| Server IP : 209.209.40.120 / Your IP : 216.73.217.112 Web Server : Microsoft-IIS/10.0 System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586 User : NEWWWW$ ( 0) PHP Version : 8.3.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Program Files (x86)/Windows Kits/10/Lib/10.0.19041.0/um/x86/ |
Upload File : |
!<arch>
/ 1606895307 0 434 `
� � � � � � � � �P �P w^ w^??_C@_13CGOKJPIL@?$AA?1@ ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ _NtProcessStartupW@4 _NtProcessStartupW_AfterSecurityCookieInitialized@4 _RtlAlternateDosPathSeperatorString _RtlDosPathSeperatorsString _RtlNtPathSeperatorString _NtProcessStartup@4 _NtProcessStartup_AfterSecurityCookieInitialized@4 _NtRecordEnvironmentPointers@8 _NtStartupCountEnvironmentStrings@4 / 1606895307 0 426 `
� P� ^w ??_C@_13CGOKJPIL@?$AA?1@ ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ _NtProcessStartup@4 _NtProcessStartupW@4 _NtProcessStartupW_AfterSecurityCookieInitialized@4 _NtProcessStartup_AfterSecurityCookieInitialized@4 _NtRecordEnvironmentPointers@8 _NtStartupCountEnvironmentStrings@4 _RtlAlternateDosPathSeperatorString _RtlDosPathSeperatorsString _RtlNtPathSeperatorString // 1606895307 0 168 `
d:\os\obj\x86fre\minkernel\urtl\objfre\i386\startupw.obj d:\os\obj\x86fre\minkernel\urtl\objfre\i386\startup.obj d:\os\obj\x86fre\minkernel\urtl\objfre\i386\helper.obj /0 1606895307 100666 47188 `
L �F�_�� 6 .debug$S �2 � @ B.rdata T5 @0@.rdata X5 @0@.rdata ^5 @0@.rdata b5 j5 @0@.rdata t5 |5 @0@.rdata �5 �5 @0@.text$mn �5 �5 `.debug$S 0 �5 �6 @B.text$mn : ]7 �9
`.debug$S 0 �9 +B g @B.debug$S 4 1F eF @B.debug$S @ yF �F @B.debug$S 8 �F G @B.debug$T \h G @ B.chks64 � u�
.drectve ��
� } ? d:\os\obj\x86fre\minkernel\urtl\objfre\i386\startupw.obj : < � k k
Microsoft (R) Optimizing Compiler � � & � JobObjectReserved2Information 2 � SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED & � JobObjectReserved9Information � � ! � JobObjectWakeInformation ( � JobObjectClearPeakJobMemoryUsed ' � ) JobObjectReserved19Information 5 � JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME * � ' JobObjectServerSiloUserSharedData ' � ( JobObjectReserved18Information � PsMaxWakeReasons ' � * JobObjectReserved20Information ' � % JobObjectReserved15Information & � , JobObjectContainerTelemetryId % � TP_CALLBACK_PRIORITY_INVALID # � JobObjectFreezeInformation ' � . JobObjectReserved24Information 2 � FeatureConfigurationPriorityImageOverride , � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS ' � JobObjectReserved12Information ( � ) JobObjectServerSiloRunningState - � SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � JobObjectSharedCommit & � JobObjectReserved3Information & � ( JobObjectServerSiloInitialize + � SystemProcessClassificationMaximum # � % JobObjectSiloRootDirectory ' � ' JobObjectReserved17Information � * JobObjectIoAttribution ' � JobObjectReserved11Information & � JobObjectReserved4Information � PowerUserMaximum ! � MemoryContiguityStateMax � * ( � JobObjectMemoryUsageInformation � � * � JobObjectIoRateControlInformation & � JobObjectReserved8Information ' � , JobObjectReserved22Information $ � TP_CALLBACK_PRIORITY_NORMAL * � JOB_OBJECT_IO_RATE_CONTROL_ENABLE ' � - JobObjectReserved23Information ' � JobObjectReserved13Information % � � SystemPoolZeroingInformation & � JobObjectReserved1Information & � JobObjectReserved6Information 0 � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS 9 � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JobObjectClearEvent & � JobObjectReserved5Information & � JobObjectReserved7Information 2 � JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH ) � JobObjectInterferenceInformation , � & JobObjectServerSiloBasicInformation � JobObjectContainerId 0 � / JobObjectThreadImpersonationInformation � - JobObjectSiloSystemRoot ' � JobObjectCycleTimeNotification ' � JobObjectReserved10Information + � JOB_OBJECT_NET_RATE_CONTROL_ENABLE , � + JobObjectMemoryPartitionInformation A � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � KCONTINUE_UNWIND # � VRF_TRIAGE_CONTEXT_DEFAULT / � JobObjectExtendedAccountingInformation , � SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN % � . JobObjectEnergyTrackingState ' � + JobObjectReserved21Information � COR_VERSION_MAJOR_V2 ' � / JobObjectReserved25Information ' � & JobObjectReserved16Information ' � JobObjectReserved14Information 3 � SystemFeatureConfigurationSectionTypeCount ' � JobObjectBackgroundInformation � LockQueueUnusedSpare16 0 � JobObjectTimerVirtualizationInformation - � JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG / � JobObjectSchedulingRankBiasInformation / � SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE 0 SLIST_ENTRY
r PPVOID � _TP_CALLBACK_PRIORITY � _JOBOBJECTINFOCLASS _UNICODE_STRING � PPEB � PSTRING � _PS_WAKE_REASON � _SYSTEM_INFORMATION_CLASS ( � JOB_OBJECT_NET_RATE_CONTROL_FLAGS LONG_PTR
CURDIR u PUINT_PTR " ULONG_PTR
STRING p PCHAR C _LARGE_INTEGER ! wchar_t " � SE_WS_APPX_SIGNATURE_ORIGIN
_LIST_ENTRY UNICODE_STRING " � PRTL_CRITICAL_SECTION_DEBUG " & _RTL_CRITICAL_SECTION_DEBUG ' � JOB_OBJECT_IO_RATE_CONTROL_FLAGS � _USER_ACTIVITY_PRESENCE � PUNICODE_STRING PLONG PBOOLEAN � _KCONTINUE_TYPE 0 _SINGLE_LIST_ENTRY 2 _SLIST_HEADER
! wint_t LONG _PEB_LDR_DATA M _ULARGE_INTEGER # ULONG64 RTL_DRIVE_LETTER_CURDIR
" SIZE_T # � ReplacesCorHdrNumericDefines q PWCH $ � PPS_POST_PROCESS_INIT_ROUTINE
PSHORT � _KSPIN_LOCK_QUEUE_NUMBER � _VRF_TRIAGE_CONTEXT " TP_VERSION u PUINT32 p CCHAR � PANSI_STRING * � _RTL_FEATURE_CONFIGURATION_PRIORITY M ULARGE_INTEGER � TP_CALLBACK_PRIORITY " LOGICAL 1 � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE ` _PEB
t INT UCHAR _RTL_DRIVE_LETTER_CURDIR " LCID BOOLEAN
! USHORT PVOID q WCHAR PSE_SIGNING_LEVEL % � _SYSTEM_PROCESS_CLASSIFICATION
LONG64 # ! PRTL_USER_PROCESS_PARAMETERS " ULONG � PPEB_LDR_DATA
q PWCHAR ) _RTL_CRITICAL_SECTION q PWSTR # _RTL_USER_PROCESS_PARAMETERS NTSTATUS _CURDIR C LARGE_INTEGER
HANDLE # ULONGLONG
" PULONG
u size_t # PULONG64 LONGLONG - � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE PLIST_ENTRY SHORT PLONG64 . PSINGLE_LIST_ENTRY
LIST_ENTRY p CHAR _STRING � � `���[4dx���By%�Г��� z�&K�-�pW " ���{�$��N�� ��~p��o7��T�1*���. F F?�Z#��.Wi�/0��=�� �9*W�-� l m��] ~_�B �3�쌰��l]��(��Q��@� � .6oA�}4�ؐ,��ǣ�
+h��4�Q�X3� � ܇h���6
���d3�����:iW�jG^��t� � m����Wc�L����z0� ���ٶ�$< � J�&�ڹCι�ſ�7{ pF ��$�� ���8 ;!E���q�G{�>|;:���f���5�gn�� ? �G�/�m��hB-����-q�b}��Y�~Y b T�@�
2��U��p�|��� ��k����[p*& � ��z!��<y5�1�aF�=)�;ђ�)Y bčW � C���4�h��y��t:;K�͑\�Df��1 � � ����̫��2r�WQ��K��TI�Up��/�z � � F9�6K�v�/�|S��]t�RF�W2��I ! PH<��R�N�-Ulֵ��S�O�7g�n�䯲*�� F 3E �� �r`QQ���e��e����`z� i i E~/EX"�-�p-���i����`��.�z#�0� � H�}ӰWU����f1O_�d ��Hf�
��N�nZ � p
y��f�9����|= 6���4 ��n`�RM� � X�Y
��m�kּg�L��~�g���x�5�
焙v GI��� ����P�
��W� A )\��u��ݡ�_6 mV����*���[�1�l&�! m ��%|�#o5a�0i�^�{�ơz[ l���HR � )G�xS�l�F,�yV���6�}�����ָ@��j � n*�\T�uM�fk �<�t���L�ee�#a�� � ���O.@=4L�C�ي�m�;_�iM %q� � �����y�Q+���{"WÌ�R~̟���H���? �4y4[G�c �c��e��U�W,Qᨵ7�� A �t�T�`���Niu�$�I8FQ@e�}&f�S��E�� _ �D�rlBsm�DE�cQ����}W� �w��±� � N�Q� 4O&K�� +l;x�2�%��ݮ�pZ,� � ��������0TcIC4�U��m��sF'<�Z � �4Y����|��B�N��m#��*�sE��Bp�� � ����$�3�3EJ�I �h@�oa`�� �� ��/�5h��d�����,�]0�f& (� ? �kE9OӨ��.I F��SY9G&��.��?堳( ] �D&<�@)�Z?��as� z�����A��? p� � S���M�"��S��U}h�g�c�q�c5w�k���8 � @ȍl2��X�1��}���e��C��>�ȢF)� � �A+��z'����k��mD�XL���t � B-<y�� ��9P/�M�#��_��<�� φ6R^ �*�����ou��M+K�Ŋ�;��qh� H � �ý3NP� ��eb�nM `I����<�F p �:B{m�n=�g���\c*�ӏ���Z" ��Y � ��3)�J�$��{�.
