLIST.?AU_MUILANGCFGLIST@@:�_MUILANGCFGNODE.?AU_MUILANGCFGNODE@@
�5f
uTotalSize
!NumLanguages�
!MaxNumLanguages��
�5LanguageConfigs��:�5_MUILANGCFGLIST.?AU_MUILANGCFGLIST@@�5�Kj�_JOURNAL_SET_KEY_USER_FLAGS_INFORMATION.?AU_JOURNAL_SET_KEY_USER_FLAGS_INFORMATION@@
�5�
yAction���
#RecordNumber�
~TimeStamp
�KeyPathName��
"(OldFlags�
",NewFlags�j�50_JOURNAL_SET_KEY_USER_FLAGS_INFORMATION.?AU_JOURNAL_SET_KEY_USER_FLAGS_INFORMATION@@�5z�F�_FILE_OBJECTID_BUFFER.?AU_FILE_OBJECTID_BUFFER@@ #0�r
.ObjectId�
.BirthVolumeId
. BirthObjectId
.0DomainId�
�5ExtendedInfo�F�5@_FILE_OBJECTID_BUFFER.?AU_FILE_OBJECTID_BUFFER@@�5U~B�_MESSAGE_TRACE_USER.?AU_MESSAGE_TRACE_USER@@
�5F�_MESSAGE_TRACE_HEADER.?AU_MESSAGE_TRACE_HEADER@@n
�5MessageHeader
�MessageGuid��
"MessageFlags�
"DataSize�
# Data�B�5(_MESSAGE_TRACE_USER.?AU_MESSAGE_TRACE_USER@@�50�Z�DISPLAYCONFIG_PATH_SOURCE_INFO.?AUDISPLAYCONFIG_PATH_SOURCE_INFO@@��
u��
u��
TadapterId
uid���
umodeInfoIdx��
�5cloneGroupId�
�5sourceModeInfoIdx
ustatusFlags��Z�5DISPLAYCONFIG_PATH_SOURCE_INFO.?AUDISPLAYCONFIG_PATH_SOURCE_INFO@@���5S�:�tagTITLEBARINFO.?AUtagTITLEBARINFO@@B
"cbSize���
�rcTitleBar���
zrgstate��:�5,tagTITLEBARINFO.?AUtagTITLEBARINFO@@6L9R�_EVENTLOG_FULL_INFORMATION.?AU_EVENTLOG_FULL_INFORMATION@@��
6
"dwFull���R6_EVENTLOG_FULL_INFORMATION.?AU_EVENTLOG_FULL_INFORMATION@@��6<�B�PPM_WMI_PERF_STATES.?AUPPM_WMI_PERF_STATES@@
6B�PPM_WMI_PERF_STATE.?AUPPM_WMI_PERF_STATE@@��	6#@��
"Count
"MaxFrequency�
"CurrentState�
"MaxPerfState�
"MinPerfState�
"LowestPerfState��
"ThermalConstraint
 BusyAdjThreshold�
 PolicyType���
 Type�
 Reserved�
" TimerInterval
#(TargetProcessors�
"0PStateHandler
"4PStateContext
"8TStateHandler
"<TStateContext
"@FeedbackHandler��
"DReserved1
#HReserved2

6PStateB6�PPM_WMI_PERF_STATES.?AUPPM_WMI_PERF_STATES@@6F�	^�_LEARNING_MODE_OBJECT_INFORMATION.?AU_LEARNING_MODE_OBJECT_INFORMATION@@�
ListEntry
�LogLevel�
8ObjectType���
8ObjectName���
 RootDirectory
�(FullObjectName���^68_LEARNING_MODE_OBJECT_INFORMATION.?AU_LEARNING_MODE_OBJECT_INFORMATION@@6^�
�B�tagEMRSELECTOBJECT.?AUtagEMRSELECTOBJECT@@��
6&
Pemr��
"ihObject�B6tagEMRSELECTOBJECT.?AUtagEMRSELECTOBJECT@@��6S�
�N�_EVENT_BASIC_INFORMATION.?AU_EVENT_BASIC_INFORMATION@@��.
�*EventType
EventState���N6_EVENT_BASIC_INFORMATION.?AU_EVENT_BASIC_INFORMATION@@��6�iB�tagWINDOWPLACEMENT.?AUtagWINDOWPLACEMENT@@��
ulength���
uflags
ushowCmd��
�ptMinPosition
�ptMaxPosition
�rcNormalPosition�B6,tagWINDOWPLACEMENT.?AUtagWINDOWPLACEMENT@@��6L�F�_EXCEPTION_DEBUG_INFO.?AU_EXCEPTION_DEBUG_INFO@@6
�ExceptionRecord��
"�dwFirstChanceF"6�_EXCEPTION_DEBUG_INFO.?AU_EXCEPTION_DEBUG_INFO@@#6�0RIgnoreError��NormalError��SevereError��CriticalErrorFt%6_CM_ERROR_CONTROL_TYPE.?AW4_CM_ERROR_CONTROL_TYPE@@���&6��
tunused���&(6HDC__.?AUHDC__@@)6AP
qf�_EVENT_TRACE_TIME_PROFILE_INFORMATION.?AU_EVENT_TRACE_TIME_PROFILE_INFORMATION@@
,6F
EventTraceInformationClass���
"ProfileInterval��f.6_EVENT_TRACE_TIME_PROFILE_INFORMATION.?AU_EVENT_TRACE_TIME_PROFILE_INFORMATION@@/6�^�_PROCESS_HANDLE_TRACING_ENABLE_EX.?AU_PROCESS_HANDLE_TRACING_ENABLE_EX@@*
"Flags
"TotalSlots���^26_PROCESS_HANDLE_TRACING_ENABLE_EX.?AU_PROCESS_HANDLE_TRACING_ENABLE_EX@@36}B2�_CONTEXT_EX.?AU_CONTEXT_EX@@
56:
V'All��
V'Legacy���
V'XState���276_CONTEXT_EX.?AU_CONTEXT_EX@@86`
�b�_SYSTEM_SESSION_POOLTAG_INFORMATION.?AU_SYSTEM_SESSION_POOLTAG_INFORMATION@@� #(�V
#NextEntryOffset��
"SessionId
"Count
<6TagInfo��b=68_SYSTEM_SESSION_POOLTAG_INFORMATION.?AU_SYSTEM_SESSION_POOLTAG_INFORMATION@@>6��
J�_PROCESSOR_POWER_POLICY.?AU_PROCESSOR_POWER_POLICY@@
"��
"���-#<�
"Revision�
 DynamicThrottle��
�Spare
A6DisableCStates���
B6Reserved�
"PolicyCount��
C6Policy���JD6L_PROCESSOR_POWER_POLICY.?AU_PROCESSOR_POWER_POLICY@@E6Fj
0F�tagCBTACTIVATESTRUCT.?AUtagCBTACTIVATESTRUCT@@��
H6.
tfMouse���
�hWndActive���FJ6tagCBTACTIVATESTRUCT.?AUtagCBTACTIVATESTRUCT@@��K6Lm
�1J�_IMAGE_OPTIONAL_HEADER.?AU_IMAGE_OPTIONAL_HEADER@@��
N6f
!Magic
 MajorLinkerVersion���
 MinorLinkerVersion���
"SizeOfCode���
"SizeOfInitializedData
"SizeOfUninitializedData��
"AddressOfEntryPoint��
"BaseOfCode���
"BaseOfData���
"ImageBase
" SectionAlignment�
"$FileAlignment
!(MajorOperatingSystemVersion��
!*MinorOperatingSystemVersion��
!,MajorImageVersion
!.MinorImageVersion
!0MajorSubsystemVersion
!2MinorSubsystemVersion
"4Win32VersionValue
"8SizeOfImage��
"<SizeOfHeaders
"@CheckSum�
!DSubsystem
!FDllCharacteristics���
"HSizeOfStackReserve���
"LSizeOfStackCommit
"PSizeOfHeapReserve
"TSizeOfHeapCommit�
"XLoaderFlags��
"\NumberOfRvaAndSizes��
1`DataDirectoryJP6�_IMAGE_OPTIONAL_HEADER.?AU_IMAGE_OPTIONAL_HEADER@@��Q6fJ�_SYSTEM_PREFETCH_STATS.?AU_SYSTEM_PREFETCH_STATS@@��
"DemandFilePageCount��
"DemandFileIOCount
"TrickleFilePageCount�
"TrickleFileIOCount���
"DemandPrivatePageCount���
"DemandPrivateIOCount�
"TricklePrivatePageCount��
"TricklePrivateIOCountJT6 _SYSTEM_PREFETCH_STATS.?AU_SYSTEM_PREFETCH_STATS@@��U6��
�b�_PERFINFO_PO_NOTIFY_DEVICE_COMPLETE.?AU_PERFINFO_PO_NOTIFY_DEVICE_COMPLETE@@
X6&
Irp��
Status���bZ6_PERFINFO_PO_NOTIFY_DEVICE_COMPLETE.?AU_PERFINFO_PO_NOTIFY_DEVICE_COMPLETE@@[60�
/.
"CheckSum�
"TimeDateStampF^6_HOT_PATCH_IMAGE_INFO.?AU_HOT_PATCH_IMAGE_INFO@@_6BE
`+�
"dwScope��
"dwType���
"dwDisplayType
"dwUsage��
qlpLocalName��
qlpRemoteName�
q lpComment
q(lpProvider���6b60_NETRESOURCEW.?AU_NETRESOURCEW@@c6onf�_SYSTEM_DMA_GUARD_POLICY_INFORMATION.?AU_SYSTEM_DMA_GUARD_POLICY_INFORMATION@@��
e6"
 DmaGuardPolicyEnabledfg6_SYSTEM_DMA_GUARD_POLICY_INFORMATION.?AU_SYSTEM_DMA_GUARD_POLICY_INFORMATION@@��h6�>j�_SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA.?AU_SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA@@��
 >
k6ProcessorProfileControlArea��
 Allocate�jl6_SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA.?AU_SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA@@��m6��&
PID��
�KeyName��6o6KEY_PID_ARRAY.?AUKEY_PID_ARRAY@@p6zoJ�_POWER_SESSION_WINLOGON.?AU_POWER_SESSION_WINLOGON@@>
"SessionId
 Console��
 Locked���Js6_POWER_SESSION_WINLOGON.?AU_POWER_SESSION_WINLOGON@@t6F�=(
v6
pty6
z6>�_SECTIONBASICINFO.?AU_SECTIONBASICINFO@@R
BaseAddress��
"AllocationAttributes�
~MaximumSize��>}6_SECTIONBASICINFO.?AU_SECTIONBASICINFO@@~6Bi>�_SCRUB_DATA_INPUT.?AU_SCRUB_DATA_INPUT@@"#d� #0�z
"Size�
"Flags
"MaximumIos���
�ObjectId�
�6Reserved�
�6�ResumeContext>�6�_SCRUB_DATA_INPUT.?AU_SCRUB_DATA_INPUT@@�6U�&
�'ZPT_POINTER���PT_TOUCH�PT_PEN���PT_MOUSE�PT_TOUCHPAD��Bt�6tagPOINTER_INPUT_TYPE.?AW4tagPOINTER_INPUT_TYPE@@��6Lxj�_HEAP_PERFORMANCE_COUNTERS_INFORMATION.?AU_HEAP_PERFORMANCE_COUNTERS_INFORMATION@@��
�6v�_SEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION.?AU_SEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION@@�
"Size�
"Version��
"HeapIndex
"LastHeapIndex
#BaseAddress��
#ReserveSize��
# CommitSize���
"(SegmentCount�
#0LargeUCRMemory���
"8UCRLength
#@AllocatedSpace���
#HFreeSpace
"PFreeListLength���
"TContention���
"XVirtualBlocks
"\CommitRate���
"`DecommitRate�
�6hSegmentHeapPerfInformation���j�6�_HEAP_PERFORMANCE_COUNTERS_INFORMATION.?AU_HEAP_PERFORMANCE_COUNTERS_INFORMATION@@���6� 
H'"-#�n
#NextOffset���
#NumSDEntriesReturned�
#NumSDBytesReturned���
�6SDEntry��B�60_SD_ENUM_SDS_OUTPUT.?AU_SD_ENUM_SDS_OUTPUT@@�6U@j�DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS.?AUDISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS@@��
u��
u��
u��
u��~
�6friendlyNameFromEdid�
�6friendlyNameForced���
�6edidIdsValid�
�6reserved�
uvaluej�6DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS.?AUDISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS@@���6S�
XF�_PROCESS_ACCESS_TOKEN.?AU_PROCESS_ACCESS_TOKEN@@&
Token
Thread���F�6_PROCESS_ACCESS_TOKEN.?AU_PROCESS_ACCESS_TOKEN@@�6}�f�_SYSTEM_ELAM_CERTIFICATE_INFORMATION.?AU_SYSTEM_ELAM_CERTIFICATE_INFORMATION@@��
�6
ElamDriverFile���f�6_SYSTEM_ELAM_CERTIFICATE_INFORMATION.?AU_SYSTEM_ELAM_CERTIFICATE_INFORMATION@@���6�'
i
^$�FixedWakeSourcePowerButton���FixedWakeSourceSleepButton���FixedWakeSourceRtc���FixedWakeSourceDozeToHibernate���Jt�6PO_FIXED_WAKE_SOURCE_TYPE.?AW4PO_FIXED_WAKE_SOURCE_TYPE@@��6F
^
"RecordLength�
!MajorVersion�
!MinorVersion�
#FileReferenceNumber��
#ParentFileReferenceNumber
Usn��
~ TimeStamp
"(Reason���
",SourceInfo���
"0SecurityId���
"4FileAttributes���
!8FileNameLength���
!:FileNameOffset���
J<FileName�6�6@USN_RECORD_V2.?AUUSN_RECORD_V2@@�6Us6�_TOKEN_SOURCE.?AU_TOKEN_SOURCE@@
�6p#�6
�6SourceName���
TSourceIdentifier�6�6_TOKEN_SOURCE.?AU_TOKEN_SOURCE@@�6E�.�_TP_WAIT.?AU_TP_WAIT@@�� ""�6
�6�VirtualStorageBehaviorUndefined��VirtualStorageBehaviorCacheWriteThrough��VirtualStorageBehaviorCacheWriteBack�Vt�6_VIRTUAL_STORAGE_BEHAVIOR_CODE.?AW4_VIRTUAL_STORAGE_BEHAVIOR_CODE@@����6U�!>�_HARDWARE_COUNTER.?AU_HARDWARE_COUNTER@@6
rType�
"Reserved�
#Index>�6_HARDWARE_COUNTER.?AU_HARDWARE_COUNTER@@�6}n�_SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION.?AU_SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION@@��
"��
"��
"��
"��~
"Flags
�6Locked���
�6UnlockApplied
�6UnlockIdValid
�6Reserved�
�UnlockId�n�6$_SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION.?AU_SYSTEM_CODEINTEGRITY_UNLOCK_INFORMATION@@���6��
J�_RPC_SECURITY_QOS_V3_A.?AU_RPC_SECURITY_QOS_V3_A@@��
J.HttpCredentials��2�6<anonymous-tag>.?AT<anonymous-tag>@@�6;�
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
�6u
 Sid��J�6(_RPC_SECURITY_QOS_V3_A.?AU_RPC_SECURITY_QOS_V3_A@@���64f�_FILE_IOSTATUSBLOCK_RANGE_INFORMATION.?AU_FILE_IOSTATUSBLOCK_RANGE_INFORMATION@@
�66
 IoStatusBlockRange���
"Length���f�6_FILE_IOSTATUSBLOCK_RANGE_INFORMATION.?AU_FILE_IOSTATUSBLOCK_RANGE_INFORMATION@@�6U�:�tagEMRSETPIXELV.?AUtagEMRSETPIXELV@@:
Pemr��
�ptlPixel�
"crColor��:�6tagEMRSETPIXELV.?AUtagEMRSETPIXELV@@�6SF�_LOGICAL_DISK_DEFRAG.?AU_LOGICAL_DISK_DEFRAG@@��
#AlignmentClusters
#AvgFreeSpaceSize�
#ClustersPerSlab��
#FragmentedDirectoryExtents���
# FragmentedExtents
#(FreeSpaceCount���
#0LargestFreeSpaceSize�
#8LastRunActualPurgeClusters���
#@LastRunClustersTrimmed���
#HLastRunFullDefragTime
#PLastRunTime��
#XMFTSize��
#`TotalClusters
#hTotalUsedClusters
"pAvgFragmentsPerFile��
"tBytesPerCluster��
"xDirectoryCount���
"|FragmentedDirectories
"�FragmentedFiles��
"�FragmentedSpace��
"�HardwareIssue
"�InUseMFTRecords��
"�InUseSlabs���
"�LastRunActualPurgeSlabs��
"�LastRunInitialBackedSlabs
"�LastRunPercentFragmentation��
"�LastRunPinnedSlabs���
"�LastRunPotentialPurgeSlabs���
"�LastRunSpaceInefficientSlabs�
"�LastRunTrimmedSlabs��
"�LastRunUnknownEvictFailSlabs�
"�LastRunVolsnapPinnedSlabs
"�MFTFragmentCount�
"�MovableFiles�
"�TotalMFTRecords��
"�TotalSlabs���
"�UnmovableFiles���
��VolumeId�
J�VolumePathNames��F'�6�_LOGICAL_DISK_DEFRAG.?AU_LOGICAL_DISK_DEFRAG@@���60V�_KEY_VALUE_BASIC_INFORMATION.?AU_KEY_VALUE_BASIC_INFORMATION@@��R
"TitleIndex���
"Type�
"NameLength���
JName�V�6_KEY_VALUE_BASIC_INFORMATION.?AU_KEY_VALUE_BASIC_INFORMATION@@���6�H>�_FILE_LEVEL_TRIM.?AU_FILE_LEVEL_TRIM@@��
�6�1#�:
"Key��
"NumRanges
�6Ranges���>�6_FILE_LEVEL_TRIM.?AU_FILE_LEVEL_TRIM@@���6ULB
#ReserveSize��
#ZeroBits�
StackBasef�6_PROCESS_STACK_ALLOCATION_INFORMATION.?AU_PROCESS_STACK_ALLOCATION_INFORMATION@@�6b�v�JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE@@��
MaxIops��
MaxBandwidth�
ReservationIops��
qVolumeName���
" BaseIoSize���
�$ControlFlags�
!(VolumeNameLength�v�60JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE@@���6}_
#/
�4>�_MUILANGLISTNODE.?AU_MUILANGLISTNODE@@��F
!LanguageType�
!Reserved�
LanguageSpec�>�6_MUILANGLISTNODE.?AU_MUILANGLISTNODE@@���6�TV�_FILE_FS_OBJECTID_INFORMATION.?AU_FILE_FS_OBJECTID_INFORMATION@@
�6.
.ObjectId�
�5ExtendedInfo�V�6@_FILE_FS_OBJECTID_INFORMATION.?AU_FILE_FS_OBJECTID_INFORMATION@@�6U�
.*XLAT_SERVER��XLAT_CLIENT��*t�6XLAT_SIDE.?AW4XLAT_SIDE@@��6��b
RefIdToPointer���
PointerToRefId���
"NextRefId
�6XlatSide�F�6_FULL_PTR_XLAT_TABLES.?AU_FULL_PTR_XLAT_TABLES@@�6��
�
�
Q
��
"Size�
"InitialPc
StackBase
StackLimit���
DeallocationStack
"LogFlags�
"InitialSp
 SimulationCount��
 InCpuSimulation��
 EmulateInitialPc�
 Initialized��
�6 ExceptionList
$CpuContext���
7(InitialExceptionContext��
,pCallersRIID�
0pCallersUnknown��
"4Flags
8SelfRegDllName���
<SelfRegDllHandle�.7@_Wx86TIB.?AU_Wx86TIB@@��7b�
s(
T&.�_FPO_DATA.?AU_FPO_DATA@@
!��
!��
!��
!��
!
��
!���
"ulOffStart���
"cbProcSize���
"cdwLocals
!cdwParams
7cbProlog�
7cbRegs���
	7fHasSEH��

7fUseBP���
7reserved�
7cbFrame��.

7_FPO_DATA.?AU_FPO_DATA@@7f�Z�_RPC_BINDING_HANDLE_OPTIONS_V1.?AU_RPC_BINDING_HANDLE_OPTIONS_V1@@��
7V
"Version��
"Flags
"ComTimeout���
"CallTimeout��Z7_RPC_BINDING_HANDLE_OPTIONS_V1.?AU_RPC_BINDING_HANDLE_OPTIONS_V1@@��7(
�6�_QUOTA_LIMITS.?AU_QUOTA_LIMITS@@�
#PagedPoolLimit���
#NonPagedPoolLimit
#MinimumWorkingSetSize
#MaximumWorkingSetSize
# PagefileLimit
~(TimeLimit670_QUOTA_LIMITS.?AU_QUOTA_LIMITS@@7}�R�_QUERY_SERVICE_LOCK_STATUSA.?AU_QUERY_SERVICE_LOCK_STATUSA@@
7J
"fIsLocked
plpLockOwner��
"dwLockDuration���R7_QUERY_SERVICE_LOCK_STATUSA.?AU_QUERY_SERVICE_LOCK_STATUSA@@7m
�
{:�tagEXTLOGFONTA.?AUtagEXTLOGFONTA@@���
�elfLogFont���
�+<elfFullName��
�|elfStyle�
"�elfVersion���
"�elfStyleSize�
"�elfMatch�
"�elfReserved��
�*�elfVendorId��
"�elfCulture���
��elfPanose:
"7�tagEXTLOGFONTA.?AUtagEXTLOGFONTA@@��#7Sj�_MANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHES.?AU_MANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHES@@��v
"Version��
ProcessHandle
"PatchCount���
8PatchPathStrings�
/ BaseInfosj&7(_MANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHES.?AU_MANAGE_HOT_PATCH_QUERY_ACTIVE_PATCHES@@��'7B�r�_FILE_SET_STORAGE_RESERVE_ID_INFORMATION_EX.?AU_FILE_SET_STORAGE_RESERVE_ID_INFORMATION_EX@@
)7.
StorageReserveId�
"Flagsr+7_FILE_SET_STORAGE_RESERVE_ID_INFORMATION_EX.?AU_FILE_SET_STORAGE_RESERVE_ID_INFORMATION_EX@@,7Ui+
2
o2>
HeapHandle���
Address��
#Size�>07_HEAP_EVENT_RANGE.?AU_HEAP_EVENT_RANGE@@170�:�tagTTPOLYCURVE.?AUtagTTPOLYCURVE@@��4#�2
!wType
!cpfx�
47apfx�:57tagTTPOLYCURVE.?AUtagTTPOLYCURVE@@��67S�
J�_PORT_DATA_INFORMATION.?AU_PORT_DATA_INFORMATION@@��>�_PORT_DATA_ENTRY.?AU_PORT_DATA_ENTRY@@��97#�6
"CountDataEntries�
:7DataEntries��J;7_PORT_DATA_INFORMATION.?AU_PORT_DATA_INFORMATION@@��<7�[Z�_WMI_JOB_SET_QUERY_INFORMATION.?AU_WMI_JOB_SET_QUERY_INFORMATION@@��N
�ContainerId��
"JobId
"JobObjectInformationClassZ?7_WMI_JOB_SET_QUERY_INFORMATION.?AU_WMI_JOB_SET_QUERY_INFORMATION@@��@70�J�_FILE_ID_EXTD_DIR_INFO.?AU_FILE_ID_EXTD_DIR_INFO@@��V
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
"DReparsePointTag��
.HFileId���
JXFileName�JC7`_FILE_ID_EXTD_DIR_INFO.?AU_FILE_ID_EXTD_DIR_INFO@@��D7<.#2HANDEDNESS_LEFT��HANDEDNESS_RIGHT�2tF7tagHANDEDNESS.?AW4tagHANDEDNESS@@�G7L�1
G7v�_SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATION.?AU_SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATION@@>
FileHandle���
"ImageSize
ImagevK7_SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATION.?AU_SYSTEM_CODEINTEGRITYVERIFICATION_INFORMATION@@L7�4!N7
/&:�tagMONITORINFO.?AUtagMONITORINFO@@��R
"cbSize���
�rcMonitor
�rcWork���
"$dwFlags��:R7(tagMONITORINFO.?AUtagMONITORINFO@@��S7L�4�MemSectionExtendedParameterInvalidType���MemSectionExtendedParameterUserPhysicalFlags�MemSectionExtendedParameterNumaNode��MemSectionExtendedParameterMax���^tU7MEM_SECTION_EXTENDED_PARAMETER_TYPE.?AW4MEM_SECTION_EXTENDED_PARAMETER_TYPE@@�V7y&V�_OBJECT_DIRECTORY_INFORMATION.?AU_OBJECT_DIRECTORY_INFORMATION@@&
�Name�
�TypeName�VY7 _OBJECT_DIRECTORY_INFORMATION.?AU_OBJECT_DIRECTORY_INFORMATION@@Z7 �"�"\7
]7��_PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION.?AU_PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION@@
Ssp��`7_PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION.?AU_PROCESS_FREE_FIBER_SHADOW_STACK_ALLOCATION_INFORMATION@@a7bV�_PERFINFO_MEMORY_INFORMATION.?AU_PERFINFO_MEMORY_INFORMATION@@���
#ZeroPageCount
#FreePageCount
#ModifiedPageCount
#ModifiedNoWritePageCount�
# BadPageCount�
D,(PageCountByPriority��
D,hRepurposedPagesByPriority
#�ModifiedPageCountPageFileVd7�_PERFINFO_MEMORY_INFORMATION.?AU_PERFINFO_MEMORY_INFORMATION@@��e70�
V�
"Latency��
"Power
"TimeCheck
 PromotePercent���
 
DemotePercent
 StateType
 Reserved�
"StateFlags���
"Context��
"IdleHandler��
"Reserved1Bh7 PPM_WMI_IDLE_STATE.?AUPPM_WMI_IDLE_STATE@@��i7F�	B�tagIMECHARPOSITION.?AUtagIMECHARPOSITION@@��
k7j
"dwSize���
"dwCharPos
�pt���
ucLineHeight��
�rcDocument���Bm7$tagIMECHARPOSITION.?AUtagIMECHARPOSITION@@��n7��:�_RTL_RXACT_LOG.?AU_RTL_RXACT_LOG@@��^
"OperationCount���
"LogSize��
"LogSizeInUse�
"Alignment:q7_RTL_RXACT_LOG.?AU_RTL_RXACT_LOG@@��r7��"
"iType
"nSize*t7tagEMR.?AUtagEMR@@��u7S>N�_POWER_SESSION_RIT_STATE.?AU_POWER_SESSION_RIT_STATE@@��.
 Active���
"LastInputTimeNx7_POWER_SESSION_RIT_STATE.?AU_POWER_SESSION_RIT_STATE@@��y7F�
"HeaderSize���
"TotalSize
"QuerySequence
"OptionsOffset
"OptionsSize��
"StatsOffset��
"StatsSize
"SamplesOffset
" SampleCount��
"$ModulesOffset
"(ModuleCount��R{7,_ETW_COVERAGE_SAMPLER_DATA.?AU_ETW_COVERAGE_SAMPLER_DATA@@��|7N:�_ETW_POOL_EVENT.?AU_ETW_POOL_EVENT@@N
"PoolType�
"Tag��
#NumberOfBytes
Entry:7_ETW_POOL_EVENT.?AU_ETW_POOL_EVENT@@�70@
6�_TIME_FIELDS.?AU_TIME_FIELDS@@��
Year�
Month
Day��
Hour�
Minute���

Second���
Milliseconds�
Weekday��6�7_TIME_FIELDS.?AU_TIME_FIELDS@@���7$aF�_UNICODE_PREFIX_TABLE.?AU_UNICODE_PREFIX_TABLE@@
j f
NodeTypeCode�
NameLength���
�7NextPrefixTree���
�7LastNextEntryF�7_UNICODE_PREFIX_TABLE.?AU_UNICODE_PREFIX_TABLE@@�7$\
A4B�_MENU_EVENT_RECORD.?AU_MENU_EVENT_RECORD@@��
�7
udwCommandId��B�7_MENU_EVENT_RECORD.?AU_MENU_EVENT_RECORD@@���7Ur.�HWINSTA__.?AUHWINSTA__@@
tunused���.�7HWINSTA__.?AUHWINSTA__@@�7y'B�_PS_MEMORY_RESERVE.?AU_PS_MEMORY_RESERVE@@��
�76
ReserveAddress���
#ReserveSize��B�7_PS_MEMORY_RESERVE.?AU_PS_MEMORY_RESERVE@@���7b$F�tagWNODE_METHOD_ITEM.?AUtagWNODE_METHOD_ITEM@@��
qWnodeHeader��
"0OffsetInstanceName���
"4InstanceIndex
"8MethodId�
"<DataBlockOffset��
"@SizeDataBlock
�DVariableData�F�7HtagWNODE_METHOD_ITEM.?AUtagWNODE_METHOD_ITEM@@���7t�
3  �7
87V�_SYSDBG_LIVEDUMP_CONTROL_ADDPAGES.?AT_SYSDBG_LIVEDUMP_CONTROL_ADDPAGES@@
"��
"��F
�7HypervisorPages��
�7Reserved�
"AsUlong��V�7_SYSDBG_LIVEDUMP_CONTROL_ADDPAGES.?AT_SYSDBG_LIVEDUMP_CONTROL_ADDPAGES@@�7�d
b-N�_PS_SYSTEM_DLL_INIT_BLOCK.?AU_PS_SYSTEM_DLL_INIT_BLOCK@@##��
"��
"��z
"Size�
#SystemDllWowRelocation���
#SystemDllNativeRelocation
�7Wow64SharedInformation���
"�RngData��
"�Flags
�7�CfgOverride��
�7�Reserved�
e�MitigationOptionsMap�
#�CfgBitMap
#�CfgBitMapSize
#�Wow64CfgBitMap���
#�Wow64CfgBitMapSize���
k�MitigationAuditOptionsMapN�7�_PS_SYSTEM_DLL_INIT_BLOCK.?AU_PS_SYSTEM_DLL_INIT_BLOCK@@�7b@

"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"���
"Flags
�7EnableExportAddressFilter
�7AuditExportAddressFilter�
�7EnableExportAddressFilterPlus
�7AuditExportAddressFilterPlus�
�7EnableImportAddressFilter
�7AuditImportAddressFilter�
�7EnableRopStackPivot��
�7AuditRopStackPivot���
�7EnableRopCallerCheck�
�7AuditRopCallerCheck��
�7EnableRopSimExec�
�7AuditRopSimExec��
�7ReservedFlagsz�7_PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY.?AU_PROCESS_MITIGATION_PAYLOAD_RESTRICTION_POLICY@@���7}�
�
��SystemActivityModerationAppTypeClassic���SystemActivityModerationAppTypePackaged��MaxSystemActivityModerationAppType���bt�7_SYSTEM_ACTIVITY_MODERATION_APP_TYPE.?AW4_SYSTEM_ACTIVITY_MODERATION_APP_TYPE@@����7�$
�7J�_THREAD_TEB_INFORMATION.?AU_THREAD_TEB_INFORMATION@@J
TebInformation���
"TebOffset
"BytesToRead��J�7_THREAD_TEB_INFORMATION.?AU_THREAD_TEB_INFORMATION@@�7b�J�_EVENT_TRACE_PROPERTIES.?AU_EVENT_TRACE_PROPERTIES@@�
qWnode
"0BufferSize���
"4MinimumBuffers���
"8MaximumBuffers���
"<MaximumFileSize��
"@LogFileMode��
"DFlushTimer���
"HEnableFlags��
LAgeLimit�
LFlushThreshold���
"PNumberOfBuffers��
"TFreeBuffers��
"XEventsLost���
"\BuffersWritten���
"`LogBuffersLost���
"dRealTimeBuffersLost��
hLoggerThreadId���
"pLogFileNameOffset
"tLoggerNameOffset�J�7x_EVENT_TRACE_PROPERTIES.?AU_EVENT_TRACE_PROPERTIES@@�7�^�u#"�7
�7
�-R�_PERFINFO_PROCESS_PERFCTR32.?AU_PERFINFO_PROCESS_PERFCTR32@@�
"ProcessId
"PageFaultCount���
"HandleCount��
"Reserved�
uPeakVirtualSize��
uPeakWorkingSetSize���
uPeakPagefileUsage
uQuotaPeakPagedPoolUsage��
u QuotaPeakNonPagedPoolUsage���
u$VirtualSize��
u(WorkingSetSize���
u,PagefileUsage
u0QuotaPagedPoolUsage��
u4QuotaNonPagedPoolUsage���
u8PrivatePageCount�R�7<_PERFINFO_PROCESS_PERFCTR32.?AU_PERFINFO_PROCESS_PERFCTR32@@�70�
>!
�
 ��
 ��
 ��
 ��
 ��r
�7Interrupt
�7Reserved�
�7LevelTriggered���
�7Shared���
�7MoreEntries��F�7_EISA_IRQ_DESCRIPTOR.?AU_EISA_IRQ_DESCRIPTOR@@���7��nPdataCrUnchained�PdataCrUnchainedSavedLr��PdataCrChainedWithPacPdataCrChained���:t�7ARM64_FNPDATA_CR.?AW4ARM64_FNPDATA_CR@@����7fN�_SYSDBG_LIVEDUMP_CONTROL.?AU_SYSDBG_LIVEDUMP_CONTROL@@��
"Version��
"BugCheckCode�
#BugCheckParam1���
#BugCheckParam2���
#BugCheckParam3���
# BugCheckParam4���
(DumpFileHandle���
0CancelEventHandle
�-8Flags
�7<AddPagesControl��N
�7@_SYSDBG_LIVEDUMP_CONTROL.?AU_SYSDBG_LIVEDUMP_CONTROL@@���7�v
�(R�_IMAGE_DYNAMIC_RELOCATION64.?AU_IMAGE_DYNAMIC_RELOCATION64@@
�7.
#Symbol���
"BaseRelocSizeR�7_IMAGE_DYNAMIC_RELOCATION64.?AU_IMAGE_DYNAMIC_RELOCATION64@@�7f�J�_ENCLAVE_INIT_INFO_SGX.?AU_ENCLAVE_INIT_INFO_SGX@@�� #� #�� #0� #��V
�7SigStruct
�7Reserved1
�7EInitToken���
�70	Reserved2J�7_ENCLAVE_INIT_INFO_SGX.?AU_ENCLAVE_INIT_INFO_SGX@@���7y�r�_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600.?AU_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600@@
"Size�
"DataFormatVersion
Data�
"Length���
SectionGlobalData
" SectionGlobalDataLength��
(SectionBase��
"0SectionTotalLength���
�!8ActivationContext
"@AssemblyRosterIndex��
"DFlagsr�7H_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600.?AU_ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600@@�7��N�_FILE_NOTIFY_INFORMATION.?AU_FILE_NOTIFY_INFORMATION@@��
�7b
"NextEntryOffset��
"Action���
"FileNameLength���
JFileName�N�7_FILE_NOTIFY_INFORMATION.?AU_FILE_NOTIFY_INFORMATION@@���7U82
�SyntaxGUID���
�&SyntaxVersionJ�7_RPC_SYNTAX_IDENTIFIER.?AU_RPC_SYNTAX_IDENTIFIER@@���7�.
� r
 Enable���
�Spare
"BatteryLevel�
� PowerPolicy��
�MinSystemState���B8SYSTEM_POWER_LEVEL.?AUSYSTEM_POWER_LEVEL@@��8F�
R�_WINDOW_BUFFER_SIZE_RECORD.?AU_WINDOW_BUFFER_SIZE_RECORD@@��
j"dwSize���R8_WINDOW_BUFFER_SIZE_RECORD.?AU_WINDOW_BUFFER_SIZE_RECORD@@��8UnZ�_SYSTEM_LEAP_SECOND_INFORMATION.?AU_SYSTEM_LEAP_SECOND_INFORMATION@@&
 Enabled��
"FlagsZ
8_SYSTEM_LEAP_SECOND_INFORMATION.?AU_SYSTEM_LEAP_SECOND_INFORMATION@@8��>�_IMAGE_AUX_SYMBOL_EX.?AT_IMAGE_AUX_SYMBOL_EX@@��

8��
8V
"WeakDefaultSymIndex��
"WeakSearchType���
/rgbReserved��:8<anonymous-tag>.?AU<anonymous-tag>@@8f=
�Name�:8<anonymous-tag>.?AU<anonymous-tag>@@8fB�
"Length���
!NumberOfRelocations��
!NumberOfLinenumbers��
"CheckSum�
Number���
 Selection
 bReserved
HighNumber���
�rgbReserved��:	8<anonymous-tag>.?AU<anonymous-tag>@@8fE*
"crc��
.rgbReserved��:8<anonymous-tag>.?AU<anonymous-tag>@@8fTr
8Sym��
8File�
8Section��
B$TokenDef�
�rgbReserved��
8CRC��>8_IMAGE_AUX_SYMBOL_EX.?AT_IMAGE_AUX_SYMBOL_EX@@��8f<:�_DISCDLGSTRUCTW.?AU_DISCDLGSTRUCTW@@r
"cbStructure��
�hwndOwner
qlpLocalName��
qlpRemoteName�
" dwFlags��: 8(_DISCDLGSTRUCTW.?AU_DISCDLGSTRUCTW@@!8o�j�_STREAMS_QUERY_PARAMETERS_OUTPUT_BUFFER.?AU_STREAMS_QUERY_PARAMETERS_OUTPUT_BUFFER@@n
"OptimalWriteSize�
"StreamGranularitySize
"StreamIdMin��
"StreamIdMax��j$8_STREAMS_QUERY_PARAMETERS_OUTPUT_BUFFER.?AU_STREAMS_QUERY_PARAMETERS_OUTPUT_BUFFER@@%8U� :�tagSOUNDSENTRYW.?AUtagSOUNDSENTRYW@@
'8R
ucbSize���
"dwFlags��
"iFSTextEffect
"iFSTextEffectMSec
"iFSTextEffectColorBits���
"iFSGrafEffect
"iFSGrafEffectMSec
"iFSGrafEffectColor���
" iWindowsEffect���
"$iWindowsEffectMSec���
q(lpszWindowsEffectDLL�
"0iWindowsEffectOrdinal:)88tagSOUNDSENTRYW.?AUtagSOUNDSENTRYW@@*8L,4Z�_WMI_DISKIO_IO_REDIRECTED_INIT.?AU_WMI_DISKIO_IO_REDIRECTED_INIT@@��
,8&
Irp��
FileKey��Z.8_WMI_DISKIO_IO_REDIRECTED_INIT.?AU_WMI_DISKIO_IO_REDIRECTED_INIT@@��/80�6�tagALTTABINFO.?AUtagALTTABINFO@@�
"cbSize���
tcItems���
tcColumns�
tcRows
tiColFocus
tiRowFocus
tcxItem���
tcyItem���
� ptStart��6	28(tagALTTABINFO.?AUtagALTTABINFO@@38L�9
�7��
58Z�_WOW64_ARCHITECTURE_INFORMATION.?AU_WOW64_ARCHITECTURE_INFORMATION@@
"��
"��
"��
"��
"��
"��
88Machine��
98KernelMode���
:8UserMode�
;8Native���
<8Process��
=8ReservedZero0Z>8_WOW64_ARCHITECTURE_INFORMATION.?AU_WOW64_ARCHITECTURE_INFORMATION@@?8}rf
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType>A8_RPC_SECURITY_QOS.?AU_RPC_SECURITY_QOS@@B8nB�_ETW_PRIORITY_EVENT.?AU_ETW_PRIORITY_EVENT@@v
"ThreadId�
pOldPriority��
pNewPriority��
pDynamicPriority��
pReserved�BE8_ETW_PRIORITY_EVENT.?AU_ETW_PRIORITY_EVENT@@F80
b�_SYSTEM_LOW_PRIORITY_IO_INFORMATION.?AU_SYSTEM_LOW_PRIORITY_IO_INFORMATION@@
H8n
"LowPriReadOperations�
"LowPriWriteOperations
"KernelBumpedToNormalOperations���
"LowPriPagingReadOperations���
"KernelPagingReadsBumpedToNormal��
"LowPriPagingWriteOperations��
"KernelPagingWritesBumpedToNormal�
"BoostedIrpCount��
" BoostedPagingIrpCount
"$BlanketBoostCountb
J8(_SYSTEM_LOW_PRIORITY_IO_INFORMATION.?AU_SYSTEM_LOW_PRIORITY_IO_INFORMATION@@K8��

^%Z�RTLWOW64_CROSSPROCESS_WORK_ITEM.?AURTLWOW64_CROSSPROCESS_WORK_ITEM@@z
BaseAddress��
#RegionSize���
"AllocationType���
"Protect��
SyscallStatus:O8 <anonymous-tag>.?AU<anonymous-tag>@@P8��^
BaseAddress��
#RegionSize���
"FreeType�
SyscallStatus:R8<anonymous-tag>.?AU<anonymous-tag>@@S8��b
BaseAddress��
#RegionSize���
"NewProtect���
SyscallStatus:U8<anonymous-tag>.?AU<anonymous-tag>@@V8��.
BaseAddress��
#Length���:X8<anonymous-tag>.?AU<anonymous-tag>@@Y8��2
BaseAddress��
#RegionSize���:[8<anonymous-tag>.?AU<anonymous-tag>@@\8���
"Next�
�Operation
P8MemoryAllocData��
S8MemoryFreeData���
V8MemoryProtectData
Y8InstructionCacheFlushData
\8MemoryDirtyData��Z^8(RTLWOW64_CROSSPROCESS_WORK_ITEM.?AURTLWOW64_CROSSPROCESS_WORK_ITEM@@_8��
�!^�_MEMORY_ENCLAVE_IMAGE_INFORMATION.?AU_MEMORY_ENCLAVE_IMAGE_INFORMATION@@N�_MEMORY_IMAGE_INFORMATION.?AU_MEMORY_IMAGE_INFORMATION@@>
c8ImageInfo
�UniqueID�
�8AuthorID�^d8X_MEMORY_ENCLAVE_IMAGE_INFORMATION.?AU_MEMORY_ENCLAVE_IMAGE_INFORMATION@@e8B�b�_LOOKUP_STREAM_FROM_CLUSTER_OUTPUT.?AU_LOOKUP_STREAM_FROM_CLUSTER_OUTPUT@@��R
"Offset���
"NumberOfMatches��
"BufferSizeRequired���bh8_LOOKUP_STREAM_FROM_CLUSTER_OUTPUT.?AU_LOOKUP_STREAM_FROM_CLUSTER_OUTPUT@@��i8U�B�_NTFS_STATISTICS_EX.?AU_NTFS_STATISTICS_EX@@J
"Write
"Create���
"SetInfo��
"Flush:l8<anonymous-tag>.?AU<anonymous-tag>@@m8U�J
"Write
"Create���
"SetInfo��
"Flush:o8<anonymous-tag>.?AU<anonymous-tag>@@p8UJ
"Write
"Create���
"SetInfo��
"Flush:r8<anonymous-tag>.?AU<anonymous-tag>@@s8UJ
"Write
"Create���
"SetInfo��
"Flush:u8<anonymous-tag>.?AU<anonymous-tag>@@v8U,�
"Calls
"RunsReturned�
"Hints
"HintsHonored�
"Cache
"CacheMiss
#Clusters�
# HintsClusters
#(CacheClusters
#0CacheMissClusters:
x88<anonymous-tag>.?AU<anonymous-tag>@@y8UAR
"LogFileFullExceptions
"OtherExceptions��
#MftReads�
#MftReadBytes�
#MftWrites
# MftWriteBytes
m8(MftWritesUserLevel���
"8MftWritesFlushForLogFileFull�
"<MftWritesLazyWriter��
"@MftWritesUserRequest�
#HMft2Writes���
#PMft2WriteBytes���
p8XMft2WritesUserLevel��
"hMft2WritesFlushForLogFileFull
"lMft2WritesLazyWriter�
"pMft2WritesUserRequest
#xRootIndexReads���
#�RootIndexReadBytes���
#�RootIndexWrites��
#�RootIndexWriteBytes��
#�BitmapReads��
#�BitmapReadBytes��
#�BitmapWrites�
#�BitmapWriteBytes�
"�BitmapWritesFlushForLogFileFull��
"�BitmapWritesLazyWriter���
"�BitmapWritesUserRequest��
s8�BitmapWritesUserLevel
#�MftBitmapReads���
#�MftBitmapReadBytes���
#�MftBitmapWrites��
#�MftBitmapWriteBytes��
"�MftBitmapWritesFlushForLogFileFull���
"�MftBitmapWritesLazyWriter
"MftBitmapWritesUserRequest���
v8MftBitmapWritesUserLevel�
#UserIndexReads���
# UserIndexReadBytes���
#(UserIndexWrites��
#0UserIndexWriteBytes��
#8LogFileReads�
#@LogFileReadBytes�
#HLogFileWrites
#PLogFileWriteBytes
y8XAllocate�
"�DiskResourcesExhausted���
#�VolumeTrimCount��
#�VolumeTrimTime���
#�VolumeTrimByteCount��
#�FileLevelTrimCount���
#�FileLevelTrimTime
#�FileLevelTrimByteCount���
#�VolumeTrimSkippedCount���
#�VolumeTrimSkippedByteCount���
#�NtfsFillStatInfoFromMftRecordCalledCount�
#�NtfsFillStatInfoFromMftRecordBailedBecauseOfAttributeListCount���
#�NtfsFillStatInfoFromMftRecordBailedBecauseOfNonResReparsePointCount��B9{8�_NTFS_STATISTICS_EX.?AU_NTFS_STATISTICS_EX@@|8U�n�_EVENT_TRACE_SESSION_SECURITY_INFORMATION.?AU_EVENT_TRACE_SESSION_SECURITY_INFORMATION@@�
EventTraceInformationClass���
"SecurityInformation��
#TraceHandle��
�SecurityDescriptor���n8_EVENT_TRACE_SESSION_SECURITY_INFORMATION.?AU_EVENT_TRACE_SESSION_SECURITY_INFORMATION@@�8�"�8>�tagEMRSTRETCHBLT.?AUtagEMRSTRETCHBLT@@��R
Pemr��
,rclBounds
xDest
yDest
 cxDest���
$cyDest���
"(dwRop
,xSrc�
0ySrc�

4xformSrc�
"LcrBkColorSrc�
"PiUsageSrc
"ToffBmiSrc
"XcbBmiSrc�
"\offBitsSrc���
"`cbBitsSrc
dcxSrc
hcySrc>�8ltagEMRSTRETCHBLT.?AUtagEMRSTRETCHBLT@@���8S�
�J�_HARDWARE_COUNTER_DATA.?AU_HARDWARE_COUNTER_DATA@@��
�86
rType�
"Reserved�
#ValueJ�8_HARDWARE_COUNTER_DATA.?AU_HARDWARE_COUNTER_DATA@@���8�+F�_LDR_DATA_TABLE_ENTRY.?AU_LDR_DATA_TABLE_ENTRY@@
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"
��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
�!B�_LDRP_LOAD_CONTEXT.?AU_LDRP_LOAD_CONTEXT@@��
�8"
�InLoadOrderLinks�
�InMemoryOrderLinks���
� InInitializationOrderLinks���
0DllBase��
8EntryPoint���
"@SizeOfImage��
�HFullDllName��
�XBaseDllName��
�hFlagGroup
"hFlags
�8hPackagedBinary���
�8hMarkedForRemoval�
�8hImageDll�
�8hLoadNotificationsSent
�8hTelemetryEntryProcessed��
�8hProcessStaticImport��
�8hInLegacyLists
�8hInIndexes
�8hShimDll��
�8hInExceptionTable�
�8hReservedFlags1���
�8hLoadInProgress���
�8hLoadConfigProcessed��
�8hEntryProcessed���
�8hProtectDelayLoad�
�8hReservedFlags3���
�8hDontCallForThreads���
�8hProcessAttachCalled��
�8hProcessAttachFailed��
�8hCorDeferredValidate��
�8hCorImage�
�8hDontRelocate�
�8hCorILOnly
�8hChpeImage
�8hReservedFlags5���
�8hRedirected���
�8hReservedFlags6���
�8hCompatDatabaseProcessed��
!lObsoleteLoadCount
!nTlsIndex�
�pHashLinks
"�TimeDateStamp
��EntryPointActivationContext��
�Lock�
�8�DdagNode�
��NodeModuleLink���
�8�LoadContext��
�ParentDllBase
�SwitchBackContext
s�BaseAddressIndexNode�
s�MappingInfoIndexNode�
#�OriginalBase�
~LoadTime�
"BaseNameHashValue
�'LoadReason���
"ImplicitPathOptions��
"ReferenceCount���
"DependentLoadFlags���
 SigningLevel�F;�8 _LDR_DATA_TABLE_ENTRY.?AU_LDR_DATA_TABLE_ENTRY@@�8��
@x
@y2
�8_POINTFLOAT.?AU_POINTFLOAT@@�8SP
q)*
"Remove���
�Details��z�8_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRY.?AU_SYSTEM_FEATURE_USAGE_SUBSCRIPTION_UPDATE_ENTRY@@�8��R�_SYSTEM_PROCESS_INFORMATION.?AU_SYSTEM_PROCESS_INFORMATION@@�
"NextEntryOffset��
"NumberOfThreads��
~WorkingSetPrivateSize
"HardFaultCount���
"NumberOfThreadsHighWatermark�
#CycleTime
~ CreateTime���
~(UserTime�
~0KernelTime���
�8ImageName
HBasePriority�
PUniqueProcessId��
XInheritedFromUniqueProcessId�
"`HandleCount��
"dSessionId
#hUniqueProcessKey�
#pPeakVirtualSize��
#xVirtualSize��
"�PageFaultCount���
#�PeakWorkingSetSize���
#�WorkingSetSize���
#�QuotaPeakPagedPoolUsage��
#�QuotaPagedPoolUsage��
#�QuotaPeakNonPagedPoolUsage���
#�QuotaNonPagedPoolUsage���
#�PagefileUsage
#�PeakPagefileUsage
#�PrivatePageCount�
~�ReadOperationCount���
~�WriteOperationCount��
~�OtherOperationCount��
~�ReadTransferCount
~�WriteTransferCount���
~�OtherTransferCount���R"�8_SYSTEM_PROCESS_INFORMATION.?AU_SYSTEM_PROCESS_INFORMATION@@�8��
�4J�_ETW_HEAP_EVENT_RUNDOWN.?AU_ETW_HEAP_EVENT_RUNDOWN@@
�8�#�
8Header���
 HeapHandle���
"(Flags
",ProcessId
"0RangeCount���
"4Reserved�
�88Ranges���J�8H_ETW_HEAP_EVENT_RUNDOWN.?AU_ETW_HEAP_EVENT_RUNDOWN@@�80�j�_ETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT.?AU_ETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT@@
�8
p��
p��
p��
p��
 ��
 ��
 ��
 ��f
Lock�
"ThreadId�
pNewCpuPriorityFloor��
p
OldCpuPriority���
�8NewIoPriorityFloor���
�8OldIoPriority
�8NewIoQoSPriorityFloor
�8OldIoQoSPriority�
pIoPriorities�
�8ExecutingDpc�
�8WakeupBoost��
�8BoostedOutstandingIrps���
�8Reserved�
 Flagsj�8_ETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT.?AU_ETW_AUTOBOOST_SET_PRIORITY_FLOOR_EVENT@@�80�	>
"dwSizeHid
"dwCount��
�bRawData�.�8tagRAWHID.?AUtagRAWHID@@�8L�:6�_WMI_PUSHLOCK.?AU_WMI_PUSHLOCK@@>
PushLock�
"ThreadId�
 Action���6�8_WMI_PUSHLOCK.?AU_WMI_PUSHLOCK@@�80�	
�7�'#�
�8*
TLuid�
"Attributes���F�8_LUID_AND_ATTRIBUTES.?AU_LUID_AND_ATTRIBUTES@@���8E�2
�Configuration
!PortAddress��N�8_EISA_PORT_CONFIGURATION.?AU_EISA_PORT_CONFIGURATION@@���8�V�_SYSTEM_BOOT_LOGO_INFORMATION.?AU_SYSTEM_BOOT_LOGO_INFORMATION@@*
"Flags
"BitmapOffset�V�8_SYSTEM_BOOT_LOGO_INFORMATION.?AU_SYSTEM_BOOT_LOGO_INFORMATION@@�8�uR�_PAGE_PRIORITY_INFORMATION.?AU_PAGE_PRIORITY_INFORMATION@@��
"PagePriority�R�8_PAGE_PRIORITY_INFORMATION.?AU_PAGE_PRIORITY_INFORMATION@@���8}�:�tagCOMBOBOXINFO.?AUtagCOMBOBOXINFO@@
�8�
"cbSize���
�rcItem���
�rcButton�
"$stateButton��
�(hwndCombo
�0hwndItem�
�8hwndList�:�8@tagCOMBOBOXINFO.?AUtagCOMBOBOXINFO@@�8LM9�$�$f�_EVENT_TRACE_PROFILE_ADD_INFORMATION.?AU_EVENT_TRACE_PROFILE_ADD_INFORMATION@@��
EventTraceInformationClass���
 Version��
�&V2���
�CpuInfoHierarchy�
"InitialInterval��
  Persist��
J"ProfileSourceDescription�f�8$_EVENT_TRACE_PROFILE_ADD_INFORMATION.?AU_EVENT_TRACE_PROFILE_ADD_INFORMATION@@���8�R�_ETW_HEAP_EVENT_CONTRACTION.?AU_ETW_HEAP_EVENT_CONTRACTION@@�
8Header���
 HeapHandle���
#(DeCommitSize�
0DeCommitAddress��
#8FreeSpace
#@CommittedSpace���
#HReservedSpace
"PNoOfUCRs�
#TAllocatedSpace���R	�8\_ETW_HEAP_EVENT_CONTRACTION.?AU_ETW_HEAP_EVENT_CONTRACTION@@�80�

L
�
�9# �9#��
#P1Home���
#P2Home���
#P3Home���
#P4Home���
# P5Home���
#(P6Home���
"0ContextFlags�
"4MxCsr
!8SegCs
!:SegDs
!<SegEs
!>SegFs
!@SegGs
!BSegSs
"DEFlags���
#HDr0��
#PDr1��
#XDr2��
#`Dr3��
#hDr6��
#pDr7��
#xRax��
#�Rcx��
#�Rdx��
#�Rbx��
#�Rsp��
#�Rbp��
#�Rsi��
#�Rdi��
#�R8���
#�R9���
#�R10��
#�R11��
#�R12��
#�R13��
#�R14��
#�R15��
#�Rip��
�FltSave��
�8Header���
: Legacy���
9�Xmm0�
9�Xmm1�
9�Xmm2�
9�Xmm3�
9�Xmm4�
9�Xmm5�
9Xmm6�
9Xmm7�
9 Xmm8�
90Xmm9�
9@Xmm10
9PXmm11
9`Xmm12
9pXmm13
9�Xmm14
9�Xmm15
�8VectorRegister���
#�VectorControl
#�DebugControl�
#�LastBranchToRip��
#�LastBranchFromRip
#�LastExceptionToRip���
#�LastExceptionFromRip�.@�8�_CONTEXT.?AU_CONTEXT@@���8�&e2�tagACTCTXW.?AUtagACTCTXW@@���
"cbSize���
"dwFlags��
�lpSource�
!wProcessorArchitecture���
!wLangId��
�lpAssemblyDirectory��
� lpResourceName���
�(lpApplicationName
p0hModule��2	�88tagACTCTXW.?AUtagACTCTXW@@��9<Q .
.MD5Hash��
�ModuleName���29<anonymous-tag>.?AT<anonymous-tag>@@9��2
%5RequestType��
9SearchInfo���N9_COVERAGE_MODULE_REQUEST.?AU_COVERAGE_MODULE_REQUEST@@��9��J�_RPC_SECURITY_QOS_V5_W.?AU_RPC_SECURITY_QOS_V5_W@@��
K HttpCredentials��2	9<anonymous-tag>.?AT<anonymous-tag>@@
9n�
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���

9u
 Sid��
u(EffectiveOnly
0ServerSecurityDescriptor�J	98_RPC_SECURITY_QOS_V5_W.?AU_RPC_SECURITY_QOS_V5_W@@��
9gR�_FILE_MAILSLOT_PEEK_BUFFER.?AU_FILE_MAILSLOT_PEEK_BUFFER@@��R
"ReadDataAvailable
"NumberOfMessages�
"MessageLengthR9_FILE_MAILSLOT_PEEK_BUFFER.?AU_FILE_MAILSLOT_PEEK_BUFFER@@��9!1Z�_PROCESS_MEMORY_EXHAUSTION_INFO.?AU_PROCESS_MEMORY_EXHAUSTION_INFO@@J
!Version��
!Reserved�
�'Type�
#ValueZ9_PROCESS_MEMORY_EXHAUSTION_INFO.?AU_PROCESS_MEMORY_EXHAUSTION_INFO@@9m�Z�_ETW_TP_EVENT_TIMER_EXPIRATION.?AU_ETW_TP_EVENT_TIMER_EXPIRATION@@��
9z
8Header���
 DueTime��
(SubQueue�
0Timer
"8Period���
"<WindowLength�Z9@_ETW_TP_EVENT_TIMER_EXPIRATION.?AU_ETW_TP_EVENT_TIMER_EXPIRATION@@��90DF�_IPT_TRACE_EVENT_DATA.?AU_IPT_TRACE_EVENT_DATA@@�
#TimeStamp
"ProcessId
"ThreadId�
#IptOption
"IptTraceSize�
"IptTraceStopOffset���
� IptTrace�F9(_IPT_TRACE_EVENT_DATA.?AU_IPT_TRACE_EVENT_DATA@@90B�_ETW_OPTICALIO_INIT.?AU_ETW_OPTICALIO_INIT@@.
Irp��
"IssuingThreadId��B!9_ETW_OPTICALIO_INIT.?AU_ETW_OPTICALIO_INIT@@"90�
� f�_JOBOBJECT_SECURITY_LIMIT_INFORMATION.?AU_JOBOBJECT_SECURITY_LIMIT_INFORMATION@@
+�
"SecurityLimitFlags���
JobToken�
&9SidsToDisable
�$PrivilegesToDelete���
&9 RestrictedSids���f'9(_JOBOBJECT_SECURITY_LIMIT_INFORMATION.?AU_JOBOBJECT_SECURITY_LIMIT_INFORMATION@@(9}�
hN�_PROCESS_JOB_MEMORY_INFO.?AU_PROCESS_JOB_MEMORY_INFO@@��
+9�
#SharedCommitUsage
#PrivateCommitUsage���
#PeakPrivateCommitUsage���
#PrivateCommitLimit���
# TotalCommitLimit�N-9(_PROCESS_JOB_MEMORY_INFO.?AU_PROCESS_JOB_MEMORY_INFO@@��.9}�"2%6�_devicemodeW.?AU_devicemodeW@@��
19�
�dmDeviceName�
!@dmSpecVersion
!BdmDriverVersion��
!DdmSize���
!FdmDriverExtra
"HdmFields�
LdmOrientation
NdmPaperSize��
PdmPaperLength
RdmPaperWidth�
TdmScale��
VdmCopies�
XdmDefaultSource��
ZdmPrintQuality���
�LdmPosition���
"TdmDisplayOrientation�
"XdmDisplayFixedOutput�
\dmColor��
^dmDuplex�
`dmYResolution
bdmTTOption���
ddmCollate
�fdmFormName���
!�dmLogPixels��
"�dmBitsPerPel�
"�dmPelsWidth��
"�dmPelsHeight�
"�dmDisplayFlags���
"�dmNup
"�dmDisplayFrequency���
"�dmICMMethod��
"�dmICMIntent��
"�dmMediaType��
"�dmDitherType�
"�dmReserved1��
"�dmReserved2��
"�dmPanningWidth���
"�dmPanningHeight��6&39�_devicemodeW.?AU_devicemodeW@@��49S�
tunused���*69HICON__.?AUHICON__@@79AX.�_WMI_TXR.?AU_WMI_TXR@@��
99f
InitialTime��
�TxRGUID��
"Status���
"UowCount�
J Hive�.;9(_WMI_TXR.?AU_WMI_TXR@@��<90�V�_ENUM_SERVICE_STATUS_PROCESSW.?AU_ENUM_SERVICE_STATUS_PROCESSW@@R
qlpServiceName
qlpDisplayName
IServiceStatusProcess�V?98_ENUM_SERVICE_STATUS_PROCESSW.?AU_ENUM_SERVICE_STATUS_PROCESSW@@@9mZ�_PROCESS_EXTENDED_ENERGY_VALUES.?AU_PROCESS_EXTENDED_ENERGY_VALUES@@^�_PROCESS_ENERGY_VALUES_EXTENSION.?AU_PROCESS_ENERGY_VALUES_EXTENSION@@��&
M(Base�
C9ExtensionZD9�_PROCESS_EXTENDED_ENERGY_VALUES.?AU_PROCESS_EXTENDED_ENERGY_VALUES@@E9bi
�
6
"��
"��$%#�"#�V
#EnabledFeatures��
#EnabledVolatileFeatures��
"Size�
"ControlFlags�
I9OptimizedSave
J9CompactionEnabled
K9Features�
#EnabledSupervisorFeatures
# AlignedFeatures��
"(AllFeatureSize���
L9,AllFeatures��
#0EnabledUserVisibleSupervisorFeatures�FM98_XSTATE_CONFIGURATION.?AU_XSTATE_CONFIGURATION@@N9|d
�%
b$J�_RTL_DEBUG_INFORMATION.?AU_RTL_DEBUG_INFORMATION@@��F�_RTL_PROCESS_MODULES.?AU_RTL_PROCESS_MODULES@@��
S9
�,J�_RTL_PROCESS_BACKTRACES.?AU_RTL_PROCESS_BACKTRACES@@
V9
�'
5V�_RTL_PROCESS_VERIFIER_OPTIONS.?AU_RTL_PROCESS_VERIFIER_OPTIONS@@
Z9# �b
SectionHandleClient��
ViewBaseClient���
ViewBaseTarget���
#ViewBaseDelta
 EventPairClient��
(EventPairTarget��
0TargetProcessId��
8TargetThreadHandle���
"@Flags
#HOffsetFree���
#PCommitSize���
#XViewSize�
T9`Modules��
U9`ModulesEx
W9hBackTraces���
X9pHeaps
Y9xLocks
�SpecificHeap�
�TargetProcessHandle��
[9�VerifierOptions��
�ProcessHeap��
�CriticalSectionHandle
�CriticalSectionOwnerThread���
\9�Reserved�J]9�_RTL_DEBUG_INFORMATION.?AU_RTL_DEBUG_INFORMATION@@��^9��J�_RTL_HEAP_STACK_CONTROL.?AU_RTL_HEAP_STACK_CONTROL@@:
!Version��
!Flags
Process��Ja9_RTL_HEAP_STACK_CONTROL.?AU_RTL_HEAP_STACK_CONTROL@@b9��N�_FILE_CASE_SENSITIVE_INFO.?AU_FILE_CASE_SENSITIVE_INFO@@
d9
"FlagsNf9_FILE_CASE_SENSITIVE_INFO.?AU_FILE_CASE_SENSITIVE_INFO@@g9<�"�KTMOBJECT_TRANSACTIONKTMOBJECT_TRANSACTION_MANAGERKTMOBJECT_RESOURCE_MANAGER���KTMOBJECT_ENLISTMENT�KTMOBJECT_INVALID6ti9_KTMOBJECT_TYPE.?AW4_KTMOBJECT_TYPE@@�j9�wJ�_CM_FLOPPY_DEVICE_DATA.?AU_CM_FLOPPY_DEVICE_DATA@@��
l9�
!Version��
!Revision�
�6Size�
"MaxDensity���
"MountDensity�
 StepRateHeadUnloadTime���
 HeadLoadTime�
 MotorOffTime�
 SectorLengthCode�
 SectorPerTrack���
 ReadWriteGapLength���
 DataTransferLength���
 FormatGapLength��
 FormatFillCharacter��
 HeadSettleTime���
 MotorSettleTime��
 MaximumTrackValue
  DataTransferRate�Jn9$_CM_FLOPPY_DEVICE_DATA.?AU_CM_FLOPPY_DEVICE_DATA@@��o9�
B+R�_PERFINFO_SYSCALL_EXIT_DATA.?AU_PERFINFO_SYSCALL_EXIT_DATA@@
r9
ReturnValue��Rt9_PERFINFO_SYSCALL_EXIT_DATA.?AU_PERFINFO_SYSCALL_EXIT_DATA@@u90*F�_LPC_CLIENT_DIED_MSG.?AU_LPC_CLIENT_DIED_MSG@@��
w9.
7PortMsg��
~(CreateTime���Fy90_LPC_CLIENT_DIED_MSG.?AU_LPC_CLIENT_DIED_MSG@@��z9��F�_ENCRYPTED_DATA_INFO.?AU_ENCRYPTED_DATA_INFO@@��B
#StartingFileOffset���
"OutputBufferOffset���
"BytesWithinFileSize��
"BytesWithinValidDataLength���
!CompressionFormat
 DataUnitShift
 ChunkShift���
 ClusterShift�
 EncryptionFormat�
!NumberOfDataBlocks���
�DataBlockSizeF}9 _ENCRYPTED_DATA_INFO.?AU_ENCRYPTED_DATA_INFO@@��~9U@F�_IMAGE_HOT_PATCH_BASE.?AU_IMAGE_HOT_PATCH_BASE@@
�9�
"SequenceNumber���
"Flags
"OriginalTimeDateStamp
"OriginalCheckSum�
"CodeIntegrityInfo
"CodeIntegritySize
"PatchTable���
"BufferOffset�F�9 _IMAGE_HOT_PATCH_BASE.?AU_IMAGE_HOT_PATCH_BASE@@�9f�
�5
k%&
#Version��
�Name�f�9_TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE.?AU_TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE@@���9^R�_ENABLE_TRACE_PARAMETERS_V1.?AU_ENABLE_TRACE_PARAMETERS_V1@@
�9z
"Version��
"EnableProperty���
"ControlFlags�
�SourceId�
� EnableFilterDesc�R�9(_ENABLE_TRACE_PARAMETERS_V1.?AU_ENABLE_TRACE_PARAMETERS_V1@@�9�J�_NDR_USER_MARSHAL_INFO.?AU_NDR_USER_MARSHAL_INFO@@��V�_NDR_USER_MARSHAL_INFO_LEVEL1.?AU_NDR_USER_MARSHAL_INFO_LEVEL1@@2
"InformationLevel�
�9Level1���J�9X_NDR_USER_MARSHAL_INFO.?AU_NDR_USER_MARSHAL_INFO@@���9�
0**
�#ntmTm
i.LntmFontSig���B�9dtagNEWTEXTMETRICEXW.?AUtagNEWTEXTMETRICEXW@@�9S%
��
bmType���
bmWidth��
bmHeight�
bmWidthBytes�
!bmPlanes�
!bmBitsPixel��
bmBits���.�9 tagBITMAP.?AUtagBITMAP@@�9SY
�26�_VIDEO_RECORD.?AU_VIDEO_RECORD@@
�9�
"MemorySize���
"XResolution��
"YResolution��
"BitsPerPixel�
"VRefresh�
�ChipType�
�DACType��
�AdapterString
�BiosString���
�DeviceId�
"
StateFlags���6�9
_VIDEO_RECORD.?AU_VIDEO_RECORD@@�90\nDDC_DEFAULT��DDC_DISABLE_ALL��DDC_DISABLE_RESIZE���DDC_DISABLE_CONTROL_RELAYOUT�Nt�9DIALOG_DPI_CHANGE_BEHAVIORS.?AW4DIALOG_DPI_CHANGE_BEHAVIORS@@��9L�^�DISPLAYCONFIG_SOURCE_DEVICE_NAME.?AUDISPLAYCONFIG_SOURCE_DEVICE_NAME@@��2
�header���
�viewGdiDeviceName^�9TDISPLAYCONFIG_SOURCE_DEVICE_NAME.?AUDISPLAYCONFIG_SOURCE_DEVICE_NAME@@���9S�V�_SYSTEM_TIMEOFDAY_INFORMATION.?AU_SYSTEM_TIMEOFDAY_INFORMATION@@�
~BootTime�
~CurrentTime��
~TimeZoneBias�
"TimeZoneId���
"Reserved�
# BootTimeBias�
#(SleepTimeBiasV�90_SYSTEM_TIMEOFDAY_INFORMATION.?AU_SYSTEM_TIMEOFDAY_INFORMATION@@�9��B�tagTRACKMOUSEEVENT.?AUtagTRACKMOUSEEVENT@@��
�9V
"cbSize���
"dwFlags��
�hwndTrack
"dwHoverTime��B�9tagTRACKMOUSEEVENT.?AUtagTRACKMOUSEEVENT@@���9L�

�3
�7J�_ETW_WNF_EVENT_CALLBACK.?AU_ETW_WNF_EVENT_CALLBACK@@�
8Header���
~ StateName
(Subscription�
0NameSub��
8Callback�
"@ChangeStamp��
"DDeliveryFlags
"HReturn���J�9P_ETW_WNF_EVENT_CALLBACK.?AU_ETW_WNF_EVENT_CALLBACK@@�90n
�4
�3V�_ETW_DISKIO_FLUSH_BUFFERS_V3.?AU_ETW_DISKIO_FLUSH_BUFFERS_V3@@��~
"DiskNumber���
"IrpFlags�
#HighResResponseTime��
IrpAddr��
"IssuingThreadId��V�9 _ETW_DISKIO_FLUSH_BUFFERS_V3.?AU_ETW_DISKIO_FLUSH_BUFFERS_V3@@���90�B�tagVS_FIXEDFILEINFO.?AUtagVS_FIXEDFILEINFO@@V
"dwSignature��
"dwStrucVersion���
"dwFileVersionMS��
"dwFileVersionLS��
"dwProductVersionMS���
"dwProductVersionLS���
"dwFileFlagsMask��
"dwFileFlags��
" dwFileOS�
"$dwFileType���
"(dwFileSubtype
",dwFileDateMS�
"0dwFileDateLS�B
�94tagVS_FIXEDFILEINFO.?AUtagVS_FIXEDFILEINFO@@2onecore\external\sdk\inc\minwin\verrsrc.h���9�9�J�_FILE_NAME_INFORMATION.?AU_FILE_NAME_INFORMATION@@��2
"FileNameLength���
JFileName�J�9_FILE_NAME_INFORMATION.?AU_FILE_NAME_INFORMATION@@���9U
>+r�_MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION.?AU_MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION@@
�9
"��
"��>
�9CommitEvents�
�9Spare
"AllFlags�2�9<anonymous-tag>.?AT<anonymous-tag>@@�9B��
�9Flags
"HandleAttributes�
"DesiredAccess
LowCommitCondition���
HighCommitCondition��
 MaximumCommitCondition���r�9(_MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION.?AU_MEMORY_PARTITION_MEMORY_EVENTS_INFORMATION@@�9B�
�*8q!�9
�!��
�9F�_TRACE_LOGFILE_HEADER.?AU_TRACE_LOGFILE_HEADER@@f
 MajorVersion�
 MinorVersion�
 SubVersion���
 SubMinorVersion��:�9<anonymous-tag>.?AU<anonymous-tag>@@�9��.
"BufferSize���
"Version��
�9VersionDetail
"ProviderVersion��
"NumberOfProcessors���
~EndTime��
"TimerResolution��
"MaximumFileSize��
" LogFileMode��
"$BuffersWritten���
�(LogInstanceGuid��
"(StartBuffers�
",PointerSize��
"0EventsLost���
"4CpuSpeedInMHz
q8LoggerName���
q@LogFileName��
\HTimeZone�
~�BootTime�
~PerfFreq�
~StartTime
"ReservedFlags
"BuffersLost��F�9_TRACE_LOGFILE_HEADER.?AU_TRACE_LOGFILE_HEADER@@�9��
�-
�#�9�9
�9�
 StateType
"StateFlags���
"HardwareLatency��
"Power
#Context��
�9Handler��F�9 _PROCESSOR_IDLE_STATE.?AU_PROCESSOR_IDLE_STATE@@�9Fx	
$J�DISPLAYCONFIG_PATH_INFO.?AUDISPLAYCONFIG_PATH_INFO@@B
�5sourceInfo���
3targetInfo���
uDflagsJ�9HDISPLAYCONFIG_PATH_INFO.?AUDISPLAYCONFIG_PATH_INFO@@�9S�~�_SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION.?AU_SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION@@��>
"PlatformManifestSize�
�PlatformManifest�~�9_SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION.?AU_SYSTEM_SECUREBOOT_PLATFORM_MANIFEST_INFORMATION@@���9���
�9F�_PERFINFO_FILE_CREATE.?AU_PERFINFO_FILE_CREATE@@�
#Irp��
#FileObject���
"IssuingThreadId��
"Options��
"Attributes���
"ShareAccess��
J OpenPath�F�9(_PERFINFO_FILE_CREATE.?AU_PERFINFO_FILE_CREATE@@�90VJ�_WMI_IDE_CHANNEL_RECORD.?AU_WMI_IDE_CHANNEL_RECORD@@�
"TargetId�
"DeviceType���
"DeviceTimingMode�
"LocationInformationLen���
JLocationInformation��J�9_WMI_IDE_CHANNEL_RECORD.?AU_WMI_IDE_CHANNEL_RECORD@@�90�J�RPC_CLIENT_INFORMATION1.?AURPC_CLIENT_INFORMATION1@@
�9V
 UserName�
 ComputerName�
!Privilege
"AuthFlagsJ�9RPC_CLIENT_INFORMATION1.?AURPC_CLIENT_INFORMATION1@@�9D
VMemoryExhaustionTypeFailFastOnCommitFailure��MemoryExhaustionTypeMax��Ft�9_MEMORY_EXHAUSTION_TYPE.?AW4_MEMORY_EXHAUSTION_TYPE@@��9}�
E
�5mn
:
�ListEntry
mFunctionTable
~TimeStamp
# MinimumAddress���
#(MaximumAddress���
#0BaseAddress��
:8Callback�
@Context��
qHOutOfProcessCallbackDll��
�PType�
"TEntryCount���
sXTreeNode�J:p_DYNAMIC_FUNCTION_TABLE.?AU_DYNAMIC_FUNCTION_TABLE@@:�KF�_IMAGE_ENCLAVE_IMPORT.?AU_IMAGE_ENCLAVE_IMPORT@@�
"MatchType
"MinimumSecurityVersion���
�UniqueOrAuthorID�
.(FamilyID�
.8ImageID��
"HImportName���
"LReserved�F	:P_IMAGE_ENCLAVE_IMPORT.?AU_IMAGE_ENCLAVE_IMPORT@@
:f�
�
X4
&0
 ��
 ��
 ��
 ��
 ��
 ��
 ��
:ReadWrite
:Cached���
:Reserved0
:Type�
:Shared���
:Reserved1
:MoreEntries��>:_EISA_MEMORY_TYPE.?AU_EISA_MEMORY_TYPE@@:��2�_MOF_FIELD.?AU_MOF_FIELD@@��
:>
#DataPtr��
"Length���
"DataType�2:_MOF_FIELD.?AU_MOF_FIELD@@��:��~�_ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION.?AU_ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION@@�
"ulFlags��
"ulEncodedAssemblyIdentityLength��
"ulManifestPathType���
"ulManifestPathLength�
~liManifestLastWriteTime��
"ulPolicyPathType�
"ulPolicyPathLength���
~ liPolicyLastWriteTime
"(ulMetadataSatelliteRosterIndex���
",ulManifestVersionMajor���
"0ulManifestVersionMinor���
"4ulPolicyVersionMajor�
"8ulPolicyVersionMinor�
"<ulAssemblyDirectoryNameLength
[@lpAssemblyEncodedAssemblyIdentity
[HlpAssemblyManifestPath���
[PlpAssemblyPolicyPath�
[XlpAssemblyDirectoryName��
"`ulFileCount��~:h_ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION.?AU_ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION@@ :��
�#l-
#:Z�_PERFINFO_PPM_IDLE_STATE_CHANGE.?AU_PERFINFO_PPM_IDLE_STATE_CHANGE@@B
"NewState�
"OldState�
#Processors���Z&:_PERFINFO_PPM_IDLE_STATE_CHANGE.?AU_PERFINFO_PPM_IDLE_STATE_CHANGE@@':0�b�_SYSTEM_VSM_PROTECTION_INFORMATION.?AU_SYSTEM_VSM_PROTECTION_INFORMATION@@��
 DmaProtectionsAvailable��
 DmaProtectionsInUse��
 HardwareMbecAvailable
 ApicVirtualizationAvailable��b*:_SYSTEM_VSM_PROTECTION_INFORMATION.?AU_SYSTEM_VSM_PROTECTION_INFORMATION@@��+:�GB�_TRACE_VERSION_INFO.?AU_TRACE_VERSION_INFO@@:
uEtwTraceProcessingVersion
uReserved�B.:_TRACE_VERSION_INFO.?AU_TRACE_VERSION_INFO@@/:��2�_MULTI_TIME.?AU_MULTI_TIME@@>
~Qpc��
~HostQpc��
SystemTime���22:_MULTI_TIME.?AU_MULTI_TIME@@3:��>�tagCANDIDATELIST.?AUtagCANDIDATELIST@@��
5:�
"dwSize���
"dwStyle��
"dwCount��
"dwSelection��
"dwPageStart��
"dwPageSize���
7dwOffset�>7:tagCANDIDATELIST.?AUtagCANDIDATELIST@@��8:�K"qq"t::
;:
T-R�_SYSTEM_POOLTAG_INFORMATION.?AU_SYSTEM_POOLTAG_INFORMATION@@&
"Count
<6TagInfo��R?:0_SYSTEM_POOLTAG_INFORMATION.?AU_SYSTEM_POOLTAG_INFORMATION@@@:��

�
4->�RPC_IF_ID_VECTOR.?AURPC_IF_ID_VECTOR@@��2�_RPC_IF_ID.?AU_RPC_IF_ID@@��
E:F:#�"
"Count
G:IfId�>H:RPC_IF_ID_VECTOR.?AURPC_IF_ID_VECTOR@@��I:F�tagCHANGEFILTERSTRUCT.?AUtagCHANGEFILTERSTRUCT@@
K:*
"cbSize���
"ExtStatusFM:tagCHANGEFILTERSTRUCT.?AUtagCHANGEFILTERSTRUCT@@N:L[<J�_CM_SERIAL_DEVICE_DATA.?AU_CM_SERIAL_DEVICE_DATA@@��
P:>
!Version��
!Revision�
"BaudClockJR:_CM_SERIAL_DEVICE_DATA.?AU_CM_SERIAL_DEVICE_DATA@@��S:��R�_FSCTL_OFFLOAD_READ_OUTPUT.?AU_FSCTL_OFFLOAD_READ_OUTPUT@@��N
"Size�
"Flags
#TransferLength���
�TokenRV:_FSCTL_OFFLOAD_READ_OUTPUT.?AU_FSCTL_OFFLOAD_READ_OUTPUT@@��W:U�R�_CONSOLE_SCREEN_BUFFER_INFO.?AU_CONSOLE_SCREEN_BUFFER_INFO@@2�_SMALL_RECT.?AU_SMALL_RECT@@~
j"dwSize���
j"dwCursorPosition�
!wAttributes��
Z:
srWindow�
j"dwMaximumWindowSize��R[:_CONSOLE_SCREEN_BUFFER_INFO.?AU_CONSOLE_SCREEN_BUFFER_INFO@@6onecore\external\sdk\inc\mincore\consoleapi2.h�\:]:�2�_SYSDBG_MSR.?AU_SYSDBG_MSR@@"
"Msr��
#Data�2`:_SYSDBG_MSR.?AU_SYSDBG_MSR@@a:�J�_FILE_PIPE_EVENT_BUFFER.?AU_FILE_PIPE_EVENT_BUFFER@@v
"NamedPipeState���
"EntryType
"ByteCount
"KeyValue�
"NumberRequests���Jd:_FILE_PIPE_EVENT_BUFFER.?AU_FILE_PIPE_EVENT_BUFFER@@e:U)N�_PERFINFO_PROCESS_PERFCTR.?AU_PERFINFO_PROCESS_PERFCTR@@
g:�
"ProcessId
"PageFaultCount���
"HandleCount��
"Reserved�
#PeakVirtualSize��
#PeakWorkingSetSize���
# PeakPagefileUsage
#(QuotaPeakPagedPoolUsage��
#0QuotaPeakNonPagedPoolUsage���
#8VirtualSize��
#@WorkingSetSize���
#HPagefileUsage
#PQuotaPagedPoolUsage��
#XQuotaNonPagedPoolUsage���
#`PrivatePageCount�Ni:h_PERFINFO_PROCESS_PERFCTR.?AU_PERFINFO_PROCESS_PERFCTR@@j:0�
�.r�_TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT@@
m:*
�EnlistmentId�
�UOW��ro: _TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT@@p:��
�
�R�_PERFINFO_SET_POWER_ACTION.?AU_PERFINFO_SET_POWER_ACTION@@��F
Trigger��
"PowerAction��
"LightestStateRu:_PERFINFO_SET_POWER_ACTION.?AU_PERFINFO_SET_POWER_ACTION@@��v:0?Z�_EVENT_EXTENDED_ITEM_PEBS_INDEX.?AU_EVENT_EXTENDED_ITEM_PEBS_INDEX@@
x:
#PebsIndexZz:_EVENT_EXTENDED_ITEM_PEBS_INDEX.?AU_EVENT_EXTENDED_ITEM_PEBS_INDEX@@{:#r�ACTCTX_COMPATIBILITY_ELEMENT_TYPE_UNKNOWNACTCTX_COMPATIBILITY_ELEMENT_TYPE_OS�ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MITIGATION�ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MAXVERSIONTESTED���Zt}:ACTCTX_COMPATIBILITY_ELEMENT_TYPE.?AW4ACTCTX_COMPATIBILITY_ELEMENT_TYPE@@�~:��F�_FILE_ID_INFORMATION.?AU_FILE_ID_INFORMATION@@��6
#VolumeSerialNumber���
.FileId���F�:_FILE_ID_INFORMATION.?AU_FILE_ID_INFORMATION@@���:U��
�ValueN�:_SID_IDENTIFIER_AUTHORITY.?AU_SID_IDENTIFIER_AUTHORITY@@�:EV�_WORKER_FACTORY_DEFERRED_WORK.?AU_WORKER_FACTORY_DEFERRED_WORK@@
7n
�:AlpcSendMessage��
AlpcSendMessagePort��
"AlpcSendMessageFlags�
"FlagsV�:_WORKER_FACTORY_DEFERRED_WORK.?AU_WORKER_FACTORY_DEFERRED_WORK@@�:��
�
11T^�_HEAP_BLOCK_SETTABLE_INFORMATION.?AU_HEAP_BLOCK_SETTABLE_INFORMATION@@��
�:N
#Settable�
!TagIndex�
!
AllocatorBackTraceIndex��^�:_HEAP_BLOCK_SETTABLE_INFORMATION.?AU_HEAP_BLOCK_SETTABLE_INFORMATION@@���:�j�_MEMORY_PARTITION_PAGEFILE_INFORMATION.?AU_MEMORY_PARTITION_PAGEFILE_INFORMATION@@��
�:Z
�PageFileName�
~MinimumSize��
~MaximumSize��
" Flagsj�:(_MEMORY_PARTITION_PAGEFILE_INFORMATION.?AU_MEMORY_PARTITION_PAGEFILE_INFORMATION@@���:B�R�PROCESSOR_IDLESTATE_POLICY.?AUPROCESSOR_IDLESTATE_POLICY@@��
!��
!��
!��V
!AsUSHORT�
�:AllowScaling�
�:Disabled�
�:Reserved�2�:<anonymous-tag>.?AT<anonymous-tag>@@�:F<�#�R
!Revision�
�:Flags
"PolicyCount��
�:Policy���R�: PROCESSOR_IDLESTATE_POLICY.?AUPROCESSOR_IDLESTATE_POLICY@@���:F:Z�_FILE_NETWORK_OPEN_INFORMATION.?AU_FILE_NETWORK_OPEN_INFORMATION@@��
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ChangeTime���
~ AllocationSize���
~(EndOfFile
"0FileAttributes���Z�:8_FILE_NETWORK_OPEN_INFORMATION.?AU_FILE_NETWORK_OPEN_INFORMATION@@���:U0vRtlMitigationOptionStateNotConfiguredRtlMitigationOptionStateOn���RtlMitigationOptionStateOff��^t�:_RTL_IMAGE_MITIGATION_OPTION_STATE.?AW4_RTL_IMAGE_MITIGATION_OPTION_STATE@@����:��B�_WMIGUIDINFORMATION.?AU_WMIGUIDINFORMATION@@
�:B
"Size�
 IsExpensive��
 IsEventOnly��B�:_WMIGUIDINFORMATION.?AU_WMIGUIDINFORMATION@@�:�2�
|b�_REMOTE_LINK_TRACKING_INFORMATION_.?AU_REMOTE_LINK_TRACKING_INFORMATION_@@��
�:~
TargetFileObject�
"TargetLinkTrackingInformationLength��
�TargetLinkTrackingInformationBuffer��b�:_REMOTE_LINK_TRACKING_INFORMATION_.?AU_REMOTE_LINK_TRACKING_INFORMATION_@@���:U�)J�_ALPC_BASIC_INFORMATION.?AU_ALPC_BASIC_INFORMATION@@
�:B
"Flags
"SequenceNo���
PortContext��J�:_ALPC_BASIC_INFORMATION.?AU_ALPC_BASIC_INFORMATION@@�:��
V�_IMAGE_SEPARATE_DEBUG_HEADER.?AU_IMAGE_SEPARATE_DEBUG_HEADER@@��
�:6
!Signature
!Flags
!Machine��
!Characteristics��
"TimeDateStamp
"CheckSum�
"ImageBase
"SizeOfImage��
"NumberOfSections�
"ExportedNamesSize
" DebugDirectorySize���
"$SectionAlignment�
�(Reserved�V
�:0_IMAGE_SEPARATE_DEBUG_HEADER.?AU_IMAGE_SEPARATE_DEBUG_HEADER@@���:f$	
�,.�_CSTRING.?AU_CSTRING@@��B
!Length���
!MaximumLength
Buffer���.�:_CSTRING.?AU_CSTRING@@���:^�_MEMORY_SHARED_COMMIT_INFORMATION.?AU_MEMORY_SHARED_COMMIT_INFORMATION@@
#CommitSize���^�:_MEMORY_SHARED_COMMIT_INFORMATION.?AU_MEMORY_SHARED_COMMIT_INFORMATION@@�:B��
"dwServiceType
"dwCurrentState���
"dwControlsAccepted���
"dwWin32ExitCode��
"dwServiceSpecificExitCode
"dwCheckPoint�
"dwWaitHint���:�:_SERVICE_STATUS.?AU_SERVICE_STATUS@@�:m�G)
�:F�_OBJECT_ATTRIBUTES64.?AU_OBJECT_ATTRIBUTES64@@��
�:��
�:�
"Length���
#RootDirectory
#ObjectName���
"Attributes���
# SecurityDescriptor���
#(SecurityQualityOfService�F�:0_OBJECT_ATTRIBUTES64.?AU_OBJECT_ATTRIBUTES64@@���:
�
�3
�N
�PolicyPublisher��
"PolicyVersion
"PolicyOptionsf�:_SYSTEM_SECUREBOOT_POLICY_INFORMATION.?AU_SYSTEM_SECUREBOOT_POLICY_INFORMATION@@�:�
S9�#(�2
"NumberOfModules��
�:Modules��F�:0_RTL_PROCESS_MODULES.?AU_RTL_PROCESS_MODULES@@���:��f�_SYSTEM_NET_RATE_CONTROL_SET_CONTEXT.?AU_SYSTEM_NET_RATE_CONTROL_SET_CONTEXT@@��
"��
"��
"��
"��
"��
"���
U&Header���
#MaxBandwidth�
�ContainerId��
" Flags
�: Set��
�: Update���
�: Clear
�: DscpTagEnabled���
�: MaxBandwidthEnabled��
�: Reserved�
 $DscpTag��f�:(_SYSTEM_NET_RATE_CONTROL_SET_CONTEXT.?AU_SYSTEM_NET_RATE_CONTROL_SET_CONTEXT@@���:|�
3##��J
!Count
!Size�
"Reserved�
�:Bitmap���6�:�_KAFFINITY_EX.?AU_KAFFINITY_EX@@�:7T
^z�_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST.?AU_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST@@��
�:##�"
�:PreviousChangeStamps�z�:_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST.?AU_SYSTEM_FEATURE_CONFIGURATION_SECTIONS_REQUEST@@���:��b�_ETW_TRACE_PARTITION_INFORMATION_V2.?AU_ETW_TRACE_PARTITION_INFORMATION_V2@@b
QpcOffsetFromRoot
"PartitionType
qPartitionId��
qParentId�b�: _ETW_TRACE_PARTITION_INFORMATION_V2.?AU_ETW_TRACE_PARTITION_INFORMATION_V2@@�:��
�N�_PERFINFO_FILE_READ_WRITE.?AU_PERFINFO_FILE_READ_WRITE@@
�:�
#Offset���
#Irp��
#FileObject���
#FileKey��
" IssuingThreadId��
"$Size�
"(Flags
",ExtraFlags���N�:0_PERFINFO_FILE_READ_WRITE.?AU_PERFINFO_FILE_READ_WRITE@@�:0�t
;B�_FILE_STORAGE_INFO.?AU_FILE_STORAGE_INFO@@��&
"LogicalBytesPerSector
"PhysicalBytesPerSectorForAtomicity���
"PhysicalBytesPerSectorForPerformance�
"FileSystemEffectivePhysicalBytesPerSectorForAtomicity
"Flags
"ByteOffsetForSectorAlignment�
"ByteOffsetForPartitionAlignment��B;_FILE_STORAGE_INFO.?AU_FILE_STORAGE_INFO@@��;<#j�_FILE_DESIRED_STORAGE_CLASS_INFORMATION.?AU_FILE_DESIRED_STORAGE_CLASS_INFORMATION@@"
uClass
"Flagsj;_FILE_DESIRED_STORAGE_CLASS_INFORMATION.?AU_FILE_DESIRED_STORAGE_CLASS_INFORMATION@@	;U2 
�+2
�Id���
#CurrentAllocatedBytes:;_RTLP_TAG_INFO.?AU_RTLP_TAG_INFO@@��
;��n�_STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE@@���4#�r�_STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY@@��;#�b
"ResponseLevel
"NumberEntries
;Lev1Depends��
;Lev2Depends��n;L_STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE@@��;Ub
�(��
;F�_RTL_RELATIVE_NAME_U.?AU_RTL_RELATIVE_NAME_U@@��
� N
�RelativeName�
ContainingDirectory��
;CurDirRefF; _RTL_RELATIVE_NAME_U.?AU_RTL_RELATIVE_NAME_U@@��;�a
)f�_EVENT_TRACE_PERFORMANCE_INFORMATION.?AU_EVENT_TRACE_PERFORMANCE_INFORMATION@@��
;J
EventTraceInformationClass���
~LogfileBytesWritten��f ;_EVENT_TRACE_PERFORMANCE_INFORMATION.?AU_EVENT_TRACE_PERFORMANCE_INFORMATION@@��!;�J�_HEAP_BLOCK_INFORMATION.?AU_HEAP_BLOCK_INFORMATION@@�
"Level
#Size�
##ProcessHeapInformation���
|4HeapInformation��
HeapRegionInformation
�$HeapRangeInformation�
#;HeapBlockInformation�
�6HeapPerfInformation��
#DynamicStart�J	$;�_HEAP_INFORMATION_ITEM.?AU_HEAP_INFORMATION_ITEM@@��%;�=
qJ�_EVENT_INSTANCE_HEADER.?AU_EVENT_INSTANCE_HEADER@@��
(;6
 Type�
 Level
!Version��:*;<anonymous-tag>.?AU<anonymous-tag>@@+;�S�
!Size�
!FieldTypeFlags���
 HeaderType���
 MarkerFlags��
"Version��
+;Class
"ThreadId�
"ProcessId
~TimeStamp
#RegHandle
" InstanceId���
"$ParentInstanceId�
"(KernelTime���
",UserTime�
#(ProcessorTime
"(EventId��
",Flags
#0ParentRegHandle��J-;8_EVENT_INSTANCE_HEADER.?AU_EVENT_INSTANCE_HEADER@@��.;�H
�
>Z�_CM_PNP_BIOS_INSTALLATION_CHECK.?AU_CM_PNP_BIOS_INSTALLATION_CHECK@@v
�Signature
 Revision�
 Length���
!ControlField�
 Checksum�
"	EventFlagAddress�
!
RealModeEntryOffset��
!RealModeEntrySegment�
!ProtectedModeEntryOffset�
"ProtectedModeCodeBaseAddress�
"OemDeviceId��
!RealModeDataBaseAddress��
"ProtectedModeDataBaseAddress�Z
3;!_CM_PNP_BIOS_INSTALLATION_CHECK.?AU_CM_PNP_BIOS_INSTALLATION_CHECK@@4;�i
""7;
8;J�_FILE_LAYOUT_NAME_ENTRY.?AU_FILE_LAYOUT_NAME_ENTRY@@�
"NextNameOffset���
"Flags
#ParentFileReferenceNumber
"FileNameLength���
"Reserved�
JFileName�J;; _FILE_LAYOUT_NAME_ENTRY.?AU_FILE_LAYOUT_NAME_ENTRY@@<;U�:�tagEMRCREATEPEN.?AUtagEMRCREATEPEN@@
>;2
Pemr��
"ihPen
s,lopn�:@;tagEMRCREATEPEN.?AUtagEMRCREATEPEN@@A;SN
�R�_SYSDBG_KD_PULL_REMOTE_FILE.?AU_SYSDBG_KD_PULL_REMOTE_FILE@@
�ImageFileNameRE;_SYSDBG_KD_PULL_REMOTE_FILE.?AU_SYSDBG_KD_PULL_REMOTE_FILE@@F;��ZSeLearningModeInvalidTypeSeLearningModeSettings���SeLearningModeMaxNtH;_SE_LEARNING_MODE_DATA_TYPE.?AW4_SE_LEARNING_MODE_DATA_TYPE@@�I;E3
�!
z3~PowerUserPresent�PowerUserNotPresent��PowerUserInactivePowerUserMaximum�PowerUserInvalid�FtM;_USER_ACTIVITY_PRESENCE.?AW4_USER_ACTIVITY_PRESENCE@@�N;F�
�)^�_ETW_COVERAGE_SAMPLER_PERF_STATS.?AU_ETW_COVERAGE_SAMPLER_PERF_STATS@@��*
#RunTime��
SampleProfile
SampleCSwitch
SampleRThread
SamplePGFault
CaptureSampleProfile�
CaptureSampleCSwitch�
 CaptureSampleRThread�
$CaptureSamplePGFault�
(CoverageSamplerCreated���
,CoverageSamplerDeleted���
0CoverageSamplerStarted���
4CoverageSamplerPaused
8CoverageSamplerResumed���
<CoverageSamplerStopped���
@CoverageSamplerQueried���
DCoverageSamplerQueryFailNotActive
HSamplesAdded�
LSamplesFound�
PSamplesDropped���
TSamplesMappedUM��
XSamplesMappedKM��
\SamplesTryMapUM��
`SamplesTryMapKM��
dSamplesAddedAlreadyMapped
hModulesTrackedUM�
lModulesMappedUM��
pModulesUnmappedUM
tModulesTrackedKM�
xModulesMappedKM��
|ModulesUnmappedKM
�ModulesCleared���
�ModulesPruned
�ModulesPrunedPendingDelete���
�ModulesOutOfDatePendingDelete
�ModuleBucketsGrown���
�ModuleDebugInfoFailedQuery���
�ModuleDebugInfoTooLarge��
�ModuleIdHashDuplicate
�ModuleIdHashConflict�
�ProcessesTracked�
�ProcessesIgnored�
�ProcessesDeleted�
�CaptureSampleAttempts
�CaptureSampleSamplingPaused��
�CaptureKernelStack���
�CaptureUserStack�
�CaptureIPNotInStack��
�CaptureSampleIdle
�CaptureUserCheckSystemThread�
�CaptureUserCheckNullTeb��
�CaptureUserCheckTerminating��
�CaptureUserCheckSuspended
�CaptureApcNotInGoodEnvironment���
�CaptureRebalanceQueue
�CaptureRebalance�
�CaptureApc���
�CaptureApcNotAvailable���
�CaptureApcThreadNotQueueable�
�CaptureApcAlreadyQueued��
�CaptureThreadAlreadySampling�
�CaptureApcQueue��
�CaptureApcQueueAtHighIrql
CaptureApcFailedToQueue��
CaptureApcFailedToQueueAtHighIrql
CaptureApcFailedToQueueAtHighIrqlNotRunning��
CaptureApcFailedToQueueAtHighIrqlNotApcQueueable�
CaptureApcRundown
CaptureApcCancel�
CaptureApcCancelFailRemove���
CaptureBufferNotAvailable
 CaptureBufferReleaseEmpty
$CaptureBufferQueued��
(CaptureBufferCopied��
,CaptureStartFailureCleanup���
0SampleBufferNotAvailable�
4WorkerWakeUpForCaptureBuffer�
8WorkerWakeUpForRebalance�
<WorkerProcessCaptureBuffer���
@WorkerProcessSampleBuffer
DWorkerProcessFlushBuffer�
HStackHashMiss
LStackHashHit�
PStackHashHitInHistory
TStackHashSwitchTables
XStackHashCollisionInAdd��
\StackHashAddHitLoad��
`StackHashAddHitMax���
dBloomFilterExceptions
hBloomFilterSet���
lBloomFilterOnCreate��
pBloomFilterHit���
tBloomFilterMiss��
xBufferSamplesCopied��
|BufferSamplesProcessed���
�BufferSamplesAddedToSampler��
�BufferAddressesCopied
�BufferAddressesProcessed�
�BufferAddressesAddedToSampler
�ReserveFailedAcquireLock�
�ReserveCaptureStopped
�ReserveNewBufferSet��
�ReserveNewBufferFailed���
�ReserveNewBufferAllocated
�ReserveNewBufferReleased�
�ReserveSucceeded�
�TableGrew
�TableGrow
�TableQueued��
�TableHitInCurrent
�TableHitInOld^oR;�_ETW_COVERAGE_SAMPLER_PERF_STATS.?AU_ETW_COVERAGE_SAMPLER_PERF_STATS@@��S;"R�_WMI_IMAGELOAD_INFORMATION.?AU_WMI_IMAGELOAD_INFORMATION@@��2
ImageBase
#ImageSize
"ProcessId
"ImageChecksum
"TimeDateStamp
 SignatureLevel���
 SignatureType
!Reserved0
 DefaultBase��
"(Reserved1
",Reserved2
"0Reserved3
"4Reserved4
J8FileName�RV;@_WMI_IMAGELOAD_INFORMATION.?AU_WMI_IMAGELOAD_INFORMATION@@��W;0D.�_TP_WORK.?AU_TP_WORK@@��
Y;�Z;[;
\;
df�_PERFINFO_SPEC_CONTROL_RETPOLINE_EXIT.?AU_PERFINFO_SPEC_CONTROL_RETPOLINE_EXIT@@
#TargetAddressf`;_PERFINFO_SPEC_CONTROL_RETPOLINE_EXIT.?AU_PERFINFO_SPEC_CONTROL_RETPOLINE_EXIT@@a;08
!7:�_SYSDBG_VIRTUAL.?AU_SYSDBG_VIRTUAL@@>
Address��
Buffer���
"Request��:e;_SYSDBG_VIRTUAL.?AU_SYSDBG_VIRTUAL@@f;��b�_PROCESS_CHILD_PROCESS_INFORMATION.?AU_PROCESS_CHILD_PROCESS_INFORMATION@@��v
 ProhibitChildProcesses���
 AlwaysAllowSecureChildProcess
 AuditProhibitChildProcesses��bi;_PROCESS_CHILD_PROCESS_INFORMATION.?AU_PROCESS_CHILD_PROCESS_INFORMATION@@��j;}�6�tagLOGPALETTE.?AUtagLOGPALETTE@@
l;:�tagPALETTEENTRY.?AUtagPALETTEENTRY@@n;#�J
!palVersion���
!palNumEntries
o;palPalEntry��6p;tagLOGPALETTE.?AUtagLOGPALETTE@@q;S�.PerfInfoDomainChangeEventIdleHaltPerfInfoDomainChangeEventIdleResume��PerfInfoDomainChangeEventUserRestore�PerfInfoDomainChangeEventUserCallout�PerfInfoDomainChangeEventEnterSyscallPerfInfoDomainChangeEventEnterTrap���PerfInfoDomainChangeEventMaximum�bts;_PERFINFO_DOMAIN_CHANGE_EVENT_REASON.?AW4_PERFINFO_DOMAIN_CHANGE_EVENT_REASON@@���t;0
t;
�
P0
Hj�_SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT.?AU_SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT@@��
z;.
#Hits�
 PercentFrequency�j|;_SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT.?AU_SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT@@��};�N�READ_USN_JOURNAL_DATA_V1.?AUREAD_USN_JOURNAL_DATA_V1@@��
;�
StartUsn�
"ReasonMask���
"ReturnOnlyOnClose
#Timeout��
#BytesToWaitFor���
# UsnJournalID�
!(MinMajorVersion��
!*MaxMajorVersion��N�;0READ_USN_JOURNAL_DATA_V1.?AUREAD_USN_JOURNAL_DATA_V1@@���;U9:�_MMPFN_IDENTITY.?AU_MMPFN_IDENTITY@@N�_MEMORY_FRAME_INFORMATION.?AU_MEMORY_FRAME_INFORMATION@@F�_PAGEDIR_INFORMATION.?AU_PAGEDIR_INFORMATION@@��B
�;e1���
�1e2���
�;e3���
�%e4���2�;<anonymous-tag>.?AT<anonymous-tag>@@�;B%
#��
#��&
�;Image
�;Mismatch�:�;<anonymous-tag>.?AU<anonymous-tag>@@�;B-
#��
�;CombinedPage�:�;<anonymous-tag>.?AU<anonymous-tag>@@�;B1�
�;e1���
�;e2���
FileObject���
UniqueFileObjectKey��
ProtoPteAddress��
VirtualAddress���2�;<anonymous-tag>.?AT<anonymous-tag>@@�;B,>
�;u1���
#PageFrameIndex���
�;u2���:�;_MMPFN_IDENTITY.?AU_MMPFN_IDENTITY@@�;B$R�_JOBOBJECT_WAKE_INFORMATION.?AU_JOBOBJECT_WAKE_INFORMATION@@
�;##8�:
#NotificationChannel��
�;WakeCounters�R�;@_JOBOBJECT_WAKE_INFORMATION.?AU_JOBOBJECT_WAKE_INFORMATION@@�;b3V�_FILE_SET_DEFECT_MGMT_BUFFER.?AU_FILE_SET_DEFECT_MGMT_BUFFER@@��
 Disable��V�;_FILE_SET_DEFECT_MGMT_BUFFER.?AU_FILE_SET_DEFECT_MGMT_BUFFER@@���;U'Z�_SYSTEM_PROCESS_ID_INFORMATION.?AU_SYSTEM_PROCESS_ID_INFORMATION@@��
�;*
ProcessId
�ImageNameZ�;_SYSTEM_PROCESS_ID_INFORMATION.?AU_SYSTEM_PROCESS_ID_INFORMATION@@���;�`F�_RPC_TRANSFER_SYNTAX.?AU_RPC_TRANSFER_SYNTAX@@��:
�Uuid�
!VersMajor
!VersMinorF�;_RPC_TRANSFER_SYNTAX.?AU_RPC_TRANSFER_SYNTAX@@���;��
 "
a/
2�_FILE_PATH.?AU_FILE_PATH@@��
�;N
"Version��
"Length���
"Type�
�FilePath�2�;_FILE_PATH.?AU_FILE_PATH@@���;�sf�_PERFINFO_PAGECOMBINE_AGGREGATE_STAT.?AU_PERFINFO_PAGECOMBINE_AGGREGATE_STAT@@��
�;
"��
"��
�;StatType�
�;Spare
"CombineScanCount�
#PagesScanned�
#PagesCombined
CombinedBlocksInUse��
SumCombinedBlocksReferenceCount��f�; _PERFINFO_PAGECOMBINE_AGGREGATE_STAT.?AU_PERFINFO_PAGECOMBINE_AGGREGATE_STAT@@���;0(N
 peRed
 peGreen��
 peBlue���
 peFlags��:�;tagPALETTEENTRY.?AUtagPALETTEENTRY@@�;S�v�_TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT@@��
�;
"SavepointId��v�;_TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT@@���;��Z�_KNONVOLATILE_CONTEXT_POINTERS.?AU_KNONVOLATILE_CONTEXT_POINTERS@@��
�;
9�;#��##��:
�;FloatingContext��
�;Xmm0�
�;Xmm1�
�;Xmm2�
�;Xmm3�
�; Xmm4�
�;(Xmm5�
�;0Xmm6�
�;8Xmm7�
�;@Xmm8�
�;HXmm9�
�;PXmm10
�;XXmm11
�;`Xmm12
�;hXmm13
�;pXmm14
�;xXmm15
�;�IntegerContext���
#�Rax��
#�Rcx��
#�Rdx��
#�Rbx��
#�Rsp��
#�Rbp��
#�Rsi��
#�Rdi��
#�R8���
#�R9���
#�R10��
#�R11��
#�R12��
#�R13��
#�R14��
#�R15��Z"�;_KNONVOLATILE_CONTEXT_POINTERS.?AU_KNONVOLATILE_CONTEXT_POINTERS@@���;�&�J�_ETW_HEAP_EVENT_COMMON.?AU_ETW_HEAP_EVENT_COMMON@@��*
8Header���
 Handle���J�;(_ETW_HEAP_EVENT_COMMON.?AU_ETW_HEAP_EVENT_COMMON@@���;0�
N�_COVERAGE_SECTION_HEADER.?AU_COVERAGE_SECTION_HEADER@@��
�;�
"Signature
"CoverageType�
.MD5Hash��
"CoverageSectionSize��
"CoverageVectorSize���
" CoverageVectorOffset�
"$ExtraDataOffset��N�;(_COVERAGE_SECTION_HEADER.?AU_COVERAGE_SECTION_HEADER@@���;�'R�_PERFINFO_PO_NOTIFY_DEVICE.?AU_PERFINFO_PO_NOTIFY_DEVICE@@���
Irp��
DriverStart��
 OrderLevel���
 MajorFunction
 MinorFunction
oType�
�!State
"DeviceNameLength�
J DeviceName���R	�;(_PERFINFO_PO_NOTIFY_DEVICE.?AU_PERFINFO_PO_NOTIFY_DEVICE@@���;0nqt�;
�;


s 
0 �;���;r�_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION.?AU_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION@@��
�;�
L(BasicInfo
|0IoInfo���
�`DiskIoInfo���
#�ContextSwitches��
~�TotalCycleTime���
#�ReadyTime
M(�EnergyValues�r�;�_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION.?AU_JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION@@���;b�
�+B�_SCRUB_DATA_OUTPUT.?AU_SCRUB_DATA_OUTPUT@@��"#$��
"Size�
"Flags
"Status���
#ErrorFileOffset��
#ErrorLength��
# NumberOfBytesRepaired
#(NumberOfBytesFailed��
#0InternalFileReference
!8ResumeContextLength��
!:ParityExtentDataOffset���
�;<Reserved�
#`NumberOfMetadataBytesProcessed���
#hNumberOfDataBytesProcessed���
#pTotalNumberOfMetadataBytesInUse��
#xTotalNumberOfDataBytesInUse��
�6�ResumeContextB�;�_SCRUB_DATA_OUTPUT.?AU_SCRUB_DATA_OUTPUT@@���;U/'.�HLSURF__.?AUHLSURF__@@��
tunused���.�;HLSURF__.?AUHLSURF__@@���;y'�N�_ACL_REVISION_INFORMATION.?AU_ACL_REVISION_INFORMATION@@
"AclRevision��N�;_ACL_REVISION_INFORMATION.?AU_ACL_REVISION_INFORMATION@@�;ES
b$r�_TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT@@��*
"MarshalCookie
�UOW��r�;_TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT.?AU_TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT@@���;��J�_IMAGE_TLS_DIRECTORY32.?AU_IMAGE_TLS_DIRECTORY32@@��
"��
"��
"���
"StartAddressOfRawData
"EndAddressOfRawData��
"AddressOfIndex���
"AddressOfCallBacks���
"SizeOfZeroFill���
"Characteristics��
�;Reserved0
�;Alignment
�;Reserved1J	�;_IMAGE_TLS_DIRECTORY32.?AU_IMAGE_TLS_DIRECTORY32@@���;f�Z�_STREAMS_QUERY_ID_OUTPUT_BUFFER.?AU_STREAMS_QUERY_ID_OUTPUT_BUFFER@@
"StreamId�Z<_STREAMS_QUERY_ID_OUTPUT_BUFFER.?AU_STREAMS_QUERY_ID_OUTPUT_BUFFER@@<U� >�RPC_STATS_VECTOR.?AURPC_STATS_VECTOR@@��"#�"
uCount
<Stats><RPC_STATS_VECTOR.?AURPC_STATS_VECTOR@@��<f�_ALPC_PORT_ASSOCIATE_COMPLETION_PORT.?AU_ALPC_PORT_ASSOCIATE_COMPLETION_PORT@@��
	<6
CompletionKey
CompletionPort���f<_ALPC_PORT_ASSOCIATE_COMPLETION_PORT.?AU_ALPC_PORT_ASSOCIATE_COMPLETION_PORT@@��<�F�_FILE_ALIGNMENT_INFO.?AU_FILE_ALIGNMENT_INFO@@��"
"AlignmentRequirement�F<_FILE_ALIGNMENT_INFO.?AU_FILE_ALIGNMENT_INFO@@��<<#
�2^�_RPC_BINDING_HANDLE_TEMPLATE_V1_W.?AU_RPC_BINDING_HANDLE_TEMPLATE_V1_W@@
qReserved�2<<anonymous-tag>.?AT<anonymous-tag>@@<��
"Version��
"Flags
"ProtocolSequence�
qNetworkAddress���
qStringEndpoint���
< u1���
�(ObjectUuid���^<8_RPC_BINDING_HANDLE_TEMPLATE_V1_W.?AU_RPC_BINDING_HANDLE_TEMPLATE_V1_W@@<�bJournalAbsoluteInformation���JournalClientInformation�MaxJournalInformationNt<_JOURNAL_INFORMATION_CLASS.?AW4_JOURNAL_INFORMATION_CLASS@@���<z�B�tagINPUT_TRANSFORM.?AUtagINPUT_TRANSFORM@@��@#�<#@�
@_11��
@_12��
@_13��
@_14��
@_21��
@_22��
@_23��
@_24��
@ _31��
@$_32��
@(_33��
@,_34��
@0_41��
@4_42��
@8_43��
@<_44��
<mB <@tagINPUT_TRANSFORM.?AUtagINPUT_TRANSFORM@@��!<L�p��!t#<
$<
�
0
-:F�_CM_SONIC_DEVICE_DATA.?AU_CM_SONIC_DEVICE_DATA@@j
!Version��
!Revision�
!DataConfigurationRegister
�EthernetAddress��F*<_CM_SONIC_DEVICE_DATA.?AU_CM_SONIC_DEVICE_DATA@@+<��:�CM_Power_Data_s.?AUCM_Power_Data_s@@�#��
"PD_Size��
�PD_MostRecentPowerState��
"PD_Capabilities��
"PD_D1Latency�
"PD_D2Latency�
"PD_D3Latency�
.<PD_PowerStateMapping�
�4PD_DeepestSystemWake�:/<8CM_Power_Data_s.?AUCM_Power_Data_s@@0<FbR�_KEY_VALUE_FULL_INFORMATION.?AU_KEY_VALUE_FULL_INFORMATION@@�
"TitleIndex���
"Type�
"DataOffset���
"DataLength���
"NameLength���
JName�R3<_KEY_VALUE_FULL_INFORMATION.?AU_KEY_VALUE_FULL_INFORMATION@@4<�O
>^�_ETW_COVERAGE_SAMPLER_STATUS_INFO.?AU_ETW_COVERAGE_SAMPLER_STATUS_INFO@@V�_ETW_COVERAGE_SAMPLER_STATUS.?AU_ETW_COVERAGE_SAMPLER_STATUS@@��*
�Common���
8<Status���^9<_ETW_COVERAGE_SAMPLER_STATUS_INFO.?AU_ETW_COVERAGE_SAMPLER_STATUS_INFO@@:<-:�_RTL_HASH_ENTRY.?AU_RTL_HASH_ENTRY@@*
BucketLink���
#Key��:=<_RTL_HASH_ENTRY.?AU_RTL_HASH_ENTRY@@><m*B�_PS_ATTRIBUTE_LIST.?AU_PS_ATTRIBUTE_LIST@@��6�_PS_ATTRIBUTE.?AU_PS_ATTRIBUTE@@A<# �2
#TotalLength��
B<Attributes���BC<(_PS_ATTRIBUTE_LIST.?AU_PS_ATTRIBUTE_LIST@@��D<b�6�_RATE_QUOTA_LIMIT.?AT_RATE_QUOTA_LIMIT@@
F<
"��
"��B
"RateData�
H<RatePercent��
I<Reserved06J<_RATE_QUOTA_LIMIT.?AT_RATE_QUOTA_LIMIT@@K<}�F�_PHYSICAL_DISK_RECORD.?AU_PHYSICAL_DISK_RECORD@@q#�N
"DiskNumber���
"BytesPerSector���
"SectorsPerTrack��
"TracksPerCylinder
#Cylinders
"SCSIPortNumber���
"SCSIPathId���
" SCSITargetId�
"$SCSILun��
�(Manufacturer�
"(PartitionCount���
 ,WriteCacheEnabled
N<.BootDriveLetter��F
O<8_PHYSICAL_DISK_RECORD.?AU_PHYSICAL_DISK_RECORD@@P<0�6�tagEMRFILLRGN.?AUtagEMRFILLRGN@@
R<b
Pemr��
,rclBounds
"cbRgnData
"ihBrush��
� RgnData��6T<$tagEMRFILLRGN.?AUtagEMRFILLRGN@@U<S�6�_PEB_LDR_DATA.?AU_PEB_LDR_DATA@@
W<

"Length���
 Initialized��
SsHandle�
�InLoadOrderModuleList
� InMemoryOrderModuleList��
�0InInitializationOrderModuleList��
@EntryInProgress��
 HShutdownInProgress���
PShutdownThreadId�6	Y<X_PEB_LDR_DATA.?AU_PEB_LDR_DATA@@Z<},
b
 ProcessorNumber��
 Alignment
!ProcessorIndex���
!LoggerId�B]<_ETW_BUFFER_CONTEXT.?AU_ETW_BUFFER_CONTEXT@@^<��B�tagEMROFFSETCLIPRGN.?AUtagEMROFFSETCLIPRGN@@&
Pemr��
�ptlOffsetBa<tagEMROFFSETCLIPRGN.?AUtagEMROFFSETCLIPRGN@@b<S�
Q0Z
�elfLogFont���
�\elfFullName��
��elfStyle�
�elfScript>e<\tagENUMLOGFONTEXW.?AUtagENUMLOGFONTEXW@@f<S�
�2V�_JOBOBJECT_JOBSET_INFORMATION.?AU_JOBOBJECT_JOBSET_INFORMATION@@
"MemberLevel��Vj<_JOBOBJECT_JOBSET_INFORMATION.?AU_JOBOBJECT_JOBSET_INFORMATION@@k<}�
:6�_UNWIND_INFO.?AU_UNWIND_INFO@@��
 ��
 ��
 ��
 ��\&#�
o<Version��
p<Flags
 SizeOfProlog�
 CountOfCodes�
q<FrameRegister
r<FrameOffset��
s<UnwindCode���6t<_UNWIND_INFO.?AU_UNWIND_INFO@@��u<�:�_XSTATE_CONTEXT.?AU_XSTATE_CONTEXT@@
w<
�^
#Mask�
"Length���
"Reserved1
y<Area�
Buffer���:z< _XSTATE_CONTEXT.?AU_XSTATE_CONTEXT@@{<$
"��
"��
"��
"��
"��
"���
"Flags
}<Reserved0
~<SameAccess���
<SameAttributes���
�<Indirect�
�<Inherit��
�<Reserved1
"Handle���
"ObjectType���
"DesiredAccess
"GrantedAccessB�<_ALPC_HANDLE_ATTR32.?AU_ALPC_HANDLE_ATTR32@@�<�)�
HandleValue��
#HandleCount��
#PointerCount�
"GrantedAccess
"ObjectTypeIndex��
" HandleAttributes�
"$Reserved�^�<(_PROCESS_HANDLE_TABLE_ENTRY_INFO.?AU_PROCESS_HANDLE_TABLE_ENTRY_INFO@@���<b�V�_SERVICE_FAILURE_ACTIONS_FLAG.?AU_SERVICE_FAILURE_ACTIONS_FLAG@@.
tfFailureActionsOnNonCrashFailuresV�<_SERVICE_FAILURE_ACTIONS_FLAG.?AU_SERVICE_FAILURE_ACTIONS_FLAG@@�<mCn�_SYSTEM_FEATURE_CONFIGURATION_INFORMATION.?AU_SYSTEM_FEATURE_CONFIGURATION_INFORMATION@@2
#ChangeStamp��
+Configurationn�<_SYSTEM_FEATURE_CONFIGURATION_INFORMATION.?AU_SYSTEM_FEATURE_CONFIGURATION_INFORMATION@@�<�c
x5
�#
L(�
~TotalUserTime
~TotalKernelTime��
~ThisPeriodTotalUserTime��
~ThisPeriodTotalKernelTime
" TotalPageFaultCount��
"$TotalProcesses���
"(ActiveProcesses��
",TotalTerminatedProcesses�j�<0_JOBOBJECT_BASIC_ACCOUNTING_INFORMATION.?AU_JOBOBJECT_BASIC_ACCOUNTING_INFORMATION@@�<}If�_SYSTEM_QUERY_TIME_ADJUST_INFORMATION.?AU_SYSTEM_QUERY_TIME_ADJUST_INFORMATION@@J
"TimeAdjustment���
"TimeIncrement
 Enable���f�<_SYSTEM_QUERY_TIME_ADJUST_INFORMATION.?AU_SYSTEM_QUERY_TIME_ADJUST_INFORMATION@@�<�cB�_KERNEL_USER_TIMES.?AU_KERNEL_USER_TIMES@@��Z
~CreateTime���
~ExitTime�
~KernelTime���
~UserTime�B�< _KERNEL_USER_TIMES.?AU_KERNEL_USER_TIMES@@���<}�f�_CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1.?AU_CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1@@f
�pInt64���
�pUint64��
�ppString�
�pFqbn
�pOctetString�2�<<anonymous-tag>.?AT<anonymous-tag>@@�<E
v
"Name�
!ValueType
!Reserved�
"Flags
"ValueCount���
�<Values���f�<_CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1.?AU_CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1@@�<E�	B�_IMAGE_THUNK_DATA32.?AU_IMAGE_THUNK_DATA32@@
�<��
�<^
"ForwarderString��
"Function�
"Ordinal��
"AddressOfData2�<<anonymous-tag>.?AT<anonymous-tag>@@�<f�
�<u1���B�<_IMAGE_THUNK_DATA32.?AU_IMAGE_THUNK_DATA32@@�<f�F�_IMAGE_FUNCTION_ENTRY.?AU_IMAGE_FUNCTION_ENTRY@@N
"StartingAddress��
"EndingAddress
"EndOfPrologueF�<_IMAGE_FUNCTION_ENTRY.?AU_IMAGE_FUNCTION_ENTRY@@�<f	#�<
U&*
#PolicyCookie�
�Type�j�<_SYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER.?AU_SYSTEM_NET_RATE_CONTROL_CONTEXT_HEADER@@�<|�b�_SYSTEM_SET_TIME_ADJUST_INFORMATION.?AU_SYSTEM_SET_TIME_ADJUST_INFORMATION@@
�<2
"TimeAdjustment���
 Enable���b�<_SYSTEM_SET_TIME_ADJUST_INFORMATION.?AU_SYSTEM_SET_TIME_ADJUST_INFORMATION@@�<�ob�_PERFINFO_KERNELMEMORY_RANGE_USAGE.?AU_PERFINFO_KERNELMEMORY_RANGE_USAGE@@��
�<
"��
"��V
�<UsageType
�<Spare
VirtualAddress���
#PageCountb�<_PERFINFO_KERNELMEMORY_RANGE_USAGE.?AU_PERFINFO_KERNELMEMORY_RANGE_USAGE@@���<0J�tagPOINTER_DEVICE_INFO.?AUtagPOINTER_DEVICE_INFO@@��2�HMONITOR__.?AUHMONITOR__@@��
�<q#�
"displayOrientation���
device���
y,pointerDeviceType
�<monitor��
" startingCursorId�
!$maxActiveContacts
�<&productStringJ�<8tagPOINTER_DEVICE_INFO.?AUtagPOINTER_DEVICE_INFO@@���<L�;
�4R�_SYSTEM_HANDLE_INFORMATION.?AU_SYSTEM_HANDLE_INFORMATION@@��Z�_SYSTEM_HANDLE_TABLE_ENTRY_INFO.?AU_SYSTEM_HANDLE_TABLE_ENTRY_INFO@@�<#�2
"NumberOfHandles��
�<Handles��R�< _SYSTEM_HANDLE_INFORMATION.?AU_SYSTEM_HANDLE_INFORMATION@@���<�	:�tagENUMLOGFONTA.?AUtagENUMLOGFONTA@@
�<F
�elfLogFont���
�+<elfFullName��
�|elfStyle�:�<�tagENUMLOGFONTA.?AUtagENUMLOGFONTA@@�<S�
�8N�_MEM_ADDRESS_REQUIREMENTS.?AU_MEM_ADDRESS_REQUIREMENTS@@V
LowestStartingAddress
HighestEndingAddress�
#AlignmentN�<_MEM_ADDRESS_REQUIREMENTS.?AU_MEM_ADDRESS_REQUIREMENTS@@�<y�
�):�_REASON_BUFFER.?AU_REASON_BUFFER@@��
"Flags
#ResourceFileNameOffset���
!ResourceReasonId�
"StringCount��
#SubstitutionStringsOffset
#SimpleStringOffset���:�< _REASON_BUFFER.?AU_REASON_BUFFER@@���<F�
L3
�26�_EVENT_TRACE.?AU_EVENT_TRACE@@��
�2
�<
�<�<
�<

�<�<
�<�
pLogFileName��
pLoggerName���
CurrentTime��
"BuffersRead��
"LogFileMode��
"ProcessTraceMode�
�< CurrentEvent�
�9xLogfileHeader
�<�BufferCallback���
"�BufferSize���
"�Filled���
"�EventsLost���
�<�EventCallback
�<�EventRecordCallback��
"�IsKernelTrace
�Context��F�<�_EVENT_TRACE_LOGFILEA.?AU_EVENT_TRACE_LOGFILEA@@�<��
�+V�_CLAIM_SECURITY_ATTRIBUTE_V1.?AU_CLAIM_SECURITY_ATTRIBUTE_V1@@��
�<
�2v�_CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE.?AU_CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE@@��
�<f
pInt64���
#pUint64��
�-ppString�
�<pFqbn
�<pOctetString�2�<<anonymous-tag>.?AT<anonymous-tag>@@�<E�	v
qName�
!ValueType
!
Reserved�
"Flags
"ValueCount���
�<Values���V�< _CLAIM_SECURITY_ATTRIBUTE_V1.?AU_CLAIM_SECURITY_ATTRIBUTE_V1@@���<E�	:�tagMETAFILEPICT.?AUtagMETAFILEPICT@@2�HMETAFILE__.?AUHMETAFILE__@@
�<B
mm���
xExt�
yExt�
�<hMF��:=tagMETAFILEPICT.?AUtagMETAFILEPICT@@=S
1
�>�_TOKEN_STATISTICS.?AU_TOKEN_STATISTICS@@
TTokenId��
TAuthenticationId�
~ExpirationTime���
�$TokenType
�ImpersonationLevel���
" DynamicCharged���
"$DynamicAvailable�
"(GroupCount���
",PrivilegeCount���
T0ModifiedId���>
=8_TOKEN_STATISTICS.?AU_TOKEN_STATISTICS@@=E�f�_SYSTEM_INTERRUPT_CPU_SET_INFORMATION.?AU_SYSTEM_INTERRUPT_CPU_SET_INFORMATION@@6
"Gsiv�
!Group
#CpuSets��f
=_SYSTEM_INTERRUPT_CPU_SET_INFORMATION.?AU_SYSTEM_INTERRUPT_CPU_SET_INFORMATION@@=��
o>�tagCBT_CREATEWNDA.?AUtagCBT_CREATEWNDA@@
=.
�*lpcs�
�hwndInsertAfter��>=tagCBT_CREATEWNDA.?AUtagCBT_CREATEWNDA@@=LU6�_NETRESOURCEA.?AU_NETRESOURCEA@@�
"dwScope��
"dwType���
"dwDisplayType
"dwUsage��
plpLocalName��
plpRemoteName�
p lpComment
p(lpProvider���6=0_NETRESOURCEA.?AU_NETRESOURCEA@@=odJ�_BOOT_ENTROPY_NT_RESULT.?AU_BOOT_ENTROPY_NT_RESULT@@Z�_BOOT_ENTROPY_SOURCE_NT_RESULT.?AU_BOOT_ENTROPY_SOURCE_NT_RESULT@@��=#�Z
"maxEntropySources
=EntropySourceResult��
�5SeedBytesForCng��J=H_BOOT_ENTROPY_NT_RESULT.?AU_BOOT_ENTROPY_NT_RESULT@@=�NZ�_FILE_PIPE_EVENT_SELECT_BUFFER.?AU_FILE_PIPE_EVENT_SELECT_BUFFER@@��2
"EventTypes���
#EventHandle��Z=_FILE_PIPE_EVENT_SELECT_BUFFER.?AU_FILE_PIPE_EVENT_SELECT_BUFFER@@��=U�)�
!CurrentMachineSIDOffset��
!CurrentMachineSIDLength��
!NewMachineSIDOffset��
!NewMachineSIDLength��V!=_SD_CHANGE_MACHINE_SID_INPUT.?AU_SD_CHANGE_MACHINE_SID_INPUT@@��"=U�
�:v�_SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION.?AU_SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION@@��
%=##�.
#WorkloadClass
'=CpuSets��v(=_SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION.?AU_SYSTEM_WORKLOAD_ALLOWED_CPU_SET_INFORMATION@@��)=��b�_FILE_IS_REMOTE_DEVICE_INFORMATION.?AU_FILE_IS_REMOTE_DEVICE_INFORMATION@@��
 IsRemote�b,=_FILE_IS_REMOTE_DEVICE_INFORMATION.?AU_FILE_IS_REMOTE_DEVICE_INFORMATION@@��-=U	
;
!F�_STREAM_LAYOUT_ENTRY.?AU_STREAM_LAYOUT_ENTRY@@��
1=2
"Version��
"NextStreamOffset�
"Flags
"ExtentInformationOffset��
~AllocationSize���
~EndOfFile
" StreamInformationOffset��
"$AttributeTypeCode
"(AttributeFlags���
",StreamIdentifierLength���
J0StreamIdentifier�F3=8_STREAM_LAYOUT_ENTRY.?AU_STREAM_LAYOUT_ENTRY@@��4=U4>�_WMI_CONTEXTSWAP.?AU_WMI_CONTEXTSWAP@@��
 ��
 ��
 ��
 ��
"NewThreadId��
"OldThreadId��
pNewThreadPriority
p	OldThreadPriority
 
