| Server IP : 209.209.40.120 / Your IP : 216.73.217.112 Web Server : Microsoft-IIS/10.0 System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586 User : NEWWWW$ ( 0) PHP Version : 8.3.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Program Files (x86)/Windows Kits/10/Lib/10.0.19041.0/um/x64/ |
Upload File : |
!<arch>
/ 1606894328 0 413 `
� � � � � � � � �� �� �� ��??_C@_13CGOKJPIL@?$AA?1@ ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ NtProcessStartupW NtProcessStartupW_AfterSecurityCookieInitialized RtlAlternateDosPathSeperatorString RtlDosPathSeperatorsString RtlNtPathSeperatorString NtProcessStartup NtProcessStartup_AfterSecurityCookieInitialized NtRecordEnvironmentPointers NtStartupCountEnvironmentStrings
/ 1606894328 0 405 `
� �� �� ??_C@_13CGOKJPIL@?$AA?1@ ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ NtProcessStartup NtProcessStartupW NtProcessStartupW_AfterSecurityCookieInitialized NtProcessStartup_AfterSecurityCookieInitialized NtRecordEnvironmentPointers NtStartupCountEnvironmentStrings RtlAlternateDosPathSeperatorString RtlDosPathSeperatorsString RtlNtPathSeperatorString
// 1606894328 0 177 `
d:\os\obj\amd64fre\minkernel\urtl\objfre\amd64\startupw.obj d:\os\obj\amd64fre\minkernel\urtl\objfre\amd64\startup.obj d:\os\obj\amd64fre\minkernel\urtl\objfre\amd64\helper.obj
/0 1606894328 100666 48918 `
d� �B�_� C .debug$S �1 \ @ B.rdata P5 @0@.rdata T5 @0@.rdata Z5 @0@.rdata ^5 n5 @@@.rdata x5 �5 @@@.rdata �5 �5 @@@.text$mn �5 �5 0`.debug$S �5 �6
@B.text$mn � ;7 �9
0`.debug$S � !: A R @B.xdata 5D @0@.pdata =D ID @0@.xdata gD @0@.pdata D �D @0@.debug$S 4 �D �D @B.debug$S @ �D 1E @B.debug$S 8 EE }E @B.debug$T |n �E @ B.chks64 �
�
.drectve ��
� � B d:\os\obj\amd64fre\minkernel\urtl\objfre\amd64\startupw.obj : < � � k k
Microsoft (R) Optimizing Compiler � � & � JobObjectReserved2Information 2 � SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED & � JobObjectReserved9Information � � ! � JobObjectWakeInformation ( � JobObjectClearPeakJobMemoryUsed ' � ) JobObjectReserved19Information 5 � JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME * � ' JobObjectServerSiloUserSharedData ' � ( JobObjectReserved18Information � PsMaxStdHandleStates � PsMaxWakeReasons ' � * JobObjectReserved20Information ' � % JobObjectReserved15Information & � , JobObjectContainerTelemetryId � PsNeverDuplicate % � TP_CALLBACK_PRIORITY_INVALID # � JobObjectFreezeInformation ' � . JobObjectReserved24Information 2 � FeatureConfigurationPriorityImageOverride , � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS ' � JobObjectReserved12Information ( � ) JobObjectServerSiloRunningState - � SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � JobObjectSharedCommit & � JobObjectReserved3Information & � ( JobObjectServerSiloInitialize � PsProtectedSignerMax + � SystemProcessClassificationMaximum # � % JobObjectSiloRootDirectory ' � ' JobObjectReserved17Information � * JobObjectIoAttribution ' � JobObjectReserved11Information & � JobObjectReserved4Information � PowerUserMaximum ! � MemoryContiguityStateMax � * ( � JobObjectMemoryUsageInformation � � * � JobObjectIoRateControlInformation & � JobObjectReserved8Information ' � , JobObjectReserved22Information $ � TP_CALLBACK_PRIORITY_NORMAL * � JOB_OBJECT_IO_RATE_CONTROL_ENABLE ' � - JobObjectReserved23Information � PsAttributeMax ' � JobObjectReserved13Information % � � SystemPoolZeroingInformation & � JobObjectReserved1Information & � JobObjectReserved6Information � PsCreateInitialState 0 � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS 9 � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JobObjectClearEvent & � JobObjectReserved5Information & � JobObjectReserved7Information 2 � JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH ) � JobObjectInterferenceInformation , � & JobObjectServerSiloBasicInformation � JobObjectContainerId 0 � / JobObjectThreadImpersonationInformation � - JobObjectSiloSystemRoot ' � JobObjectCycleTimeNotification ' � JobObjectReserved10Information + � JOB_OBJECT_NET_RATE_CONTROL_ENABLE , � + JobObjectMemoryPartitionInformation A � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � KCONTINUE_UNWIND # � VRF_TRIAGE_CONTEXT_DEFAULT / � JobObjectExtendedAccountingInformation , � SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN % � . JobObjectEnergyTrackingState ' � + JobObjectReserved21Information � COR_VERSION_MAJOR_V2 ' � / JobObjectReserved25Information ' � & JobObjectReserved16Information ' � JobObjectReserved14Information 3 � SystemFeatureConfigurationSectionTypeCount ' � JobObjectBackgroundInformation 0 � JobObjectTimerVirtualizationInformation � PsProtectedTypeMax - � JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG / � JobObjectSchedulingRankBiasInformation / � SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE
q PPVOID � _TP_CALLBACK_PRIORITY � _JOBOBJECTINFOCLASS _UNICODE_STRING � PPEB � PSTRING � _PS_ATTRIBUTE_NUM � _PS_WAKE_REASON � _SYSTEM_INFORMATION_CLASS ( � JOB_OBJECT_NET_RATE_CONTROL_FLAGS LONG_PTR
CURDIR # PUINT_PTR # ULONG_PTR
STRING p PCHAR F _LARGE_INTEGER ! wchar_t " � SE_WS_APPX_SIGNATURE_ORIGIN _LIST_ENTRY UNICODE_STRING " � PRTL_CRITICAL_SECTION_DEBUG " ' _RTL_CRITICAL_SECTION_DEBUG ' � JOB_OBJECT_IO_RATE_CONTROL_FLAGS � _USER_ACTIVITY_PRESENCE � PUNICODE_STRING PLONG PBOOLEAN � _KCONTINUE_TYPE 5 _SLIST_HEADER
! wint_t LONG _PEB_LDR_DATA P _ULARGE_INTEGER � PLARGE_INTEGER # ULONG64 RTL_DRIVE_LETTER_CURDIR
# SIZE_T # � ReplacesCorHdrNumericDefines q PWCH $ � PPS_POST_PROCESS_INIT_ROUTINE
PSHORT � _VRF_TRIAGE_CONTEXT " TP_VERSION u PUINT32 p CCHAR � PANSI_STRING * � _RTL_FEATURE_CONFIGURATION_PRIORITY P ULARGE_INTEGER � TP_CALLBACK_PRIORITY " LOGICAL 1 � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE c _PEB
t INT � _PS_STD_HANDLE_STATE UCHAR _RTL_DRIVE_LETTER_CURDIR " LCID BOOLEAN
! USHORT PVOID q WCHAR PSE_SIGNING_LEVEL % � _SYSTEM_PROCESS_CLASSIFICATION
LONG64 # " PRTL_USER_PROCESS_PARAMETERS " ULONG � PPEB_LDR_DATA
q PWCHAR * _RTL_CRITICAL_SECTION q PWSTR � PS_CREATE_STATE # ! _RTL_USER_PROCESS_PARAMETERS � _PS_PROTECTED_SIGNER # UINT_PTR NTSTATUS _CURDIR F LARGE_INTEGER � _PS_PROTECTED_TYPE
HANDLE # ULONGLONG
" PULONG
# size_t # PULONG64 LONGLONG - � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE PLIST_ENTRY SHORT PLONG64 INT_PTR LIST_ENTRY
PUCHAR p CHAR _STRING � ` �0:s�0pV�eҐ����lj� �6�Ȗ0 � $ ƨ��T ��� Ȓ� ���)n���y��aP`I I f߹��R�|��ڕ����G/S�6�<��� m o�&���-�},��'�w��_�BIS;�§g
�7; � �>� j�t�&~8^�B��J2�/Ru�~ � �[�-%`4�����o2�>�'�q.qg�Gn��) � �� ��/�5h��d�����,�]0�f& (� `���[4dx���By%�Г��� z�&K�-�pW ( ���{�$��N�� ��~p��o7��T�1*���. L G�*㥬2����M���}�b�R�̫�)�� s �G�/�m��hB-����-q�b}��Y�~Y � ����̫��2r�WQ��K��TI�Up��/�z � ��� [r�"��衷� �R ��ҹ�� �� � ����w�^��ȯ�
?���;��f���B(H� �[��=�
Tǜ�
]����>d��Wƫ��� 1 3E �� �r`QQ���e��e����`z� i T 4o��g-+ 2ܪܚosm�E����a��^�R�=� { E~/EX"�-�p-���i����`��.�z#�0� � �J��W6���,�)J dɫ7�%eڭ�� � ;!E���q�G{�>|;:���f���5�gn�� � J�&�ڹCι�ſ�7{ pF ��$�� ���8 )G�xS�l�F,�yV���6�}�����ָ@��j / �۠�Җ �{���� ���n"]�,$J�� _ n*�\T�uM�fk �<�t���L�ee�#a�� � T�@�
2��U��p�|��� ��k����[p*& � G�Qy�( �_ f �ټ�p .�ڤ���~�� � ��'��,��@H4sS�k�!Ȫ:ݬ���"fE) � N�Q� 4O&K�� +l;x�2�%��ݮ�pZ,� ���O.@=4L�C�ي�m�;_�iM %q� 1 �4Y����|��B�N��m#��*�sE��Bp�� W ����$�3�3EJ�I �h@�oa`�� p ��a�;.+�!6�%ri� E�Q�p�u�G�g�.� � �t�T�`���Niu�$�I8FQ@e�}&f�S��E�� � �kE9OӨ��.I F��SY9G&��.��?堳( � ����8�����L�v���X m*����I/i�� � �D�rlBsm�DE�cQ����}W� �w��±� ��������0TcIC4�U��m��sF'<�Z D S���M�"��S��U}h�g�c�q�c5w�k���8 i �A+��z'����k��mD�XL���t � ��%|�#o5a�0i�^�{�ơz[ l���HR � �*�����ou��M+K�Ŋ�;��qh� � y3�
6$��g涧i0����
�E�g$E��$ �:B{m�n=�g���\c*�ӏ���Z" ��Y $ W|A
w�O�?�pU]~-�2�!�\O����5� K �-h/� S��~����
a!�1k��j n ��3)�J�$��{�.
w ~�/�l���M� � D�n��q���9��a�_�G���H�E���-W��xZ � ��#YV^b%�}��/'p�O�Gʈ?��z��� � I�(��+�S�u��]?�z�9NP�3Q�MJ�B �
���mcJAt�qe�el��]�;�L�� : j�v��b~�ۥ�)0M�/�띡e��� \� @Z j ����ɵ\|5 ��Z��b���Q 3 ���kb���B � @ȍl2��X�1��}���e��C��>�ȢF)� � �����y�Q+���{"WÌ�R~̟���H���? � ����FAP�icû����;�|" B7�㙨^ �9 B-<y�� ��9P/�M�#��_��<�� φ6R^ + 3*�ָ䊀��DJ՝�� ��q/�=M�f�t� Q � �ý3NP� ��eb�nM `I����<�F y ��*
Y,�}��Ƴ�������X���� � *�7�C
TQ�� ?R����֪¸��FHc�� � } ��da�nGۛ'�*���M���G�]����" � ���� 2gj�,���/���c���2| �6څ �g�b�K��^ؒ���hv��u�\#��̖� : �U��Q�u"��w�!� �fB"���`ru^���9 d -�?bF��,U1�.Er;H�Ԡ`p I��4M � ܇h���6
���d3�����:iW�jG^��t� � ��z!��<y5�1�aF�=)�;ђ�)Y bčW � ��܆�f؇��"xU. @����;2}X��}H
� F9�6K�v�/�|S��]t�RF�W2��I '
��V��� Ť��ڃ "��?�f�R�s�[Y�%=� Q
�$�����+`�.?�ʿA��=Gݗ��'Lm x
@�J���ۊ�މ
��H��s��P��˓YH� �
H�}ӰWU����f1O_�d ��Hf�
��N�nZ �
p
y��f�9����|= 6���4 ��n`�RM� /��J��5\�Z��_g4�4�%]�L�� ��3h� # X�Y
��m�kּg�L��~�g���x�5�
T k�3 �G�� ��F2#�)� ER�O|��v\;� y *s�4��bc�v�7���h\Sř�_s� �4�h� � �p[F����ll�<��A�=��l}�K���R� � F?�Z#��.Wi�/0��=�� �9*W�-� � h҄� �3(/�e��f��`�z&�e$P��MD�
&��8�i_u& ��>�-Z%�f�>R69ϓ5�%� . m����Wc�L����z0� ���ٶ�$< U C���4�h��y��t:;K�͑\�Df��1 � x PH<��R�N�-Ulֵ��S�O�7g�n�䯲*�� � �D&<�@)�Z?��as� z�����A��? p� � �A�T:�U 3�QZ� j-r76y�c~���� � 焙v GI��� ����P�
��W�
)\��u��ݡ�_6 mV����*���[�1�l&�! ?