w ~�/�l���M� � I�(��+�S�u��]?�z�9NP�3Q�MJ�B � j�v��b~�ۥ�)0M�/�띡e��� \� @Z ����ɵ\|5 ��Z��b���Q 3 ���kb���B J ����FAP�icû����;�|" B7�㙨^ �9 x ���� k|)�E@���B�#���b�V�<�2Ǡ3 � 3*�ָ䊀��DJ՝�� ��q/�=M�f�t� � � �S:c٭ؙo߮ ���qO>�)o��Z� � �-h/� S��~����
a!�1k��j ��#YV^b%�}��/'p�O�Gʈ?��z��� . ��V��� Ť��ڃ "��?�f�R�s�[Y�%=� X D�n��q���9��a�_�G���H�E���-W��xZ { �$�����+`�.?�ʿA��=Gݗ��'Lm � @�J���ۊ�މ
��H��s��P��˓YH� � �>� j�t�&~8^�B��J2�/Ru�~ � &��8�i_u& ��>�-Z%�f�>R69ϓ5�%� *�7�C
TQ�� ?R����֪¸��FHc�� @ -�?bF��,U1�.Er;H�Ԡ`p I��4M d } ��da�nGۛ'�*���M���G�]����" � ��܆�f؇��"xU. @����;2}X��}H � G�*㥬2����M���}�b�R�̫�)�� � *s�4��bc�v�7���h\Sř�_s� �4�h�
y3�
6$��g涧i0����
�E�g$E��$ "
�J��W6���,�)J dɫ7�%eڭ�� E
/��J��5\�Z��_g4�4�%]�L�� ��3h� h
�p[F����ll�<��A�=��l}�K���R� �
k�3 �G�� ��F2#�)� ER�O|��v\;� �
h҄� �3(/�e��f��`�z&�e$P��MD� �
f߹��R�|��ڕ����G/S�6�<��� �
o�&���-�},��'�w��_�BIS;�§g
�7; W|A
w�O�?�pU]~-�2�!�\O����5� G �A�T:�U 3�QZ� j-r76y�c~���� f ���^br�ee��� ���Nǐ����5�j�Ja � ��*
Y,�}��Ƴ�������X���� � ��'��,��@H4sS�k�!Ȫ:ݬ���"fE) � �0:s�0pV�eҐ����lj� �6�Ȗ0 � � ƨ��T ��� Ȓ� ���)n���y��aP`I ��a�;.+�!6�%ri� E�Q�p�u�G�g�.� B ����8�����L�v���X m*����I/i�� g �U��Q�u"��w�!� �fB"���`ru^���9 � �
���mcJAt�qe�el��]�;�L�� � ��� [r�"��衷� �R ��ҹ�� �� � ����w�^��ȯ�
?���;��f���B(H�
�[��=�
Tǜ�
]����>d��Wƫ��� -
�۠�Җ �{���� ���n"]�,$J�� ]
�[�-%`4�����o2�>�'�q.qg�Gn��) �
5�y�.b�X�W�?�dT�bՃ綕<$QD1��q �
oL>
�P� ��VrɑE.�(�d�jФW��� � onecore\external\ddk\inc\ntnls.h onecore\internal\sdk\inc\ntconfig.h onecore\external\shared\inc\guiddef.h onecore\external\sdk\inc\ntarm64.h onecore\external\sdk\inc\ntarm64_x.h onecore\external\ddk\inc\ntimage.h onecore\external\shared\inc\ntstatus.h minkernel\urtl\startupw.c onecore\external\sdk\inc\crt\process.h onecore\internal\sdk\inc\ntwow64.h onecore\internal\sdk\inc\minwin\umstls.h onecore\external\shared\inc\pshpack4.h onecore\internal\sdk\inc\ntkeapi.h onecore\internal\sdk\inc\ntwow64_x.h onecore\external\shared\inc\pshpack2.h onecore\internal\sdk\inc\ntkeapi_x.h onecore\internal\sdk\inc\ntpsapi.h onecore\internal\sdk\inc\ntpsapi_x.h onecore\external\sdk\inc\minwin\rtlsupportapi.h onecore\external\shared\inc\minwin\apiset.h onecore\external\shared\inc\minwin\apisetcconv.h onecore\external\sdk\inc\crt\string.h onecore\internal\sdk\inc\minwin\xstateapi.h onecore\internal\sdk\inc\rtlhashdef.h onecore\internal\sdk\inc\minwin\ntpnpapi.h onecore\external\shared\inc\cfg.h shared\inc\winapifamily.h onecore\internal\sdk\inc\ntrtlpath.h onecore\internal\sdk\inc\nxi386.h shared\inc\winpackagefamily.h onecore\external\shared\inc\kernelspecs.h onecore\internal\sdk\inc\warning.h onecore\external\shared\inc\basetsd.h onecore\internal\sdk\inc\suppress_x.h minkernel\urtl\startup.h onecore\external\sdk\inc\minwin\minappmodel.h onecore\internal\sdk\inc\nt.h onecore\internal\sdk\inc\rtlfeatureconfigtypes.h onecore\external\sdk\inc\crt\excpt.h onecore\internal\sdk\inc\ntrtl.h onecore\external\sdk\inc\crt\crtdefs.h onecore\internal\sdk\inc\ntrtl_x.h onecore\external\shared\inc\specstrings.h onecore\external\shared\inc\ip2string.h onecore\external\shared\inc\sal.h onecore\external\shared\inc\concurrencysal.h onecore\external\shared\inc\specstrings_strict.h onecore\external\shared\inc\specstrings_undef.h onecore\external\shared\inc\driverspecs.h onecore\external\shared\inc\sdv_driverspecs.h onecore\internal\sdk\inc\ntexapi.h onecore\external\sdk\inc\crt\vadefs.h onecore\internal\sdk\inc\ntexapi_x.h onecore\internal\sdk\inc\ntobapi.h onecore\internal\sdk\inc\ntobapi_x.h onecore\internal\sdk\inc\minwin\ntioapi.h onecore\internal\sdk\inc\nttpapi.h onecore\external\shared\inc\devioctl.h onecore\internal\sdk\inc\minwin\ntioapi_x.h onecore\internal\sdk\inc\ntiolog.h onecore\external\sdk\inc\ntassert.h onecore\internal\sdk\inc\minwin\ntregapi.h onecore\internal\sdk\inc\affinity.h onecore\internal\sdk\inc\ntregapi_x.h onecore\internal\sdk\inc\volatile_accessors.h onecore\external\shared\inc\pshpack8.h onecore\internal\sdk\inc\ntldr.h onecore\internal\sdk\inc\nturtl.h onecore\external\ddk\inc\ntpoapi.h onecore\internal\sdk\inc\ntmmapi.h onecore\internal\sdk\inc\nttmapi.h onecore\internal\sdk\inc\ntmmapi_x.h onecore\external\shared\inc\ktmtypes.h onecore\internal\sdk\inc\ntlpcapi.h onecore\internal\sdk\inc\rtlrbtree.h onecore\external\shared\inc\dpfilter.h onecore\external\ddk\inc\mce.h onecore\internal\sdk\inc\pebteb.h onecore\external\shared\inc\sdkddkver.h onecore\external\shared\inc\pshpack1.h onecore\internal\sdk\inc\ntseapi.h onecore\internal\sdk\inc\ntseapi_x.h onecore\internal\sdk\inc\ntxcapi.h onecore\internal\sdk\inc\ntxcapi_x.h onecore\internal\sdk\inc\minwin\ntdef_p.h onecore\external\shared\inc\poppack.h onecore\external\sdk\inc\crt\stdarg.h onecore\external\shared\inc\minwin\ntdef.h onecore\external\sdk\inc\crt\ctype.h onecore\internal\sdk\inc\ntrtlstringandbuffer.h onecore\internal\sdk\inc\ntelfapi.h onecore\internal\sdk\inc\nti386.h onecore\internal\sdk\inc\nti386_x.h $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $20 $T0 44 - ^ = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $20 $T0 44 - ^ = $23 $T0 48 - ^ = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $20 $T0 44 - ^ = $23 $T0 48 - ^ = $24 $T0 52 - ^ = � L� \ \ / /
��U��� �u� � ( � $ �
� � 7 G �NtProcessStartupW >a Peb E B Z � d �" $LN3 a Peb O � 0 $ � � � �
� � ' X ' \ '
� ' � '
� ' � '
� ) � )
' '
��U���(�ESVW�p3ۉ]� ��]�E�u�E�3�3��]�A�]�@�]��M�Ӌ����� �F �N@�E�A�M�tf9u
�N8�A�M�tr�1���u���tcf9 t^��tZ�f��tP� Y��t ��N��u�u���t7f9 t�E�}�N��t�P� Y��t�M���+E��� A���M�떋u�vH� �U�@�M�4��v5��v �
�z�M��E����P�E��ES�p� �ЉU��u6� ��u�E�t̅�xPV�u�u�� ����Sj�� _^[�� �}��U��� �E��M�E��� ;��� f9 �� ���� �f��tP� Y�M���t ��I���M�uދU��tgf9 tW�2���E�U�f���f������U�I���M�t;u�s#�P� Y�M���tЋU�;u�s
3�f������3�f��U�E���W����E�rV��pH� �� � � � C Q � � 1 � � : ( �
L (
J ( K H ( � � � V G : : d �NtProcessStartupW_AfterSecurityCookieInitialized >a Peb A � E D
>" argc B��1
>q d A v � A $ B���r �l;
>" n A � & k � � A p o A 1 B����9 >e ProcessParameters A ' A � R o B��'
>f envp A . ) >q nullPtr D��
>q s A @ �
>g p A N $ A > � � A r u P X A + * B�W � >" NumberOfEnvPointers A . � � A + >" DebugParameter A K � � A L B��! >" NumberOfArgPointers A , � " � A Q C B�< �8� >" AllocSize A j Y A � A
A r u P X B����5
>f argv A $
B���* >f dst A 1 � � L A * A + � * a � A . ) B�" > Status A 'E
>q dEnd A q � & � A $ B�. . " Z j j m q j j u ( �" SkipInit ! CountEnvironmentStrings a Peb ��q nullPtr 9 x 9 { 9O ~ O � � : 8 � 1 � C � E �! H �* O �@ S �H U �K ` �Q a �` b �c c �m i �r k �~ q �� r �� s �� v �� ~ �� �� � �� � �� � �� � �� � �� � �� � �� � �� � � � � � �" � �& � �+ � �5 � �6 � �: � �L � �X � �\ � �i � �l � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � � � � � � � � � �$ � � ( � ( � (
(
(
( " (
E ( I (
a ( e (
q ( u (
� ( � (
� ( � (
� ( � (
� ( � (
� ( � (
( (
( ! (
1 ( 5 (
P ( T (
� ( � (
� ( � (
� ( � (
� ( � (
� ( � (
� ( � (
, ( 0 (
@ ( D (
i ( m (
} ( � (
� ( � (
� ( � (
� ( � (
� ( � (
( (
' ( + (
7 ( ; (
G ( K (
c ( g (
� ( � (
� ( � (
� ( � (
� ( � (
� ( � (
� ( � (
( (
) ( - (
L ( P (
` ( d (
p ( t (
� * � *
� + � +
( ! (
- ( 1 (
= ( A (
X ( \ (
� ' %
RtlNtPathSeperatorString
� 1 /
RtlAlternateDosPathSeperatorString
� ) '
RtlDosPathSeperatorsString
& � _PEB .?AU_PEB@@ ��
��
��
��
��
��
��
��
��6 � _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@ 2 � _LIST_ENTRY .?AU_LIST_ENTRY@@
� "
Flink
Blink 2 _LIST_ENTRY .?AU_LIST_ENTRY@@
" Length ���
Initialized ��
SsHandle �
InLoadOrderModuleList
InMemoryOrderModuleList ��
InInitializationOrderModuleList ��
$ EntryInProgress ��
( ShutdownInProgress ���
, ShutdownThreadId �6 0 _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@
� V � _RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��* � _CURDIR .?AU_CURDIR@@ : � _UNICODE_STRING .?AU_UNICODE_STRING@@ B
! Length ���
! MaximumLength
q Buffer ���: _UNICODE_STRING .?AU_UNICODE_STRING@@ *
DosPath ��
Handle ���* _CURDIR .?AU_CURDIR@@ N � _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ ��* � _STRING .?AU_STRING@@ B
! Length ���
! MaximumLength
p Buffer ���* _STRING .?AU_STRING@@ N
! Flags
! Length ���
" TimeStamp
DosPath ��N _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ �� " ��
" MaximumLength
" Length ���
" Flags
" DebugFlags ���
ConsoleHandle
" ConsoleFlags �
StandardInput
StandardOutput ���
StandardError
$ CurrentDirectory �
0 DllPath ��
8 ImagePathName
@ CommandLine ��
H Environment ��
" L StartingX
" P StartingY
" T CountX ���
" X CountY ���
" \ CountCharsX ��
" ` CountCharsY ��
" d FillAttribute
" h WindowFlags ��
" l ShowWindowFlags ��
p WindowTitle ��
x DesktopInfo ��
� ShellInfo
� RuntimeData ��
� CurrentDirectores
" �EnvironmentSize ��
" �EnvironmentVersion ���
�PackageDependencyData
" �ProcessGroupId ���
" �LoaderThreads
�RedirectionDllName ���
�HeapPartitionName
# �DefaultThreadpoolCpuSetMasks �
" �DefaultThreadpoolCpuSetMaskCount �
" �DefaultThreadpoolThreadMaximum ���V & �_RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��
� F � _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ R � _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
"
� �
! Type �
! CreatorBackTraceIndex
$ CriticalSection ��
ProcessLocksList �
" EntryCount ���
" ContentionCount ��
" Flags
! CreatorBackTraceIndexHigh
! SpareUSHORT ��R % _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
#
� �
' DebugInfo
LockCount
RecursionCount ���
OwningThread �
LockSemaphore
" SpinCount F ( _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ * onecore\internal\sdk\inc\nturtl.h ��
"
� . � _SLIST_HEADER .?AT_SLIST_HEADER@@ B � _SINGLE_LIST_ENTRY .?AU_SINGLE_LIST_ENTRY@@ ��
-
�
. Next �B / _SINGLE_LIST_ENTRY .?AU_SINGLE_LIST_ENTRY@@ ��F
# Alignment
- Next �
! Depth
! CpuId . 1 _SLIST_HEADER .?AT_SLIST_HEADER@@
,
�
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" �� " " �
� 2 � _LARGE_INTEGER .?AT_LARGE_INTEGER@@ ��*
" LowPart ��
HighPart �: @ <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
HighPart �
A u
QuadPart �2 B _LARGE_INTEGER .?AT_LARGE_INTEGER@@ �� " " � � E
F
� " " � �2 � _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ *
" LowPart ��
" HighPart �: J <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
" HighPart �
K u
# QuadPart �2 L _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ N � _ACTIVATION_CONTEXT_DATA .?AU_ACTIVATION_CONTEXT_DATA@@ ��
N ��
O
� F � _ASSEMBLY_STORAGE_MAP .?AU_ASSEMBLY_STORAGE_MAP@@
Q
� " � " " �
" ��
" ��
" ��
" �� " � p " �> � _LEAP_SECOND_DATA .?AU_LEAP_SECOND_DATA@@
[
�
" ��
" ��
InheritedAddressSpace
ReadImageFileExecOptions �
BeingDebugged
BitField �
ImageUsesLargePages ��
IsProtectedProcess ���
IsImageDynamicallyRelocated ��
SkipPatchingUser32Forwarders �
IsPackagedProcess
IsAppContainer ���
IsProtectedProcessLight ��
IsLongPathAwareProcess ���
Mutant ���
ImageBaseAddress �
Ldr ��
! ProcessParameters
SubSystemData
ProcessHeap ��
+ FastPebLock ��
3 AtlThunkSListPtr �
$ IFEOKey ��
" ( CrossProcessFlags
4 ( ProcessInJob �
5 ( ProcessInitializing ��
6 ( ProcessUsingVEH ��
7 ( ProcessUsingVCH ��
8 ( ProcessUsingFTH ��
9 ( ProcessPreviouslyThrottled ���
: ( ProcessCurrentlyThrottled
; ( ProcessImagesHotPatched ��
< ( ReservedBits0
, KernelCallbackTable ��
, UserSharedInfoPtr
" 0 SystemReserved ���
3 4 AtlThunkSListPtr32 ���
8 ApiSetMap
" < TlsExpansionCounter ��
@ TlsBitmap
= D TlsBitmapBits
L ReadOnlySharedMemoryBase �
P SharedData ���
> T ReadOnlyStaticServerData �
X AnsiCodePageData �
\ OemCodePageData ��
` UnicodeCaseTableData �
" d NumberOfProcessors ���
" h NtGlobalFlag �
? p CriticalSectionTimeout ���
" x HeapSegmentReserve ���
" | HeapSegmentCommit
" � HeapDeCommitTotalFreeThreshold ���
" � HeapDeCommitFreeBlockThreshold ���
" � NumberOfHeaps
" � MaximumNumberOfHeaps �
> � ProcessHeaps �
� GdiSharedHandleTable �
� ProcessStarterHelper �
" � GdiDCAttributeList ���
$ � LoaderLock ���
" � OSMajorVersion ���
" � OSMinorVersion ���
! � OSBuildNumber
! � OSCSDVersion �
" � OSPlatformId �
" � ImageSubsystem ���
" � ImageSubsystemMajorVersion ���
" � ImageSubsystemMinorVersion ���
" � ActiveProcessAffinityMask
D � GdiHandleBuffer ��
G LPostProcessInitRoutine ���
PTlsExpansionBitmap ���
H TTlsExpansionBitmapBits ���
" �SessionId
I �AppCompatFlags ���
I �AppCompatFlagsUser ���
�pShimData
�AppCompatInfo
�CSDVersion ���
P �ActivationContextData
R �ProcessAssemblyStorageMap
P SystemDefaultActivationContextData ���
R SystemAssemblyStorageMap �
" MinimumStackCommit ���
S SparePointers
T SpareUlongs ��
0WerRegistrationData ��
4WerShipAssertPtr �
8pUnused ��
<pImageHeaderHash �
" @TracingFlags �
U @HeapTracingEnabled ���
V @CritSecTracingEnabled
W @LibLoaderTracingEnabled ��
X @SpareTracingBits �
# HCsrServerReadOnlySharedMemoryBase
" PTppWorkerpListLock ���
TTppWorkerpList ���
Y \WaitOnAddressHashTable ���
\TelemetryCoverageHeader ��
" `CloudFileFlags ���
" dCloudFileDiagFlags ���
p hPlaceholderCompatibilityMode �
Z iPlaceholderCompatibilityModeReserved �
\ pLeapSecondData ���
" tLeapSecondFlags ��
] tSixtySecondEnabled ���
^ tReserved �
" xNtGlobalFlag2 & l _ �_PEB .?AU_PEB@@ ��
�
a b > c NtProcessStartupW_AfterSecurityCookieInitialized ���
�
q
�
�
! t h i iswspace ���
q " k . l NtStartupCountEnvironmentStrings ���
q
� t n n " t o p wmain ��
� q r s & t NtRecordEnvironmentPointers
e e v
w
� " " y
z
� |
}
� c NtProcessStartupW �� E " � __security_init_cookie � JobObjectBasicAccountingInformation �� JobObjectBasicLimitInformation ��� JobObjectBasicProcessIdList �� JobObjectBasicUIRestrictions � JobObjectSecurityLimitInformation JobObjectEndOfJobTimeInformation � JobObjectAssociateCompletionPortInformation �� JobObjectBasicAndIoAccountingInformation � JobObjectExtendedLimitInformation
JobObjectJobSetInformation ��� JobObjectGroupInformation JobObjectNotificationLimitInformation
JobObjectLimitViolationInformation ��� JobObjectGroupInformationEx �� JobObjectCpuRateControlInformation ��� JobObjectCompletionFilter JobObjectCompletionCounter ��� JobObjectFreezeInformation ��� JobObjectExtendedAccountingInformation ��� JobObjectWakeInformation � JobObjectBackgroundInformation ��� JobObjectSchedulingRankBiasInformation ��� JobObjectTimerVirtualizationInformation �� JobObjectCycleTimeNotification ��� JobObjectClearEvent �� JobObjectInterferenceInformation � JobObjectClearPeakJobMemoryUsed �� JobObjectMemoryUsageInformation �� JobObjectSharedCommit JobObjectContainerId � JobObjectIoRateControlInformation % JobObjectSiloRootDirectory ��� & JobObjectServerSiloBasicInformation �� ' JobObjectServerSiloUserSharedData ( JobObjectServerSiloInitialize ) JobObjectServerSiloRunningState �� * JobObjectIoAttribution ��� + JobObjectMemoryPartitionInformation �� , JobObjectContainerTelemetryId - JobObjectSiloSystemRoot �� . JobObjectEnergyTrackingState � / JobObjectThreadImpersonationInformation �� JobObjectReserved1Information JobObjectReserved2Information JobObjectReserved3Information JobObjectReserved4Information JobObjectReserved5Information JobObjectReserved6Information JobObjectReserved7Information JobObjectReserved8Information JobObjectReserved9Information JobObjectReserved10Information ��� JobObjectReserved11Information ��� JobObjectReserved12Information ��� JobObjectReserved13Information ��� JobObjectReserved14Information ��� JobObjectNetRateControlInformation ��� ! JobObjectNotificationLimitInformation2 ��� " JobObjectLimitViolationInformation2 �� # JobObjectCreateSilo �� $ JobObjectSiloBasicInformation % JobObjectReserved15Information ��� & JobObjectReserved16Information ��� ' JobObjectReserved17Information ��� ( JobObjectReserved18Information ��� ) JobObjectReserved19Information ��� * JobObjectReserved20Information ��� + JobObjectReserved21Information ��� , JobObjectReserved22Information ��� - JobObjectReserved23Information ��� . JobObjectReserved24Information ��� / JobObjectReserved25Information ��� 0 MaxJobObjectInfoClass > I t � _JOBOBJECTINFOCLASS .?AW4_JOBOBJECTINFOCLASS@@ �. onecore\internal\sdk\inc\ntpsapi_x.h ���� SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN �� SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS �� SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE ���N t � SE_WS_APPX_SIGNATURE_ORIGIN .?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@ �* onecore\internal\sdk\inc\ntseapi.h � JOB_OBJECT_IO_RATE_CONTROL_ENABLE JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS ���Z t � JOB_OBJECT_IO_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@ ��� PsWakeReasonUser � PsWakeReasonExecutionRequired PsWakeReasonKernel ��� PsWakeReasonInstrumentation �� PsWakeReasonPreserveProcess �� PsWakeReasonActivityReference PsWakeReasonWorkOnBehalf � PsMaxWakeReasons �6 t � _PS_WAKE_REASON .?AW4_PS_WAKE_REASON@@ � TP_CALLBACK_PRIORITY_HIGH TP_CALLBACK_PRIORITY_NORMAL �� TP_CALLBACK_PRIORITY_LOW � TP_CALLBACK_PRIORITY_INVALID � TP_CALLBACK_PRIORITY_COUNT ���B t � _TP_CALLBACK_PRIORITY .?AW4_TP_CALLBACK_PRIORITY@@ �6 FeatureConfigurationPriorityImageDefault � FeatureConfigurationPriorityService �� FeatureConfigurationPriorityUser �
FeatureConfigurationPriorityUserPolicy ��� FeatureConfigurationPriorityTest � FeatureConfigurationPriorityImageOverride FeatureConfigurationPriorityMax ��^ t � _RTL_FEATURE_CONFIGURATION_PRIORITY .?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@ �: onecore\internal\sdk\inc\rtlfeatureconfigtypes.h ���
SystemProcessClassificationNormal SystemProcessClassificationSystem SystemProcessClassificationSecureSystem �� SystemProcessClassificationMemCompression SystemProcessClassificationRegistry �� SystemProcessClassificationMaximum ���V t � _SYSTEM_PROCESS_CLASSIFICATION .?AW4_SYSTEM_PROCESS_CLASSIFICATION@@ ���* onecore\internal\sdk\inc\ntexapi.h �~ PowerUserPresent � PowerUserNotPresent �� PowerUserInactive PowerUserMaximum � PowerUserInvalid �F t � _USER_ACTIVITY_PRESENCE .?AW4_USER_ACTIVITY_PRESENCE@@ �* onecore\external\ddk\inc\ntpoapi.h � MemoryNotContiguous �� MemoryAlignedAndContiguous ��� MemoryNotResident MemoryNotEligibleToMakeContiguous MemoryContiguityStateMax �f t � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE .?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@ ���* onecore\internal\sdk\inc\ntmmapi.h �# SystemBasicInformation ��� SystemProcessorInformation ��� SystemPerformanceInformation � SystemTimeOfDayInformation ��� SystemPathInformation SystemProcessInformation � SystemCallCountInformation ��� SystemDeviceInformation �� SystemProcessorPerformanceInformation SystemFlagsInformation ���
SystemCallTimeInformation SystemModuleInformation �� SystemLocksInformation ���
SystemStackTraceInformation �� SystemPagedPoolInformation ��� SystemNonPagedPoolInformation SystemHandleInformation �� SystemObjectInformation �� SystemPageFileInformation SystemVdmInstemulInformation � SystemVdmBopInformation �� SystemFileCacheInformation ��� SystemPoolTagInformation � SystemInterruptInformation ��� SystemDpcBehaviorInformation � SystemFullMemoryInformation �� SystemLoadGdiDriverInformation ��� SystemUnloadGdiDriverInformation � SystemTimeAdjustmentInformation �� SystemSummaryMemoryInformation ��� SystemMirrorMemoryInformation SystemPerformanceTraceInformation SystemObsolete0 �� ! SystemExceptionInformation ��� " SystemCrashDumpStateInformation �� # SystemKernelDebuggerInformation �� $ SystemContextSwitchInformation ��� % SystemRegistryQuotaInformation ��� & SystemExtendServiceTableInformation �� ' SystemPrioritySeperation � ( SystemVerifierAddDriverInformation ��� ) SystemVerifierRemoveDriverInformation * SystemProcessorIdleInformation ��� + SystemLegacyDriverInformation , SystemCurrentTimeZoneInformation � - SystemLookasideInformation ��� . SystemTimeSlipNotification ��� / SystemSessionCreate �� 0 SystemSessionDetach �� 1 SystemSessionInformation � 2 SystemRangeStartInformation �� 3 SystemVerifierInformation 4 SystemVerifierThunkExtend 5 SystemSessionProcessInformation �� 6 SystemLoadGdiDriverInSystemSpace � 7 SystemNumaProcessorMap ��� 8 SystemPrefetcherInformation �� 9 SystemExtendedProcessInformation � : SystemRecommendedSharedDataAlignment � ; SystemComPlusPackage � < SystemNumaAvailableMemory = SystemProcessorPowerInformation �� > SystemEmulationBasicInformation �� ? SystemEmulationProcessorInformation �� @ SystemExtendedHandleInformation �� A SystemLostDelayedWriteInformation B SystemBigPoolInformation � C SystemSessionPoolTagInformation �� D SystemSessionMappedViewInformation ��� E SystemHotpatchInformation F SystemObjectSecurityMode � G SystemWatchdogTimerHandler ��� H SystemWatchdogTimerInformation ��� I SystemLogicalProcessorInformation J SystemWow64SharedInformationObsolete � K SystemRegisterFirmwareTableInformationHandler L SystemFirmwareTableInformation ��� M SystemModuleInformationEx N SystemVerifierTriageInformation �� O SystemSuperfetchInformation �� P SystemMemoryListInformation �� Q SystemFileCacheInformationEx � R SystemThreadPriorityClientIdInformation �� S SystemProcessorIdleCycleTimeInformation �� T SystemVerifierCancellationInformation U SystemProcessorPowerInformationEx V SystemRefTraceInformation W SystemSpecialPoolInformation � X SystemProcessIdInformation ��� Y SystemErrorPortInformation ��� Z SystemBootEnvironmentInformation � [ SystemHypervisorInformation �� \ SystemVerifierInformationEx �� ] SystemTimeZoneInformation ^ SystemImageFileExecutionOptionsInformation ��� _ SystemCoverageInformation ` SystemPrefetchPatchInformation ��� a SystemVerifierFaultsInformation �� b SystemSystemPartitionInformation � c SystemSystemDiskInformation �� d SystemProcessorPerformanceDistribution ��� e SystemNumaProximityNodeInformation ��� f SystemDynamicTimeZoneInformation � g SystemCodeIntegrityInformation ��� h SystemProcessorMicrocodeUpdateInformation i SystemProcessorBrandString ��� j SystemVirtualAddressInformation �� k SystemLogicalProcessorAndGroupInformation l SystemProcessorCycleTimeInformation �� m SystemStoreInformation ��� n SystemRegistryAppendString ��� o SystemAitSamplingValue ��� p SystemVhdBootInformation � q SystemCpuQuotaInformation r SystemNativeBasicInformation � s SystemErrorPortTimeouts �� t SystemLowPriorityIoInformation ��� u SystemBootEntropyInformation � v SystemVerifierCountersInformation w SystemPagedPoolInformationEx � x SystemSystemPtesInformationEx y SystemNodeDistanceInformation z SystemAcpiAuditInformation ��� { SystemBasicPerformanceInformation | SystemQueryPerformanceCounterInformation � } SystemSessionBigPoolInformation �� ~ SystemBootGraphicsInformation SystemScrubPhysicalMemoryInformation � � SystemBadPageInformation � � SystemProcessorProfileControlArea � SystemCombinePhysicalMemoryInformation ��� � SystemEntropyInterruptTimingInformation �� � SystemConsoleInformation � � SystemPlatformBinaryInformation �� � SystemPolicyInformation �� � SystemHypervisorProcessorCountInformation � SystemDeviceDataInformation �� � SystemDeviceDataEnumerationInformation ��� � SystemMemoryTopologyInformation �� � SystemMemoryChannelInformation ��� � SystemBootLogoInformation � SystemProcessorPerformanceInformationEx �� � SystemCriticalProcessErrorLogInformation � � SystemSecureBootPolicyInformation � SystemPageFileInformationEx �� � SystemSecureBootInformation �� � SystemEntropyInterruptTimingRawInformation ��� � SystemPortableWorkspaceEfiLauncherInformation � SystemFullProcessInformation � � SystemKernelDebuggerInformationEx � SystemBootMetadataInformation � SystemSoftRebootInformation �� � SystemElamCertificateInformation � � SystemOfflineDumpConfigInformation ��� � SystemProcessorFeaturesInformation ��� � SystemRegistryReconciliationInformation �� � SystemEdidInformation � SystemManufacturingInformation ��� � SystemEnergyEstimationConfigInformation �� � SystemHypervisorDetailInformation � SystemProcessorCycleStatsInformation � � SystemVmGenerationCountInformation ��� � SystemTrustedPlatformModuleInformation ��� � SystemKernelDebuggerFlags � SystemCodeIntegrityPolicyInformation � � SystemIsolatedUserModeInformation � SystemHardwareSecurityTestInterfaceResultsInformation � SystemSingleModuleInformation � SystemAllowedCpuSetsInformation �� � SystemVsmProtectionInformation ��� � SystemInterruptCpuSetsInformation � SystemSecureBootPolicyFullInformation � SystemCodeIntegrityPolicyFullInformation � � SystemAffinitizedInterruptProcessorInformation ��� � SystemRootSiloInformation � SystemCpuSetInformation �� � SystemCpuSetTagInformation ��� � SystemWin32WerStartCallout ��� � SystemSecureKernelProfileInformation � � SystemCodeIntegrityPlatformManifestInformation ��� � SystemInterruptSteeringInformation ��� � SystemSupportedProcessorArchitectures � SystemMemoryUsageInformation � � SystemCodeIntegrityCertificateInformation � SystemPhysicalMemoryInformation �� � SystemControlFlowTransition �� � SystemKernelDebuggingAllowed � � SystemActivityModerationExeState � � SystemActivityModerationUserSettings � � SystemCodeIntegrityPoliciesFullInformation ��� � SystemCodeIntegrityUnlockInformation � � SystemIntegrityQuotaInformation �� � SystemFlushInformation ��� � SystemProcessorIdleMaskInformation ��� � SystemSecureDumpEncryptionInformation � SystemWriteConstraintInformation � � SystemKernelVaShadowInformation �� � SystemHypervisorSharedPageInformation � SystemFirmwareBootPerformanceInformation � � SystemCodeIntegrityVerificationInformation ��� � SystemFirmwarePartitionInformation ��� � SystemSpeculationControlInformation �� � SystemDmaGuardPolicyInformation �� � SystemEnclaveLaunchControlInformation � SystemWorkloadAllowedCpuSetsInformation �� � SystemCodeIntegrityUnlockModeInformation � � SystemLeapSecondInformation �� � SystemFlags2Information �� � SystemSecurityModelInformation ��� � SystemCodeIntegritySyntheticCacheInformation � � SystemFeatureConfigurationInformation � SystemFeatureConfigurationSectionInformation � � SystemFeatureUsageSubscriptionInformation � SystemSecureSpeculationControlInformation � SystemSpacesBootInformation �� � SystemFwRamdiskInformation ��� � SystemWheaIpmiHardwareInformation � SystemDifSetRuleClassInformation � � SystemDifClearRuleClassInformation ��� � SystemDifApplyPluginVerificationOnDriver � � SystemDifRemovePluginVerificationOnDriver � SystemShadowStackInformation � � SystemBuildVersionInformation � SystemPoolLimitInformation ��� � SystemCodeIntegrityAddDynamicStore ��� � SystemCodeIntegrityClearDynamicStores � SystemPoolZeroingInformation � � MaxSystemInfoClass ���J � t � _SYSTEM_INFORMATION_CLASS .?AW4_SYSTEM_INFORMATION_CLASS@@ � JOB_OBJECT_NET_RATE_CONTROL_ENABLE ��� JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS ��Z t � JOB_OBJECT_NET_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@ �z KCONTINUE_UNWIND � KCONTINUE_RESUME � KCONTINUE_LONGJUMP ��� KCONTINUE_SET KCONTINUE_LAST ���6 t � _KCONTINUE_TYPE .?AW4_KCONTINUE_TYPE@@ �* onecore\internal\sdk\inc\ntxcapi.h �: VRF_TRIAGE_CONTEXT_NONE �� VRF_TRIAGE_CONTEXT_DEFAULT ��� VRF_TRIAGE_CONTEXT_DEVELOPMENT ��� VRF_TRIAGE_CONTEXT_CERTIFICATION � VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED ��� VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING � NUM_VRF_TRIAGE_CONTEXTS ��> t � _VRF_TRIAGE_CONTEXT .?AW4_VRF_TRIAGE_CONTEXT@@ �* COMIMAGE_FLAGS_ILONLY COMIMAGE_FLAGS_32BITREQUIRED � COMIMAGE_FLAGS_IL_LIBRARY COMIMAGE_FLAGS_STRONGNAMESIGNED �� COMIMAGE_FLAGS_NATIVE_ENTRYPOINT � � COMIMAGE_FLAGS_TRACKDEBUGDATA � COMIMAGE_FLAGS_32BITPREFERRED COR_VERSION_MAJOR_V2 � COR_VERSION_MAJOR COR_VERSION_MINOR COR_DELETED_NAME_LENGTH �� COR_VTABLEGAP_NAME_LENGTH NATIVE_TYPE_MAX_CB ��� � COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE � IMAGE_COR_MIH_METHODRVA �� IMAGE_COR_MIH_EHRVA �� IMAGE_COR_MIH_BASICBLOCK � COR_VTABLE_32BIT � COR_VTABLE_64BIT � COR_VTABLE_FROM_UNMANAGED COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN ��� COR_VTABLE_CALL_MOST_DERIVED � IMAGE_COR_EATJ_THUNK_SIZE MAX_CLASS_NAME ��� MAX_PACKAGE_NAME �R t � ReplacesCorHdrNumericDefines .?AW4ReplacesCorHdrNumericDefines@@ ���� SystemFeatureConfigurationSectionTypeBoot SystemFeatureConfigurationSectionTypeRuntime � SystemFeatureConfigurationSectionTypeUsageTriggers ��� SystemFeatureConfigurationSectionTypeCount ���n t � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE .?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@ ��� LockQueueUnusedSpare0 LockQueueUnusedSpare1 LockQueueUnusedSpare2 LockQueueUnusedSpare3 LockQueueVacbLock LockQueueMasterLock �� LockQueueNonPagedPoolLock LockQueueIoCancelLock LockQueueUnusedSpare8 LockQueueIoVpbLock ���
LockQueueIoDatabaseLock �� LockQueueIoCompletionLock LockQueueNtfsStructLock ��
LockQueueAfdWorkQueueLock LockQueueBcbLock � LockQueueUnusedSpare15 ��� LockQueueUnusedSpare16 ��� LockQueueMaximumLock �J t � _KSPIN_LOCK_QUEUE_NUMBER .?AW4_KSPIN_LOCK_QUEUE_NUMBER@@ ���
�
�
#
�
�
F
�
�
�
���
���
���
���� -FC -MT -c -Zc:wchar_t- -Zl -Zp8 -Gy -Gm- -W4 -Gz -hotpatch -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Oy- -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427
� f � -arch:IA32 -Gw -wd4316 -wd4973 -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X � � � � � � ����66=���{ �j�n�M���'��Aі�f�2������Z2������Z����/B ��Ib
�"Wo���'���p��U
�$E���D�\�} =5s2%�\EG`f�LC(A�O�n̟ @comp.idk�� @feat.00� ��� @vol.md �� .debug$S �2 e .rdata �ہ e .rdata �w � e .rdata h�Q� e < .rdata kE�� e U o .rdata kE�� e � .rdata ��R e � � � 1 _wmain ; U .text$mn |�k� e .debug$S 0 e .text$mn
:
��� e .debug$S 0 g
e m �
$LN3 � .