PreviousCState���
 
OldThreadRank
pNewThreadPriorityDecrement���
pSpareByte
 OldThreadWaitReason��
7=
OldThreadWaitMode
8=
OldThreadBamQosLevel�
9=
NewThreadBamQosLevel�
:=
Reserved�
 
Flags
 OldThreadState���
 OldThreadIdealProcessor��
"NewThreadWaitTime
OldThreadRemainingQuantum>;=_WMI_CONTEXTSWAP.?AU_WMI_CONTEXTSWAP@@��<=0	B�READ_FILE_USN_DATA.?AUREAD_FILE_USN_DATA@@��
>=:
!MinMajorVersion��
!MaxMajorVersion��B@=READ_FILE_USN_DATA.?AUREAD_FILE_USN_DATA@@��A=U �
"dwServiceType
"dwCurrentState���
"dwControlsAccepted���
"dwWin32ExitCode��
"dwServiceSpecificExitCode
"dwCheckPoint�
"dwWaitHint���
"dwProcessId��
" dwServiceFlags���J	C=$_SERVICE_STATUS_PROCESS.?AU_SERVICE_STATUS_PROCESS@@D=m�B�tagEMREXTCREATEPEN.?AUtagEMREXTCREATEPEN@@��~
Pemr��
"ihPen
"offBmi���
"cbBmi
"offBits��
"cbBits���
�elp��BG=8tagEMREXTCREATEPEN.?AUtagEMREXTCREATEPEN@@��H=SUV�_SYSTEM_SCOPED_POLICY_ID_ACE.?AU_SYSTEM_SCOPED_POLICY_ID_ACE@@��:
�Header���
"Mask�
"SidStart�VK=_SYSTEM_SCOPED_POLICY_ID_ACE.?AU_SYSTEM_SCOPED_POLICY_ID_ACE@@��L=E�r�JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2.?AUJOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2@@��
#IoReadBytesLimit�
#IoWriteBytesLimit
~PerJobUserTimeLimit��
#JobHighMemoryLimit���
#JobMemoryLimit���
 RateControlTolerance�
 CpuRateControlTolerance��
E$RateControlToleranceInterval�
E$CpuRateControlToleranceInterval��
"(LimitFlags���
,IoRateControlTolerance���
#0JobLowMemoryLimit
E8IoRateControlToleranceInterval���
<NetRateControlTolerance��
E@NetRateControlToleranceInterval��rO=HJOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2.?AUJOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2@@��P=}�Z�_SE_SET_FILE_CACHE_INFORMATION.?AU_SE_SET_FILE_CACHE_INFORMATION@@��
R=2
"Size�
�CatalogDirectoryPath�ZT=_SE_SET_FILE_CACHE_INFORMATION.?AU_SE_SET_FILE_CACHE_INFORMATION@@��U=^�>�tagLASTINPUTINFO.?AUtagLASTINPUTINFO@@��
W=*
ucbSize���
"dwTime���>Y=tagLASTINPUTINFO.?AUtagLASTINPUTINFO@@��Z=L�
�#R�_SYSTEM_POLICY_INFORMATION.?AU_SYSTEM_POLICY_INFORMATION@@��v
InputData
OutputData���
"InputDataSize
"OutputDataSize���
"Version��R^= _SYSTEM_POLICY_INFORMATION.?AU_SYSTEM_POLICY_INFORMATION@@��_=�R
R�_CONTAINER_ROOT_INFO_INPUT.?AU_CONTAINER_ROOT_INFO_INPUT@@��
a=
"FlagsRc=_CONTAINER_ROOT_INFO_INPUT.?AU_CONTAINER_ROOT_INFO_INPUT@@��d=U�"
�-
=
=��
h=N�_SYSTEM_AUDIT_OBJECT_ACE.?AU_SYSTEM_AUDIT_OBJECT_ACE@@��
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�Nk=0_SYSTEM_AUDIT_OBJECT_ACE.?AU_SYSTEM_AUDIT_OBJECT_ACE@@��l=E�M" n=>�tagNEWTEXTMETRICA.?AUtagNEWTEXTMETRICA@@
p=F
tmHeight�
tmAscent�
tmDescent
tmInternalLeading
tmExternalLeading
tmAveCharWidth���
tmMaxCharWidth���
tmWeight�
 tmOverhang���
$tmDigitizedAspectX���
(tmDigitizedAspectY���
 ,tmFirstChar��
 -tmLastChar���
 .tmDefaultChar
 /tmBreakChar��
 0tmItalic�
 1tmUnderlined�
 2tmStruckOut��
 3tmPitchAndFamily�
 4tmCharSet
"8ntmFlags�
u<ntmSizeEM
u@ntmCellHeight
uDntmAvgWidth��>r=HtagNEWTEXTMETRICA.?AUtagNEWTEXTMETRICA@@s=S�
�
P,B�USN_JOURNAL_DATA_V1.?AUUSN_JOURNAL_DATA_V1@@
w=�
#UsnJournalID�
FirstUsn�
NextUsn��
LowestValidUsn���
 MaxUsn���
#(MaximumSize��
#0AllocationDelta��
!8MinSupportedMajorVersion�
!:MaxSupportedMajorVersion�B	y=@USN_JOURNAL_DATA_V1.?AUUSN_JOURNAL_DATA_V1@@z=U�B�USN_JOURNAL_DATA_V2.?AUUSN_JOURNAL_DATA_V2@@
|=F
#UsnJournalID�
FirstUsn�
NextUsn��
LowestValidUsn���
 MaxUsn���
#(MaximumSize��
#0AllocationDelta��
!8MinSupportedMajorVersion�
!:MaxSupportedMajorVersion�
"<Flags
#@RangeTrackChunkSize��
HRangeTrackFileSizeThreshold��B~=PUSN_JOURNAL_DATA_V2.?AUUSN_JOURNAL_DATA_V2@@=U�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"Flags
�=EnableUserShadowStack
�=AuditUserShadowStack�
�=SetContextIpValidation���
�=AuditSetContextIpValidation��
�=EnableUserShadowStackStrictMode��
�=BlockNonCetBinaries��
�=BlockNonCetBinariesNonEhcont�
�=AuditBlockNonCetBinaries�
�=CetDynamicApisOutOfProcOnly��
�=SetContextIpValidationRelaxedMode
�=ReservedFlagsv�=_PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY.?AU_PROCESS_MITIGATION_USER_SHADOW_STACK_POLICY@@���=}J�_CONTAINER_VOLUME_STATE.?AU_CONTAINER_VOLUME_STATE@@
"FlagsJ�=_CONTAINER_VOLUME_STATE.?AU_CONTAINER_VOLUME_STATE@@�=U�">�MFT_ENUM_DATA_V0.?AUMFT_ENUM_DATA_V0@@��
�=N
#StartFileReferenceNumber�
LowUsn���
HighUsn��>�=MFT_ENUM_DATA_V0.?AUMFT_ENUM_DATA_V0@@���=U�

�.
u6�tagENUMUILANG.?AUtagENUMUILANG@@V
"NumOfEnumUILang��
"SizeOfEnumUIBuffer���
qpEnumUIBuffer6�=tagENUMUILANG.?AUtagENUMUILANG@@�=~(J�_EVENT_FILTER_EVENT_ID.?AU_EVENT_FILTER_EVENT_ID@@��!#�N
 FilterIn�
 Reserved�
!Count
�=Events���J�=_EVENT_FILTER_EVENT_ID.?AU_EVENT_FILTER_EVENT_ID@@���=c
'Z�_ACTIVATION_CONTEXT_QUERY_INDEX.?AU_ACTIVATION_CONTEXT_QUERY_INDEX@@
�=>
"ulAssemblyIndex��
"ulFileIndexInAssemblyZ�=_ACTIVATION_CONTEXT_QUERY_INDEX.?AU_ACTIVATION_CONTEXT_QUERY_INDEX@@�=�aN�_IMAGE_IMPORT_DESCRIPTOR.?AU_IMAGE_IMPORT_DESCRIPTOR@@��
�=��
�=�
"Characteristics��
"OriginalFirstThunk���
"TimeDateStamp
"ForwarderChain���
"Name�
"FirstThunk���N�=_IMAGE_IMPORT_DESCRIPTOR.?AU_IMAGE_IMPORT_DESCRIPTOR@@���=f�V�tagPOINTER_DEVICE_CURSOR_INFO.?AUtagPOINTER_DEVICE_CURSOR_INFO@@�POINTER_DEVICE_CURSOR_TYPE_UNKNOWN���POINTER_DEVICE_CURSOR_TYPE_TIP���POINTER_DEVICE_CURSOR_TYPE_ERASER��POINTER_DEVICE_CURSOR_TYPE_MAX��Rt�=tagPOINTER_DEVICE_CURSOR_TYPE.?AW4tagPOINTER_DEVICE_CURSOR_TYPE@@��=L�;*
ucursorId�
�=cursor���V�=tagPOINTER_DEVICE_CURSOR_INFO.?AUtagPOINTER_DEVICE_CURSOR_INFO@@�=L�;V�_SYSTEM_INTERRUPT_INFORMATION.?AU_SYSTEM_INTERRUPT_INFORMATION@@�
"ContextSwitches��
"DpcCount�
"DpcRate��
"TimeIncrement
"DpcBypassCount���
"ApcBypassCount���V�=_SYSTEM_INTERRUPT_INFORMATION.?AU_SYSTEM_INTERRUPT_INFORMATION@@�=��
N�_PS_CPU_QUOTA_QUERY_ENTRY.?AU_PS_CPU_QUOTA_QUERY_ENTRY@@
�=*
"SessionId
"Weight���N�=_PS_CPU_QUOTA_QUERY_ENTRY.?AU_PS_CPU_QUOTA_QUERY_ENTRY@@�=b
�+F�_HEAP_COMMIT_DECOMMIT.?AU_HEAP_COMMIT_DECOMMIT@@&
8Header���
� EventF�=@_HEAP_COMMIT_DECOMMIT.?AU_HEAP_COMMIT_DECOMMIT@@�=01
�!B�_RTL_GENERIC_TABLE.?AU_RTL_GENERIC_TABLE@@��
�=�=�$�=
�=�="�=
�=�=�=
�=�
 TableRoot
�InsertOrderList��
OrderedPointer���
" WhichOrderedElement��
"$NumberGenericTableElements���
�=(CompareRoutine���
�=0AllocateRoutine��
�=8FreeRoutine��
@TableContext�B	�=H_RTL_GENERIC_TABLE.?AU_RTL_GENERIC_TABLE@@���=$�
i."
�#fsUsb
�#fsCsb>�=tagFONTSIGNATURE.?AUtagFONTSIGNATURE@@���=S�:�_FILE_PREFETCH.?AU_FILE_PREFETCH@@��6
"Type�
"Count
�/Prefetch�:�=_FILE_PREFETCH.?AU_FILE_PREFETCH@@���=U�R�_SILOOBJECT_ROOT_DIRECTORY.?AU_SILOOBJECT_ROOT_DIRECTORY@@��
�=*
"ControlFlags�
�Path�R�=_SILOOBJECT_ROOT_DIRECTORY.?AU_SILOOBJECT_ROOT_DIRECTORY@@���=}�b�_ACCESS_DENIED_CALLBACK_OBJECT_ACE.?AU_ACCESS_DENIED_CALLBACK_OBJECT_ACE@@��
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�b�=0_ACCESS_DENIED_CALLBACK_OBJECT_ACE.?AU_ACCESS_DENIED_CALLBACK_OBJECT_ACE@@���=Eb�_MIDL_WINRT_TYPE_SERIALIZATION_INFO.?AU_MIDL_WINRT_TYPE_SERIALIZATION_INFO@@z
"Version��
TypeFormatString�
!FormatStringSize�
!TypeOffset���
<(StubDesc�b�= _MIDL_WINRT_TYPE_SERIALIZATION_INFO.?AU_MIDL_WINRT_TYPE_SERIALIZATION_INFO@@�=��>�_PSFEATURE_OUTPUT.?AU_PSFEATURE_OUTPUT@@
�=:
tbPageIndependent�
tbSetPageDevice���>�=_PSFEATURE_OUTPUT.?AU_PSFEATURE_OUTPUT@@�=S
C6�tagSCROLLINFO.?AUtagSCROLLINFO@@z
ucbSize���
ufMask
tnMin�
tnMax�
unPage
tnPos�
tnTrackPos6�=tagSCROLLINFO.?AUtagSCROLLINFO@@�=L�.#�&
"Count
�=BindingH�B�=_RPC_BINDING_VECTOR.?AU_RPC_BINDING_VECTOR@@�=_N�_FSCTL_OFFLOAD_READ_INPUT.?AU_FSCTL_OFFLOAD_READ_INPUT@@�
"Size�
"Flags
"TokenTimeToLive��
"Reserved�
#FileOffset���
#CopyLength���N�= _FSCTL_OFFLOAD_READ_INPUT.?AU_FSCTL_OFFLOAD_READ_INPUT@@�=U�
5n�_SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS.?AU_SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS@@
KeyHandle
8ValueNamePointer�
"RequiredLengthPointer
 Buffer���
" BufferLength�
"$Type�
 (AppendBuffer�
"0AppendBufferLength���
 4CreateIfDoesntExist��
 5TruncateExistingValuen
�=8_SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS.?AU_SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS@@�=��

�
"Reserved�F>_SD_QUERY_STATS_INPUT.?AU_SD_QUERY_STATS_INPUT@@>U�F�_FILE_ALL_INFORMATION.?AU_FILE_ALL_INFORMATION@@
>J�_FILE_BASIC_INFORMATION.?AU_FILE_BASIC_INFORMATION@@R�_FILE_POSITION_INFORMATION.?AU_FILE_POSITION_INFORMATION@@��

>BasicInformation�
�2(StandardInformation��
�(@InternalInformation��
�HEaInformation
�LAccessInformation
>PPositionInformation��
 XModeInformation��
�"\AlignmentInformation�
�9`NameInformation��F	>h_FILE_ALL_INFORMATION.?AU_FILE_ALL_INFORMATION@@>UF�CM_EXTENDED_PARAMETER.?AUCM_EXTENDED_PARAMETER@@

>
#��
#8��
>Type�

>Reserved�
#ULong64��
Pointer��
#Size�
Handle���
"ULong
"AccessMask���F>CM_EXTENDED_PARAMETER.?AUCM_EXTENDED_PARAMETER@@>z6�_BOOT_RECORD.?AU_BOOT_RECORD@@��
#BootFlags
"FirmwareType�
 SecureBootEnabled
 
SecureBootCapable
 Reserved1
 Reserved26>_BOOT_RECORD.?AU_BOOT_RECORD@@��>0�.�_OBJECTID.?AU_OBJECTID@@.
�Lineage��
"Uniquifier���.>_OBJECTID.?AU_OBJECTID@@>but>
>
>>
>
�~MemoryLocationInvalidMemoryLocationResident���MemoryLocationPagefile���MemoryLocationReserved���Vt >_MEMORY_WORKING_SET_EX_LOCATION.?AW4_MEMORY_WORKING_SET_EX_LOCATION@@�!>BCV�_FILE_END_OF_FILE_INFORMATION.?AU_FILE_END_OF_FILE_INFORMATION@@
~EndOfFileV$>_FILE_END_OF_FILE_INFORMATION.?AU_FILE_END_OF_FILE_INFORMATION@@%>U�V�_UMS_CREATE_THREAD_ATTRIBUTES.?AU_UMS_CREATE_THREAD_ATTRIBUTES@@
'>�
"UmsVersion���
fRtlUmsContext
UmsContext���
dRtlUmsCompletionList�
UmsCompletionListV)>_UMS_CREATE_THREAD_ATTRIBUTES.?AU_UMS_CREATE_THREAD_ATTRIBUTES@@*>}R>�_IMAGE_DEBUG_MISC.?AU_IMAGE_DEBUG_MISC@@b
"DataType�
"Length���
 Unicode��
�	Reserved�
�Data�>->_IMAGE_DEBUG_MISC.?AU_IMAGE_DEBUG_MISC@@.>f�b�_PERFINFO_DPC_EXECUTION_INFORMATION.?AU_PERFINFO_DPC_EXECUTION_INFORMATION@@*
DpcRoutine���
#Key��b1>_PERFINFO_DPC_EXECUTION_INFORMATION.?AU_PERFINFO_DPC_EXECUTION_INFORMATION@@2>0�*
"Frequency
"Power
 PercentFrequency�
 	IncreaseLevel
 
DecreaseLevel
 Type�
"IncreaseTime�
"DecreaseTime�
#Control��
# Status���
"(HitCount�
",Reserved1
#0Reserved2
#8Reserved3B4>@PPM_WMI_PERF_STATE.?AUPPM_WMI_PERF_STATE@@��5>F�	>�tagMONITORINFOEXA.?AUtagMONITORINFOEXA@@
7>f
"cbSize���
�rcMonitor
�rcWork���
"$dwFlags��
G"(szDevice�>9>HtagMONITORINFOEXA.?AUtagMONITORINFOEXA@@:>L�4p<>
=>F�_PO_WAKE_SOURCE_TIMER.?AU_PO_WAKE_SOURCE_TIMER@@J�_PO_WAKE_SOURCE_HEADER.?AU_PO_WAKE_SOURCE_HEADER@@��*
@>Header���
G+Reason���FA>0_PO_WAKE_SOURCE_TIMER.?AU_PO_WAKE_SOURCE_TIMER@@B>F.

0&
j6�
$4pointerInfo��
u`penFlags�
udpenMask��
uhpressure�
ulrotation�
tptiltX
tttiltYBF>xtagPOINTER_PEN_INFO.?AUtagPOINTER_PEN_INFO@@G>L�R�_PROCESS_FAULT_INFORMATION.?AU_PROCESS_FAULT_INFORMATION@@��
I>6
"FaultFlags���
"AdditionalInfo���RK>_PROCESS_FAULT_INFORMATION.?AU_PROCESS_FAULT_INFORMATION@@��L>b`6�_SYSTEM_INFO.?AU_SYSTEM_INFO@@��r
"dwOemId��
!wProcessorArchitecture���
!wReserved
"dwPageSize���
lpMinimumApplicationAddress��
lpMaximumApplicationAddress��
#dwActiveProcessorMask
" dwNumberOfProcessors�
"$dwProcessorType��
"(dwAllocationGranularity��
!,wProcessorLevel��
!.wProcessorRevision���6O>0_SYSTEM_INFO.?AU_SYSTEM_INFO@@��P>� /Z�_MANAGE_HOT_PATCH_UNLOAD_PATCH.?AU_MANAGE_HOT_PATCH_UNLOAD_PATCH@@��
R>&
Sid��
�Buffer���2T>D<anonymous-tag>.?AT<anonymous-tag>@@U>B}>
"Version��
/BaseInfo�
U>UserSid��ZW>P_MANAGE_HOT_PATCH_UNLOAD_PATCH.?AU_MANAGE_HOT_PATCH_UNLOAD_PATCH@@��X>Bo
�
#��
#��
#��
#<��
#��
#��
#��
#<���
[>AuditState���
\>AuditFlag
]>EnableAdditionalAuditingOption���
^>Reserved�
_>PolicyState��
`>AlwaysInherit
a>EnableAdditionalPolicyOption�
b>AuditReservedNc>_RTL_IMAGE_MITIGATION_POLICY.?AT_RTL_IMAGE_MITIGATION_POLICY@@��d>��>�tagGUITHREADINFO.?AUtagGUITHREADINFO@@���
"cbSize���
"flags
�hwndActive���
�hwndFocus
�hwndCapture��
� hwndMenuOwner
�(hwndMoveSize�
�0hwndCaret
�8rcCaret��>	h>HtagGUITHREADINFO.?AUtagGUITHREADINFO@@��i>L�7�9f�_CSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT.?AU_CSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT@@b
#VetoedFromAltitudeIntegral���
#VetoedFromAltitudeDecimal
�Reason���fm>_CSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT.?AU_CSV_QUERY_VETO_FILE_DIRECT_IO_OUTPUT@@n>UR�_RTL_RETPOLINE_BINARY_INFO.?AU_RTL_RETPOLINE_BINARY_INFO@@��
p>"�
r>�
RetpolineStubsStartRva���
"CfgDispatchFunctionPtrRva
"IATRva���
ImportRvas���
#IAT��
 ImageBase
s>(CheckFunctionRt>0_RTL_RETPOLINE_BINARY_INFO.?AU_RTL_RETPOLINE_BINARY_INFO@@��u>�HJ�_REARRANGE_FILE_DATA32.?AU_REARRANGE_FILE_DATA32@@��
w>z
#SourceStartingOffset�
#TargetOffset�
uSourceFileHandle�
"Length���
"FlagsJy> _REARRANGE_FILE_DATA32.?AU_REARRANGE_FILE_DATA32@@��z>U6(f�_JOBOBJECT_ASSOCIATE_COMPLETION_PORT.?AU_JOBOBJECT_ASSOCIATE_COMPLETION_PORT@@��
|>6
CompletionKey
CompletionPort���f~>_JOBOBJECT_ASSOCIATE_COMPLETION_PORT.?AU_JOBOBJECT_ASSOCIATE_COMPLETION_PORT@@��>}�
- 
�>
>�
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ChangeTime���
" FileAttributes���J�>(_FILE_BASIC_INFORMATION.?AU_FILE_BASIC_INFORMATION@@�>U�!��>
�>n
"SessionId
"CpuShareWeight���
CapturedWeightData���
#CyclesAccumulatedJ�>_ETW_PER_SESSION_QUOTA.?AU_ETW_PER_SESSION_QUOTA@@���>0(
6�tagDROPSTRUCT.?AUtagDROPSTRUCT@@
�>~
�hwndSource���
�hwndSink�
"wFmt�
#dwData���
� ptDrop���
"(dwControlData6�>0tagDROPSTRUCT.?AUtagDROPSTRUCT@@�>LgN�_MEMORY_BASIC_INFORMATION.?AU_MEMORY_BASIC_INFORMATION@@
�>�
BaseAddress��
AllocationBase���
"AllocationProtect
!PartitionId��
#RegionSize���
" State
"$Protect��
"(Type�N�>0_MEMORY_BASIC_INFORMATION.?AU_MEMORY_BASIC_INFORMATION@@�>yPj�_EVENT_TRACE_STACK_CACHING_INFORMATION.?AU_EVENT_TRACE_STACK_CACHING_INFORMATION@@��
EventTraceInformationClass���
#TraceHandle��
 Enabled��
�Reserved�
"CacheSize
"BucketCount��j�> _EVENT_TRACE_STACK_CACHING_INFORMATION.?AU_EVENT_TRACE_STACK_CACHING_INFORMATION@@���>N
�%:
#Value
"EndTime��
"Bitmap���6�>_TIMELINE_BITMAP.?AT_TIMELINE_BITMAP@@���>b�
]=F�ANON_OBJECT_HEADER_V2.?AUANON_OBJECT_HEADER_V2@@�
!Sig1�
!Sig2�
!Version��
!Machine��
"TimeDateStamp
�ClassID��
"SizeOfData���
" Flags
"$MetaDataSize�
"(MetaDataOffset���F
�>,ANON_OBJECT_HEADER_V2.?AUANON_OBJECT_HEADER_V2@@�>f�
�B�tagEMREXTFLOODFILL.?AUtagEMREXTFLOODFILL@@��
�>J
Pemr��
�ptlStart�
"crColor��
"iModeB�>tagEMREXTFLOODFILL.?AUtagEMREXTFLOODFILL@@���>SV�_PROCESS_WS_WATCH_INFORMATION.?AU_PROCESS_WS_WATCH_INFORMATION@@
�>2
FaultingPc���
FaultingVa���V�>_PROCESS_WS_WATCH_INFORMATION.?AU_PROCESS_WS_WATCH_INFORMATION@@�>}�
�4
!Size�
!HeaderType���
!Flags
!EventProperty
"ThreadId�
"ProcessId
~TimeStamp
�ProviderId���

(EventDescriptor��
"8KernelTime���
"<UserTime�
#8ProcessorTime
�@ActivityId���6
�>P_EVENT_HEADER.?AU_EVENT_HEADER@@�>#����>
;4
��
!UniqueProcessId��
!CreatorBackTraceIndex
 ObjectTypeIndex��
 HandleAttributes�
!HandleValue��
Object���
"GrantedAccessZ�>_SYSTEM_HANDLE_TABLE_ENTRY_INFO.?AU_SYSTEM_HANDLE_TABLE_ENTRY_INFO@@�>�	R�_SYSTEM_POWER_STATE_CONTEXT.?AU_SYSTEM_POWER_STATE_CONTEXT@@
"��
"��
"��
"��
"��
"��
"��
"��
"��
�>Reserved1
�>TargetSystemState
�>EffectiveSystemState�
�>CurrentSystemState���
�>IgnoreHibernationPath
�>PseudoTransition�
�>KernelSoftReboot�
�>DirectedDripsTransition��
�>Reserved2
"ContextAsUlong���R
�>_SYSTEM_POWER_STATE_CONTEXT.?AU_SYSTEM_POWER_STATE_CONTEXT@@�>F�^�_CSV_QUERY_VOLUME_REDIRECT_STATE.?AU_CSV_QUERY_VOLUME_REDIRECT_STATE@@��
"MdsNodeId
"DsNodeId�
 IsDiskConnected��
 	ClusterEnableDirectIo
�"DiskConnectivity�^�>_CSV_QUERY_VOLUME_REDIRECT_STATE.?AU_CSV_QUERY_VOLUME_REDIRECT_STATE@@���>U�
�
=B�tagEMRSETTEXTCOLOR.?AUtagEMRSETTEXTCOLOR@@��&
Pemr��
"crColor��B�>tagEMRSETTEXTCOLOR.?AUtagEMRSETTEXTCOLOR@@���>S�
0%F
tvaluelen�
value_context
val_buff_ptr�2�>val_context.?AUval_context@@�>��V�_REPAIR_STORAGE_RESERVE_INPUT.?AU_REPAIR_STORAGE_RESERVE_INPUT@@j
"Version��
"Flags
"AreaIdOffset�
"AreaIdCount��
E AreaId���V�>_REPAIR_STORAGE_RESERVE_INPUT.?AU_REPAIR_STORAGE_RESERVE_INPUT@@�>U<+.�_ABCFLOAT.?AU_ABCFLOAT@@2
@abcfA
@abcfB
@abcfC.
�>_ABCFLOAT.?AU_ABCFLOAT@@�>S�F
�type�
usize�
TadapterId
uid���^�>DISPLAYCONFIG_DEVICE_INFO_HEADER.?AUDISPLAYCONFIG_DEVICE_INFO_HEADER@@���>S�^�_CFG_CALL_TARGET_LIST_INFORMATION.?AU_CFG_CALL_TARGET_LIST_INFORMATION@@
�>F�_CFG_CALL_TARGET_INFO.?AU_CFG_CALL_TARGET_INFO@@
�>�
"NumberOfEntries��
"Reserved�
"NumberOfEntriesProcessed�
�>CallTargetInfo���
Section��
# FileOffset���^�>(_CFG_CALL_TARGET_LIST_INFORMATION.?AU_CFG_CALL_TARGET_LIST_INFORMATION@@�>y�J�BREAK_ON_STATUS_BUFFER.?AUBREAK_ON_STATUS_BUFFER@@��
�>p#�n
NtStatus�
"Win32Error���
"ThreadId�
"ProcessId
�>ImageFileNameJ�> BREAK_ON_STATUS_BUFFER.?AUBREAK_ON_STATUS_BUFFER@@���>U�
�'n�_TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY.?AU_TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY@@
�>�
#Offset���
"NameFlags
FileId���
"Reserved1
"Reserved2
 Reserved3
J(FileName�n�>0_TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY.?AU_TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY@@�>U�
"��
"��
"��z
"Flags
�>DisallowWin32kSystemCalls
�>AuditDisallowWin32kSystemCalls���
�>ReservedFlagsz�>_PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY.?AU_PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY@@���>}cZ�_ETW_TP_EVENT_TIMER_SET_NTTIMER.?AU_ETW_TP_EVENT_TIMER_SET_NTTIMER@@Z
8Header���
 DueTime��
(SubQueue�
"0TolerableDelay���Z�>4_ETW_TP_EVENT_TIMER_SET_NTTIMER.?AU_ETW_TP_EVENT_TIMER_SET_NTTIMER@@�>0&
�/Z�_POWER_THROTTLING_PROCESS_STATE.?AU_POWER_THROTTLING_PROCESS_STATE@@B
"Version��
"ControlMask��
"StateMaskZ?_POWER_THROTTLING_PROCESS_STATE.?AU_POWER_THROTTLING_PROCESS_STATE@@?}�^�_EVENT_EXTENDED_ITEM_PMC_COUNTERS.?AU_EVENT_EXTENDED_ITEM_PMC_COUNTERS@@
'=Counter��^?_EVENT_EXTENDED_ITEM_PMC_COUNTERS.?AU_EVENT_EXTENDED_ITEM_PMC_COUNTERS@@?#vV�_SYSTEM_VHD_BOOT_INFORMATION.?AU_SYSTEM_VHD_BOOT_INFORMATION@@��V
 OsDiskIsVhd��
"OsVhdFilePathOffset��
JOsVhdParentVolumeV?_SYSTEM_VHD_BOOT_INFORMATION.?AU_SYSTEM_VHD_BOOT_INFORMATION@@��	?��
J�_PERFINFO_PO_POSTSLEEP.?AU_PERFINFO_PO_POSTSLEEP@@��
?"
~PerformanceCounter���J
?_PERFINFO_PO_POSTSLEEP.?AU_PERFINFO_PO_POSTSLEEP@@��?0�
&^�_PROCESS_WS_WATCH_INFORMATION_EX.?AU_PROCESS_WS_WATCH_INFORMATION_EX@@��B
�>BasicInfo
#FaultingThreadId�
#Flags^? _PROCESS_WS_WATCH_INFORMATION_EX.?AU_PROCESS_WS_WATCH_INFORMATION_EX@@��?b�Z�_PERFINFO_FLT_OPERATION_STATUS.?AU_PERFINFO_FLT_OPERATION_STATUS@@��
RoutineAddr��
FileObject���
FsContext
IrpPtr���
 CbdPtr���
(MajorFunction
,Status���Z?0_PERFINFO_FLT_OPERATION_STATUS.?AU_PERFINFO_FLT_OPERATION_STATUS@@��?0�v�_SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION.?AU_SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION@@��
 Enabled��v?_SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION.?AU_SYSTEM_ENERGY_ESTIMATION_CONFIG_INFORMATION@@��?�[*�_FP_128.?AU_FP_128@@
�W*?_FP_128.?AU_FP_128@@?gB2�tagPELARRAY.?AUtagPELARRAY@@
!?f
paXCount�
paYCount�
paXExt���
paYExt���
 paRGBs���2#?tagPELARRAY.?AUtagPELARRAY@@$?S;:�_BOOT_AREA_INFO.?AU_BOOT_AREA_INFO@@
~Offset���:'?<anonymous-tag>.?AU<anonymous-tag>@@(?U>(?#�6
"BootSectorCount��
*?BootSectors��:+?_BOOT_AREA_INFO.?AU_BOOT_AREA_INFO@@,?U;
�:�_PRIVILEGE_SET.?AU_PRIVILEGE_SET@@��
/?�'#�F
"PrivilegeCount���
"Control��
1?Privilege:2?_PRIVILEGE_SET.?AU_PRIVILEGE_SET@@��3?E�b�_PERFINFO_SESSIONCREATE_INFORMATION.?AU_PERFINFO_SESSIONCREATE_INFORMATION@@2
#UniqueSessionId��
"SessionIdb6?_PERFINFO_SESSIONCREATE_INFORMATION.?AU_PERFINFO_SESSIONCREATE_INFORMATION@@7?0�
�
q
+
�N�_RTL_UNLOAD_EVENT_TRACE64.?AU_RTL_UNLOAD_EVENT_TRACE64@@�
#BaseAddress��
#SizeOfImage��
"Sequence�
"TimeDateStamp
"CheckSum�
�ImageName
�\Version��N>?h_RTL_UNLOAD_EVENT_TRACE64.?AU_RTL_UNLOAD_EVENT_TRACE64@@??��Z�_FILE_PIPE_CREATE_SYMLINK_INPUT.?AU_FILE_PIPE_CREATE_SYMLINK_INPUT@@
A?�
!NameOffset���
!NameLength���
!SubstituteNameOffset�
!SubstituteNameLength�
"FlagsZC?_FILE_PIPE_CREATE_SYMLINK_INPUT.?AU_FILE_PIPE_CREATE_SYMLINK_INPUT@@D?Ux)J�_LDR_VERIFY_IMAGE_INFO.?AU_LDR_VERIFY_IMAGE_INFO@@��N�_LDR_IMPORT_CALLBACK_INFO.?AU_LDR_IMPORT_CALLBACK_INFO@@r
"Size�
"Flags
G?CallbackInfo�
.SectionInfo��
!8ImageCharacteristics�JH?@_LDR_VERIFY_IMAGE_INFO.?AU_LDR_VERIFY_IMAGE_INFO@@��I?��6
!CodePage�
!MaximumCharacterSize�
!DefaultChar��
!UniDefaultChar���
!TransDefaultChar�
!
TransUniDefaultChar��
!DBCSCodePage�
/LeadByte�
q MultiByteTable���
(WideCharTable
q0DBCSRanges���
q8DBCSOffsets��6K?@_CPTABLEINFO.?AU_CPTABLEINFO@@��L?F-$
�:
�8
%
�##0�B
#Mask�
#CompactionMask���
R?Reserved2BS?@_XSAVE_AREA_HEADER.?AU_XSAVE_AREA_HEADER@@��T?
�>V�tagTouchPredictionParameters.?AUtagTouchPredictionParameters@@��^
ucbSize���
udwLatency
udwSampleTime�
ubUseHWTimeStamp��VX?tagTouchPredictionParameters.?AUtagTouchPredictionParameters@@��Y?L�0b�_SYSTEM_WATCHDOG_TIMER_INFORMATION.?AU_SYSTEM_WATCHDOG_TIMER_INFORMATION@@��.
�WdInfoClass��
"DataValueb\?_SYSTEM_WATCHDOG_TIMER_INFORMATION.?AU_SYSTEM_WATCHDOG_TIMER_INFORMATION@@��]?�M
V�_FILE_VOLUME_NAME_INFORMATION.?AU_FILE_VOLUME_NAME_INFORMATION@@
_?6
"DeviceNameLength�
JDeviceName���Va?_FILE_VOLUME_NAME_INFORMATION.?AU_FILE_VOLUME_NAME_INFORMATION@@b?U�
r
�2
\4
9-6-"g?"h?
i?���k?f�_SYSTEM_CRASH_DUMP_STATE_INFORMATION.?AU_SYSTEM_CRASH_DUMP_STATE_INFORMATION@@��*
"CrashDumpConfigurationClass��fn?_SYSTEM_CRASH_DUMP_STATE_INFORMATION.?AU_SYSTEM_CRASH_DUMP_STATE_INFORMATION@@��o?�,
�*q?"r?
s?^
!wVk��
!wScan
"dwFlags��
"time�
#dwExtraInfo��6u?tagKEYBDINPUT.?AUtagKEYBDINPUT@@v?L�
�1
�1N�_IMAGE_CHPE_METADATA_X86.?AU_IMAGE_CHPE_METADATA_X86@@��
"Version��
"CHPECodeAddressRangeOffset���
"CHPECodeAddressRangeCount
"WowA64ExceptionHandlerFunctionPointer
"WowA64DispatchCallFunctionPointer
"WowA64DispatchIndirectCallFunctionPointer
"WowA64DispatchIndirectCallCfgFunctionPointer�
"WowA64DispatchRetFunctionPointer�
" WowA64DispatchRetLeafFunctionPointer�
"$WowA64DispatchJumpFunctionPointer
"(CompilerIATPointer���
",WowA64RdtscFunctionPointer���N{?0_IMAGE_CHPE_METADATA_X86.?AU_IMAGE_CHPE_METADATA_X86@@��|?fg
�;PfnIdentity��>~?_MM_ETW_PAGE_INFO.?AU_MM_ETW_PAGE_INFO@@?BOJ�_PO_WAKE_SOURCE_DEVICE.?AU_PO_WAKE_SOURCE_DEVICE@@��.
@>Header���
JInstancePath�J�?_PO_WAKE_SOURCE_DEVICE.?AU_PO_WAKE_SOURCE_DEVICE@@���?F

�<�
�Header���
"0InstanceId���
"4ParentInstanceId�
�8ParentGuid���
HMofData��
"PMofLength
"TClientContext
TBufferContext6�?X_EVENT_TRACE.?AU_EVENT_TRACE@@���?�N�_RTL_UNLOAD_EVENT_TRACE32.?AU_RTL_UNLOAD_EVENT_TRACE32@@�
"BaseAddress��
"SizeOfImage��
"Sequence�
"TimeDateStamp
"CheckSum�
�ImageName
�TVersion��N�?\_RTL_UNLOAD_EVENT_TRACE32.?AU_RTL_UNLOAD_EVENT_TRACE32@@�?��N�_SYSTEM_BASIC_INFORMATION.?AU_SYSTEM_BASIC_INFORMATION@@^
"Reserved�
"TimerResolution��
"PageSize�
"NumberOfPhysicalPages
"LowestPhysicalPageNumber�
"HighestPhysicalPageNumber
"AllocationGranularity
# MinimumUserModeAddress���
#(MaximumUserModeAddress���
#0ActiveProcessorsAffinityMask�
p8NumberOfProcessors���N�?@_SYSTEM_BASIC_INFORMATION.?AU_SYSTEM_BASIC_INFORMATION@@�?��J�MENUITEMTEMPLATEHEADER.?AUMENUITEMTEMPLATEHEADER@@��
�?.
!versionNumber
!offset���J�?MENUITEMTEMPLATEHEADER.?AUMENUITEMTEMPLATEHEADER@@���?L�(
R)*IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF��Bt�?IMAGE_AUX_SYMBOL_TYPE.?AW4IMAGE_AUX_SYMBOL_TYPE@@��?f[�# �R
!Version��
!Revision�
"Count
�?Descriptors��>�?(_IO_RESOURCE_LIST.?AU_IO_RESOURCE_LIST@@�?�
U(
�?
5&
�n��DPI_HOSTING_BEHAVIOR_INVALIDDPI_HOSTING_BEHAVIOR_DEFAULT�DPI_HOSTING_BEHAVIOR_MIXED���Bt�?DPI_HOSTING_BEHAVIOR.?AW4DPI_HOSTING_BEHAVIOR@@����?AN�_QUERY_BAD_RANGES_OUTPUT.?AU_QUERY_BAD_RANGES_OUTPUT@@���%#�^
"Flags
"NumBadRanges�
#NextOffsetToLookUp���
�?BadRangesN�?(_QUERY_BAD_RANGES_OUTPUT.?AU_QUERY_BAD_RANGES_OUTPUT@@���?US!
b
�<N�_SYSTEM_ACCESS_FILTER_ACE.?AU_SYSTEM_ACCESS_FILTER_ACE@@
�?:
�Header���
"Mask�
"SidStart�N�?_SYSTEM_ACCESS_FILTER_ACE.?AU_SYSTEM_ACCESS_FILTER_ACE@@�?E�F�_COMPRESSED_DATA_INFO.?AU_COMPRESSED_DATA_INFO@@�
!CompressionFormatAndEngine���
 CompressionUnitShift�
 ChunkShift���
 ClusterShift�
 Reserved�
!NumberOfChunks���
�CompressedChunkSizes�F�?_COMPRESSED_DATA_INFO.?AU_COMPRESSED_DATA_INFO@@�?$�
:Z�_ENCLAVE_CREATE_INFO_VBS_BASIC.?AU_ENCLAVE_CREATE_INFO_VBS_BASIC@@��
�?&
"Flags
�OwnerID��Z�?$_ENCLAVE_CREATE_INFO_VBS_BASIC.?AU_ENCLAVE_CREATE_INFO_VBS_BASIC@@���?y�
Z'
�07 �?r�_SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE.?AU_SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE@@2
#TimeAdjustment���
 Enable���r�?_SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE.?AU_SYSTEM_SET_TIME_ADJUST_INFORMATION_PRECISE@@�?�tV�_EXTENDED_ENCRYPTED_DATA_INFO.?AU_EXTENDED_ENCRYPTED_DATA_INFO@@R
"ExtendedCode�
"Length���
"Flags
"Reserved�V�?_EXTENDED_ENCRYPTED_DATA_INFO.?AU_EXTENDED_ENCRYPTED_DATA_INFO@@�?U�B�_REMOTE_NAME_INFOA.?AU_REMOTE_NAME_INFOA@@��V
plpUniversalName��
plpConnectionName�
plpRemainingPath��B�?_REMOTE_NAME_INFOA.?AU_REMOTE_NAME_INFOA@@���?o�N�_PO_WAKE_SOURCE_INTERNAL.?AU_PO_WAKE_SOURCE_INTERNAL@@��
�?:
@>Header���
=InternalWakeSourceType���N�?_PO_WAKE_SOURCE_INTERNAL.?AU_PO_WAKE_SOURCE_INTERNAL@@���?F'
f�_EVENT_TRACE_SOFT_RESTART_INFORMATION.?AU_EVENT_TRACE_SOFT_RESTART_INFORMATION@@v
EventTraceInformationClass���
#TraceHandle��
 PersistTraceBuffers��
JFileName�f�?_EVENT_TRACE_SOFT_RESTART_INFORMATION.?AU_EVENT_TRACE_SOFT_RESTART_INFORMATION@@�?W
(��
�?V�_PLUGPLAY_CUSTOM_NOTIFICATION.?AU_PLUGPLAY_CUSTOM_NOTIFICATION@@
�?F�_PLUGPLAY_NOTIFY_HDR.?AU_PLUGPLAY_NOTIFY_HDR@@��j
�?HeaderInfo���
FileObject���
 NameBufferOffset�
�$CustomDataBuffer�V�?(_PLUGPLAY_CUSTOM_NOTIFICATION.?AU_PLUGPLAY_CUSTOM_NOTIFICATION@@�?���
�?F
Left�
Top��
Right
Bottom���2�?_SMALL_RECT.?AU_SMALL_RECT@@�?U)b�_JOBOBJECT_CONTAINER_IDENTIFIER_V2.?AU_JOBOBJECT_CONTAINER_IDENTIFIER_V2@@��
�?J
�ContainerId��
�ContainerTelemetryId�
" JobIdb�?$_JOBOBJECT_CONTAINER_IDENTIFIER_V2.?AU_JOBOBJECT_CONTAINER_IDENTIFIER_V2@@���?bf
"
�B�_OSVERSIONINFOEX2A.?AU_OSVERSIONINFOEX2A@@��
�?N
"dwOSVersionInfoSize��
"dwMajorVersion���
"dwMinorVersion���
"dwBuildNumber
"dwPlatformId�
�szCSDVersion�
!�wServicePackMajor
!�wServicePackMinor
!�wSuiteMask���
 �wProductType�
 �wReserved
"�wSuiteMaskEx�
"�wReserved2���B
�?�_OSVERSIONINFOEX2A.?AU_OSVERSIONINFOEX2A@@���?$�
�?
8
�8��
�?�? �?
�?2
~StartTime
~StartPerfClock���:�?_ETW_REF_CLOCK.?AU_ETW_REF_CLOCK@@���?0�
Address��
!Type�
!
CreatorBackTraceIndex
OwningThread�
LockCount
"ContentionCount��
" EntryCount���
$RecursionCount���
"(NumberOfWaitingShared
",NumberOfWaitingExclusive�V
�?0_RTL_PROCESS_LOCK_INFORMATION.?AU_RTL_PROCESS_LOCK_INFORMATION@@�?��
�:
�V
�HashedName���
# Expiration���
"(DataSize�
�,Data�Z�?0_SL_APPX_CACHE_VALUE_DESCRIPTOR.?AU_SL_APPX_CACHE_VALUE_DESCRIPTOR@@�?��q"t@
@�DISPLAYCONFIG_MODE_INFO_TYPE_SOURCE��DISPLAYCONFIG_MODE_INFO_TYPE_TARGET��DISPLAYCONFIG_MODE_INFO_TYPE_DESKTOP_IMAGE�����DISPLAYCONFIG_MODE_INFO_TYPE_FORCE_UINT32���Rt@DISPLAYCONFIG_MODE_INFO_TYPE.?AW4DISPLAYCONFIG_MODE_INFO_TYPE@@���@SJZ�_SYSTEM_CPU_SET_TAG_INFORMATION.?AU_SYSTEM_CPU_SET_TAG_INFORMATION@@
@&
#Tag��
'=CpuSets��Z@_SYSTEM_CPU_SET_TAG_INFORMATION.?AU_SYSTEM_CPU_SET_TAG_INFORMATION@@	@���
Object���
#UniqueProcessId��
#HandleValue��
"GrantedAccess
!CreatorBackTraceIndex
!ObjectTypeIndex��
" HandleAttributes�
"$Reserved�b@(_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX.?AU_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX@@��@�	R�_FILE_BOTH_DIR_INFORMATION.?AU_FILE_BOTH_DIR_INFORMATION@@��
@V
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
pDShortNameLength��
IFShortName
J^FileName�R@`_FILE_BOTH_DIR_INFORMATION.?AU_FILE_BOTH_DIR_INFORMATION@@��@U
�)
�&1@1 /@""@
@
$:�_FP_IEEE_RECORD.?AU_FP_IEEE_RECORD@@:�_FP_IEEE_VALUE.?AU_FP_IEEE_VALUE@@��>
@Operand1�
@Operand2�
@0Result���:@H_FP_IEEE_RECORD.?AU_FP_IEEE_RECORD@@@g�
�
�!
l1
�
�
"��
"��
"��
"��
"��
"Flags
%@ProhibitDynamicCode��
&@AllowThreadOptOut
'@AllowRemoteDowngrade�
(@AuditProhibitDynamicCode�
)@ReservedFlagsj*@_PROCESS_MITIGATION_DYNAMIC_CODE_POLICY.?AU_PROCESS_MITIGATION_DYNAMIC_CODE_POLICY@@+@}x
R=��
-@
�
N5jEtwCompressionModeRestartEtwCompressionModeNoDisable��EtwCompressionModeNoRestart��Vt1@ETW_COMPRESSION_RESUMPTION_MODE.?AW4ETW_COMPRESSION_RESUMPTION_MODE@@�2@�"4@
5@V�_ETW_KERNEL_HEADER_EXTENSION.?AU_ETW_KERNEL_HEADER_EXTENSION@@��.
+GroupMasks���
" Version��V8@$_ETW_KERNEL_HEADER_EXTENSION.?AU_ETW_KERNEL_HEADER_EXTENSION@@��9@�2�SC_HANDLE__.?AUSC_HANDLE__@@
tunused���2<@SC_HANDLE__.?AUSC_HANDLE__@@=@m�N�SYSTEM_POWER_CAPABILITIES.?AUSYSTEM_POWER_CAPABILITIES@@
?@J�BATTERY_REPORTING_SCALE.?AUBATTERY_REPORTING_SCALE@@A@#�R
 PowerButtonPresent���
 SleepButtonPresent���
 LidPresent���
 SystemS1�
 SystemS2�
 SystemS3�
 SystemS4�
 SystemS5�
 HiberFilePresent�
 	FullWake�
 
VideoDimPresent��
 ApmPresent���
 UpsPresent���
 
ThermalControl���
 ProcessorThrottle
 ProcessorMinThrottle�
 ProcessorMaxThrottle�
 FastSystemS4�
 Hiberboot
 WakeAlarmPresent�
 AoAc�
 DiskSpinDown�
 HiberFileType
 AoAcConnectivitySupported
�spare3���
 SystemBatteriesPresent���
 BatteriesAreShortTerm
B@ BatteryScale�
�8AcOnLineWake�
�<SoftLidWake��
�@RtcWake��
�DMinDeviceWakeState���
�HDefaultLowLatencyWakeN!C@LSYSTEM_POWER_CAPABILITIES.?AUSYSTEM_POWER_CAPABILITIES@@D@F�
#'B�_GRADIENT_TRIANGLE.?AU_GRADIENT_TRIANGLE@@��>
"Vertex1��
"Vertex2��
"Vertex3��BH@_GRADIENT_TRIANGLE.?AU_GRADIENT_TRIANGLE@@��I@S3:�_FNSAVE_FORMAT.?AU_FNSAVE_FORMAT@@��
"ControlWord��
"StatusWord���
"TagWord��
"ErrorOffset��
"ErrorSelector
"DataOffset���
"DataSelector�
/$RegisterArea�:L@l_FNSAVE_FORMAT.?AU_FNSAVE_FORMAT@@��M@��^�_TIMER_SET_COALESCABLE_TIMER_INFO.?AU_TIMER_SET_COALESCABLE_TIMER_INFO@@
O@
4"J�_COUNTED_REASON_CONTEXT.?AU_COUNTED_REASON_CONTEXT@@
R@�
~DueTime��
Q@TimerApcRoutine��
TimerContext�
S@WakeContext��
" Period���
"$TolerableDelay���
 (PreviousState^T@0_TIMER_SET_COALESCABLE_TIMER_INFO.?AU_TIMER_SET_COALESCABLE_TIMER_INFO@@U@|�
�!��
W@ZKernelRequester��UserProcessRequester�UserSharedServiceRequester���6tY@_REQUESTER_TYPE.?AW4_REQUESTER_TYPE@@�Z@F�
�5
�<## #^@V�_COMPOUND_ACCESS_ALLOWED_ACE.?AU_COMPOUND_ACCESS_ALLOWED_ACE@@��
`@j
�Header���
"Mask�
!CompoundAceType��
!
Reserved�
"SidStart�Vb@_COMPOUND_ACCESS_ALLOWED_ACE.?AU_COMPOUND_ACCESS_ALLOWED_ACE@@��c@^�
�'
T-
�F
BaseAddress��
"Flags
!EntryOverhead
!CreatorBackTraceIndex
#BytesAllocated���
#BytesCommitted���
" NumberOfTags�
"$NumberOfEntries��
"(NumberOfPseudoTags���
",PseudoTagGranularity�
�0Reserved�
f@HTags�
g@PEntries��F
h@X_RTL_HEAP_INFORMATION.?AU_RTL_HEAP_INFORMATION@@i@�6
�%>�FIND_BY_SID_DATA.?AUFIND_BY_SID_DATA@@��&
"Restart��
Sid��>m@FIND_BY_SID_DATA.?AUFIND_BY_SID_DATA@@��n@U�

' 1#�"
"Count
q@Uuid�6r@_UUID_VECTOR.?AU_UUID_VECTOR@@��s@hZ�_FSCTL_QUERY_REGION_INFO_INPUT.?AU_FSCTL_QUERY_REGION_INFO_INPUT@@��
u@f
"Version��
"Size�
"Flags
"NumberOfTierIds��
�TierIds��Zw@ _FSCTL_QUERY_REGION_INFO_INPUT.?AU_FSCTL_QUERY_REGION_INFO_INPUT@@��x@U�
�.�AR_ENABLED���AR_DISABLED��AR_SUPPRESSEDAR_REMOTESESSION�AR_MULTIMON��AR_NOSENSOR�� AR_NOT_SUPPORTED�@AR_DOCKED�AR_LAPTOP.	t{@tagAR_STATE.?AW4tagAR_STATE@@�|@L�=Z�_SYSTEM_SECUREBOOT_INFORMATION.?AU_SYSTEM_SECUREBOOT_INFORMATION@@��:
 SecureBootEnabled
 SecureBootCapableZ@_SYSTEM_SECUREBOOT_INFORMATION.?AU_SYSTEM_SECUREBOOT_INFORMATION@@���@��B�_RTL_RXACT_CONTEXT.?AU_RTL_RXACT_CONTEXT@@��
p7^
RootRegistryKey��
RXactKey�
 HandlesValid�
�@RXactLog�B�@ _RTL_RXACT_CONTEXT.?AU_RTL_RXACT_CONTEXT@@���@��
�5#�Z
LangSpec�
!FallbackTypes
!Reserved�
�@FallbackSpecs:�@_MUILANGCFGNODE.?AU_MUILANGCFGNODE@@�@�D
5?
8
"6�tagFILTERKEYS.?AUtagFILTERKEYS@@�
ucbSize���
"dwFlags��
"iWaitMSec
"iDelayMSec���
"iRepeatMSec��
"iBounceMSec��6�@tagFILTERKEYS.?AUtagFILTERKEYS@@�@L�3V�tagACTCTX_SECTION_KEYED_DATA.?AUtagACTCTX_SECTION_KEYED_DATA@@��
�@z�tagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA.?AUtagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA@@��>
"cbSize���
"ulDataFormatVersion��
lpData���
"ulLength�
lpSectionGlobalData��
" ulSectionGlobalDataLength
(lpSectionBase
"0ulSectionTotalLength�
8hActCtx��
"@ulAssemblyRosterIndex
"DulFlags��
�@HAssemblyMetadata�V�@ptagACTCTX_SECTION_KEYED_DATA.?AUtagACTCTX_SECTION_KEYED_DATA@@���@<� �
�@
����@#�
_7:�_DISCDLGSTRUCTA.?AU_DISCDLGSTRUCTA@@r
"cbStructure��
�hwndOwner
plpLocalName��
plpRemoteName�
" dwFlags��:�@(_DISCDLGSTRUCTA.?AU_DISCDLGSTRUCTA@@�@o�6�RTL_ACE_DATA.?AURTL_ACE_DATA@@��
�@
b
 AceType��
 InheritFlags�
 AceFlags�
"Mask�
�@Sid��6�@RTL_ACE_DATA.?AURTL_ACE_DATA@@���@��V�_SEMAPHORE_BASIC_INFORMATION.?AU_SEMAPHORE_BASIC_INFORMATION@@��2
CurrentCount�
MaximumCount�V�@_SEMAPHORE_BASIC_INFORMATION.?AU_SEMAPHORE_BASIC_INFORMATION@@���@��
|puu�@
�@>�_KEY_VALUE_ENTRY.?AU_KEY_VALUE_ENTRY@@��V
8ValueName
"DataLength���
"DataOffset���
"Type�>�@_KEY_VALUE_ENTRY.?AU_KEY_VALUE_ENTRY@@���@�k

�;V�_SILOOBJECT_BASIC_INFORMATION.?AU_SILOOBJECT_BASIC_INFORMATION@@
�@z
"SiloId���
"SiloParentId�
"NumberOfProcesses
 IsInServerSilo���
�
Reserved�V�@_SILOOBJECT_BASIC_INFORMATION.?AU_SILOOBJECT_BASIC_INFORMATION@@�@}�>
�@
���
�@
!��
!��>
�@PageRelativeOffset���
�@RegisterNumber���v�@_IMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION.?AU_IMAGE_SWITCHTABLE_BRANCH_DYNAMIC_RELOCATION@@���@f�


+Z�_PS_CPU_QUOTA_QUERY_INFORMATION.?AU_PS_CPU_QUOTA_QUERY_INFORMATION@@
�@�=#�:
"SessionCount�
�@SessionInformation���Z�@_PS_CPU_QUOTA_QUERY_INFORMATION.?AU_PS_CPU_QUOTA_QUERY_INFORMATION@@�@b>�tagMENUITEMINFOW.?AUtagMENUITEMINFOW@@���
ucbSize���
ufMask
ufType
ufState���
uwID��
hSubMenu�
I hbmpChecked��
I(hbmpUnchecked
#0dwItemData���
q8dwTypeData���
u@cch��
IHhbmpItem�>�@PtagMENUITEMINFOW.?AUtagMENUITEMINFOW@@���@L�
|%
-<�.�"�@
�@F�_RPC_PROTSEQ_VECTORW.?AU_RPC_PROTSEQ_VECTORW@@��q#�&
uCount
�@Protseq��F�@_RPC_PROTSEQ_VECTORW.?AU_RPC_PROTSEQ_VECTORW@@���@�
�"J�DISPLAYCONFIG_MODE_INFO.?AUDISPLAYCONFIG_MODE_INFO@@N�DISPLAYCONFIG_SOURCE_MODE.?AUDISPLAYCONFIG_SOURCE_MODE@@^�DISPLAYCONFIG_DESKTOP_IMAGE_INFO.?AUDISPLAYCONFIG_DESKTOP_IMAGE_INFO@@��
@infoType�
uid���
TadapterId
�/targetMode���
�@sourceMode���
�@desktopImageInfo�J�@@DISPLAYCONFIG_MODE_INFO.?AUDISPLAYCONFIG_MODE_INFO@@�@So�
Data�
"AssemblyRosterIndex��
ResolutionContext
�Root�
 (KnownRoot
#0RootCount
 8CancelResolution��@@_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING@@�@�zB�_TP_DEBUG_FREE_INFO.?AU_TP_DEBUG_FREE_INFO@@
"FreeListSize�B�@_TP_DEBUG_FREE_INFO.?AU_TP_DEBUG_FREE_INFO@@�@�;
�0
�x
�y2�@tagPOINTFX.?AUtagPOINTFX@@���@S�
R�_WIN32_FILE_ATTRIBUTE_DATA.?AU_WIN32_FILE_ATTRIBUTE_DATA@@��
�@�
"dwFileAttributes�
6ftCreationTime���
6ftLastAccessTime�
6ftLastWriteTime��
"nFileSizeHigh
" nFileSizeLow�R�@$_WIN32_FILE_ATTRIBUTE_DATA.?AU_WIN32_FILE_ATTRIBUTE_DATA@@���@X
�.^�_PERFINFO_WORKINGSET_INFORMATION.?AU_PERFINFO_WORKINGSET_INFORMATION@@��
�@R�_PERFINFO_WORKINGSET_ENTRY.?AU_PERFINFO_WORKINGSET_ENTRY@@���@#D�&
"Count
�@WsEntry��^�@H_PERFINFO_WORKINGSET_INFORMATION.?AU_PERFINFO_WORKINGSET_INFORMATION@@���@0�>�_PERFORMANCE_DATA.?AU_PERFORMANCE_DATA@@�8#��
!Size�
 Version��
 HwCountersCount��
"ContextSwitchCount���
#WaitReasonBitMap�
#CycleTime
"RetryCount���
"Reserved�
�@ HwCounters���>	�@ _PERFORMANCE_DATA.?AU_PERFORMANCE_DATA@@�@�3R
#FileMapping��
"Size�
"HashSeed�
"HashCountb�@_ETW_COVERAGE_SAMPLER_BLOOM_FILTER.?AU_ETW_COVERAGE_SAMPLER_BLOOM_FILTER@@���@�J�_ETW_SET_KTIMER2_EVENT.?AU_ETW_SET_KTIMER2_EVENT@@��
#DueTime��
#MaximumDueTime���
#Period���
#TimerKey�
# Callback�
#(CallbackContextKey���
 0FlagsJA8_ETW_SET_KTIMER2_EVENT.?AU_ETW_SET_KTIMER2_EVENT@@��A0�.�_COMSTAT.?AU_COMSTAT@@��
"��
"��
"��
"��
"��
"��
"��
"���
AfCtsHold�
AfDsrHold�
AfRlsdHold
	AfXoffHold

AfXoffSent
AfEof�
AfTxim

AfReserved
"cbInQue��
"cbOutQue�.
A_COMSTAT.?AU_COMSTAT@@��A<�
�R�_ETW_REFDEREF_OBJECT_EVENT.?AU_ETW_REFDEREF_OBJECT_EVENT@@��
A6
Object���
"Tag��
"CountRA_ETW_REFDEREF_OBJECT_EVENT.?AU_ETW_REFDEREF_OBJECT_EVENT@@��A0p
2�_NIC_RECORD.?AU_NIC_RECORD@@
A#�"
�NICName��
"Index
"PhysicalAddrLen��
�4PhysicalAddr�
"Size�
IpAddress
 SubnetMask���
$DhcpServer���
(Gateway��
,PrimaryWinsServer
0SecondaryWinsServer��
A4DnsServer
"DData�2
AH_NIC_RECORD.?AU_NIC_RECORD@@A0LR�_TXFS_QUERY_RM_INFORMATION.?AU_TXFS_QUERY_RM_INFORMATION@@��
"BytesRequired
#TailLsn��
#CurrentLsn���
#ArchiveTailLsn���
# LogContainerSize�
~(HighestVirtualClock��
"0LogContainerCount
"4LogContainerCountMax�
"8LogContainerCountMin�
"<LogGrowthIncrement���
"@LogAutoShrinkPercentage��
"DFlags
!HLoggingMode��
!JReserved�
"LRmState��
#PLogCapacity��
#XLogFree��
#`TopsSize�
#hTopsUsed�
#pTransactionCount�
#xOnePCCount���
#�TwoPCCount���
#�NumberLogFileFull
#�OldestTransactionAge�
��RMName���
"�TmLogPathOffset��RA�_TXFS_QUERY_RM_INFORMATION.?AU_TXFS_QUERY_RM_INFORMATION@@��AUWb�_ETW_UMS_EVENT_DIRECTED_SWITCH_END.?AU_ETW_UMS_EVENT_DIRECTED_SWITCH_END@@��f
"ProcessId
"ScheduledThreadId
"PrimaryThreadId��
"SwitchFlags��b"A_ETW_UMS_EVENT_DIRECTED_SWITCH_END.?AU_ETW_UMS_EVENT_DIRECTED_SWITCH_END@@��#A0|
p"N�_RTL_DEBUG_INFORMATION32.?AU_RTL_DEBUG_INFORMATION32@@��b
"SectionHandleClient��
"ViewBaseClient���
"ViewBaseTarget���
"ViewBaseDelta
"EventPairClient��
"EventPairTarget��
"TargetProcessId��
"TargetThreadHandle���
" Flags
"$OffsetFree���
"(CommitSize���
",ViewSize�
"0Modules��
"0ModulesEx
"4BackTraces���
"8Heaps
"<Locks
"@SpecificHeap�
"DTargetProcessHandle��
"HVerifierOptions��
"LProcessHeap��
"PCriticalSectionHandle
"TCriticalSectionOwnerThread���
�XReserved�N'Ah_RTL_DEBUG_INFORMATION32.?AU_RTL_DEBUG_INFORMATION32@@��(A��
�;"#��'#$�R
plocale���
qwlocale��
trefcount�
twrefcount:-A <anonymous-tag>.?AU<anonymous-tag>@@.A�'.A#��&�lconv.?AUlconv@@
1A:�__lc_time_data.?AU__lc_time_data@@��
3A�
trefcount�
ulc_codepage��
ulc_collate_cp
+Alc_handle
,A$lc_id
0AHlc_category��
tlc_clike�
tmb_cur_max���
tlconv_intl_refcount��
tlconv_num_refcount���
t lconv_mon_refcount���
2A(lconv
t0ctype1_refcount��
q8ctype1���
@pctype���
�Hpclmap���
�Ppcumap���
4AXlc_time_curr�J5A`threadlocaleinfostruct.?AUthreadlocaleinfostruct@@��6A�'R�_ETW_COVERAGE_SAMPLER_STATS.?AU_ETW_COVERAGE_SAMPLER_STATS@@�
SamplesAdded�
SamplesFound�
SamplesDropped���
SamplesRaisedUM��
SamplesMappedUM��
SamplesRaisedKM��
SamplesMappedKM��
SamplingPaused���
 ApcNotAvailable��
$CaptureBufferNotAvailable
(SampleBufferNotAvailable�
,ProfileSampleCount���
0CSwitchSampleCount���
4RThreadSampleCount���
8PGFaultSampleCount���R9A<_ETW_COVERAGE_SAMPLER_STATS.?AU_ETW_COVERAGE_SAMPLER_STATS@@:A�
"<A
�/�t?A
@AN�_CM_EISA_SLOT_INFORMATION.?AU_CM_EISA_SLOT_INFORMATION@@
BA�
 ReturnCode���
 ReturnFlags��
 MajorRevision
 MinorRevision
!Checksum�
 NumberFunctions��
 FunctionInformation��
"CompressedId�NDA_CM_EISA_SLOT_INFORMATION.?AU_CM_EISA_SLOT_INFORMATION@@EA�)� *�HFONT__.?AUHFONT__@@
tunused���*IAHFONT__.?AUHFONT__@@JAAV
�4
�<6�_INPUT_RECORD.?AU_INPUT_RECORD@@z
u*KeyEvent�
i"MouseEvent���
8WindowBufferSizeEvent
�7MenuEvent
�*FocusEvent���2OA<anonymous-tag>.?AT<anonymous-tag>@@PAU|&
!EventType
PAEvent6RA_INPUT_RECORD.?AU_INPUT_RECORD@@SAUz
):
�1^�_RPC_BINDING_HANDLE_SECURITY_V1_A.?AU_RPC_BINDING_HANDLE_SECURITY_V1_A@@
WA�
"Version��
 ServerPrincName��
"AuthnLevel���
"AuthnSvc�
r4AuthIdentity�
( SecurityQos��^YA(_RPC_BINDING_HANDLE_SECURITY_V1_A.?AU_RPC_BINDING_HANDLE_SECURITY_V1_A@@ZAB�FILE_ID_DESCRIPTOR.?AUFILE_ID_DESCRIPTOR@@��
\Aj
"dwSize���
s'Type�
~FileId���
�ObjectId�
.ExtendedFileId���B^AFILE_ID_DESCRIPTOR.?AUFILE_ID_DESCRIPTOR@@��_A<�#J�PPM_WMI_PERF_STATES_EX.?AUPPM_WMI_PERF_STATES_EX@@���
"Count
"MaxFrequency�
"CurrentState�
"MaxPerfState�
"MinPerfState�
"LowestPerfState��
"ThermalConstraint
 BusyAdjThreshold�
 PolicyType���
 Type�
 Reserved�
" TimerInterval
(TargetProcessors�
"0PStateHandler
"4PStateContext
"8TStateHandler
"<TStateContext
"@FeedbackHandler��
"DReserved1
#HReserved2