���� k|)�E@���B�#���b�V�<�2Ǡ3 b
���^br�ee��� ���Nǐ����5�j�Ja �
� �S:c٭ؙo߮ ���qO>�)o��Z� � �
onecore\internal\sdk\inc\ntseapi.h onecore\internal\sdk\inc\ntseapi_x.h onecore\internal\sdk\inc\ntlpcapi.h onecore\internal\sdk\inc\rtlrbtree.h onecore\internal\sdk\inc\ntiolog.h onecore\internal\sdk\inc\ntelfapi.h onecore\external\sdk\inc\minwin\minappmodel.h onecore\external\ddk\inc\ntnls.h onecore\internal\sdk\inc\ntconfig.h onecore\external\shared\inc\pshpack8.h onecore\internal\sdk\inc\ntwow64.h onecore\internal\sdk\inc\ntwow64_x.h onecore\external\sdk\inc\crt\stdarg.h onecore\external\shared\inc\minwin\ntdef.h onecore\external\sdk\inc\crt\ctype.h onecore\internal\sdk\inc\ntpsapi.h onecore\external\shared\inc\pshpck16.h onecore\internal\sdk\inc\ntpsapi_x.h onecore\external\ddk\inc\ntpoapi.h onecore\external\sdk\inc\crt\process.h minkernel\urtl\startupw.c onecore\internal\sdk\inc\minwin\ntpnpapi.h onecore\internal\sdk\inc\ntrtlstringandbuffer.h onecore\external\shared\inc\cfg.h onecore\internal\sdk\inc\minwin\umstls.h onecore\internal\sdk\inc\nxamd64.h onecore\external\shared\inc\pshpack1.h onecore\internal\sdk\inc\warning.h shared\inc\winapifamily.h onecore\internal\sdk\inc\suppress_x.h minkernel\urtl\startup.h onecore\internal\sdk\inc\ntxcapi.h shared\inc\winpackagefamily.h onecore\internal\sdk\inc\nt.h onecore\internal\sdk\inc\ntxcapi_x.h onecore\external\shared\inc\kernelspecs.h onecore\external\shared\inc\basetsd.h onecore\external\sdk\inc\crt\excpt.h onecore\external\sdk\inc\crt\crtdefs.h onecore\internal\sdk\inc\rtlhashdef.h onecore\external\shared\inc\specstrings.h onecore\internal\sdk\inc\nturtl.h onecore\external\shared\inc\sal.h onecore\external\shared\inc\dpfilter.h onecore\internal\sdk\inc\ntobapi.h onecore\external\shared\inc\concurrencysal.h onecore\internal\sdk\inc\nttpapi.h onecore\internal\sdk\inc\ntobapi_x.h onecore\external\shared\inc\specstrings_strict.h onecore\external\shared\inc\poppack.h onecore\external\shared\inc\specstrings_undef.h onecore\external\shared\inc\driverspecs.h onecore\internal\sdk\inc\ntrtl.h onecore\internal\sdk\inc\ntrtlpath.h onecore\external\shared\inc\sdv_driverspecs.h onecore\internal\sdk\inc\ntrtl_x.h onecore\external\sdk\inc\crt\vadefs.h onecore\external\shared\inc\ip2string.h onecore\external\shared\inc\sdkddkver.h onecore\internal\sdk\inc\minwin\ntregapi.h onecore\internal\sdk\inc\ntregapi_x.h onecore\internal\sdk\inc\ntamd64.h onecore\internal\sdk\inc\ntamd64_x.h onecore\internal\sdk\inc\minwin\ntdef_p.h onecore\internal\sdk\inc\affinity.h onecore\external\ddk\inc\ntimage.h onecore\external\shared\inc\pshpack4.h onecore\internal\sdk\inc\volatile_accessors.h onecore\external\shared\inc\pshpack2.h onecore\internal\sdk\inc\minwin\ntioapi.h onecore\external\shared\inc\devioctl.h onecore\internal\sdk\inc\minwin\ntioapi_x.h onecore\external\sdk\inc\minwin\rtlsupportapi.h onecore\external\shared\inc\minwin\apiset.h onecore\internal\sdk\inc\ntmmapi.h onecore\external\shared\inc\minwin\apisetcconv.h onecore\internal\sdk\inc\ntmmapi_x.h onecore\internal\sdk\inc\ntldr.h onecore\internal\sdk\inc\nttmapi.h onecore\external\shared\inc\guiddef.h onecore\external\shared\inc\ktmtypes.h onecore\external\sdk\inc\ntassert.h onecore\external\shared\inc\ntstatus.h onecore\internal\sdk\inc\ntkeapi.h onecore\internal\sdk\inc\ntkeapi_x.h onecore\internal\sdk\inc\rtlfeatureconfigtypes.h onecore\external\ddk\inc\mce.h onecore\external\sdk\inc\crt\string.h onecore\internal\sdk\inc\minwin\xstateapi.h onecore\internal\sdk\inc\ntexapi.h onecore\internal\sdk\inc\pebteb.h onecore\internal\sdk\inc\ntexapi_x.h � L� \ \ / / @SH�� H��� H��� �
' � � 7 G � �NtProcessStartupW >d Peb AI AJ Z � g B! $LN3 0 d OPeb O � 0 $ � � � � � �, & 0 &
[ & _ &
k & o &
� ) � )
� & � &
H�L$SUVWATAUAVAWH��HH�d$ H��H�I � 3�H�D$(��$� L�d$ H�ȉ�$� ��$� H�D$ H�D$0�BD��D���ڋ�D��H���� �A H�yp��$� H�GH��tf9u
H�y`H�GH��tx�7H��tnf9t\��tX� f��t� 3҅�t H����u�t8f9t/A��H��H����t� � 3҅�t�H��H+�H�M�lE I����u�H�L$(H��$� H��� � ��A� ��� A��vH�_�7��3�H�M0H��L�M�� 3�L��H��u A� ��� H�D$0A���� H�J�,(���� A�����H;��� f9t}��ty� f��t� 3҅�t H��A�u�tYf9tLI�>I����$� �L��f�H��H��A�tH;�s � � 3҅�t�H;�s f�H���I��fA����u���H�L$(M�fI�I��H��� � D��$� ��$� ��t�E��xH�T$0D�ȋ�$� M��� D��A��H��� H��HA_A^A]A\_^][�$ � � N � � - ] m � � V G � q g �NtProcessStartupW_AfterSecurityCookieInitialized >d Peb AJ AN _� n AN � �4 ) n D�
>" argc B� E =
>q d AM y � AN � ) AM h AN � n 4 )
>" n A e >h ProcessParameters AJ > �f f � AJ � � U f B( / S
>i envp AT ; P AT g >q nullPtr D
>q s AI c
>j p AM a � AM 9 E >" NumberOfEnvPointers A Y � � A 9 >" DebugParameter A t � � A d
B� 6 L >" NumberOfArgPointers Ao \ / Ao � � K 8 ># AllocSize AU _
>i argv AH Q B0 V , >i dst AT AV W � AT 9 D > Status An h � � � B� L 6
>q dEnd AN } � AN j " Z m m p m m t x H B! $SkipInit " $CountEnvironmentStrings � d OPeb q OnullPtr 9" { 9L ~ 9k � O � � = � 1 � 6 � C �( E �6 I �E Q �h S �q U �t ` � a �� b �� c �� i �� k �� q �� r �� s �� v �� ~ �� �� � �� � �� � �� � �� � � k � � � � �- � �3 � �7 � �: � �< � �R � �\ � �b � �g � �l � �v � �} � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � � � � � � � �9 � �D � �E � �J � �d � �q � �, ' 0 '
z ' ~ '
� ' � '
� ' � '
� ' � '
� ' � '
� ' � '
'
'
' '
9 ' = '
e ' i '
} ' � '
� ' � '
� ' � '
� ' � '
� ' '
' '
* ' . '
X ' \ '
l ' p '
� ' � '
� ' � '
� ' � '
� ' � '
� ' � '
' # '
> ' B '
N ' R '
l ' p '
| ' � '
� ' � '
� ' � '
� ' � '
� ' � '
� ' � '
F + J +
[ , _ ,
� ' � '
� ' � '
� ' � '
� ' � '
20 ( ( / ���
� � p`P0 � * * 5 � ' %
RtlNtPathSeperatorString
� 1 /
RtlAlternateDosPathSeperatorString
� ) '
RtlDosPathSeperatorsString
& � _PEB .?AU_PEB@@ ��
��
��
��
��
��
��
��
�� # �6 � _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@ 2 � _LIST_ENTRY .?AU_LIST_ENTRY@@
"
Flink
Blink 2
_LIST_ENTRY .?AU_LIST_ENTRY@@
" Length ���
Initialized ��
SsHandle �
InLoadOrderModuleList
InMemoryOrderModuleList ��
0 InInitializationOrderModuleList ��
@ EntryInProgress ��
H ShutdownInProgress ���
P ShutdownThreadId �6 X _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@
V � _RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��* � _CURDIR .?AU_CURDIR@@ : � _UNICODE_STRING .?AU_UNICODE_STRING@@ B
! Length ���
! MaximumLength
q Buffer ���: _UNICODE_STRING .?AU_UNICODE_STRING@@ *
DosPath ��
Handle ���* _CURDIR .?AU_CURDIR@@ N � _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ ��* � _STRING .?AU_STRING@@ B
! Length ���
! MaximumLength
p Buffer ���* _STRING .?AU_STRING@@ N
! Flags
! Length ���
" TimeStamp
DosPath ��N _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ �� # ��
" MaximumLength
" Length ���
" Flags
" DebugFlags ���
ConsoleHandle
" ConsoleFlags �
StandardInput
( StandardOutput ���
0 StandardError
8 CurrentDirectory �
P DllPath ��
` ImagePathName
p CommandLine ��
� Environment ��
" � StartingX
" � StartingY
" � CountX ���
" � CountY ���
" � CountCharsX ��
" � CountCharsY ��
" � FillAttribute
" � WindowFlags ��
" � ShowWindowFlags ��
� WindowTitle ��
� DesktopInfo ��
� ShellInfo
� RuntimeData ��
� CurrentDirectores
# �EnvironmentSize ��
# �EnvironmentVersion ���
PackageDependencyData
" ProcessGroupId ���
" LoaderThreads
RedirectionDllName ���
HeapPartitionName
# 0DefaultThreadpoolCpuSetMasks �
" 8DefaultThreadpoolCpuSetMaskCount �
" <DefaultThreadpoolThreadMaximum ���V & @_RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��
F � _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ R � _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
# �
! Type �
! CreatorBackTraceIndex
% CriticalSection ��
ProcessLocksList �
" EntryCount ���
" $ ContentionCount ��
" ( Flags
! , CreatorBackTraceIndexHigh
! . SpareUSHORT ��R & 0 _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
$ �
( DebugInfo
LockCount
RecursionCount ���
OwningThread �
LockSemaphore
# SpinCount F ) ( _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ * onecore\internal\sdk\inc\nturtl.h ��
# . � _SLIST_HEADER .?AT_SLIST_HEADER@@
# ��
# 0��
# ��
# <��N
. Depth
/ Sequence �
0 Reserved �
1 NextEntry : 2 <anonymous-tag> .?AU<anonymous-tag>@@ >
# Alignment
# Region ���
3 HeaderX64 . 4 _SLIST_HEADER .?AT_SLIST_HEADER@@
-
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" �� " # �
2 � _LARGE_INTEGER .?AT_LARGE_INTEGER@@ ��*
" LowPart ��
HighPart �: C <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
HighPart �
D u
QuadPart �2 E _LARGE_INTEGER .?AT_LARGE_INTEGER@@ �� " # � � H
I " # � �2 � _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ *
" LowPart ��
" HighPart �: M <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
" HighPart �
N u
# QuadPart �2 O _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ N � _ACTIVATION_CONTEXT_DATA .?AU_ACTIVATION_CONTEXT_DATA@@ ��
Q ��
R F � _ASSEMBLY_STORAGE_MAP .?AU_ASSEMBLY_STORAGE_MAP@@
T # � " # �
" ��
" ��
" ��
" �� # � p # �> � _LEAP_SECOND_DATA .?AU_LEAP_SECOND_DATA@@
^
" ��
" ��6
InheritedAddressSpace
ReadImageFileExecOptions �
BeingDebugged
BitField �
ImageUsesLargePages ��
IsProtectedProcess ���
IsImageDynamicallyRelocated ��
SkipPatchingUser32Forwarders �
IsPackagedProcess
IsAppContainer ���
IsProtectedProcessLight ��
IsLongPathAwareProcess ���
Padding0 �
Mutant ���
ImageBaseAddress �
Ldr ��
" ProcessParameters
( SubSystemData
0 ProcessHeap ��
, 8 FastPebLock ��
6 @ AtlThunkSListPtr �
H IFEOKey ��
" P CrossProcessFlags
7 P ProcessInJob �
8 P ProcessInitializing ��
9 P ProcessUsingVEH ��
: P ProcessUsingVCH ��
; P ProcessUsingFTH ��
< P ProcessPreviouslyThrottled ���
= P ProcessCurrentlyThrottled
> P ProcessImagesHotPatched ��
? P ReservedBits0
T Padding1 �
X KernelCallbackTable ��
X UserSharedInfoPtr
" ` SystemReserved ���
" d AtlThunkSListPtr32 ���
h ApiSetMap
" p TlsExpansionCounter ��
t Padding2 �
x TlsBitmap
@ � TlsBitmapBits
� ReadOnlySharedMemoryBase �
� SharedData ���
A � ReadOnlyStaticServerData �
� AnsiCodePageData �
� OemCodePageData ��
� UnicodeCaseTableData �
" � NumberOfProcessors ���
" � NtGlobalFlag �
B � CriticalSectionTimeout ���
# � HeapSegmentReserve ���
# � HeapSegmentCommit
# � HeapDeCommitTotalFreeThreshold ���
# � HeapDeCommitFreeBlockThreshold ���
" � NumberOfHeaps
" � MaximumNumberOfHeaps �
A � ProcessHeaps �
� GdiSharedHandleTable �
ProcessStarterHelper �
" GdiDCAttributeList ���
Padding3 �
% LoaderLock ���
" OSMajorVersion ���
" OSMinorVersion ���
! OSBuildNumber
! "OSCSDVersion �
" $OSPlatformId �
" (ImageSubsystem ���
" ,ImageSubsystemMajorVersion ���
" 0ImageSubsystemMinorVersion ���
4Padding4 �
# 8ActiveProcessAffinityMask
G @GdiHandleBuffer ��
J 0PostProcessInitRoutine ���
8TlsExpansionBitmap ���
K @TlsExpansionBitmapBits ���
" �SessionId
�Padding5 �
L �AppCompatFlags ���
L �AppCompatFlagsUser ���
�pShimData
�AppCompatInfo
�CSDVersion ���
S �ActivationContextData
U ProcessAssemblyStorageMap
S SystemDefaultActivationContextData ���
U SystemAssemblyStorageMap �
# MinimumStackCommit ���
V SparePointers
W @SpareUlongs ��
XWerRegistrationData ��
`WerShipAssertPtr �
hpUnused ��
ppImageHeaderHash �
" xTracingFlags �
X xHeapTracingEnabled ���
Y xCritSecTracingEnabled
Z xLibLoaderTracingEnabled ��
[ xSpareTracingBits �
|Padding6 �
# �CsrServerReadOnlySharedMemoryBase
# �TppWorkerpListLock ���
�TppWorkerpList ���
\ �WaitOnAddressHashTable ���
�TelemetryCoverageHeader ��
" �CloudFileFlags ���
" �CloudFileDiagFlags ���
p �PlaceholderCompatibilityMode �
] �PlaceholderCompatibilityModeReserved �
_ �LeapSecondData ���
" �LeapSecondFlags ��
` �SixtySecondEnabled ���
a �Reserved �
" �NtGlobalFlag2 & s b �_PEB .?AU_PEB@@ ��
d e > f NtProcessStartupW_AfterSecurityCookieInitialized ���
q
! t k l iswspace ���
q " n . o NtStartupCountEnvironmentStrings ���
q q r & s NtRecordEnvironmentPointers
q t u u " t v w wmain ��
h h y
z " # |
}
� f NtProcessStartupW ��" I __security_init_cookie � JobObjectBasicAccountingInformation �� JobObjectBasicLimitInformation ��� JobObjectBasicProcessIdList �� JobObjectBasicUIRestrictions � JobObjectSecurityLimitInformation JobObjectEndOfJobTimeInformation � JobObjectAssociateCompletionPortInformation �� JobObjectBasicAndIoAccountingInformation � JobObjectExtendedLimitInformation
JobObjectJobSetInformation ��� JobObjectGroupInformation JobObjectNotificationLimitInformation
JobObjectLimitViolationInformation ��� JobObjectGroupInformationEx �� JobObjectCpuRateControlInformation ��� JobObjectCompletionFilter JobObjectCompletionCounter ��� JobObjectFreezeInformation ��� JobObjectExtendedAccountingInformation ��� JobObjectWakeInformation � JobObjectBackgroundInformation ��� JobObjectSchedulingRankBiasInformation ��� JobObjectTimerVirtualizationInformation �� JobObjectCycleTimeNotification ��� JobObjectClearEvent �� JobObjectInterferenceInformation � JobObjectClearPeakJobMemoryUsed �� JobObjectMemoryUsageInformation �� JobObjectSharedCommit JobObjectContainerId � JobObjectIoRateControlInformation % JobObjectSiloRootDirectory ��� & JobObjectServerSiloBasicInformation �� ' JobObjectServerSiloUserSharedData ( JobObjectServerSiloInitialize ) JobObjectServerSiloRunningState �� * JobObjectIoAttribution ��� + JobObjectMemoryPartitionInformation �� , JobObjectContainerTelemetryId - JobObjectSiloSystemRoot �� . JobObjectEnergyTrackingState � / JobObjectThreadImpersonationInformation �� JobObjectReserved1Information JobObjectReserved2Information JobObjectReserved3Information JobObjectReserved4Information JobObjectReserved5Information JobObjectReserved6Information JobObjectReserved7Information JobObjectReserved8Information JobObjectReserved9Information JobObjectReserved10Information ��� JobObjectReserved11Information ��� JobObjectReserved12Information ��� JobObjectReserved13Information ��� JobObjectReserved14Information ��� JobObjectNetRateControlInformation ��� ! JobObjectNotificationLimitInformation2 ��� " JobObjectLimitViolationInformation2 �� # JobObjectCreateSilo �� $ JobObjectSiloBasicInformation % JobObjectReserved15Information ��� & JobObjectReserved16Information ��� ' JobObjectReserved17Information ��� ( JobObjectReserved18Information ��� ) JobObjectReserved19Information ��� * JobObjectReserved20Information ��� + JobObjectReserved21Information ��� , JobObjectReserved22Information ��� - JobObjectReserved23Information ��� . JobObjectReserved24Information ��� / JobObjectReserved25Information ��� 0 MaxJobObjectInfoClass > I t � _JOBOBJECTINFOCLASS .?AW4_JOBOBJECTINFOCLASS@@ �. onecore\internal\sdk\inc\ntpsapi_x.h ���� SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN �� SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS �� SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE ���N t � SE_WS_APPX_SIGNATURE_ORIGIN .?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@ �* onecore\internal\sdk\inc\ntseapi.h � JOB_OBJECT_IO_RATE_CONTROL_ENABLE JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS ���Z t � JOB_OBJECT_IO_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@ ���j PsNeverDuplicate � PsRequestDuplicate ��� PsAlwaysDuplicate PsMaxStdHandleStates �B t � _PS_STD_HANDLE_STATE .?AW4_PS_STD_HANDLE_STATE@@ ��� PsWakeReasonUser � PsWakeReasonExecutionRequired PsWakeReasonKernel ��� PsWakeReasonInstrumentation �� PsWakeReasonPreserveProcess �� PsWakeReasonActivityReference PsWakeReasonWorkOnBehalf � PsMaxWakeReasons �6 t � _PS_WAKE_REASON .?AW4_PS_WAKE_REASON@@ � TP_CALLBACK_PRIORITY_HIGH TP_CALLBACK_PRIORITY_NORMAL �� TP_CALLBACK_PRIORITY_LOW � TP_CALLBACK_PRIORITY_INVALID � TP_CALLBACK_PRIORITY_COUNT ���B t � _TP_CALLBACK_PRIORITY .?AW4_TP_CALLBACK_PRIORITY@@ �6 FeatureConfigurationPriorityImageDefault � FeatureConfigurationPriorityService �� FeatureConfigurationPriorityUser �
FeatureConfigurationPriorityUserPolicy ��� FeatureConfigurationPriorityTest � FeatureConfigurationPriorityImageOverride FeatureConfigurationPriorityMax ��^ t � _RTL_FEATURE_CONFIGURATION_PRIORITY .?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@ �: onecore\internal\sdk\inc\rtlfeatureconfigtypes.h ���> PsProtectedSignerNone PsProtectedSignerAuthenticode PsProtectedSignerCodeGen � PsProtectedSignerAntimalware � PsProtectedSignerLsa � PsProtectedSignerWindows � PsProtectedSignerWinTcb �� PsProtectedSignerWinSystem ��� PsProtectedSignerApp � PsProtectedSignerMax �B
t � _PS_PROTECTED_SIGNER .?AW4_PS_PROTECTED_SIGNER@@ ���
SystemProcessClassificationNormal SystemProcessClassificationSystem SystemProcessClassificationSecureSystem �� SystemProcessClassificationMemCompression SystemProcessClassificationRegistry �� SystemProcessClassificationMaximum ���V t � _SYSTEM_PROCESS_CLASSIFICATION .?AW4_SYSTEM_PROCESS_CLASSIFICATION@@ ���* onecore\internal\sdk\inc\ntexapi.h �~ PowerUserPresent � PowerUserNotPresent �� PowerUserInactive PowerUserMaximum � PowerUserInvalid �F t � _USER_ACTIVITY_PRESENCE .?AW4_USER_ACTIVITY_PRESENCE@@ �* onecore\external\ddk\inc\ntpoapi.h � MemoryNotContiguous �� MemoryAlignedAndContiguous ��� MemoryNotResident MemoryNotEligibleToMakeContiguous MemoryContiguityStateMax �f t � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE .?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@ ���* onecore\internal\sdk\inc\ntmmapi.h � PsAttributeParentProcess � PsAttributeDebugObject ��� PsAttributeToken � PsAttributeClientId �� PsAttributeTebAddress PsAttributeImageName � PsAttributeImageInfo � PsAttributeMemoryReserve � PsAttributePriorityClass � PsAttributeErrorMode �
PsAttributeStdHandleInfo � PsAttributeHandleList PsAttributeGroupAffinity �
PsAttributePreferredNode � PsAttributeIdealProcessor PsAttributeUmsThread � PsAttributeMitigationOptions � PsAttributeProtectionLevel ��� PsAttributeSecureProcess � PsAttributeJobList ��� PsAttributeChildProcessPolicy PsAttributeAllApplicationPackagesPolicy �� PsAttributeWin32kFilter �� PsAttributeSafeOpenPromptOriginClaim � PsAttributeBnoIsolation �� PsAttributeDesktopAppPolicy �� PsAttributeChpe �� PsAttributeMitigationAuditOptions PsAttributeMax ���: t � _PS_ATTRIBUTE_NUM .?AW4_PS_ATTRIBUTE_NUM@@ �# SystemBasicInformation ��� SystemProcessorInformation ��� SystemPerformanceInformation � SystemTimeOfDayInformation ��� SystemPathInformation SystemProcessInformation � SystemCallCountInformation ��� SystemDeviceInformation �� SystemProcessorPerformanceInformation SystemFlagsInformation ���
SystemCallTimeInformation SystemModuleInformation �� SystemLocksInformation ���
SystemStackTraceInformation �� SystemPagedPoolInformation ��� SystemNonPagedPoolInformation SystemHandleInformation �� SystemObjectInformation �� SystemPageFileInformation SystemVdmInstemulInformation � SystemVdmBopInformation �� SystemFileCacheInformation ��� SystemPoolTagInformation � SystemInterruptInformation ��� SystemDpcBehaviorInformation � SystemFullMemoryInformation �� SystemLoadGdiDriverInformation ��� SystemUnloadGdiDriverInformation � SystemTimeAdjustmentInformation �� SystemSummaryMemoryInformation ��� SystemMirrorMemoryInformation SystemPerformanceTraceInformation SystemObsolete0 �� ! SystemExceptionInformation ��� " SystemCrashDumpStateInformation �� # SystemKernelDebuggerInformation �� $ SystemContextSwitchInformation ��� % SystemRegistryQuotaInformation ��� & SystemExtendServiceTableInformation �� ' SystemPrioritySeperation � ( SystemVerifierAddDriverInformation ��� ) SystemVerifierRemoveDriverInformation * SystemProcessorIdleInformation ��� + SystemLegacyDriverInformation , SystemCurrentTimeZoneInformation � - SystemLookasideInformation ��� . SystemTimeSlipNotification ��� / SystemSessionCreate �� 0 SystemSessionDetach �� 1 SystemSessionInformation � 2 SystemRangeStartInformation �� 3 SystemVerifierInformation 4 SystemVerifierThunkExtend 5 SystemSessionProcessInformation �� 6 SystemLoadGdiDriverInSystemSpace � 7 SystemNumaProcessorMap ��� 8 SystemPrefetcherInformation �� 9 SystemExtendedProcessInformation � : SystemRecommendedSharedDataAlignment � ; SystemComPlusPackage � < SystemNumaAvailableMemory = SystemProcessorPowerInformation �� > SystemEmulationBasicInformation �� ? SystemEmulationProcessorInformation �� @ SystemExtendedHandleInformation �� A SystemLostDelayedWriteInformation B SystemBigPoolInformation � C SystemSessionPoolTagInformation �� D SystemSessionMappedViewInformation ��� E SystemHotpatchInformation F SystemObjectSecurityMode � G SystemWatchdogTimerHandler ��� H SystemWatchdogTimerInformation ��� I SystemLogicalProcessorInformation J SystemWow64SharedInformationObsolete � K SystemRegisterFirmwareTableInformationHandler L SystemFirmwareTableInformation ��� M SystemModuleInformationEx N SystemVerifierTriageInformation �� O SystemSuperfetchInformation �� P SystemMemoryListInformation �� Q SystemFileCacheInformationEx � R SystemThreadPriorityClientIdInformation �� S SystemProcessorIdleCycleTimeInformation �� T SystemVerifierCancellationInformation U SystemProcessorPowerInformationEx V SystemRefTraceInformation W SystemSpecialPoolInformation � X SystemProcessIdInformation ��� Y SystemErrorPortInformation ��� Z SystemBootEnvironmentInformation � [ SystemHypervisorInformation �� \ SystemVerifierInformationEx �� ] SystemTimeZoneInformation ^ SystemImageFileExecutionOptionsInformation ��� _ SystemCoverageInformation ` SystemPrefetchPatchInformation ��� a SystemVerifierFaultsInformation �� b SystemSystemPartitionInformation � c SystemSystemDiskInformation �� d SystemProcessorPerformanceDistribution ��� e SystemNumaProximityNodeInformation ��� f SystemDynamicTimeZoneInformation � g SystemCodeIntegrityInformation ��� h SystemProcessorMicrocodeUpdateInformation i SystemProcessorBrandString ��� j SystemVirtualAddressInformation �� k SystemLogicalProcessorAndGroupInformation l SystemProcessorCycleTimeInformation �� m SystemStoreInformation ��� n SystemRegistryAppendString ��� o SystemAitSamplingValue ��� p SystemVhdBootInformation � q SystemCpuQuotaInformation r SystemNativeBasicInformation � s SystemErrorPortTimeouts �� t SystemLowPriorityIoInformation ��� u SystemBootEntropyInformation � v SystemVerifierCountersInformation w SystemPagedPoolInformationEx � x SystemSystemPtesInformationEx y SystemNodeDistanceInformation z SystemAcpiAuditInformation ��� { SystemBasicPerformanceInformation | SystemQueryPerformanceCounterInformation � } SystemSessionBigPoolInformation �� ~ SystemBootGraphicsInformation SystemScrubPhysicalMemoryInformation � � SystemBadPageInformation � � SystemProcessorProfileControlArea � SystemCombinePhysicalMemoryInformation ��� � SystemEntropyInterruptTimingInformation �� � SystemConsoleInformation � � SystemPlatformBinaryInformation �� � SystemPolicyInformation �� � SystemHypervisorProcessorCountInformation � SystemDeviceDataInformation �� � SystemDeviceDataEnumerationInformation ��� � SystemMemoryTopologyInformation �� � SystemMemoryChannelInformation ��� � SystemBootLogoInformation � SystemProcessorPerformanceInformationEx �� � SystemCriticalProcessErrorLogInformation � � SystemSecureBootPolicyInformation � SystemPageFileInformationEx �� � SystemSecureBootInformation �� � SystemEntropyInterruptTimingRawInformation ��� � SystemPortableWorkspaceEfiLauncherInformation � SystemFullProcessInformation � � SystemKernelDebuggerInformationEx � SystemBootMetadataInformation � SystemSoftRebootInformation �� � SystemElamCertificateInformation � � SystemOfflineDumpConfigInformation ��� � SystemProcessorFeaturesInformation ��� � SystemRegistryReconciliationInformation �� � SystemEdidInformation � SystemManufacturingInformation ��� � SystemEnergyEstimationConfigInformation �� � SystemHypervisorDetailInformation � SystemProcessorCycleStatsInformation � � SystemVmGenerationCountInformation ��� � SystemTrustedPlatformModuleInformation ��� � SystemKernelDebuggerFlags � SystemCodeIntegrityPolicyInformation � � SystemIsolatedUserModeInformation � SystemHardwareSecurityTestInterfaceResultsInformation � SystemSingleModuleInformation � SystemAllowedCpuSetsInformation �� � SystemVsmProtectionInformation ��� � SystemInterruptCpuSetsInformation � SystemSecureBootPolicyFullInformation � SystemCodeIntegrityPolicyFullInformation � � SystemAffinitizedInterruptProcessorInformation ��� � SystemRootSiloInformation � SystemCpuSetInformation �� � SystemCpuSetTagInformation ��� � SystemWin32WerStartCallout ��� � SystemSecureKernelProfileInformation � � SystemCodeIntegrityPlatformManifestInformation ��� � SystemInterruptSteeringInformation ��� � SystemSupportedProcessorArchitectures � SystemMemoryUsageInformation � � SystemCodeIntegrityCertificateInformation � SystemPhysicalMemoryInformation �� � SystemControlFlowTransition �� � SystemKernelDebuggingAllowed � � SystemActivityModerationExeState � � SystemActivityModerationUserSettings � � SystemCodeIntegrityPoliciesFullInformation ��� � SystemCodeIntegrityUnlockInformation � � SystemIntegrityQuotaInformation �� � SystemFlushInformation ��� � SystemProcessorIdleMaskInformation ��� � SystemSecureDumpEncryptionInformation � SystemWriteConstraintInformation � � SystemKernelVaShadowInformation �� � SystemHypervisorSharedPageInformation � SystemFirmwareBootPerformanceInformation � � SystemCodeIntegrityVerificationInformation ��� � SystemFirmwarePartitionInformation ��� � SystemSpeculationControlInformation �� � SystemDmaGuardPolicyInformation �� � SystemEnclaveLaunchControlInformation � SystemWorkloadAllowedCpuSetsInformation �� � SystemCodeIntegrityUnlockModeInformation � � SystemLeapSecondInformation �� � SystemFlags2Information �� � SystemSecurityModelInformation ��� � SystemCodeIntegritySyntheticCacheInformation � � SystemFeatureConfigurationInformation � SystemFeatureConfigurationSectionInformation � � SystemFeatureUsageSubscriptionInformation � SystemSecureSpeculationControlInformation � SystemSpacesBootInformation �� � SystemFwRamdiskInformation ��� � SystemWheaIpmiHardwareInformation � SystemDifSetRuleClassInformation � � SystemDifClearRuleClassInformation ��� � SystemDifApplyPluginVerificationOnDriver � � SystemDifRemovePluginVerificationOnDriver � SystemShadowStackInformation � � SystemBuildVersionInformation � SystemPoolLimitInformation ��� � SystemCodeIntegrityAddDynamicStore ��� � SystemCodeIntegrityClearDynamicStores � SystemPoolZeroingInformation � � MaxSystemInfoClass ���J � t � _SYSTEM_INFORMATION_CLASS .?AW4_SYSTEM_INFORMATION_CLASS@@ �� PsCreateInitialState � PsCreateFailOnFileOpen ��� PsCreateFailOnSectionCreate �� PsCreateFailExeFormat PsCreateFailMachineMismatch �� PsCreateFailExeName �� PsCreateSuccess �� PsCreateMaximumStates 6 t � PS_CREATE_STATE .?AW4PS_CREATE_STATE@@ � JOB_OBJECT_NET_RATE_CONTROL_ENABLE ��� JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS ��Z t � JOB_OBJECT_NET_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@ �z KCONTINUE_UNWIND � KCONTINUE_RESUME � KCONTINUE_LONGJUMP ��� KCONTINUE_SET KCONTINUE_LAST ���6 t � _KCONTINUE_TYPE .?AW4_KCONTINUE_TYPE@@ �* onecore\internal\sdk\inc\ntxcapi.h �: VRF_TRIAGE_CONTEXT_NONE �� VRF_TRIAGE_CONTEXT_DEFAULT ��� VRF_TRIAGE_CONTEXT_DEVELOPMENT ��� VRF_TRIAGE_CONTEXT_CERTIFICATION � VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED ��� VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING � NUM_VRF_TRIAGE_CONTEXTS ��> t � _VRF_TRIAGE_CONTEXT .?AW4_VRF_TRIAGE_CONTEXT@@ �* COMIMAGE_FLAGS_ILONLY COMIMAGE_FLAGS_32BITREQUIRED � COMIMAGE_FLAGS_IL_LIBRARY COMIMAGE_FLAGS_STRONGNAMESIGNED �� COMIMAGE_FLAGS_NATIVE_ENTRYPOINT � � COMIMAGE_FLAGS_TRACKDEBUGDATA � COMIMAGE_FLAGS_32BITPREFERRED COR_VERSION_MAJOR_V2 � COR_VERSION_MAJOR COR_VERSION_MINOR COR_DELETED_NAME_LENGTH �� COR_VTABLEGAP_NAME_LENGTH NATIVE_TYPE_MAX_CB ��� � COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE � IMAGE_COR_MIH_METHODRVA �� IMAGE_COR_MIH_EHRVA �� IMAGE_COR_MIH_BASICBLOCK � COR_VTABLE_32BIT � COR_VTABLE_64BIT � COR_VTABLE_FROM_UNMANAGED COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN ��� COR_VTABLE_CALL_MOST_DERIVED � IMAGE_COR_EATJ_THUNK_SIZE MAX_CLASS_NAME ��� MAX_PACKAGE_NAME �R t � ReplacesCorHdrNumericDefines .?AW4ReplacesCorHdrNumericDefines@@ ���� SystemFeatureConfigurationSectionTypeBoot SystemFeatureConfigurationSectionTypeRuntime � SystemFeatureConfigurationSectionTypeUsageTriggers ��� SystemFeatureConfigurationSectionTypeCount ���n t � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE .?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@ ���~ PsProtectedTypeNone �� PsProtectedTypeProtectedLight PsProtectedTypeProtected � PsProtectedTypeMax ���> t � _PS_PROTECTED_TYPE .?AW4_PS_PROTECTED_TYPE@@ ���
$
B
I
���
���
���
���� -FC -MT -c -Zc:wchar_t- -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973 -Brepro
� > � -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X � � � � � ��3=T]�-���{ �j�n�M���'��Aі�f��)Y�d���)Y�d���K�f(��}�ڐ�k�"���BҔq�s��՟����^r�J-WV8o WJv �.��=�|N��7M4����舢�Z�£*:��w���WS� �Y\k���b @comp.idk�� @feat.00�I ��� .debug$S �1 e .rdata �ہ e .rdata �w � e .rdata h�Q� e < .rdata x� � e U n .rdata x� � e � .rdata 1�, e � � � iswspace wmain " 8 .text$mn }� e .debug$S