� �
.debug$S 4 e .debug$S
@ e .debug$S 8 e .debug$T \h e .chks64 � e � ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ ??_C@_13CGOKJPIL@?$AA?1@ _RtlNtPathSeperatorString __imp__NtTerminateProcess@8 _RtlAlternateDosPathSeperatorString _RtlDosPathSeperatorsString _NtRecordEnvironmentPointers@8 _NtStartupCountEnvironmentStrings@4 __imp__RtlNormalizeProcessParams@4 _iswspace __imp__RtlAllocateHeap@12 ___security_init_cookie _NtProcessStartupW@4 _NtProcessStartupW_AfterSecurityCookieInitialized@4 $SkipInit$71 $CountEnvironmentStrings$70 /57 1606895307 100666 47569 `
L �F�_̳ 8 .debug$S 3 � @ B.rdata �5 @0@.rdata �5 @0@.rdata �5 @0@.rdata �5 �5 @0@.rdata �5 �5 @0@.rdata �5 �5 @0@.text$mn 6 6 `.debug$S , '6 S7 @B.text$mn 9 �7 �9 `.debug$S � r: C c @B.debug$S 4 �F G @B.debug$S @ (G hG @B.debug$S 8 |G �G @B.debug$T �h �G @ B.chks64 � ��
.drectve ȳ
� | > d:\os\obj\x86fre\minkernel\urtl\objfre\i386\startup.obj : < � k k
Microsoft (R) Optimizing Compiler � � & � JobObjectReserved2Information 2 � SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED & � JobObjectReserved9Information � � ! � JobObjectWakeInformation ( � JobObjectClearPeakJobMemoryUsed ' � ) JobObjectReserved19Information 5 � JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME * � ' JobObjectServerSiloUserSharedData ' � ( JobObjectReserved18Information � PsMaxWakeReasons ' � * JobObjectReserved20Information ' � % JobObjectReserved15Information & � , JobObjectContainerTelemetryId % � TP_CALLBACK_PRIORITY_INVALID # � JobObjectFreezeInformation ' � . JobObjectReserved24Information 2 � FeatureConfigurationPriorityImageOverride , � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS ' � JobObjectReserved12Information ( � ) JobObjectServerSiloRunningState - � SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � JobObjectSharedCommit & � JobObjectReserved3Information & � ( JobObjectServerSiloInitialize + � SystemProcessClassificationMaximum # � % JobObjectSiloRootDirectory ' � ' JobObjectReserved17Information � * JobObjectIoAttribution ' � JobObjectReserved11Information & � JobObjectReserved4Information � PowerUserMaximum ! � MemoryContiguityStateMax � * ( � JobObjectMemoryUsageInformation �
* � JobObjectIoRateControlInformation & � JobObjectReserved8Information ' � , JobObjectReserved22Information $ � TP_CALLBACK_PRIORITY_NORMAL * � JOB_OBJECT_IO_RATE_CONTROL_ENABLE ' � - JobObjectReserved23Information ' � JobObjectReserved13Information % � � SystemPoolZeroingInformation & � JobObjectReserved1Information & � JobObjectReserved6Information 0 � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS 9 � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JobObjectClearEvent & � JobObjectReserved5Information & � JobObjectReserved7Information 2 � JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH ) � JobObjectInterferenceInformation , � & JobObjectServerSiloBasicInformation � JobObjectContainerId 0 � / JobObjectThreadImpersonationInformation � - JobObjectSiloSystemRoot ' � JobObjectCycleTimeNotification ' � JobObjectReserved10Information + � JOB_OBJECT_NET_RATE_CONTROL_ENABLE , � + JobObjectMemoryPartitionInformation A � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � KCONTINUE_UNWIND # � VRF_TRIAGE_CONTEXT_DEFAULT / � JobObjectExtendedAccountingInformation , � SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN % � . JobObjectEnergyTrackingState ' � + JobObjectReserved21Information � COR_VERSION_MAJOR_V2 ' � / JobObjectReserved25Information ' � & JobObjectReserved16Information ' � JobObjectReserved14Information 3 � SystemFeatureConfigurationSectionTypeCount ' � JobObjectBackgroundInformation � LockQueueUnusedSpare16 0 � JobObjectTimerVirtualizationInformation - � JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG / � JobObjectSchedulingRankBiasInformation / � SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE 0 SLIST_ENTRY
n PPVOID � _TP_CALLBACK_PRIORITY � _JOBOBJECTINFOCLASS _UNICODE_STRING � PPEB � PSTRING � _PS_WAKE_REASON � _SYSTEM_INFORMATION_CLASS ( � JOB_OBJECT_NET_RATE_CONTROL_FLAGS LONG_PTR
CURDIR u PUINT_PTR " ULONG_PTR
STRING p PCHAR C _LARGE_INTEGER ! wchar_t " � SE_WS_APPX_SIGNATURE_ORIGIN ANSI_STRING
_LIST_ENTRY UNICODE_STRING " � PRTL_CRITICAL_SECTION_DEBUG " & _RTL_CRITICAL_SECTION_DEBUG ' � JOB_OBJECT_IO_RATE_CONTROL_FLAGS � _USER_ACTIVITY_PRESENCE � PUNICODE_STRING PLONG PBOOLEAN � _KCONTINUE_TYPE 0 _SINGLE_LIST_ENTRY 2 _SLIST_HEADER LONG _PEB_LDR_DATA M _ULARGE_INTEGER # ULONG64 RTL_DRIVE_LETTER_CURDIR
" SIZE_T # � ReplacesCorHdrNumericDefines q PWCH $ � PPS_POST_PROCESS_INIT_ROUTINE
PSHORT � _KSPIN_LOCK_QUEUE_NUMBER � _VRF_TRIAGE_CONTEXT " TP_VERSION u PUINT32 p CCHAR � PANSI_STRING * � _RTL_FEATURE_CONFIGURATION_PRIORITY M ULARGE_INTEGER � TP_CALLBACK_PRIORITY " LOGICAL 1 � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE ` _PEB
t INT UCHAR _RTL_DRIVE_LETTER_CURDIR " LCID BOOLEAN � PCUNICODE_STRING
! USHORT PVOID q WCHAR PSE_SIGNING_LEVEL % � _SYSTEM_PROCESS_CLASSIFICATION
LONG64 # ! PRTL_USER_PROCESS_PARAMETERS " ULONG � PPEB_LDR_DATA
q PWCHAR ) _RTL_CRITICAL_SECTION q PWSTR # _RTL_USER_PROCESS_PARAMETERS NTSTATUS _CURDIR C LARGE_INTEGER
HANDLE # ULONGLONG
" PULONG
u size_t # PULONG64 LONGLONG - � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE PLIST_ENTRY SHORT PLONG64 . PSINGLE_LIST_ENTRY
LIST_ENTRY p CHAR _STRING � � `���[4dx���By%�Г��� z�&K�-�pW " ���{�$��N�� ��~p��o7��T�1*���. F F?�Z#��.Wi�/0��=�� �9*W�-� l m��] ~_�B �3�쌰��l]��(��Q��@� � .6oA�}4�ؐ,��ǣ�
+h��4�Q�X3� � ܇h���6
���d3�����:iW�jG^��t� � m����Wc�L����z0� ���ٶ�$< � [Y8C�n`��XX��� �L#��4���W$Iit�O 2�ዿ�N,qٞ��%[�ȅ�4��\]9�� = �G�/�m��hB-����-q�b}��Y�~Y ` T�@�
2��U��p�|��� ��k����[p*& � ��z!��<y5�1�aF�=)�;ђ�)Y bčW � C���4�h��y��t:;K�͑\�Df��1 � � ;!E���q�G{�>|;:���f���5�gn�� � ����̫��2r�WQ��K��TI�Up��/�z � F9�6K�v�/�|S��]t�RF�W2��I F PH<��R�N�-Ulֵ��S�O�7g�n�䯲*�� k 3E �� �r`QQ���e��e����`z� i � E~/EX"�-�p-���i����`��.�z#�0� � H�}ӰWU����f1O_�d ��Hf�
��N�nZ � p
y��f�9����|= 6���4 ��n`�RM� X�Y
��m�kּg�L��~�g���x�5�
@ 焙v GI��� ����P�
��W� f )\��u��ݡ�_6 mV����*���[�1�l&�! � ��%|�#o5a�0i�^�{�ơz[ l���HR � )G�xS�l�F,�yV���6�}�����ָ@��j � n*�\T�uM�fk �<�t���L�ee�#a�� ���O.@=4L�C�ي�m�;_�iM %q� �����y�Q+���{"WÌ�R~̟���H���? D �4y4[G�c �c��e��U�W,Qᨵ7�� f �t�T�`���Niu�$�I8FQ@e�}&f�S��E�� � �D�rlBsm�DE�cQ����}W� �w��±� � N�Q� 4O&K�� +l;x�2�%��ݮ�pZ,� � ��������0TcIC4�U��m��sF'<�Z � �4Y����|��B�N��m#��*�sE��Bp�� ����$�3�3EJ�I �h@�oa`�� 6 �� ��/�5h��d�����,�]0�f& (� d �kE9OӨ��.I F��SY9G&��.��?堳( � �D&<�@)�Z?��as� z�����A��? p� � S���M�"��S��U}h�g�c�q�c5w�k���8 � @ȍl2��X�1��}���e��C��>�ȢF)� � �A+��z'����k��mD�XL���t B-<y�� ��9P/�M�#��_��<�� φ6R^ C �*�����ou��M+K�Ŋ�;��qh� m � �ý3NP� ��eb�nM `I����<�F � �:B{m�n=�g���\c*�ӏ���Z" ��Y � ��3)�J�$��{�.