6PStateJbA�PPM_WMI_PERF_STATES_EX.?AUPPM_WMI_PERF_STATES_EX@@��cAF�	V�_JOBOBJECT_FREEZE_INFORMATION.?AU_JOBOBJECT_FREEZE_INFORMATION@@
eA
"��
"��
"��
"���
"Flags
gAFreezeOperation��
hAFilterOperation��
iASwapOperation
jAReserved�
 Freeze���
 Swap�
�Reserved0
� WakeFilter���V	kA_JOBOBJECT_FREEZE_INFORMATION.?AU_JOBOBJECT_FREEZE_INFORMATION@@lAbN�_ETW_DISKIO_READWRITE_V3.?AU_ETW_DISKIO_READWRITE_V3@@��
nA�
"DiskNumber���
"IrpFlags�
"Size�
"Reserved�
#ByteOffset���
FileObject���
 IrpAddr��
#(HighResResponseTime��
"0IssuingThreadId��N	pA8_ETW_DISKIO_READWRITE_V3.?AU_ETW_DISKIO_READWRITE_V3@@��qA0�:�HWINEVENTHOOK__.?AUHWINEVENTHOOK__@@
tunused���:tAHWINEVENTHOOK__.?AUHWINEVENTHOOK__@@uAAb] wA6�_HEAP_SUMMARY.?AU_HEAP_SUMMARY@@r
"cb���
#cbAllocated��
#cbCommitted��
#cbReserved���
# cbMaxReserve�6zA(_HEAP_SUMMARY.?AU_HEAP_SUMMARY@@2onecore\external\sdk\inc\minwin\heapapi.h��{A|A+
'
�7:�_XSAVE_VENDORS.?AU_XSAVE_VENDORS@@��
�A�#8�2
"NumberOfVendors��
�AVendor���:�A@_XSAVE_VENDORS.?AU_XSAVE_VENDORS@@���A��
�#@�B
"dvReserved���
"dvNumAxes
�AdvValues�:�AHtagDESIGNVECTOR.?AUtagDESIGNVECTOR@@�AS�
2
CommOffset���
FaultOffset��B�A_COMM_FAULT_OFFSETS.?AU_COMM_FAULT_OFFSETS@@�A��
�'
�
p=:�BITMAPV5HEADER.?AUBITMAPV5HEADER@@��
�AB
"bV5Size��
bV5Width�
bV5Height
!bV5Planes
!bV5BitCount��
"bV5Compression���
"bV5SizeImage�
bV5XPelsPerMeter�
bV5YPelsPerMeter�
" bV5ClrUsed���
"$bV5ClrImportant��
"(bV5RedMask���
",bV5GreenMask�
"0bV5BlueMask��
"4bV5AlphaMask�
"8bV5CSType
�<bV5Endpoints�
"`bV5GammaRed��
"dbV5GammaGreen
"hbV5GammaBlue�
"lbV5Intent
"pbV5ProfileData���
"tbV5ProfileSize���
"xbV5Reserved��:�A|BITMAPV5HEADER.?AUBITMAPV5HEADER@@���ASa2
#Ptr��
"Size�
"Type�N�A_EVENT_FILTER_DESCRIPTOR.?AU_EVENT_FILTER_DESCRIPTOR@@���AHR�_PERFINFO_BOOT_PHASE_START.?AU_PERFINFO_BOOT_PHASE_START@@��
PhaseR�A_PERFINFO_BOOT_PHASE_START.?AU_PERFINFO_BOOT_PHASE_START@@���A0�
Lf�DISPLAYCONFIG_SET_TARGET_PERSISTENCE.?AUDISPLAYCONFIG_SET_TARGET_PERSISTENCE@@��
u��
u��V
�header���
�AbootPersistenceOn
�Areserved�
uvaluef�ADISPLAYCONFIG_SET_TARGET_PERSISTENCE.?AUDISPLAYCONFIG_SET_TARGET_PERSISTENCE@@���AS.
�3
� 
�f�_SYSTEM_LOGICAL_PROCESSOR_INFORMATION.?AU_SYSTEM_LOGICAL_PROCESSOR_INFORMATION@@
 Flags:�A<anonymous-tag>.?AU<anonymous-tag>@@�A|
"NodeNumber���:�A<anonymous-tag>.?AU<anonymous-tag>@@�A|�
#ProcessorMask
Relationship�
�AProcessorCore
�ANumaNode�
E2Cache
�Reserved�f�A _SYSTEM_LOGICAL_PROCESSOR_INFORMATION.?AU_SYSTEM_LOGICAL_PROCESSOR_INFORMATION@@�A|b�_SYSTEM_CONTEXT_SWITCH_INFORMATION.?AU_SYSTEM_CONTEXT_SWITCH_INFORMATION@@��
�A
"ContextSwitches��
"FindAny��
"FindLast�
"FindIdeal
"IdleAny��
"IdleCurrent��
"IdleLast�
"IdleIdeal
" PreemptAny���
"$PreemptCurrent���
"(PreemptLast��
",SwitchToIdle�b�A0_SYSTEM_CONTEXT_SWITCH_INFORMATION.?AU_SYSTEM_CONTEXT_SWITCH_INFORMATION@@���A��
f�_JOBOBJECT_EXTENDED_LIMIT_INFORMATION.?AU_JOBOBJECT_EXTENDED_LIMIT_INFORMATION@@
�A�
�*BasicLimitInformation
|@IoInfo���
#pProcessMemoryLimit���
#xJobMemoryLimit���
#�PeakProcessMemoryUsed
#�PeakJobMemoryUsedf�A�_JOBOBJECT_EXTENDED_LIMIT_INFORMATION.?AU_JOBOBJECT_EXTENDED_LIMIT_INFORMATION@@�A}`
�!F�_RPC_PROTSEQ_VECTORA.?AU_RPC_PROTSEQ_VECTORA@@�� #�&
uCount
�AProtseq��F�A_RPC_PROTSEQ_VECTORA.?AU_RPC_PROTSEQ_VECTORA@@���A�
H$
�"�AZ�_FILE_PROVIDER_EXTERNAL_INFO_V1.?AU_FILE_PROVIDER_EXTERNAL_INFO_V1@@:
"Version��
"Algorithm
"FlagsZ�A_FILE_PROVIDER_EXTERNAL_INFO_V1.?AU_FILE_PROVIDER_EXTERNAL_INFO_V1@@�AU}"F�_SERVICE_TABLE_ENTRYA.?AU_SERVICE_TABLE_ENTRYA@@
�A
p"�A�A
�A2
plpServiceName
�AlpServiceProcF�A_SERVICE_TABLE_ENTRYA.?AU_SERVICE_TABLE_ENTRYA@@�AmyV�_ETW_TP_EVENT_TIMER_CANCELLED.?AU_ETW_TP_EVENT_TIMER_CANCELLED@@:
8Header���
 SubQueue�
(TimerV�A0_ETW_TP_EVENT_TIMER_CANCELLED.?AU_ETW_TP_EVENT_TIMER_CANCELLED@@�A0
f�_EVENT_TRACE_HEAP_TRACING_INFORMATION.?AU_EVENT_TRACE_HEAP_TRACING_INFORMATION@@>
EventTraceInformationClass���
�ProcessIdf�A_EVENT_TRACE_HEAP_TRACING_INFORMATION.?AU_EVENT_TRACE_HEAP_TRACING_INFORMATION@@�A#
NotificationType�
"NotificationSize�
"Offset���
 ReplyRequested���
"Timeout��
"ReplyCount���
"NotifyeeCount
#Reserved2
" TargetPID
"$SourcePID
�(DestinationGuid��
�8SourceGuid���N�AH_ETW_NOTIFICATION_HEADER.?AU_ETW_NOTIFICATION_HEADER@@���AHf�_PERFINFO_DRIVER_COMPLETE_REQUEST_RET.?AU_PERFINFO_DRIVER_COMPLETE_REQUEST_RET@@*
Irp��
"UniqMatchId��f�A_PERFINFO_DRIVER_COMPLETE_REQUEST_RET.?AU_PERFINFO_DRIVER_COMPLETE_REQUEST_RET@@�A0
-F�_PO_WAKE_SOURCE_INFO.?AU_PO_WAKE_SOURCE_INFO@@��
�A&
"Count
�Offsets��F�A_PO_WAKE_SOURCE_INFO.?AU_PO_WAKE_SOURCE_INFO@@���AF5

�;Z�_MEMORY_EXHAUSTION_INFORMATION.?AU_MEMORY_EXHAUSTION_INFORMATION@@��J
!Version��
!Reserved�
�9Type�
#ValueZ�A_MEMORY_EXHAUSTION_INFORMATION.?AU_MEMORY_EXHAUSTION_INFORMATION@@���A}�
�R�_CREATE_PROCESS_DEBUG_INFO.?AU_CREATE_PROCESS_DEBUG_INFO@@���
hFile
hProcess�
hThread��
lpBaseOfImage
" dwDebugInfoFileOffset
"$nDebugInfoSize���
(lpThreadLocalBase
50lpStartAddress���
8lpImageName��
!@fUnicode�R
�AH_CREATE_PROCESS_DEBUG_INFO.?AU_CREATE_PROCESS_DEBUG_INFO@@���A�;[�A
"��
"��
"��
"��
"��
"���
"Flags
�ANoRemoteImages���
�ANoLowMandatoryLabelImages
�APreferSystem32Images�
�AAuditNoRemoteImages��
�AAuditNoLowMandatoryLabelImages���
�AReservedFlagsf�A_PROCESS_MITIGATION_IMAGE_LOAD_POLICY.?AU_PROCESS_MITIGATION_IMAGE_LOAD_POLICY@@�A}�
?
�
�@

:;>�_FILE_RENAME_INFO.?AU_FILE_RENAME_INFO@@v
 ReplaceIfExists��
"Flags
RootDirectory
"FileNameLength���
JFileName�>B_FILE_RENAME_INFO.?AU_FILE_RENAME_INFO@@B<�"J�_WIN32_FIND_STREAM_DATA.?AU_WIN32_FIND_STREAM_DATA@@
Bq#P�2
~StreamSize���
BcStreamName��J	BX_WIN32_FIND_STREAM_DATA.?AU_WIN32_FIND_STREAM_DATA@@
BSB�USN_JOURNAL_DATA_V0.?AUUSN_JOURNAL_DATA_V0@@
B�
#UsnJournalID�
FirstUsn�
NextUsn��
LowestValidUsn���
 MaxUsn���
#(MaximumSize��
#0AllocationDelta��BB8USN_JOURNAL_DATA_V0.?AUUSN_JOURNAL_DATA_V0@@BU�:�tagEMRRESTOREDC.?AUtagEMRRESTOREDC@@&
Pemr��
iRelative:BtagEMRRESTOREDC.?AUtagEMRRESTOREDC@@BSw
-)
"��
B
�(J�_IMAGE_FUNCTION_ENTRY64.?AU_IMAGE_FUNCTION_ENTRY64@@j
#StartingAddress��
#EndingAddress
#EndOfPrologue
#UnwindInfoAddressJB_IMAGE_FUNCTION_ENTRY64.?AU_IMAGE_FUNCTION_ENTRY64@@Bf	
%&
#Address��
#Data�NB_RTL_STACK_CONTEXT_ENTRY.?AU_RTL_STACK_CONTEXT_ENTRY@@��B��B�_CONNECTDLGSTRUCTA.?AU_CONNECTDLGSTRUCTA@@��
!B
=j
"cbStructure��
�hwndOwner
#BlpConnRes
"dwFlags��
"dwDevNum�B$B _CONNECTDLGSTRUCTA.?AU_CONNECTDLGSTRUCTA@@��%Bo�
jJ�_RPC_SECURITY_QOS_V5_A.?AU_RPC_SECURITY_QOS_V5_A@@��
(B
J.HttpCredentials��2*B<anonymous-tag>.?AT<anonymous-tag>@@+B}�
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
+Bu
 Sid��
u(EffectiveOnly
0ServerSecurityDescriptor�J	-B8_RPC_SECURITY_QOS_V5_A.?AU_RPC_SECURITY_QOS_V5_A@@��.Bv
;@
0B
~0#�#�
!Flags
!Reserved�
!LangId���
LangNameIndex
!FallbackTypes

NeutralLangSpec��
3BFallbackSpecs
4BAlternateCodePage65B_MUILANGINFO.?AU_MUILANGINFO@@��6B�1N�_CM_PNP_BIOS_DEVICE_NODE.?AU_CM_PNP_BIOS_DEVICE_NODE@@��j
!Size�
 Node�
"ProductId
�DeviceType���
!
DeviceAttributes�N9B_CM_PNP_BIOS_DEVICE_NODE.?AU_CM_PNP_BIOS_DEVICE_NODE@@��:B�[
 <B
=B
�9J�_PROCESS_PRIORITY_CLASS.?AU_PROCESS_PRIORITY_CLASS@@2
 Foreground���
 PriorityClassJAB_PROCESS_PRIORITY_CLASS.?AU_PROCESS_PRIORITY_CLASS@@BBb9^�_FILE_MAILSLOT_QUERY_INFORMATION.?AU_FILE_MAILSLOT_QUERY_INFORMATION@@��
"MaximumMessageSize���
"MailslotQuota
"NextMessageSize��
"MessagesAvailable
~ReadTimeout��^EB_FILE_MAILSLOT_QUERY_INFORMATION.?AU_FILE_MAILSLOT_QUERY_INFORMATION@@��FBUc
JN�_PERFINFO_SPINLOCK_CONFIG.?AU_PERFINFO_SPINLOCK_CONFIG@@�
"SpinLockSpinThreshold
"SpinLockContentionSampleRate�
"SpinLockAcquireSampleRate
"SpinLockHoldThresholdNJB_PERFINFO_SPINLOCK_CONFIG.?AU_PERFINFO_SPINLOCK_CONFIG@@KB0�
�4B�_CI_LOG_MMCSS_START.?AU_CI_LOG_MMCSS_START@@
NB
�Header���BPB0_CI_LOG_MMCSS_START.?AU_CI_LOG_MMCSS_START@@QB0a
�(
�!
�+b�_SYSTEM_ENTROPY_TIMING_INFORMATION.?AU_SYSTEM_ENTROPY_TIMING_INFORMATION@@��
VB@
XB
5@^
YBEntropyRoutine���
ZBInitializationRoutine
InitializationContextb[B_SYSTEM_ENTROPY_TIMING_INFORMATION.?AU_SYSTEM_ENTROPY_TIMING_INFORMATION@@��\B�

�
^�_IR_TIMER_EXTRA_CREATE_PARAMETER.?AU_IR_TIMER_EXTRA_CREATE_PARAMETER@@��2
!ComponentId��
!RelativeId���^aB_IR_TIMER_EXTRA_CREATE_PARAMETER.?AU_IR_TIMER_EXTRA_CREATE_PARAMETER@@��bB�9
�
�+V�_FILE_ALLOCATED_RANGE_BUFFER.?AU_FILE_ALLOCATED_RANGE_BUFFER@@��.
~FileOffset���
~Length���VgB_FILE_ALLOCATED_RANGE_BUFFER.?AU_FILE_ALLOCATED_RANGE_BUFFER@@��hBU�
s3>�_SYSDBG_BUS_DATA.?AU_SYSDBG_BUS_DATA@@��
"Address��
Buffer���
"Request��
�"BusDataType��
"BusNumber
"SlotNumber���>lB _SYSDBG_BUS_DATA.?AU_SYSDBG_BUS_DATA@@��mB�>�_ALPC_DIRECT_ATTR.?AU_ALPC_DIRECT_ATTR@@
Event>pB_ALPC_DIRECT_ATTR.?AU_ALPC_DIRECT_ATTR@@qB�f2�_WMI_TCPIP.?AU_WMI_TCPIP@@��
sBv
"Context��
"Size�
"DestAddr�
"SrcAddr��
!DestPort�
!SrcPort��2uB_WMI_TCPIP.?AU_WMI_TCPIP@@��vB0	
E(
U!^�_MIDL_INTERFACE_METHOD_PROPERTIES.?AU_MIDL_INTERFACE_METHOD_PROPERTIES@@
zB��
{B�
�TransferSyntax���
yBDispatchTable
 ProcString���
(FmtStringOffset��
0TypeString���
8aUserMarshalQuadruple
|B@pMethodProperties
#HpReserved2���>}BP_MIDL_SYNTAX_INFO.?AU_MIDL_SYNTAX_INFO@@~B���
#Internal�
#InternalHigh�
"Offset���
"OffsetHigh���
Pointer��
hEvent���2�B _OVERLAPPED.?AU_OVERLAPPED@@�B�4V�tagEMREXTCREATEFONTINDIRECTW.?AUtagEMREXTCREATEFONTINDIRECTW@@��6
Pemr��
"ihFont���
�*elfw�V�BLtagEMREXTCREATEFONTINDIRECTW.?AUtagEMREXTCREATEFONTINDIRECTW@@���BS?
�V�_WIM_PROVIDER_START_INTEGRITY.?AU_WIM_PROVIDER_START_INTEGRITY@@
~DataSourceId�V�B_WIM_PROVIDER_START_INTEGRITY.?AU_WIM_PROVIDER_START_INTEGRITY@@�BU]"
4)J�_ETW_DEBUG_PRINT_EVENT.?AU_ETW_DEBUG_PRINT_EVENT@@��:
"Component
"Level
�Message��J�B_ETW_DEBUG_PRINT_EVENT.?AU_ETW_DEBUG_PRINT_EVENT@@���B02
�SC_ACTION_NONE���SC_ACTION_RESTARTSC_ACTION_REBOOT�SC_ACTION_RUN_COMMANDSC_ACTION_OWN_RESTART6t�B_SC_ACTION_TYPE.?AW4_SC_ACTION_TYPE@@��Bm
V�_PERFINFO_CC_WORKITEM_DEQUEUE.?AU_PERFINFO_CC_WORKITEM_DEQUEUE@@
�B
#WorkItemKey��V�B_PERFINFO_CC_WORKITEM_DEQUEUE.?AU_PERFINFO_CC_WORKITEM_DEQUEUE@@�B0� R�_RTL_UNICODE_STRING_BUFFER.?AU_RTL_UNICODE_STRING_BUFFER@@��2�_RTL_BUFFER.?AU_RTL_BUFFER@@Z
�String���
�BByteBuffer���
�0MinimumStaticBufferForTerminalNulR�B8_RTL_UNICODE_STRING_BUFFER.?AU_RTL_UNICODE_STRING_BUFFER@@��6onecore\internal\sdk\inc\ntrtlstringandbuffer.h�B�B�
�2
@1>
"dwDataType���
"cbData���
 pDatab�B_SERVICE_TRIGGER_SPECIFIC_DATA_ITEM.?AU_SERVICE_TRIGGER_SPECIFIC_DATA_ITEM@@�Bml
!��
!��
!
��
!��
!��z
�BPageRelativeOffset���
�BIndirectCall�
�BRexWPrefix���
�BCfgCheck�
�BReserved�~�B_IMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATION.?AU_IMAGE_INDIR_CONTROL_TRANSFER_DYNAMIC_RELOCATION@@���Bf�"[["�-�B
�BJ�_LDR_DATA_TABLE_ENTRY32.?AU_LDR_DATA_TABLE_ENTRY32@@�

InLoadOrderLinks�

InMemoryOrderLinks���

InInitializationOrderLinks���
"DllBase��
"EntryPoint���
" SizeOfImage��
�)$FullDllName��
�),BaseDllName��
"4Flags
!8LoadCount
!:TlsIndex�

<HashLinks
"<SectionPointer���
"@CheckSum�
"DTimeDateStamp
"DLoadedImportsJ�BH_LDR_DATA_TABLE_ENTRY32.?AU_LDR_DATA_TABLE_ENTRY32@@�B�6�_DEBUG_EVENT.?AU_DEBUG_EVENT@@��N�_EXIT_PROCESS_DEBUG_INFO.?AU_EXIT_PROCESS_DEBUG_INFO@@��F�_LOAD_DLL_DEBUG_INFO.?AU_LOAD_DLL_DEBUG_INFO@@��N�_OUTPUT_DEBUG_STRING_INFO.?AU_OUTPUT_DEBUG_STRING_INFO@@.�_RIP_INFO.?AU_RIP_INFO@@�
!6Exception
5CreateThread�
�ACreateProcessInfo
�1ExitThread���
�BExitProcess��
�BLoadDll��
-.UnloadDll
�BDebugString��
�BRipInfo��2	�B�<anonymous-tag>.?AT<anonymous-tag>@@�B�mZ
"dwDebugEventCode�
"dwProcessId��
"dwThreadId���
�Bu6�B�_DEBUG_EVENT.?AU_DEBUG_EVENT@@���B�i^�_PERFINFO_DRIVER_COMPLETE_REQUEST.?AU_PERFINFO_DRIVER_COMPLETE_REQUEST@@B
RoutineAddr��
Irp��
"UniqMatchId��^�B_PERFINFO_DRIVER_COMPLETE_REQUEST.?AU_PERFINFO_DRIVER_COMPLETE_REQUEST@@�B0>�tagEMRALPHABLEND.?AUtagEMRALPHABLEND@@��R
Pemr��
,rclBounds
xDest
yDest
 cxDest���
$cyDest���
"(dwRop
,xSrc�
0ySrc�

4xformSrc�
"LcrBkColorSrc�
"PiUsageSrc
"ToffBmiSrc
"XcbBmiSrc�
"\offBitsSrc���
"`cbBitsSrc
dcxSrc
hcySrc>�BltagEMRALPHABLEND.?AUtagEMRALPHABLEND@@���BS�"8" ##��B
�B
45N�_OBJECT_TYPES_INFORMATION.?AU_OBJECT_TYPES_INFORMATION@@
"NumberOfTypesN�B_OBJECT_TYPES_INFORMATION.?AU_OBJECT_TYPES_INFORMATION@@�B R
A
�0
�7R�tagTOUCH_HIT_TESTING_INPUT.?AUtagTOUCH_HIT_TESTING_INPUT@@��z
upointerId
�point
�boundingBox��
�nonOccludedBoundingBox���
u,orientation��R�B0tagTOUCH_HIT_TESTING_INPUT.?AUtagTOUCH_HIT_TESTING_INPUT@@���BL,F�_WOF_EXTERNAL_FILE_ID.?AU_WOF_EXTERNAL_FILE_ID@@
�B
.FileId���F�B_WOF_EXTERNAL_FILE_ID.?AU_WOF_EXTERNAL_FILE_ID@@�BU�!
�/b�_WMI_EXTENDED_THREAD_INFORMATION64.?AU_WMI_EXTENDED_THREAD_INFORMATION64@@��
�Bv
"ProcessId
"ThreadId�
#StackBase64��
#StackLimit64�
#UserStackBase64��
# UserStackLimit64�
#(StartAddr64��
#(Affinity�
#0Win32StartAddr64�
#8TebBase64
"@SubProcessTag
pDBasePriority�
 EPagePriority�
 FIoPriority���
 GFlags
JHThreadName���b�BP_WMI_EXTENDED_THREAD_INFORMATION64.?AU_WMI_EXTENDED_THREAD_INFORMATION64@@���B0(
n<
l4*�HTASK__.?AUHTASK__@@
�B
tunused���*�BHTASK__.?AUHTASK__@@�By':
#BaseAddress��
#Size�
"Flagsj�B_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE.?AU_PROCESS_DYNAMIC_ENFORCED_ADDRESS_RANGE@@�B}�
k-
�>#"�B #@�
�SourceId�
#Policy���
k0ResultCode���
ResultStatus�
#Time�
" EntropyLength
�B$EntropyData��Z�Bh_BOOT_ENTROPY_SOURCE_NT_RESULT.?AU_BOOT_ENTROPY_SOURCE_NT_RESULT@@���B�D
�6
pR�tagUPDATELAYEREDWINDOWINFO.?AUtagUPDATELAYEREDWINDOWINFO@@��
�B
���
�B
-��
�B:�_BLENDFUNCTION.?AU_BLENDFUNCTION@@��
�B��
�B
���
�B�
"cbSize���
�hdcDst���
�BpptDst���
�Bpsize
� hdcSrc���
�B(pptSrc���
"0crKey
�B8pblend���
"@dwFlags��
�BHprcDirty�R
CPtagUPDATELAYEREDWINDOWINFO.?AUtagUPDATELAYEREDWINDOWINFO@@��CL�
�-
�+>�tagEMRPOLYDRAW16.?AUtagEMRPOLYDRAW16@@��Z
Pemr��
,rclBounds
"cpts�
9apts�
� abTypes��>C$tagEMRPOLYDRAW16.?AUtagEMRPOLYDRAW16@@��CSZR�_JOURNAL_CLIENT_INFORMATION.?AU_JOURNAL_CLIENT_INFORMATION@@r
~StartTimeStamp���
~CurrentTimeStamp�
#RecordsToProcess�
"RelativeFillLevelR
C _JOURNAL_CLIENT_INFORMATION.?AU_JOURNAL_CLIENT_INFORMATION@@CzJ�tagEMRGLSBOUNDEDRECORD.?AUtagEMRGLSBOUNDEDRECORD@@��J
Pemr��
,rclBounds
"cbData���
�Data�JC tagEMRGLSBOUNDEDRECORD.?AUtagEMRGLSBOUNDEDRECORD@@��CS�
b�_FILE_PIPE_CLIENT_PROCESS_BUFFER_V2.?AU_FILE_PIPE_CLIENT_PROCESS_BUFFER_V2@@
C2
#ClientSession
ClientProcessbC_FILE_PIPE_CLIENT_PROCESS_BUFFER_V2.?AU_FILE_PIPE_CLIENT_PROCESS_BUFFER_V2@@CU=)
C9�%#p�b#(�
CTimelines
�%CpuTimeline��
�%DiskTimeline�
�%NetworkTimeline��
�%MBBTimeline��
�% ForegroundTimeline���
�%(DesktopVisibleTimeline���
�%0CompositionRenderedTimeline��
�%8CompositionDirtyGeneratedTimeline
�%@CompositionDirtyPropagatedTimeline���
�%HInputTimeline
�%PAudioInTimeline��
�%XAudioOutTimeline�
�%`DisplayRequiredTimeline��
�%hKeyboardInputTimeline
CpDurations
bpInputDuration
bxAudioInDuration��
b�AudioOutDuration�
b�DisplayRequiredDuration��
b�PSMBackgroundDuration
"�KeyboardInput
"�MouseInput���^C�_PROCESS_ENERGY_VALUES_EXTENSION.?AU_PROCESS_ENERGY_VALUES_EXTENSION@@��CbE
pB�_ENCRYPTION_BUFFER.?AU_ENCRYPTION_BUFFER@@��6
"EncryptionOperation��
�Private��BC_ENCRYPTION_BUFFER.?AU_ENCRYPTION_BUFFER@@�� CU�
/J�DISPLAYCONFIG_2DREGION.?AUDISPLAYCONFIG_2DREGION@@��"
ucx���
ucy���J$CDISPLAYCONFIG_2DREGION.?AUDISPLAYCONFIG_2DREGION@@��%CS&
#Offset���
#FlagsF'C_CFG_CALL_TARGET_INFO.?AU_CFG_CALL_TARGET_INFO@@(Cy�
o,
FZ�_POWER_THROTTLING_THREAD_STATE.?AU_POWER_THROTTLING_THREAD_STATE@@��B
"Version��
"ControlMask��
"StateMaskZ-C_POWER_THROTTLING_THREAD_STATE.?AU_POWER_THROTTLING_THREAD_STATE@@��.C}�N�_TPP_THREAD_DATA_CALLBACK.?AU_TPP_THREAD_DATA_CALLBACK@@V�_SHARED_VIRTUAL_DISK_SUPPORT.?AU_SHARED_VIRTUAL_DISK_SUPPORT@@��>
�SharedVirtualDiskSupport�
HandleState��V2C_SHARED_VIRTUAL_DISK_SUPPORT.?AU_SHARED_VIRTUAL_DISK_SUPPORT@@��3CU�'
I)
Y-
.+
~PerProcessUserTimeLimit��
~PerJobUserTimeLimit��
"LimitFlags���
#MinimumWorkingSetSize
# MaximumWorkingSetSize
"(ActiveProcessLimit���
#0Affinity�
"8PriorityClass
"<SchedulingClass��b	8C@_JOBOBJECT_BASIC_LIMIT_INFORMATION.?AU_JOBOBJECT_BASIC_LIMIT_INFORMATION@@��9C}TV�_MANAGE_HOT_PATCH_LOAD_PATCH.?AU_MANAGE_HOT_PATCH_LOAD_PATCH@@��
;C&
Sid��
�Buffer���2=CD<anonymous-tag>.?AT<anonymous-tag>@@>CB`R
"Version��
�PatchPath
>CUserSid��
/\BaseInfo�V@Ch_MANAGE_HOT_PATCH_LOAD_PATCH.?AU_MANAGE_HOT_PATCH_LOAD_PATCH@@��ACBRN�_SYSTEM_VDM_INSTEMUL_INFO.?AU_SYSTEM_VDM_INSTEMUL_INFO@@R
"SegmentNotPresent
"VdmOpcode0F��
"OpcodeESPrefix���
"OpcodeCSPrefix���
"OpcodeSSPrefix���
"OpcodeDSPrefix���
"OpcodeFSPrefix���
"OpcodeGSPrefix���
" OpcodeOPER32Prefix���
"$OpcodeADDR32Prefix���
"(OpcodeINSB���
",OpcodeINSW���
"0OpcodeOUTSB��
"4OpcodeOUTSW��
"8OpcodePUSHF��
"<OpcodePOPF���
"@OpcodeINTnn��
"DOpcodeINTO���
"HOpcodeIRET���
"LOpcodeINBimm�
"POpcodeINWimm�
"TOpcodeOUTBimm
"XOpcodeOUTWimm
"\OpcodeINB
"`OpcodeINW
"dOpcodeOUTB���
"hOpcodeOUTW���
"lOpcodeLOCKPrefix�
"pOpcodeREPNEPrefix
"tOpcodeREPPrefix��
"xOpcodeHLT
"|OpcodeCLI
"�OpcodeSTI
"�BopCount�N"DC�_SYSTEM_VDM_INSTEMUL_INFO.?AU_SYSTEM_VDM_INSTEMUL_INFO@@EC��
'
�1�SystemActivityModerationStateSystemManaged���SystemActivityModerationStateUserManagedAllowThrottling��SystemActivityModerationStateUserManagedDisableThrottlingMaxSystemActivityModerationState�ZtIC_SYSTEM_ACTIVITY_MODERATION_STATE.?AW4_SYSTEM_ACTIVITY_MODERATION_STATE@@�JC�
�9
�96�_TOKEN_OWNER.?AU_TOKEN_OWNER@@��
Owner6OC_TOKEN_OWNER.?AU_TOKEN_OWNER@@��PCE�J�_CONSOLE_SELECTION_INFO.?AU_CONSOLE_SELECTION_INFO@@J
"dwFlags��
j"dwSelectionAnchor
Z:srSelection��JSC_CONSOLE_SELECTION_INFO.?AU_CONSOLE_SELECTION_INFO@@TC%k
i"R�_FILE_OBJECTID_INFORMATION.?AU_FILE_OBJECTID_INFORMATION@@��
WC�
FileReference
.ObjectId�
.BirthVolumeId
.(BirthObjectId
.8DomainId�
�5ExtendedInfo�RYCH_FILE_OBJECTID_INFORMATION.?AU_FILE_OBJECTID_INFORMATION@@��ZCUd6�tagEXTLOGPEN.?AUtagEXTLOGPEN@@��
"elpPenStyle��
"elpWidth�
uelpBrushStyle
"elpColor�
#elpHatch�
"elpNumEntries
7elpStyleEntry6]C tagEXTLOGPEN.?AUtagEXTLOGPEN@@��^CSx
�=>�_VM_COUNTERS_EX2.?AU_VM_COUNTERS_EX2@@��
aCV
�-CountersEx���
#`PrivateWorkingSetSize
#hSharedCommitUsage>cCp_VM_COUNTERS_EX2.?AU_VM_COUNTERS_EX2@@��dC}

�Z�_KEY_VALUE_PARTIAL_INFORMATION.?AU_KEY_VALUE_PARTIAL_INFORMATION@@��R
"TitleIndex���
"Type�
"DataLength���
�Data�ZhC_KEY_VALUE_PARTIAL_INFORMATION.?AU_KEY_VALUE_PARTIAL_INFORMATION@@��iC�YR�_PO_SPR_ACTIVE_SESSION_DATA.?AU_PO_SPR_ACTIVE_SESSION_DATA@@.
 Start
�ActiveSessionGuidRlC_PO_SPR_ACTIVE_SESSION_DATA.?AU_PO_SPR_ACTIVE_SESSION_DATA@@mCF?
�
EventTraceInformationClass���
 CoverageSamplerInformationClass��
 MajorVersion�
 MinorVersion�
 Reserved�
#SamplerHandlenoC_EVENT_TRACE_COVERAGE_SAMPLER_INFORMATION.?AU_EVENT_TRACE_COVERAGE_SAMPLER_INFORMATION@@pC�
�N�_INVERTED_FUNCTION_TABLE.?AU_INVERTED_FUNCTION_TABLE@@��
sC�#0�n
"CurrentSize��
"MaximumSize��
LEpoch
 Overflow�
uCTableEntry���NvC0_INVERTED_FUNCTION_TABLE.?AU_INVERTED_FUNCTION_TABLE@@��wC��f�_CSV_QUERY_FILE_REVISION_FILE_ID_128.?AU_CSV_QUERY_FILE_REVISION_FILE_ID_128@@��#�.
.FileId���
zCFileRevision�f{C(_CSV_QUERY_FILE_REVISION_FILE_ID_128.?AU_CSV_QUERY_FILE_REVISION_FILE_ID_128@@��|CU�
�J�_FILE_DISPOSITION_INFO.?AU_FILE_DISPOSITION_INFO@@��
 DeleteFileA��J�C_FILE_DISPOSITION_INFO.?AU_FILE_DISPOSITION_INFO@@���C<�"n�_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION.?AU_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION@@�
~IdleTime�
~KernelTime���
~UserTime�
~DpcTime��
~ InterruptTime
"(InterruptCount���n�C0_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION.?AU_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION@@�C��
�A
)
Iz�_SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION.?AU_SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION@@��
�C>
"NumberOfLogicalProcessors
"NumberOfCoresz�C_SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION.?AU_SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION@@���C�
�n�DISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION.?AUDISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION@@��
u��
u��f
�header���
�CdisableMonitorVirtualResolution��
�Creserved�
uvaluen�CDISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION.?AUDISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION@@���CS<
�)
%:
�B^�_RTL_IMAGE_MITIGATION_DEP_POLICY.?AU_RTL_IMAGE_MITIGATION_DEP_POLICY@@��
�C
�Dep��^�C_RTL_IMAGE_MITIGATION_DEP_POLICY.?AU_RTL_IMAGE_MITIGATION_DEP_POLICY@@���C�,b�_PERFINFO_VIRTUAL_ALLOC_XPARTITION.?AU_PERFINFO_VIRTUAL_ALLOC_XPARTITION@@��6
CapturedBase�
!TargetPartition��b�C_PERFINFO_VIRTUAL_ALLOC_XPARTITION.?AU_PERFINFO_VIRTUAL_ALLOC_XPARTITION@@���C0`
oB�tagUSEROBJECTFLAGS.?AUtagUSEROBJECTFLAGS@@��>
tfInherit�
tfReserved
"dwFlags��B�CtagUSEROBJECTFLAGS.?AUtagUSEROBJECTFLAGS@@���CL�
�/%#�
�&Header���
.FileReferenceNumber��
.ParentFileReferenceNumber
(Usn��
"0Reason���
"4SourceInfo���
"8RemainingExtents�
!<NumberOfExtents��
!>ExtentSize���
�C@Extents��6
�CPUSN_RECORD_V4.?AUUSN_RECORD_V4@@�CU�R�_ACCESS_ALLOWED_OBJECT_ACE.?AU_ACCESS_ALLOWED_OBJECT_ACE@@��
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�R�C0_ACCESS_ALLOWED_OBJECT_ACE.?AU_ACCESS_ALLOWED_OBJECT_ACE@@���CE�
'
�4
�6f�_PROCESS_READWRITEVM_LOGGING_INFORMATION.?AT_PROCESS_READWRITEVM_LOGGING_INFORMATION@@��
 ��
 ��
 ��f
 Flags
�CEnableReadVmLogging��
�CEnableWriteVmLogging�
�CUnused���f�C_PROCESS_READWRITEVM_LOGGING_INFORMATION.?AT_PROCESS_READWRITEVM_LOGGING_INFORMATION@@���C}QN�_ImageArchitectureHeader.?AU_ImageArchitectureHeader@@��
u��
u��J
�CAmaskValue���
�CAmaskShift���
"FirstEntryRVAN�C_ImageArchitectureHeader.?AU_ImageArchitectureHeader@@���CfZ	J�_IMAGE_DEBUG_DIRECTORY.?AU_IMAGE_DEBUG_DIRECTORY@@���
"Characteristics��
"TimeDateStamp
!MajorVersion�
!
MinorVersion�
"Type�
"SizeOfData���
"AddressOfRawData�
"PointerToRawData�J�C_IMAGE_DEBUG_DIRECTORY.?AU_IMAGE_DEBUG_DIRECTORY@@���Cf�b�_SYSTEM_VERIFIER_FAULTS_INFORMATION.?AU_SYSTEM_VERIFIER_FAULTS_INFORMATION@@b
"Probability��
"MaxProbability���
�PoolTags�
�Applications�b�C(_SYSTEM_VERIFIER_FAULTS_INFORMATION.?AU_SYSTEM_VERIFIER_FAULTS_INFORMATION@@�C��	f�_FILE_IO_PRIORITY_HINT_INFORMATION_EX.?AU_FILE_IO_PRIORITY_HINT_INFORMATION_EX@@6
^PriorityHint�
 BoostOutstanding�f�C_FILE_IO_PRIORITY_HINT_INFORMATION_EX.?AU_FILE_IO_PRIORITY_HINT_INFORMATION_EX@@�CU�
� D#�
#CommittedMemory��
#ReservedMemory���
"NumberOfBackTraceLookups�
"NumberOfBackTraces���
�CBackTraces���J�C(_RTL_PROCESS_BACKTRACES.?AU_RTL_PROCESS_BACKTRACES@@�C��
l$If�_ACTIVATION_CONTEXT_BASIC_INFORMATION.?AU_ACTIVATION_CONTEXT_BASIC_INFORMATION@@V
�ActivationContext
hActCtx��
"Flags
"dwFlags��f�C_ACTIVATION_CONTEXT_BASIC_INFORMATION.?AU_ACTIVATION_CONTEXT_BASIC_INFORMATION@@�C��
+=
�C
|4pt�C
�C
`F�_FILE_ALLOCATION_INFO.?AU_FILE_ALLOCATION_INFO@@
�C
~AllocationSize���F�C_FILE_ALLOCATION_INFO.?AU_FILE_ALLOCATION_INFO@@�C<�"
�+B�_RDR_CALLOUT_STATE.?AU_RDR_CALLOUT_STATE@@��
�C
�C�C
�C
�r�_RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY.?AU_RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY@@��
�C*
�DisallowChildProcessCreation�r�C_RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY.?AU_RTL_IMAGE_MITIGATION_CHILD_PROCESS_POLICY@@���C�L	
>�
~KernelTime���
~UserTime�
~CreateTime���
"WaitTime�
 StartAddress�
�(ClientId�
8Priority�
<BasePriority�
"@ContextSwitches��
"DThreadState��
"HWaitReason���R�CP_SYSTEM_THREAD_INFORMATION.?AU_SYSTEM_THREAD_INFORMATION@@���C�FJ�BULK_SECURITY_TEST_DATA.?AUBULK_SECURITY_TEST_DATA@@2
"DesiredAccess
�SecurityIds��J�CBULK_SECURITY_TEST_DATA.?AUBULK_SECURITY_TEST_DATA@@�CU�
#�
"Magic
"Count
"Size�
#UserCount
#UserSize�
 UserContext��
�C(Next�
�0Trace>�C8_RTL_TRACE_BLOCK.?AU_RTL_TRACE_BLOCK@@���C�	N�_ETW_DISKIO_READWRITE_V2.?AU_ETW_DISKIO_READWRITE_V2@@��
"DiskNumber���
"IrpFlags�
"Size�
"Reserved�
#ByteOffset���
FileObject���
 IrpAddr��
#(HighResResponseTime��N�C0_ETW_DISKIO_READWRITE_V2.?AU_ETW_DISKIO_READWRITE_V2@@���C0��%
D>
ulbStyle��
"lbColor��
"lbHatch��6DtagLOGBRUSH32.?AUtagLOGBRUSH32@@DSR
TD:PortBasicInformation�PortDumpInformation��FtD_PORT_INFORMATION_CLASS.?AW4_PORT_INFORMATION_CLASS@@�D��"�@F�SYSTEM_BATTERY_STATE.?AUSYSTEM_BATTERY_STATE@@�� #�
 AcOnLine�
 BatteryPresent���
 Charging�
 Discharging��
DSpare1���
 Tag��
"MaxCapacity��
"RemainingCapacity
"Rate�
"EstimatedTime
"DefaultAlert1
"DefaultAlert2F
D SYSTEM_BATTERY_STATE.?AUSYSTEM_BATTERY_STATE@@��DF02�_DataStream.?AU_DataStream@@J
!Length���
!Flags
"Reserved�
#Vdl��2D_DataStream.?AU_DataStream@@DU�
.
$)
�26�tagMETARECORD.?AUtagMETARECORD@@
D��
D!#�B
"rdSize���
!rdFunction���
DrdParm���6DtagMETARECORD.?AUtagMETARECORD@@DS�
A
g-
G@
� b�_PERFINFO_PO_CALIBRATED_PERFCOUNTER.?AU_PERFINFO_PO_CALIBRATED_PERFCOUNTER@@"
~PerformanceCounter���b#D_PERFINFO_PO_CALIBRATED_PERFCOUNTER.?AU_PERFINFO_PO_CALIBRATED_PERFCOUNTER@@$D0�
�!
yAF�_LBR_TRACE_EVENT_DATA.?AU_LBR_TRACE_EVENT_DATA@@�#�f
#TimeStamp
"ProcessId
"ThreadId�
"Options��
)DEntries��F*D0_LBR_TRACE_EVENT_DATA.?AU_LBR_TRACE_EVENT_DATA@@+D0v�_RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY.?AU_RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY@@^
�BlockNonMicrosoftSignedBinaries��
�EnforceSigningOnModuleDependencies���v.D_RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY.?AU_RTL_IMAGE_MITIGATION_BINARY_SIGNATURE_POLICY@@/D����N�_ETW_HEAP_EVENT_EXPANSION.?AU_ETW_HEAP_EVENT_EXPANSION@@�
8Header���
 HeapHandle���
#(CommittedSize
0Address��
#8FreeSpace
#@CommittedSpace���
#HReservedSpace
"PNoOfUCRs�
#TAllocatedSpace���N	3D\_ETW_HEAP_EVENT_EXPANSION.?AU_ETW_HEAP_EVENT_EXPANSION@@4D0�

2V
"Flags
NewTlsData���
OldTlsData���
ThreadId�J7D_THREAD_TLS_INFORMATION.?AU_THREAD_TLS_INFORMATION@@8Dbb
K@vPROXY_CALCSIZE���PROXY_GETBUFFER��PROXY_MARSHALPROXY_SENDRECEIVEPROXY_UNMARSHAL��.t;DPROXY_PHASE.?AW4PROXY_PHASE@@�<D�N
V�_JOURNAL_ABSOLUTE_INFORMATION.?AU_JOURNAL_ABSOLUTE_INFORMATION@@
>Df
~StartTimeStamp���
~EndTimeStamp�
#NumberOfRecords��
"FillLevelV@D _JOURNAL_ABSOLUTE_INFORMATION.?AU_JOURNAL_ABSOLUTE_INFORMATION@@ADz�
�
�
�.
CR�_TRACE_ENABLE_FLAG_EXT_ITEM.?AU_TRACE_ENABLE_FLAG_EXT_ITEM@@&
!Offset���
!Type�RHD_TRACE_ENABLE_FLAG_EXT_ITEM.?AU_TRACE_ENABLE_FLAG_EXT_ITEM@@ID0$
�"
�b�_EVENT_TRACE_GROUPMASK_INFORMATION.?AU_EVENT_TRACE_GROUPMASK_INFORMATION@@��b
EventTraceInformationClass���
#TraceHandle��
+EventTraceGroupMasks�bND0_EVENT_TRACE_GROUPMASK_INFORMATION.?AU_EVENT_TRACE_GROUPMASK_INFORMATION@@��OD�F�_SINGLE_LIST_ENTRY32.?AU_SINGLE_LIST_ENTRY32@@��
"Next�FRD_SINGLE_LIST_ENTRY32.?AU_SINGLE_LIST_ENTRY32@@��SD�>
Id���
"Flags
SpaceGuarantee���^UD_STORAGE_RESERVE_AREA_DEFINITION.?AU_STORAGE_RESERVE_AREA_DEFINITION@@��VDU�*B
"OffsetInstanceData���
"LengthInstanceData���RXDOFFSETINSTANCEDATAANDLENGTH.?AUOFFSETINSTANCEDATAANDLENGTH@@YDt��
#SegmentReserveSize���
#SegmentCommitSize
#SegmentCount�
#AllocatedSize
# LargeAllocReserveSize
#(LargeAllocCommitSize�v[D0_SEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION.?AU_SEGMENT_HEAP_PERFORMANCE_COUNTER_INFORMATION@@\D�:�tagEMRFILLPATH.?AUtagEMRFILLPATH@@��&
Pemr��
,rclBounds:_DtagEMRFILLPATH.?AUtagEMRFILLPATH@@��`DS�R
plpDebugStringData
!fUnicode�
!
nDebugStringLength���NbD_OUTPUT_DEBUG_STRING_INFO.?AU_OUTPUT_DEBUG_STRING_INFO@@cD�]N�_CSV_QUERY_FILE_REVISION.?AU_CSV_QUERY_FILE_REVISION@@��
eD.
FileId���
zCFileRevision�NgD _CSV_QUERY_FILE_REVISION.?AU_CSV_QUERY_FILE_REVISION@@��hDUl*
p=ntmTm
i.HntmFontSig���BjD`tagNEWTEXTMETRICEXA.?AUtagNEWTEXTMETRICEXA@@kDS 
A<b
#Attribute
#Size�
#Value
ValuePtr�
#ReturnLength�6nD _PS_ATTRIBUTE.?AU_PS_ATTRIBUTE@@oDb�
�B~�_SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION.?AU_SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION@@��z;#�J
"ProcessorNumber��
"StateCount���
sDStates���~tD_SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION.?AU_SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION@@��uD�.�_Reparse.?AU_Reparse@@��"�_Ea.?AU_Ea@@^
�.DesiredStorageClass��
DDataStream���
wDReparse��
xDEa���:yD_StreamInformation.?AT_StreamInformation@@��zDU�
w-
(
P3��
~D>�_IMAGE_SYMBOL_EX.?AU_IMAGE_SYMBOL_EX@@��"
"Short
"Long�:�D<anonymous-tag>.?AU<anonymous-tag>@@�Df{:
�ShortName
�DName�
�LongName�2�D<anonymous-tag>.?AT<anonymous-tag>@@�Dfy~
�DN
"Value
SectionNumber
!Type�
 StorageClass�
 NumberOfAuxSymbols���>�D_IMAGE_SYMBOL_EX.?AU_IMAGE_SYMBOL_EX@@���Dfxu� 
H
tka �D
�AV�_PERFINFO_DOMAIN_CHANGE_EVENT.?AU_PERFINFO_DOMAIN_CHANGE_EVENT@@>
#NewDomain
t;Reason���
"ThreadId�V�D_PERFINFO_DOMAIN_CHANGE_EVENT.?AU_PERFINFO_DOMAIN_CHANGE_EVENT@@�D0#
Z9F
"SizeStruct���
"Option���
�OptionData���V�D_RTL_PROCESS_VERIFIER_OPTIONS.?AU_RTL_PROCESS_VERIFIER_OPTIONS@@�D���#�D
�D:�_EXCEPTION_LOG.?AU_EXCEPTION_LOG@@��
�D�
�ExceptionRecord��
Q�ContextRecord
pType�
tDisposition��
#xThread���
#�ControlPc
�Handler��:�D�_EXCEPTION_LOG.?AU_EXCEPTION_LOG@@���D��
"pointerType��
upointerId
uframeId��
upointerFlags�
sourceDevice�
�hwndTarget���
� ptPixelLocation��
�(ptHimetricLocation���
�0ptPixelLocationRaw���
�8ptHimetricLocationRaw
"@dwTime���
uDhistoryCount�
tHInputData
"LdwKeyStates��
#PPerformanceCount�
M&XButtonChangeType�:�D`tagPOINTER_INFO.?AUtagPOINTER_INFO@@�DL�R�_TXFS_GET_METADATA_INFO_OUT.?AU_TXFS_GET_METADATA_INFO_OUT@@*
LowPart��
HighPart�:�D<anonymous-tag>.?AU<anonymous-tag>@@�DU�f
�DTxfFileId
�LockingTransaction���
# LastLsn��
"(TransactionState�R�D0_TXFS_GET_METADATA_INFO_OUT.?AU_TXFS_GET_METADATA_INFO_OUT@@�DU�V�_CONSOLE_SCREEN_BUFFER_INFOEX.?AU_CONSOLE_SCREEN_BUFFER_INFOEX@@"#@��
"cbSize���
j"dwSize���
j"dwCursorPosition�
!wAttributes��
Z:srWindow�
j"dwMaximumWindowSize��
!wPopupAttributes�
tbFullscreenSupported�
�D ColorTable���V	�D`_CONSOLE_SCREEN_BUFFER_INFOEX.?AU_CONSOLE_SCREEN_BUFFER_INFOEX@@�D]:�
�@
[
��p#t�D
�DV�_PLUGPLAY_CONTROL_DEPTH_DATA.?AU_PLUGPLAY_CONTROL_DEPTH_DATA@@��6
�DeviceInstance���
"DeviceDepth��V�D_PLUGPLAY_CONTROL_DEPTH_DATA.?AU_PLUGPLAY_CONTROL_DEPTH_DATA@@���D��F�_PO_WAKE_SOURCE_FIXED.?AU_PO_WAKE_SOURCE_FIXED@@6
@>Header���
�6FixedWakeSourceType��F�D_PO_WAKE_SOURCE_FIXED.?AU_PO_WAKE_SOURCE_FIXED@@�DF"

�A>
"FeatureId
�DVendors��
#Unused���:�D_XSAVE_FEATURE.?AU_XSAVE_FEATURE@@���D��
�0r�_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX.?AU_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX@@��
�D�
 EnableIntegrity��
 KeepIntegrityStateUnchanged��
!Reserved�
"Flags
 Version��
	Reserved2r�D_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX.?AU_FSCTL_SET_INTEGRITY_INFORMATION_BUFFER_EX@@���DU�
j"
z4j�_STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST@@
�D2
"RequestLevel�
"RequestFlags�j�D_STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST@@�DU;&
�Next�
�&Handler��Z�D_EXCEPTION_REGISTRATION_RECORD.?AU_EXCEPTION_REGISTRATION_RECORD@@���D}
�,F�_REPAIR_COPIES_OUTPUT.?AU_REPAIR_COPIES_OUTPUT@@
�DB
"Size�
Status���
~ResumeFileOffset�F�D_REPAIR_COPIES_OUTPUT.?AU_REPAIR_COPIES_OUTPUT@@�DUF

TP_DEBUG_CLASS_POOL��6t�D_TP_DEBUG_CLASS.?AW4_TP_DEBUG_CLASS@@��D�5
�D
�@
p
�!
Tail�6�D_LDRP_CSLIST.?AU_LDRP_CSLIST@@���D��*�HUMPD__.?AUHUMPD__@@
�D
tunused���*�DHUMPD__.?AUHUMPD__@@�DAx�TOKEN_SECURITY_ATTRIBUTE_OPERATION_NONE��TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL���TOKEN_SECURITY_ATTRIBUTE_OPERATION_ADD���TOKEN_SECURITY_ATTRIBUTE_OPERATION_DELETETOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE���^t�D_TOKEN_SECURITY_ATTRIBUTE_OPERATION.?AW4_TOKEN_SECURITY_ATTRIBUTE_OPERATION@@��D^-b�_SYSTEM_PROCESSOR_POWER_INFORMATION.?AU_SYSTEM_PROCESSOR_POWER_INFORMATION@@
�DZ
 CurrentFrequency�
 ThermalLimitFrequency
 ConstantThrottleFrequency
 DegradedThrottleFrequency
 LastBusyFrequency
 LastC3Frequency��
 LastAdjustedBusyFrequency
 ProcessorMinThrottle�
 ProcessorMaxThrottle�
"NumberOfFrequencies��
"PromotionCount���
"DemotionCount
"ErrorCount���
"RetryCount���
# CurrentFrequencyTime�
#(CurrentProcessorTime�
#0CurrentProcessorIdleTime�
#8LastProcessorTime
#@LastProcessorIdleTime
#HEnergy���b�DP_SYSTEM_PROCESSOR_POWER_INFORMATION.?AU_SYSTEM_PROCESSOR_POWER_INFORMATION@@�D�D
�
2R�_FSCTL_QUERY_FAT_BPB_BUFFER.?AU_FSCTL_QUERY_FAT_BPB_BUFFER@@
�D #$�*
�DFirst0x24BytesOfBootSector���R�D$_FSCTL_QUERY_FAT_BPB_BUFFER.?AU_FSCTL_QUERY_FAT_BPB_BUFFER@@�DU�N�_IO_SESSION_CONNECT_INFO.?AU_IO_SESSION_CONNECT_INFO@@��.
"SessionId
 LocalSession�N�D_IO_SESSION_CONNECT_INFO.?AU_IO_SESSION_CONNECT_INFO@@���DU*
�?
L2b�_ALPC_PORT_MESSAGE_ZONE_INFORMATION.?AU_ALPC_PORT_MESSAGE_ZONE_INFORMATION@@&
Buffer���
"Size�b�D_ALPC_PORT_MESSAGE_ZONE_INFORMATION.?AU_ALPC_PORT_MESSAGE_ZONE_INFORMATION@@�D�&�AlpcMessageSidInformationAlpcMessageTokenModifiedIdInformationAlpcMessageDirectStatusInformation���AlpcMessageHandleInformation�VtE_ALPC_MESSAGE_INFORMATION_CLASS.?AW4_ALPC_MESSAGE_INFORMATION_CLASS@@�E��
�1F�_SYSTEM_POWER_STATUS.?AU_SYSTEM_POWER_STATUS@@��
 ACLineStatus�
 BatteryFlag��
 BatteryLifePercent���
 SystemStatusFlag�
"BatteryLifeTime��
"BatteryFullLifeTime��FE_SYSTEM_POWER_STATUS.?AU_SYSTEM_POWER_STATUS@@��E<)
&?
�(>�_TOKEN_ELEVATION.?AU_TOKEN_ELEVATION@@��
"TokenIsElevated��>E_TOKEN_ELEVATION.?AU_TOKEN_ELEVATION@@��
EE�
�"
���
E
�6
�=R�_FILE_PIPE_WAIT_FOR_BUFFER.?AU_FILE_PIPE_WAIT_FOR_BUFFER@@��
EZ
~Timeout��
"NameLength���
 TimeoutSpecified�
JName�RE_FILE_PIPE_WAIT_FOR_BUFFER.?AU_FILE_PIPE_WAIT_FOR_BUFFER@@��EU()B�tagHW_PROFILE_INFOW.?AUtagHW_PROFILE_INFOW@@q#N�R
"dwDockInfo���
EszHwProfileGuid��
n!RszHwProfileName��BE�tagHW_PROFILE_INFOW.?AUtagHW_PROFILE_INFOW@@E<�Z�_ETW_COVERAGE_SAMPLER_PERF_INFO.?AU_ETW_COVERAGE_SAMPLER_PERF_INFO@@*
�Common���
Q;PerfStatsZE�_ETW_COVERAGE_SAMPLER_PERF_INFO.?AU_ETW_COVERAGE_SAMPLER_PERF_INFO@@ E(J�_TXFS_LIST_TRANSACTIONS.?AU_TXFS_LIST_TRANSACTIONS@@
"EB
#NumberOfTransactions�
#BufferSizeRequired���J$E_TXFS_LIST_TRANSACTIONS.?AU_TXFS_LIST_TRANSACTIONS@@%EUCJ�_RTL_SPARSE_BITMAP_CTX.?AU_RTL_SPARSE_BITMAP_CTX@@��
"
(E
"��
"��
"��
"��
#Lock�
)EBitmapRanges�
LRangeArrayCommitStatus���
n- AllocateRoutine��
o-(FreeRoutine��
"0RangeCount���
"4RangeIndexLimit��
"8BitsPerRange�
"<RangeCountMax
"@RangeMetadataOffset��
"DMetadataSizePerBit���
*EHDefaultBitsSet���
+EHSparseRangeArray�
,EHNoInternalLocking
-EHSpareFlags���J.EP_RTL_SPARSE_BITMAP_CTX.?AU_RTL_SPARSE_BITMAP_CTX@@��/E��
�$
 ��
 ��
 ��
 ��
 ��
 ��
 ���
TransferAddress��
"ZeroBits�
#MaximumStackSize�
#CommittedStackSize���
" SubSystemType
!$SubSystemMinorVersion
!&SubSystemMajorVersion
"$SubSystemVersion�
!(MajorOperatingSystemVersion��
!*MinorOperatingSystemVersion��
"(OperatingSystemVersion���
!,ImageCharacteristics�
!.DllCharacteristics���
!0Machine��
 2ImageContainsCode
 3ImageFlags���
2E3ComPlusNativeReady���
3E3ComPlusILOnly
4E3ImageDynamicallyRelocated
5E3ImageMappedFlat��
6E3BaseBelow4gb�
7E3ComPlusPrefer32bit���
8E3Reserved�
"4LoaderFlags��
"8ImageFileSize
"<CheckSum�R9E@_SECTION_IMAGE_INFORMATION.?AU_SECTION_IMAGE_INFORMATION@@��:EBwv
"NextEntryOffset��
"TotalSize
"TotalInUse���
"PeakUsage
�PageFileName�V<E _SYSTEM_PAGEFILE_INFORMATION.?AU_SYSTEM_PAGEFILE_INFORMATION@@��=E�?	
�
^D
M-
M(
z6N�_FILE_ATTRIBUTE_TAG_INFO.?AU_FILE_ATTRIBUTE_TAG_INFO@@��6
"FileAttributes���
"ReparseTag���NEE_FILE_ATTRIBUTE_TAG_INFO.?AU_FILE_ATTRIBUTE_TAG_INFO@@��FE<�"N�STARTING_VCN_INPUT_BUFFER.?AUSTARTING_VCN_INPUT_BUFFER@@
~StartingVcn��NIESTARTING_VCN_INPUT_BUFFER.?AUSTARTING_VCN_INPUT_BUFFER@@JEUT
F�_RPC_SERVER_INTERFACE.?AU_RPC_SERVER_INTERFACE@@�
uLength���
�InterfaceId��
�TransferSyntax���
V!0DispatchTable
u8RpcProtseqEndpointCount��
X!@RpcProtseqEndpoint���
HDefaultManagerEpv
PInterpreterInfo��
uXFlagsF	ME`_RPC_SERVER_INTERFACE.?AU_RPC_SERVER_INTERFACE@@NE��j�_SERVICE_CONTROL_STATUS_REASON_PARAMSW.?AU_SERVICE_CONTROL_STATUS_REASON_PARAMSW@@��F
"dwReason�
qpszComment���
IServiceStatusjQE8_SERVICE_CONTROL_STATUS_REASON_PARAMSW.?AU_SERVICE_CONTROL_STATUS_REASON_PARAMSW@@��REm�
F�_CONSOLE_HISTORY_INFO.?AU_CONSOLE_HISTORY_INFO@@j
ucbSize���
uHistoryBufferSize
uNumberOfHistoryBuffers���
"dwFlags��FVE_CONSOLE_HISTORY_INFO.?AU_CONSOLE_HISTORY_INFO@@WE%ZReadDirectoryNotifyInformation���ReadDirectoryNotifyExtendedInformation���jtYE_READ_DIRECTORY_NOTIFY_INFORMATION_CLASS.?AW4_READ_DIRECTORY_NOTIFY_INFORMATION_CLASS@@���ZE��
ZE
���
]E
%7R�_MEMORY_BASIC_INFORMATION32.?AU_MEMORY_BASIC_INFORMATION32@@
`E�
"BaseAddress��
"AllocationBase���
"AllocationProtect
"RegionSize���
"State
"Protect��
"Type�RbE_MEMORY_BASIC_INFORMATION32.?AU_MEMORY_BASIC_INFORMATION32@@cEy_
A
�@
�)N
Handle���
�ClientId�
"Type�
� Stacks���VhE�_PROCESS_HANDLE_TRACING_ENTRY.?AU_PROCESS_HANDLE_TRACING_ENTRY@@iE}NB�_ETW_UMS_EVENT_PARK.?AU_ETW_UMS_EVENT_PARK@@F
"ProcessId
"ScheduledThreadId
"ParkFlagsBlE_ETW_UMS_EVENT_PARK.?AU_ETW_UMS_EVENT_PARK@@mE0�
�J�_WMI_LOGGER_INFORMATION.?AU_WMI_LOGGER_INFORMATION@@
pE
#��
#��
#��
#��
qWnode
"0BufferSize���
"4MinimumBuffers���
"8MaximumBuffers���
"<MaximumFileSize��
"@LogFileMode��
"DFlushTimer���
"HEnableFlags��
LAgeLimit�
LFlushThreshold���
rEPWow��
sEPQpcDeltaTracking�
tEPLargeMdlPages
uEPExcludeKernelStack���
#PV2Options
XLogFileHandle
#XLogFileHandle64��
"`NumberOfBuffers��
"`InstanceCount
"dFreeBuffers��
"dInstanceId���
"hEventsLost���
"hNumberOfProcessors���
"lBuffersWritten���
"pLogBuffersLost���
"pFlags
"tRealTimeBuffersLost��
xLoggerThreadId���
#xLoggerThreadId64�
��LogFileName��
a�LogFileName64
��LoggerName���
a�LoggerName64�
"�RealTimeConsumerCount
"�SequenceNumber���
�LoggerExtension��
#�LoggerExtension64J%vE�_WMI_LOGGER_INFORMATION.?AU_WMI_LOGGER_INFORMATION@@wE0@6�tagPOLYTEXTW.?AUtagPOLYTEXTW@@��
yEj
tx
ty
un
�lpstr
uuiFlags��
�rcl��
t0pdx��6{E8tagPOLYTEXTW.?AUtagPOLYTEXTW@@��|ESG
b�_SERVICE_REQUIRED_PRIVILEGES_INFOA.?AU_SERVICE_REQUIRED_PRIVILEGES_INFOA@@��
~E&
ppmszRequiredPrivileges���b�E_SERVICE_REQUIRED_PRIVILEGES_INFOA.?AU_SERVICE_REQUIRED_PRIVILEGES_INFOA@@���EmQ�
�E
�B
�[��E
�E
�C
�8^�_JOBOBJECT_BASIC_UI_RESTRICTIONS.?AU_JOBOBJECT_BASIC_UI_RESTRICTIONS@@��"
"UIRestrictionsClass��^�E_JOBOBJECT_BASIC_UI_RESTRICTIONS.?AU_JOBOBJECT_BASIC_UI_RESTRICTIONS@@���E}�
�-R�_WIM_PROVIDER_OVERLAY_ENTRY.?AU_WIM_PROVIDER_OVERLAY_ENTRY@@�
"NextEntryOffset��
~DataSourceId�
�WimGuid��
" WimFileNameOffset
"$WimType��
"(WimIndex�
",FlagsR�E0_WIM_PROVIDER_OVERLAY_ENTRY.?AU_WIM_PROVIDER_OVERLAY_ENTRY@@�EU;"