e .text$mn
�
��� e .debug$S � R
e O a
$LN4 $LN3 $LN64
� 9
�
.xdata ���� e � .pdata
28~v e �
.xdata Db��
e � .pdata ����
e ' .debug$S 4 e .debug$S @ e .debug$S 8 e .debug$T |n e .chks64 � e _ ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ ??_C@_13CGOKJPIL@?$AA?1@ RtlNtPathSeperatorString __imp_NtTerminateProcess RtlAlternateDosPathSeperatorString RtlDosPathSeperatorsString NtRecordEnvironmentPointers NtStartupCountEnvironmentStrings __imp_RtlNormalizeProcessParams __imp_RtlAllocateHeap __security_init_cookie NtProcessStartupW NtProcessStartupW_AfterSecurityCookieInitialized $SkipInit$66 $CountEnvironmentStrings$65 $unwind$NtProcessStartupW $pdata$NtProcessStartupW $unwind$NtProcessStartupW_AfterSecurityCookieInitialized $pdata$NtProcessStartupW_AfterSecurityCookieInitialized /60 1606894328 100666 49515 `
d� �B�_�� E .debug$S \2 \ @ B.rdata �5 @0@.rdata �5 @0@.rdata �5 @0@.rdata �5 �5 @@@.rdata �5 �5 @@@.rdata �5
6 @@@.text$mn 6 +6 0`.debug$S ?6 ?7
@B.text$mn � �7 9: 0`.debug$S t �: %B \ @B.xdata �E @0@.pdata �E �E @0@.xdata �E @0@.pdata F F @0@.debug$S 4 1F eF @B.debug$S @ yF �F @B.debug$S 8 �F G @B.debug$T �n G @ B.chks64 � �
.drectve ��
� A d:\os\obj\amd64fre\minkernel\urtl\objfre\amd64\startup.obj : < � � k k
Microsoft (R) Optimizing Compiler � � & � JobObjectReserved2Information 2 � SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED & � JobObjectReserved9Information � � ! � JobObjectWakeInformation ( � JobObjectClearPeakJobMemoryUsed ' � ) JobObjectReserved19Information 5 � JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME * � ' JobObjectServerSiloUserSharedData ' � ( JobObjectReserved18Information � PsMaxStdHandleStates � PsMaxWakeReasons ' � * JobObjectReserved20Information ' � % JobObjectReserved15Information & � , JobObjectContainerTelemetryId � PsNeverDuplicate % � TP_CALLBACK_PRIORITY_INVALID # � JobObjectFreezeInformation ' � . JobObjectReserved24Information 2 � FeatureConfigurationPriorityImageOverride , � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS ' � JobObjectReserved12Information ( � ) JobObjectServerSiloRunningState - � SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � JobObjectSharedCommit & � JobObjectReserved3Information & � ( JobObjectServerSiloInitialize � PsProtectedSignerMax + � SystemProcessClassificationMaximum # � % JobObjectSiloRootDirectory ' � ' JobObjectReserved17Information � * JobObjectIoAttribution ' � JobObjectReserved11Information & � JobObjectReserved4Information � PowerUserMaximum ! � MemoryContiguityStateMax � * ( � JobObjectMemoryUsageInformation � � * � JobObjectIoRateControlInformation & � JobObjectReserved8Information ' � , JobObjectReserved22Information $ � TP_CALLBACK_PRIORITY_NORMAL * � JOB_OBJECT_IO_RATE_CONTROL_ENABLE ' � - JobObjectReserved23Information � PsAttributeMax ' � JobObjectReserved13Information % � � SystemPoolZeroingInformation & � JobObjectReserved1Information & � JobObjectReserved6Information � PsCreateInitialState 0 � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS 9 � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JobObjectClearEvent & � JobObjectReserved5Information & � JobObjectReserved7Information 2 � JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH ) � JobObjectInterferenceInformation , � & JobObjectServerSiloBasicInformation � JobObjectContainerId 0 � / JobObjectThreadImpersonationInformation � - JobObjectSiloSystemRoot ' � JobObjectCycleTimeNotification ' � JobObjectReserved10Information + � JOB_OBJECT_NET_RATE_CONTROL_ENABLE , � + JobObjectMemoryPartitionInformation A � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � KCONTINUE_UNWIND # � VRF_TRIAGE_CONTEXT_DEFAULT / � JobObjectExtendedAccountingInformation , � SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN % � . JobObjectEnergyTrackingState ' � + JobObjectReserved21Information � COR_VERSION_MAJOR_V2 ' � / JobObjectReserved25Information ' � & JobObjectReserved16Information ' � JobObjectReserved14Information 3 � SystemFeatureConfigurationSectionTypeCount ' � JobObjectBackgroundInformation 0 � JobObjectTimerVirtualizationInformation � PsProtectedTypeMax - � JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG / � JobObjectSchedulingRankBiasInformation / � SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE
q PPVOID � _TP_CALLBACK_PRIORITY � _JOBOBJECTINFOCLASS _UNICODE_STRING � PPEB � PSTRING � _PS_ATTRIBUTE_NUM � _PS_WAKE_REASON � _SYSTEM_INFORMATION_CLASS ( � JOB_OBJECT_NET_RATE_CONTROL_FLAGS LONG_PTR
CURDIR # PUINT_PTR # ULONG_PTR
STRING p PCHAR F _LARGE_INTEGER ! wchar_t " � SE_WS_APPX_SIGNATURE_ORIGIN ANSI_STRING _LIST_ENTRY UNICODE_STRING " � PRTL_CRITICAL_SECTION_DEBUG " ' _RTL_CRITICAL_SECTION_DEBUG ' � JOB_OBJECT_IO_RATE_CONTROL_FLAGS � _USER_ACTIVITY_PRESENCE � PUNICODE_STRING PLONG PBOOLEAN � _KCONTINUE_TYPE 5 _SLIST_HEADER LONG _PEB_LDR_DATA P _ULARGE_INTEGER � PLARGE_INTEGER # ULONG64 RTL_DRIVE_LETTER_CURDIR
# SIZE_T # � ReplacesCorHdrNumericDefines q PWCH $ � PPS_POST_PROCESS_INIT_ROUTINE
PSHORT � _VRF_TRIAGE_CONTEXT " TP_VERSION u PUINT32 p CCHAR � PANSI_STRING * � _RTL_FEATURE_CONFIGURATION_PRIORITY P ULARGE_INTEGER � TP_CALLBACK_PRIORITY " LOGICAL 1 � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE c _PEB
t INT � _PS_STD_HANDLE_STATE UCHAR _RTL_DRIVE_LETTER_CURDIR " LCID BOOLEAN � PCUNICODE_STRING
! USHORT PVOID q WCHAR PSE_SIGNING_LEVEL % � _SYSTEM_PROCESS_CLASSIFICATION
LONG64 # " PRTL_USER_PROCESS_PARAMETERS " ULONG � PPEB_LDR_DATA
q PWCHAR * _RTL_CRITICAL_SECTION q PWSTR � PS_CREATE_STATE # ! _RTL_USER_PROCESS_PARAMETERS � _PS_PROTECTED_SIGNER # UINT_PTR NTSTATUS _CURDIR F LARGE_INTEGER � _PS_PROTECTED_TYPE
HANDLE # ULONGLONG
" PULONG
# size_t # PULONG64 LONGLONG - � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE PLIST_ENTRY SHORT PLONG64 INT_PTR LIST_ENTRY
PUCHAR p CHAR _STRING � � �0:s�0pV�eҐ����lj� �6�Ȗ0 � $ ƨ��T ��� Ȓ� ���)n���y��aP`I I f߹��R�|��ڕ����G/S�6�<��� m o�&���-�},��'�w��_�BIS;�§g
�7; � �>� j�t�&~8^�B��J2�/Ru�~ � �[�-%`4�����o2�>�'�q.qg�Gn��) � �� ��/�5h��d�����,�]0�f& (� `���[4dx���By%�Г��� z�&K�-�pW ( ���{�$��N�� ��~p��o7��T�1*���. L G�*㥬2����M���}�b�R�̫�)�� s �G�/�m��hB-����-q�b}��Y�~Y � ����̫��2r�WQ��K��TI�Up��/�z � ��� [r�"��衷� �R ��ҹ�� �� � ����w�^��ȯ�
?���;��f���B(H� �[��=�
Tǜ�
]����>d��Wƫ��� 1 3E �� �r`QQ���e��e����`z� i T 4o��g-+ 2ܪܚosm�E����a��^�R�=� { E~/EX"�-�p-���i����`��.�z#�0� � �J��W6���,�)J dɫ7�%eڭ�� � 2�ዿ�N,qٞ��%[�ȅ�4��\]9�� � ;!E���q�G{�>|;:���f���5�gn�� [Y8C�n`��XX��� �L#��4���W$Iit�O ) )G�xS�l�F,�yV���6�}�����ָ@��j T �۠�Җ �{���� ���n"]�,$J�� � n*�\T�uM�fk �<�t���L�ee�#a�� � T�@�
2��U��p�|��� ��k����[p*& � G�Qy�( �_ f �ټ�p .�ڤ���~�� � ��'��,��@H4sS�k�!Ȫ:ݬ���"fE) N�Q� 4O&K�� +l;x�2�%��ݮ�pZ,� < ���O.@=4L�C�ي�m�;_�iM %q� V �4Y����|��B�N��m#��*�sE��Bp�� | ����$�3�3EJ�I �h@�oa`�� � ��a�;.+�!6�%ri� E�Q�p�u�G�g�.� � �t�T�`���Niu�$�I8FQ@e�}&f�S��E�� � �kE9OӨ��.I F��SY9G&��.��?堳( � ����8�����L�v���X m*����I/i�� �D�rlBsm�DE�cQ����}W� �w��±� C ��������0TcIC4�U��m��sF'<�Z i S���M�"��S��U}h�g�c�q�c5w�k���8 � �A+��z'����k��mD�XL���t � ��%|�#o5a�0i�^�{�ơz[ l���HR � �*�����ou��M+K�Ŋ�;��qh� y3�
6$��g涧i0����
�E�g$E��$ ' �:B{m�n=�g���\c*�ӏ���Z" ��Y I W|A
w�O�?�pU]~-�2�!�\O����5� p �-h/� S��~����
a!�1k��j � ��3)�J�$��{�.
w ~�/�l���M� � D�n��q���9��a�_�G���H�E���-W��xZ � ��#YV^b%�}��/'p�O�Gʈ?��z��� I�(��+�S�u��]?�z�9NP�3Q�MJ�B 9 �
���mcJAt�qe�el��]�;�L�� _ j�v��b~�ۥ�)0M�/�띡e��� \� @Z � ����ɵ\|5 ��Z��b���Q 3 ���kb���B � @ȍl2��X�1��}���e��C��>�ȢF)� � �����y�Q+���{"WÌ�R~̟���H���? � ����FAP�icû����;�|" B7�㙨^ �9 - B-<y�� ��9P/�M�#��_��<�� φ6R^ P 3*�ָ䊀��DJ՝�� ��q/�=M�f�t� v � �ý3NP� ��eb�nM `I����<�F � ��*
Y,�}��Ƴ�������X���� � *�7�C
TQ�� ?R����֪¸��FHc�� � } ��da�nGۛ'�*���M���G�]����" ���� 2gj�,���/���c���2| �6څ : �g�b�K��^ؒ���hv��u�\#��̖� _ �U��Q�u"��w�!� �fB"���`ru^���9 � -�?bF��,U1�.Er;H�Ԡ`p I��4M � ܇h���6
���d3�����:iW�jG^��t� � ��z!��<y5�1�aF�=)�;ђ�)Y bčW � ��܆�f؇��"xU. @����;2}X��}H %
� F9�6K�v�/�|S��]t�RF�W2��I L
��V��� Ť��ڃ "��?�f�R�s�[Y�%=� v
�$�����+`�.?�ʿA��=Gݗ��'Lm �
@�J���ۊ�މ
��H��s��P��˓YH� �
H�}ӰWU����f1O_�d ��Hf�
��N�nZ �
p
y��f�9����|= 6���4 ��n`�RM� % /��J��5\�Z��_g4�4�%]�L�� ��3h� H X�Y
��m�kּg�L��~�g���x�5�
y k�3 �G�� ��F2#�)� ER�O|��v\;� � *s�4��bc�v�7���h\Sř�_s� �4�h� � �p[F����ll�<��A�=��l}�K���R� � F?�Z#��.Wi�/0��=�� �9*W�-� h҄� �3(/�e��f��`�z&�e$P��MD� / &��8�i_u& ��>�-Z%�f�>R69ϓ5�%� S m����Wc�L����z0� ���ٶ�$< z C���4�h��y��t:;K�͑\�Df��1 � � PH<��R�N�-Ulֵ��S�O�7g�n�䯲*�� � �D&<�@)�Z?��as� z�����A��? p� � �A�T:�U 3�QZ� j-r76y�c~����
焙v GI��� ����P�
��W� 8
)\��u��ݡ�_6 mV����*���[�1�l&�! d
���� k|)�E@���B�#���b�V�<�2Ǡ3 �
���^br�ee��� ���Nǐ����5�j�Ja �
� �S:c٭ؙo߮ ���qO>�)o��Z� � �
onecore\internal\sdk\inc\ntseapi.h onecore\internal\sdk\inc\ntseapi_x.h onecore\internal\sdk\inc\ntlpcapi.h onecore\internal\sdk\inc\rtlrbtree.h onecore\internal\sdk\inc\ntiolog.h onecore\internal\sdk\inc\ntelfapi.h onecore\external\sdk\inc\minwin\minappmodel.h onecore\external\ddk\inc\ntnls.h onecore\internal\sdk\inc\ntconfig.h onecore\external\shared\inc\pshpack8.h onecore\internal\sdk\inc\ntwow64.h onecore\internal\sdk\inc\ntwow64_x.h onecore\external\sdk\inc\crt\stdarg.h onecore\external\shared\inc\minwin\ntdef.h onecore\external\sdk\inc\crt\ctype.h onecore\internal\sdk\inc\ntpsapi.h onecore\external\shared\inc\pshpck16.h onecore\internal\sdk\inc\ntpsapi_x.h onecore\external\ddk\inc\ntpoapi.h onecore\external\shared\inc\dontuse.h onecore\external\sdk\inc\crt\process.h minkernel\urtl\startup.c onecore\internal\sdk\inc\minwin\ntpnpapi.h onecore\internal\sdk\inc\ntrtlstringandbuffer.h onecore\external\shared\inc\cfg.h onecore\internal\sdk\inc\minwin\umstls.h onecore\internal\sdk\inc\nxamd64.h onecore\external\shared\inc\pshpack1.h onecore\internal\sdk\inc\warning.h shared\inc\winapifamily.h onecore\internal\sdk\inc\suppress_x.h minkernel\urtl\startup.h onecore\internal\sdk\inc\ntxcapi.h shared\inc\winpackagefamily.h onecore\internal\sdk\inc\nt.h onecore\internal\sdk\inc\ntxcapi_x.h onecore\external\shared\inc\kernelspecs.h onecore\external\shared\inc\basetsd.h onecore\external\sdk\inc\crt\excpt.h onecore\external\sdk\inc\crt\crtdefs.h onecore\internal\sdk\inc\rtlhashdef.h onecore\external\shared\inc\specstrings.h onecore\internal\sdk\inc\nturtl.h onecore\external\shared\inc\sal.h onecore\external\shared\inc\dpfilter.h onecore\internal\sdk\inc\ntobapi.h onecore\external\shared\inc\concurrencysal.h onecore\internal\sdk\inc\nttpapi.h onecore\internal\sdk\inc\ntobapi_x.h onecore\external\shared\inc\specstrings_strict.h onecore\external\shared\inc\poppack.h onecore\external\shared\inc\specstrings_undef.h onecore\external\shared\inc\driverspecs.h onecore\internal\sdk\inc\ntrtl.h onecore\internal\sdk\inc\ntrtlpath.h onecore\external\shared\inc\sdv_driverspecs.h onecore\internal\sdk\inc\ntrtl_x.h onecore\external\sdk\inc\crt\vadefs.h onecore\external\shared\inc\ip2string.h onecore\external\shared\inc\sdkddkver.h onecore\internal\sdk\inc\minwin\ntregapi.h onecore\internal\sdk\inc\ntregapi_x.h onecore\internal\sdk\inc\ntamd64.h onecore\internal\sdk\inc\ntamd64_x.h onecore\internal\sdk\inc\minwin\ntdef_p.h onecore\internal\sdk\inc\affinity.h onecore\external\ddk\inc\ntimage.h onecore\external\shared\inc\pshpack4.h onecore\internal\sdk\inc\volatile_accessors.h onecore\external\shared\inc\pshpack2.h onecore\internal\sdk\inc\minwin\ntioapi.h onecore\external\shared\inc\devioctl.h onecore\internal\sdk\inc\minwin\ntioapi_x.h onecore\external\sdk\inc\minwin\rtlsupportapi.h onecore\external\shared\inc\minwin\apiset.h onecore\internal\sdk\inc\ntmmapi.h onecore\external\shared\inc\minwin\apisetcconv.h onecore\internal\sdk\inc\ntmmapi_x.h onecore\internal\sdk\inc\ntldr.h onecore\internal\sdk\inc\nttmapi.h onecore\external\shared\inc\guiddef.h onecore\external\shared\inc\ktmtypes.h onecore\external\sdk\inc\ntassert.h onecore\external\shared\inc\ntstatus.h onecore\internal\sdk\inc\ntkeapi.h onecore\internal\sdk\inc\ntkeapi_x.h onecore\internal\sdk\inc\rtlfeatureconfigtypes.h onecore\external\ddk\inc\mce.h onecore\external\sdk\inc\crt\string.h onecore\internal\sdk\inc\minwin\xstateapi.h onecore\internal\sdk\inc\ntexapi.h onecore\internal\sdk\inc\pebteb.h onecore\internal\sdk\inc\ntexapi_x.h � L� \ \ / / @SH�� H��� H��� �
) � � 6 G � �NtProcessStartup >d Peb AI AJ Z � g B! $LN3 0 d OPeb O � 0 H $ � � � � � �, ( 0 (
Z ( ^ (
j ( n (
� + � +
� ( � (
H��SUVWATAUAVAWH��HL��W�3�H�H @�I�N � 3�H�D$ ��$� L��$� H��$� ��$� H��$� H�D$(�AD����ً�D��H���� �F H�Vp��$� H9Jtf9
uH�V`H9J�� E��H�L$0� 3ɉ�$� D���� �|$0H�\$8��t[8 tR��tN8 t� � 3Ʌ�tH�Ã�u�t08 t(A��H��H�Ã�t� � 3Ʌ�t�H��H��H+�H�u�H�t$ H��� � ��A� ���� A��v
H�\$8�|$0��3�I�N0H��H�L�� 3�L��H��u A� �� H�D$(A���� H�H��� D��8 tpH;�sk��tg8 t� � 3Ʌ�tH�Ã�u�tI8 tAI�6I��A�ĊL���H��H�ƃ�tH;�s� � 3Ʌ�t�H;�s�H���I��A���u�D��$� D��$� I�M�nH�L$ I��H��� � H�L$0� ��$� ��t�E��xH�T$(D�ȋ�$� M��� D��A��H��� H��HA_A^A]A\_^][�) � � 3 j � � > I q � � 0 U G � � g �NtProcessStartup_AfterSecurityCookieInitialized >d Peb AJ AV ] AV B K
>" argc Al � � B� M I
>p d AL '" v AL � �0 " [ �
>" n A m % > AnsiString D0 >h ProcessParameters AJ 3
AL F � [ AL � �0 " [ B 4 b
>i envp AU C � AU B M >p nullPtr B� w
>p s AI k *
>j p AK � . AK + >" NumberOfEnvPointers A d
� A B >" DebugParameter A | �2 � A + Z A B� ; [ >" NumberOfArgPointers Ao g < Ao � � > 2 ># AllocSize AN i , AN ' m
>i argv AH \ B( a 5 >i dst AU . AV s � AU B M AV B K > Status Al p !3� B� T B
>p dEnd AN � � AN ' m " Z m m p m m t w H B! $SkipInit " $CountEnvironmentStrings � d OPeb 0 OAnsiString � p OnullPtr 9' z 9� � 9h � 9G � 9 � O� 0 � H C $ 0 � 5 � : �# A �- C �; G �M N �p P �y R �| Z �� [ �� \ �� ] �� b �� d �� n �� p �� v �� w �� x �� { �� � �� � �� � � � � � � � � � �" p �+ � �9 � �F � �L � �Q � �V � �X � �n � �x � �~ � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � � � � � �
� � � �' � �. � �B � �M � �X � �Y � �^ � �x � �� � �, ) 0 )
y ) } )
� ) � )
� ) � )
� ) � )
� ) � )
� ) � )
� ) � )
) )
e ) i )
u ) y )
� ) � )
� ) � )
� ) � )
� ) � )
� ) � )
) )
* ) . )
: ) > )
h ) l )
| ) � )
� ) � )
� ) � )
� ) � )
� ) � )
) )
3 ) 7 )
C ) G )
b ) f )
r ) v )
� ) � )
� ) � )
� ) � )
� ) � )
� ) � )
� ) � )
) )
$ ) ( )
r - v -
� . � .