w ~�/�l���M� � I�(��+�S�u��]?�z�9NP�3Q�MJ�B j�v��b~�ۥ�)0M�/�띡e��� \� @Z E ����ɵ\|5 ��Z��b���Q 3 ���kb���B o ����FAP�icû����;�|" B7�㙨^ �9 � ���� k|)�E@���B�#���b�V�<�2Ǡ3 � 3*�ָ䊀��DJ՝�� ��q/�=M�f�t� � � �S:c٭ؙo߮ ���qO>�)o��Z� �-h/� S��~����
a!�1k��j . ��#YV^b%�}��/'p�O�Gʈ?��z��� S ��V��� Ť��ڃ "��?�f�R�s�[Y�%=� } D�n��q���9��a�_�G���H�E���-W��xZ � �$�����+`�.?�ʿA��=Gݗ��'Lm � @�J���ۊ�މ
��H��s��P��˓YH� � �>� j�t�&~8^�B��J2�/Ru�~ &��8�i_u& ��>�-Z%�f�>R69ϓ5�%� : *�7�C
TQ�� ?R����֪¸��FHc�� e -�?bF��,U1�.Er;H�Ԡ`p I��4M � } ��da�nGۛ'�*���M���G�]����" � ��܆�f؇��"xU. @����;2}X��}H � G�*㥬2����M���}�b�R�̫�)��
*s�4��bc�v�7���h\Sř�_s� �4�h� %
y3�
6$��g涧i0����
�E�g$E��$ G
�J��W6���,�)J dɫ7�%eڭ�� j
/��J��5\�Z��_g4�4�%]�L�� ��3h� �
�p[F����ll�<��A�=��l}�K���R� �
k�3 �G�� ��F2#�)� ER�O|��v\;� �
h҄� �3(/�e��f��`�z&�e$P��MD� �
f߹��R�|��ڕ����G/S�6�<��� o�&���-�},��'�w��_�BIS;�§g
�7; E W|A
w�O�?�pU]~-�2�!�\O����5� l �A�T:�U 3�QZ� j-r76y�c~���� � ���^br�ee��� ���Nǐ����5�j�Ja � ��*
Y,�}��Ƴ�������X���� � ��'��,��@H4sS�k�!Ȫ:ݬ���"fE) � �0:s�0pV�eҐ����lj� �6�Ȗ0 � ƨ��T ��� Ȓ� ���)n���y��aP`I D ��a�;.+�!6�%ri� E�Q�p�u�G�g�.� g ����8�����L�v���X m*����I/i�� � �U��Q�u"��w�!� �fB"���`ru^���9 � �
���mcJAt�qe�el��]�;�L�� � ��� [r�"��衷� �R ��ҹ�� ��
����w�^��ȯ�
?���;��f���B(H� -
�[��=�
Tǜ�
]����>d��Wƫ��� R
�۠�Җ �{���� ���n"]�,$J�� �
�[�-%`4�����o2�>�'�q.qg�Gn��) �
5�y�.b�X�W�?�dT�bՃ綕<$QD1��q �
oL>
�P� ��VrɑE.�(�d�jФW��� � < onecore\external\ddk\inc\ntnls.h onecore\internal\sdk\inc\ntconfig.h onecore\external\shared\inc\guiddef.h onecore\external\sdk\inc\ntarm64.h onecore\external\sdk\inc\ntarm64_x.h onecore\external\ddk\inc\ntimage.h onecore\external\shared\inc\ntstatus.h minkernel\urtl\startup.c onecore\external\shared\inc\dontuse.h onecore\internal\sdk\inc\ntwow64.h onecore\internal\sdk\inc\minwin\umstls.h onecore\external\shared\inc\pshpack4.h onecore\internal\sdk\inc\ntkeapi.h onecore\external\sdk\inc\crt\process.h onecore\internal\sdk\inc\ntwow64_x.h onecore\external\shared\inc\pshpack2.h onecore\internal\sdk\inc\ntkeapi_x.h onecore\internal\sdk\inc\ntpsapi.h onecore\internal\sdk\inc\ntpsapi_x.h onecore\external\sdk\inc\minwin\rtlsupportapi.h onecore\external\shared\inc\minwin\apiset.h onecore\external\shared\inc\minwin\apisetcconv.h onecore\external\sdk\inc\crt\string.h onecore\internal\sdk\inc\minwin\xstateapi.h onecore\internal\sdk\inc\rtlhashdef.h onecore\internal\sdk\inc\minwin\ntpnpapi.h onecore\external\shared\inc\cfg.h shared\inc\winapifamily.h onecore\internal\sdk\inc\ntrtlpath.h onecore\internal\sdk\inc\nxi386.h shared\inc\winpackagefamily.h onecore\external\shared\inc\kernelspecs.h onecore\internal\sdk\inc\warning.h onecore\external\shared\inc\basetsd.h onecore\internal\sdk\inc\suppress_x.h minkernel\urtl\startup.h onecore\external\sdk\inc\minwin\minappmodel.h onecore\internal\sdk\inc\nt.h onecore\internal\sdk\inc\rtlfeatureconfigtypes.h onecore\external\sdk\inc\crt\excpt.h onecore\internal\sdk\inc\ntrtl.h onecore\external\sdk\inc\crt\crtdefs.h onecore\internal\sdk\inc\ntrtl_x.h onecore\external\shared\inc\specstrings.h onecore\external\shared\inc\ip2string.h onecore\external\shared\inc\sal.h onecore\external\shared\inc\concurrencysal.h onecore\external\shared\inc\specstrings_strict.h onecore\external\shared\inc\specstrings_undef.h onecore\external\shared\inc\driverspecs.h onecore\external\shared\inc\sdv_driverspecs.h onecore\internal\sdk\inc\ntexapi.h onecore\external\sdk\inc\crt\vadefs.h onecore\internal\sdk\inc\ntexapi_x.h onecore\internal\sdk\inc\ntobapi.h onecore\internal\sdk\inc\ntobapi_x.h onecore\internal\sdk\inc\minwin\ntioapi.h onecore\internal\sdk\inc\nttpapi.h onecore\external\shared\inc\devioctl.h onecore\internal\sdk\inc\minwin\ntioapi_x.h onecore\internal\sdk\inc\ntiolog.h onecore\external\sdk\inc\ntassert.h onecore\internal\sdk\inc\minwin\ntregapi.h onecore\internal\sdk\inc\affinity.h onecore\internal\sdk\inc\ntregapi_x.h onecore\internal\sdk\inc\volatile_accessors.h onecore\external\shared\inc\pshpack8.h onecore\internal\sdk\inc\ntldr.h onecore\internal\sdk\inc\nturtl.h onecore\external\ddk\inc\ntpoapi.h onecore\internal\sdk\inc\ntmmapi.h onecore\internal\sdk\inc\nttmapi.h onecore\internal\sdk\inc\ntmmapi_x.h onecore\external\shared\inc\ktmtypes.h onecore\internal\sdk\inc\ntlpcapi.h onecore\internal\sdk\inc\rtlrbtree.h onecore\external\shared\inc\dpfilter.h onecore\external\ddk\inc\mce.h onecore\internal\sdk\inc\pebteb.h onecore\external\shared\inc\sdkddkver.h onecore\external\shared\inc\pshpack1.h onecore\internal\sdk\inc\ntseapi.h onecore\internal\sdk\inc\ntseapi_x.h onecore\internal\sdk\inc\ntxcapi.h onecore\internal\sdk\inc\ntxcapi_x.h onecore\internal\sdk\inc\minwin\ntdef_p.h onecore\external\shared\inc\poppack.h onecore\external\sdk\inc\crt\stdarg.h onecore\external\shared\inc\minwin\ntdef.h onecore\external\sdk\inc\crt\ctype.h onecore\internal\sdk\inc\ntrtlstringandbuffer.h onecore\internal\sdk\inc\ntelfapi.h onecore\internal\sdk\inc\nti386.h onecore\internal\sdk\inc\nti386_x.h $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $20 $T0 48 - ^ = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $20 $T0 48 - ^ = $23 $T0 52 - ^ = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $20 $T0 48 - ^ = $23 $T0 52 - ^ = $24 $T0 56 - ^ = � L� \ \ / /
��U��� �u� � * � $ �
� � 6 G � �NtProcessStartup >a Peb E B Z � d �" $LN3 a Peb O� 0 $ � � � �
� � ) X ) \ )
� ) � )
� ) � )
� + � +
� ) )
��U���,�ESVW�p3ۉ]�]ԉ]� �E��!U�E�M�3��E�G3��]�@�]�U���}���� �A �E�A@9Ptf9u �A89P�� jP�E�P� �؉]���v �u��]ԅ�tX�> tS��tO���t��P� Y��tF��u��t1�> t�G�}�F��t�P� Y��t�M���+�A�}�ȉM�뤋M�qH� �U�@ǃ��� ��v�u��]ԋ�3����RP�E�U��p� �ȉM���u
� �� �}��M��� �U����U�� �> �� ;�s|��tx���t��P� Y��tF��u�M��U��tT�> tG�9���E�M���ψGF�M���t;�s �P� �U�Y��tۋM�;�s3��G���3���M����w���3��q��E�V�pH� �]���]�u�E�P� �E�t̅�xPV�u�u�� ����Sj�� _^[�� w � � � ' v � � . � � 9 , �
) , %
' , p % , � � � U G 9 5 d �NtProcessStartup_AfterSecurityCookieInitialized >a Peb A � E D
>" argc B��? �
>p d A � n A � P
>" n A � L_ � � ( A � K � � . > AnsiString D��� >e ProcessParameters A � A 0 � K s A � 1 � B�%
>f envp A 3 >p nullPtr D�
>p s A D ��
>g p A X A � >" NumberOfEnvPointers A 8 � � >" DebugParameter A R � � A ) B��; � >" NumberOfArgPointers A 2 �� � � A � 5 B��G �� >" AllocSize A � A ' �T ~ � # )� A A � _ E M A � B����B �h1
>f argv A - B���5 >f dst A - � M r < A � A � � [ A 3 B����0 � > Status A } � � � � ~ B��*
>p dEnd A P � * l A � q X B��U � � " Z j j m j j q t , �" SkipInit ! CountEnvironmentStrings a Peb ��� AnsiString �p nullPtr 9 w 9u } 9% � 9 � 9, � O� 9 @ 0 � A �% E �' N �- P �O R �U Z �X [ �b \ �e ] �n b �� d �� m �� n �� p �� v �� w �� x �� { �� � �� � �� � �� � �� � �� � �� � �� � �� � � � �
� �
� � � � � �0 � �4 � �9 � �> � �K � �P � �Z � �g � � � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � �� � � � � � � � � � �) � �5 � � * � * � *
* *
* ! *
D * H *
` * d *
t * x *
� * � *
� * � *
* *
* *
) * - *
= * A *
\ * ` *
� * � *
� * � *
� * � *
� * � *
* ! *
1 * 5 *
A * E *
o * s *
� * � *
� * � *
� * � *
� * � *
� * � *
� * *
* *
/ * 3 *
R * V *
b * f *
� * � *
� * � *
� * � *
� * � *
� * � *
� * � *
* *
0 * 4 *
H * L *
\ * ` *
� , � ,
� - � -
* $ *
0 * 4 *
@ * D *
P * T *
` * d *
x * | *
� ' %
RtlNtPathSeperatorString
� 1 /
RtlAlternateDosPathSeperatorString
� ) '
RtlDosPathSeperatorsString
& � _PEB .?AU_PEB@@ ��
��
��
��
��
��
��
��
��6 � _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@ 2 � _LIST_ENTRY .?AU_LIST_ENTRY@@
� "
Flink
Blink 2 _LIST_ENTRY .?AU_LIST_ENTRY@@
" Length ���
Initialized ��
SsHandle �
InLoadOrderModuleList
InMemoryOrderModuleList ��
InInitializationOrderModuleList ��
$ EntryInProgress ��
( ShutdownInProgress ���
, ShutdownThreadId �6 0 _PEB_LDR_DATA .?AU_PEB_LDR_DATA@@
� V � _RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��* � _CURDIR .?AU_CURDIR@@ : � _UNICODE_STRING .?AU_UNICODE_STRING@@ B
! Length ���
! MaximumLength
q Buffer ���: _UNICODE_STRING .?AU_UNICODE_STRING@@ *
DosPath ��
Handle ���* _CURDIR .?AU_CURDIR@@ N � _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ ��* � _STRING .?AU_STRING@@ B
! Length ���
! MaximumLength
p Buffer ���* _STRING .?AU_STRING@@ N
! Flags
! Length ���
" TimeStamp
DosPath ��N _RTL_DRIVE_LETTER_CURDIR .?AU_RTL_DRIVE_LETTER_CURDIR@@ �� " ��
" MaximumLength
" Length ���
" Flags
" DebugFlags ���
ConsoleHandle
" ConsoleFlags �
StandardInput
StandardOutput ���
StandardError
$ CurrentDirectory �
0 DllPath ��
8 ImagePathName
@ CommandLine ��
H Environment ��
" L StartingX
" P StartingY
" T CountX ���
" X CountY ���
" \ CountCharsX ��
" ` CountCharsY ��
" d FillAttribute
" h WindowFlags ��
" l ShowWindowFlags ��
p WindowTitle ��
x DesktopInfo ��
� ShellInfo
� RuntimeData ��
� CurrentDirectores
" �EnvironmentSize ��
" �EnvironmentVersion ���
�PackageDependencyData
" �ProcessGroupId ���
" �LoaderThreads
�RedirectionDllName ���
�HeapPartitionName
# �DefaultThreadpoolCpuSetMasks �
" �DefaultThreadpoolCpuSetMaskCount �
" �DefaultThreadpoolThreadMaximum ���V & �_RTL_USER_PROCESS_PARAMETERS .?AU_RTL_USER_PROCESS_PARAMETERS@@ ��
� F � _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ R � _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
"
� �
! Type �
! CreatorBackTraceIndex
$ CriticalSection ��
ProcessLocksList �
" EntryCount ���
" ContentionCount ��
" Flags
! CreatorBackTraceIndexHigh