�C^�_IMAGE_CE_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_CE_RUNTIME_FUNCTION_ENTRY@@��
"��
"��
"��
"��n
"FuncStart
�EPrologLen
�EFuncLen��
�EThirtyTwoBit�
�EExceptionFlag^�E_IMAGE_CE_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_CE_RUNTIME_FUNCTION_ENTRY@@���Ef��PowerRequestDisplayRequired��PowerRequestSystemRequired���PowerRequestAwayModeRequired�PowerRequestExecutionRequired>t�E_POWER_REQUEST_TYPE.?AW4_POWER_REQUEST_TYPE@@��EFH.
�pfnAllocate��
�pfnFree��B�E_MALLOC_FREE_STRUCT.?AU_MALLOC_FREE_STRUCT@@�E��
&A<>F�_ETW_HEAP_EVENT_FREE.?AU_ETW_HEAP_EVENT_FREE@@��V
8Header���
 HeapHandle���
(Address��
"0Source���F�E4_ETW_HEAP_EVENT_FREE.?AU_ETW_HEAP_EVENT_FREE@@���E0�
COMPARE_STRING���6t�ESYSNLS_FUNCTION.?AW4SYSNLS_FUNCTION@@��E%�R�_FILE_FULL_DIR_INFORMATION.?AU_FILE_FULL_DIR_INFORMATION@@��
�E&
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
JDFileName�R�EH_FILE_FULL_DIR_INFORMATION.?AU_FILE_FULL_DIR_INFORMATION@@���EU��
Buffer���
"BufferSize���
�pfnAllocate��
�pfnFree��
�3 pRpcChannelBuffer
�(Reserved�V�EP_NDR_USER_MARSHAL_INFO_LEVEL1.?AU_NDR_USER_MARSHAL_INFO_LEVEL1@@�E�J�_ETW_CRITSEC_EVENT_INIT.?AU_ETW_CRITSEC_EVENT_INIT@@
�E>
8Header���
 SpinCount
(Address��J�E0_ETW_CRITSEC_EVENT_INIT.?AU_ETW_CRITSEC_EVENT_INIT@@�E0�B�_LDR_RESLOADER_RET.?AU_LDR_RESLOADER_RET@@��B
Module���
DataEntry
TargetModule�B�E_LDR_RESLOADER_RET.?AU_LDR_RESLOADER_RET@@���E�b~""~�E.
pValue���
"ValueLength��v�E_CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE.?AU_CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE@@���EE[	


h&
�,�D
7�
"EntryLength��
"DependencyTypeFlags��
"ProviderSpecificFlags
�VirtualStorageType���
" AncestorLevel
"$HostVolumeNameOffset�
"(HostVolumeNameSize���
",DependentVolumeNameOffset
"0DependentVolumeNameSize��
"4RelativePathOffset���
"8RelativePathSize�
"<DependentDeviceNameOffset
"@DependentDeviceNameSize��r
�ED_STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY.?AU_STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY@@���EUJ
�2
#JobMemory
#PeakJobMemoryUsedb�E_JOBOBJECT_MEMORY_USAGE_INFORMATION.?AU_JOBOBJECT_MEMORY_USAGE_INFORMATION@@�EbO
�F�_OPTICAL_MEDIA_RECORD.?AU_OPTICAL_MEDIA_RECORD@@
�E~
!DiskNumber���
!BusType��
!DeviceType���
!MediaType
#StartingOffset���
#Size�
#NumberOfFreeBlocks���
# TotalNumberOfBlocks��
#(NextWritableAddress��
"0NumberOfSessions�
"4NumberOfTracks���
"8BytesPerSector���
!<DiscStatus���
!>LastSessionStatus
J@Data�F�EH_OPTICAL_MEDIA_RECORD.?AU_OPTICAL_MEDIA_RECORD@@�E03
D8J�_WIN32K_SYSCALL_FILTER.?AU_WIN32K_SYSCALL_FILTER@@��
�E.
"FilterState��
"FilterSetJ�E_WIN32K_SYSCALL_FILTER.?AU_WIN32K_SYSCALL_FILTER@@���E}�
"Characteristics��
"TimeDateStamp
!MajorVersion�
!
MinorVersion�
"Name�
"Base�
"NumberOfFunctions
"NumberOfNames
"AddressOfFunctions���
" AddressOfNames���
"$AddressOfNameOrdinalsJ�E(_IMAGE_EXPORT_DIRECTORY.?AU_IMAGE_EXPORT_DIRECTORY@@�EfjF�_CONSOLE_CURSOR_INFO.?AU_CONSOLE_CURSOR_INFO@@��*
"dwSize���
tbVisible�F�E_CONSOLE_CURSOR_INFO.?AU_CONSOLE_CURSOR_INFO@@���E]:�
BN�_WMI_TRACE_MESSAGE_PACKET.?AU_WMI_TRACE_MESSAGE_PACKET@@2
!MessageNumber
!OptionFlags��N�E_WMI_TRACE_MESSAGE_PACKET.?AU_WMI_TRACE_MESSAGE_PACKET@@�E0}v�_SYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE.?AU_SYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE@@J
#TimeAdjustment���
#TimeIncrement
 Enable���v�E_SYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE.?AU_SYSTEM_QUERY_TIME_ADJUST_INFORMATION_PRECISE@@�E�iJ�_FILE_ID_BOTH_DIR_INFO.?AU_FILE_ID_BOTH_DIR_INFO@@��j
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
pDShortNameLength��
IFShortName
~`FileId���
JhFileName�J�Ep_FILE_ID_BOTH_DIR_INFO.?AU_FILE_ID_BOTH_DIR_INFO@@���E<�"
��##�V
 Version��
Reserved0
#ApplicationId
�EPolicies�J�E_IMAGE_POLICY_METADATA.?AU_IMAGE_POLICY_METADATA@@���E$�&
�7V�_SYSTEM_ROOT_SILO_INFORMATION.?AU_SYSTEM_ROOT_SILO_INFORMATION@@2
"NumberOfSilos
�SiloIdList���V�E_SYSTEM_ROOT_SILO_INFORMATION.?AU_SYSTEM_ROOT_SILO_INFORMATION@@�E��	Z�DISPLAYCONFIG_VIDEO_SIGNAL_INFO.?AUDISPLAYCONFIG_VIDEO_SIGNAL_INFO@@"
�EtargetVideoSignalInfoN�E0DISPLAYCONFIG_TARGET_MODE.?AUDISPLAYCONFIG_TARGET_MODE@@�ESc
4#N�_VARIABLE_NAME_AND_VALUE.?AU_VARIABLE_NAME_AND_VALUE@@��
"NextEntryOffset��
"ValueOffset��
"ValueLength��
"Attributes���
�VendorGuid���
J Name�NF$_VARIABLE_NAME_AND_VALUE.?AU_VARIABLE_NAME_AND_VALUE@@��F|3
�V�_PLUGPLAY_CONTROL_STATUS_DATA.?AU_PLUGPLAY_CONTROL_STATUS_DATA@@
F�
�DeviceInstance���
"Operation
"DeviceStatus�
"DeviceProblem
"Flags
 ProblemStatusVF(_PLUGPLAY_CONTROL_STATUS_DATA.?AU_PLUGPLAY_CONTROL_STATUS_DATA@@F��>�_CM_RESOURCE_LIST.?AU_CM_RESOURCE_LIST@@

F�4#$�"
"Count
FList�>
F(_CM_RESOURCE_LIST.?AU_CM_RESOURCE_LIST@@F�x>�_EVENTSFORLOGFILE.?AU_EVENTSFORLOGFILE@@t&#�f
"ulSize���
�szLogicalLogFile�
"ulNumRecords�
FpEventLogRecords�>F_EVENTSFORLOGFILE.?AU_EVENTSFORLOGFILE@@Fw&t
u��
u��
u
��J
FvideoStandard
FvSyncFreqDivider�
Freserved�:F<anonymous-tag>.?AU<anonymous-tag>@@FS%�
#pixelRate
3hSyncFreq
3vSyncFreq
#CactiveSize���
#C totalSize
F(AdditionalSignalInfo�
u(videoStandard
3,scanLineOrdering�ZF0DISPLAYCONFIG_VIDEO_SIGNAL_INFO.?AUDISPLAYCONFIG_VIDEO_SIGNAL_INFO@@FS
8B
,:�tagEMREXTESCAPE.?AUtagEMREXTESCAPE@@N
Pemr��
tiEscape��
tcbEscData
�EscData��:!FtagEMREXTESCAPE.?AUtagEMREXTESCAPE@@"FS�j�_JOURNAL_CREATE_DELETE_KEY_INFORMATION.?AU_JOURNAL_CREATE_DELETE_KEY_INFORMATION@@���
yAction���
#RecordNumber�
~TimeStamp
�KeyPathName��
"(SecurityDescriptorLength�
0SecurityDescriptor���
!8ClassLength��
@ClassData
 HSymbolicLink�j	%FP_JOURNAL_CREATE_DELETE_KEY_INFORMATION.?AU_JOURNAL_CREATE_DELETE_KEY_INFORMATION@@��&Fz�
8%
4
T
�%
�%
-F
a4
�
u
>�_IMAGE_NT_HEADERS.?AU_IMAGE_NT_HEADERS@@
3FJ
"Signature
bFileHeader���
N6OptionalHeader���>5F�_IMAGE_NT_HEADERS.?AU_IMAGE_NT_HEADERS@@6Ff|F�_CM_SCSI_DEVICE_DATA.?AU_CM_SCSI_DEVICE_DATA@@��
8FF
!Version��
!Revision�
 HostIdentifier���F:F_CM_SCSI_DEVICE_DATA.?AU_CM_SCSI_DEVICE_DATA@@��;F��
.:�_FOUR_PART_VERSION.?AT_FOUR_PART_VERSION@@��6
"BuildAndRevision�
"MajorAndMinor:?F<anonymous-tag>.?AU<anonymous-tag>@@@F�:F
!Revision�
!Build
!Minor
!Major:BF<anonymous-tag>.?AU<anonymous-tag>@@CF�>>
#Version64
@FVersion32
CFVersion16:EF_FOUR_PART_VERSION.?AT_FOUR_PART_VERSION@@��FF�8b�_SYSTEM_MEMORY_CHANNEL_INFORMATION.?AU_SYSTEM_MEMORY_CHANNEL_INFORMATION@@��
"ChannelNumber
"ChannelHeatIndex�
#TotalPageCount���
#ZeroPageCount
#FreePageCount
# StandbyPageCount�bIF(_SYSTEM_MEMORY_CHANNEL_INFORMATION.?AU_SYSTEM_MEMORY_CHANNEL_INFORMATION@@��JFB+
�
�,
�&
"Flags
(FrameNameNOF_TEB_ACTIVE_FRAME_CONTEXT.?AU_TEB_ACTIVE_FRAME_CONTEXT@@PF�
�5R
Id���
"Flags
SpaceGuarantee���
SpaceUsedRSF_STORAGE_RESERVE_AREA_INFO.?AU_STORAGE_RESERVE_AREA_INFO@@��TFU�*
�)F�tagEMREXCLUDECLIPRECT.?AUtagEMREXCLUDECLIPRECT@@&
Pemr��
,rclClip��FXFtagEMREXCLUDECLIPRECT.?AUtagEMREXCLUDECLIPRECT@@YFS�z
#Address��
"Flags
#DataSize�
#OverheadSize�
# NextBlockInformationOffset���J[F(_HEAP_BLOCK_INFORMATION.?AU_HEAP_BLOCK_INFORMATION@@\F�
'
�^�_ALPC_SERVER_SESSION_INFORMATION.?AU_ALPC_SERVER_SESSION_INFORMATION@@��
`F*
"SessionId
"ProcessId^bF_ALPC_SERVER_SESSION_INFORMATION.?AU_ALPC_SERVER_SESSION_INFORMATION@@��cF��
�,J�_KEY_CACHED_INFORMATION.?AU_KEY_CACHED_INFORMATION@@�
~LastWriteTime
"TitleIndex���
"SubKeys��
"MaxNameLen���
"Values���
"MaxValueNameLen��
"MaxValueDataLen��
" NameLength���JgF(_KEY_CACHED_INFORMATION.?AU_KEY_CACHED_INFORMATION@@hF��
�'Z�_DISPLAYCONFIG_SDR_WHITE_LEVEL.?AU_DISPLAYCONFIG_SDR_WHITE_LEVEL@@��.
�header���
"SDRWhiteLevelZlF_DISPLAYCONFIG_SDR_WHITE_LEVEL.?AU_DISPLAYCONFIG_SDR_WHITE_LEVEL@@��mFSx>�_BOOT_ENTRY_LIST.?AU_BOOT_ENTRY_LIST@@��2
"NextEntryOffset��
K!BootEntry>pF$_BOOT_ENTRY_LIST.?AU_BOOT_ENTRY_LIST@@��qF��V�_FILE_PIPE_SILO_ARRIVAL_INPUT.?AU_FILE_PIPE_SILO_ARRIVAL_INPUT@@
JobHandleVtF_FILE_PIPE_SILO_ARRIVAL_INPUT.?AU_FILE_PIPE_SILO_ARRIVAL_INPUT@@uFUY)B�_FILE_LAYOUT_ENTRY.?AU_FILE_LAYOUT_ENTRY@@���
"Version��
"NextFileOffset���
"Flags
"FileAttributes���
#FileReferenceNumber��
"FirstNameOffset��
"FirstStreamOffset
" ExtraInfoOffset��
"$ExtraInfoLength��B	xF(_FILE_LAYOUT_ENTRY.?AU_FILE_LAYOUT_ENTRY@@��yFUu#4""{F
|F
�<
tunused���2FHMONITOR__.?AUHMONITOR__@@���FAn

'
�4
u"�FR�_PROCESS_UPTIME_INFORMATION.?AU_PROCESS_UPTIME_INFORMATION@@
"��
"��
"��
"	��
#QueryInterruptTime���
#QueryUnbiasedTime
#EndInterruptTime�
#TimeSinceCreation
# Uptime���
#(SuspendedTime
�F0HangCount
�F0GhostCount���
�F0Crashed��
�F0Terminated���R
�F8_PROCESS_UPTIME_INFORMATION.?AU_PROCESS_UPTIME_INFORMATION@@�Fb�
�
IB
�B
.
*5
�6>�_SYSDBG_PHYSICAL.?AU_SYSDBG_PHYSICAL@@��>
~Address��
Buffer���
"Request��>�F_SYSDBG_PHYSICAL.?AU_SYSDBG_PHYSICAL@@���F��Z�_FILE_ZERO_DATA_INFORMATION_EX.?AU_FILE_ZERO_DATA_INFORMATION_EX@@��F
~FileOffset���
~BeyondFinalZero��
"FlagsZ�F_FILE_ZERO_DATA_INFORMATION_EX.?AU_FILE_ZERO_DATA_INFORMATION_EX@@���FU�
~8N�_CI_LOG_SCHEDULER_WAKEUP.?AU_CI_LOG_SCHEDULER_WAKEUP@@��*
�Header���
"0Reason���N�F8_CI_LOG_SCHEDULER_WAKEUP.?AU_CI_LOG_SCHEDULER_WAKEUP@@���F0MN�_ETW_HEAP_EVENT_SNAPSHOT.?AU_ETW_HEAP_EVENT_SNAPSHOT@@��
8Header���
 HeapHandle���
#(FreeSpace
#0CommittedSpace���
#8ReservedSpace
"@Flags
"DProcessId
#HLargeUCRSpace
"PFreeListLength���
"TUCRLength
#XAllocatedSpace���N�F`_ETW_HEAP_EVENT_SNAPSHOT.?AU_ETW_HEAP_EVENT_SNAPSHOT@@���F0�
#"�FV�_WOW64_DESCRIPTOR_TABLE_ENTRY.?AU_WOW64_DESCRIPTOR_TABLE_ENTRY@@
�F.
"Selector�
"(Descriptor���V�F_WOW64_DESCRIPTOR_TABLE_ENTRY.?AU_WOW64_DESCRIPTOR_TABLE_ENTRY@@�Fd�
[?N�_SYSTEM_ALARM_OBJECT_ACE.?AU_SYSTEM_ALARM_OBJECT_ACE@@��
�Header���
"Mask�
"Flags
�ObjectType���
�InheritedObjectType��
",SidStart�N�F0_SYSTEM_ALARM_OBJECT_ACE.?AU_SYSTEM_ALARM_OBJECT_ACE@@���FE�
�
=
�1J�_PERFINFO_FLT_OPERATION.?AU_PERFINFO_FLT_OPERATION@@�
RoutineAddr��
FileObject���
FsContext
IrpPtr���
 CbdPtr���
(MajorFunctionJ�F,_PERFINFO_FLT_OPERATION.?AU_PERFINFO_FLT_OPERATION@@�F0�Z�_FILE_MOVE_CLUSTER_INFORMATION.?AU_FILE_MOVE_CLUSTER_INFORMATION@@��b
"ClusterCount�
RootDirectory
"FileNameLength���
JFileName�Z�F_FILE_MOVE_CLUSTER_INFORMATION.?AU_FILE_MOVE_CLUSTER_INFORMATION@@���FU�
$
i'b�_WIM_PROVIDER_REMOVE_OVERLAY_INPUT.?AU_WIM_PROVIDER_REMOVE_OVERLAY_INPUT@@��
�F
~DataSourceId�b�F_WIM_PROVIDER_REMOVE_OVERLAY_INPUT.?AU_WIM_PROVIDER_REMOVE_OVERLAY_INPUT@@���FU3"
�$
�?r�_PLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLED.?AU_PLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLED@@��B
�DeviceInterface��
"Flags
 Enabled��r�F_PLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLED.?AU_PLUGPLAY_CONTROL_DEVICE_INTERFACE_ENABLED@@���F�
�#�tt�F
�F
�#*�_FP_32.?AU_FP_32@@��
I16Value�
!U16Value�
I32Value�
"U32Value�
StringValue��
"CompareValue�
�FFp32Value
~I64Value�
�U64Value�
�'Fp64Value
(2Fp80Value
?Fp128Value���2�F<anonymous-tag>.?AT<anonymous-tag>@@�Fg�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��

�FRoundingMode�
�FInexact��
�FUnderflow
�FOverflow�
�FZeroDivide���
�FInvalidOperation�
�FOperandValid�
�FFormat���
�FPrecision
�FOperation
�FSpare
�FHardwareException:�F<anonymous-tag>.?AU<anonymous-tag>@@�Fg�&
�FValue
�FControl��:�F_FP_IEEE_VALUE.?AU_FP_IEEE_VALUE@@���Fg��
"BufferSize���
"ProviderId���
#HistoricalContext
"Version��
"Linkage��
"CountLost
KernelHandle�
~TimeStamp
�Guid�
"(ClientContext
",Flags6�F0_WNODE_HEADER.?AU_WNODE_HEADER@@�FtN�_RTL_FEATURE_USAGE_REPORT.?AU_RTL_FEATURE_USAGE_REPORT@@
�FJ
uFeatureId
!ReportingKind
!ReportingOptions�N�F_RTL_FEATURE_USAGE_REPORT.?AU_RTL_FEATURE_USAGE_REPORT@@�F��
�
�)
�&IoCompletionBasicInformation�Zt�F_IO_COMPLETION_INFORMATION_CLASS.?AW4_IO_COMPLETION_INFORMATION_CLASS@@����F!;
< �F
�F
�5F�_SL_HWID_DEVICE_INFO.?AU_SL_HWID_DEVICE_INFO@@��
"SizeBytes
 Type�
 DeviceRemovalPolicy��
 AuthenticationStatus�
 Disposition��
"DeviceNodeLevel��
�Guid�
�Data�F�F _SL_HWID_DEVICE_INFO.?AU_SL_HWID_DEVICE_INFO@@���F��
@6R�_SE_PACKAGE_CAPABILITY_INFO.?AU_SE_PACKAGE_CAPABILITY_INFO@@2
"Remaining
"PackageGrantedAccess�
"CapabilityGrantedAccess��
"UserGroupsRemaining��
"AllAppPackagesSkippedAccess��
 PackagesPresent��
 PackageMatch�
 CapabilityMatch��
 LogPermissiveFailure�
 AllAppPackagesSkippedR
�F_SE_PACKAGE_CAPABILITY_INFO.?AU_SE_PACKAGE_CAPABILITY_INFO@@�F^
�
p=
'J�_FILE_SET_SPARSE_BUFFER.?AU_FILE_SET_SPARSE_BUFFER@@
G
 SetSparseJG_FILE_SET_SPARSE_BUFFER.?AU_FILE_SET_SPARSE_BUFFER@@GU�J�PPM_IDLE_ACCOUNTING_EX.?AUPPM_IDLE_ACCOUNTING_EX@@��
	GV�PPM_IDLE_STATE_ACCOUNTING_EX.?AUPPM_IDLE_STATE_ACCOUNTING_EX@@��G#��
"StateCount���
"TotalTransitions�
"ResetCount���
"AbortCount���
#StartTime
GStateJ
G�PPM_IDLE_ACCOUNTING_EX.?AUPPM_IDLE_ACCOUNTING_EX@@��GF)

7
2<
z?>�_MUIREGISTRYINFO.?AU_MUIREGISTRYINFO@@��!#�
}0
�
�56�_MUILANGLIST.?AU_MUILANGLIST@@��
G
Gv
uOwned
GInstallLanguageFallback��
"Generation���
"ProcessGeneration
GInstalled
G Strings��
G(MachineConfig
G0UserConfig���
G8MachinePreferred�
G@UserPreferred
GHProcessPreferred�
GPMergedUser���
GXMergedMachine
G`MergedFallback���
GhPrevRegInfo��
"pMUI_Locked���
"tMUI_SE���
"xMUI_NumberAllowed
q�MUI_AllowedLanguage��
q�MUI_InstalledSKU�
"�cbInstalledSKU���
"�cbAllowedLanguage
q�MUI_DisallowedLanguage���
"�cbDisallowedLanguage�>G�_MUIREGISTRYINFO.?AU_MUIREGISTRYINFO@@��G�~
�@�
lpInformation
lpSectionBase
"ulSectionLength��
lpSectionGlobalDataBase��
" ulSectionGlobalDataLengthzG(tagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA.?AUtagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA@@�� G<� 
�J�tagEMRSETPALETTEENTRIES.?AUtagEMRSETPALETTEENTRIES@@b
Pemr��
"ihPal
"iStart���
"cEntries�
o;aPalEntries��J$GtagEMRSETPALETTEENTRIES.?AUtagEMRSETPALETTEENTRIES@@%GS�
�'
�.
�AJ�_ETW_TP_EVENT_TIMER_SET.?AU_ETW_TP_EVENT_TIMER_SET@@�
8Header���
 DueTime��
(SubQueue�
0Timer
"8Period���
"<WindowLength�
"@Absolute�J+GD_ETW_TP_EVENT_TIMER_SET.?AU_ETW_TP_EVENT_TIMER_SET@@,G0
� Z2RtlDiskWriteConstraintPolicyLimited��dRtlDiskWriteConstraintPolicyNormal���Zt/GRTL_DISK_WRITE_CONSTRAINT_POLICY.?AW4RTL_DISK_WRITE_CONSTRAINT_POLICY@@���0G�2:�tagSTYLESTRUCT.?AUtagSTYLESTRUCT@@��*
"styleOld�
"styleNew�:3GtagSTYLESTRUCT.?AUtagSTYLESTRUCT@@��4GL�
P
�?
`
�
�
�@��
;G~p~=G""?G
@G
�
*
(%R�_PERFINFO_FILE_INFORMATION.?AU_PERFINFO_FILE_INFORMATION@@��
#Irp��
#FileObject���
#FileKey��
#ExtraInformation�
" IssuingThreadId��
"$InfoClassRFG(_PERFINFO_FILE_INFORMATION.?AU_PERFINFO_FILE_INFORMATION@@��GG0`:�HENHMETAFILE__.?AUHENHMETAFILE__@@��
IG
tunused���:KGHENHMETAFILE__.?AUHENHMETAFILE__@@��LGAT �
NGn�_ETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT.?AU_ETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT@@
PG>
Lock�
"ThreadId�
"BoostBitmap��nRG_ETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT.?AU_ETW_AUTOBOOST_CLEAR_PRIORITY_FLOOR_EVENT@@SG0
R�tagEMRMODIFYWORLDTRANSFORM.?AUtagEMRMODIFYWORLDTRANSFORM@@��
UG2
Pemr��

xform
" iModeRWG$tagEMRMODIFYWORLDTRANSFORM.?AUtagEMRMODIFYWORLDTRANSFORM@@��XGS2�_RC_CONFIG.?AU_RC_CONFIG@@��R
"dwSignature��
"dwLength�
"dwRCConfigVersion
"dwFilePathType���
"dwFileType���
"dwSystemAttributes���
"dwUltimateFallbackLocation���
�dwServiceCheckSum
�,dwChecksum���
"<dwReserved1��
"@dwReserved2��
"DdwMUIFileNameOffset��
"HdwMUIFileNameLength��
"LdwMUIFilePathOffset��
"PdwMUIFilePathLength��
"TdwMainResNameTypesOffset�
"XdwMainResNameTypesLength�
"\dwMainResIDTypesOffset���
"`dwMainResIDTypesLength���
"ddwMUIResNameTypesOffset��
"hdwMUIResNameTypesLength��
"ldwMUIResIDTypesOffset
"pdwMUIResIDTypesLength
"tdwLanguageOffset�
"xdwLanguageLength�
"|dwUltimateFallbackLanguageOffset�
"�dwUltimateFallbackLanguageLength�2[G�_RC_CONFIG.?AU_RC_CONFIG@@��\G��:
�Uuid�
!VersMajor
!VersMinor2^G_RPC_IF_ID.?AU_RPC_IF_ID@@��_G{N�_DECRYPTION_STATUS_BUFFER.?AU_DECRYPTION_STATUS_BUFFER@@"
 NoEncryptedStreams���NbG_DECRYPTION_STATUS_BUFFER.?AU_DECRYPTION_STATUS_BUFFER@@cGU
�B*
"dwError��
"dwType���.fG_RIP_INFO.?AU_RIP_INFO@@gG�c2�_CALL_FRAME.?AU_CALL_FRAME@@
iGz
ReturnAddress
Param1Home���
Param2Home���
Param3Home���
 Param4Home���2kG(_CALL_FRAME.?AU_CALL_FRAME@@lGb�
2�_cpinfoexA.?AU_cpinfoexA@@��
uMaxCharSize��
�DefaultChar��
�LeadByte�
qUnicodeDefaultChar���
uCodePage�
7CodePageName�2oG_cpinfoexA.?AU_cpinfoexA@@��pG%cV�_ETW_PARTITION_INFO_EXTENSION.?AU_ETW_PARTITION_INFO_EXTENSION@@�
!EventVersion�
!Reserved�
"PartitionType
~QpcOffsetFromRoot
�PartitionId��
� ParentId�VsG0_ETW_PARTITION_INFO_EXTENSION.?AU_ETW_PARTITION_INFO_EXTENSION@@tG�^�_CREATEFILE2_EXTENDED_PARAMETERS.?AU_CREATEFILE2_EXTENDED_PARAMETERS@@��
vG
��
"dwSize���
"dwFileAttributes�
"dwFileFlags��
"dwSecurityQosFlags���
xGlpSecurityAttributes�
hTemplateFile^yG _CREATEFILE2_EXTENDED_PARAMETERS.?AU_CREATEFILE2_EXTENDED_PARAMETERS@@��zGf�_PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA.?AU_PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA@@>
"Flags
"BufferLength�
Buffer���f}G_PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA.?AU_PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA@@~G�
�
�3�G
�G�
"ModuleInfoSize���
"IsBinaryLoaded���
�ModulePathName���
"CoverageSectionSize��
�CoverageSection��F�G _COVERAGE_MODULE_INFO.?AU_COVERAGE_MODULE_INFO@@�G�tB�_CPU_CONFIG_RECORD.?AU_CPU_CONFIG_RECORD@@��q#�
"ProcessorSpeed���
"NumberOfProcessors���
"MemorySize���
"PageSize�
"AllocationGranularity
�ComputerName�
�GDomainName���
# HyperThreadingFlag���
#(HighestUserAddress���
!0ProcessorArchitecture
!2ProcessorLevel���
!4ProcessorRevision
 6NxEnabled
 7PaeEnabled���
"8MemorySpeed��B�G@_CPU_CONFIG_RECORD.?AU_CPU_CONFIG_RECORD@@���G0�
F:�_RTL_BITMAP_RUN.?AU_RTL_BITMAP_RUN@@
�G2
"StartingIndex
"NumberOfBits�:�G_RTL_BITMAP_RUN.?AU_RTL_BITMAP_RUN@@�G$)

F'�
#NumSDChangedSuccess��
#NumSDChangedFail�
#NumSDUnused��
#NumSDTotal���
# NumMftSDChangedSuccess���
#(NumMftSDChangedFail��
#0NumMftSDTotalV�G8_SD_CHANGE_MACHINE_SID_OUTPUT.?AU_SD_CHANGE_MACHINE_SID_OUTPUT@@�GU�
�JServiceDirectoryPersistentState��ServiceDirectoryTypeMax��Ft�GSERVICE_DIRECTORY_TYPE.?AW4SERVICE_DIRECTORY_TYPE@@����Gm
sF
� F�_RTL_HEAP_PARAMETERS.?AU_RTL_HEAP_PARAMETERS@@��
�G
�D>
"Length���
#SegmentReserve���
#SegmentCommit
#DeCommitFreeBlockThreshold���
# DeCommitTotalFreeThreshold���
#(MaximumAllocationSize
#0VirtualMemoryThreshold���
#8InitialCommit
#@InitialReserve���
�GHCommitRoutine
�+PReserved�F�G`_RTL_HEAP_PARAMETERS.?AU_RTL_HEAP_PARAMETERS@@���G$�

NCZ�tagI_RpcProxyCallbackInterface.?AUtagI_RpcProxyCallbackInterface@@��qq"�G
�Gp"�G
�G
"�G
�G�C �G
�G
�Ct1t1�G
�G
1
S
�;B
�GIsValidMachineFn�
�GGetClientAddressFn���
�GGetConnectionTimeoutFn���
�GPerformCalloutFn�
�G FreeCalloutStateFn���
�G(GetClientSessionAndResourceUUIDFn
�G0ProxyFilterIfFn��
�G8RpcProxyUpdatePerfCounterFn��
�G@RpcProxyUpdatePerfCounterBackendServerFn�Z	�GHtagI_RpcProxyCallbackInterface.?AUtagI_RpcProxyCallbackInterface@@���G��
�6n�_MEMORY_PARTITION_INITIAL_ADD_INFORMATION.?AU_MEMORY_PARTITION_INITIAL_ADD_INFORMATION@@
�G�+#�j
"Flags
"NumberOfRanges���
#NumberOfPagesAdded���
�GPartitionRanges��n�G _MEMORY_PARTITION_INITIAL_ADD_INFORMATION.?AU_MEMORY_PARTITION_INITIAL_ADD_INFORMATION@@�GB�
K#R�_EVENT_EXTENDED_ITEM_TS_ID.?AU_EVENT_EXTENDED_ITEM_TS_ID@@��
"SessionIdR�G_EVENT_EXTENDED_ITEM_TS_ID.?AU_EVENT_EXTENDED_ITEM_TS_ID@@���G#d

#;"
�BType�
"Delay2�G_SC_ACTION.?AU_SC_ACTION@@���Gm
Y:
�?6
!Version��
!Size�
�EventF�G_PLUGPLAY_NOTIFY_HDR.?AU_PLUGPLAY_NOTIFY_HDR@@���G��Z�_SYSTEM_PERFORMANCE_INFORMATION.?AU_SYSTEM_PERFORMANCE_INFORMATION@@
�G	
~IdleProcessTime��
~IoReadTransferCount��
~IoWriteTransferCount�
~IoOtherTransferCount�
" IoReadOperationCount�
"$IoWriteOperationCount
"(IoOtherOperationCount
",AvailablePages���
"0CommittedPages���
"4CommitLimit��
"8PeakCommitment���
"<PageFaultCount���
"@CopyOnWriteCount�
"DTransitionCount��
"HCacheTransitionCount�
"LDemandZeroCount��
"PPageReadCount
"TPageReadIoCount��
"XCacheReadCount���
"\CacheIoCount�
"`DirtyPagesWriteCount�
"dDirtyWriteIoCount
"hMappedPagesWriteCount
"lMappedWriteIoCount���
"pPagedPoolPages���
"tNonPagedPoolPages
"xPagedPoolAllocs��
"|PagedPoolFrees���
"�NonPagedPoolAllocs���
"�NonPagedPoolFrees
"�FreeSystemPtes���
"�ResidentSystemCodePage���
"�TotalSystemDriverPages���
"�TotalSystemCodePages�
"�NonPagedPoolLookasideHits
"�PagedPoolLookasideHits���
"�AvailablePagedPoolPages��
"�ResidentSystemCachePage��
"�ResidentPagedPoolPage
"�ResidentSystemDriverPage�
"�CcFastReadNoWait�
"�CcFastReadWait���
"�CcFastReadResourceMiss���
"�CcFastReadNotPossible
"�CcFastMdlReadNoWait��
"�CcFastMdlReadWait
"�CcFastMdlReadResourceMiss
"�CcFastMdlReadNotPossible�
"�CcMapDataNoWait��
"�CcMapDataWait
"�CcMapDataNoWaitMiss��
"�CcMapDataWaitMiss
"�CcPinMappedDataCount�
"�CcPinReadNoWait��
"�CcPinReadWait
"�CcPinReadNoWaitMiss��
"�CcPinReadWaitMiss
"�CcCopyReadNoWait�
"�CcCopyReadWait���
"�CcCopyReadNoWaitMiss�
"CcCopyReadWaitMiss���
"CcMdlReadNoWait��
"CcMdlReadWait
"CcMdlReadNoWaitMiss��
"CcMdlReadWaitMiss
"CcReadAheadIos���
"CcLazyWriteIos���
"CcLazyWritePages�
" CcDataFlushes
"$CcDataPages��
"(ContextSwitches��
",FirstLevelTbFills
"0SecondLevelTbFills���
"4SystemCalls��
#8CcTotalDirtyPages
#@CcDirtyPageThreshold�
HResidentAvailablePages���
#PSharedCommittedPages�ZN�GX_SYSTEM_PERFORMANCE_INFORMATION.?AU_SYSTEM_PERFORMANCE_INFORMATION@@�G��2�_RPC_POLICY.?AU_RPC_POLICY@@B
uLength���
"EndpointFlags
"NICFlags�2�G_RPC_POLICY.?AU_RPC_POLICY@@�G�
�
C,>�tagEMRNAMEDESCAPE.?AUtagEMRNAMEDESCAPE@@b
Pemr��
tiEscape��
tcbDriver�
tcbEscData
�EscData��>�GtagEMRNAMEDESCAPE.?AUtagEMRNAMEDESCAPE@@�GS�
�8j�_DISPLAYCONFIG_SET_ADVANCED_COLOR_STATE.?AU_DISPLAYCONFIG_SET_ADVANCED_COLOR_STATE@@
u��
u��Z
�header���
�GenableAdvancedColor��
�Greserved�
uvaluej�G_DISPLAYCONFIG_SET_ADVANCED_COLOR_STATE.?AU_DISPLAYCONFIG_SET_ADVANCED_COLOR_STATE@@�GSi
��#�
�G
H.
�?
�*��
�GZ�_SL_KMEM_CACHE_VALUE_DESCRIPTOR.?AU_SL_KMEM_CACHE_VALUE_DESCRIPTOR@@�
!Size�
!NameLength���
!Type�
!DataLength���
"Attributes���
"Reserved�
JName�Z�G_SL_KMEM_CACHE_VALUE_DESCRIPTOR.?AU_SL_KMEM_CACHE_VALUE_DESCRIPTOR@@�G�i
b�_EVENT_EXTENDED_ITEM_STACK_TRACE64.?AU_EVENT_EXTENDED_ITEM_STACK_TRACE64@@��*
#MatchId��
'=Address��b�G_EVENT_EXTENDED_ITEM_STACK_TRACE64.?AU_EVENT_EXTENDED_ITEM_STACK_TRACE64@@���G#mR�_WMI_PROCESS_INFORMATION64.?AU_WMI_PROCESS_INFORMATION64@@��
�G�
#UniqueProcessKey64���
"ProcessId
"ParentId�
"SessionId
ExitStatus���
#DirectoryTableBase���
" Flags
"$Sid��R�G(_WMI_PROCESS_INFORMATION64.?AU_WMI_PROCESS_INFORMATION64@@���G0R�_TP_POOL_STACK_INFORMATION.?AU_TP_POOL_STACK_INFORMATION@@��
�G2
#StackReserve�
#StackCommit��R�G_TP_POOL_STACK_INFORMATION.?AU_TP_POOL_STACK_INFORMATION@@���G�R
�)v�_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE.?AU_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE@@.
~FileOffset���
~ByteCountvH_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE.?AU_FSCTL_QUERY_GHOSTED_FILE_EXTENTS_INPUT_RANGE@@HU�*
�#
�V�_ETW_CLOCK_STATE_CHANGE_EVENT.?AU_ETW_CLOCK_STATE_CHANGE_EVENT@@
H�
 NewState�
 PrevState
�Reserved�
#DeliveredIncrement���
#RequestedIncrement���
#NextClockUpdateTime��V
H_ETW_CLOCK_STATE_CHANGE_EVENT.?AU_ETW_CLOCK_STATE_CHANGE_EVENT@@H0

+R�_FILE_FS_LABEL_INFORMATION.?AU_FILE_FS_LABEL_INFORMATION@@��
H6
"VolumeLabelLength
JVolumeLabel��RH_FILE_FS_LABEL_INFORMATION.?AU_FILE_FS_LABEL_INFORMATION@@��HUF�_TOKEN_PRIMARY_GROUP.?AU_TOKEN_PRIMARY_GROUP@@��
PrimaryGroup�FH_TOKEN_PRIMARY_GROUP.?AU_TOKEN_PRIMARY_GROUP@@��HE�
�Df�JOBOBJECT_IO_RATE_CONTROL_INFORMATION.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION@@�
MaxIops��
MaxBandwidth�
ReservationIops��
[VolumeName���
" BaseIoSize���
"$ControlFlags�fH(JOBOBJECT_IO_RATE_CONTROL_INFORMATION.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION@@2onecore\external\sdk\inc\mincore\jobapi2.h�HHN�PPM_WMI_LEGACY_PERFSTATE.?AUPPM_WMI_LEGACY_PERFSTATE@@��
HB
"Frequency
"Flags
"PercentFrequency�NHPPM_WMI_LEGACY_PERFSTATE.?AUPPM_WMI_LEGACY_PERFSTATE@@�� HF�	B�FIND_BY_SID_OUTPUT.?AUFIND_BY_SID_OUTPUT@@��b
"NextEntryOffset��
"FileIndex
"FileNameLength���
JFileName�B#HFIND_BY_SID_OUTPUT.?AUFIND_BY_SID_OUTPUT@@��$HU�
Z�_OBJECT_HANDLE_FLAG_INFORMATION.?AU_OBJECT_HANDLE_FLAG_INFORMATION@@
&H2
 Inherit��
 ProtectFromClose�Z(H_OBJECT_HANDLE_FLAG_INFORMATION.?AU_OBJECT_HANDLE_FLAG_INFORMATION@@)H WN�_ALPC_SERVER_INFORMATION.?AU_ALPC_SERVER_INFORMATION@@��
ThreadHandle�:,H<anonymous-tag>.?AU<anonymous-tag>@@-H��Z
 ThreadBlocked
ConnectedProcessId���
�ConnectionPortName���:/H <anonymous-tag>.?AU<anonymous-tag>@@0H��"
-HIn���
0HOut��N2H _ALPC_SERVER_INFORMATION.?AU_ALPC_SERVER_INFORMATION@@��3H��J�USN_RANGE_TRACK_OUTPUT.?AUUSN_RANGE_TRACK_OUTPUT@@��
5H
Usn��J7HUSN_RANGE_TRACK_OUTPUT.?AUUSN_RANGE_TRACK_OUTPUT@@��8HUY
7V�_TRACE_PROVIDER_INSTANCE_INFO.?AU_TRACE_PROVIDER_INSTANCE_INFO@@R
"NextOffset���
"EnableCount��
"Pid��
"FlagsV<H_TRACE_PROVIDER_INSTANCE_INFO.?AU_TRACE_PROVIDER_INSTANCE_INFO@@=H��J�_RTL_CRITICAL_SECTION64.?AU_RTL_CRITICAL_SECTION64@@
?H�
#DebugInfo
LockCount
RecursionCount���
#OwningThread�
#LockSemaphore
# SpinCountJAH(_RTL_CRITICAL_SECTION64.?AU_RTL_CRITICAL_SECTION64@@BH��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��Z
DHRequireProfileTotalIssuesSource��
EHForceProfileTimeSource���
FHNoProfileSampling
GHNoCSwitchSampling
HHNoReadyThreadSampling
IHNoFaultSampling��
JHNoStackCache�
KHNoSampleBuffers��
LHNoPauseWhenFull��
MHNoLowPriority
NHWithAppId
OHFilterKernel�:PH<anonymous-tag>.?AU<anonymous-tag>@@QH�
�&V2���2SH<anonymous-tag>.?AT<anonymous-tag>@@TH�2
�&Intel
�&Amd��
�&Arm��2VH<anonymous-tag>.?AT<anonymous-tag>@@WH{2
"ReplyCount���
"NotifyeeCount2YH<anonymous-tag>.?AT<anonymous-tag>@@ZHR:
LoggerExtension��
#LoggerExtension642\H<anonymous-tag>.?AT<anonymous-tag>@@]H0�2
�LoggerName���
aLoggerName64�2_H<anonymous-tag>.?AT<anonymous-tag>@@`H0{2
�LogFileName��
aLogFileName642bH<anonymous-tag>.?AT<anonymous-tag>@@cH0u:
LoggerThreadId���
#LoggerThreadId64�2eH<anonymous-tag>.?AT<anonymous-tag>@@fH0q.
"LogBuffersLost���
"Flags2hH<anonymous-tag>.?AT<anonymous-tag>@@iH0k:
"EventsLost���
"NumberOfProcessors���2kH<anonymous-tag>.?AT<anonymous-tag>@@lH0f2
"FreeBuffers��
"InstanceId���2nH<anonymous-tag>.?AT<anonymous-tag>@@oH0b6
"NumberOfBuffers��
"InstanceCount2qH<anonymous-tag>.?AT<anonymous-tag>@@rH0^6
LogFileHandle
#LogFileHandle64��2tH<anonymous-tag>.?AT<anonymous-tag>@@uH0Z
#��
#��
#��
#��f
wHWow��
xHQpcDeltaTracking�
yHLargeMdlPages
zHExcludeKernelStack���:{H<anonymous-tag>.?AU<anonymous-tag>@@|H0N
#��
#��
#��
#��z
~HWow��
HQpcDeltaTracking�
�HLargeMdlPages
�HExcludeKernelStack���
#V2Options2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0M2
AgeLimit�
FlushThreshold���2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0IB
#PagedPoolPageCount���
#VirtualSizeInPages���2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0�2
"UniqueProcessId��
"SessionId2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0�
!��
!��
!��Z
�HActiveDataReference��
�HDeviceEjectable��
�HWritableHandles��:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0
"��
"��&
�HTypeInfo�
�HSpare:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0|
"��
"��6
�HTypeInfo�
�HSpare
"Flags2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0{
"��
"��&
�HDirection
�HSpare:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0i
"��
"��6
�HDirection
�HSpare
"Flags2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0hV
ProtoPteAddress��
#PageFrameIndex���
VirtualAddress���2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0�
#��
#0��
#4��F
�HUseDescription���
�HUniqueKey
�HReserved�:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0�
 ��
 ��
 ��
 ��Z
�HExecutingDpc�
�HExecutingIsr�
�HReserved�
�HPriority�:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0�
 ��
 ��
 ��
 ��j
�HExecutingDpc�
�HExecutingIsr�
�HReserved�
�HPriority�
 Flags2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0N
!Properties���
 ExpectedWakeReason���
 Reserved�:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0^
!Properties���
 ExpectedWakeReason���
 Reserved�
"Flags2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0B
#DeliveredIncrement���
#RequestedIncrement���:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0
b
#DeliveredIncrement���
#RequestedIncrement���
#NextClockUpdateTime��2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0

 ��
 ��
 ��
 ��j
�HExecutingDpc�
�HWakeupBoost��
�HBoostedOutstandingIrps���
�HReserved�:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0�	
 ��
 ��
 ��
 ��z
�HExecutingDpc�
�HWakeupBoost��
�HBoostedOutstandingIrps���
�HReserved�
 Flags2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0�	
p��
p��
p��
p��v
�HNewIoPriorityFloor���
�HOldIoPriority
�HNewIoQoSPriorityFloor
�HOldIoQoSPriority�:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0�	
p��
p��
p��
p��
�HNewIoPriorityFloor���
�HOldIoPriority
�HNewIoQoSPriorityFloor
�HOldIoQoSPriority�
pIoPriorities�2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0�	
 ��
 ��
 ��
 ��
 ��
�HExecutingDpc�
�HKernelStackNotResident���
�HProcessOutOfMemory���
�HDirectSwitchAttempt��
�HReserved�:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0�	
 ��
 ��
 ��
 ��
 ��
�HExecutingDpc�
�HKernelStackNotResident���
�HProcessOutOfMemory���
�HDirectSwitchAttempt��
�HReserved�
 Flags2�H<anonymous-tag>.?AT<anonymous-tag>@@�H0�	
 ��
 ��
 ��J
�HAcquireMode��
�HExecuteDpc���
�HExecuteIsr���:�H<anonymous-tag>.?AU<anonymous-tag>@@�H0Q	
 ��
 ��
 ��Z
�HAcquireMode��
�HExecuteDpc���
�HExecuteIsr���
 Flags2I<anonymous-tag>.?AT<anonymous-tag>@@I0P	
 ��
 ��
 ��
 ��r
IOldThreadWaitMode
IOldThreadBamQosLevel�
INewThreadBamQosLevel�
IReserved�:I<anonymous-tag>.?AU<anonymous-tag>@@I0/	
 ��
 ��
 ��
 ��

IOldThreadWaitMode
IOldThreadBamQosLevel�
INewThreadBamQosLevel�

IReserved�
 Flags2I<anonymous-tag>.?AT<anonymous-tag>@@I0.	>
pNewThreadPriorityDecrement���
pSpareByte2I<anonymous-tag>.?AT<anonymous-tag>@@I0)	6
 PreviousCState���
 OldThreadRank2I<anonymous-tag>.?AT<anonymous-tag>@@I0%	&
"Index
"InfoClass2I<anonymous-tag>.?AT<anonymous-tag>@@I0�.
#StartAddr64��
#Affinity�2I<anonymous-tag>.?AT<anonymous-tag>@@I0/*
StartAddr
#Affinity�2I<anonymous-tag>.?AT<anonymous-tag>@@I0*
Pointer0�
Pointer1�: I<anonymous-tag>.?AU<anonymous-tag>@@!I0n
�Padding1�
0#ReferenceTime
�GlobalEntry��
Pointer0�
Pointer1�2#I<anonymous-tag>.?AT<anonymous-tag>@@$I0
#��
#=��*
&IClockType
'IFrequency:(I<anonymous-tag>.?AU<anonymous-tag>@@)I0�
#��
#=��Z
+IClockType
,IFrequency
SlistEntry���
/#NextBuffer���2-I<anonymous-tag>.?AT<anonymous-tag>@@.I0�*
"Header���
�EPacket���20I<anonymous-tag>.?AT<anonymous-tag>@@1I0�:
!Size�
 Reserved�
 Version��:3I<anonymous-tag>.?AU<anonymous-tag>@@4I0�N
"Marker���
!Size�
 Reserved�
 Version��26I<anonymous-tag>.?AT<anonymous-tag>@@7I0�*
"Header���
@#Packet���29I<anonymous-tag>.?AT<anonymous-tag>@@:I0h>
!Version��
 HeaderType���
 Flags:<I<anonymous-tag>.?AU<anonymous-tag>@@=I0bR
"Marker���
!Version��
 HeaderType���
 Flags2?I<anonymous-tag>.?AT<anonymous-tag>@@@I0`*
#TS���
~SystemTime���2BI<anonymous-tag>.?AT<anonymous-tag>@@CI0T*
"Header���
@#Packet���2EI<anonymous-tag>.?AT<anonymous-tag>@@FI0P>
!Version��
 HeaderType���
 Flags:HI<anonymous-tag>.?AU<anonymous-tag>@@II0JR
"Marker���
!Version��
 HeaderType���
 Flags2KI<anonymous-tag>.?AT<anonymous-tag>@@LI0H.
"KernelTime���
"UserTime�:NI<anonymous-tag>.?AU<anonymous-tag>@@OI00*
"ClientContext
"Flags:QI<anonymous-tag>.?AU<anonymous-tag>@@RI0,n
"ClientContext
"Flags
"KernelTime���
"UserTime�
#ProcessorTime2TI<anonymous-tag>.?AT<anonymous-tag>@@UI0+&
�Guid�
#GuidPtr��2WI<anonymous-tag>.?AT<anonymous-tag>@@XI0'&
"Version��
gClass2ZI<anonymous-tag>.?AT<anonymous-tag>@@[I02
 HeaderType���
 MarkerFlags��:]I<anonymous-tag>.?AU<anonymous-tag>@@^I0N
!FieldTypeFlags���
 HeaderType���
 MarkerFlags��2`I<anonymous-tag>.?AT<anonymous-tag>@@aI0"
 Type�
 Group:cI<anonymous-tag>.?AU<anonymous-tag>@@dI06
!HookId���
 Type�
 Group2fI<anonymous-tag>.?AT<anonymous-tag>@@gI0.
"KernelTime���
"UserTime�:iI<anonymous-tag>.?AU<anonymous-tag>@@jI#�F
"KernelTime���
"UserTime�
#ProcessorTime2lI<anonymous-tag>.?AT<anonymous-tag>@@mI#�
!��
!��*
oILinkage��
pIReserved2:qI<anonymous-tag>.?AU<anonymous-tag>@@rI#K:
 Type�
 Reserved1
!Reserved2:tI<anonymous-tag>.?AU<anonymous-tag>@@uI�N
"Reserved�
 Type�
 Reserved1
!Reserved22wI<anonymous-tag>.?AT<anonymous-tag>@@xI�
�9Level1���2zIP<anonymous-tag>.?AT<anonymous-tag>@@{I�2MidlWinrtTypeSerializationInfoVersionOne�t}I<unnamed-enum-MidlWinrtTypeSerializationInfoVersionOne>.?AW4<unnamed-enum-MidlWinrtTypeSerializationInfoVersionOne>@@�~I��*MidlInterceptionInfoVersionOne���rt�I<unnamed-enum-MidlInterceptionInfoVersionOne>.?AW4<unnamed-enum-MidlInterceptionInfoVersionOne>@@��I��
�G
�IN
uDispatchTableCount���
�IDispatchTable
Reserved�B�IRPC_DISPATCH_TABLE.?AURPC_DISPATCH_TABLE@@���I��J�RPC_INTERFACE_TEMPLATEA.?AURPC_INTERFACE_TEMPLATEA@@�
"Version��
IfSpec���
1MgrTypeUuid��
MgrEpv���
u Flags
u$MaxCalls�
u(MaxRpcSize���
10IfCallback���
18UuidVector���
 @Annotation���
HSecurityDescriptor���J�IPRPC_INTERFACE_TEMPLATEA.?AURPC_INTERFACE_TEMPLATEA@@�IpJ�RPC_ENDPOINT_TEMPLATEA.?AURPC_ENDPOINT_TEMPLATEA@@��r
"Version��
 ProtSeq��
 Endpoint�
SecurityDescriptor���
" Backlog��J�I(RPC_ENDPOINT_TEMPLATEA.?AURPC_ENDPOINT_TEMPLATEA@@���ISJ�RPC_ENDPOINT_TEMPLATEW.?AURPC_ENDPOINT_TEMPLATEW@@��r
"Version��
qProtSeq��
qEndpoint�
SecurityDescriptor���
" Backlog��J�I(RPC_ENDPOINT_TEMPLATEW.?AURPC_ENDPOINT_TEMPLATEW@@���IJ
J.HttpCredentials��2�I<anonymous-tag>.?AT<anonymous-tag>@@�I>�MOFRESOURCEINFOW.?AUMOFRESOURCEINFOW@@��b
qImagePath
qResourceName�
"ResourceSize�
 ResourceBuffer���>�I MOFRESOURCEINFOW.?AUMOFRESOURCEINFOW@@���I�24:
�<EventCallback
�<EventRecordCallback��2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��6
"LogFileMode��
"ProcessTraceMode�2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��:
�<EventCallback
�<EventRecordCallback��2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��6
"LogFileMode��
"ProcessTraceMode�2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�p2
"ClientContext
BufferContext2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�"2
 ProcessorNumber��
 Alignment:�I<anonymous-tag>.?AU<anonymous-tag>@@�I��N
 ProcessorNumber��
 Alignment
!ProcessorIndex���2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��
"��
"��
"��
"��f
�IWow��
�IQpcDeltaTracking�
�ILargeMdlPages
�IExcludeKernelStack���:�I<anonymous-tag>.?AU<anonymous-tag>@@�I��
"��
"��
"��
"��z
�IWow��
�IQpcDeltaTracking�
�ILargeMdlPages
�IExcludeKernelStack���
#V2Options2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��
"��
�IVersionNumber:�I<anonymous-tag>.?AU<anonymous-tag>@@�I��
"��.
�IVersionNumber
"V2Control2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��2
AgeLimit�
FlushThreshold���2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��2
AgeLimit�
FlushThreshold���2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�ib
"StartBuffers�
"PointerSize��
"EventsLost���
"CpuSpeedInMHz:�I<anonymous-tag>.?AU<anonymous-tag>@@�I�#~
�LogInstanceGuid��
"StartBuffers�
"PointerSize��
"EventsLost���
"CpuSpeedInMHz2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�!.
"Version��
ZVersionDetail2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�b
"StartBuffers�
"PointerSize��
"EventsLost���
"CpuSpeedInMHz:�I<anonymous-tag>.?AU<anonymous-tag>@@�I��~
�LogInstanceGuid��
"StartBuffers�
"PointerSize��
"EventsLost���
"CpuSpeedInMHz2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��.
"Version��
�&VersionDetail2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��b
"StartBuffers�
"PointerSize��
"EventsLost���
"CpuSpeedInMHz:�I<anonymous-tag>.?AU<anonymous-tag>@@�I��~
�LogInstanceGuid��
"StartBuffers�
"PointerSize��
"EventsLost���
"CpuSpeedInMHz2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��.
"Version��
�9VersionDetail2�I<anonymous-tag>.?AT<anonymous-tag>@@�I��&
"EventId��
"Flags:�I<anonymous-tag>.?AU<anonymous-tag>@@�I�e.
"KernelTime���
"UserTime�:�I<anonymous-tag>.?AU<anonymous-tag>@@�I�`j
"KernelTime���
"UserTime�
#ProcessorTime
"EventId��
"Flags2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�_&
"Version��
+;Class2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�Q2
 HeaderType���
 MarkerFlags��:�I<anonymous-tag>.?AU<anonymous-tag>@@�I�LN
!FieldTypeFlags���
 HeaderType���
 MarkerFlags��2�I<anonymous-tag>.?AT<anonymous-tag>@@�I�J*
"ClientContext
"Flags:�I<anonymous-tag>.?AU<anonymous-tag>@@�I�>.
"KernelTime���
"UserTime�:�I<anonymous-tag>.?AU<anonymous-tag>@@�I�9n
"KernelTime���
"UserTime�
#ProcessorTime
"ClientContext
"Flags2�I<anonymous-tag>.?AT<anonymous-tag>@@J�8&
�Guid�
#GuidPtr��2J<anonymous-tag>.?AT<anonymous-tag>@@J�4&
"Version��
�Class2J<anonymous-tag>.?AT<anonymous-tag>@@J�)2
 HeaderType���
 MarkerFlags��:J<anonymous-tag>.?AU<anonymous-tag>@@	J�$N
!FieldTypeFlags���
 HeaderType���
 MarkerFlags��2J<anonymous-tag>.?AT<anonymous-tag>@@J�"2�WMIREGINFOW.?AUWMIREGINFOW@@3#�
"BufferSize���
"NextWmiRegInfo���
"RegistryPath�
"MofResourceName��
"GuidCount
JWmiRegGuid���2JWMIREGINFOW.?AUWMIREGINFOW@@Jtyb
"InstanceNameList�
"BaseNameOffset���
#Pdo��
#InstanceInfo�2J<anonymous-tag>.?AT<anonymous-tag>@@Jt1q#�B
"TargetInstanceIndex��
JTargetInstanceName���2J<anonymous-tag>.?AT<anonymous-tag>@@JtF
"FixedInstanceSize
�OffsetInstanceDataAndLength��2J<anonymous-tag>.?AT<anonymous-tag>@@Jt�B
"CountLost
KernelHandle�
~TimeStamp2J<anonymous-tag>.?AT<anonymous-tag>@@Jt-*
"Version��
"Linkage��: J<anonymous-tag>.?AU<anonymous-tag>@@!Jt&F
#HistoricalContext
"Version��
"Linkage��2#J<anonymous-tag>.?AT<anonymous-tag>@@$Jt#
�#Data�Z&JSERVICE_TRIGGER_CUSTOM_STATE_ID.?AUSERVICE_TRIGGER_CUSTOM_STATE_ID@@'Jm�6
�'mouse
�'keyboard�
Xhid��2)J<anonymous-tag>.?AT<anonymous-tag>@@*JL2;2
!usButtonFlags
!usButtonData�:,J<anonymous-tag>.?AU<anonymous-tag>@@-JLD:F
"ulButtons
!usButtonFlags
!usButtonData�2/J<anonymous-tag>.?AT<anonymous-tag>@@0JLB:
@_11��
@_12��
@_13��
@_14��
@_21��
@_22��
@_23��
@_24��
@ _31��
@$_32��
@(_33��
@,_34��
@0_41��
@4_42��
@8_43��
@<_44��:
2J@<anonymous-tag>.?AU<anonymous-tag>@@3JL�
@_11��
@_12��
@_13��
@_14��
@_21��
@_22��
@_23��
@_24��
@ _31��
@$_32��
@(_33��
@,_34��
@0_41��
@4_42��
@8_43��
@<_44��
<m25J@<anonymous-tag>.?AT<anonymous-tag>@@6JL�*
#touchInfo
$penInfo��28J�<anonymous-tag>.?AT<anonymous-tag>@@9JLJ2
�mi���
�ki���
�hi���2;J <anonymous-tag>.?AT<anonymous-tag>@@<JL�J�POWERBROADCAST_SETTING.?AUPOWERBROADCAST_SETTING@@��B
�PowerSetting�
"DataLength���
�Data�J?JPOWERBROADCAST_SETTING.?AUPOWERBROADCAST_SETTING@@��@JL/	6�SHELLHOOKINFO.?AUSHELLHOOKINFO@@"
�hwnd�
�rc���6CJSHELLHOOKINFO.?AUSHELLHOOKINFO@@DJL
u��
u��6
FJenableAdvancedColor��
GJreserved�:HJ<anonymous-tag>.?AU<anonymous-tag>@@IJSo
u��
u��F
KJenableAdvancedColor��
LJreserved�
uvalue2MJ<anonymous-tag>.?AT<anonymous-tag>@@NJSm
u��
u��
u��
u��
u��
PJadvancedColorSupported���
QJadvancedColorEnabled�
RJwideColorEnforced
SJadvancedColorForceDisabled���
TJreserved�:UJ<anonymous-tag>.?AU<anonymous-tag>@@VJSZ
u��
u��
u��
u��
u��
XJadvancedColorSupported���
YJadvancedColorEnabled�
ZJwideColorEnforced
[JadvancedColorForceDisabled���
\Jreserved�
uvalue2]J<anonymous-tag>.?AT<anonymous-tag>@@^JSX
u��
u��B
`JdisableMonitorVirtualResolution��
aJreserved�:bJ<anonymous-tag>.?AU<anonymous-tag>@@cJSB
u��
u��R
eJdisableMonitorVirtualResolution��
fJreserved�
uvalue2gJ<anonymous-tag>.?AT<anonymous-tag>@@hJS@
u��
u��2
jJbootPersistenceOn
kJreserved�:lJ<anonymous-tag>.?AU<anonymous-tag>@@mJS4
u��
u��B
oJbootPersistenceOn
pJreserved�
uvalue2qJ<anonymous-tag>.?AT<anonymous-tag>@@rJS2
u��
u��
u��
u��n
tJfriendlyNameFromEdid�
uJfriendlyNameForced���
vJedidIdsValid�
wJreserved�:xJ<anonymous-tag>.?AU<anonymous-tag>@@yJS
u��
u��
u��
u��~
{JfriendlyNameFromEdid�
|JfriendlyNameForced���
}JedidIdsValid�
~Jreserved�
uvalue2J<anonymous-tag>.?AT<anonymous-tag>@@�JS
u��
u��>
�JdesktopModeInfoIdx���
�JtargetModeInfoIdx:�J<anonymous-tag>.?AU<anonymous-tag>@@�JS�
u��
u��V
umodeInfoIdx��
�JdesktopModeInfoIdx���
�JtargetModeInfoIdx2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS�
u��
u��6
�JcloneGroupId�
�JsourceModeInfoIdx:�J<anonymous-tag>.?AU<anonymous-tag>@@�JS�
u��
u��N
umodeInfoIdx��
�JcloneGroupId�
�JsourceModeInfoIdx2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS�N
�/targetMode���
�@sourceMode���
�@desktopImageInfo�2�J0<anonymous-tag>.?AT<anonymous-tag>@@�JSu:
FAdditionalSignalInfo�
uvideoStandard2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS#.
"dmDisplayFlags���
"dmNup2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS�Z
�dmPosition���
"dmDisplayOrientation�
"dmDisplayFixedOutput�:�J<anonymous-tag>.?AU<anonymous-tag>@@�JS��
dmOrientation
dmPaperSize��
dmPaperLength
dmPaperWidth�
dmScale��

dmCopies�
dmDefaultSource��
dmPrintQuality���:�J<anonymous-tag>.?AU<anonymous-tag>@@�JS�
dmOrientation
dmPaperSize��
dmPaperLength
dmPaperWidth�
dmScale��

dmCopies�
dmDefaultSource��
dmPrintQuality���
�dmPosition���
"dmDisplayOrientation�
"dmDisplayFixedOutput�2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS�.
"dmDisplayFlags���
"dmNup2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS�Z
�dmPosition���
"dmDisplayOrientation�
"dmDisplayFixedOutput�:�J<anonymous-tag>.?AU<anonymous-tag>@@�JS��
dmOrientation
dmPaperSize��
dmPaperLength
dmPaperWidth�
dmScale��

dmCopies�
dmDefaultSource��
dmPrintQuality���:�J<anonymous-tag>.?AU<anonymous-tag>@@�JS�
dmOrientation
dmPaperSize��
dmPaperLength
dmPaperWidth�
dmScale��

dmCopies�
dmDefaultSource��
dmPrintQuality���
�dmPosition���
"dmDisplayOrientation�
"dmDisplayFixedOutput�2�J<anonymous-tag>.?AT<anonymous-tag>@@�JS�F
~FileId���
�ObjectId�
.ExtendedFileId���2�J<anonymous-tag>.?AT<anonymous-tag>@@�J<�#.
 ReplaceIfExists��
"Flags2�J<anonymous-tag>.?AT<anonymous-tag>@@�J<�"
"��
"��>
�JIsUmsSchedulerThread�
�JIsUmsWorkerThread:�J<anonymous-tag>.?AU<anonymous-tag>@@�J<N
"��
"��Z
�JIsUmsSchedulerThread�
�JIsUmsWorkerThread
"ThreadUmsFlags���2�J<anonymous-tag>.?AT<anonymous-tag>@@�J<M
"��
"��
"��
"��
"��
"��
"��
�JPrivate��
�JMappedDataFile���
�JMappedImage��
�JMappedPageFile���
�JMappedPhysical���
�JDirectMapped�
�JReserved�:�J<anonymous-tag>.?AU<anonymous-tag>@@�JQ�
"��
"��
"��
"��
"��
"��
"��
"Flags
�JPrivate��
�JMappedDataFile���
�JMappedImage��
�JMappedPageFile���
�JMappedPhysical���
�JDirectMapped�
�JReserved�2�J<anonymous-tag>.?AT<anonymous-tag>@@�JQ�:
!wProcessorArchitecture���
!wReserved:�J<anonymous-tag>.?AU<anonymous-tag>@@�J� 2N
"dwOemId��
!wProcessorArchitecture���
!wReserved2�J<anonymous-tag>.?AT<anonymous-tag>@@�J� 0&
�0Block
�0Region���2�J<anonymous-tag>.?AT<anonymous-tag>@@�J��.
"Offset���
"OffsetHigh���:�J<anonymous-tag>.?AU<anonymous-tag>@@�J�8B
"Offset���
"OffsetHigh���
Pointer��2�J<anonymous-tag>.?AT<anonymous-tag>@@�J�7�
P8MemoryAllocData��
S8MemoryFreeData���
V8MemoryProtectData
Y8InstructionCacheFlushData
\8MemoryDirtyData��2�J <anonymous-tag>.?AT<anonymous-tag>@@�J��
"��
"��>
�JFirst
�JHeavyFlush���
"Sequence�:�J<anonymous-tag>.?AU<anonymous-tag>@@�J��
"��
"��N
�JFirst
�JHeavyFlush���
"Sequence�
Value2�J<anonymous-tag>.?AT<anonymous-tag>@@�J��Z�RTLWOW64_CROSSPROCESS_WORK_HEAD.?AURTLWOW64_CROSSPROCESS_WORK_HEAD@@
"��
"��N
�JFirst
�JHeavyFlush���
"Sequence�
ValueZ�JRTLWOW64_CROSSPROCESS_WORK_HEAD.?AURTLWOW64_CROSSPROCESS_WORK_HEAD@@�J��&
"Flags
"dwFlags��2�J<anonymous-tag>.?AT<anonymous-tag>@@�J��2
�ActivationContext
hActCtx��2�J<anonymous-tag>.?AT<anonymous-tag>@@�J��&
"Flags
�&NextFree�2K<anonymous-tag>.?AT<anonymous-tag>@@K��	*
"Modules��
"ModulesEx2K<anonymous-tag>.?AT<anonymous-tag>@@K�	*
T9Modules��
U9ModulesEx2K<anonymous-tag>.?AT<anonymous-tag>@@K��B
##ProcessHeapInformation���
|4HeapInformation��2	K0<anonymous-tag>.?AT<anonymous-tag>@@
K�`�
##ProcessHeapInformation���
|4HeapInformation��
HeapRegionInformation
�$HeapRangeInformation�
#;HeapBlockInformation�
�6HeapPerfInformation��
#DynamicStart�2K�<anonymous-tag>.?AT<anonymous-tag>@@
K�Bb
"CommittedSize
"UnCommittedSize��
FirstEntry���
LastEntry:K<anonymous-tag>.?AU<anonymous-tag>@@K��b
#Settable�
!TagIndex�
!
AllocatorBackTraceIndex��
�Reserved�:K<anonymous-tag>.?AU<anonymous-tag>@@K��&
KBlock
KSegment��2K<anonymous-tag>.?AT<anonymous-tag>@@K��
#��
#��*
KWakeCount
KWaking���:K<anonymous-tag>.?AU<anonymous-tag>@@K�E
#��
#��J
KWakeCount
KWaking���
#Value
Ptr��2K<anonymous-tag>.?AT<anonymous-tag>@@ K�C
#��
#��
#��
#��
#<��n
"KLocked���
#KWaiting��
$KWaking���
%KMultipleShared���
&KShared���:'K<anonymous-tag>.?AU<anonymous-tag>@@(K��
#��
#��
#��
#��
#<��
*KLocked���
+KWaiting��
,KWaking���
-KMultipleShared���
.KShared���
#Value
Ptr��2/K<anonymous-tag>.?AT<anonymous-tag>@@0K��v
Context��
$/ContextX86���
&/ContextAmd64�
(/ContextArm���
*/ContextArm64�22K<anonymous-tag>.?AT<anonymous-tag>@@3K�T
"��
"��.
5KCurrentThread
6KReserved1:7K<anonymous-tag>.?AU<anonymous-tag>@@8K�
"��
"��>
"Flags
:KCurrentThread
;KReserved12<K<anonymous-tag>.?AT<anonymous-tag>@@=K�
#��
#?��"
?KBusy�
@KTicks:AK<anonymous-tag>.?AU<anonymous-tag>@@BK��
 ��&
DKEncoded��
tMin��2EK<anonymous-tag>.?AT<anonymous-tag>@@FKx.*
#Lock�
LRangeBitmap��:HK<anonymous-tag>.?AU<anonymous-tag>@@IK��:
#Lock�
LRangeBitmap��
Next�2KK<anonymous-tag>.?AT<anonymous-tag>@@LK��
#��
#��
#��
#<��r
NKPolicyState��
OKAlwaysInherit
PKEnableAdditionalPolicyOption�
QKAuditReserved:RK<anonymous-tag>.?AU<anonymous-tag>@@SK��
#��
#��
#��
#<��n
UKAuditState���
VKAuditFlag
WKEnableAdditionalAuditingOption���
XKReserved�:YK<anonymous-tag>.?AU<anonymous-tag>@@ZK��6
�ControlData��
�DatabaseCreate���2\K<anonymous-tag>.?AT<anonymous-tag>@@]K��2
mFunctionTable
�DynamicTable�2_K<anonymous-tag>.?AT<anonymous-tag>@@`K��
None�
 BoolValue
pInt8Value
 UInt8Value���
Int16Value���
!UInt16Value��
tInt32Value���
uUInt32Value��
Int64Value���
#UInt64Value��
(AnsiStringValue��
[UnicodeStringValue���2bK<anonymous-tag>.?AT<anonymous-tag>@@cK$p&
V��
V>��:
eKKernelUpdateLock�
fKPrimaryClientID��:gK<anonymous-tag>.?AU<anonymous-tag>@@hK$�!
V��
V>��R
jKKernelUpdateLock�
kKPrimaryClientID��
VContextLock��2lK<anonymous-tag>.?AT<anonymous-tag>@@mK$�!
L��
L��
L��
L��
L��
L��
L���
oKScheduledThread��
pKSuspended
qKVolatileContext��
rKTerminated���
sKDebugActive��
tKRunningOnSelfThread��
uKDenyRunningOnSelfThread��:vK<anonymous-tag>.?AU<anonymous-tag>@@wK$�!
L��
L��
L��
L��
L��
L��
L���
yKScheduledThread��
zKSuspended
{KVolatileContext��
|KTerminated���
}KDebugActive��
~KRunningOnSelfThread��
KDenyRunningOnSelfThread��
Flags2�K<anonymous-tag>.?AT<anonymous-tag>@@�K$�!*
/HashEntry
CurEntry�2�K<anonymous-tag>.?AT<anonymous-tag>@@�K$3	
"��
"��
"��
"��z
�KElevationEnabled�
�KVirtualizationEnabled
�KInstallerDetectEnabled���
�KReservedBits�:�K<anonymous-tag>.?AU<anonymous-tag>@@�K$n
Barrier��
LeftBarrier��
�WaitEvent
TotalProcessors��
"Spins:�K <anonymous-tag>.?AU<anonymous-tag>@@�K$Y�
Barrier��
LeftBarrier��
�WaitEvent
TotalProcessors��
"Spins
�DUMMYRESERVEDSTRUCTNAME��2�K <anonymous-tag>.?AT<anonymous-tag>@@�K$X
#��
�KState:�K<anonymous-tag>.?AU<anonymous-tag>@@�K$
#��
#0��
#��
#<��N
�KDepth
�KSequence�
�KReserved�
�KNextEntry:�K<anonymous-tag>.?AU<anonymous-tag>@@�K$g*
#Alignment
#Region���:�K<anonymous-tag>.?AU<anonymous-tag>@@�K$c
"��
"��
"��
"��
"��
"��
"��
"��
!McaErrorCode�
!ModelErrorCode���
�KOtherInformation�
�KContextCorrupt���
�KAddressValid�
�KMiscValid
�KErrorEnabled�
�KUncorrectedError�
�KStatusOverFlow���
�KValid:
�K<anonymous-tag>.?AU<anonymous-tag>@@�KR*
"Address��
"Reserved�:�K<anonymous-tag>.?AU<anonymous-tag>@@�K0
�6��K�K
�K*
1Raw��
4Translated���2�K<anonymous-tag>.?AT<anonymous-tag>@@�K��v
#ULong64��
Pointer��
#Size�
Handle���
"ULong
"AccessMask���2�K<anonymous-tag>.?AT<anonymous-tag>@@�Kz
#��
#8��&
�KType�
�KReserved�:�K<anonymous-tag>.?AU<anonymous-tag>@@�Kz
"��
"��*
�KCommitEvents�
�KSpare:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�
 ��
 ��
 ��N
�KComPlus��
�KImageDynamicallyRelocated
�KReserved�:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�
 ��
 ��
 ��f
 ImageFlags���
�KComPlus��
�KImageDynamicallyRelocated
�KReserved�2�K<anonymous-tag>.?AT<anonymous-tag>@@�KB�R
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�v
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��
"OperatingSystemVersion���2�K<anonymous-tag>.?AT<anonymous-tag>@@�KB�B
!SubSystemMinorVersion
!SubSystemMajorVersion:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�^
!SubSystemMinorVersion
!SubSystemMajorVersion
"SubSystemVersion�2�K<anonymous-tag>.?AT<anonymous-tag>@@�KB�
 ��
 ��
 ��N
�KComPlus��
�KImageDynamicallyRelocated
�KReserved�:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�
 ��
 ��
 ��f
 ImageFlags���
�KComPlus��
�KImageDynamicallyRelocated
�KReserved�2�K<anonymous-tag>.?AT<anonymous-tag>@@�KB�R
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�v
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��
"OperatingSystemVersion���2�K<anonymous-tag>.?AT<anonymous-tag>@@�KB�B
!SubSystemMinorVersion
!SubSystemMajorVersion:�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�^
!SubSystemMinorVersion
!SubSystemMajorVersion
"SubSystemVersion�2�K<anonymous-tag>.?AT<anonymous-tag>@@�KB�
"��
"��
"��
"��
"��
"��
"��
"��
"��Z
�KImageExportSuppressionEnabled
�KImageCetShadowStacksReady
�KImageXfgEnabled��
�KImageCetShadowStacksStrictMode���
�KImageCetSetContextIpValidationRelaxedMode
�KImageCetDynamicApisAllowInProc���
�KImageCetDowngradeReserved1���
�KImageCetDowngradeReserved2���
�KReserved�:	�K<anonymous-tag>.?AU<anonymous-tag>@@�KB�
"��
"��
"��
"��
"��
"��
"��
"��
"��r
"ExtendedFlags
�KImageExportSuppressionEnabled
LImageCetShadowStacksReady
LImageXfgEnabled��
LImageCetShadowStacksStrictMode���
LImageCetSetContextIpValidationRelaxedMode
LImageCetDynamicApisAllowInProc���
LImageCetDowngradeReserved1���
LImageCetDowngradeReserved2���
LReserved�2
L<anonymous-tag>.?AT<anonymous-tag>@@	LB�
 ��
 ��
 ��
 ��
 ��
 ��
 ���
LComPlusNativeReady���
LComPlusILOnly

LImageDynamicallyRelocated
LImageMappedFlat��
LBaseBelow4gb�
LComPlusPrefer32bit���
LReserved�:L<anonymous-tag>.?AU<anonymous-tag>@@LB�
 ��
 ��
 ��
 ��
 ��
 ��
 ���
 ImageFlags���
LComPlusNativeReady���
LComPlusILOnly
LImageDynamicallyRelocated
LImageMappedFlat��
LBaseBelow4gb�
LComPlusPrefer32bit���
LReserved�2L<anonymous-tag>.?AT<anonymous-tag>@@LB�R
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��:L<anonymous-tag>.?AU<anonymous-tag>@@ LB�v
!MajorOperatingSystemVersion��
!MinorOperatingSystemVersion��
"OperatingSystemVersion���2"L<anonymous-tag>.?AT<anonymous-tag>@@#LB�B
!SubSystemMinorVersion
!SubSystemMajorVersion:%L<anonymous-tag>.?AU<anonymous-tag>@@&LB~^
!SubSystemMinorVersion
!SubSystemMajorVersion
"SubSystemVersion�2(L<anonymous-tag>.?AT<anonymous-tag>@@)LB}
"��
"��&
+LState
,LReserved�:-L<anonymous-tag>.?AU<anonymous-tag>@@.LB�
"��
"��B
0LState
1LReserved�
"AllInformation���22L<anonymous-tag>.?AT<anonymous-tag>@@3LB�
"��
"��
"��
"��n
5LImagePartialMap��
6LImageNotExecutable���
7LImageSigningLevel
8LReserved�:9L<anonymous-tag>.?AU<anonymous-tag>@@:LB�
"��
"��
"��
"��
"ImageFlags���
<LImagePartialMap��
=LImageNotExecutable���
>LImageSigningLevel
?LReserved�2@L<anonymous-tag>.?AT<anonymous-tag>@@ALB�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
CLPrivate��
DLMappedDataFile���
ELMappedImage��
FLMappedPageFile���
GLMappedPhysical���
HLDirectMapped�
ILSoftwareEnclave��
JLPageSize64K��
KLPlaceholderReservation���
LLReserved�:
ML<anonymous-tag>.?AU<anonymous-tag>@@NLB�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"RegionType���
PLPrivate��
QLMappedDataFile���
RLMappedImage��
SLMappedPageFile���
TLMappedPhysical���
ULDirectMapped�
VLSoftwareEnclave��
WLPageSize64K��
XLPlaceholderReservation���
YLReserved�2ZL<anonymous-tag>.?AT<anonymous-tag>@@[LB�
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
# ��
#$��"
]LValid
^LShareCount���
_LWin32Protection��
`LShared���
aLNode�
bLLocked���
cLLargePage
dLPriority�
eLReserved�
fLSharedOriginal���
gLBad��
hLWin32GraphicsProtection��
iLReservedUlong:
jL<anonymous-tag>.?AU<anonymous-tag>@@kLBL
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
#��
# ��
#$��6
mLValid
nLShareCount���
oLWin32Protection��
pLShared���
qLNode�
rLLocked���
sLLargePage
tLPriority�
uLReserved�
vLSharedOriginal���
wLBad��
xLWin32GraphicsProtection��
yLReservedUlong
�)Invalid��2zL<anonymous-tag>.?AT<anonymous-tag>@@{LBK.
ImageHandle��
#Unused���2}L<anonymous-tag>.?AT<anonymous-tag>@@~Ly�6
SignatureInfoHandle��
#Unused���2�L<anonymous-tag>.?AT<anonymous-tag>@@�Ly�^
#ULong64��
Pointer��
#Size�
Handle���
"ULong2�L<anonymous-tag>.?AT<anonymous-tag>@@�Ly�
#��
#8��&
�LType�
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�Ly�
"��
"��2
�LHypervisorPages��
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�L�f
"��
"��
"��
"��
"��
�LUseDumpStorageStack��
�LCompressMemoryPagesData��
�LIncludeUserSpaceMemoryPages��
�LAbortIfMemoryPressure
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�L�>
"��
"��*
�LEnabled��
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�L�
"��
"��>
�LEnabled��
�LReserved�
"AsULONG��2�L<anonymous-tag>.?AT<anonymous-tag>@@�L�
 PebsDsSaveArea���2�L�<anonymous-tag>.?AT<anonymous-tag>@@�L��*
As32Bit��
� As64Bit��2�L�<anonymous-tag>.?AT<anonymous-tag>@@�L��
"��
"��2
�LKernelTransition�
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�L��

"��
"��B
�LKernelTransition�
�LReserved�
"ul���2�L<anonymous-tag>.?AT<anonymous-tag>@@�L��

"��
"��
"��F
�LSameRsdt�
�LSlicPresent��
�LSlicDifferent:�L<anonymous-tag>.?AU<anonymous-tag>@@�L��

"��
"��
"��
"��Z
�LLocked���
�LUnlockApplied
�LUnlockIdValid
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�L��

"��
"��
"��
"��j
"Flags
�LLocked���
�LUnlockApplied
�LUnlockIdValid
�LReserved�2�L<anonymous-tag>.?AT<anonymous-tag>@@�L��

"��
"��
"��
"��
"	��
"��
�LCetCapable���
�LUserCetAllowed���
�LReservedForUserCet���
�LKernelCetEnabled�
�LReservedForKernelCet�
�LReserved�:�L<anonymous-tag>.?AU<anonymous-tag>@@�L�,

"��
"��
"��
"��
"	��
"��
"Flags
�LCetCapable���
�LUserCetAllowed���
�LReservedForUserCet���
�LKernelCetEnabled�
�LReservedForKernelCet�
�LReserved�2�L<anonymous-tag>.?AT<anonymous-tag>@@�L�*

#��
#��
#��
#��
#��
#��
#��
#��
�LDbgMenuOsSelection���
�LDbgHiberBoot�
�LDbgSoftBoot��
�LDbgMeasuredLaunch
�LDbgMeasuredLaunchCapable�
�LDbgSystemHiveReplace�
�LDbgMeasuredLaunchSmmProtections��
�LDbgMeasuredLaunchSmmLevel:�L<anonymous-tag>.?AU<anonymous-tag>@@�L�
#��
#��
#��
#��
#��
#��
#��
#��
#BootFlags
�LDbgMenuOsSelection���
�LDbgHiberBoot�
�LDbgSoftBoot��
�LDbgMeasuredLaunch
�LDbgMeasuredLaunchCapable�
�LDbgSystemHiveReplace�
�LDbgMeasuredLaunchSmmProtections��
�LDbgMeasuredLaunchSmmLevel2	�L<anonymous-tag>.?AT<anonymous-tag>@@�L�
&
�Tag��
"TagUlong�2�L<anonymous-tag>.?AT<anonymous-tag>@@�L��

#��2
VirtualAddress���
�LNonPaged�2�L<anonymous-tag>.?AT<anonymous-tag>@@�L��
&
�Tag��
"TagUlong�2�L<anonymous-tag>.?AT<anonymous-tag>@@�L�v
F
�Tag��
"TagUlong�
ProcessChargedQuota��2�L<anonymous-tag>.?AT<anonymous-tag>@@�L�d
B
#PagedPoolPageCount���
#VirtualSizeInPages���2�L<anonymous-tag>.?AT<anonymous-tag>@@�L��2
"UniqueProcessId��
"SessionId2�L<anonymous-tag>.?AT<anonymous-tag>@@�L��
"��
"��
"��
"��n
MHasStrongId��
MClassification���
MBackgroundActivityModerated��
MSpare:M<anonymous-tag>.?AU<anonymous-tag>@@M�/
"��
"��
"��
"��~
"Flags
MHasStrongId��
	MClassification���

MBackgroundActivityModerated��
MSpare2M<anonymous-tag>.?AT<anonymous-tag>@@
M�-V
y5ActiveProcessorsGroupAffinity
z5AvailableMemory��
{5Pad��2M<anonymous-tag>.?AT<anonymous-tag>@@M�=
"��
"��
"��
"��
"��
"��
MSet��
MUpdate���
MClear
MDscpTagEnabled���
MMaxBandwidthEnabled��
MReserved�:M<anonymous-tag>.?AU<anonymous-tag>@@M|�
"��
"��
"��
"��
"��
"��
"Flags
MSet��
MUpdate���
MClear
MDscpTagEnabled���
MMaxBandwidthEnabled��
 MReserved�2!M<anonymous-tag>.?AT<anonymous-tag>@@"M|�2
6QpcBypassEnabled�
 QpcShift�:$M<anonymous-tag>.?AU<anonymous-tag>@@%M|�F
!QpcData��
6QpcBypassEnabled�
 QpcShift�2'M<anonymous-tag>.?AT<anonymous-tag>@@(M|�>
�ReservedTickCountOverlay�
�TickCountPad�:*M<anonymous-tag>.?AU<anonymous-tag>@@+M|^j
sTickCount
VTickCountQuad
�ReservedTickCountOverlay�
�TickCountPad�2-M<anonymous-tag>.?AT<anonymous-tag>@@.M|[
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��~
0MDbgErrorPortPresent��
1MDbgElevationEnabled��
2MDbgVirtEnabled���
3MDbgInstallerDetectEnabled
4MDbgLkgEnabled
5MDbgDynProcessorEnabled���
6MDbgConsoleBrokerEnabled��
7MDbgSecureBootEnabled�
8MDbgMultiSessionSku���
9MDbgMultiUsersInSessionSku
:MDbgStateSeparationEnabled
;MSpareBits:<M<anonymous-tag>.?AU<anonymous-tag>@@=M|"
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"SharedDataFlags��
?MDbgErrorPortPresent��
@MDbgElevationEnabled��
AMDbgVirtEnabled���
BMDbgInstallerDetectEnabled
CMDbgLkgEnabled
DMDbgDynProcessorEnabled���
EMDbgConsoleBrokerEnabled��
FMDbgSecureBootEnabled�
GMDbgMultiSessionSku���
HMDbgMultiUsersInSessionSku
IMDbgStateSeparationEnabled
JMSpareBits2
KM<anonymous-tag>.?AT<anonymous-tag>@@LM| 
 ��
 ��
 ��
 ��z
NMNXSupportPolicy��
OMSEHValidationPolicy��
PMCurDirDevicesSkippedForDlls��
QMReserved�:RM<anonymous-tag>.?AU<anonymous-tag>@@SM|�
 ��
 ��
 ��
 ��
 MitigationPolicies���
UMNXSupportPolicy��
VMSEHValidationPolicy��
WMCurDirDevicesSkippedForDlls��
XMReserved�2YM<anonymous-tag>.?AT<anonymous-tag>@@ZM|�
"��
"��6
\MOptimizedSave
]MCompactionEnabled:^M<anonymous-tag>.?AU<anonymous-tag>@@_M|r
"��
"��N
"ControlFlags�
aMOptimizedSave
bMCompactionEnabled2cM<anonymous-tag>.?AT<anonymous-tag>@@dM|o2
"Reserved�
 SchedulingClass��2fM<anonymous-tag>.?AT<anonymous-tag>@@gM|q
 ��
 ��
 ��
 ��
 ��z
iMParked���
jMAllocated
kMAllocatedToTargetProcess�
lMRealTime�
mMReservedFlags:nM<anonymous-tag>.?AU<anonymous-tag>@@oM|h
 ��
 ��
 ��
 ��
 ��
 AllFlags�
qMParked���
rMAllocated
sMAllocatedToTargetProcess�
tMRealTime�
uMReservedFlags2vM<anonymous-tag>.?AT<anonymous-tag>@@wM|`
�(CpuSet���2yM<anonymous-tag>.?AT<anonymous-tag>@@zM|WJ
Processor
NumaNode�
�Cache
Group2|MH<anonymous-tag>.?AT<anonymous-tag>@@}M|FR
�AProcessorCore
�ANumaNode�
E2Cache
�Reserved�2M<anonymous-tag>.?AT<anonymous-tag>@@�M|B
#DeviceDescriptionOffset��
#DevicePathOffset�:�M<anonymous-tag>.?AU<anonymous-tag>@@�MF�R
#ProcessImageNameOffset���
"ProcessId
"ServiceTag���:�M<anonymous-tag>.?AU<anonymous-tag>@@�MF��
#ProcessImageNameOffset���
"ProcessId
"ServiceTag���
#DeviceDescriptionOffset��
#DevicePathOffset�2�M<anonymous-tag>.?AT<anonymous-tag>@@�MF�~
#ResourceFileNameOffset���
!ResourceReasonId�
"StringCount��
#SubstitutionStringsOffset:�M<anonymous-tag>.?AU<anonymous-tag>@@�MF��
#ResourceFileNameOffset���
!ResourceReasonId�
"StringCount��
#SubstitutionStringsOffset
#SimpleStringOffset���2�M<anonymous-tag>.?AT<anonymous-tag>@@�MF�
 ��
 ��
 ��
 ��n
�MNoDomainAccounting���
�MIncreasePolicy���
�MDecreasePolicy���
�MReserved�:�M<anonymous-tag>.?AU<anonymous-tag>@@�MF�"
 Spare
V/Flags2�M<anonymous-tag>.?AT<anonymous-tag>@@�MF�
!��
!��
!��B
�MAllowScaling�
�MDisabled�
�MReserved�:�M<anonymous-tag>.?AU<anonymous-tag>@@�MF>N�PPM_THERMAL_POLICY_EVENT.?AUPPM_THERMAL_POLICY_EVENT@@��*
 Mode�
#Processors���N�MPPM_THERMAL_POLICY_EVENT.?AUPPM_THERMAL_POLICY_EVENT@@���MF�
J�PPM_THERMALCHANGE_EVENT.?AUPPM_THERMALCHANGE_EVENT@@6
"ThermalConstraint
#Processors���J�MPPM_THERMALCHANGE_EVENT.?AUPPM_THERMALCHANGE_EVENT@@�MF�
R�PPM_PERFSTATE_DOMAIN_EVENT.?AUPPM_PERFSTATE_DOMAIN_EVENT@@��N
"State
"Latency��
"Speed
#Processors���R�MPPM_PERFSTATE_DOMAIN_EVENT.?AUPPM_PERFSTATE_DOMAIN_EVENT@@���MF�
B�PPM_PERFSTATE_EVENT.?AUPPM_PERFSTATE_EVENT@@^
"State
"Status���
"Latency��
"Speed
"ProcessorB�MPPM_PERFSTATE_EVENT.?AUPPM_PERFSTATE_EVENT@@�MF�
	,#���
#TotalTime
"IdleTransitions��
"FailedTransitions
"InvalidBucketIndex���
"MinTimeUs
"MaxTimeUs
"CancelledTransitions�
�M IdleTimeBuckets��V�M�PPM_IDLE_STATE_ACCOUNTING_EX.?AUPPM_IDLE_STATE_ACCOUNTING_EX@@���MF
"#�
"IdleTransitions��
"FailedTransitions
"InvalidBucketIndex���
#TotalTime
�MIdleTimeBuckets��N�M0PPM_IDLE_STATE_ACCOUNTING.?AUPPM_IDLE_STATE_ACCOUNTING@@�MF
J�PPM_WMI_IDLE_STATES_EX.?AUPPM_WMI_IDLE_STATES_EX@@��z
"Type�
"Count
"TargetState��
"OldState�
TargetProcessors�
WStateJ�M8PPM_WMI_IDLE_STATES_EX.?AUPPM_WMI_IDLE_STATES_EX@@���MF�	R�POWER_STATE_NOTIFY_HANDLER.?AUPOWER_STATE_NOTIFY_HANDLER@@���! �M
�M*
�MHandler��
Context��R�MPOWER_STATE_NOTIFY_HANDLER.?AUPOWER_STATE_NOTIFY_HANDLER@@���MFD	.
"Granularity��
"Capacity�J�MBATTERY_REPORTING_SCALE.?AUBATTERY_REPORTING_SCALE@@�MF�j
�ResourceFileName�
!ResourceReasonId�
"StringCount��
8ReasonStrings:�M <anonymous-tag>.?AU<anonymous-tag>@@�MF�
�ResourceFileName�
!ResourceReasonId�
"StringCount��
8ReasonStrings
�SimpleString�2�M <anonymous-tag>.?AT<anonymous-tag>@@�MF
"��
"��
"��
"��
"��
"��
"��
"��
"��
�MReserved1
�MTargetSystemState
�MEffectiveSystemState�
�MCurrentSystemState���
�MIgnoreHibernationPath
�MPseudoTransition�
�MKernelSoftReboot�
�MDirectedDripsTransition��
�MReserved2:	�M<anonymous-tag>.?AU<anonymous-tag>@@�MF�
"��
"��
"��
"��
"��
"��
"��
"��
"��
�MReserved1
�MTargetSystemState
�MEffectiveSystemState�
�MCurrentSystemState���
�MIgnoreHibernationPath
�MPseudoTransition�
�MKernelSoftReboot�
�MDirectedDripsTransition��
�MReserved2
"ContextAsUlong���2
�M<anonymous-tag>.?AT<anonymous-tag>@@�MF�>
\ReparseDataBuffer
�#ReparseGuidDataBuffer2�M<anonymous-tag>.?AT<anonymous-tag>@@�MUu&j
_SymbolicLinkReparseBuffer
bMountPointReparseBuffer��
eGenericReparseBuffer�2�M<anonymous-tag>.?AT<anonymous-tag>@@�MU)#6
"FilterEntryCount�
"NumberOfPairs2�M<anonymous-tag>.?AT<anonymous-tag>@@�MUB
F'SdChange�
G'SdQueryStats�
H'SdEnumSds2�M@<anonymous-tag>.?AT<anonymous-tag>@@�MU�B
�SdChange�
�SdQueryStats�
lSdEnumSds2�M<anonymous-tag>.?AT<anonymous-tag>@@�MU|2
;Lev1Depends��
;Lev2Depends��2�MD<anonymous-tag>.?AT<anonymous-tag>@@�MUe.
"BufferLength�
�Buffer���2�M<anonymous-tag>.?AT<anonymous-tag>@@�MUaF
.BirthVolumeId
.BirthObjectId
. DomainId�:�M0<anonymous-tag>.?AU<anonymous-tag>@@�MU�^
.BirthVolumeId
.BirthObjectId
. DomainId�
�5ExtendedInfo�2�M0<anonymous-tag>.?AT<anonymous-tag>@@�MU��
"Calls
"Clusters�
"Hints
"RunsReturned�
"HintsHonored�
"HintsClusters
"Cache
"CacheClusters
" CacheMiss
"$CacheMissClusters:
N(<anonymous-tag>.?AU<anonymous-tag>@@NU�J
!Write
!Create���
!SetInfo��
!Flush:N<anonymous-tag>.?AU<anonymous-tag>@@NU�:
!Write
!Create���
!SetInfo��:N<anonymous-tag>.?AU<anonymous-tag>@@NU�J
!Write
!Create���
!SetInfo��
!Flush:	N<anonymous-tag>.?AU<anonymous-tag>@@
NUvJ
!Write
!Create���
!SetInfo��
!Flush:N<anonymous-tag>.?AU<anonymous-tag>@@
NUi2
"UsnSourceInfo
"CopyNumber���2N<anonymous-tag>.?AT<anonymous-tag>@@NUFB�MARK_HANDLE_INFO32.?AUMARK_HANDLE_INFO32@@��b
"UsnSourceInfo
"CopyNumber���
uVolumeHandle�
"HandleInfo���BNMARK_HANDLE_INFO32.?AUMARK_HANDLE_INFO32@@��NUC2
"UsnSourceInfo
"CopyNumber���2N<anonymous-tag>.?AT<anonymous-tag>@@NU1J�DELETE_USN_JOURNAL_DATA.?AUDELETE_USN_JOURNAL_DATA@@2
#UsnJournalID�
"DeleteFlags��JNDELETE_USN_JOURNAL_DATA.?AUDELETE_USN_JOURNAL_DATA@@NU^
"RecordLength�
!MajorVersion�
!MinorVersion�
.FileReferenceNumber��
.ParentFileReferenceNumber
(Usn��
~0TimeStamp
"8Reason���
"<SourceInfo���
"@SecurityId���
"DFileAttributes���
!HFileNameLength���
!JFileNameOffset���
JLFileName�6NPUSN_RECORD_V3.?AUUSN_RECORD_V3@@NU�F�MOVE_FILE_RECORD_DATA.?AUMOVE_FILE_RECORD_DATA@@R
FileHandle���
~SourceFileRecord�
~TargetFileRecord�F!NMOVE_FILE_RECORD_DATA.?AUMOVE_FILE_RECORD_DATA@@"NU�
F�VOLUME_BITMAP_BUFFER.?AUVOLUME_BITMAP_BUFFER@@��F
~StartingLcn��
~BitmapSize���
�Buffer���F%NVOLUME_BITMAP_BUFFER.?AUVOLUME_BITMAP_BUFFER@@��&NUD
J�NTFS_VOLUME_DATA_BUFFER.?AUNTFS_VOLUME_DATA_BUFFER@@�
~VolumeSerialNumber���
~NumberSectors
~TotalClusters
~FreeClusters�
~ TotalReserved
"(BytesPerSector���
",BytesPerCluster��
"0BytesPerFileRecordSegment
"4ClustersPerFileRecordSegment�
~8MftValidDataLength���
~@MftStartLcn��
~HMft2StartLcn�
~PMftZoneStart�
~XMftZoneEnd���J)N`NTFS_VOLUME_DATA_BUFFER.?AUNTFS_VOLUME_DATA_BUFFER@@*NU�6
 NoCrossPartitionAccess���
�Spare:,N<anonymous-tag>.?AU<anonymous-tag>@@-NU�.
 ReplaceIfExists��
"Flags2/N<anonymous-tag>.?AT<anonymous-tag>@@0NU.
 ReplaceIfExists��
"Flags22N<anonymous-tag>.?AT<anonymous-tag>@@3NU�F
.BirthVolumeId
.BirthObjectId
. DomainId�:5N0<anonymous-tag>.?AU<anonymous-tag>@@6NUh^
.BirthVolumeId
.BirthObjectId
. DomainId�
�5ExtendedInfo�28N0<anonymous-tag>.?AT<anonymous-tag>@@9NUg*
Status���
Pointer��2;N<anonymous-tag>.?AT<anonymous-tag>@@<NU�"
-HIn���
0HOut��2>N <anonymous-tag>.?AT<anonymous-tag>@@?N��2
"DesiredAccess
"GrantedAccess2AN<anonymous-tag>.?AT<anonymous-tag>@@BN�V2
"ObjectType���
"HandleCount��2DN<anonymous-tag>.?AT<anonymous-tag>@@EN�Q2
Handle���
`.HandleAttrArray��2GN<anonymous-tag>.?AT<anonymous-tag>@@HN�L
"��
"��
"��
"��
"��
"��
JNReserved0
KNSameAccess���
LNSameAttributes���
MNIndirect�
NNInherit��
ONReserved1:PN<anonymous-tag>.?AU<anonymous-tag>@@QN�B
"��
"��
"��
"��
"��
"��
"Flags
SNReserved0
TNSameAccess���
UNSameAttributes���
VNIndirect�
WNInherit��
XNReserved12YN<anonymous-tag>.?AT<anonymous-tag>@@ZN�@2
"DesiredAccess
"GrantedAccess2\N<anonymous-tag>.?AT<anonymous-tag>@@]N�8
"��
"��
"��
"��
"��
"��
_NReserved0
`NSameAccess���
aNSameAttributes���
bNIndirect�
cNInherit��
dNReserved1:eN<anonymous-tag>.?AU<anonymous-tag>@@fN�,
"��
"��
"��
"��
"��
"��
"Flags
hNReserved0
iNSameAccess���
jNSameAttributes���
kNIndirect�
lNInherit��
mNReserved12nN<anonymous-tag>.?AT<anonymous-tag>@@oN�*6
#ClientViewSize���
"CallbackId���2qN<anonymous-tag>.?AT<anonymous-tag>@@rN�N2
�ClientId�
ADoNotUseThisField2tN<anonymous-tag>.?AT<anonymous-tag>@@uN�I
"��
"��.
wNCfgOverride��
xNReserved�:yN<anonymous-tag>.?AU<anonymous-tag>@@zNbH

"��
"��>
"Flags
|NCfgOverride��
}NReserved�2~N<anonymous-tag>.?AT<anonymous-tag>@@NbF
2
"UpdateMask���
"DesiredState�:�N<anonymous-tag>.?AU<anonymous-tag>@@�NbI
"��
"��
"��
"��f
�NFreezeOperation��
�NFilterOperation��
�NSwapOperation
�NReserved�:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb	
"��
"��
"��
"��v
"Flags
�NFreezeOperation��
�NFilterOperation��
�NSwapOperation
�NReserved�2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb6
#ManifestAddress��
"ManifestSize�:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb�	6
#ManifestAddress��
"ManifestSize�2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb�	
 ��
 ��
 ��
 ��
 ��
 ��
 ��
!���
�NProtectedProcess�
�NAddressSpaceOverride�
�NDevOverrideEnabled���
�NManifestDetected�
�NProtectedProcessLight
�NSpareBits1���
�NSpareBits2���
�NSpareBits3���:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb�	
 ��
 ��
 ��
 ��
 ��
 ��
 ��
!��
"OutputFlags��
�NProtectedProcess�
�NAddressSpaceOverride�
�NDevOverrideEnabled���
�NManifestDetected�
�NProtectedProcessLight
�NSpareBits1���
�NSpareBits2���
�NSpareBits3���2	�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb�	
 ��
 ��
 ��
 ��
 ��
 ��
!���
�NWriteOutputOnExit
�NDetectManifest���
�NIFEOSkipDebugger�
�NIFEODoNotPropagateKeyState���
�NSpareBits1���
�NSpareBits2���
�NProhibitedImageCharacteristics���:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb�	
 ��
 ��
 ��
 ��
 ��
 ��
!���
"InitFlags
�NWriteOutputOnExit
�NDetectManifest���
�NIFEOSkipDebugger�
�NIFEODoNotPropagateKeyState���
�NSpareBits1���
�NSpareBits2���
�NProhibitedImageCharacteristics���2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb�	n
�InitState
�FailSection��
�ExeFormat
�ExeName��
�SuccessState�2�NH<anonymous-tag>.?AT<anonymous-tag>@@�Nb�	
 ��
 ��
 ��6
�NType�
�NAudit
�NSigner���:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb^	
 ��
 ��
 ��F
 Level
�NType�
�NAudit
�NSigner���2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb\	&
"StdHandleSubsystemType���2�N<anonymous-tag>.?AT<anonymous-tag>@@�NbU
"��
"��:
�NStdHandleState���
�NPseudoHandleMask�:�N<anonymous-tag>.?AU<anonymous-tag>@@�NbP
"��
"��J
"Flags
�NStdHandleState���
�NPseudoHandleMask�2�N<anonymous-tag>.?AT<anonymous-tag>@@�NbN&
#Value
ValuePtr�2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb��
�ASLRPolicy���
�StrictHandleCheckPolicy��
�SystemCallDisablePolicy��
�ExtensionPointDisablePolicy��
�DynamicCodePolicy
�ControlFlowGuardPolicy���
�SignaturePolicy��
�FontDisablePolicy
�ImageLoadPolicy��
�SystemCallFilterPolicy���
�PayloadRestrictionPolicy�
�ChildProcessPolicy���
�SideChannelIsolationPolicy���
�UserShadowStackPolicy2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb$
"��
"��*
�NTopDown��
�NReserved�:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb�
"��
"��
"��F
�NEnableAutoUpdate�
�NPermanent
�NReserved�:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb��
bInputDuration
bAudioInDuration��
bAudioOutDuration�
bDisplayRequiredDuration��
b PSMBackgroundDuration:�N(<anonymous-tag>.?AU<anonymous-tag>@@�Nb\�
CDurations
bInputDuration
bAudioInDuration��
bAudioOutDuration�
bDisplayRequiredDuration��
b PSMBackgroundDuration2�N(<anonymous-tag>.?AT<anonymous-tag>@@�NbZ�
�%CpuTimeline��
�%DiskTimeline�
�%NetworkTimeline��
�%MBBTimeline��
�% ForegroundTimeline���
�%(DesktopVisibleTimeline���
�%0CompositionRenderedTimeline��
�%8CompositionDirtyGeneratedTimeline
�%@CompositionDirtyPropagatedTimeline���
�%HInputTimeline
�%PAudioInTimeline��
�%XAudioOutTimeline�
�%`DisplayRequiredTimeline��
�%hKeyboardInputTimeline:�Np<anonymous-tag>.?AU<anonymous-tag>@@�NbH�
CTimelines
�%CpuTimeline��
�%DiskTimeline�
�%NetworkTimeline��
�%MBBTimeline��
�% ForegroundTimeline���
�%(DesktopVisibleTimeline���
�%0CompositionRenderedTimeline��
�%8CompositionDirtyGeneratedTimeline
�%@CompositionDirtyPropagatedTimeline���
�%HInputTimeline
�%PAudioInTimeline��
�%XAudioOutTimeline�
�%`DisplayRequiredTimeline��
�%hKeyboardInputTimeline2�Np<anonymous-tag>.?AT<anonymous-tag>@@�NbFf
bForegroundDuration���
bDesktopVisibleDuration���
bPSMForegroundDuration:�N<anonymous-tag>.?AU<anonymous-tag>@@�Nb/z
�/Durations
bForegroundDuration���
bDesktopVisibleDuration���
bPSMForegroundDuration2�N<anonymous-tag>.?AT<anonymous-tag>@@�Nb+
"��
"��F
"LastChangeTime���
ODuration�
OIsInState:O<anonymous-tag>.?AU<anonymous-tag>@@Ob�*
"EndTime��
"Bitmap���:O<anonymous-tag>.?AU<anonymous-tag>@@Ob�
u��
u��
u��
u��
u��
u��
u��
u��
u��
u	��

	OIsProtectedProcess���

OIsWow64Process���
OIsProcessDeleting
OIsCrossSessionCreate�

OIsFrozen�
OIsBackground�
OIsStronglyNamed��
OIsSecureProcess��
OIsPicoProcess
OSpareBits:
O<anonymous-tag>.?AU<anonymous-tag>@@Ob�
u��
u��
u��
u��
u��
u��
u��
u��
u��
u	��
uFlags
OIsProtectedProcess���
OIsWow64Process���
OIsProcessDeleting
OIsCrossSessionCreate�
OIsFrozen�
OIsBackground�
OIsStronglyNamed��
OIsSecureProcess��
OIsPicoProcess
OSpareBits2 O<anonymous-tag>.?AT<anonymous-tag>@@!Ob�.
"TlsIndex�
"PreviousCount2#O<anonymous-tag>.?AT<anonymous-tag>@@$Obs
ThreadId�2&O<anonymous-tag>.?AT<anonymous-tag>@@'Obh2
NewTlsData���
OldTlsData���2)O<anonymous-tag>.?AT<anonymous-tag>@@*Obd
"��
"��.
,OForeground���
-OReserved�:.O<anonymous-tag>.?AU<anonymous-tag>@@/ObD*
"ControlFlags�
�Path�21O<anonymous-tag>.?AT<anonymous-tag>@@2O}�*
!MinRate��
!MaxRate��:4O<anonymous-tag>.?AU<anonymous-tag>@@5O}R
"CpuRate��
"Weight���
!MinRate��
!MaxRate��27O<anonymous-tag>.?AT<anonymous-tag>@@8O}N
RateControlToleranceLimit
CpuRateControlToleranceLimit�2:O<anonymous-tag>.?AT<anonymous-tag>@@;O}F
RateControlTolerance�
CpuRateControlTolerance��2=O<anonymous-tag>.?AT<anonymous-tag>@@>O}>
#JobHighMemoryLimit���
#JobMemoryLimit���2@O<anonymous-tag>.?AT<anonymous-tag>@@AO}�V
ERateControlToleranceInterval�
ECpuRateControlToleranceInterval��2CO<anonymous-tag>.?AT<anonymous-tag>@@DO}�F
RateControlTolerance�
CpuRateControlTolerance��2FO<anonymous-tag>.?AT<anonymous-tag>@@GO}�>
#JobHighMemoryLimit���
#JobMemoryLimit���2IO<anonymous-tag>.?AT<anonymous-tag>@@JO}�
"��
"��
"��
"��
"��
LOEnableReadVmLogging��
MOEnableWriteVmLogging�
NOEnableProcessSuspendResumeLogging
OOEnableThreadSuspendResumeLogging�
POReserved�:QO<anonymous-tag>.?AU<anonymous-tag>@@RO}\
 ��
 ��
 ��V
TOEnableReadVmLogging��
UOEnableWriteVmLogging�
VOUnused���:WO<anonymous-tag>.?AU<anonymous-tag>@@XO}S
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
ZOEnableUserShadowStack
[OAuditUserShadowStack�
\OSetContextIpValidation���
]OAuditSetContextIpValidation��
^OEnableUserShadowStackStrictMode��
_OBlockNonCetBinaries��
`OBlockNonCetBinariesNonEhcont�
aOAuditBlockNonCetBinaries�
bOCetDynamicApisOutOfProcOnly��
cOSetContextIpValidationRelaxedMode
dOReservedFlags:eO<anonymous-tag>.?AU<anonymous-tag>@@fO}
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"Flags
hOEnableUserShadowStack
iOAuditUserShadowStack�
jOSetContextIpValidation���
kOAuditSetContextIpValidation��
lOEnableUserShadowStackStrictMode��
mOBlockNonCetBinaries��
nOBlockNonCetBinariesNonEhcont�
oOAuditBlockNonCetBinaries�
pOCetDynamicApisOutOfProcOnly��
qOSetContextIpValidationRelaxedMode
rOReservedFlags2sO<anonymous-tag>.?AT<anonymous-tag>@@tO}
"��
"��
"��
"��
"��
vOSmtBranchTargetIsolation�
wOIsolateSecurityDomain
xODisablePageCombine���
yOSpeculativeStoreBypassDisable
zOReservedFlags:{O<anonymous-tag>.?AU<anonymous-tag>@@|O}�
"��
"��
"��
"��
"��
"Flags
~OSmtBranchTargetIsolation�
OIsolateSecurityDomain
�ODisablePageCombine���
�OSpeculativeStoreBypassDisable
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��
"��
�ONoChildProcessCreation���
�OAuditNoChildProcessCreation��
�OAllowSecureProcessCreation���
�OReservedFlags:�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��
"��
"��
"Flags
�ONoChildProcessCreation���
�OAuditNoChildProcessCreation��
�OAllowSecureProcessCreation���
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"��
�OEnableExportAddressFilter
�OAuditExportAddressFilter�
�OEnableExportAddressFilterPlus
�OAuditExportAddressFilterPlus�
�OEnableImportAddressFilter
�OAuditImportAddressFilter�
�OEnableRopStackPivot��
�OAuditRopStackPivot���
�OEnableRopCallerCheck�
�OAuditRopCallerCheck��
�OEnableRopSimExec�
�OAuditRopSimExec��
�OReservedFlags:
�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"���
"Flags
�OEnableExportAddressFilter
�OAuditExportAddressFilter�
�OEnableExportAddressFilterPlus
�OAuditExportAddressFilterPlus�
�OEnableImportAddressFilter
�OAuditImportAddressFilter�
�OEnableRopStackPivot��
�OAuditRopStackPivot���
�OEnableRopCallerCheck�
�OAuditRopCallerCheck��
�OEnableRopSimExec�
�OAuditRopSimExec��
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��.
�OFilterId�
�OReservedFlags:�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��>
"Flags
�OFilterId�
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
"���
�ONoRemoteImages���
�ONoLowMandatoryLabelImages
�OPreferSystem32Images�
�OAuditNoRemoteImages��
�OAuditNoLowMandatoryLabelImages���
�OReservedFlags:�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
"���
"Flags
�ONoRemoteImages���
�ONoLowMandatoryLabelImages
�OPreferSystem32Images�
�OAuditNoRemoteImages��
�OAuditNoLowMandatoryLabelImages���
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��^
�ODisableNonSystemFonts
�OAuditNonSystemFontLoading
�OReservedFlags:�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��
"��n
"Flags
�ODisableNonSystemFonts
�OAuditNonSystemFontLoading
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
"��
�OMicrosoftSignedOnly��
�OStoreSignedOnly��
�OMitigationOptIn��
�OAuditMicrosoftSignedOnly�
�OAuditStoreSignedOnly�
�OReservedFlags:�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
"���
"Flags
�OMicrosoftSignedOnly��
�OStoreSignedOnly��
�OMitigationOptIn��
�OAuditMicrosoftSignedOnly�
�OAuditStoreSignedOnly�
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��
"��z
�OEnableControlFlowGuard���
�OEnableExportSuppression��
�OStrictMode���
�OReservedFlags:�O<anonymous-tag>.?AU<anonymous-tag>@@�O}�
"��
"��
"��
"��
"Flags
�OEnableControlFlowGuard���
�OEnableExportSuppression��
�OStrictMode���
�OReservedFlags2�O<anonymous-tag>.?AT<anonymous-tag>@@�O}�
"��
"��
"��
"��
"��
�OProhibitDynamicCode��
�OAllowThreadOptOut
�OAllowRemoteDowngrade�
�OAuditProhibitDynamicCode�
PReservedFlags:P<anonymous-tag>.?AU<anonymous-tag>@@P}{
"��
"��
"��
"��
"��
"Flags
PProhibitDynamicCode��
PAllowThreadOptOut
PAllowRemoteDowngrade�
PAuditProhibitDynamicCode�
PReservedFlags2	P<anonymous-tag>.?AT<anonymous-tag>@@
P}y
"��
"��>
PDisableExtensionPoints���

PReservedFlags:P<anonymous-tag>.?AU<anonymous-tag>@@P}q
"��
"��N
"Flags
PDisableExtensionPoints���
PReservedFlags2P<anonymous-tag>.?AT<anonymous-tag>@@P}o
"��
"��
"��j
PDisallowWin32kSystemCalls
PAuditDisallowWin32kSystemCalls���
PReservedFlags:P<anonymous-tag>.?AU<anonymous-tag>@@P}f
"��
"��
"��z
"Flags
PDisallowWin32kSystemCalls
PAuditDisallowWin32kSystemCalls���
PReservedFlags2P<anonymous-tag>.?AT<anonymous-tag>@@ P}d
"��
"��
"��~
"PRaiseExceptionOnInvalidHandleReference���
#PHandleExceptionsPermanentlyEnabled���
$PReservedFlags:%P<anonymous-tag>.?AU<anonymous-tag>@@&P}[
"��
"��
"��
"Flags
(PRaiseExceptionOnInvalidHandleReference���
)PHandleExceptionsPermanentlyEnabled���
*PReservedFlags2+P<anonymous-tag>.?AT<anonymous-tag>@@,P}Y
"��
"��
"��R
.PEnable���
/PDisableAtlThunkEmulation�
0PReservedFlags:1P<anonymous-tag>.?AU<anonymous-tag>@@2P}O
"��
"��
"��b
"Flags
4PEnable���
5PDisableAtlThunkEmulation�
6PReservedFlags27P<anonymous-tag>.?AT<anonymous-tag>@@8P}M
"��
"��
"��
"��
"��
:PEnableBottomUpRandomization��
;PEnableForceRelocateImages
<PEnableHighEntropy
=PDisallowStrippedImages���
>PReservedFlags:?P<anonymous-tag>.?AU<anonymous-tag>@@@P}B
"��
"��
"��
"��
"��
"Flags
BPEnableBottomUpRandomization��
CPEnableForceRelocateImages
DPEnableHighEntropy
EPDisallowStrippedImages���
FPReservedFlags2GP<anonymous-tag>.?AT<anonymous-tag>@@HP}@
"��
"��.
JPRatePercent��
KPReserved0:LP<anonymous-tag>.?AU<anonymous-tag>@@MP}�*
"DriveMap�
�DriveType:OP$<anonymous-tag>.?AU<anonymous-tag>@@PP}(
DirectoryHandle��:RP<anonymous-tag>.?AU<anonymous-tag>@@SP}%"
SPSet��
PPQuery2UP(<anonymous-tag>.?AT<anonymous-tag>@@VP}$"
�Set��
�Query2XP(<anonymous-tag>.?AT<anonymous-tag>@@YP}
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
[PIsProtectedProcess���
\PIsWow64Process���
]PIsProcessDeleting
^PIsCrossSessionCreate�
_PIsFrozen�
`PIsBackground�
aPIsStronglyNamed��
bPIsSecureProcess��
cPIsSubsystemProcess���
dPSpareBits:
eP<anonymous-tag>.?AU<anonymous-tag>@@fP}�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��"
"Flags
hPIsProtectedProcess���
iPIsWow64Process���
jPIsProcessDeleting
kPIsCrossSessionCreate�
lPIsFrozen�
mPIsBackground�
nPIsStronglyNamed��
oPIsSecureProcess��
pPIsSubsystemProcess���
qPSpareBits2rP<anonymous-tag>.?AT<anonymous-tag>@@sP}�>
dRtlUmsCompletionList�
UmsCompletionList2uP<anonymous-tag>.?AT<anonymous-tag>@@vP}f2
fRtlUmsContext
UmsContext���2xP<anonymous-tag>.?AT<anonymous-tag>@@yP}]
"��
"��>
{PIsUmsSchedulerThread�
|PIsUmsWorkerThread:}P<anonymous-tag>.?AU<anonymous-tag>@@~P}E
"��
"��N
"Flags
�PIsUmsSchedulerThread�
�PIsUmsWorkerThread2�P<anonymous-tag>.?AT<anonymous-tag>@@�P}C6
dCompletionList���
fUmsContext���:�P<anonymous-tag>.?AU<anonymous-tag>@@�P}0
"��
"��
dCompletionList���
fUmsContext���
"Flags
�PIsUmsSchedulerThread�
�PIsUmsWorkerThread2�P<anonymous-tag>.?AT<anonymous-tag>@@�P}.
!��
!��
!��
!��
!��
!��
!��
!��
!��
!	��
!
��
!��
!��
!
��
!��
!��
�PSafeThunkCall
�PInDebugPrint�
�PHasFiberData�
�PSkipThreadAttach�
�PWerInShipAssertCode��
�PRanProcessInit���
�PClonedThread�
�PSuppressDebugMsg�
�PDisableUserStackWalk�
�PRtlExceptionAttached�
�PInitialThread
�PSessionAware�
�PLoadOwner
�PLoaderWorker�
�PSkipLoaderInit���
�PSpareSameTebBits�:�P<anonymous-tag>.?AU<anonymous-tag>@@�P�
!��
!��
!��
!��
!��
!��
!��
!��
!��
!	��
!
��
!��
!��
!
��
!��
!���
!SameTebFlags�
�PSafeThunkCall
�PInDebugPrint�
�PHasFiberData�
�PSkipThreadAttach�
�PWerInShipAssertCode��
�PRanProcessInit���
�PClonedThread�
�PSuppressDebugMsg�
�PDisableUserStackWalk�
�PRtlExceptionAttached�
�PInitialThread
�PSessionAware�
�PLoadOwner
�PLoaderWorker�
�PSkipLoaderInit���
�PSpareSameTebBits�2�P<anonymous-tag>.?AT<anonymous-tag>@@�Pz
!��
�PSpareCrossTebBits:�P<anonymous-tag>.?AU<anonymous-tag>@@�Pr
!��6
BCrossTebFlags
�PSpareCrossTebBits2�P<anonymous-tag>.?AT<anonymous-tag>@@�Ppf
 ReservedPad0�
 ReservedPad1�
 ReservedPad2�
 IdealProcessor���:�P<anonymous-tag>.?AU<anonymous-tag>@@�PG�
�CurrentIdealProcessor
"IdealProcessorValue��
 ReservedPad0�
 ReservedPad1�
 ReservedPad2�
 IdealProcessor���2�P<anonymous-tag>.?AT<anonymous-tag>@@�PD
"��
"��6
�PSixtySecondEnabled���
�PReserved�:�P<anonymous-tag>.?AU<anonymous-tag>@@�P�
"��
"��R
"LeapSecondFlags��
�PSixtySecondEnabled���
�PReserved�2�P<anonymous-tag>.?AT<anonymous-tag>@@�P�
"��
"��
"��
"��
�PHeapTracingEnabled���
�PCritSecTracingEnabled
�PLibLoaderTracingEnabled��
�PSpareTracingBits�:�P<anonymous-tag>.?AU<anonymous-tag>@@�PI
"��
"��
"��
"��
"TracingFlags�
�PHeapTracingEnabled���
�PCritSecTracingEnabled
�PLibLoaderTracingEnabled��
�PSpareTracingBits�2�P<anonymous-tag>.?AT<anonymous-tag>@@�PG>
KernelCallbackTable��
UserSharedInfoPtr2�P<anonymous-tag>.?AT<anonymous-tag>@@�P�
"��
"��
"��
"��
"��
"��
"��
"��
"��
�PProcessInJob�
�PProcessInitializing��
�PProcessUsingVEH��
�PProcessUsingVCH��
�PProcessUsingFTH��
�PProcessPreviouslyThrottled���
�PProcessCurrentlyThrottled
�PProcessImagesHotPatched��
�PReservedBits0:	�P<anonymous-tag>.?AU<anonymous-tag>@@�P�
"��
"��
"��
"��
"��
"��
"��
"��
"��2
"CrossProcessFlags
�PProcessInJob�
�PProcessInitializing��
�PProcessUsingVEH��
�PProcessUsingVCH��
�PProcessUsingFTH��
�PProcessPreviouslyThrottled���
�PProcessCurrentlyThrottled
�PProcessImagesHotPatched��
�PReservedBits02
�P<anonymous-tag>.?AT<anonymous-tag>@@�P�
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
�PImageUsesLargePages��
�PIsProtectedProcess���
�PIsImageDynamicallyRelocated��
�PSkipPatchingUser32Forwarders�
�PIsPackagedProcess
�PIsAppContainer���
�PIsProtectedProcessLight��
�PIsLongPathAwareProcess���:�P<anonymous-tag>.?AU<anonymous-tag>@@�Ps
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ��&
 BitField�
�PImageUsesLargePages��
QIsProtectedProcess���
QIsImageDynamicallyRelocated��
QSkipPatchingUser32Forwarders�
QIsPackagedProcess
QIsAppContainer���
QIsProtectedProcessLight��
QIsLongPathAwareProcess���2	Q<anonymous-tag>.?AT<anonymous-tag>@@Qq*
#FiberData
"Version��2
Q<anonymous-tag>.?AT<anonymous-tag>@@Q}F*
"FiberData
"Version��2
Q<anonymous-tag>.?AT<anonymous-tag>@@Q}3*
FiberData
"Version��2Q<anonymous-tag>.?AT<anonymous-tag>@@Q}*
!Id���
!NameIsPresent:Q<anonymous-tag>.?AU<anonymous-tag>@@Q�d
#LoadedImports:Q<anonymous-tag>.?AU<anonymous-tag>@@Q�U
"TimeDateStamp:Q<anonymous-tag>.?AU<anonymous-tag>@@Q�R2
"TimeDateStamp
#LoadedImports2Q<anonymous-tag>.?AT<anonymous-tag>@@Q�Q2
#SectionPointer���
"CheckSum�:Q<anonymous-tag>.?AU<anonymous-tag>@@ Q�LF
HashLinks
#SectionPointer���
"CheckSum�2"Q<anonymous-tag>.?AT<anonymous-tag>@@#Q�J
"LoadedImports:%Q<anonymous-tag>.?AU<anonymous-tag>@@&Q�2
"TimeDateStamp:(Q<anonymous-tag>.?AU<anonymous-tag>@@)Q�/2
"TimeDateStamp
"LoadedImports2+Q<anonymous-tag>.?AT<anonymous-tag>@@,Q�.2
"SectionPointer���
"CheckSum�:.Q<anonymous-tag>.?AU<anonymous-tag>@@/Q�)F