� ) � )
� ) )
) )
) )
, ) 0 )
D ) H )
20 * * 1 ��
� � �p`P0 � , , 7 � ' %
RtlNtPathSeperatorString
� 1 /
RtlAlternateDosPathSeperatorString
� ) '
RtlDosPathSeperatorsString
& � _PEB .?AU_PEB@@ ��
��
��
��
��
��
��
��
�� # �6 � _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@ 2 � _LIST_ENTRY .?AU_LIST_ENTRY@@
"
Flink
Blink 2
_LIST_ENTRY .?AU_LIST_ENTRY@@
" Length ���
Initialized ��
SsHandle �
InLoadOrderModuleList
InMemoryOrderModuleList ��
0 InInitializationOrderModuleList ��
@ EntryInProgress ��
H ShutdownInProgress ���
P ShutdownThreadId �6 X _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@
V � _RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��* � _CURDIR .?AU_CURDIR@@ : � _UNICODE_STRING .?AU_UNICODE_STRING@@ B
! Length ���
! MaximumLength
q Buffer ���: _UNICODE_STRING .?AU_UNICODE_STRING@@ *
DosPath ��
Handle ���* _CURDIR .?AU_CURDIR@@ N � _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ ��* � _STRING .?AU_STRING@@ B
! Length ���
! MaximumLength
p Buffer ���* _STRING .?AU_STRING@@ N
! Flags
! Length ���
" TimeStamp
DosPath ��N _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ �� # ��
" MaximumLength
" Length ���
" Flags
" DebugFlags ���
ConsoleHandle
" ConsoleFlags �
StandardInput
( StandardOutput ���
0 StandardError
8 CurrentDirectory �
P DllPath ��
` ImagePathName
p CommandLine ��
� Environment ��
" � StartingX
" � StartingY
" � CountX ���
" � CountY ���
" � CountCharsX ��
" � CountCharsY ��
" � FillAttribute
" � WindowFlags ��
" � ShowWindowFlags ��
� WindowTitle ��
� DesktopInfo ��
� ShellInfo
� RuntimeData ��
� CurrentDirectores
# �EnvironmentSize ��
# �EnvironmentVersion ���
PackageDependencyData
" ProcessGroupId ���
" LoaderThreads
RedirectionDllName ���
HeapPartitionName
# 0DefaultThreadpoolCpuSetMasks �
" 8DefaultThreadpoolCpuSetMaskCount �
" <DefaultThreadpoolThreadMaximum ���V & @_RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��
F � _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ R � _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
# �
! Type �
! CreatorBackTraceIndex
% CriticalSection ��
ProcessLocksList �
" EntryCount ���
" $ ContentionCount ��
" ( Flags
! , CreatorBackTraceIndexHigh
! . SpareUSHORT ��R & 0 _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
$ �
( DebugInfo
LockCount
RecursionCount ���
OwningThread �
LockSemaphore
# SpinCount F ) ( _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ * onecore\internal\sdk\inc\nturtl.h ��
# . � _SLIST_HEADER .?AT_SLIST_HEADER@@
# ��
# 0��
# ��
# <��N
. Depth
/ Sequence �
0 Reserved �
1 NextEntry : 2 <anonymous-tag> .?AU<anonymous-tag>@@ >
# Alignment
# Region ���
3 HeaderX64 . 4 _SLIST_HEADER .?AT_SLIST_HEADER@@
-
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" �� " # �
2 � _LARGE_INTEGER .?AT_LARGE_INTEGER@@ ��*
" LowPart ��
HighPart �: C <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
HighPart �
D u
QuadPart �2 E _LARGE_INTEGER .?AT_LARGE_INTEGER@@ �� " # � � H
I " # � �2 � _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ *
" LowPart ��
" HighPart �: M <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
" HighPart �
N u
# QuadPart �2 O _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ N � _ACTIVATION_CONTEXT_DATA .?AU_ACTIVATION_CONTEXT_DATA@@ ��
Q ��
R F � _ASSEMBLY_STORAGE_MAP .?AU_ASSEMBLY_STORAGE_MAP@@
T # � " # �
" ��
" ��
" ��
" �� # � p # �> � _LEAP_SECOND_DATA .?AU_LEAP_SECOND_DATA@@
^
" ��
" ��6
InheritedAddressSpace
ReadImageFileExecOptions �
BeingDebugged
BitField �
ImageUsesLargePages ��
IsProtectedProcess ���
IsImageDynamicallyRelocated ��
SkipPatchingUser32Forwarders �
IsPackagedProcess
IsAppContainer ���
IsProtectedProcessLight ��
IsLongPathAwareProcess ���
Padding0 �
Mutant ���
ImageBaseAddress �
Ldr ��
" ProcessParameters
( SubSystemData
0 ProcessHeap ��
, 8 FastPebLock ��
6 @ AtlThunkSListPtr �
H IFEOKey ��
" P CrossProcessFlags
7 P ProcessInJob �
8 P ProcessInitializing ��
9 P ProcessUsingVEH ��
: P ProcessUsingVCH ��
; P ProcessUsingFTH ��
< P ProcessPreviouslyThrottled ���
= P ProcessCurrentlyThrottled
> P ProcessImagesHotPatched ��
? P ReservedBits0
T Padding1 �
X KernelCallbackTable ��
X UserSharedInfoPtr
" ` SystemReserved ���
" d AtlThunkSListPtr32 ���
h ApiSetMap
" p TlsExpansionCounter ��
t Padding2 �
x TlsBitmap
@ � TlsBitmapBits
� ReadOnlySharedMemoryBase �
� SharedData ���
A � ReadOnlyStaticServerData �
� AnsiCodePageData �
� OemCodePageData ��
� UnicodeCaseTableData �
" � NumberOfProcessors ���
" � NtGlobalFlag �
B � CriticalSectionTimeout ���
# � HeapSegmentReserve ���
# � HeapSegmentCommit
# � HeapDeCommitTotalFreeThreshold ���
# � HeapDeCommitFreeBlockThreshold ���
" � NumberOfHeaps
" � MaximumNumberOfHeaps �
A � ProcessHeaps �
� GdiSharedHandleTable �
ProcessStarterHelper �
" GdiDCAttributeList ���
Padding3 �
% LoaderLock ���
" OSMajorVersion ���
" OSMinorVersion ���
! OSBuildNumber
! "OSCSDVersion �
" $OSPlatformId �
" (ImageSubsystem ���
" ,ImageSubsystemMajorVersion ���
" 0ImageSubsystemMinorVersion ���
4Padding4 �
# 8ActiveProcessAffinityMask
G @GdiHandleBuffer ��
J 0PostProcessInitRoutine ���
8TlsExpansionBitmap ���
K @TlsExpansionBitmapBits ���
" �SessionId
�Padding5 �
L �AppCompatFlags ���
L �AppCompatFlagsUser ���
�pShimData
�AppCompatInfo
�CSDVersion ���
S �ActivationContextData
U ProcessAssemblyStorageMap
S SystemDefaultActivationContextData ���
U SystemAssemblyStorageMap �
# MinimumStackCommit ���
V SparePointers
W @SpareUlongs ��
XWerRegistrationData ��
`WerShipAssertPtr �
hpUnused ��
ppImageHeaderHash �
" xTracingFlags �
X xHeapTracingEnabled ���
Y xCritSecTracingEnabled
Z xLibLoaderTracingEnabled ��
[ xSpareTracingBits �
|Padding6 �
# �CsrServerReadOnlySharedMemoryBase
# �TppWorkerpListLock ���
�TppWorkerpList ���
\ �WaitOnAddressHashTable ���
�TelemetryCoverageHeader ��
" �CloudFileFlags ���
" �CloudFileDiagFlags ���
p �PlaceholderCompatibilityMode �
] �PlaceholderCompatibilityModeReserved �
_ �LeapSecondData ���
" �LeapSecondFlags ��
` �SixtySecondEnabled ���
a �Reserved �
" �NtGlobalFlag2 & s b �_PEB .?AU_PEB@@ ��
d e : f NtProcessStartup_AfterSecurityCookieInitialized
p
t t k l isspace
q " n . o NtStartupCountEnvironmentStrings ���
q q r & s NtRecordEnvironmentPointers t i i " t u v main ���
h h x
y
��
| { } ~
" # �
�
{ �
� �
� f NtProcessStartup ���" I __security_init_cookie � JobObjectBasicAccountingInformation �� JobObjectBasicLimitInformation ��� JobObjectBasicProcessIdList �� JobObjectBasicUIRestrictions � JobObjectSecurityLimitInformation JobObjectEndOfJobTimeInformation � JobObjectAssociateCompletionPortInformation �� JobObjectBasicAndIoAccountingInformation � JobObjectExtendedLimitInformation
JobObjectJobSetInformation ��� JobObjectGroupInformation JobObjectNotificationLimitInformation
JobObjectLimitViolationInformation ��� JobObjectGroupInformationEx �� JobObjectCpuRateControlInformation ��� JobObjectCompletionFilter JobObjectCompletionCounter ��� JobObjectFreezeInformation ��� JobObjectExtendedAccountingInformation ��� JobObjectWakeInformation � JobObjectBackgroundInformation ��� JobObjectSchedulingRankBiasInformation ��� JobObjectTimerVirtualizationInformation �� JobObjectCycleTimeNotification ��� JobObjectClearEvent �� JobObjectInterferenceInformation � JobObjectClearPeakJobMemoryUsed �� JobObjectMemoryUsageInformation �� JobObjectSharedCommit JobObjectContainerId � JobObjectIoRateControlInformation % JobObjectSiloRootDirectory ��� & JobObjectServerSiloBasicInformation �� ' JobObjectServerSiloUserSharedData ( JobObjectServerSiloInitialize ) JobObjectServerSiloRunningState �� * JobObjectIoAttribution ��� + JobObjectMemoryPartitionInformation �� , JobObjectContainerTelemetryId - JobObjectSiloSystemRoot �� . JobObjectEnergyTrackingState � / JobObjectThreadImpersonationInformation �� JobObjectReserved1Information JobObjectReserved2Information JobObjectReserved3Information JobObjectReserved4Information JobObjectReserved5Information JobObjectReserved6Information JobObjectReserved7Information JobObjectReserved8Information JobObjectReserved9Information JobObjectReserved10Information ��� JobObjectReserved11Information ��� JobObjectReserved12Information ��� JobObjectReserved13Information ��� JobObjectReserved14Information ��� JobObjectNetRateControlInformation ��� ! JobObjectNotificationLimitInformation2 ��� " JobObjectLimitViolationInformation2 �� # JobObjectCreateSilo �� $ JobObjectSiloBasicInformation % JobObjectReserved15Information ��� & JobObjectReserved16Information ��� ' JobObjectReserved17Information ��� ( JobObjectReserved18Information ��� ) JobObjectReserved19Information ��� * JobObjectReserved20Information ��� + JobObjectReserved21Information ��� , JobObjectReserved22Information ��� - JobObjectReserved23Information ��� . JobObjectReserved24Information ��� / JobObjectReserved25Information ��� 0 MaxJobObjectInfoClass > I t � _JOBOBJECTINFOCLASS .?AW4_JOBOBJECTINFOCLASS@@ �. onecore\internal\sdk\inc\ntpsapi_x.h ���� SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN �� SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS �� SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE ���N t � SE_WS_APPX_SIGNATURE_ORIGIN .?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@ �* onecore\internal\sdk\inc\ntseapi.h � JOB_OBJECT_IO_RATE_CONTROL_ENABLE JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS ���Z t � JOB_OBJECT_IO_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@ ���j PsNeverDuplicate � PsRequestDuplicate ��� PsAlwaysDuplicate PsMaxStdHandleStates �B t � _PS_STD_HANDLE_STATE .?AW4_PS_STD_HANDLE_STATE@@ ��� PsWakeReasonUser � PsWakeReasonExecutionRequired PsWakeReasonKernel ��� PsWakeReasonInstrumentation �� PsWakeReasonPreserveProcess �� PsWakeReasonActivityReference PsWakeReasonWorkOnBehalf � PsMaxWakeReasons �6 t � _PS_WAKE_REASON .?AW4_PS_WAKE_REASON@@ � TP_CALLBACK_PRIORITY_HIGH TP_CALLBACK_PRIORITY_NORMAL �� TP_CALLBACK_PRIORITY_LOW � TP_CALLBACK_PRIORITY_INVALID � TP_CALLBACK_PRIORITY_COUNT ���B t � _TP_CALLBACK_PRIORITY .?AW4_TP_CALLBACK_PRIORITY@@ �6 FeatureConfigurationPriorityImageDefault � FeatureConfigurationPriorityService �� FeatureConfigurationPriorityUser �
FeatureConfigurationPriorityUserPolicy ��� FeatureConfigurationPriorityTest � FeatureConfigurationPriorityImageOverride FeatureConfigurationPriorityMax ��^ t � _RTL_FEATURE_CONFIGURATION_PRIORITY .?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@ �: onecore\internal\sdk\inc\rtlfeatureconfigtypes.h ���> PsProtectedSignerNone PsProtectedSignerAuthenticode PsProtectedSignerCodeGen � PsProtectedSignerAntimalware � PsProtectedSignerLsa � PsProtectedSignerWindows � PsProtectedSignerWinTcb �� PsProtectedSignerWinSystem ��� PsProtectedSignerApp � PsProtectedSignerMax �B
t � _PS_PROTECTED_SIGNER .?AW4_PS_PROTECTED_SIGNER@@ ���
SystemProcessClassificationNormal SystemProcessClassificationSystem SystemProcessClassificationSecureSystem �� SystemProcessClassificationMemCompression SystemProcessClassificationRegistry �� SystemProcessClassificationMaximum ���V t � _SYSTEM_PROCESS_CLASSIFICATION .?AW4_SYSTEM_PROCESS_CLASSIFICATION@@ ���* onecore\internal\sdk\inc\ntexapi.h �~ PowerUserPresent � PowerUserNotPresent �� PowerUserInactive PowerUserMaximum � PowerUserInvalid �F t � _USER_ACTIVITY_PRESENCE .?AW4_USER_ACTIVITY_PRESENCE@@ �* onecore\external\ddk\inc\ntpoapi.h � MemoryNotContiguous �� MemoryAlignedAndContiguous ��� MemoryNotResident MemoryNotEligibleToMakeContiguous MemoryContiguityStateMax �f t � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE .?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@ ���* onecore\internal\sdk\inc\ntmmapi.h � PsAttributeParentProcess � PsAttributeDebugObject ��� PsAttributeToken � PsAttributeClientId �� PsAttributeTebAddress PsAttributeImageName � PsAttributeImageInfo � PsAttributeMemoryReserve � PsAttributePriorityClass � PsAttributeErrorMode �
PsAttributeStdHandleInfo � PsAttributeHandleList PsAttributeGroupAffinity �
PsAttributePreferredNode � PsAttributeIdealProcessor PsAttributeUmsThread � PsAttributeMitigationOptions � PsAttributeProtectionLevel ��� PsAttributeSecureProcess � PsAttributeJobList ��� PsAttributeChildProcessPolicy PsAttributeAllApplicationPackagesPolicy �� PsAttributeWin32kFilter �� PsAttributeSafeOpenPromptOriginClaim � PsAttributeBnoIsolation �� PsAttributeDesktopAppPolicy �� PsAttributeChpe �� PsAttributeMitigationAuditOptions PsAttributeMax ���: t � _PS_ATTRIBUTE_NUM .?AW4_PS_ATTRIBUTE_NUM@@ �# SystemBasicInformation ��� SystemProcessorInformation ��� SystemPerformanceInformation � SystemTimeOfDayInformation ��� SystemPathInformation SystemProcessInformation � SystemCallCountInformation ��� SystemDeviceInformation �� SystemProcessorPerformanceInformation SystemFlagsInformation ���
SystemCallTimeInformation SystemModuleInformation �� SystemLocksInformation ���
SystemStackTraceInformation �� SystemPagedPoolInformation ��� SystemNonPagedPoolInformation SystemHandleInformation �� SystemObjectInformation �� SystemPageFileInformation SystemVdmInstemulInformation � SystemVdmBopInformation �� SystemFileCacheInformation ��� SystemPoolTagInformation � SystemInterruptInformation ��� SystemDpcBehaviorInformation � SystemFullMemoryInformation �� SystemLoadGdiDriverInformation ��� SystemUnloadGdiDriverInformation � SystemTimeAdjustmentInformation �� SystemSummaryMemoryInformation ��� SystemMirrorMemoryInformation SystemPerformanceTraceInformation SystemObsolete0 �� ! SystemExceptionInformation ��� " SystemCrashDumpStateInformation �� # SystemKernelDebuggerInformation �� $ SystemContextSwitchInformation ��� % SystemRegistryQuotaInformation ��� & SystemExtendServiceTableInformation �� ' SystemPrioritySeperation � ( SystemVerifierAddDriverInformation ��� ) SystemVerifierRemoveDriverInformation * SystemProcessorIdleInformation ��� + SystemLegacyDriverInformation , SystemCurrentTimeZoneInformation � - SystemLookasideInformation ��� . SystemTimeSlipNotification ��� / SystemSessionCreate �� 0 SystemSessionDetach �� 1 SystemSessionInformation � 2 SystemRangeStartInformation �� 3 SystemVerifierInformation 4 SystemVerifierThunkExtend 5 SystemSessionProcessInformation �� 6 SystemLoadGdiDriverInSystemSpace � 7 SystemNumaProcessorMap ��� 8 SystemPrefetcherInformation �� 9 SystemExtendedProcessInformation � : SystemRecommendedSharedDataAlignment � ; SystemComPlusPackage � < SystemNumaAvailableMemory = SystemProcessorPowerInformation �� > SystemEmulationBasicInformation �� ? SystemEmulationProcessorInformation �� @ SystemExtendedHandleInformation �� A SystemLostDelayedWriteInformation B SystemBigPoolInformation � C SystemSessionPoolTagInformation �� D SystemSessionMappedViewInformation ��� E SystemHotpatchInformation F SystemObjectSecurityMode � G SystemWatchdogTimerHandler ��� H SystemWatchdogTimerInformation ��� I SystemLogicalProcessorInformation J SystemWow64SharedInformationObsolete � K SystemRegisterFirmwareTableInformationHandler L SystemFirmwareTableInformation ��� M SystemModuleInformationEx N SystemVerifierTriageInformation �� O SystemSuperfetchInformation �� P SystemMemoryListInformation �� Q SystemFileCacheInformationEx � R SystemThreadPriorityClientIdInformation �� S SystemProcessorIdleCycleTimeInformation �� T SystemVerifierCancellationInformation U SystemProcessorPowerInformationEx V SystemRefTraceInformation W SystemSpecialPoolInformation � X SystemProcessIdInformation ��� Y SystemErrorPortInformation ��� Z SystemBootEnvironmentInformation � [ SystemHypervisorInformation �� \ SystemVerifierInformationEx �� ] SystemTimeZoneInformation ^ SystemImageFileExecutionOptionsInformation ��� _ SystemCoverageInformation ` SystemPrefetchPatchInformation ��� a SystemVerifierFaultsInformation �� b SystemSystemPartitionInformation � c SystemSystemDiskInformation �� d SystemProcessorPerformanceDistribution ��� e SystemNumaProximityNodeInformation ��� f SystemDynamicTimeZoneInformation � g SystemCodeIntegrityInformation ��� h SystemProcessorMicrocodeUpdateInformation i SystemProcessorBrandString ��� j SystemVirtualAddressInformation �� k SystemLogicalProcessorAndGroupInformation l SystemProcessorCycleTimeInformation �� m SystemStoreInformation ��� n SystemRegistryAppendString ��� o SystemAitSamplingValue ��� p SystemVhdBootInformation � q SystemCpuQuotaInformation r SystemNativeBasicInformation � s SystemErrorPortTimeouts �� t SystemLowPriorityIoInformation ��� u SystemBootEntropyInformation � v SystemVerifierCountersInformation w SystemPagedPoolInformationEx � x SystemSystemPtesInformationEx y SystemNodeDistanceInformation z SystemAcpiAuditInformation ��� { SystemBasicPerformanceInformation | SystemQueryPerformanceCounterInformation � } SystemSessionBigPoolInformation �� ~ SystemBootGraphicsInformation SystemScrubPhysicalMemoryInformation � � SystemBadPageInformation � � SystemProcessorProfileControlArea � SystemCombinePhysicalMemoryInformation ��� � SystemEntropyInterruptTimingInformation �� � SystemConsoleInformation � � SystemPlatformBinaryInformation �� � SystemPolicyInformation �� � SystemHypervisorProcessorCountInformation � SystemDeviceDataInformation �� � SystemDeviceDataEnumerationInformation ��� � SystemMemoryTopologyInformation �� � SystemMemoryChannelInformation ��� � SystemBootLogoInformation � SystemProcessorPerformanceInformationEx �� � SystemCriticalProcessErrorLogInformation � � SystemSecureBootPolicyInformation � SystemPageFileInformationEx �� � SystemSecureBootInformation �� � SystemEntropyInterruptTimingRawInformation ��� � SystemPortableWorkspaceEfiLauncherInformation � SystemFullProcessInformation � � SystemKernelDebuggerInformationEx � SystemBootMetadataInformation � SystemSoftRebootInformation �� � SystemElamCertificateInformation � � SystemOfflineDumpConfigInformation ��� � SystemProcessorFeaturesInformation ��� � SystemRegistryReconciliationInformation �� � SystemEdidInformation � SystemManufacturingInformation ��� � SystemEnergyEstimationConfigInformation �� � SystemHypervisorDetailInformation � SystemProcessorCycleStatsInformation � � SystemVmGenerationCountInformation ��� � SystemTrustedPlatformModuleInformation ��� � SystemKernelDebuggerFlags � SystemCodeIntegrityPolicyInformation � � SystemIsolatedUserModeInformation � SystemHardwareSecurityTestInterfaceResultsInformation � SystemSingleModuleInformation � SystemAllowedCpuSetsInformation �� � SystemVsmProtectionInformation ��� � SystemInterruptCpuSetsInformation � SystemSecureBootPolicyFullInformation � SystemCodeIntegrityPolicyFullInformation � � SystemAffinitizedInterruptProcessorInformation ��� � SystemRootSiloInformation � SystemCpuSetInformation �� � SystemCpuSetTagInformation ��� � SystemWin32WerStartCallout ��� � SystemSecureKernelProfileInformation � � SystemCodeIntegrityPlatformManifestInformation ��� � SystemInterruptSteeringInformation ��� � SystemSupportedProcessorArchitectures � SystemMemoryUsageInformation � � SystemCodeIntegrityCertificateInformation � SystemPhysicalMemoryInformation �� � SystemControlFlowTransition �� � SystemKernelDebuggingAllowed � � SystemActivityModerationExeState � � SystemActivityModerationUserSettings � � SystemCodeIntegrityPoliciesFullInformation ��� � SystemCodeIntegrityUnlockInformation � � SystemIntegrityQuotaInformation �� � SystemFlushInformation ��� � SystemProcessorIdleMaskInformation ��� � SystemSecureDumpEncryptionInformation � SystemWriteConstraintInformation � � SystemKernelVaShadowInformation �� � SystemHypervisorSharedPageInformation � SystemFirmwareBootPerformanceInformation � � SystemCodeIntegrityVerificationInformation ��� � SystemFirmwarePartitionInformation ��� � SystemSpeculationControlInformation �� � SystemDmaGuardPolicyInformation �� � SystemEnclaveLaunchControlInformation � SystemWorkloadAllowedCpuSetsInformation �� � SystemCodeIntegrityUnlockModeInformation � � SystemLeapSecondInformation �� � SystemFlags2Information �� � SystemSecurityModelInformation ��� � SystemCodeIntegritySyntheticCacheInformation � � SystemFeatureConfigurationInformation � SystemFeatureConfigurationSectionInformation � � SystemFeatureUsageSubscriptionInformation � SystemSecureSpeculationControlInformation � SystemSpacesBootInformation �� � SystemFwRamdiskInformation ��� � SystemWheaIpmiHardwareInformation � SystemDifSetRuleClassInformation � � SystemDifClearRuleClassInformation ��� � SystemDifApplyPluginVerificationOnDriver � � SystemDifRemovePluginVerificationOnDriver � SystemShadowStackInformation � � SystemBuildVersionInformation � SystemPoolLimitInformation ��� � SystemCodeIntegrityAddDynamicStore ��� � SystemCodeIntegrityClearDynamicStores � SystemPoolZeroingInformation � � MaxSystemInfoClass ���J � t � _SYSTEM_INFORMATION_CLASS .?AW4_SYSTEM_INFORMATION_CLASS@@ �� PsCreateInitialState � PsCreateFailOnFileOpen ��� PsCreateFailOnSectionCreate �� PsCreateFailExeFormat PsCreateFailMachineMismatch �� PsCreateFailExeName �� PsCreateSuccess �� PsCreateMaximumStates 6 t � PS_CREATE_STATE .?AW4PS_CREATE_STATE@@ � JOB_OBJECT_NET_RATE_CONTROL_ENABLE ��� JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS ��Z t � JOB_OBJECT_NET_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@ �z KCONTINUE_UNWIND � KCONTINUE_RESUME � KCONTINUE_LONGJUMP ��� KCONTINUE_SET KCONTINUE_LAST ���6 t � _KCONTINUE_TYPE .?AW4_KCONTINUE_TYPE@@ �* onecore\internal\sdk\inc\ntxcapi.h �: VRF_TRIAGE_CONTEXT_NONE �� VRF_TRIAGE_CONTEXT_DEFAULT ��� VRF_TRIAGE_CONTEXT_DEVELOPMENT ��� VRF_TRIAGE_CONTEXT_CERTIFICATION � VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED ��� VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING � NUM_VRF_TRIAGE_CONTEXTS ��> t � _VRF_TRIAGE_CONTEXT .?AW4_VRF_TRIAGE_CONTEXT@@ �* COMIMAGE_FLAGS_ILONLY COMIMAGE_FLAGS_32BITREQUIRED � COMIMAGE_FLAGS_IL_LIBRARY COMIMAGE_FLAGS_STRONGNAMESIGNED �� COMIMAGE_FLAGS_NATIVE_ENTRYPOINT � � COMIMAGE_FLAGS_TRACKDEBUGDATA � COMIMAGE_FLAGS_32BITPREFERRED COR_VERSION_MAJOR_V2 � COR_VERSION_MAJOR COR_VERSION_MINOR COR_DELETED_NAME_LENGTH �� COR_VTABLEGAP_NAME_LENGTH NATIVE_TYPE_MAX_CB ��� � COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE � IMAGE_COR_MIH_METHODRVA �� IMAGE_COR_MIH_EHRVA �� IMAGE_COR_MIH_BASICBLOCK � COR_VTABLE_32BIT � COR_VTABLE_64BIT � COR_VTABLE_FROM_UNMANAGED COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN ��� COR_VTABLE_CALL_MOST_DERIVED � IMAGE_COR_EATJ_THUNK_SIZE MAX_CLASS_NAME ��� MAX_PACKAGE_NAME �R t � ReplacesCorHdrNumericDefines .?AW4ReplacesCorHdrNumericDefines@@ ���� SystemFeatureConfigurationSectionTypeBoot SystemFeatureConfigurationSectionTypeRuntime � SystemFeatureConfigurationSectionTypeUsageTriggers ��� SystemFeatureConfigurationSectionTypeCount ���n t � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE .?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@ ���~ PsProtectedTypeNone �� PsProtectedTypeProtectedLight PsProtectedTypeProtected � PsProtectedTypeMax ���> t � _PS_PROTECTED_TYPE .?AW4_PS_PROTECTED_TYPE@@ ���
$
B
I
|
���
���
���
���� -FC -MT -c -Zc:wchar_t- -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973 -Brepro
� > � -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X � � � � � ���5�I>$d��{ �j�n�M���'��Aі�f��)Y�d���)Y�d���K�f(��}�ڐ�kҦcd�OWى��(��4��33��H�J-WV8o WJv �.�M�3Q�� ����BН=�舢�Z�£*:��w���WS� �Y��e�*P� @comp.idk�� @feat.00�I ��� .debug$S \2 e .rdata �ہ e .rdata �w � e .rdata h�Q� e < .rdata x� � e U n main isspace .rdata x� � e � � .rdata 1�, e � � % E [ s .text$mn }� e .debug$S
e .text$mn
� ^ e .debug$S t \
e � �
$LN4 $LN3 $LN64
� B
� +
.xdata ���� e � .pdata
28~v e
.xdata 1x�
e % .pdata _�p~
e ] .debug$S 4 e .debug$S @ e .debug$S 8 e .debug$T �n e .chks64 � e � ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ ??_C@_13CGOKJPIL@?$AA?1@ RtlNtPathSeperatorString __imp_NtTerminateProcess RtlAlternateDosPathSeperatorString __imp_RtlUnicodeStringToAnsiString RtlDosPathSeperatorsString NtRecordEnvironmentPointers NtStartupCountEnvironmentStrings __imp_RtlNormalizeProcessParams __imp_RtlAllocateHeap __imp_RtlFreeAnsiString __security_init_cookie NtProcessStartup NtProcessStartup_AfterSecurityCookieInitialized $SkipInit$66 $CountEnvironmentStrings$65 $unwind$NtProcessStartup $pdata$NtProcessStartup $unwind$NtProcessStartup_AfterSecurityCookieInitialized $pdata$NtProcessStartup_AfterSecurityCookieInitialized
/119 1606894328 100666 35289 `
d� �B�_�� * .debug$S �. � @ B.rdata �1 @0@.rdata �1 @0@.rdata �1 @0@.rdata �1 �1 @@@.rdata �1 �1 @@@.rdata �1 2 @@@.text$mn + 2 0`.debug$S < 72 s3 @B.text$mn - �3 0`.debug$S H �3 85
@B.debug$S 4 �5 �5 @B.debug$S @ �5 $6 @B.debug$S 8 86 p6 @B.debug$T DL �6 @ B.chks64 � Ȃ
.drectve ��
� ~ @ d:\os\obj\amd64fre\minkernel\urtl\objfre\amd64\helper.obj : < � � k k
Microsoft (R) Optimizing Compiler � � & JobObjectReserved2Information 2 SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED & JobObjectReserved9Information � � ! JobObjectWakeInformation ( JobObjectClearPeakJobMemoryUsed ' ) JobObjectReserved19Information 5 JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME * ' JobObjectServerSiloUserSharedData ' ( JobObjectReserved18Information PsMaxStdHandleStates PsMaxWakeReasons ' * JobObjectReserved20Information ' % JobObjectReserved15Information & , JobObjectContainerTelemetryId PsNeverDuplicate % TP_CALLBACK_PRIORITY_INVALID # JobObjectFreezeInformation ' . JobObjectReserved24Information 2 FeatureConfigurationPriorityImageOverride , SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS ' JobObjectReserved12Information ( ) JobObjectServerSiloRunningState - SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE JobObjectSharedCommit & JobObjectReserved3Information & ( JobObjectServerSiloInitialize PsProtectedSignerMax + SystemProcessClassificationMaximum # % JobObjectSiloRootDirectory ' ' JobObjectReserved17Information * JobObjectIoAttribution ' JobObjectReserved11Information & JobObjectReserved4Information PowerUserMaximum ! # MemoryContiguityStateMax � * ( JobObjectMemoryUsageInformation � � * JobObjectIoRateControlInformation & JobObjectReserved8Information ' , JobObjectReserved22Information $ TP_CALLBACK_PRIORITY_NORMAL * JOB_OBJECT_IO_RATE_CONTROL_ENABLE ' - JobObjectReserved23Information & PsAttributeMax ' JobObjectReserved13Information % ( � SystemPoolZeroingInformation & JobObjectReserved1Information & JobObjectReserved6Information * PsCreateInitialState 0 , JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS 9 JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL JobObjectClearEvent & JobObjectReserved5Information & JobObjectReserved7Information 2 , JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH ) JobObjectInterferenceInformation , & JobObjectServerSiloBasicInformation JobObjectContainerId 0 / JobObjectThreadImpersonationInformation - JobObjectSiloSystemRoot ' JobObjectCycleTimeNotification ' JobObjectReserved10Information + , JOB_OBJECT_NET_RATE_CONTROL_ENABLE , + JobObjectMemoryPartitionInformation A JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP . KCONTINUE_UNWIND # 1 VRF_TRIAGE_CONTEXT_DEFAULT / JobObjectExtendedAccountingInformation , SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN % . JobObjectEnergyTrackingState ' + JobObjectReserved21Information 3 COR_VERSION_MAJOR_V2 ' / JobObjectReserved25Information ' & JobObjectReserved16Information ' JobObjectReserved14Information 3 5 SystemFeatureConfigurationSectionTypeCount ' JobObjectBackgroundInformation 0 JobObjectTimerVirtualizationInformation 7 PsProtectedTypeMax - , JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG / JobObjectSchedulingRankBiasInformation / SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE
PPVOID _TP_CALLBACK_PRIORITY _JOBOBJECTINFOCLASS _UNICODE_STRING & _PS_ATTRIBUTE_NUM _PS_WAKE_REASON ( _SYSTEM_INFORMATION_CLASS ( , JOB_OBJECT_NET_RATE_CONTROL_FLAGS LONG_PTR # PUINT_PTR # ULONG_PTR p PCHAR ! wchar_t " SE_WS_APPX_SIGNATURE_ORIGIN UNICODE_STRING ' JOB_OBJECT_IO_RATE_CONTROL_FLAGS _USER_ACTIVITY_PRESENCE PLONG PBOOLEAN . _KCONTINUE_TYPE LONG # ULONG64
# SIZE_T # 3 ReplacesCorHdrNumericDefines q PWCH
PSHORT 1 _VRF_TRIAGE_CONTEXT " TP_VERSION u PUINT32 p CCHAR * _RTL_FEATURE_CONFIGURATION_PRIORITY TP_CALLBACK_PRIORITY " LOGICAL 1 5 _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE
t INT _PS_STD_HANDLE_STATE UCHAR " LCID BOOLEAN
! USHORT PVOID q WCHAR PSE_SIGNING_LEVEL % _SYSTEM_PROCESS_CLASSIFICATION
LONG64 " ULONG
q PWCHAR q PWSTR * PS_CREATE_STATE _PS_PROTECTED_SIGNER # UINT_PTR NTSTATUS 7 _PS_PROTECTED_TYPE
HANDLE # ULONGLONG
" PULONG
# size_t # PULONG64 LONGLONG - # _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE SHORT PLONG64 INT_PTR
PUCHAR p CHAR � 8 �0:s�0pV�eҐ����lj� �6�Ȗ0 � $ ƨ��T ��� Ȓ� ���)n���y��aP`I I f߹��R�|��ڕ����G/S�6�<��� m o�&���-�},��'�w��_�BIS;�§g
�7; � �>� j�t�&~8^�B��J2�/Ru�~ � �[�-%`4�����o2�>�'�q.qg�Gn��) � �� ��/�5h��d�����,�]0�f& (� `���[4dx���By%�Г��� z�&K�-�pW ( ���{�$��N�� ��~p��o7��T�1*���. L G�*㥬2����M���}�b�R�̫�)�� s �G�/�m��hB-����-q�b}��Y�~Y � ����̫��2r�WQ��K��TI�Up��/�z � ��� [r�"��衷� �R ��ҹ�� �� � ����w�^��ȯ�
?���;��f���B(H� �[��=�
Tǜ�
]����>d��Wƫ��� 1 3E �� �r`QQ���e��e����`z� i T 4o��g-+ 2ܪܚosm�E����a��^�R�=� { E~/EX"�-�p-���i����`��.�z#�0� � �J��W6���,�)J dɫ7�%eڭ�� � n����*��
Ռ�T�~�}����� ��� � )G�xS�l�F,�yV���6�}�����ָ@��j �۠�Җ �{���� ���n"]�,$J�� 6 n*�\T�uM�fk �<�t���L�ee�#a�� X T�@�
2��U��p�|��� ��k����[p*& � G�Qy�( �_ f �ټ�p .�ڤ���~�� � ��'��,��@H4sS�k�!Ȫ:ݬ���"fE) � N�Q� 4O&K�� +l;x�2�%��ݮ�pZ,� � ���O.@=4L�C�ي�m�;_�iM %q� �4Y����|��B�N��m#��*�sE��Bp�� . ����$�3�3EJ�I �h@�oa`�� G ��a�;.+�!6�%ri� E�Q�p�u�G�g�.� j �t�T�`���Niu�$�I8FQ@e�}&f�S��E�� � �kE9OӨ��.I F��SY9G&��.��?堳( � ����8�����L�v���X m*����I/i�� � �D�rlBsm�DE�cQ����}W� �w��±� � ��������0TcIC4�U��m��sF'<�Z S���M�"��S��U}h�g�c�q�c5w�k���8 @ �A+��z'����k��mD�XL���t g ��%|�#o5a�0i�^�{�ơz[ l���HR � �*�����ou��M+K�Ŋ�;��qh� � y3�
6$��g涧i0����
�E�g$E��$ � �:B{m�n=�g���\c*�ӏ���Z" ��Y � W|A
w�O�?�pU]~-�2�!�\O����5� " �-h/� S��~����
a!�1k��j E ��3)�J�$��{�.
w ~�/�l���M� r D�n��q���9��a�_�G���H�E���-W��xZ � ��#YV^b%�}��/'p�O�Gʈ?��z��� � I�(��+�S�u��]?�z�9NP�3Q�MJ�B � �
���mcJAt�qe�el��]�;�L�� j�v��b~�ۥ�)0M�/�띡e��� \� @Z A ����ɵ\|5 ��Z��b���Q 3 ���kb���B k @ȍl2��X�1��}���e��C��>�ȢF)� � �����y�Q+���{"WÌ�R~̟���H���? � ����FAP�icû����;�|" B7�㙨^ �9 � B-<y�� ��9P/�M�#��_��<�� φ6R^ 3*�ָ䊀��DJ՝�� ��q/�=M�f�t� ( � �ý3NP� ��eb�nM `I����<�F P ��*
Y,�}��Ƴ�������X���� x *�7�C
TQ�� ?R����֪¸��FHc�� � } ��da�nGۛ'�*���M���G�]����" � ���� 2gj�,���/���c���2| �6څ � �g�b�K��^ؒ���hv��u�\#��̖� �U��Q�u"��w�!� �fB"���`ru^���9 ; -�?bF��,U1�.Er;H�Ԡ`p I��4M _ ܇h���6
���d3�����:iW�jG^��t� � ��z!��<y5�1�aF�=)�;ђ�)Y bčW � ��܆�f؇��"xU. @����;2}X��}H � � F9�6K�v�/�|S��]t�RF�W2��I � ��V��� Ť��ڃ "��?�f�R�s�[Y�%=� (
�$�����+`�.?�ʿA��=Gݗ��'Lm O
@�J���ۊ�މ
��H��s��P��˓YH� {
H�}ӰWU����f1O_�d ��Hf�
��N�nZ �
p
y��f�9����|= 6���4 ��n`�RM� �
/��J��5\�Z��_g4�4�%]�L�� ��3h� �
X�Y
��m�kּg�L��~�g���x�5�
+ k�3 �G�� ��F2#�)� ER�O|��v\;� P *s�4��bc�v�7���h\Sř�_s� �4�h� q �p[F����ll�<��A�=��l}�K���R� � F?�Z#��.Wi�/0��=�� �9*W�-� � h҄� �3(/�e��f��`�z&�e$P��MD� � &��8�i_u& ��>�-Z%�f�>R69ϓ5�%� m����Wc�L����z0� ���ٶ�$< , C���4�h��y��t:;K�͑\�Df��1 � O PH<��R�N�-Ulֵ��S�O�7g�n�䯲*�� t �D&<�@)�Z?��as� z�����A��? p� � �A�T:�U 3�QZ� j-r76y�c~���� � 焙v GI��� ����P�
��W� � )\��u��ݡ�_6 mV����*���[�1�l&�!
���� k|)�E@���B�#���b�V�<�2Ǡ3 9
���^br�ee��� ���Nǐ����5�j�Ja [
� �S:c٭ؙo߮ ���qO>�)o��Z� � �
onecore\internal\sdk\inc\ntseapi.h onecore\internal\sdk\inc\ntseapi_x.h onecore\internal\sdk\inc\ntlpcapi.h onecore\internal\sdk\inc\rtlrbtree.h onecore\internal\sdk\inc\ntiolog.h onecore\internal\sdk\inc\ntelfapi.h onecore\external\sdk\inc\minwin\minappmodel.h onecore\external\ddk\inc\ntnls.h onecore\internal\sdk\inc\ntconfig.h onecore\external\shared\inc\pshpack8.h onecore\internal\sdk\inc\ntwow64.h onecore\internal\sdk\inc\ntwow64_x.h onecore\external\sdk\inc\crt\stdarg.h onecore\external\shared\inc\minwin\ntdef.h onecore\external\sdk\inc\crt\ctype.h onecore\internal\sdk\inc\ntpsapi.h onecore\external\shared\inc\pshpck16.h onecore\internal\sdk\inc\ntpsapi_x.h onecore\external\ddk\inc\ntpoapi.h minkernel\urtl\helper.c onecore\internal\sdk\inc\minwin\ntpnpapi.h onecore\internal\sdk\inc\ntrtlstringandbuffer.h onecore\external\shared\inc\cfg.h onecore\internal\sdk\inc\minwin\umstls.h onecore\internal\sdk\inc\nxamd64.h onecore\external\shared\inc\pshpack1.h onecore\internal\sdk\inc\warning.h shared\inc\winapifamily.h onecore\internal\sdk\inc\suppress_x.h minkernel\urtl\startup.h onecore\internal\sdk\inc\ntxcapi.h shared\inc\winpackagefamily.h onecore\internal\sdk\inc\nt.h onecore\internal\sdk\inc\ntxcapi_x.h onecore\external\shared\inc\kernelspecs.h onecore\external\shared\inc\basetsd.h onecore\external\sdk\inc\crt\excpt.h onecore\external\sdk\inc\crt\crtdefs.h onecore\internal\sdk\inc\rtlhashdef.h onecore\external\shared\inc\specstrings.h onecore\internal\sdk\inc\nturtl.h onecore\external\shared\inc\sal.h onecore\external\shared\inc\dpfilter.h onecore\internal\sdk\inc\ntobapi.h onecore\external\shared\inc\concurrencysal.h onecore\internal\sdk\inc\nttpapi.h onecore\internal\sdk\inc\ntobapi_x.h onecore\external\shared\inc\specstrings_strict.h onecore\external\shared\inc\poppack.h onecore\external\shared\inc\specstrings_undef.h onecore\external\shared\inc\driverspecs.h onecore\internal\sdk\inc\ntrtl.h onecore\internal\sdk\inc\ntrtlpath.h onecore\external\shared\inc\sdv_driverspecs.h onecore\internal\sdk\inc\ntrtl_x.h onecore\external\sdk\inc\crt\vadefs.h onecore\external\shared\inc\ip2string.h onecore\external\shared\inc\sdkddkver.h onecore\internal\sdk\inc\minwin\ntregapi.h onecore\internal\sdk\inc\ntregapi_x.h onecore\internal\sdk\inc\ntamd64.h onecore\internal\sdk\inc\ntamd64_x.h onecore\internal\sdk\inc\minwin\ntdef_p.h onecore\internal\sdk\inc\affinity.h onecore\external\ddk\inc\ntimage.h onecore\external\shared\inc\pshpack4.h onecore\internal\sdk\inc\volatile_accessors.h onecore\external\shared\inc\pshpack2.h onecore\internal\sdk\inc\minwin\ntioapi.h onecore\external\shared\inc\devioctl.h onecore\internal\sdk\inc\minwin\ntioapi_x.h onecore\external\sdk\inc\minwin\rtlsupportapi.h onecore\external\shared\inc\minwin\apiset.h onecore\internal\sdk\inc\ntmmapi.h onecore\external\shared\inc\minwin\apisetcconv.h onecore\internal\sdk\inc\ntmmapi_x.h onecore\internal\sdk\inc\ntldr.h onecore\internal\sdk\inc\nttmapi.h onecore\external\shared\inc\guiddef.h onecore\external\shared\inc\ktmtypes.h onecore\external\sdk\inc\ntassert.h onecore\external\shared\inc\ntstatus.h onecore\internal\sdk\inc\ntkeapi.h onecore\internal\sdk\inc\ntkeapi_x.h onecore\internal\sdk\inc\rtlfeatureconfigtypes.h onecore\external\ddk\inc\mce.h onecore\external\sdk\inc\crt\string.h onecore\internal\sdk\inc\minwin\xstateapi.h onecore\internal\sdk\inc\ntexapi.h onecore\internal\sdk\inc\pebteb.h onecore\internal\sdk\inc\ntexapi_x.h � L? \ \ / / E3�H��t �H�
H��H���H��f��u�fD9u�L�� � � A G + * �NtRecordEnvironmentPointers >q Environment AJ +
> Envp AK + B! q OEnvironment OEnvp O � P + � D 7 � 8 �
; � = �! 9 �' C �* E �, 0
m q
� �
� �
E3�H��A��H��t fD9tH�����
H��f��u�fD9u�� � � F G - , �NtStartupCountEnvironmentStrings >q Environment AJ AK ' >" Count A $ B! q OEnvironment O � X - � L ! � $ � & � ' � ( � ) �& ' �, 0 �, 0
r v
� �
� �
� �
� ' %
RtlNtPathSeperatorString
� 1 /
RtlAlternateDosPathSeperatorString
� ) '
RtlDosPathSeperatorsString
q " . NtStartupCountEnvironmentStrings ���
q & NtRecordEnvironmentPointers JobObjectBasicAccountingInformation �� JobObjectBasicLimitInformation ��� JobObjectBasicProcessIdList �� JobObjectBasicUIRestrictions � JobObjectSecurityLimitInformation JobObjectEndOfJobTimeInformation � JobObjectAssociateCompletionPortInformation �� JobObjectBasicAndIoAccountingInformation � JobObjectExtendedLimitInformation
JobObjectJobSetInformation ��� JobObjectGroupInformation JobObjectNotificationLimitInformation
JobObjectLimitViolationInformation ��� JobObjectGroupInformationEx �� JobObjectCpuRateControlInformation ��� JobObjectCompletionFilter JobObjectCompletionCounter ��� JobObjectFreezeInformation ��� JobObjectExtendedAccountingInformation ��� JobObjectWakeInformation � JobObjectBackgroundInformation ��� JobObjectSchedulingRankBiasInformation ��� JobObjectTimerVirtualizationInformation �� JobObjectCycleTimeNotification ��� JobObjectClearEvent �� JobObjectInterferenceInformation � JobObjectClearPeakJobMemoryUsed �� JobObjectMemoryUsageInformation �� JobObjectSharedCommit JobObjectContainerId � JobObjectIoRateControlInformation % JobObjectSiloRootDirectory ��� & JobObjectServerSiloBasicInformation �� ' JobObjectServerSiloUserSharedData ( JobObjectServerSiloInitialize ) JobObjectServerSiloRunningState �� * JobObjectIoAttribution ��� + JobObjectMemoryPartitionInformation �� , JobObjectContainerTelemetryId - JobObjectSiloSystemRoot �� . JobObjectEnergyTrackingState � / JobObjectThreadImpersonationInformation �� JobObjectReserved1Information JobObjectReserved2Information JobObjectReserved3Information JobObjectReserved4Information JobObjectReserved5Information JobObjectReserved6Information JobObjectReserved7Information JobObjectReserved8Information JobObjectReserved9Information JobObjectReserved10Information ��� JobObjectReserved11Information ��� JobObjectReserved12Information ��� JobObjectReserved13Information ��� JobObjectReserved14Information ��� JobObjectNetRateControlInformation ��� ! JobObjectNotificationLimitInformation2 ��� " JobObjectLimitViolationInformation2 �� # JobObjectCreateSilo �� $ JobObjectSiloBasicInformation % JobObjectReserved15Information ��� & JobObjectReserved16Information ��� ' JobObjectReserved17Information ��� ( JobObjectReserved18Information ��� ) JobObjectReserved19Information ��� * JobObjectReserved20Information ��� + JobObjectReserved21Information ��� , JobObjectReserved22Information ��� - JobObjectReserved23Information ��� . JobObjectReserved24Information ��� / JobObjectReserved25Information ��� 0 MaxJobObjectInfoClass > I t _JOBOBJECTINFOCLASS .?AW4_JOBOBJECTINFOCLASS@@ �. onecore\internal\sdk\inc\ntpsapi_x.h ���� SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN �� SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS �� SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE ���N t
SE_WS_APPX_SIGNATURE_ORIGIN .?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@ �* onecore\internal\sdk\inc\ntseapi.h �B
! Length ���
! MaximumLength
q Buffer ���:
_UNICODE_STRING .?AU_UNICODE_STRING@@ JOB_OBJECT_IO_RATE_CONTROL_ENABLE JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS ���Z t JOB_OBJECT_IO_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@ ���j PsNeverDuplicate � PsRequestDuplicate ��� PsAlwaysDuplicate PsMaxStdHandleStates �B t _PS_STD_HANDLE_STATE .?AW4_PS_STD_HANDLE_STATE@@ ��� PsWakeReasonUser � PsWakeReasonExecutionRequired PsWakeReasonKernel ��� PsWakeReasonInstrumentation �� PsWakeReasonPreserveProcess �� PsWakeReasonActivityReference PsWakeReasonWorkOnBehalf � PsMaxWakeReasons �6 t _PS_WAKE_REASON .?AW4_PS_WAKE_REASON@@ � TP_CALLBACK_PRIORITY_HIGH TP_CALLBACK_PRIORITY_NORMAL �� TP_CALLBACK_PRIORITY_LOW � TP_CALLBACK_PRIORITY_INVALID � TP_CALLBACK_PRIORITY_COUNT ���B t _TP_CALLBACK_PRIORITY .?AW4_TP_CALLBACK_PRIORITY@@ �6 FeatureConfigurationPriorityImageDefault � FeatureConfigurationPriorityService �� FeatureConfigurationPriorityUser �
FeatureConfigurationPriorityUserPolicy ��� FeatureConfigurationPriorityTest � FeatureConfigurationPriorityImageOverride FeatureConfigurationPriorityMax ��^ t _RTL_FEATURE_CONFIGURATION_PRIORITY .?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@ �: onecore\internal\sdk\inc\rtlfeatureconfigtypes.h ���> PsProtectedSignerNone PsProtectedSignerAuthenticode PsProtectedSignerCodeGen � PsProtectedSignerAntimalware � PsProtectedSignerLsa � PsProtectedSignerWindows � PsProtectedSignerWinTcb �� PsProtectedSignerWinSystem ��� PsProtectedSignerApp � PsProtectedSignerMax �B