HashLinks
"SectionPointer���
"CheckSum�21Q<anonymous-tag>.?AT<anonymous-tag>@@2Q�'
!��
!��
!	��J
4QSignatureLevel���
5QSignatureType
6QUnused���:7Q<anonymous-tag>.?AU<anonymous-tag>@@8Q�
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"
��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
:QPackagedBinary���
;QMarkedForRemoval�
<QImageDll�
=QLoadNotificationsSent
>QTelemetryEntryProcessed��
?QProcessStaticImport��
@QInLegacyLists
AQInIndexes
BQShimDll��
CQInExceptionTable�
DQReservedFlags1���
EQLoadInProgress���
FQLoadConfigProcessed��
GQEntryProcessed���
HQProtectDelayLoad�
IQReservedFlags3���
JQDontCallForThreads���
KQProcessAttachCalled��
LQProcessAttachFailed��
MQCorDeferredValidate��
NQCorImage�
OQDontRelocate�
PQCorILOnly
QQChpeImage
RQReservedFlags5���
SQRedirected���
TQReservedFlags6���
UQCompatDatabaseProcessed��:VQ<anonymous-tag>.?AU<anonymous-tag>@@WQ��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��
"
��
"��
"
��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��
"��&
�FlagGroup
"Flags
YQPackagedBinary���
ZQMarkedForRemoval�
[QImageDll�
\QLoadNotificationsSent
]QTelemetryEntryProcessed��
^QProcessStaticImport��
_QInLegacyLists
`QInIndexes
aQShimDll��
bQInExceptionTable�
cQReservedFlags1���
dQLoadInProgress���
eQLoadConfigProcessed��
fQEntryProcessed���
gQProtectDelayLoad�
hQReservedFlags3���
iQDontCallForThreads���
jQProcessAttachCalled��
kQProcessAttachFailed��
lQCorDeferredValidate��
mQCorImage�
nQDontRelocate�
oQCorILOnly
pQChpeImage
qQReservedFlags5���
rQRedirected���
sQReservedFlags6���
tQCompatDatabaseProcessed��2uQ<anonymous-tag>.?AT<anonymous-tag>@@vQ��
�<
xQpAttributeV1�2yQ<anonymous-tag>.?AT<anonymous-tag>@@zQE,
&
Sid��
�Buffer���2|QD<anonymous-tag>.?AT<anonymous-tag>@@}QE|&
�TokenUser
�User�2Q<anonymous-tag>.?AT<anonymous-tag>@@�QEw
 ��
 ��B
 CodeOffset���
�QUnwindOp�
�QOpInfo���:�Q<anonymous-tag>.?AU<anonymous-tag>@@�Q�
#Rax��
#Rcx��
#Rdx��
#Rbx��
# Rsp��
#(Rbp��
#0Rsi��
#8Rdi��
#@R8���
#HR9���
#PR10��
#XR11��
#`R12��
#hR13��
#pR14��
#xR15��:�Q�<anonymous-tag>.?AU<anonymous-tag>@@�Q�&�
�;IntegerContext���
#Rax��
#Rcx��
#Rdx��
#Rbx��
# Rsp��
#(Rbp��
#0Rsi��
#8Rdi��
#@R8���
#HR9���
#PR10��
#XR11��
#`R12��
#hR13��
#pR14��
#xR15��2�Q�<anonymous-tag>.?AT<anonymous-tag>@@�Q�&�
�;Xmm0�
�;Xmm1�
�;Xmm2�
�;Xmm3�
�; Xmm4�
�;(Xmm5�
�;0Xmm6�
�;8Xmm7�
�;@Xmm8�
�;HXmm9�
�;PXmm10
�;XXmm11
�;`Xmm12
�;hXmm13
�;pXmm14
�;xXmm15:�Q�<anonymous-tag>.?AU<anonymous-tag>@@�Q�&�
�;FloatingContext��
�;Xmm0�
�;Xmm1�
�;Xmm2�
�;Xmm3�
�; Xmm4�
�;(Xmm5�
�;0Xmm6�
�;8Xmm7�
�;@Xmm8�
�;HXmm9�
�;PXmm10
�;XXmm11
�;`Xmm12
�;hXmm13
�;pXmm14
�;xXmm152�Q�<anonymous-tag>.?AT<anonymous-tag>@@�Q�&�*
�8Header���
: Legacy���
9�Xmm0�
9�Xmm1�
9�Xmm2�
9�Xmm3�
9�Xmm4�
9�Xmm5�
9Xmm6�
9Xmm7�
9 Xmm8�
90Xmm9�
9@Xmm10
9PXmm11
9`Xmm12
9pXmm13
9�Xmm14
9�Xmm15:�Q�<anonymous-tag>.?AU<anonymous-tag>@@�Q�&�>
�FltSave��
�8Header���
: Legacy���
9�Xmm0�
9�Xmm1�
9�Xmm2�
9�Xmm3�
9�Xmm4�
9�Xmm5�
9Xmm6�
9Xmm7�
9 Xmm8�
90Xmm9�
9@Xmm10
9PXmm11
9`Xmm12
9pXmm13
9�Xmm14
9�Xmm152�Q<anonymous-tag>.?AT<anonymous-tag>@@�Q�&�6
"EntryPointToken��
"EntryPointRVA2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qf�	&
!Ordinal��
!Hint�2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qfy	6
#EndOfPrologue
#UnwindInfoAddress2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qf
	6
"UnwindInfoAddress
"UnwindData���2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qf6
"��
"��
"��
"��
"��
"��
�QFunctionLength���
�QVersion��
�QExceptionDataPresent�
�QEpilogInHeader���
�QEpilogCount��
�QCodeWords:�Q<anonymous-tag>.?AU<anonymous-tag>@@�Qf
"��
"��
"
��
"��
"��
"��
"	��~
�QFlag�
�QFunctionLength���
�QRegF�
�QRegI�
�QH
�QCR���
�QFrameSize:�Q<anonymous-tag>.?AU<anonymous-tag>@@�Qf
"��
"��
"
��
"��
"��
"��
"	��
"UnwindData���
�QFlag�
�QFunctionLength���
�QRegF�
�QRegI�
�QH
�QCR���
�QFrameSize2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qf	
"��
"��
"
��
"��
"��
"��
"��
"��
"
��
�QFlag�
�QFunctionLength���
�QRet��
�QH
�QReg��
�QR
�QL
�QC
�QStackAdjust��:	�Q<anonymous-tag>.?AU<anonymous-tag>@@�Qf�
"��
"��
"
��
"��
"��
"��
"��
"��
"
��
"UnwindData���
�QFlag�
�QFunctionLength���
�QRet��
�QH
�QReg��
�QR
�QL
�QC
�QStackAdjust��2
�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qf�
"��
"��2
�QNativeCode���
�QAddressBits��:�Q<anonymous-tag>.?AU<anonymous-tag>@@�Qfy
"��
"��J
"StartOffset��
�QNativeCode���
�QAddressBits��2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qfw
"��
"��:
�QOffsetToDirectory
�QDataIsDirectory��:�Q<anonymous-tag>.?AU<anonymous-tag>@@�QfV
"��
"��R
"OffsetToData�
�QOffsetToDirectory
�QDataIsDirectory��2�Q<anonymous-tag>.?AT<anonymous-tag>@@�QfT
"��
"��2
�QNameOffset���
�QNameIsString�:�Q<anonymous-tag>.?AU<anonymous-tag>@@�QfM
"��
"��R
�QNameOffset���
�QNameIsString�
"Name�
!Id���2�Q<anonymous-tag>.?AT<anonymous-tag>@@�QfL
"��
"��6
�QRvaBased�
�QReservedAttributes���:�Q<anonymous-tag>.?AU<anonymous-tag>@@�Qf
>
"Characteristics��
"OriginalFirstThunk���2�Q<anonymous-tag>.?AT<anonymous-tag>@@�Qf�
"��
"��
"��>
RReserved0
RAlignment
RReserved1:R<anonymous-tag>.?AU<anonymous-tag>@@Rf�
"��
"��
"��Z
"Characteristics��
RReserved0
RAlignment
RReserved12	R<anonymous-tag>.?AT<anonymous-tag>@@
Rf�
"��
"��
"��>
RReserved0

RAlignment
RReserved1:R<anonymous-tag>.?AU<anonymous-tag>@@Rf�
"��
"��
"��Z
"Characteristics��
RReserved0
RAlignment
RReserved12R<anonymous-tag>.?AT<anonymous-tag>@@Rf�6
"VirtualAddress���
"RelocCount���2R<anonymous-tag>.?AT<anonymous-tag>@@Rfv.
B$TokenDef�
�rgbReserved��:R<anonymous-tag>.?AU<anonymous-tag>@@RfP"
"Short
"Long�:R<anonymous-tag>.?AU<anonymous-tag>@@Rfh:
�ShortName
RName�
�LongName�2!R<anonymous-tag>.?AT<anonymous-tag>@@"Rff*
�DVendors��
#Unused���2$R<anonymous-tag>.?AT<anonymous-tag>@@%R��*
A2CpuErrata
#Unused���2'R<anonymous-tag>.?AT<anonymous-tag>@@(R��
px
~test�:*R<anonymous-tag>.?AU<anonymous-tag>@@+R

 ��
 ��>
-RRed��
.RBalance��
#ParentValue��2/R<anonymous-tag>.?AT<anonymous-tag>@@0R}"
{Left�
{Right:2R<anonymous-tag>.?AU<anonymous-tag>@@3Ru6
|Children�
{Left�
{Right25R<anonymous-tag>.?AT<anonymous-tag>@@6Rs*
"LowPart��
"HighPart�:8R<anonymous-tag>.?AU<anonymous-tag>@@9R�*
"LowPart��
HighPart�:;R<anonymous-tag>.?AU<anonymous-tag>@@<R�>
UseThisFieldToCopy���
ADoNotUseThisField2>R<anonymous-tag>.?AT<anonymous-tag>@@?R�6�tagEMRMASKBLT.?AUtagEMRMASKBLT@@�
Pemr��
,rclBounds
xDest
yDest
 cxDest���
$cyDest���
"(dwRop
,xSrc�
0ySrc�

4xformSrc�
"LcrBkColorSrc�
"PiUsageSrc
"ToffBmiSrc
"XcbBmiSrc�
"\offBitsSrc���
"`cbBitsSrc
dxMask
hyMask
"liUsageMask���
"poffBmiMask���
"tcbBmiMask
"xoffBitsMask��
"|cbBitsMask���6BR�tagEMRMASKBLT.?AUtagEMRMASKBLT@@CRS�
N
�-
+
u��
u��
u��
u��
u��
u���
uFeatureId
HRPriority�
IREnabledState�
JRIsWexpConfiguration��
KRHasSubscriptions�
LRVariant��
MRVariantPayloadKind���
uVariantPayload���RNR_RTL_FEATURE_CONFIGURATION.?AU_RTL_FEATURE_CONFIGURATION@@��OR�c
,��
QRn�_JOURNAL_TRANSACTION_BOUNDARY_INFORMATION.?AU_JOURNAL_TRANSACTION_BOUNDARY_INFORMATION@@
SRZ
yAction���
#RecordNumber�
~TimeStamp
�TransactionIDnUR(_JOURNAL_TRANSACTION_BOUNDARY_INFORMATION.?AU_JOURNAL_TRANSACTION_BOUNDARY_INFORMATION@@VRz�N�_PROCESS_AFFINITY_UPDATE_MODE.?AT_PROCESS_AFFINITY_UPDATE_MODE@@
"��
"��
"��V
"Flags
YREnableAutoUpdate�
ZRPermanent
[RReserved�N\R_PROCESS_AFFINITY_UPDATE_MODE.?AT_PROCESS_AFFINITY_UPDATE_MODE@@]Rb�:�_MESSAGE_TRACE.?AU_MESSAGE_TRACE@@��*
�5MessageHeader
 Data�:`R_MESSAGE_TRACE.?AU_MESSAGE_TRACE@@��aR0�
�>
�
�
"��
"��
"��
"��
"Flags
fREnableControlFlowGuard���
gREnableExportSuppression��
hRStrictMode���
iRReservedFlagsvjR_PROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY.?AU_PROCESS_MITIGATION_CONTROL_FLOW_GUARD_POLICY@@kR}�b�_PROCESS_EXTENDED_BASIC_INFORMATION.?AU_PROCESS_EXTENDED_BASIC_INFORMATION@@
mR
"��
"��
"��
"��
"��
"��
"��
"��
"��
"	��F
#Size�
BasicInfo
"8Flags
oR8IsProtectedProcess���
pR8IsWow64Process���
qR8IsProcessDeleting
rR8IsCrossSessionCreate�
sR8IsFrozen�
tR8IsBackground�
uR8IsStronglyNamed��
vR8IsSecureProcess��
wR8IsSubsystemProcess���
xR8SpareBitsb
yR@_PROCESS_EXTENDED_BASIC_INFORMATION.?AU_PROCESS_EXTENDED_BASIC_INFORMATION@@zR}�
l
sN�_THREAD_BASIC_INFORMATION.?AU_THREAD_BASIC_INFORMATION@@
��
ExitStatus���
RTebBaseAddress���
�ClientId�
# AffinityMask�
(Priority�
,BasePriority�N�R0_THREAD_BASIC_INFORMATION.?AU_THREAD_BASIC_INFORMATION@@�Rb�
@
�GN�tagEMRSETCOLORADJUSTMENT.?AUtagEMRSETCOLORADJUSTMENT@@��.
Pemr��
S1ColorAdjustment��N�R tagEMRSETCOLORADJUSTMENT.?AUtagEMRSETCOLORADJUSTMENT@@���RS�
(
6-
�"
�GR�_ADMINISTRATOR_POWER_POLICY.?AU_ADMINISTRATOR_POWER_POLICY@@�
�MinSleep�
�MaxSleep�
"MinVideoTimeout��
"MaxVideoTimeout��
"MinSpindownTimeout���
"MaxSpindownTimeout���R�R_ADMINISTRATOR_POWER_POLICY.?AU_ADMINISTRATOR_POWER_POLICY@@�RF�
x
%F�_SERVICE_DESCRIPTIONA.?AU_SERVICE_DESCRIPTIONA@@
plpDescriptionF�R_SERVICE_DESCRIPTIONA.?AU_SERVICE_DESCRIPTIONA@@�Rm�N�tagWNODE_EVENT_REFERENCE.?AUtagWNODE_EVENT_REFERENCE@@��
qWnodeHeader��
�0TargetGuid���
"@TargetDataBlockSize��
"DTargetInstanceIndex��
JDTargetInstanceName���N�RHtagWNODE_EVENT_REFERENCE.?AUtagWNODE_EVENT_REFERENCE@@���RtB�_CSV_QUERY_MDS_PATH.?AU_CSV_QUERY_MDS_PATH@@R
"MdsNodeId
"DsNodeId�
"PathLength���
JPath�B�R_CSV_QUERY_MDS_PATH.?AU_CSV_QUERY_MDS_PATH@@�RU�
�Eb�_GET_FILTER_FILE_IDENTIFIER_OUTPUT.?AU_GET_FILTER_FILE_IDENTIFIER_OUTPUT@@��J
!FilterFileIdentifierLength���
�FilterFileIdentifier�b�R_GET_FILTER_FILE_IDENTIFIER_OUTPUT.?AU_GET_FILTER_FILE_IDENTIFIER_OUTPUT@@���RU�"
g#R�_UNWIND_HISTORY_TABLE_ENTRY.?AU_UNWIND_HISTORY_TABLE_ENTRY@@�R#��
"Count
 LocalHint
 GlobalHint���
 Search���
 Once�
#LowAddress���
#HighAddress��
�REntryF�R�_UNWIND_HISTORY_TABLE.?AU_UNWIND_HISTORY_TABLE@@�R�&9r�_EVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION.?AU_EVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION@@
�R�
EventTraceInformationClass���
"ReleaseSamplingRate��
"ContentionSamplingRate���
"NumberOfExcessiveTimeoutsr�R_EVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION.?AU_EVENT_TRACE_EXECUTIVE_RESOURCE_INFORMATION@@�RV
LastError
LastEEInfo���
 LastCalledStage��
qServerName���
q ServerPort���
q(RemoteUser���
q0AuthType�
 8ResourceTypePresent��
 9SessionIdPresent�
 :InterfacePresent�
�<ResourceType�
�LSessionId
�\Interface
pCertContext��B�Rx_RDR_CALLOUT_STATE.?AU_RDR_CALLOUT_STATE@@���R�J�_RTL_FEATURE_USAGE_DATA.?AU_RTL_FEATURE_USAGE_DATA@@B
uFeatureId
!ReportingKind
!Reserved�J�R_RTL_FEATURE_USAGE_DATA.?AU_RTL_FEATURE_USAGE_DATA@@�R�zV�_DRIVER_VERIFIER_THUNK_PAIRS.?AU_DRIVER_VERIFIER_THUNK_PAIRS@@��
�R
�#6
�RPristineRoutine��
�RNewRoutine���V�R_DRIVER_VERIFIER_THUNK_PAIRS.?AU_DRIVER_VERIFIER_THUNK_PAIRS@@���R|�B�tagEMRRESIZEPALETTE.?AUtagEMRRESIZEPALETTE@@
�R6
Pemr��
"ihPal
"cEntries�B�RtagEMRRESIZEPALETTE.?AUtagEMRRESIZEPALETTE@@�RS�
�
"��
"��
"��
"Flags
�RRaiseExceptionOnInvalidHandleReference���
�RHandleExceptionsPermanentlyEnabled���
�RReservedFlagsz�R_PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY.?AU_PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY@@���R}XJ�_KEY_LAYER_INFORMATION.?AU_KEY_LAYER_INFORMATION@@��
�R
"��
"��
"��
"��
"��
�RIsTombstone��
�RIsSupersedeLocal�
�RIsSupersedeTree��
�RClassIsInherited�
�RReserved�J�R_KEY_LAYER_INFORMATION.?AU_KEY_LAYER_INFORMATION@@���R�
�:R�_KEY_SET_LAYER_INFORMATION.?AU_KEY_SET_LAYER_INFORMATION@@��
�R
"��
"��
"��
"��
"��
�RIsTombstone��
�RIsSupersedeLocal�
�RIsSupersedeTree��
�RClassIsInherited�
�RReserved�R�R_KEY_SET_LAYER_INFORMATION.?AU_KEY_SET_LAYER_INFORMATION@@���R�.b�_VIRTUAL_STORAGE_SET_BEHAVIOR_INPUT.?AU_VIRTUAL_STORAGE_SET_BEHAVIOR_INPUT@@
�R*
"Size�
�6BehaviorCode�b�R_VIRTUAL_STORAGE_SET_BEHAVIOR_INPUT.?AU_VIRTUAL_STORAGE_SET_BEHAVIOR_INPUT@@�RU�!
B"� R�_KEY_WRITE_TIME_INFORMATION.?AU_KEY_WRITE_TIME_INFORMATION@@
�R
~LastWriteTimeR�R_KEY_WRITE_TIME_INFORMATION.?AU_KEY_WRITE_TIME_INFORMATION@@�R�
"��
"��
"��
"��
ImageBase
#SizeOfImage��
"ImageFlags���
�RImagePartialMap��
�RImageNotExecutable���
�RImageSigningLevel
�RReserved�N�R_MEMORY_IMAGE_INFORMATION.?AU_MEMORY_IMAGE_INFORMATION@@�RB�
;
�4
t 
�2
�>
;6-"�R
�R2�_PORT_VIEW.?AU_PORT_VIEW@@��
�R�
"Length���
SectionHandle
"SectionOffset
#ViewSize�
 ViewBase�
(ViewRemoteBase���2�R0_PORT_VIEW.?AU_PORT_VIEW@@���R��Z�_FILE_PIPE_ASSIGN_EVENT_BUFFER.?AU_FILE_PIPE_ASSIGN_EVENT_BUFFER@@��.
EventHandle��
"KeyValue�Z�R_FILE_PIPE_ASSIGN_EVENT_BUFFER.?AU_FILE_PIPE_ASSIGN_EVENT_BUFFER@@��SU
)
{(��
S
V
 rgbBlue��
 rgbGreen�
 rgbRed���
 rgbReserved��2StagRGBQUAD.?AUtagRGBQUAD@@��SSzZ�_RTL_DISK_WRITE_CONSTRAINT_INFO.?AU_RTL_DISK_WRITE_CONSTRAINT_INFO@@
0GPolicy���Z	S_RTL_DISK_WRITE_CONSTRAINT_INFO.?AU_RTL_DISK_WRITE_CONSTRAINT_INFO@@
S�7
��=f�_PERFINFO_PAGECOMBINE_ITERATION_STAT.?AU_PERFINFO_PAGECOMBINE_ITERATION_STAT@@��
"��
"��V
SStatType�
SSpare
"PagesScanned�
"PagesCombinedfS_PERFINFO_PAGECOMBINE_ITERATION_STAT.?AU_PERFINFO_PAGECOMBINE_ITERATION_STAT@@��S0@
P,
DJ�_ATOM_BASIC_INFORMATION.?AU_ATOM_BASIC_INFORMATION@@R
!UsageCount���
!Flags
!NameLength���
JName�JS_ATOM_BASIC_INFORMATION.?AU_ATOM_BASIC_INFORMATION@@S�
�B�tagEMRGRADIENTFILL.?AUtagEMRGRADIENTFILL@@���#�j
Pemr��
,rclBounds
"nVer�
"nTri�
" ulMode���
S$Ver��BS4tagEMRGRADIENTFILL.?AUtagEMRGRADIENTFILL@@��SS
;
�
�>
u
D�#S$Stt%S
&S
� ^�_RTL_IMAGE_MITIGATION_HEAP_POLICY.?AU_RTL_IMAGE_MITIGATION_HEAP_POLICY@@"
�TerminateOnHeapErrors^*S_RTL_IMAGE_MITIGATION_HEAP_POLICY.?AU_RTL_IMAGE_MITIGATION_HEAP_POLICY@@+S�=	:TimerSetCoalescableTimer�MaxTimerInfoClassRt-S_TIMER_SET_INFORMATION_CLASS.?AW4_TIMER_SET_INFORMATION_CLASS@@���.S|�F�_RTL_HEAP_WALK_ENTRY.?AU_RTL_HEAP_WALK_ENTRY@@��
0S�
DataAddress��
#DataSize�
 OverheadBytes
 SegmentIndex�
!Flags
KBlock
KSegment��F2S0_RTL_HEAP_WALK_ENTRY.?AU_RTL_HEAP_WALK_ENTRY@@��3S��
9
wF
�=
�W*8S_FP_32.?AU_FP_32@@��9Sg6
�*
�
18

�,
tunused���2@SHMETAFILE__.?AUHMETAFILE__@@ASy'�

&
]-ja  ES
D
�
sA
m->�_LEAP_SECOND_DATA.?AU_LEAP_SECOND_DATA@@
LSB�_ACCESS_DENIED_ACE.?AU_ACCESS_DENIED_ACE@@��:
�Header���
"Mask�
"SidStart�BOS_ACCESS_DENIED_ACE.?AU_ACCESS_DENIED_ACE@@��PSE�
�0V�_RTLP_HEAP_SERIALIZED_MAPPING.?AU_RTLP_HEAP_SERIALIZED_MAPPING@@F
#Allocation���
StackReference���
#Size�VTS_RTLP_HEAP_SERIALIZED_MAPPING.?AU_RTLP_HEAP_SERIALIZED_MAPPING@@US�z
�E
l
�A
�F
HAB�_FILE_REGION_INPUT.?AU_FILE_REGION_INPUT@@��
\SF
FileOffset���
Length���
"DesiredUsage�B^S_FILE_REGION_INPUT.?AU_FILE_REGION_INPUT@@��_SU}^�_FILE_END_OF_FILE_INFORMATION_EX.?AU_FILE_END_OF_FILE_INFORMATION_EX@@��b
~EndOfFile
~PagingFileSizeInMM���
~PagingFileMaxSize
"Flags^bS _FILE_END_OF_FILE_INFORMATION_EX.?AU_FILE_END_OF_FILE_INFORMATION_EX@@��cSU$	
�4
5+fStgS
hS
\C
4b�_FILE_PIPE_EVENT_ENUM_INPUT_BUFFER.?AU_FILE_PIPE_EVENT_ENUM_INPUT_BUFFER@@��
#EventHandle��bmS_FILE_PIPE_EVENT_ENUM_INPUT_BUFFER.?AU_FILE_PIPE_EVENT_ENUM_INPUT_BUFFER@@��nSU�)
�R�_ETW_TIMER_EXPIRATION_EVENT.?AU_ETW_TIMER_EXPIRATION_EVENT@@j
#ExpectedDueTime��
#TimerAddress�
#DeferredRoutine��
 EncodedDelay�RrS _ETW_TIMER_EXPIRATION_EVENT.?AU_ETW_TIMER_EXPIRATION_EVENT@@sS0�>�_RTL_ELEVATION_FLAGS.?AT_RTL_ELEVATION_FLAGS@@��
uS
"��
"��
"��
"��
"Flags
wSElevationEnabled�
xSVirtualizationEnabled
ySInstallerDetectEnabled���
zSReservedBits�>{S_RTL_ELEVATION_FLAGS.?AT_RTL_ELEVATION_FLAGS@@��|S$}�u2~S
S�#�n
 Flags
 EfficiencyClass��
�Reserved�
!GroupCount���
�SGroupMaskJ�S(_PROCESSOR_RELATIONSHIP.?AU_PROCESSOR_RELATIONSHIP@@�S|F�_PROCESS_INFORMATION.?AU_PROCESS_INFORMATION@@��
�SZ
hProcess�
hThread��
"dwProcessId��
"dwThreadId���F�S_PROCESS_INFORMATION.?AU_PROCESS_INFORMATION@@���SmJ�_RTL_RVA_LIST_ITERATOR.?AU_RTL_RVA_LIST_ITERATOR@@��Z
"CurrentRva���
"CurrentRvaIndex��
"CompressedRvaDataOffset��J�S_RTL_RVA_LIST_ITERATOR.?AU_RTL_RVA_LIST_ITERATOR@@���S�r
�2Z�_NTPSS_MEMORY_BULK_INFORMATION.?AU_NTPSS_MEMORY_BULK_INFORMATION@@��R
"QueryFlags���
"NumberOfEntries��
NextValidAddress�Z�S_NTPSS_MEMORY_BULK_INFORMATION.?AU_NTPSS_MEMORY_BULK_INFORMATION@@���S�*
� 
�,
�G
�D
0Cj�_FILE_NETWORK_PHYSICAL_NAME_INFORMATION.?AU_FILE_NETWORK_PHYSICAL_NAME_INFORMATION@@2
"FileNameLength���
JFileName�j�S_FILE_NETWORK_PHYSICAL_NAME_INFORMATION.?AU_FILE_NETWORK_PHYSICAL_NAME_INFORMATION@@�SU�
�2
6=
43"#��
�
X.J�_EVENT_FILTER_LEVEL_KW.?AU_EVENT_FILTER_LEVEL_KW@@��^
#MatchAnyKeyword��
#MatchAllKeyword��
 Level
 FilterIn�J�S_EVENT_FILTER_LEVEL_KW.?AU_EVENT_FILTER_LEVEL_KW@@���S�
!6
N=

q"qt�S
�S
p*
�
�B
�)�&#��
!Size�
!Version��
�ProcessorNumber��
"ContextSwitches��
"HwCountersCount��
VUpdateCount��
#WaitReasonBitMap�
# HardwareCounters�
�&(CycleTime
�S@HwCounters���N
�S�_THREAD_PERFORMANCE_DATA.?AU_THREAD_PERFORMANCE_DATA@@���Sb�
!7
j 
�
�0
r6
�=
�
�5
p7f�_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W@@��

(TransportCredentials�
"Flags
"AuthenticationTarget�
"NumberOfAuthnSchemes�
"AuthnSchemes�
q ServerCertificateSubject�
((ProxyCredentials�
"0NumberOfProxyAuthnSchemes
"8ProxyAuthnSchemesf	�S@_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W.?AU_RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W@@���S�
RN�tagINPUT_INJECTION_VALUE.?AUtagINPUT_INJECTION_VALUE@@��B
!page�
!usage
tvalue
!indexN�StagINPUT_INJECTION_VALUE.?AUtagINPUT_INJECTION_VALUE@@���SLP^�_PERFINFO_MEMORY_NODE_INFORMATION.?AU_PERFINFO_MEMORY_NODE_INFORMATION@@[/#L�>
"PartitionId��
"Count
�SNodeEntry^�ST_PERFINFO_MEMORY_NODE_INFORMATION.?AU_PERFINFO_MEMORY_NODE_INFORMATION@@�S0�j�_FILE_FS_PERSISTENT_VOLUME_INFORMATION.?AU_FILE_FS_PERSISTENT_VOLUME_INFORMATION@@��V
"VolumeFlags��
"FlagMask�
"Version��
"Reserved�j�S_FILE_FS_PERSISTENT_VOLUME_INFORMATION.?AU_FILE_FS_PERSISTENT_VOLUME_INFORMATION@@���SUWn�_PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA.?AU_PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA@@��
�DeviceInstance���
�InterfaceGuid
�Reference
 (Register�
q0SymLink��
"8SymLinkLengthn�S@_PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA.?AU_PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA@@���S�VJ�_FILE_PIPE_INFORMATION.?AU_FILE_PIPE_INFORMATION@@��2
"ReadMode�
"CompletionMode���J�S_FILE_PIPE_INFORMATION.?AU_FILE_PIPE_INFORMATION@@���SUF.�_NT_TIB32.?AU_NT_TIB32@@�
"ExceptionList
"StackBase
"StackLimit���
"SubSystemTib�
"FiberData
"Version��
"ArbitraryUserPointer�
"Self�.�S_NT_TIB32.?AU_NT_TIB32@@�S},Z�_FILE_FS_FULL_SIZE_INFORMATION.?AU_FILE_FS_FULL_SIZE_INFORMATION@@��
�S�
~TotalAllocationUnits�
~CallerAvailableAllocationUnits���
~ActualAvailableAllocationUnits���
"SectorsPerAllocationUnit�
"BytesPerSector���Z�S _FILE_FS_FULL_SIZE_INFORMATION.?AU_FILE_FS_FULL_SIZE_INFORMATION@@���SU
Q7
EG
���
�SF�_NETCONNECTINFOSTRUCT.?AU_NETCONNECTINFOSTRUCT@@n
"cbStructure��
"dwFlags��
"dwSpeed��
"dwDelay��
"dwOptDataSizeF�S_NETCONNECTINFOSTRUCT.?AU_NETCONNECTINFOSTRUCT@@�Sou>�_SE_ACCESS_REPLY.?AU_SE_ACCESS_REPLY@@��
�S
�)
/?
�S�
"Size�
"ResultListCount��
"GrantedAccess
AccessStatus�
�SAccessReason�
�S Privileges���>�S(_SE_ACCESS_REPLY.?AU_SE_ACCESS_REPLY@@���SEptttt�S
�S
�
�^�_LOOKUP_STREAM_FROM_CLUSTER_ENTRY.?AU_LOOKUP_STREAM_FROM_CLUSTER_ENTRY@@f
"OffsetToNext�
"Flags
~Reserved�
~Cluster��
JFileName�^�S _LOOKUP_STREAM_FROM_CLUSTER_ENTRY.?AU_LOOKUP_STREAM_FROM_CLUSTER_ENTRY@@�SU�
.J�_FILE_LEVEL_TRIM_OUTPUT.?AU_FILE_LEVEL_TRIM_OUTPUT@@
�S"
"NumRangesProcessed���J�S_FILE_LEVEL_TRIM_OUTPUT.?AU_FILE_LEVEL_TRIM_OUTPUT@@�SUg
�
S6F�_IMAGE_IMPORT_BY_NAME.?AU_IMAGE_IMPORT_BY_NAME@@"
!Hint�
�Name�FT_IMAGE_IMPORT_BY_NAME.?AU_IMAGE_IMPORT_BY_NAME@@Tf}:�_NETINFOSTRUCT.?AU_NETINFOSTRUCT@@��
"cbStructure��
"dwProviderVersion
"dwStatus�
"dwCharacteristics
#dwHandle�
!wNetType�
"dwPrinters���
" dwDrives�:T(_NETINFOSTRUCT.?AU_NETINFOSTRUCT@@��To�
�F
U!R�_ETW_THREAD_AFFINITY_EVENT.?AU_ETW_THREAD_AFFINITY_EVENT@@��J
#Mask�
"ThreadId�
!Group
!Reserved�RT_ETW_THREAD_AFFINITY_EVENT.?AU_ETW_THREAD_AFFINITY_EVENT@@��
T0%

�/V�tagEMRCREATEDIBPATTERNBRUSHPT.?AUtagEMRCREATEDIBPATTERNBRUSHPT@@�
Pemr��
"ihBrush��
"iUsage���
"offBmi���
"cbBmi
"offBits��
"cbBits���VT tagEMRCREATEDIBPATTERNBRUSHPT.?AUtagEMRCREATEDIBPATTERNBRUSHPT@@TSu
�*
#:
B�_IMAGE_ROM_HEADERS.?AU_IMAGE_ROM_HEADERS@@��6
bFileHeader���
�OptionalHeader���BTL_IMAGE_ROM_HEADERS.?AU_IMAGE_ROM_HEADERS@@��Tf�f�PROCESS_PROTECTION_LEVEL_INFORMATION.?AUPROCESS_PROTECTION_LEVEL_INFORMATION@@��
"ProtectionLevel��fTPROCESS_PROTECTION_LEVEL_INFORMATION.?AUPROCESS_PROTECTION_LEVEL_INFORMATION@@��Tm�
+�qt T
!T
Y;
16b�_ETW_TP_EVENT_TIMER_EXPIRATION_END.?AU_ETW_TP_EVENT_TIMER_EXPIRATION_END@@��
%T*
8Header���
 SubQueue�b'T(_ETW_TP_EVENT_TIMER_EXPIRATION_END.?AU_ETW_TP_EVENT_TIMER_EXPIRATION_END@@��(T0=
�
ER�_ETW_CPU_CACHE_FLUSH_EVENT.?AU_ETW_CPU_CACHE_FLUSH_EVENT@@��
Address��
#Bytes
 Clean
 FullFlush
 Rectangle
 Reserved0
"Reserved1R-T_ETW_CPU_CACHE_FLUSH_EVENT.?AU_ETW_CPU_CACHE_FLUSH_EVENT@@��.T0N

q"
�)Type�
"Size�J1T_PO_WAKE_SOURCE_HEADER.?AU_PO_WAKE_SOURCE_HEADER@@��2TF
N�_IMAGE_RESOURCE_DIRECTORY.?AU_IMAGE_RESOURCE_DIRECTORY@@
4T�
"Characteristics��
"TimeDateStamp
!MajorVersion�
!
MinorVersion�
!NumberOfNamedEntries�
!NumberOfIdEntriesN6T_IMAGE_RESOURCE_DIRECTORY.?AU_IMAGE_RESOURCE_DIRECTORY@@7Tf/
�:�tagEMRROUNDRECT.?AUtagEMRROUNDRECT@@:
Pemr��
,rclBox���
-szlCorner:;T tagEMRROUNDRECT.?AUtagEMRROUNDRECT@@<TS
�">�_NTFS_STATISTICS.?AU_NTFS_STATISTICS@@��
?T~
"LogFileFullExceptions
"OtherExceptions��
"MftReads�
"MftReadBytes�
"MftWrites
"MftWriteBytes

NMftWritesUserLevel���
! MftWritesFlushForLogFileFull�
!"MftWritesLazyWriter��
!$MftWritesUserRequest�
"(Mft2Writes���
",Mft2WriteBytes���

N0Mft2WritesUserLevel��
!8Mft2WritesFlushForLogFileFull
!:Mft2WritesLazyWriter�
!<Mft2WritesUserRequest
"@RootIndexReads���
"DRootIndexReadBytes���
"HRootIndexWrites��
"LRootIndexWriteBytes��
"PBitmapReads��
"TBitmapReadBytes��
"XBitmapWrites�
"\BitmapWriteBytes�
!`BitmapWritesFlushForLogFileFull��
!bBitmapWritesLazyWriter���
!dBitmapWritesUserRequest��
NfBitmapWritesUserLevel
"lMftBitmapReads���
"pMftBitmapReadBytes���
"tMftBitmapWrites��
"xMftBitmapWriteBytes��
!|MftBitmapWritesFlushForLogFileFull���
!~MftBitmapWritesLazyWriter
!�MftBitmapWritesUserRequest���
N�MftBitmapWritesUserLevel�
"�UserIndexReads���
"�UserIndexReadBytes���
"�UserIndexWrites��
"�UserIndexWriteBytes��
"�LogFileReads�
"�LogFileReadBytes�
"�LogFileWrites
"�LogFileWriteBytes
N�Allocate�
"�DiskResourcesExhausted���>.AT�_NTFS_STATISTICS.?AU_NTFS_STATISTICS@@��BTU\F�_TEB_ACTIVE_FRAME_EX.?AU_TEB_ACTIVE_FRAME_EX@@��:
�BasicFrame���
ExtensionIdentifier��FET _TEB_ACTIVE_FRAME_EX.?AU_TEB_ACTIVE_FRAME_EX@@��FT�
x3j�_SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX.?AU_SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX@@��V
 DebuggerAllowed��
 DebuggerEnabled��
 DebuggerPresent��jJT_SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX.?AU_SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX@@��KT��

(
�
>(:�tagGCP_RESULTSW.?AUtagGCP_RESULTSW@@�
"lStructSize��
qlpOutString��
ulpOrder��
tlpDx�
t lpCaretPos���
p(lpClass��
q0lpGlyphs�
u8nGlyphs��
t<nMaxFit��:	RT@tagGCP_RESULTSW.?AUtagGCP_RESULTSW@@STS�

F"qtVT
WTF�tagMENUGETOBJECTINFO.?AUtagMENUGETOBJECTINFO@@��V
"dwFlags��
uuPos�
hmenu
riid�
pvObjFZT tagMENUGETOBJECTINFO.?AUtagMENUGETOBJECTINFO@@��[TLh
F+J�_MESSAGE_RESOURCE_ENTRY.?AU_MESSAGE_RESOURCE_ENTRY@@6
!Length���
!Flags
�Text�J_T_MESSAGE_RESOURCE_ENTRY.?AU_MESSAGE_RESOURCE_ENTRY@@`T$�
MDB�tagMDICREATESTRUCTW.?AUtagMDICREATESTRUCTW@@�
�szClass��
�szTitle��
hOwner���
tx
ty
t cx���
t$cy���
"(style
0lParam���B	dT8tagMDICREATESTRUCTW.?AUtagMDICREATESTRUCTW@@eTL�.
�
 ��
 ��
 ��
 ��
 ��
 ��
 ��
 ��
W<.�_SLIST_HEADER.?AT_SLIST_HEADER@@
qT
"��
"��
"��
"��
"��
"��
"��
"��
"��"#��
�"#��N�_ACTIVATION_CONTEXT_DATA.?AU_ACTIVATION_CONTEXT_DATA@@��
T��
�TF�_ASSEMBLY_STORAGE_MAP.?AU_ASSEMBLY_STORAGE_MAP@@
�T
"��
"��
"��
"��p#�
KS
"��
"��6

 InheritedAddressSpace
 ReadImageFileExecOptions�
 BeingDebugged
 BitField�
hTImageUsesLargePages��
iTIsProtectedProcess���
jTIsImageDynamicallyRelocated��
kTSkipPatchingUser32Forwarders�
lTIsPackagedProcess
mTIsAppContainer���
nTIsProtectedProcessLight��
oTIsLongPathAwareProcess���
�Padding0�
Mutant���
ImageBaseAddress�
pTLdr��
�< ProcessParameters
(SubSystemData
0ProcessHeap��
!8FastPebLock��
rT@AtlThunkSListPtr�
HIFEOKey��
"PCrossProcessFlags
sTPProcessInJob�
tTPProcessInitializing��
uTPProcessUsingVEH��
vTPProcessUsingVCH��
wTPProcessUsingFTH��
xTPProcessPreviouslyThrottled���
yTPProcessCurrentlyThrottled
zTPProcessImagesHotPatched��
{TPReservedBits0
�TPadding1�
XKernelCallbackTable��
XUserSharedInfoPtr
"`SystemReserved���
"dAtlThunkSListPtr32���
hApiSetMap
"pTlsExpansionCounter��
�tPadding2�
xTlsBitmap
��TlsBitmapBits
�ReadOnlySharedMemoryBase�
�SharedData���
��ReadOnlyStaticServerData�
�AnsiCodePageData�
�OemCodePageData��
�UnicodeCaseTableData�
"�NumberOfProcessors���
"�NtGlobalFlag�
~�CriticalSectionTimeout���
#�HeapSegmentReserve���
#�HeapSegmentCommit
#�HeapDeCommitTotalFreeThreshold���
#�HeapDeCommitFreeBlockThreshold���
"�NumberOfHeaps
"�MaximumNumberOfHeaps�
��ProcessHeaps�
�GdiSharedHandleTable�
ProcessStarterHelper�
"GdiDCAttributeList���
�Padding3�
!LoaderLock���
"OSMajorVersion���
"OSMinorVersion���
! OSBuildNumber
!"OSCSDVersion�
"$OSPlatformId�
"(ImageSubsystem���
",ImageSubsystemMajorVersion���
"0ImageSubsystemMinorVersion���
�4Padding4�
#8ActiveProcessAffinityMask
|T@GdiHandleBuffer��
}T0PostProcessInitRoutine���
8TlsExpansionBitmap���
~T@TlsExpansionBitmapBits���
"�SessionId
��Padding5�
��AppCompatFlags���
��AppCompatFlagsUser���
�pShimData
�AppCompatInfo
��CSDVersion���
�T�ActivationContextData
�TProcessAssemblyStorageMap
�TSystemDefaultActivationContextData���
�TSystemAssemblyStorageMap�
#MinimumStackCommit���
\9 SparePointers
�@SpareUlongs��
XWerRegistrationData��
`WerShipAssertPtr�
hpUnused��
ppImageHeaderHash�
"xTracingFlags�
�TxHeapTracingEnabled���
�TxCritSecTracingEnabled
�TxLibLoaderTracingEnabled��
�TxSpareTracingBits�
�|Padding6�
#�CsrServerReadOnlySharedMemoryBase
#�TppWorkerpListLock���
��TppWorkerpList���
��WaitOnAddressHashTable���
�TelemetryCoverageHeader��
"�CloudFileFlags���
"�CloudFileDiagFlags���
p�PlaceholderCompatibilityMode�
�T�PlaceholderCompatibilityModeReserved�
�T�LeapSecondData���
"�LeapSecondFlags��
�T�SixtySecondEnabled���
�T�Reserved�
"�NtGlobalFlag2&s�T�_PEB.?AU_PEB@@���Tm>�tagBITMAPCOREINFO.?AUtagBITMAPCOREINFO@@s3#�2
> bmciHeader���
�TbmciColors���>�TtagBITMAPCOREINFO.?AUtagBITMAPCOREINFO@@�TS�
�&
�M6�_BOOT_OPTIONS.?AU_BOOT_OPTIONS@@
�T�
"Version��
"Length���
"Timeout��
"CurrentBootEntryId���
"NextBootEntryId��
JHeadlessRedirection��6�T_BOOT_OPTIONS.?AU_BOOT_OPTIONS@@�T��
�%^�_PROCESS_LEAP_SECOND_INFORMATION.?AU_PROCESS_LEAP_SECOND_INFORMATION@@��
�T&
"Flags
"Reserved�^�T_PROCESS_LEAP_SECOND_INFORMATION.?AU_PROCESS_LEAP_SECOND_INFORMATION@@���T}

%96�HTOUCHINPUT__.?AUHTOUCHINPUT__@@
�T
tunused���6�THTOUCHINPUT__.?AUHTOUCHINPUT__@@�TL
�S
�T
�/
b#
� �T^�_SYSTEM_ACTIVITY_MODERATION_INFO.?AU_SYSTEM_ACTIVITY_MODERATION_INFO@@��J
�Identifier���
JCModerationState��
�7AppType��^�T_SYSTEM_ACTIVITY_MODERATION_INFO.?AU_SYSTEM_ACTIVITY_MODERATION_INFO@@���T�*
�B
8F�_RTL_HEAP_STACK_QUERY.?AU_RTL_HEAP_STACK_QUERY@@
�T#�T
�T�
"Version��
Process��
�TWriteRoutine�
SerializationContext�
  QueryLevel���
 !FlagsF�T(_RTL_HEAP_STACK_QUERY.?AU_RTL_HEAP_STACK_QUERY@@�T��
85
�
>Jf
"NextEntryOffset��
.ParentFileId�
"FileNameLength���
JFileName�f�T_FILE_LINK_ENTRY_FULL_ID_INFORMATION.?AU_FILE_LINK_ENTRY_FULL_ID_INFORMATION@@���TU�
�,
�TJ�tagINPUT_MESSAGE_SOURCE.?AUtagINPUT_MESSAGE_SOURCE@@.
%deviceType���
�+originId�J�TtagINPUT_MESSAGE_SOURCE.?AUtagINPUT_MESSAGE_SOURCE@@�TL�=Z�_PLUGPLAY_CONTROL_CONFLICT_DATA.?AU_PLUGPLAY_CONTROL_CONFLICT_DATA@@
�T

F
M-�
�DeviceInstance���
�TResourceList�
"ResourceListSize�
�T ConflictBuffer���
"(ConflictBufferSize���
",Flags
0Status���Z�T8_PLUGPLAY_CONTROL_CONFLICT_DATA.?AU_PLUGPLAY_CONTROL_CONFLICT_DATA@@�T��
�GZ�_PROCESS_FOREGROUND_BACKGROUND.?AU_PROCESS_FOREGROUND_BACKGROUND@@��
 Foreground���Z�T_PROCESS_FOREGROUND_BACKGROUND.?AU_PROCESS_FOREGROUND_BACKGROUND@@���Tb>� 
�B
HF
8
>-
�!h?""""�T
�T
�V�_FILE_FS_CONTROL_INFORMATION.?AU_FILE_FS_CONTROL_INFORMATION@@��
�T�
~FreeSpaceStartFiltering��
~FreeSpaceThreshold���
~FreeSpaceStopFiltering���
~DefaultQuotaThreshold
~ DefaultQuotaLimit
"(FileSystemControlFlags���V�T0_FILE_FS_CONTROL_INFORMATION.?AU_FILE_FS_CONTROL_INFORMATION@@���TU�
�1&
qwcLow
!cGlyphs��2�TtagWCRANGE.?AUtagWCRANGE@@���TS�
�>
a
�


"dwExitCode���N�T_EXIT_PROCESS_DEBUG_INFO.?AU_EXIT_PROCESS_DEBUG_INFO@@���T�L
�
�
j�_ACTIVATION_CONTEXT_SECTION_KEYED_DATA.?AU_ACTIVATION_CONTEXT_SECTION_KEYED_DATA@@��
�T2
"Size�
"DataFormatVersion
Data�
"Length���
SectionGlobalData
" SectionGlobalDataLength��
(SectionBase��
"0SectionTotalLength���
�!8ActivationContext
"@AssemblyRosterIndex��
"DFlags
l5HAssemblyMetadata�j�Tp_ACTIVATION_CONTEXT_SECTION_KEYED_DATA.?AU_ACTIVATION_CONTEXT_SECTION_KEYED_DATA@@���T��
�
�1
p"��Tt�T
�T
>
#$
�
z6
�6
m?U
|6
�
�5F�_KEY_NAME_INFORMATION.?AU_KEY_NAME_INFORMATION@@
	U*
"NameLength���
JName�FU_KEY_NAME_INFORMATION.?AU_KEY_NAME_INFORMATION@@U��J�_ETW_CLOCK_TIME_UPDATE.?AU_ETW_CLOCK_TIME_UPDATE@@��2
#InterruptTime
"ClockOwner���JU_ETW_CLOCK_TIME_UPDATE.?AU_ETW_CLOCK_TIME_UPDATE@@��U0

�;
|/R�_RTL_TIME_ZONE_INFORMATION.?AU_RTL_TIME_ZONE_INFORMATION@@��
U�
Bias�
�StandardName�
�7DStandardStart
TStandardBias�
�XDaylightName�
�7�DaylightStart
�DaylightBias�RU�_RTL_TIME_ZONE_INFORMATION.?AU_RTL_TIME_ZONE_INFORMATION@@��U��~N�_RTL_ENCLAVE_LAUNCH_TOKEN.?AU_RTL_ENCLAVE_LAUNCH_TOKEN@@�
�Measurement��
� AuthorId�
.@FamilyId�
.PImageId��
#`EnclaveSize��
"hEnclaveSvn���
"lPolicyFlags��NUp_RTL_ENCLAVE_LAUNCH_TOKEN.?AU_RTL_ENCLAVE_LAUNCH_TOKEN@@U�

�R
�.N�_PROCESS_LOGGING_INFORMATION.?AT_PROCESS_LOGGING_INFORMATION@@��
"��
"��
"��
"��
"��
"Flags
!UEnableReadVmLogging��
"UEnableWriteVmLogging�
#UEnableProcessSuspendResumeLogging
$UEnableThreadSuspendResumeLogging�
%UReserved�N&U_PROCESS_LOGGING_INFORMATION.?AT_PROCESS_LOGGING_INFORMATION@@��'U}Z>�_IMAGE_VXD_HEADER.?AU_IMAGE_VXD_HEADER@@�
!e32_magic
 e32_border���
 e32_worder���
"e32_level
!e32_cpu��
!
e32_os���
"e32_ver��
"e32_mflags���
"e32_mpages���
"e32_startobj�
"e32_eip��
" e32_stackobj�
"$e32_esp��
"(e32_pagesize�
",e32_lastpagesize�
"0e32_fixupsize
"4e32_fixupsum�
"8e32_ldrsize��
"<e32_ldrsum���
"@e32_objtab���
"De32_objcnt���
"He32_objmap���
"Le32_itermap��
"Pe32_rsrctab��
"Te32_rsrccnt��
"Xe32_restab���
"\e32_enttab���
"`e32_dirtab���
"de32_dircnt���
"he32_fpagetab�
"le32_frectab��
"pe32_impmod���
"te32_impmodcnt
"xe32_impproc��
"|e32_pagesum��
"�e32_datapage�
"�e32_preload��
"�e32_nrestab��
"�e32_cbnrestab
"�e32_nressum��
"�e32_autodata�
"�e32_debuginfo
"�e32_debuglen�
"�e32_instpreload��
"�e32_instdemand���
"�e32_heapsize�
/�e32_res3�
"�e32_winresoff
"�e32_winreslen
!�e32_devid
!�e32_ddkver���>3*U�_IMAGE_VXD_HEADER.?AU_IMAGE_VXD_HEADER@@+Uf|N�_WNF_DELIVERY_DESCRIPTOR.?AU_WNF_DELIVERY_DESCRIPTOR@@��
#SubscriptionId���
6-StateName
"ChangeStamp��
"StateDataSize
"EventMask
9-TypeId���
",StateDataOffset��N.U0_WNF_DELIVERY_DESCRIPTOR.?AU_WNF_DELIVERY_DESCRIPTOR@@��/U�6
�*
�"B�_FILE_FULL_DIR_INFO.?AU_FILE_FULL_DIR_INFO@@
3U&
"NextEntryOffset��
"FileIndex
~CreationTime�
~LastAccessTime���
~LastWriteTime
~ ChangeTime���
~(EndOfFile
~0AllocationSize���
"8FileAttributes���
"<FileNameLength���
"@EaSize���
JDFileName�B5UH_FILE_FULL_DIR_INFO.?AU_FILE_FULL_DIR_INFO@@6U<�"
�R
"dwType���
"dwSize���
hDevice��
#wParam���>9UtagRAWINPUTHEADER.?AUtagRAWINPUTHEADER@@:UL:
GD""�=U
>U
R9J�_QUERY_SERVICE_CONFIGW.?AU_QUERY_SERVICE_CONFIGW@@��
AU�
"dwServiceType
"dwStartType��
"dwErrorControl���
qlpBinaryPathName�
qlpLoadOrderGroup�
" dwTagId��
q(lpDependencies���
q0lpServiceStartName���
q8lpDisplayNameJ	CU@_QUERY_SERVICE_CONFIGW.?AU_QUERY_SERVICE_CONFIGW@@��DUm;
'$
�5*
Offset���
#Length���FHU_SCRUB_PARITY_EXTENT.?AU_SCRUB_PARITY_EXTENT@@��IUU't� 
�Bf
 BlendOp��
 BlendFlags���
 SourceConstantAlpha��
 AlphaFormat��:MU_BLENDFUNCTION.?AU_BLENDFUNCTION@@��NUSF
�
�1
>7
�9
�$6
"PrivilegeCount���
1?Privileges���>UU_TOKEN_PRIVILEGES.?AU_TOKEN_PRIVILEGES@@VUE�N�_KLDR_DATA_TABLE_ENTRY32.?AU_KLDR_DATA_TABLE_ENTRY32@@��v

InLoadOrderLinks�
"__Undefined1�
"__Undefined2�
"__Undefined3�
"NonPagedDebugInfo
"DllBase��
"EntryPoint���
" SizeOfImage��
�)$FullDllName��
�),BaseDllName��
"4Flags
!8LoadCount
!:__Undefined5�
"<__Undefined6�
"@CheckSum�
"DTimeDateStampNYUH_KLDR_DATA_TABLE_ENTRY32.?AU_KLDR_DATA_TABLE_ENTRY32@@��ZU�a
�C
�r�_SYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION.?AU_SYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION@@��
^U&
HypervisorSharedUserVa���r`U_SYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION.?AU_SYSTEM_HYPERVISOR_SHARED_PAGE_INFORMATION@@��aU�D
e
�5F�_T2_SET_PARAMETERS_V0.?AU_T2_SET_PARAMETERS_V0@@F
"Version��
"Reserved�
NoWakeTolerance��FfU_T2_SET_PARAMETERS_V0.?AU_T2_SET_PARAMETERS_V0@@gU��N�_RTL_MODULE_EXTENDED_INFO.?AU_RTL_MODULE_EXTENDED_INFO@@^
;#BasicInfo
"ImageSize
!FileNameOffset���
�FullPathName�NjU_RTL_MODULE_EXTENDED_INFO.?AU_RTL_MODULE_EXTENDED_INFO@@kU��f�_SYSTEM_FEATURE_CONFIGURATION_UPDATE.?AU_SYSTEM_FEATURE_CONFIGURATION_UPDATE@@��
mU�# �j
#PreviousChangeStamp��
.+ConfigurationType
"UpdateCount��
oUUpdates��fpU0_SYSTEM_FEATURE_CONFIGURATION_UPDATE.?AU_SYSTEM_FEATURE_CONFIGURATION_UPDATE@@��qU�j
�B�_PERFINFO_IO_TIMER.?AU_PERFINFO_IO_TIMER@@��
tU6
DeviceObject�
RoutineAddress���BvU_PERFINFO_IO_TIMER.?AU_PERFINFO_IO_TIMER@@��wU0.
9Z�_WIM_PROVIDER_ADD_OVERLAY_INPUT.?AU_WIM_PROVIDER_ADD_OVERLAY_INPUT@@b
"WimType��
"WimIndex�
"WimFileNameOffset
"WimFileNameLengthZ{U_WIM_PROVIDER_ADD_OVERLAY_INPUT.?AU_WIM_PROVIDER_ADD_OVERLAY_INPUT@@|UU&"
5
�
�4��U#�U
�U
N
Q;J�_ETW_WNF_EVENT_PUBLISH.?AU_ETW_WNF_EVENT_PUBLISH@@��
�UB
8Header���
~ StateName
"(DataLength���J�U0_ETW_WNF_EVENT_PUBLISH.?AU_ETW_WNF_EVENT_PUBLISH@@���U0{
#2
$N
>-
�8
�+v
"Marker���
!Size�
 Reserved�
 Version��
"Header���
�EPacket���F�U_MESSAGE_TRACE_HEADER.?AU_MESSAGE_TRACE_HEADER@@�U0�
�Z�_TOKEN_APPCONTAINER_INFORMATION.?AU_TOKEN_APPCONTAINER_INFORMATION@@
�U
TokenAppContainerZ�U_TOKEN_APPCONTAINER_INFORMATION.?AU_TOKEN_APPCONTAINER_INFORMATION@@�UE!	
�CZ�_SYSTEM_OBJECTTYPE_INFORMATION.?AU_SYSTEM_OBJECTTYPE_INFORMATION@@��
"NextEntryOffset��
"NumberOfObjects��
"NumberOfHandles��
"TypeIndex
"InvalidAttributes
%GenericMapping���
"$ValidAccessMask��
"(PoolType�
 ,SecurityRequired�
 -WaitableObject���
�0TypeName�Z�U@_SYSTEM_OBJECTTYPE_INFORMATION.?AU_SYSTEM_OBJECTTYPE_INFORMATION@@���U�"	
,T
�R
QT
�+2�_TP_DIRECT.?AU_TP_DIRECT@@��
�U��Uq?�U
�U�
=Task�
# Lock�
�(IoCompletionInformationList��
�U8Callback�
"@NumaNode�
 DIdealProcessor���2�UH_TP_DIRECT.?AU_TP_DIRECT@@���U�
�"Z�_SYSTEM_PROCESS_TRUST_LABEL_ACE.?AU_SYSTEM_PROCESS_TRUST_LABEL_ACE@@
�U:
�Header���
"Mask�
"SidStart�Z�U_SYSTEM_PROCESS_TRUST_LABEL_ACE.?AU_SYSTEM_PROCESS_TRUST_LABEL_ACE@@�UE�:�tagICONMETRICSW.?AUtagICONMETRICSW@@
�Ur
ucbSize���
tiHorzSpacing�
tiVertSpacing�
tiTitleWrap���
�lfFont���:�UltagICONMETRICSW.?AUtagICONMETRICSW@@�UL.2
;
�E:�_CSV_MGMT_LOCK.?AU_CSV_MGMT_LOCK@@��
"Flags:�U_CSV_MGMT_LOCK.?AU_CSV_MGMT_LOCK@@���UU,
�
�#
�&
?
�:�_STARTUPINFOEXA.?AU_STARTUPINFOEXA@@
�U6
a StartupInfo��
?!hlpAttributeList��:�Up_STARTUPINFOEXA.?AU_STARTUPINFOEXA@@�U<1>�_RTL_HANDLE_TABLE.?AU_RTL_HANDLE_TABLE@@
�&�
"MaximumNumberOfHandles���
"SizeOfHandleTableEntry���
"UseHeap��
"TableSize
�UFreeHandles��
�UCommittedHandles�
�U UnCommittedHandles���
�U(MaxReservedHandles���>�U0_RTL_HANDLE_TABLE.?AU_RTL_HANDLE_TABLE@@�U��	
�
P,
=N�_RTL_PHYSICAL_MEMORY_INFO.?AU_RTL_PHYSICAL_MEMORY_INFO@@
�U
rPolicy���N�U_RTL_PHYSICAL_MEMORY_INFO.?AU_RTL_PHYSICAL_MEMORY_INFO@@�U�
oF
�3f�_JOBOBJECT_IO_ATTRIBUTION_INFORMATION.?AU_JOBOBJECT_IO_ATTRIBUTION_INFORMATION@@F
"ControlFlags�
W"ReadStats
W"(WriteStats���f�UH_JOBOBJECT_IO_ATTRIBUTION_INFORMATION.?AU_JOBOBJECT_IO_ATTRIBUTION_INFORMATION@@�U}�
�D
P4b�_IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY@@
�U�
"BeginAddress�
"EndAddress���
"ExceptionHandler�
"HandlerData��
"PrologEndAddress�b�U_IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY.?AU_IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY@@�Uf+
�1>�_KTMOBJECT_CURSOR.?AU_KTMOBJECT_CURSOR@@B
�LastQuery
"ObjectIdCount
�ObjectIds>�U$_KTMOBJECT_CURSOR.?AU_KTMOBJECT_CURSOR@@�U��2�HRAWINPUT__.?AUHRAWINPUT__@@
tunused���2�UHRAWINPUT__.?AUHRAWINPUT__@@�UL�9
�EJ�_WRITE_USN_REASON_INPUT.?AU_WRITE_USN_REASON_INPUT@@.
"Flags
"UsnReasonToWrite�J�U_WRITE_USN_REASON_INPUT.?AU_WRITE_USN_REASON_INPUT@@�UU�B�_PS_STD_HANDLE_INFO.?AU_PS_STD_HANDLE_INFO@@
"��
"��n
"Flags
�UStdHandleState���
�UPseudoHandleMask�
"StdHandleSubsystemType���B�U_PS_STD_HANDLE_INFO.?AU_PS_STD_HANDLE_INFO@@�UbM>�_QUOTA_LIMITS_EX.?AU_QUOTA_LIMITS_EX@@��&
#PagedPoolLimit���
#NonPagedPoolLimit
#MinimumWorkingSetSize
#MaximumWorkingSetSize
# PagefileLimit
~(TimeLimit
#0WorkingSetLimit��
#8Reserved2
#@Reserved3
#HReserved4
"PFlags
F<TCpuRateLimit�>�UX_QUOTA_LIMITS_EX.?AU_QUOTA_LIMITS_EX@@���U}�>�_IMAGE_RELOCATION.?AU_IMAGE_RELOCATION@@b
"VirtualAddress���
"RelocCount���
"SymbolTableIndex�
!Type�>�U
_IMAGE_RELOCATION.?AU_IMAGE_RELOCATION@@�Ufu
�$.�in6_addr.?AUin6_addr@@��B�_WMI_WAIT_MULTIPLE.?AU_WMI_WAIT_MULTIPLE@@��J�_WMI_WAIT_OBJECT_RECORD.?AU_WMI_WAIT_OBJECT_RECORD@@�U#�Z
"ThreadId�
 WaitType�
 ObjectCount��
�UObjectRecord�BV_WMI_WAIT_MULTIPLE.?AU_WMI_WAIT_MULTIPLE@@��V0�	
�*
�1j�_FSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER.?AU_FSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER@@��
~FileOffset���
~ByteCount
�RecallOwnerGuid��
" RecallMetadataBufferSize�
�$RecallMetadataBuffer�jV(_FSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER.?AU_FSCTL_GHOST_FILE_EXTENTS_INPUT_BUFFER@@��VUo*B�_REPARSE_INDEX_KEY.?AU_REPARSE_INDEX_KEY@@��
	V2
"FileReparseTag���
~FileId���BV_REPARSE_INDEX_KEY.?AU_REPARSE_INDEX_KEY@@��VU(&B
Status���
Pointer��
#Information��>V_IO_STATUS_BLOCK.?AU_IO_STATUS_BLOCK@@��VU�
"
�E:�_WMI_IRQ_RECORD.?AU_WMI_IRQ_RECORD@@�
#IRQAffinity��
!IRQGroup�
!
Reserved�
"IRQNum���
"DeviceDescriptionLen�
JDeviceDescription:V_WMI_IRQ_RECORD.?AU_WMI_IRQ_RECORD@@V0�
�,6�_GLYPHMETRICS.?AU_GLYPHMETRICS@@
V~
ugmBlackBoxX��
ugmBlackBoxY��
�gmptGlyphOrigin��
gmCellIncX���
gmCellIncY���6V_GLYPHMETRICS.?AU_GLYPHMETRICS@@VSw
V�_SYSTEM_EXCEPTION_INFORMATION.?AU_SYSTEM_EXCEPTION_INFORMATION@@
V�
"AlignmentFixupCount��
"ExceptionDispatchCount���
"FloatingEmulationCount���
"ByteWordEmulationCount���VV_SYSTEM_EXCEPTION_INFORMATION.?AU_SYSTEM_EXCEPTION_INFORMATION@@ V��
�1

,
�U
UE
�+��
&V>
�Id���
~:Type�
#MaxVersionTested�Z(V _COMPATIBILITY_CONTEXT_ELEMENT.?AU_COMPATIBILITY_CONTEXT_ELEMENT@@��)V��
kE
�7N�_ETW_KQUEUE_ENQUEUE_EVENT.?AU_ETW_KQUEUE_ENQUEUE_EVENT@@&
Entry
"ThreadId�N.V_ETW_KQUEUE_ENQUEUE_EVENT.?AU_ETW_KQUEUE_ENQUEUE_EVENT@@/V0�	
g>Z�_KEY_VIRTUALIZATION_INFORMATION.?AU_KEY_VIRTUALIZATION_INFORMATION@@
2V
"��
"��
"��
"��
"��
"��
4VVirtualizationCandidate��
5VVirtualizationEnabled
6VVirtualTarget
7VVirtualStore�
8VVirtualSource
9VReserved�Z:V_KEY_VIRTUALIZATION_INFORMATION.?AU_KEY_VIRTUALIZATION_INFORMATION@@;V��
k8N�_FILE_FULL_EA_INFORMATION.?AU_FILE_FULL_EA_INFORMATION@@r
"NextEntryOffset��
 Flags
 EaNameLength�
!EaValueLength
�EaName���N?V_FILE_FULL_EA_INFORMATION.?AU_FILE_FULL_EA_INFORMATION@@@VU�
8A
�
b8
�T��
EVZ�_RTL_PROCESS_BACKTRACES_CONTROL.?AU_RTL_PROCESS_BACKTRACES_CONTROL@@
GVf
"ControlCode��
"ControlSize��
�ControlData��
�DatabaseCreate���ZIV _RTL_PROCESS_BACKTRACES_CONTROL.?AU_RTL_PROCESS_BACKTRACES_CONTROL@@JV��R�_REPARSE_POINT_INFORMATION.?AU_REPARSE_POINT_INFORMATION@@��>
!ReparseDataLength
!UnparsedNameLength���RMV_REPARSE_POINT_INFORMATION.?AU_REPARSE_POINT_INFORMATION@@��NV!
�;B�tagEMRCREATEPALETTE.?AUtagEMRCREATEPALETTE@@
QV2
Pemr��
"ihPal
l;lgpl�BSVtagEMRCREATEPALETTE.?AUtagEMRCREATEPALETTE@@TVSF
(D
}
b�_SYSTEM_MEMORY_TOPOLOGY_INFORMATION.?AU_SYSTEM_MEMORY_TOPOLOGY_INFORMATION@@�.# �^
#NumberOfRuns�
"NumberOfNodes
"NumberOfChannels�
ZVRun��b[V0_SYSTEM_MEMORY_TOPOLOGY_INFORMATION.?AU_SYSTEM_MEMORY_TOPOLOGY_INFORMATION@@\VBV�_CM_DISK_GEOMETRY_DEVICE_DATA.?AU_CM_DISK_GEOMETRY_DEVICE_DATA@@n
"BytesPerSector���
"NumberOfCylinders
"SectorsPerTrack��
"NumberOfHeadsV_V_CM_DISK_GEOMETRY_DEVICE_DATA.?AU_CM_DISK_GEOMETRY_DEVICE_DATA@@`V�2N�_SECURITY_SEED_AND_LENGTH.?AU_SECURITY_SEED_AND_LENGTH@@
bV&
 Length���
 Seed�NdV_SECURITY_SEED_AND_LENGTH.?AU_SECURITY_SEED_AND_LENGTH@@eV^�
q
gVV�_IMAGE_RESOURCE_DIR_STRING_U.?AU_IMAGE_RESOURCE_DIR_STRING_U@@��.
!Length���
JNameString���VjV_IMAGE_RESOURCE_DIR_STRING_U.?AU_IMAGE_RESOURCE_DIR_STRING_U@@��kVflB�_EXCEPTION_RECORD32.?AU_EXCEPTION_RECORD32@@"#<�
ExceptionCode
"ExceptionFlags���
"ExceptionRecord��
"ExceptionAddress�
"NumberParameters�
nVExceptionInformation�BoVP_EXCEPTION_RECORD32.?AU_EXCEPTION_RECORD32@@pVh%XF�_PERFINFO_MARK_EVENT.?AU_PERFINFO_MARK_EVENT@@��
rVV
"TranId���
 Level
 AppId
!OpId�
JText�FtV_PERFINFO_MARK_EVENT.?AU_PERFINFO_MARK_EVENT@@��uV0�J�_FILE_END_OF_FILE_INFO.?AU_FILE_END_OF_FILE_INFO@@��
~EndOfFileJxV_FILE_END_OF_FILE_INFO.?AU_FILE_END_OF_FILE_INFO@@��yV<�"
L$
rG:�HGESTUREINFO__.?AUHGESTUREINFO__@@��
}V
tunused���:VHGESTUREINFO__.?AUHGESTUREINFO__@@���VL�<
p"�V�V
2
>�tagMONITORINFOEXW.?AUtagMONITORINFOEXW@@
�Vf
"cbSize���
�rcMonitor
�rcWork���
"$dwFlags��
�(szDevice�>�VhtagMONITORINFOEXW.?AUtagMONITORINFOEXW@@�VL5
�#
,Cj
 Revision�
 SubAuthorityCount
�,IdentifierAuthority��
�SubAuthority�&�V_SID.?AU_SID@@���VEV�_ETW_COVERAGE_SAMPLER_SAMPLE.?AU_ETW_COVERAGE_SAMPLER_SAMPLE@@��*
"ModuleId�
"Offset���V�V_ETW_COVERAGE_SAMPLER_SAMPLE.?AU_ETW_COVERAGE_SAMPLER_SAMPLE@@���VG
�!N�_SYSTEM_WORKINGSET_ENTRY.?AU_SYSTEM_WORKINGSET_ENTRY@@��
�V�
"UniqueProcessId��
"SessionId
#WorkingSetPageCount��
#CommitPageCount��
#PagedPoolPageCount���
#VirtualSizeInPages���
# PrivateWorkingSetPageCount���N�V(_SYSTEM_WORKINGSET_ENTRY.?AU_SYSTEM_WORKINGSET_ENTRY@@���V��n�_FILE_PROCESS_IDS_USING_FILE_INFORMATION.?AU_FILE_PROCESS_IDS_USING_FILE_INFORMATION@@��>
"NumberOfProcessIdsInList�
�#ProcessIdListn�V_FILE_PROCESS_IDS_USING_FILE_INFORMATION.?AU_FILE_PROCESS_IDS_USING_FILE_INFORMATION@@���VUV�_TXFS_CREATE_MINIVERSION_INFO.?AU_TXFS_CREATE_MINIVERSION_INFO@@j
!StructureVersion�
!StructureLength��
"BaseVersion��
!MiniVersion��V�V_TXFS_CREATE_MINIVERSION_INFO.?AU_TXFS_CREATE_MINIVERSION_INFO@@�VUB�_SUPPORTED_OS_INFO.?AU_SUPPORTED_OS_INFO@@��
�V2
!MajorVersion�
!MinorVersion�B�V_SUPPORTED_OS_INFO.?AU_SUPPORTED_OS_INFO@@���V��
"Version��
"Flags
�ResourceFileName�
!ResourceReasonId�
"StringCount��
8 ReasonStrings
�SimpleString�J�V(_COUNTED_REASON_CONTEXT.?AU_COUNTED_REASON_CONTEXT@@�VF
97"
Base�
"Size�>�V_PORT_DATA_ENTRY.?AU_PORT_DATA_ENTRY@@���V�U�#ttt�V
�V
�U
�(
�
�=Z�_PERFINFO_SET_POWER_ACTION_RET.?AU_PERFINFO_SET_POWER_ACTION_RET@@��*
Trigger��
Status���Z�V_PERFINFO_SET_POWER_ACTION_RET.?AU_PERFINFO_SET_POWER_ACTION_RET@@���V0O
�V�_EVENT_EXTENDED_ITEM_INSTANCE.?AU_EVENT_EXTENDED_ITEM_INSTANCE@@N
"InstanceId���
"ParentInstanceId�
�ParentGuid���V�V_EVENT_EXTENDED_ITEM_INSTANCE.?AU_EVENT_EXTENDED_ITEM_INSTANCE@@�V#Z^�_SYSTEM_MANUFACTURING_INFORMATION.?AU_SYSTEM_MANUFACTURING_INFORMATION@@.
"Options��
�ProfileName��^�V_SYSTEM_MANUFACTURING_INFORMATION.?AU_SYSTEM_MANUFACTURING_INFORMATION@@�V�~
�
�>
#Alignment
#Region���
�KHeaderX64.�V_SLIST_HEADER.?AT_SLIST_HEADER@@�V$b
Z
�V
%Z�_PROCESS_MITIGATION_DEP_POLICY.?AU_PROCESS_MITIGATION_DEP_POLICY@@��
�V
"��
"��
"��v
"Flags
�VEnable���
�VDisableAtlThunkEmulation�
�VReservedFlags
 PermanentZ�V_PROCESS_MITIGATION_DEP_POLICY.?AU_PROCESS_MITIGATION_DEP_POLICY@@���V}L*
�KMciStatus
#QuadPart�*�V_MCI_STATS.?AT_MCI_STATS@@���VQ
�5
A
NA
eb�_STREAMS_ASSOCIATE_ID_INPUT_BUFFER.?AU_STREAMS_ASSOCIATE_ID_INPUT_BUFFER@@��&
"Flags
"StreamId�b�V_STREAMS_ASSOCIATE_ID_INPUT_BUFFER.?AU_STREAMS_ASSOCIATE_ID_INPUT_BUFFER@@���VU� Z�_EVENT_EXTENDED_ITEM_EVENT_KEY.?AU_EVENT_EXTENDED_ITEM_EVENT_KEY@@��
#Key��Z�V_EVENT_EXTENDED_ITEM_EVENT_KEY.?AU_EVENT_EXTENDED_ITEM_EVENT_KEY@@���V#~
AR
� �
���
�R�_PERFINFO_MARK_INFORMATION.?AU_PERFINFO_MARK_INFORMATION@@��
9Name�R�V_PERFINFO_MARK_INFORMATION.?AU_PERFINFO_MARK_INFORMATION@@���V0J
�F�tagHARDWAREHOOKSTRUCT.?AUtagHARDWAREHOOKSTRUCT@@
�VN
�hwnd�
umessage��
#wParam���
lParam���F�V tagHARDWAREHOOKSTRUCT.?AUtagHARDWAREHOOKSTRUCT@@�VL�R�_WIM_PROVIDER_EXTERNAL_INFO.?AU_WIM_PROVIDER_EXTERNAL_INFO@@
�VV
"Version��
"Flags
~DataSourceId�
�ResourceHash�R�V(_WIM_PROVIDER_EXTERNAL_INFO.?AU_WIM_PROVIDER_EXTERNAL_INFO@@�VU"�
hFile
lpBaseOfDll��
"dwDebugInfoFileOffset
"nDebugInfoSize���
lpImageName��
! fUnicode�F�V(_LOAD_DLL_DEBUG_INFO.?AU_LOAD_DLL_DEBUG_INFO@@���V�Pf�_ETW_TP_EVENT_WORKER_NUMANODE_SWITCH.?AU_ETW_TP_EVENT_WORKER_NUMANODE_SWITCH@@��
�V�
8Header���
 PoolId���
"(CurrentNode��
",NextNode�
!0CurrentGroup�
!2NextGroup
"4CurrentWorkerCount���
"8NextWorkerCount��f�V@_ETW_TP_EVENT_WORKER_NUMANODE_SWITCH.?AU_ETW_TP_EVENT_WORKER_NUMANODE_SWITCH@@���V0
�5�
#Size�
Z@CallerType���
#ProcessImageNameOffset���
"ProcessId
"ServiceTag���
#DeviceDescriptionOffset��
#DevicePathOffset�
# ReasonOffset�BW(_DIAGNOSTIC_BUFFER.?AU_DIAGNOSTIC_BUFFER@@��WF�B�_TOKEN_LINKED_TOKEN.?AU_TOKEN_LINKED_TOKEN@@
LinkedToken��BW_TOKEN_LINKED_TOKEN.?AU_TOKEN_LINKED_TOKEN@@WE�
�F
>
�'""pt
W
W"q�Tt
W
W
T
S
�WV�_PS_BNO_ISOLATION_PARAMETERS.?AU_PS_BNO_ISOLATION_PARAMETERS@@��
Wf
�IsolationPrefix��
"HandleCount��
Handles��
  IsolationEnabled�VW(_PS_BNO_ISOLATION_PARAMETERS.?AU_PS_BNO_ISOLATION_PARAMETERS@@��Wb�	
�!
�"tW
W
�- �
 W
�3
#	��
#0	��
#9��F
#WDontUse��
$WPageDirectoryBase
%WReserved�F&W_PAGEDIR_INFORMATION.?AU_PAGEDIR_INFORMATION@@��'WB
0

�*W"0+W,W
-W
�,
"��
0W!e/f�_RTL_FEATURE_USAGE_SUBSCRIPTION_TABLE.?AU_RTL_FEATURE_USAGE_SUBSCRIPTION_TABLE@@�#�6
"SubscriptionCount
4WSubscriptionsf5W_RTL_FEATURE_USAGE_SUBSCRIPTION_TABLE.?AU_RTL_FEATURE_USAGE_SUBSCRIPTION_TABLE@@6W��f�_SYSTEM_PROCESS_INFORMATION_EXTENSION.?AU_SYSTEM_PROCESS_INFORMATION_EXTENSION@@
"��
"��
"��
"��
�DiskCounters�
#(ContextSwitches��
"0Flags
9W0HasStrongId��
:W0Classification���
;W0BackgroundActivityModerated��
<W0Spare
"4UserSidOffset
"8PackageFullNameOffset
M(@EnergyValues�
"PAppIdOffset��
#XSharedCommitCharge���
"`JobObjectId��
"dSpareUlong���
#hProcessSequenceNumberf=Wp_SYSTEM_PROCESS_INFORMATION_EXTENSION.?AU_SYSTEM_PROCESS_INFORMATION_EXTENSION@@>W�*Z�_PERFINFO_SAMPLED_PROFILE_CACHE.?AU_PERFINFO_SAMPLED_PROFILE_CACHE@@8*#@�*
"Entries��
AWSample���ZBWH_PERFINFO_SAMPLED_PROFILE_CACHE.?AU_PERFINFO_SAMPLED_PROFILE_CACHE@@CW0�V�_ETW_CRITSEC_EVENT_COLLISION.?AU_ETW_CRITSEC_EVENT_COLLISION@@��j
8Header���
" LockCount
"$SpinCount
(OwningThread�
0Address��VFW8_ETW_CRITSEC_EVENT_COLLISION.?AU_ETW_CRITSEC_EVENT_COLLISION@@��GW0�
G!ea  JW
3/
(MWN�_SERVICE_FAILURE_ACTIONSW.?AU_SERVICE_FAILURE_ACTIONSW@@
OWr
"dwResetPeriod
qlpRebootMsg��
qlpCommand
"cActions�
1 lpsaActions��NQW(_SERVICE_FAILURE_ACTIONSW.?AU_SERVICE_FAILURE_ACTIONSW@@RWm$b�_RTL_DYNAMIC_TIME_ZONE_INFORMATION.?AU_RTL_DYNAMIC_TIME_ZONE_INFORMATION@@��
TWV
Utzi��
r$�TimeZoneKeyName��
 �DynamicDaylightTimeDisabled��bVW�_RTL_DYNAMIC_TIME_ZONE_INFORMATION.?AU_RTL_DYNAMIC_TIME_ZONE_INFORMATION@@��WW��
7<b�_RTL_IMAGE_MITIGATION_SEHOP_POLICY.?AU_RTL_IMAGE_MITIGATION_SEHOP_POLICY@@��
�Sehopb[W_RTL_IMAGE_MITIGATION_SEHOP_POLICY.?AU_RTL_IMAGE_MITIGATION_SEHOP_POLICY@@��\W�	
7/��
^W
_W6
!MethodCount��
`WMethodProperties�^aW_MIDL_INTERFACE_METHOD_PROPERTIES.?AU_MIDL_INTERFACE_METHOD_PROPERTIES@@bW�gZ�_EXTENT_READ_CACHE_INFO_BUFFER.?AU_EXTENT_READ_CACHE_INFO_BUFFER@@��R
~AllocatedCache���
~PopulatedCache���
~InErrorCache�ZeW_EXTENT_READ_CACHE_INFO_BUFFER.?AU_EXTENT_READ_CACHE_INFO_BUFFER@@��fWU�)
<(.iWF�_PERFINFO_DEBUG_EVENT.?AU_PERFINFO_DEBUG_EVENT@@>
"ProcessId
"ThreadId�
�Reason���FlW_PERFINFO_DEBUG_EVENT.?AU_PERFINFO_DEBUG_EVENT@@mW0
�=
@2?2# �2
"NumberOfErrata���
qWErrata���>rW(XSAVE_CPU_ERRATA.?AUXSAVE_CPU_ERRATA@@��sW��:�_SL_KMEM_CACHE.?AU_SL_KMEM_CACHE@@��
uW�G#�
"TotalSize
"SizeOfData���
"SignatureSize
"Flags
"Version��
wWDescriptors��:xW(_SL_KMEM_CACHE.?AU_SL_KMEM_CACHE@@��yW�u
�/
�@
DT��
}W
�(
LEr"
�J�_POWER_SESSION_CONNECT.?AU_POWER_SESSION_CONNECT@@��
�W*
 Connected
 Console��J�W_POWER_SESSION_CONNECT.?AU_POWER_SESSION_CONNECT@@���WF�r�_RTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER.?AU_RTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER@@n
!Version��
!PointerSize��
#Heap�
#TotalCommit��
#TotalReserve�r�W _RTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER.?AU_RTLP_HEAP_STACK_TRACE_SERIALIZATION_HEADER@@�W�q^�_SYSTEM_LEGACY_DRIVER_INFORMATION.?AU_SYSTEM_LEGACY_DRIVER_INFORMATION@@
�W*
"VetoType�
�VetoList�^�W_SYSTEM_LEGACY_DRIVER_INFORMATION.?AU_SYSTEM_LEGACY_DRIVER_INFORMATION@@�W��

�@
-^�_PROCESS_DEVICEMAP_INFORMATION_EX.?AU_PROCESS_DEVICEMAP_INFORMATION_EX@@2
SPSet��
PPQuery
"(Flags^�W0_PROCESS_DEVICEMAP_INFORMATION_EX.?AU_PROCESS_DEVICEMAP_INFORMATION_EX@@�W}#
F�_EVENT_TRACE_LOGFILEW.?AU_EVENT_TRACE_LOGFILEW@@
�W
�W"�W
�W
�;��
�W
EW
1/
�Fb�_FILE_QUERY_ON_DISK_VOL_INFO_BUFFER.?AU_FILE_QUERY_ON_DISK_VOL_INFO_BUFFER@@q#D�B
~DirectoryCount���
~FileCount
!FsFormatMajVersion���
!FsFormatMinVersion���
IFsFormatName�
~0FormatTime���
~8LastUpdateTime���
�W@CopyrightInfo
�W�AbstractInfo�
�W�FormattingImplementationInfo�
�WLastModifyingImplementationInfo��b�WP_FILE_QUERY_ON_DISK_VOL_INFO_BUFFER.?AU_FILE_QUERY_ON_DISK_VOL_INFO_BUFFER@@�WU>
�8
6
�1J�tagLAYERPLANEDESCRIPTOR.?AUtagLAYERPLANEDESCRIPTOR@@.
!nSize
!nVersion�
"dwFlags��
 iPixelType���
 	cColorBits���
 
cRedBits�
 cRedShift
 cGreenBits���
 
cGreenShift��
 cBlueBits
 cBlueShift���
 cAlphaBits���
 cAlphaShift��
 cAccumBits���
 cAccumRedBits
 cAccumGreenBits��
 cAccumBlueBits���
 cAccumAlphaBits��
 cDepthBits���
 cStencilBits�
 cAuxBuffers��
 iLayerPlane��
 bReserved
"crTransparentJ�W tagLAYERPLANEDESCRIPTOR.?AUtagLAYERPLANEDESCRIPTOR@@�WSj�R
�1��
�W�#S�Wtt�W
�W:�IRpcStubBuffer.?AUIRpcStubBuffer@@��6�_IMAGE_SYMBOL.?AU_IMAGE_SYMBOL@@~
"RN
"Value
SectionNumber
!Type�
 StorageClass�
 NumberOfAuxSymbols���6�W_IMAGE_SYMBOL.?AU_IMAGE_SYMBOL@@�Wfe
���
�W
���
�W�W�W"t�W
�W
�BV
 Buffer���
 StaticBuffer�
#Size�
#StaticSize���2�W _RTL_BUFFER.?AU_RTL_BUFFER@@�W�Br
'
N�_FILE_STORAGE_TIER_REGION.?AU_FILE_STORAGE_TIER_REGION@@
�W>
�TierId���
#Offset���
#Length���N�W _FILE_STORAGE_TIER_REGION.?AU_FILE_STORAGE_TIER_REGION@@�WU W#�W�W
X7
\0
7>V�_SECTION_IMAGE_INFORMATION64.?AU_SECTION_IMAGE_INFORMATION64@@��
 ��
 ��
 ��n
#TransferAddress��
"ZeroBits�
#MaximumStackSize�
#CommittedStackSize���
" SubSystemType
!$SubSystemMinorVersion
!&SubSystemMajorVersion
"$SubSystemVersion�
!(MajorOperatingSystemVersion��
!*MinorOperatingSystemVersion��
"(OperatingSystemVersion���
!,ImageCharacteristics�
!.DllCharacteristics���
!0Machine��
 2ImageContainsCode
 3ImageFlags���
�W3ComPlus��
�W3ImageDynamicallyRelocated
�W3Reserved�
"4LoaderFlags��
"8ImageFileSize
"<CheckSum�V�W@_SECTION_IMAGE_INFORMATION64.?AU_SECTION_IMAGE_INFORMATION64@@���WB�
�(
�E:�_TOKEN_CONTROL.?AU_TOKEN_CONTROL@@��
�Wb
TTokenId��
TAuthenticationId�
TModifiedId���
�6TokenSource��:�W(_TOKEN_CONTROL.?AU_TOKEN_CONTROL@@���WE	R�_SYSTEM_POWER_LOGGING_ENTRY.?AU_SYSTEM_POWER_LOGGING_ENTRY@@*
"Reason���
"States���R�W_SYSTEM_POWER_LOGGING_ENTRY.?AU_SYSTEM_POWER_LOGGING_ENTRY@@�WFy
�9
	8
eU
�)
�C
�
��<��Wt�W
�WB�tagUSAGE_PROPERTIES.?AUtagUSAGE_PROPERTIES@@�
!level
!page�
!usage
tlogicalMinimum���
tlogicalMaximum���
!unit�
!exponent�
 count
tphysicalMinimum��
tphysicalMaximum��B
�W tagUSAGE_PROPERTIES.?AUtagUSAGE_PROPERTIES@@�WL;
'
�<
0#

�!
�.j�_CLAIM_SECURITY_ATTRIBUTES_INFORMATION.?AU_CLAIM_SECURITY_ATTRIBUTES_INFORMATION@@��Z
!Version��
!Reserved�
"AttributeCount���
zQAttributej�W_CLAIM_SECURITY_ATTRIBUTES_INFORMATION.?AU_CLAIM_SECURITY_ATTRIBUTES_INFORMATION@@���WE

C
�
�;
�"
�V
�/Z�_IMAGE_BOUND_IMPORT_DESCRIPTOR.?AU_IMAGE_BOUND_IMPORT_DESCRIPTOR@@��
X^
"TimeDateStamp
!OffsetModuleName�
!NumberOfModuleForwarderRefs��ZX_IMAGE_BOUND_IMPORT_DESCRIPTOR.?AU_IMAGE_BOUND_IMPORT_DESCRIPTOR@@��Xf�V�_ENCLAVE_LOAD_DATA_VBS_BASIC.?AU_ENCLAVE_LOAD_DATA_VBS_BASIC@@��
X
"PageType�V	X_ENCLAVE_LOAD_DATA_VBS_BASIC.?AU_ENCLAVE_LOAD_DATA_VBS_BASIC@@��
Xy�
A5.
#ImageBase
mFunctionEntryR
X_UNWIND_HISTORY_TABLE_ENTRY.?AU_UNWIND_HISTORY_TABLE_ENTRY@@X�&4Z�_FILE_PROVIDER_EXTERNAL_INFO_V0.?AU_FILE_PROVIDER_EXTERNAL_INFO_V0@@
X*
"Version��
"AlgorithmZX_FILE_PROVIDER_EXTERNAL_INFO_V0.?AU_FILE_PROVIDER_EXTERNAL_INFO_V0@@XUx"^�_FILE_DISPOSITION_INFORMATION_EX.?AU_FILE_DISPOSITION_INFORMATION_EX@@��
X
"Flags^X_FILE_DISPOSITION_INFORMATION_EX.?AU_FILE_DISPOSITION_INFORMATION_EX@@��XU�
�WJ�_FILE_QUOTA_INFORMATION.?AU_FILE_QUOTA_INFORMATION@@�
"NextEntryOffset��
"SidLength
~ChangeTime���
~QuotaUsed
~QuotaThreshold���
~ QuotaLimit���
(Sid��JX8_FILE_QUOTA_INFORMATION.?AU_FILE_QUOTA_INFORMATION@@XU�N�_PERFINFO_CC_FLUSH_CACHE.?AU_PERFINFO_CC_FLUSH_CACHE@@��
#WorkItemKey��
#FileObjectKey
#Offset���
"Length���
"SharedCacheMapFlags��
" Flags
"$Reserved�N X(_PERFINFO_CC_FLUSH_CACHE.?AU_PERFINFO_CC_FLUSH_CACHE@@��!X0�
�$~D
�*
�=
n0�JOB_OBJECT_NET_RATE_CONTROL_ENABLE���JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTHJOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG�JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS��Zt(XJOB_OBJECT_NET_RATE_CONTROL_FLAGS.?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@�)X})
V.
"VirtualAddress���
"Size�F,X_IMAGE_DATA_DIRECTORY.?AU_IMAGE_DATA_DIRECTORY@@-Xf
Z
�RB�_WOF_EXTERNAL_INFO.?AU_WOF_EXTERNAL_INFO@@��*
"Version��
"Provider�B2X_WOF_EXTERNAL_INFO.?AU_WOF_EXTERNAL_INFO@@��3XU�!
D;
f 
�Fr�t8X
;q"t;X
<Xf�_SYSTEM_BASIC_PERFORMANCE_INFORMATION.?AU_SYSTEM_BASIC_PERFORMANCE_INFORMATION@@
>Xn
#AvailablePages���
#CommittedPages���
#CommitLimit��
#PeakCommitment���f@X _SYSTEM_BASIC_PERFORMANCE_INFORMATION.?AU_SYSTEM_BASIC_PERFORMANCE_INFORMATION@@AX��
�*
�.
;6
�G

�U��
HX
�=�""KX
LX
�?
7)
�Z�DISPLAYCONFIG_TARGET_BASE_TYPE.?AUDISPLAYCONFIG_TARGET_BASE_TYPE@@��6
�header���
�$baseOutputTechnology�ZRXDISPLAYCONFIG_TARGET_BASE_TYPE.?AUDISPLAYCONFIG_TARGET_BASE_TYPE@@��SXS( �
UX
�
2;�M
�@��
ZX
x

z6V�_TRACE_ENABLE_FLAG_EXT_HEADER.?AU_TRACE_ENABLE_FLAG_EXT_HEADER@@&
!Length���
!ItemsV`X_TRACE_ENABLE_FLAG_EXT_HEADER.?AU_TRACE_ENABLE_FLAG_EXT_HEADER@@aX0
G+
XBZ�WIN32_MEMORY_REGION_INFORMATION.?AUWIN32_MEMORY_REGION_INFORMATION@@
"��
"��
"��
"��
"��
"��
"��&
AllocationBase���
"AllocationProtect
"Flags
fXPrivate��
gXMappedDataFile���
hXMappedImage��
iXMappedPageFile���
jXMappedPhysical���
kXDirectMapped�
lXReserved�
#RegionSize���
#CommitSize���ZmX WIN32_MEMORY_REGION_INFORMATION.?AUWIN32_MEMORY_REGION_INFORMATION@@nXQ�
�<
C-
�B�tagAUDIODESCRIPTION.?AUtagAUDIODESCRIPTION@@>
ucbSize���
tEnabled��
"Locale���BtXtagAUDIODESCRIPTION.?AUtagAUDIODESCRIPTION@@uXLq4J�_MESSAGE_RESOURCE_DATA.?AU_MESSAGE_RESOURCE_DATA@@���#�2
"NumberOfBlocks���
xXBlocks���JyX_MESSAGE_RESOURCE_DATA.?AU_MESSAGE_RESOURCE_DATA@@��zX$�
�W
�?
�R�_FILE_ZERO_DATA_INFORMATION.?AU_FILE_ZERO_DATA_INFORMATION@@6
~FileOffset���
~BeyondFinalZero��R�X_FILE_ZERO_DATA_INFORMATION.?AU_FILE_ZERO_DATA_INFORMATION@@�XU�
�
�
�
�S
oB
�4
A
�
�6
�G
fB
?
@W
B
��
�X
�B
c8
'
�W�
qLogFileName��
qLoggerName���
CurrentTime��
"BuffersRead��
"LogFileMode��
"ProcessTraceMode�
�< CurrentEvent�
�9xLogfileHeader
�X�BufferCallback���
"�BufferSize���
"�Filled���
"�EventsLost���
�<�EventCallback
�<�EventRecordCallback��
"�IsKernelTrace
�Context��F�X�_EVENT_TRACE_LOGFILEW.?AU_EVENT_TRACE_LOGFILEW@@�X�k
�U
�;
R'
���_TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION.?AU_TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION@@��
�X
�3
�D2
�XAttributes���
�XOperations����X_TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION.?AU_TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION@@���X^6J�_VCN_RANGE_INPUT_BUFFER.?AU_VCN_RANGE_INPUT_BUFFER@@
�X2
~StartingVcn��
~ClusterCount�J�X_VCN_RANGE_INPUT_BUFFER.?AU_VCN_RANGE_INPUT_BUFFER@@�XU�)�=
W V�_SYSTEM_LOOKASIDE_INFORMATION.?AU_SYSTEM_LOOKASIDE_INFORMATION@@
�X�
!CurrentDepth�
!MaximumDepth�
"TotalAllocates���
"AllocateMisses���
"TotalFrees���
"FreeMisses���
"Type�
"Tag��
"Size�V	�X _SYSTEM_LOOKASIDE_INFORMATION.?AU_SYSTEM_LOOKASIDE_INFORMATION@@�X��

zU
�
#
	,
�&
9N
#StartingFileReferenceNumber��
#EndingFileReferenceNumberF�X_FILE_REFERENCE_RANGE.?AU_FILE_REFERENCE_RANGE@@�XU�
tunused���2�XHINSTANCE__.?AUHINSTANCE__@@�Xy'�
l>��  ��X2�value_entW.?AUvalue_entW@@��
�X^
qve_valuename�
"ve_valuelen��
#ve_valueptr��
"ve_type��2�X value_entW.?AUvalue_entW@@���X��
�N�_PERFINFO_VAD_ROTATE_INFO.?AU_PERFINFO_VAD_ROTATE_INFO@@
�X
"��
"��f
BaseAddress��
#SizeInBytes��
�XDirection
�XSpare
"FlagsN�X_PERFINFO_VAD_ROTATE_INFO.?AU_PERFINFO_VAD_ROTATE_INFO@@�X0e
�.
P,
�-
DT
H*
@.
q4
$
�0
7N�_OPERATION_END_PARAMETERS.?AU_OPERATION_END_PARAMETERS@@
�X>
"Version��
"OperationId��
"FlagsN�X_OPERATION_END_PARAMETERS.?AU_OPERATION_END_PARAMETERS@@�X<��X
M<
A
cT
QD
G
�6q#��
uTotalSize
!NumLanguages�
!MaxNumLanguages��
 bUseUseMachineConfigList�
GRegInfo��
�XLanguages
# ullMask��
u(uConsoleFlag�
�X,Checksum�6	�X@_MUILANGLIST.?AU_MUILANGLIST@@���X�h
1
nG
@
�
'
?
�1
#��
#��
#��
#��
#0	��
#9��
#<��
�XUseDescription���
�XListDescription��
�XCold�
�XPinned���
�XDontUse��
�XPriority�
�XReserved�N�X_MEMORY_FRAME_INFORMATION.?AU_MEMORY_FRAME_INFORMATION@@�XB
w��
�X
7/
�F
!>
�"
�U
d;"Y
y
3^�_ETW_ANTI_STARVATION_BOOST_EVENT.?AU_ETW_ANTI_STARVATION_BOOST_EVENT@@��^
"ThreadId�
!ProcessorIndex���
pOldPriority��
 SpareByte^Y_ETW_ANTI_STARVATION_BOOST_EVENT.?AU_ETW_ANTI_STARVATION_BOOST_EVENT@@��Y0�	
r
&
�M
�
�8
?,
�U
�2V�_ENLISTMENT_BASIC_INFORMATION.?AU_ENLISTMENT_BASIC_INFORMATION@@
YN
�EnlistmentId�
�TransactionId
� ResourceManagerIdVY0_ENLISTMENT_BASIC_INFORMATION.?AU_ENLISTMENT_BASIC_INFORMATION@@Y�UJ�_CSV_IS_OWNED_BY_CSVFS.?AU_CSV_IS_OWNED_BY_CSVFS@@��
 OwnedByCSVFS�JY_CSV_IS_OWNED_BY_CSVFS.?AU_CSV_IS_OWNED_BY_CSVFS@@��YU/J
"UniqueProcessId��
"SessionId
#WorkingSetPageCount��
#CommitPageCount��
#PagedPoolPageCount���
#VirtualSizeInPages���
#PrivateWorkingSetPageCount���
#$StoreSizeInPages�
#,StoredPageCount��
#4CommitDebtInPages
#<SharedCommitInPages��RYD_PERFINFO_WORKINGSET_ENTRY.?AU_PERFINFO_WORKINGSET_ENTRY@@��Y0�&!   ! #Y
�G
�
�8 "Y
#Yv�_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EX.?AU_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EX@@���
~IdleTime�
~KernelTime���
~UserTime�
~DpcTime��
~ InterruptTime
"(InterruptCount���
",Spare0���
~0AvailableTime
~8Spare1���
~@Spare2���v
&YH_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EX.?AU_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION_EX@@��'Y��
m%
c7
�)~~,Y
D.
�6
�<^�DISPLAYCONFIG_TARGET_DEVICE_NAME.?AUDISPLAYCONFIG_TARGET_DEVICE_NAME@@���
�header���
�6flags
�$outputTechnology�
!edidManufactureId
!edidProductCodeId
u connectorInstance
�$monitorFriendlyDeviceName
r$�monitorDevicePath^2Y�DISPLAYCONFIG_TARGET_DEVICE_NAME.?AUDISPLAYCONFIG_TARGET_DEVICE_NAME@@��3YS""5Y
6Y
$F
:��
9Y
.
~CurrentByteOffsetR<Y_FILE_POSITION_INFORMATION.?AU_FILE_POSITION_INFORMATION@@��=YU�
(#��
?Y
W+
�!
�2��
CY
�
Z:
�(
�(
�:
8%
)S
��
=
�5
�>
�
�0
�=��
SY
j+
V
�%
��
XY
�E
�>
G?
=>F
]YImportCallbackRoutine
ImportCallbackParameter��N^Y_LDR_IMPORT_CALLBACK_INFO.?AU_LDR_IMPORT_CALLBACK_INFO@@_Y��
�F�_ALPC_DATA_VIEW_ATTR.?AU_ALPC_DATA_VIEW_ATTR@@��R
"Flags
SectionHandle
ViewBase�
#ViewSize�FcY _ALPC_DATA_VIEW_ATTR.?AU_ALPC_DATA_VIEW_ATTR@@��dY��
 
�=w3
hY
W(
m0
�
�
|$
3
�6
T��
qY
7
fF uY
vY
DE
EZ�_PERFINFO_CC_WORKITEM_COMPLETE.?AU_PERFINFO_CC_WORKITEM_COMPLETE@@��
#WorkItemKey��Z{Y_PERFINFO_CC_WORKITEM_COMPLETE.?AU_PERFINFO_CC_WORKITEM_COMPLETE@@��|Y0�
&


�W
�M
"(
�W
3/
#8
�2
�A.�HACCEL__.?AUHACCEL__@@��
�Y
tunused���.�YHACCEL__.?AUHACCEL__@@���YAF.
*W"0+W"""K8
�Y
�Y
�DN�_RPC_SEC_CONTEXT_KEY_INFO.?AU_RPC_SEC_CONTEXT_KEY_INFO@@R
"EncryptAlgorithm�
"KeySize��
"SignatureAlgorithm���N�Y_RPC_SEC_CONTEXT_KEY_INFO.?AU_RPC_SEC_CONTEXT_KEY_INFO@@�Y���_RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY.?AU_RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY@@��&
�DisableExtensionPoints����Y_RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY.?AU_RTL_IMAGE_MITIGATION_EXTENSION_POINT_DISABLE_POLICY@@���Y�Zb�_PERFINFO_CONTIGUOUS_PAGE_GENERATE.?AU_PERFINFO_CONTIGUOUS_PAGE_GENERATE@@��.
#ThreadId�
#NumberOfBytesb�Y_PERFINFO_CONTIGUOUS_PAGE_GENERATE.?AU_PERFINFO_CONTIGUOUS_PAGE_GENERATE@@���Y0
5!J�_ETW_CANCEL_TIMER_EVENT.?AU_ETW_CANCEL_TIMER_EVENT@@
#TimerAddress�J�Y_ETW_CANCEL_TIMER_EVENT.?AU_ETW_CANCEL_TIMER_EVENT@@�Y0�
x"r��Y
>F
�8
X
`B
F?J�_RPC_SECURITY_QOS_V2_A.?AU_RPC_SECURITY_QOS_V2_A@@��
"Version��
"Capabilities�
"IdentityTracking�
"ImpersonationType
"AdditionalSecurityInfoType���
�IuJ�Y _RPC_SECURITY_QOS_V2_A.?AU_RPC_SECURITY_QOS_V2_A@@���Y
WZ�_WIM_PROVIDER_CONTROL_INTEGRITY.?AU_WIM_PROVIDER_CONTROL_INTEGRITY@@
"ControlCode��Z�Y_WIM_PROVIDER_CONTROL_INTEGRITY.?AU_WIM_PROVIDER_CONTROL_INTEGRITY@@�YUL"
K
�1
�/l-
�4J�_ATOM_TABLE_INFORMATION.?AU_ATOM_TABLE_INFORMATION@@!#�*
"NumberOfAtoms
�YAtomsJ�Y_ATOM_TABLE_INFORMATION.?AU_ATOM_TABLE_INFORMATION@@�Y�
#�YV�_FILE_STANDARD_INFORMATION_EX.?AU_FILE_STANDARD_INFORMATION_EX@@
�Y�
~AllocationSize���
~EndOfFile
"NumberOfLinks
 DeletePending
 Directory
 AlternateStream��
 MetadataAttributeV�Y_FILE_STANDARD_INFORMATION_EX.?AU_FILE_STANDARD_INFORMATION_EX@@�YU�
m!
�
�$f�_SYSTEM_VERIFIER_COUNTERS_INFORMATION.?AU_SYSTEM_VERIFIER_COUNTERS_INFORMATION@@�
�&Legacy���
"�RaiseIrqls���
"�AcquireSpinLocks�
"�SynchronizeExecutions
"�AllocationsWithNoTag�
"�AllocationsFailed
"�AllocationsFailedDeliberately
#�LockedBytes��
#�PeakLockedBytes��
#�MappedLockedBytes
#�PeakMappedLockedBytes
#�MappedIoSpaceBytes���
#�PeakMappedIoSpaceBytes���
#�PagesForMdlBytes�
#�PeakPagesForMdlBytes�
#�ContiguousMemoryBytes
#�PeakContiguousMemoryBytes
"�ExecutePoolTypes�
"�ExecutePageProtections���
"ExecutePageMappings��
"ExecuteWriteSections�
"SectionAlignmentFailures�
"IATInExecutableSection���f�Y_SYSTEM_VERIFIER_COUNTERS_INFORMATION.?AU_SYSTEM_VERIFIER_COUNTERS_INFORMATION@@�Y�y	
�5
�
�
�
�6
v
J
G
�D
i!
?>B�APP_LOCAL_DEVICE_ID.?AUAPP_LOCAL_DEVICE_ID@@
�valueB�Y APP_LOCAL_DEVICE_ID.?AUAPP_LOCAL_DEVICE_ID@@�YA�
T
t2
#
bY
�$
&�_DL_EUI48.?AT_DL_EUI48@@
�Y
V
�SB�_SYSDBG_TRIAGE_DUMP.?AU_SYSDBG_TRIAGE_DUMP@@
�Y�
"Flags
"BugCheckCode�
#BugCheckParam1���
#BugCheckParam2���
#BugCheckParam3���
# BugCheckParam4���
"(ProcessHandles���
",ThreadHandles
0Handles��B	�Y8_SYSDBG_TRIAGE_DUMP.?AU_SYSDBG_TRIAGE_DUMP@@�Y�*
�3�
�Y
�0
!2
�=
E/Z�_FSCTL_QUERY_REGION_INFO_OUTPUT.?AU_FSCTL_QUERY_REGION_INFO_OUTPUT@@
�Y�W# �
"Version��
"Size�
"Flags
"Reserved�
#Alignment
"TotalNumberOfRegions�
"NumberOfRegionsReturned��
�Y Regions��Z�Y@_FSCTL_QUERY_REGION_INFO_OUTPUT.?AU_FSCTL_QUERY_REGION_INFO_OUTPUT@@�YU �B
E
E5rj�_SYSTEM_FIRMWARE_PARTITION_INFORMATION.?AU_SYSTEM_FIRMWARE_PARTITION_INFORMATION@@��
�FirmwarePartitionj�Y_SYSTEM_FIRMWARE_PARTITION_INFORMATION.?AU_SYSTEM_FIRMWARE_PARTITION_INFORMATION@@���Y�e
*�HRGN__.?AUHRGN__@@��
�Y
tunused���*ZHRGN__.?AUHRGN__@@��Zy'�
@B
NS
�
!TttZ
Z
(N"""""8"Z
�=
�(
2
�=
�?
Z
|'
�Data�2Z_HV_DETAILS.?AU_HV_DETAILS@@Z�9
sA"Z"�""Z
ZZ�_MEMORY_COMBINE_INFORMATION_EX2.?AU_MEMORY_COMBINE_INFORMATION_EX2@@
ZV
Handle���
#PagesCombined
"Flags
ProcessHandleZZ _MEMORY_COMBINE_INFORMATION_EX2.?AU_MEMORY_COMBINE_INFORMATION_EX2@@Z��	
 Active���V!Z_ETW_COVERAGE_SAMPLER_STATUS.?AU_ETW_COVERAGE_SAMPLER_STATUS@@��"Z�
)<
�
j=
q6 qqqq"'Z'Z(Z
)Z
�I
ev
�ptlReference�
"nChars���
"offString
"fOptions�
,rcl��
"$offDx2-Z(tagEMRTEXT.?AUtagEMRTEXT@@��.ZSGZ�_FILE_FS_ATTRIBUTE_INFORMATION.?AU_FILE_FS_ATTRIBUTE_INFORMATION@@��
"FileSystemAttributes�
MaximumComponentNameLength���
"FileSystemNameLength�
JFileSystemName���Z1Z_FILE_FS_ATTRIBUTE_INFORMATION.?AU_FILE_FS_ATTRIBUTE_INFORMATION@@��2ZU�
�
�,
���
6Z
�W""9Z
:Z
3%
`9
1:N�_FILESYSTEM_STATISTICS_EX.?AU_FILESYSTEM_STATISTICS_EX@@�
!FileSystemType���
!Version��
"SizeOfCompleteStructure��
#UserFileReads
#UserFileReadBytes
#UserDiskReads
# UserFileWrites���
#(UserFileWriteBytes���
#0UserDiskWrites���
#8MetaDataReads
#@MetaDataReadBytes
#HMetaDataDiskReads
#PMetaDataWrites���
#XMetaDataWriteBytes���
#`MetaDataDiskWrites���N@Zh_FILESYSTEM_STATISTICS_EX.?AU_FILESYSTEM_STATISTICS_EX@@AZU�
�7
{
.��
EZ
�

+
wX
-
nG
�-
�5<-
NZ
�=
=
p
RZ
^1
TZ
� 
kC>�_LDR_FAILURE_DATA.?AU_LDR_FAILURE_DATA@@F
Status���
�ImageName
�DAdditionalInfo���>YZ�_LDR_FAILURE_DATA.?AU_LDR_FAILURE_DATA@@ZZ��
/��
\Z
rD#_Z
`Z
�:
J=
�R
%Y
0
�0
"1
�
(4
�
:
5
�M
�'
�+
I
�V*�HPEN__.?AUHPEN__@@��
sZ
tunused���*uZHPEN__.?AUHPEN__@@��vZA^
�1
�B
0*9%
{Z
'
�0:�_FILE_NAME_INFO.?AU_FILE_NAME_INFO@@
Z2
"FileNameLength���
JFileName�:�Z_FILE_NAME_INFO.?AU_FILE_NAME_INFO@@�Z<�">�_PACKEDEVENTINFO.?AU_PACKEDEVENTINFO@@��"#�J
"ulSize���
"ulNumEventsForLogFile
�ZulOffsets>�Z_PACKEDEVENTINFO.?AU_PACKEDEVENTINFO@@���Zw&|
�4
G%
�?
�;
(�
qUser�
"UserLength���
qDomain���
"DomainLength�
q Password�
"(PasswordLength���
",FlagsR�Z0_SEC_WINNT_AUTH_IDENTITY_W.?AU_SEC_WINNT_AUTH_IDENTITY_W@@���Z{Z�_RTL_USER_PROCESS_INFORMATION64.?AU_RTL_USER_PROCESS_INFORMATION64@@n
"Length���
Process��
Thread���
� ClientId�
�W(ImageInformation�Z�Zh_RTL_USER_PROCESS_INFORMATION64.?AU_RTL_USER_PROCESS_INFORMATION64@@�Z�<
2
�B
:T
�A
�
�4f
"GenericRead��
"GenericWrite�
"GenericExecute���
"GenericAll���>�Z_GENERIC_MAPPING.?AU_GENERIC_MAPPING@@���ZE�
2D
],b
"dwSize���
"iType
"nCount���
"nRgnSize�
�rcBound��:�Z _RGNDATAHEADER.?AU_RGNDATAHEADER@@���ZS�
J�_CM_PCCARD_DEVICE_DATA.?AU_CM_PCCARD_DEVICE_DATA@@��
 Flags
 ErrorCode
!Reserved�
"BusData��
"DeviceId�
"LegacyBaseAddress
.IRQMap���J�Z _CM_PCCARD_DEVICE_DATA.?AU_CM_PCCARD_DEVICE_DATA@@���Z�?
� 
�
W!
ZG

E3Z�_THREAD_POWER_THROTTLING_STATE.?AU_THREAD_POWER_THROTTLING_STATE@@��B
"Version��
"ControlMask��
"StateMaskZ�Z_THREAD_POWER_THROTTLING_STATE.?AU_THREAD_POWER_THROTTLING_STATE@@���Zm^
'+
�S
j+
�5
N#0�b
!MaximumGroupCount
!ActiveGroupCount�
�Reserved�
�ZGroupInfoB�ZH_GROUP_RELATIONSHIP.?AU_GROUP_RELATIONSHIP@@�Z|<�?
P
�U
aA
a
"D
�I
c
1 
t&
g/
K!
�/
O!
�-Z�_PROCESS_CYCLE_TIME_INFORMATION.?AU_PROCESS_CYCLE_TIME_INFORMATION@@
�Z:
#AccumulatedCycles
#CurrentCycleCountZ�Z_PROCESS_CYCLE_TIME_INFORMATION.?AU_PROCESS_CYCLE_TIME_INFORMATION@@�Zb�
WF
�$
�V
�&
�2
N-
S
�'
2GV�_ENCLAVE_INIT_INFO_VBS_BASIC.?AU_ENCLAVE_INIT_INFO_VBS_BASIC@@��
.FamilyId�
.ImageId��
# EnclaveSize��
"(EnclaveSvn���
",Reserved�
0SignatureInfoHandle��
#0Unused���V�Z8_ENCLAVE_INIT_INFO_VBS_BASIC.?AU_ENCLAVE_INIT_INFO_VBS_BASIC@@���Zy�
#
�
}
 U
�D��
�Z
,*&�pK%ppK%puu�Z
�Z
�1
kW
�T
0>
��$
qT
�R
*

5�u#�Z
�Z
p=
�C
F=Z�_FILE_STANDARD_LINK_INFORMATION.?AU_FILE_STANDARD_LINK_INFORMATION@@
�Zr
"NumberOfAccessibleLinks��
"TotalNumberOfLinks���
 DeletePending
 	DirectoryZ�Z_FILE_STANDARD_LINK_INFORMATION.?AU_FILE_STANDARD_LINK_INFORMATION@@�ZU�
Tf�_PROCESS_SECURITY_DOMAIN_INFORMATION.?AU_PROCESS_SECURITY_DOMAIN_INFORMATION@@��
�Z
#SecurityDomain���f�Z_PROCESS_SECURITY_DOMAIN_INFORMATION.?AU_PROCESS_SECURITY_DOMAIN_INFORMATION@@��[bL
W
�9

C
wV
'E�""[
[
�,
�9
@<
H1
l@
w
6�_X86_CONTEXT.?AU_X86_CONTEXT@@��
YV
>![
�0
�
U
w$
�#
<<
"
#+
�=
�'
B7
�#
�$ �q"[
�Z
�<
�
5
6
DB

N
1'
#>
3Wt/[
0[�>6�_WMI_RESOURCE.?AU_WMI_RESOURCE@@�
#AcquireTime��
#HoldTime�
#WaitTime�
"MaxRecursionDepth
"ThreadId�
 Resource�
"(Action���
",ContentionDelta��64[0_WMI_RESOURCE.?AU_WMI_RESOURCE@@5[0y	
I 
6
�U.
Object���
 ObjectType���J:[_WMI_WAIT_OBJECT_RECORD.?AU_WMI_WAIT_OBJECT_RECORD@@;[0�	
�7"pp"t>[
?[
&A[�tB[
C[
XZ
q1"�
L4
�,
\)
M+
�*"�
�,
|9
9
iU
�$
=
c:
�?
�V["W[
X[
5,
v=\[
][
�*
ZW
D�#
Y
g$
X
w=��g[
�Y
�Z
�Wquul[
m[
o
�.
~E2�_COMMCONFIG.?AU_COMMCONFIG@@�
"dwSize���
!wVersion�
!wReserved
�(dcb��
"$dwProviderSubType
"(dwProviderOffset�
",dwProviderSize���
J0wcProviderData���2s[4_COMMCONFIG.?AU_COMMCONFIG@@t[<
�:
P
�.��
x[

�:
X4��
|[
�Y
RC
a 
�F
�<
^
�U
3[
o
�F
�E
�4
~7
�$
� 
�b�_SYSTEM_PREFETCH_PATCH_INFORMATION.?AU_SYSTEM_PREFETCH_PATCH_INFORMATION@@��"
"PrefetchPatchCount���b�[_SYSTEM_PREFETCH_PATCH_INFORMATION.?AU_SYSTEM_PREFETCH_PATCH_INFORMATION@@���[��
�VN�_OBJECT_TYPE_INFORMATION.?AU_OBJECT_TYPE_INFORMATION@@���
�TypeName�
"TotalNumberOfObjects�
"TotalNumberOfHandles�
"TotalPagedPoolUsage��
"TotalNonPagedPoolUsage���
" TotalNamePoolUsage���
"$TotalHandleTableUsage
"(HighWaterNumberOfObjects�
",HighWaterNumberOfHandles�
"0HighWaterPagedPoolUsage��
"4HighWaterNonPagedPoolUsage���
"8HighWaterNamePoolUsage���
"<HighWaterHandleTableUsage
"@InvalidAttributes
%DGenericMapping���
"TValidAccessMask��
 XSecurityRequired�
 YMaintainHandleCount��
 ZTypeIndex
p[ReservedByte�
"\PoolType�
"`DefaultPagedPoolCharge���
"dDefaultNonPagedPoolChargeN�[h_OBJECT_TYPE_INFORMATION.?AU_OBJECT_TYPE_INFORMATION@@���[ 8
�
l
�9
�S
�
� 
&
_:
�2
�1
�Z
J 
> �
�[
�$
K/
�"
�
�D
H
�**�in_addr.?AUin_addr@@
�[
�CMemoryRegionInfo�Vt�[WIN32_MEMORY_INFORMATION_CLASS.?AW4WIN32_MEMORY_INFORMATION_CLASS@@����[Q|
YT*�HRSRC__.?AUHRSRC__@@
tunused���*�[HRSRC__.?AUHRSRC__@@�[y'�
	6
�E
�?
	=
I-
�
�%"�& �[
T6�_RTL_RVA_LIST.?AU_RTL_RVA_LIST@@�
#RvaCount�
"StateBitsPerRva��
 CompressedBuffer�
#CompressedBufferSize�
 " RvaStateBitMap���
"0StateBitValueMap�
8ExtensionBuffer��6�[@_RTL_RVA_LIST.?AU_RTL_RVA_LIST@@�[�N
�#
�C
�[
�9
A@*�HKEY__.?AUHKEY__@@��
tunused���*�[HKEY__.?AUHKEY__@@���[y'�
PE"""�[V�_ETW_DISKIO_FLUSH_BUFFERS_V2.?AU_ETW_DISKIO_FLUSH_BUFFERS_V2@@��b
"DiskNumber���
"IrpFlags�
#HighResResponseTime��
IrpAddr��V�[_ETW_DISKIO_FLUSH_BUFFERS_V2.?AU_ETW_DISKIO_FLUSH_BUFFERS_V2@@���[0�
/"#��b�_EVENT_EXTENDED_ITEM_STACK_TRACE32.?AU_EVENT_EXTENDED_ITEM_STACK_TRACE32@@��*
#MatchId��
�Address��b�[_EVENT_EXTENDED_ITEM_STACK_TRACE32.?AU_EVENT_EXTENDED_ITEM_STACK_TRACE32@@���[#h
�F
V6
ResolutionContext
"RootIndexUsed��[_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL.?AU_ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL@@���[��
/
t:
�(
�*
�U
�-
B
sX
�%
83
�V�_PROCESSOR_POWER_INFORMATION.?AU_PROCESSOR_POWER_INFORMATION@@��
"Number���
"MaxMhz���
"CurrentMhz���
"MhzLimit�
"MaxIdleState�
"CurrentIdleState�V�[_PROCESSOR_POWER_INFORMATION.?AU_PROCESSOR_POWER_INFORMATION@@���[F�
� 
U0
�W
�1
6'
�S
�Vz�JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V3.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V3@@J
MaxIops��
MaxBandwidth�
ReservationIops��
qVolumeName���
" BaseIoSize���
�$ControlFlags�
!(VolumeNameLength�
0CriticalReservationIops��
8ReservationBandwidth�
@CriticalReservationBandwidth�
HMaxTimePercent���
PReservationTimePercent���
XCriticalReservationTimePercent���
`SoftMaxIops��
hSoftMaxBandwidth�
pSoftMaxTimePercent���
xLimitExcessNotifyIops
�LimitExcessNotifyBandwidth���
�LimitExcessNotifyTimePercent�z�[�JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V3.?AUJOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V3@@�[}|
�)
q.
�1
T4
�R
�
�S
�$
i<
�& �[
\
@>J�_RETRIEVAL_POINTER_BASE.?AU_RETRIEVAL_POINTER_BASE@@
	\
~FileAreaOffset���J\_RETRIEVAL_POINTER_BASE.?AU_RETRIEVAL_POINTER_BASE@@\UJ
�Y
-D
 N", \
~@
^1
P
)U
�A"�
�T2
�,Type�
�PolicyId�
cKuB\_IMAGE_POLICY_ENTRY.?AU_IMAGE_POLICY_ENTRY@@\$m&
?
�$
XU
M)^�_RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR.?AU_RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR@@.
"BufferSize���
pBuffer���^"\_RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR.?AU_RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR@@#\�
�)%\&\
'\
\ 
!0
�9
�@
V7
�D
�V
H
�U
�=��
2\
E'��t5\
6\
�G�T
�
!
�U
2 =\

z(
�G
�!
+H
�<
=?
� 
dW
�%
t�
!Signature
!Flags
"Size�
!Machine��
!
Characteristics��
"TimeDateStamp
"CheckSum�
"SizeOfImage��
#ImageBaseF	J\ _NON_PAGED_DEBUG_INFO.?AU_NON_PAGED_DEBUG_INFO@@K\f6	
Y
�0
�
=5
�'
�V
�R
|@
�3
;H
�%
R
�'
 9
�A
�:^
!Length���
!Flags
"ReparseDataSize��
"ReparseDataOffset.]\_Reparse.?AU_Reparse@@��^\U�
%"a\
b\
0*
�(
�E
�$
�.�"#h\i\
j\
�3
�%
X
X
`<
�Z
/%
j,
�
`Z
.
E
N>
�0
�3�
�Id���
�Name�
�Description��
#Flags
#ProvisionedCapacity��
� MediaType
u$ClassB{\(_FILE_STORAGE_TIER.?AU_FILE_STORAGE_TIER@@��|\U�
�2
�S
:-
�[
zY�$
�<
�A
m)
e-
�!R�DISPLAYCONFIG_ADAPTER_NAME.?AUDISPLAYCONFIG_ADAPTER_NAME@@��2
�header���
r$adapterDevicePathR�\DISPLAYCONFIG_ADAPTER_NAME.?AUDISPLAYCONFIG_ADAPTER_NAME@@���\S"
�/
-V
E
�[
W?
iV
�Y
`"
'
`

�_Z
�4
n.
�W>p!�\
�"
�
U
�
v4
8%
�
�&�"�t�\
�\
$%
�<
�ty6
�\
S
k
��
�\
�
V'
U;
>9
�6
�
|*
�A
XR
X
�<11�\
�5
!
B(
�/
j
9.
#G
?2�
 Processor
!Family���
!Model
!Stepping�
!ExtendedModel
"ExtendedFamily���
#MicrocodeVersion�
"Reserved�:�\ XSAVE_CPU_INFO.?AUXSAVE_CPU_INFO@@���\���tt�\
�\
S
t�\
�\
>F��
�\
?Z
p
�
�4
I)
�Ra\
I
�S
U:
�
}
H
�'�q?h\�\
�\
aG�
�\
�
n;
\
�/
R
�
!7B�ANON_OBJECT_HEADER.?AUANON_OBJECT_HEADER@@��
!Sig1�
!Sig2�
!Version��
!Machine��
"TimeDateStamp
�ClassID��
"SizeOfData���B�\ ANON_OBJECT_HEADER.?AUANON_OBJECT_HEADER@@���\f�
�S

,pqt�\
�\
�@
JCj�JOBOBJECT_NET_RATE_CONTROL_INFORMATION.?AUJOBOBJECT_NET_RATE_CONTROL_INFORMATION@@��F
#MaxBandwidth�
)XControlFlags�
 DscpTag��j�\JOBOBJECT_NET_RATE_CONTROL_INFORMATION.?AUJOBOBJECT_NET_RATE_CONTROL_INFORMATION@@���\}<
}0
H
�R
�&
:(
�
�[Z
!Length���
!Flags
"EaSize���
"EaInformationOffset��"]_Ea.?AU_Ea@@]U�
�$p�qt	]

]
HE
�;
-
a
�(
�G�#��]
�4
y&
�
�(
�
k0
N;
lS
8<
�S
!A

.
�
�/
�
�7��
#]
�<��_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC.?AU_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC@@��6
#Size�
"Format���
�!Frame�'](_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC.?AU_RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC@@��(]�y

���
*]
1
�@
�\
�#
0
�D
�#
�$
�'
_+
�,
>:"�
8]R
uwidth
uheight���
�*pixelFormat��
�position�N:]DISPLAYCONFIG_SOURCE_MODE.?AUDISPLAYCONFIG_SOURCE_MODE@@;]S[
�S
�W��
>]
�
B-
�(
�I


q
w4
V9
+$
x
�7
�@
w
�Y
|G
1X
X��
Q]
�<">
�&
�/
/
�4
�
kB
H,
 F
%3
^T
8W
�
1C*	~~~~"""	b]
c]
�Y

�?
!7
�/
�M
�B
�%
�0��
m]
&
�'
�C
�
�-
!�"u]
v]
�E
+!� 
J7
�$
�Y
w7
�
Y(
9-
LV
l5
�1
�C
�>�E
	C
�
=
�U
�%
f+qt�]
�]
SS
r>
�<
4
�
�T
�M
�(
�
''
�1
J
&]
/-
s^�_SYSTEM_BOOT_GRAPHICS_INFORMATION.?AU_SYSTEM_BOOT_GRAPHICS_INFORMATION@@
�]�
~FrameBuffer��
"Width
"Height���
"PixelStride��
"Flags
�Format���
"DisplayRotation��^�] _SYSTEM_BOOT_GRAPHICS_INFORMATION.?AU_SYSTEM_BOOT_GRAPHICS_INFORMATION@@�]�e
�0
<
�
h;
�C
�'
�A
{(
J
�
Z@
�*
�[
�A
/
�
�W�
�]
�"
;(
�3
�6
D*
{'
�D
�"
!,
�C��
�]
>V

|!
i-
;@
T
7@
B9
-U
�)
),
�0~~p~�]
u*
37
>
|
�M
aS
mV

D
�72�HPALETTE__.?AUHPALETTE__@@��
�]
tunused���2�]HPALETTE__.?AUHPALETTE__@@���]A]
�V�$�=
(
yCqq�]
�]
: 
F
:
j%
@#
�R
�
C>�_IMAGE_OS2_HEADER.?AU_IMAGE_OS2_HEADER@@
�]��
�]�
!ne_magic�
pne_ver���
pne_rev���
!ne_enttab
!ne_cbenttab��
ne_crc���
!ne_flags�
!ne_autodata��
!ne_heap��
!ne_stack�
ne_csip��
ne_sssp��
!ne_cseg��
!ne_cmod��
! ne_cbnrestab�
!"ne_segtab
!$ne_rsrctab���
!&ne_restab
!(ne_modtab
!*ne_imptab
,ne_nrestab���
!0ne_cmovent���
!2ne_align�
!4ne_cres��
 6ne_exetyp
 7ne_flagsothers���
!8ne_pretthunks
!:ne_psegrefbytes��
!<ne_swaparea��
!>ne_expver>�]@_IMAGE_OS2_HEADER.?AU_IMAGE_OS2_HEADER@@�]f[""qt�]
�]
5
j9
� "�]�]
�]("((^
^��&


�B
r[
,>
b$
-)��
	^
�7
q^#
^
^
hY
�[
�F
g
�
�
�U
2
?
�
#
�
�?
yA
�G
�S
�/
g8
"
�
�'��
$^
"&^
�8��
(^
�Y
�-
�@��
,^
gC
-
qS
�Y
"-
"��
3^
�
:%
�!
[ 
!
0Z
�@
�
�#
_X
� 
3
"H
�'
G!
;
�;
�
�

�B
_R
�(
�6

�F
~R
�V
�,
�"�$
S^
�U
-
�
�[
X^�
Z^
�5
,3"Z
�PathSourceSize���
,DesktopImageRegion���
,DesktopImageClip�^_^(DISPLAYCONFIG_DESKTOP_IMAGE_INFO.?AUDISPLAYCONFIG_DESKTOP_IMAGE_INFO@@��`^Sh
� 
�#"�! d^
e^
CC
� 
/~%
j^
q$
�
z
�W
�F
BJ
!B
h
X
*G
�+
�,
�]
T
�6
^V
�
�I
F"pqpt^
�^
�<
.
`).
uNumerator
uDenominator��J�^DISPLAYCONFIG_RATIONAL.?AUDISPLAYCONFIG_RATIONAL@@���^S�

�
�F
�
p.
9
e,
8%
�
�S
���
�^
�=
�<�$
?
�[
Q*
s'
IT
?&N�ANON_OBJECT_HEADER_BIGOBJ.?AUANON_OBJECT_HEADER_BIGOBJ@@*
!Sig1�
!Sig2�
!Version��
!Machine��
"TimeDateStamp
�ClassID��
"SizeOfData���
" Flags
"$MetaDataSize�
"(MetaDataOffset���
",NumberOfSections�
"0PointerToSymbolTable�
"4NumberOfSymbols��N
�^8ANON_OBJECT_HEADER_BIGOBJ.?AUANON_OBJECT_HEADER_BIGOBJ@@�^f�
%
�
�7
�=��
�^
�"B�0(
���
���
���
����-MT -c -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -Zo -std:c++17 -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973 -Brepro��
�^>�^ -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X�^�^�^�^�^����,����{�j�n�M���'��Aі�f��)Y�d���)Y�d���K�f(��e"��ą����1\���x!�ǽ
LWH�p'�   @comp.idk��@feat.00�I���.debug$S��e.rdata�ہee.rdata�w�e~.rdatah�Q�e�.rdatax��e�.rdatax��e�.rdata1�,e�.debug$S4e.debug$S	@e.debug$S
8e.debug$P|qe.chks64he
__@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUzwnrmUdnrUvevmghUzwezkrUlyquivUznwGEUkivxlnkOlyq@elfapi??_C@_13FPGAJAPJ@?$AA?2@??_C@_15MNCACJLI@?$AA?2?$AA?1@??_C@_13CGOKJPIL@?$AA?1@RtlNtPathSeperatorStringRtlAlternateDosPathSeperatorStringRtlDosPathSeperatorsString
Youez - 2016 - github.com/yon3zu
LinuXploit