t _PS_PROTECTED_SIGNER .?AW4_PS_PROTECTED_SIGNER@@ ���
SystemProcessClassificationNormal SystemProcessClassificationSystem SystemProcessClassificationSecureSystem �� SystemProcessClassificationMemCompression SystemProcessClassificationRegistry �� SystemProcessClassificationMaximum ���V t _SYSTEM_PROCESS_CLASSIFICATION .?AW4_SYSTEM_PROCESS_CLASSIFICATION@@ ���* onecore\internal\sdk\inc\ntexapi.h �~ PowerUserPresent � PowerUserNotPresent �� PowerUserInactive PowerUserMaximum � PowerUserInvalid �F t _USER_ACTIVITY_PRESENCE .?AW4_USER_ACTIVITY_PRESENCE@@ �* onecore\external\ddk\inc\ntpoapi.h � MemoryNotContiguous �� MemoryAlignedAndContiguous ��� MemoryNotResident MemoryNotEligibleToMakeContiguous MemoryContiguityStateMax �f t " _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE .?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@ ���* onecore\internal\sdk\inc\ntmmapi.h � PsAttributeParentProcess � PsAttributeDebugObject ��� PsAttributeToken � PsAttributeClientId �� PsAttributeTebAddress PsAttributeImageName � PsAttributeImageInfo � PsAttributeMemoryReserve � PsAttributePriorityClass � PsAttributeErrorMode �
PsAttributeStdHandleInfo � PsAttributeHandleList PsAttributeGroupAffinity �
PsAttributePreferredNode � PsAttributeIdealProcessor PsAttributeUmsThread � PsAttributeMitigationOptions � PsAttributeProtectionLevel ��� PsAttributeSecureProcess � PsAttributeJobList ��� PsAttributeChildProcessPolicy PsAttributeAllApplicationPackagesPolicy �� PsAttributeWin32kFilter �� PsAttributeSafeOpenPromptOriginClaim � PsAttributeBnoIsolation �� PsAttributeDesktopAppPolicy �� PsAttributeChpe �� PsAttributeMitigationAuditOptions PsAttributeMax ���: t % _PS_ATTRIBUTE_NUM .?AW4_PS_ATTRIBUTE_NUM@@ �# SystemBasicInformation ��� SystemProcessorInformation ��� SystemPerformanceInformation � SystemTimeOfDayInformation ��� SystemPathInformation SystemProcessInformation � SystemCallCountInformation ��� SystemDeviceInformation �� SystemProcessorPerformanceInformation SystemFlagsInformation ���
SystemCallTimeInformation SystemModuleInformation �� SystemLocksInformation ���
SystemStackTraceInformation �� SystemPagedPoolInformation ��� SystemNonPagedPoolInformation SystemHandleInformation �� SystemObjectInformation �� SystemPageFileInformation SystemVdmInstemulInformation � SystemVdmBopInformation �� SystemFileCacheInformation ��� SystemPoolTagInformation � SystemInterruptInformation ��� SystemDpcBehaviorInformation � SystemFullMemoryInformation �� SystemLoadGdiDriverInformation ��� SystemUnloadGdiDriverInformation � SystemTimeAdjustmentInformation �� SystemSummaryMemoryInformation ��� SystemMirrorMemoryInformation SystemPerformanceTraceInformation SystemObsolete0 �� ! SystemExceptionInformation ��� " SystemCrashDumpStateInformation �� # SystemKernelDebuggerInformation �� $ SystemContextSwitchInformation ��� % SystemRegistryQuotaInformation ��� & SystemExtendServiceTableInformation �� ' SystemPrioritySeperation � ( SystemVerifierAddDriverInformation ��� ) SystemVerifierRemoveDriverInformation * SystemProcessorIdleInformation ��� + SystemLegacyDriverInformation , SystemCurrentTimeZoneInformation � - SystemLookasideInformation ��� . SystemTimeSlipNotification ��� / SystemSessionCreate �� 0 SystemSessionDetach �� 1 SystemSessionInformation � 2 SystemRangeStartInformation �� 3 SystemVerifierInformation 4 SystemVerifierThunkExtend 5 SystemSessionProcessInformation �� 6 SystemLoadGdiDriverInSystemSpace � 7 SystemNumaProcessorMap ��� 8 SystemPrefetcherInformation �� 9 SystemExtendedProcessInformation � : SystemRecommendedSharedDataAlignment � ; SystemComPlusPackage � < SystemNumaAvailableMemory = SystemProcessorPowerInformation �� > SystemEmulationBasicInformation �� ? SystemEmulationProcessorInformation �� @ SystemExtendedHandleInformation �� A SystemLostDelayedWriteInformation B SystemBigPoolInformation � C SystemSessionPoolTagInformation �� D SystemSessionMappedViewInformation ��� E SystemHotpatchInformation F SystemObjectSecurityMode � G SystemWatchdogTimerHandler ��� H SystemWatchdogTimerInformation ��� I SystemLogicalProcessorInformation J SystemWow64SharedInformationObsolete � K SystemRegisterFirmwareTableInformationHandler L SystemFirmwareTableInformation ��� M SystemModuleInformationEx N SystemVerifierTriageInformation �� O SystemSuperfetchInformation �� P SystemMemoryListInformation �� Q SystemFileCacheInformationEx � R SystemThreadPriorityClientIdInformation �� S SystemProcessorIdleCycleTimeInformation �� T SystemVerifierCancellationInformation U SystemProcessorPowerInformationEx V SystemRefTraceInformation W SystemSpecialPoolInformation � X SystemProcessIdInformation ��� Y SystemErrorPortInformation ��� Z SystemBootEnvironmentInformation � [ SystemHypervisorInformation �� \ SystemVerifierInformationEx �� ] SystemTimeZoneInformation ^ SystemImageFileExecutionOptionsInformation ��� _ SystemCoverageInformation ` SystemPrefetchPatchInformation ��� a SystemVerifierFaultsInformation �� b SystemSystemPartitionInformation � c SystemSystemDiskInformation �� d SystemProcessorPerformanceDistribution ��� e SystemNumaProximityNodeInformation ��� f SystemDynamicTimeZoneInformation � g SystemCodeIntegrityInformation ��� h SystemProcessorMicrocodeUpdateInformation i SystemProcessorBrandString ��� j SystemVirtualAddressInformation �� k SystemLogicalProcessorAndGroupInformation l SystemProcessorCycleTimeInformation �� m SystemStoreInformation ��� n SystemRegistryAppendString ��� o SystemAitSamplingValue ��� p SystemVhdBootInformation � q SystemCpuQuotaInformation r SystemNativeBasicInformation � s SystemErrorPortTimeouts �� t SystemLowPriorityIoInformation ��� u SystemBootEntropyInformation � v SystemVerifierCountersInformation w SystemPagedPoolInformationEx � x SystemSystemPtesInformationEx y SystemNodeDistanceInformation z SystemAcpiAuditInformation ��� { SystemBasicPerformanceInformation | SystemQueryPerformanceCounterInformation � } SystemSessionBigPoolInformation �� ~ SystemBootGraphicsInformation SystemScrubPhysicalMemoryInformation � � SystemBadPageInformation � � SystemProcessorProfileControlArea � SystemCombinePhysicalMemoryInformation ��� � SystemEntropyInterruptTimingInformation �� � SystemConsoleInformation � � SystemPlatformBinaryInformation �� � SystemPolicyInformation �� � SystemHypervisorProcessorCountInformation � SystemDeviceDataInformation �� � SystemDeviceDataEnumerationInformation ��� � SystemMemoryTopologyInformation �� � SystemMemoryChannelInformation ��� � SystemBootLogoInformation � SystemProcessorPerformanceInformationEx �� � SystemCriticalProcessErrorLogInformation � � SystemSecureBootPolicyInformation � SystemPageFileInformationEx �� � SystemSecureBootInformation �� � SystemEntropyInterruptTimingRawInformation ��� � SystemPortableWorkspaceEfiLauncherInformation � SystemFullProcessInformation � � SystemKernelDebuggerInformationEx � SystemBootMetadataInformation � SystemSoftRebootInformation �� � SystemElamCertificateInformation � � SystemOfflineDumpConfigInformation ��� � SystemProcessorFeaturesInformation ��� � SystemRegistryReconciliationInformation �� � SystemEdidInformation � SystemManufacturingInformation ��� � SystemEnergyEstimationConfigInformation �� � SystemHypervisorDetailInformation � SystemProcessorCycleStatsInformation � � SystemVmGenerationCountInformation ��� � SystemTrustedPlatformModuleInformation ��� � SystemKernelDebuggerFlags � SystemCodeIntegrityPolicyInformation � � SystemIsolatedUserModeInformation � SystemHardwareSecurityTestInterfaceResultsInformation � SystemSingleModuleInformation � SystemAllowedCpuSetsInformation �� � SystemVsmProtectionInformation ��� � SystemInterruptCpuSetsInformation � SystemSecureBootPolicyFullInformation � SystemCodeIntegrityPolicyFullInformation � � SystemAffinitizedInterruptProcessorInformation ��� � SystemRootSiloInformation � SystemCpuSetInformation �� � SystemCpuSetTagInformation ��� � SystemWin32WerStartCallout ��� � SystemSecureKernelProfileInformation � � SystemCodeIntegrityPlatformManifestInformation ��� � SystemInterruptSteeringInformation ��� � SystemSupportedProcessorArchitectures � SystemMemoryUsageInformation � � SystemCodeIntegrityCertificateInformation � SystemPhysicalMemoryInformation �� � SystemControlFlowTransition �� � SystemKernelDebuggingAllowed � � SystemActivityModerationExeState � � SystemActivityModerationUserSettings � � SystemCodeIntegrityPoliciesFullInformation ��� � SystemCodeIntegrityUnlockInformation � � SystemIntegrityQuotaInformation �� � SystemFlushInformation ��� � SystemProcessorIdleMaskInformation ��� � SystemSecureDumpEncryptionInformation � SystemWriteConstraintInformation � � SystemKernelVaShadowInformation �� � SystemHypervisorSharedPageInformation � SystemFirmwareBootPerformanceInformation � � SystemCodeIntegrityVerificationInformation ��� � SystemFirmwarePartitionInformation ��� � SystemSpeculationControlInformation �� � SystemDmaGuardPolicyInformation �� � SystemEnclaveLaunchControlInformation � SystemWorkloadAllowedCpuSetsInformation �� � SystemCodeIntegrityUnlockModeInformation � � SystemLeapSecondInformation �� � SystemFlags2Information �� � SystemSecurityModelInformation ��� � SystemCodeIntegritySyntheticCacheInformation � � SystemFeatureConfigurationInformation � SystemFeatureConfigurationSectionInformation � � SystemFeatureUsageSubscriptionInformation � SystemSecureSpeculationControlInformation � SystemSpacesBootInformation �� � SystemFwRamdiskInformation ��� � SystemWheaIpmiHardwareInformation � SystemDifSetRuleClassInformation � � SystemDifClearRuleClassInformation ��� � SystemDifApplyPluginVerificationOnDriver � � SystemDifRemovePluginVerificationOnDriver � SystemShadowStackInformation � � SystemBuildVersionInformation � SystemPoolLimitInformation ��� � SystemCodeIntegrityAddDynamicStore ��� � SystemCodeIntegrityClearDynamicStores � SystemPoolZeroingInformation � � MaxSystemInfoClass ���J � t ' _SYSTEM_INFORMATION_CLASS .?AW4_SYSTEM_INFORMATION_CLASS@@ �� PsCreateInitialState � PsCreateFailOnFileOpen ��� PsCreateFailOnSectionCreate �� PsCreateFailExeFormat PsCreateFailMachineMismatch �� PsCreateFailExeName �� PsCreateSuccess �� PsCreateMaximumStates 6 t ) PS_CREATE_STATE .?AW4PS_CREATE_STATE@@ � JOB_OBJECT_NET_RATE_CONTROL_ENABLE ��� JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS ��Z t + JOB_OBJECT_NET_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@ �z KCONTINUE_UNWIND � KCONTINUE_RESUME � KCONTINUE_LONGJUMP ��� KCONTINUE_SET KCONTINUE_LAST ���6 t - _KCONTINUE_TYPE .?AW4_KCONTINUE_TYPE@@ �* onecore\internal\sdk\inc\ntxcapi.h �: VRF_TRIAGE_CONTEXT_NONE �� VRF_TRIAGE_CONTEXT_DEFAULT ��� VRF_TRIAGE_CONTEXT_DEVELOPMENT ��� VRF_TRIAGE_CONTEXT_CERTIFICATION � VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED ��� VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING � NUM_VRF_TRIAGE_CONTEXTS ��> t 0 _VRF_TRIAGE_CONTEXT .?AW4_VRF_TRIAGE_CONTEXT@@ �* COMIMAGE_FLAGS_ILONLY COMIMAGE_FLAGS_32BITREQUIRED � COMIMAGE_FLAGS_IL_LIBRARY COMIMAGE_FLAGS_STRONGNAMESIGNED �� COMIMAGE_FLAGS_NATIVE_ENTRYPOINT � � COMIMAGE_FLAGS_TRACKDEBUGDATA � COMIMAGE_FLAGS_32BITPREFERRED COR_VERSION_MAJOR_V2 � COR_VERSION_MAJOR COR_VERSION_MINOR COR_DELETED_NAME_LENGTH �� COR_VTABLEGAP_NAME_LENGTH NATIVE_TYPE_MAX_CB ��� � COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE � IMAGE_COR_MIH_METHODRVA �� IMAGE_COR_MIH_EHRVA �� IMAGE_COR_MIH_BASICBLOCK � COR_VTABLE_32BIT � COR_VTABLE_64BIT � COR_VTABLE_FROM_UNMANAGED COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN ��� COR_VTABLE_CALL_MOST_DERIVED � IMAGE_COR_EATJ_THUNK_SIZE MAX_CLASS_NAME ��� MAX_PACKAGE_NAME �R t 2 ReplacesCorHdrNumericDefines .?AW4ReplacesCorHdrNumericDefines@@ ���� SystemFeatureConfigurationSectionTypeBoot SystemFeatureConfigurationSectionTypeRuntime � SystemFeatureConfigurationSectionTypeUsageTriggers ��� SystemFeatureConfigurationSectionTypeCount ���n t 4 _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE .?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@ ���~ PsProtectedTypeNone �� PsProtectedTypeProtectedLight PsProtectedTypeProtected � PsProtectedTypeMax ���> t 6 _PS_PROTECTED_TYPE .?AW4_PS_PROTECTED_TYPE@@ ���
���
���
���
���� -FC -MT -c -Zc:wchar_t- -Zl -Zp8 -Gy -W4 -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427 -Gw -wd4316 -wd4973 -Brepro
< > = -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X 8 9 : ; > ��ͬ�C���b���{ �j�n�M���'��Aі�f��)Y�d���)Y�d���K�f(���~p�M激5:R$f2v-P��aa�-ܑ��$� ]�Y�ѯ|�*�1>��Zr���3�B�� ��]; @comp.idk�� @feat.00�I ��� .debug$S �. e .rdata �ہ e .rdata �w � e .rdata h�Q� e < .rdata x� � e U .rdata x� � e n .rdata 1�, e � .text$mn + %} e .debug$S < e .text$mn
- ��w e .debug$S H
e � �
.debug$S 4 e .debug$S
@ e .debug$S 8 e .debug$T DL e .chks64 � e � ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ ??_C@_13CGOKJPIL@?$AA?1@ RtlNtPathSeperatorString RtlAlternateDosPathSeperatorString RtlDosPathSeperatorsString NtRecordEnvironmentPointers NtStartupCountEnvironmentStrings