! SpareUSHORT ��R % _RTL_CRITICAL_SECTION_DEBUG .?AU_RTL_CRITICAL_SECTION_DEBUG@@
#
� �
' DebugInfo
LockCount
RecursionCount ���
OwningThread �
LockSemaphore
" SpinCount F ( _RTL_CRITICAL_SECTION .?AU_RTL_CRITICAL_SECTION@@ * onecore\internal\sdk\inc\nturtl.h ��
"
� . � _SLIST_HEADER .?AT_SLIST_HEADER@@ B � _SINGLE_LIST_ENTRY .?AU_SINGLE_LIST_ENTRY@@ ��
-
�
. Next �B / _SINGLE_LIST_ENTRY .?AU_SINGLE_LIST_ENTRY@@ ��F
# Alignment
- Next �
! Depth
! CpuId . 1 _SLIST_HEADER .?AT_SLIST_HEADER@@
,
�
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" ��
" �� " " �
� 2 � _LARGE_INTEGER .?AT_LARGE_INTEGER@@ ��*
" LowPart ��
HighPart �: @ <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
HighPart �
A u
QuadPart �2 B _LARGE_INTEGER .?AT_LARGE_INTEGER@@ �� " " � � E
F
� " " � �2 � _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ *
" LowPart ��
" HighPart �: J <anonymous-tag> .?AU<anonymous-tag>@@ J
" LowPart ��
" HighPart �
K u
# QuadPart �2 L _ULARGE_INTEGER .?AT_ULARGE_INTEGER@@ N � _ACTIVATION_CONTEXT_DATA .?AU_ACTIVATION_CONTEXT_DATA@@ ��
N ��
O
� F � _ASSEMBLY_STORAGE_MAP .?AU_ASSEMBLY_STORAGE_MAP@@
Q
� " � " " �
" ��
" ��
" ��
" �� " � p " �> � _LEAP_SECOND_DATA .?AU_LEAP_SECOND_DATA@@
[
�
" ��
" ��
InheritedAddressSpace
ReadImageFileExecOptions �
BeingDebugged
BitField �
ImageUsesLargePages ��
IsProtectedProcess ���
IsImageDynamicallyRelocated ��
SkipPatchingUser32Forwarders �
IsPackagedProcess
IsAppContainer ���
IsProtectedProcessLight ��
IsLongPathAwareProcess ���
Mutant ���
ImageBaseAddress �
Ldr ��
! ProcessParameters
SubSystemData
ProcessHeap ��
+ FastPebLock ��
3 AtlThunkSListPtr �
$ IFEOKey ��
" ( CrossProcessFlags
4 ( ProcessInJob �
5 ( ProcessInitializing ��
6 ( ProcessUsingVEH ��
7 ( ProcessUsingVCH ��
8 ( ProcessUsingFTH ��
9 ( ProcessPreviouslyThrottled ���
: ( ProcessCurrentlyThrottled
; ( ProcessImagesHotPatched ��
< ( ReservedBits0
, KernelCallbackTable ��
, UserSharedInfoPtr
" 0 SystemReserved ���
3 4 AtlThunkSListPtr32 ���
8 ApiSetMap
" < TlsExpansionCounter ��
@ TlsBitmap
= D TlsBitmapBits
L ReadOnlySharedMemoryBase �
P SharedData ���
> T ReadOnlyStaticServerData �
X AnsiCodePageData �
\ OemCodePageData ��
` UnicodeCaseTableData �
" d NumberOfProcessors ���
" h NtGlobalFlag �
? p CriticalSectionTimeout ���
" x HeapSegmentReserve ���
" | HeapSegmentCommit
" � HeapDeCommitTotalFreeThreshold ���
" � HeapDeCommitFreeBlockThreshold ���
" � NumberOfHeaps
" � MaximumNumberOfHeaps �
> � ProcessHeaps �
� GdiSharedHandleTable �
� ProcessStarterHelper �
" � GdiDCAttributeList ���
$ � LoaderLock ���
" � OSMajorVersion ���
" � OSMinorVersion ���
! � OSBuildNumber
! � OSCSDVersion �
" � OSPlatformId �
" � ImageSubsystem ���
" � ImageSubsystemMajorVersion ���
" � ImageSubsystemMinorVersion ���
" � ActiveProcessAffinityMask
D � GdiHandleBuffer ��
G LPostProcessInitRoutine ���
PTlsExpansionBitmap ���
H TTlsExpansionBitmapBits ���
" �SessionId
I �AppCompatFlags ���
I �AppCompatFlagsUser ���
�pShimData
�AppCompatInfo
�CSDVersion ���
P �ActivationContextData
R �ProcessAssemblyStorageMap
P SystemDefaultActivationContextData ���
R SystemAssemblyStorageMap �
" MinimumStackCommit ���
S SparePointers
T SpareUlongs ��
0WerRegistrationData ��
4WerShipAssertPtr �
8pUnused ��
<pImageHeaderHash �
" @TracingFlags �
U @HeapTracingEnabled ���
V @CritSecTracingEnabled
W @LibLoaderTracingEnabled ��
X @SpareTracingBits �
# HCsrServerReadOnlySharedMemoryBase
" PTppWorkerpListLock ���
TTppWorkerpList ���
Y \WaitOnAddressHashTable ���
\TelemetryCoverageHeader ��
" `CloudFileFlags ���
" dCloudFileDiagFlags ���
p hPlaceholderCompatibilityMode �
Z iPlaceholderCompatibilityModeReserved �
\ pLeapSecondData ���
" tLeapSecondFlags ��
] tSixtySecondEnabled ���
^ tReserved �
" xNtGlobalFlag2 & l _ �_PEB .?AU_PEB@@ ��
�
a b : c NtProcessStartup_AfterSecurityCookieInitialized
�
p
�
�
t t h i isspace
q " k . l NtStartupCountEnvironmentStrings ���
� q n o & p NtRecordEnvironmentPointers t f f " t r s main ���
e e u
v
�
�
��
y
� x z {
|
� " " ~
�
x �
�
� �
�
� c NtProcessStartup ��� E " � __security_init_cookie � JobObjectBasicAccountingInformation �� JobObjectBasicLimitInformation ��� JobObjectBasicProcessIdList �� JobObjectBasicUIRestrictions � JobObjectSecurityLimitInformation JobObjectEndOfJobTimeInformation � JobObjectAssociateCompletionPortInformation �� JobObjectBasicAndIoAccountingInformation � JobObjectExtendedLimitInformation
JobObjectJobSetInformation ��� JobObjectGroupInformation JobObjectNotificationLimitInformation
JobObjectLimitViolationInformation ��� JobObjectGroupInformationEx �� JobObjectCpuRateControlInformation ��� JobObjectCompletionFilter JobObjectCompletionCounter ��� JobObjectFreezeInformation ��� JobObjectExtendedAccountingInformation ��� JobObjectWakeInformation � JobObjectBackgroundInformation ��� JobObjectSchedulingRankBiasInformation ��� JobObjectTimerVirtualizationInformation �� JobObjectCycleTimeNotification ��� JobObjectClearEvent �� JobObjectInterferenceInformation � JobObjectClearPeakJobMemoryUsed �� JobObjectMemoryUsageInformation �� JobObjectSharedCommit JobObjectContainerId � JobObjectIoRateControlInformation % JobObjectSiloRootDirectory ��� & JobObjectServerSiloBasicInformation �� ' JobObjectServerSiloUserSharedData ( JobObjectServerSiloInitialize ) JobObjectServerSiloRunningState �� * JobObjectIoAttribution ��� + JobObjectMemoryPartitionInformation �� , JobObjectContainerTelemetryId - JobObjectSiloSystemRoot �� . JobObjectEnergyTrackingState � / JobObjectThreadImpersonationInformation �� JobObjectReserved1Information JobObjectReserved2Information JobObjectReserved3Information JobObjectReserved4Information JobObjectReserved5Information JobObjectReserved6Information JobObjectReserved7Information JobObjectReserved8Information JobObjectReserved9Information JobObjectReserved10Information ��� JobObjectReserved11Information ��� JobObjectReserved12Information ��� JobObjectReserved13Information ��� JobObjectReserved14Information ��� JobObjectNetRateControlInformation ��� ! JobObjectNotificationLimitInformation2 ��� " JobObjectLimitViolationInformation2 �� # JobObjectCreateSilo �� $ JobObjectSiloBasicInformation % JobObjectReserved15Information ��� & JobObjectReserved16Information ��� ' JobObjectReserved17Information ��� ( JobObjectReserved18Information ��� ) JobObjectReserved19Information ��� * JobObjectReserved20Information ��� + JobObjectReserved21Information ��� , JobObjectReserved22Information ��� - JobObjectReserved23Information ��� . JobObjectReserved24Information ��� / JobObjectReserved25Information ��� 0 MaxJobObjectInfoClass > I t � _JOBOBJECTINFOCLASS .?AW4_JOBOBJECTINFOCLASS@@ �. onecore\internal\sdk\inc\ntpsapi_x.h ���� SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN �� SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS �� SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE ���N t � SE_WS_APPX_SIGNATURE_ORIGIN .?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@ �* onecore\internal\sdk\inc\ntseapi.h � JOB_OBJECT_IO_RATE_CONTROL_ENABLE JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS ���Z t � JOB_OBJECT_IO_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@ ��� PsWakeReasonUser � PsWakeReasonExecutionRequired PsWakeReasonKernel ��� PsWakeReasonInstrumentation �� PsWakeReasonPreserveProcess �� PsWakeReasonActivityReference PsWakeReasonWorkOnBehalf � PsMaxWakeReasons �6 t � _PS_WAKE_REASON .?AW4_PS_WAKE_REASON@@ � TP_CALLBACK_PRIORITY_HIGH TP_CALLBACK_PRIORITY_NORMAL �� TP_CALLBACK_PRIORITY_LOW � TP_CALLBACK_PRIORITY_INVALID � TP_CALLBACK_PRIORITY_COUNT ���B t � _TP_CALLBACK_PRIORITY .?AW4_TP_CALLBACK_PRIORITY@@ �6 FeatureConfigurationPriorityImageDefault � FeatureConfigurationPriorityService �� FeatureConfigurationPriorityUser �
FeatureConfigurationPriorityUserPolicy ��� FeatureConfigurationPriorityTest � FeatureConfigurationPriorityImageOverride FeatureConfigurationPriorityMax ��^ t � _RTL_FEATURE_CONFIGURATION_PRIORITY .?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@ �: onecore\internal\sdk\inc\rtlfeatureconfigtypes.h ���
SystemProcessClassificationNormal SystemProcessClassificationSystem SystemProcessClassificationSecureSystem �� SystemProcessClassificationMemCompression SystemProcessClassificationRegistry �� SystemProcessClassificationMaximum ���V t � _SYSTEM_PROCESS_CLASSIFICATION .?AW4_SYSTEM_PROCESS_CLASSIFICATION@@ ���* onecore\internal\sdk\inc\ntexapi.h �~ PowerUserPresent � PowerUserNotPresent �� PowerUserInactive PowerUserMaximum � PowerUserInvalid �F t � _USER_ACTIVITY_PRESENCE .?AW4_USER_ACTIVITY_PRESENCE@@ �* onecore\external\ddk\inc\ntpoapi.h � MemoryNotContiguous �� MemoryAlignedAndContiguous ��� MemoryNotResident MemoryNotEligibleToMakeContiguous MemoryContiguityStateMax �f t � _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE .?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@ ���* onecore\internal\sdk\inc\ntmmapi.h �# SystemBasicInformation ��� SystemProcessorInformation ��� SystemPerformanceInformation � SystemTimeOfDayInformation ��� SystemPathInformation SystemProcessInformation � SystemCallCountInformation ��� SystemDeviceInformation �� SystemProcessorPerformanceInformation SystemFlagsInformation ���
SystemCallTimeInformation SystemModuleInformation �� SystemLocksInformation ���
SystemStackTraceInformation �� SystemPagedPoolInformation ��� SystemNonPagedPoolInformation SystemHandleInformation �� SystemObjectInformation �� SystemPageFileInformation SystemVdmInstemulInformation � SystemVdmBopInformation �� SystemFileCacheInformation ��� SystemPoolTagInformation � SystemInterruptInformation ��� SystemDpcBehaviorInformation � SystemFullMemoryInformation �� SystemLoadGdiDriverInformation ��� SystemUnloadGdiDriverInformation � SystemTimeAdjustmentInformation �� SystemSummaryMemoryInformation ��� SystemMirrorMemoryInformation SystemPerformanceTraceInformation SystemObsolete0 �� ! SystemExceptionInformation ��� " SystemCrashDumpStateInformation �� # SystemKernelDebuggerInformation �� $ SystemContextSwitchInformation ��� % SystemRegistryQuotaInformation ��� & SystemExtendServiceTableInformation �� ' SystemPrioritySeperation � ( SystemVerifierAddDriverInformation ��� ) SystemVerifierRemoveDriverInformation * SystemProcessorIdleInformation ��� + SystemLegacyDriverInformation , SystemCurrentTimeZoneInformation � - SystemLookasideInformation ��� . SystemTimeSlipNotification ��� / SystemSessionCreate �� 0 SystemSessionDetach �� 1 SystemSessionInformation � 2 SystemRangeStartInformation �� 3 SystemVerifierInformation 4 SystemVerifierThunkExtend 5 SystemSessionProcessInformation �� 6 SystemLoadGdiDriverInSystemSpace � 7 SystemNumaProcessorMap ��� 8 SystemPrefetcherInformation �� 9 SystemExtendedProcessInformation � : SystemRecommendedSharedDataAlignment � ; SystemComPlusPackage � < SystemNumaAvailableMemory = SystemProcessorPowerInformation �� > SystemEmulationBasicInformation �� ? SystemEmulationProcessorInformation �� @ SystemExtendedHandleInformation �� A SystemLostDelayedWriteInformation B SystemBigPoolInformation � C SystemSessionPoolTagInformation �� D SystemSessionMappedViewInformation ��� E SystemHotpatchInformation F SystemObjectSecurityMode � G SystemWatchdogTimerHandler ��� H SystemWatchdogTimerInformation ��� I SystemLogicalProcessorInformation J SystemWow64SharedInformationObsolete � K SystemRegisterFirmwareTableInformationHandler L SystemFirmwareTableInformation ��� M SystemModuleInformationEx N SystemVerifierTriageInformation �� O SystemSuperfetchInformation �� P SystemMemoryListInformation �� Q SystemFileCacheInformationEx � R SystemThreadPriorityClientIdInformation �� S SystemProcessorIdleCycleTimeInformation �� T SystemVerifierCancellationInformation U SystemProcessorPowerInformationEx V SystemRefTraceInformation W SystemSpecialPoolInformation � X SystemProcessIdInformation ��� Y SystemErrorPortInformation ��� Z SystemBootEnvironmentInformation � [ SystemHypervisorInformation �� \ SystemVerifierInformationEx �� ] SystemTimeZoneInformation ^ SystemImageFileExecutionOptionsInformation ��� _ SystemCoverageInformation ` SystemPrefetchPatchInformation ��� a SystemVerifierFaultsInformation �� b SystemSystemPartitionInformation � c SystemSystemDiskInformation �� d SystemProcessorPerformanceDistribution ��� e SystemNumaProximityNodeInformation ��� f SystemDynamicTimeZoneInformation � g SystemCodeIntegrityInformation ��� h SystemProcessorMicrocodeUpdateInformation i SystemProcessorBrandString ��� j SystemVirtualAddressInformation �� k SystemLogicalProcessorAndGroupInformation l SystemProcessorCycleTimeInformation �� m SystemStoreInformation ��� n SystemRegistryAppendString ��� o SystemAitSamplingValue ��� p SystemVhdBootInformation � q SystemCpuQuotaInformation r SystemNativeBasicInformation � s SystemErrorPortTimeouts �� t SystemLowPriorityIoInformation ��� u SystemBootEntropyInformation � v SystemVerifierCountersInformation w SystemPagedPoolInformationEx � x SystemSystemPtesInformationEx y SystemNodeDistanceInformation z SystemAcpiAuditInformation ��� { SystemBasicPerformanceInformation | SystemQueryPerformanceCounterInformation � } SystemSessionBigPoolInformation �� ~ SystemBootGraphicsInformation SystemScrubPhysicalMemoryInformation � � SystemBadPageInformation � � SystemProcessorProfileControlArea � SystemCombinePhysicalMemoryInformation ��� � SystemEntropyInterruptTimingInformation �� � SystemConsoleInformation � � SystemPlatformBinaryInformation �� � SystemPolicyInformation �� � SystemHypervisorProcessorCountInformation � SystemDeviceDataInformation �� � SystemDeviceDataEnumerationInformation ��� � SystemMemoryTopologyInformation �� � SystemMemoryChannelInformation ��� � SystemBootLogoInformation � SystemProcessorPerformanceInformationEx �� � SystemCriticalProcessErrorLogInformation � � SystemSecureBootPolicyInformation � SystemPageFileInformationEx �� � SystemSecureBootInformation �� � SystemEntropyInterruptTimingRawInformation ��� � SystemPortableWorkspaceEfiLauncherInformation � SystemFullProcessInformation � � SystemKernelDebuggerInformationEx � SystemBootMetadataInformation � SystemSoftRebootInformation �� � SystemElamCertificateInformation � � SystemOfflineDumpConfigInformation ��� � SystemProcessorFeaturesInformation ��� � SystemRegistryReconciliationInformation �� � SystemEdidInformation � SystemManufacturingInformation ��� � SystemEnergyEstimationConfigInformation �� � SystemHypervisorDetailInformation � SystemProcessorCycleStatsInformation � � SystemVmGenerationCountInformation ��� � SystemTrustedPlatformModuleInformation ��� � SystemKernelDebuggerFlags � SystemCodeIntegrityPolicyInformation � � SystemIsolatedUserModeInformation � SystemHardwareSecurityTestInterfaceResultsInformation � SystemSingleModuleInformation � SystemAllowedCpuSetsInformation �� � SystemVsmProtectionInformation ��� � SystemInterruptCpuSetsInformation � SystemSecureBootPolicyFullInformation � SystemCodeIntegrityPolicyFullInformation � � SystemAffinitizedInterruptProcessorInformation ��� � SystemRootSiloInformation � SystemCpuSetInformation �� � SystemCpuSetTagInformation ��� � SystemWin32WerStartCallout ��� � SystemSecureKernelProfileInformation � � SystemCodeIntegrityPlatformManifestInformation ��� � SystemInterruptSteeringInformation ��� � SystemSupportedProcessorArchitectures � SystemMemoryUsageInformation � � SystemCodeIntegrityCertificateInformation � SystemPhysicalMemoryInformation �� � SystemControlFlowTransition �� � SystemKernelDebuggingAllowed � � SystemActivityModerationExeState � � SystemActivityModerationUserSettings � � SystemCodeIntegrityPoliciesFullInformation ��� � SystemCodeIntegrityUnlockInformation � � SystemIntegrityQuotaInformation �� � SystemFlushInformation ��� � SystemProcessorIdleMaskInformation ��� � SystemSecureDumpEncryptionInformation � SystemWriteConstraintInformation � � SystemKernelVaShadowInformation �� � SystemHypervisorSharedPageInformation � SystemFirmwareBootPerformanceInformation � � SystemCodeIntegrityVerificationInformation ��� � SystemFirmwarePartitionInformation ��� � SystemSpeculationControlInformation �� � SystemDmaGuardPolicyInformation �� � SystemEnclaveLaunchControlInformation � SystemWorkloadAllowedCpuSetsInformation �� � SystemCodeIntegrityUnlockModeInformation � � SystemLeapSecondInformation �� � SystemFlags2Information �� � SystemSecurityModelInformation ��� � SystemCodeIntegritySyntheticCacheInformation � � SystemFeatureConfigurationInformation � SystemFeatureConfigurationSectionInformation � � SystemFeatureUsageSubscriptionInformation � SystemSecureSpeculationControlInformation � SystemSpacesBootInformation �� � SystemFwRamdiskInformation ��� � SystemWheaIpmiHardwareInformation � SystemDifSetRuleClassInformation � � SystemDifClearRuleClassInformation ��� � SystemDifApplyPluginVerificationOnDriver � � SystemDifRemovePluginVerificationOnDriver � SystemShadowStackInformation � � SystemBuildVersionInformation � SystemPoolLimitInformation ��� � SystemCodeIntegrityAddDynamicStore ��� � SystemCodeIntegrityClearDynamicStores � SystemPoolZeroingInformation � � MaxSystemInfoClass ���J � t � _SYSTEM_INFORMATION_CLASS .?AW4_SYSTEM_INFORMATION_CLASS@@ � JOB_OBJECT_NET_RATE_CONTROL_ENABLE ��� JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS ��Z t � JOB_OBJECT_NET_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@ �z KCONTINUE_UNWIND � KCONTINUE_RESUME � KCONTINUE_LONGJUMP ��� KCONTINUE_SET KCONTINUE_LAST ���6 t � _KCONTINUE_TYPE .?AW4_KCONTINUE_TYPE@@ �* onecore\internal\sdk\inc\ntxcapi.h �: VRF_TRIAGE_CONTEXT_NONE �� VRF_TRIAGE_CONTEXT_DEFAULT ��� VRF_TRIAGE_CONTEXT_DEVELOPMENT ��� VRF_TRIAGE_CONTEXT_CERTIFICATION � VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED ��� VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING � NUM_VRF_TRIAGE_CONTEXTS ��> t � _VRF_TRIAGE_CONTEXT .?AW4_VRF_TRIAGE_CONTEXT@@ �* COMIMAGE_FLAGS_ILONLY COMIMAGE_FLAGS_32BITREQUIRED � COMIMAGE_FLAGS_IL_LIBRARY COMIMAGE_FLAGS_STRONGNAMESIGNED �� COMIMAGE_FLAGS_NATIVE_ENTRYPOINT � � COMIMAGE_FLAGS_TRACKDEBUGDATA � COMIMAGE_FLAGS_32BITPREFERRED COR_VERSION_MAJOR_V2 � COR_VERSION_MAJOR COR_VERSION_MINOR COR_DELETED_NAME_LENGTH �� COR_VTABLEGAP_NAME_LENGTH NATIVE_TYPE_MAX_CB ��� � COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE � IMAGE_COR_MIH_METHODRVA �� IMAGE_COR_MIH_EHRVA �� IMAGE_COR_MIH_BASICBLOCK � COR_VTABLE_32BIT � COR_VTABLE_64BIT � COR_VTABLE_FROM_UNMANAGED COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN ��� COR_VTABLE_CALL_MOST_DERIVED � IMAGE_COR_EATJ_THUNK_SIZE MAX_CLASS_NAME ��� MAX_PACKAGE_NAME �R t � ReplacesCorHdrNumericDefines .?AW4ReplacesCorHdrNumericDefines@@ ���� SystemFeatureConfigurationSectionTypeBoot SystemFeatureConfigurationSectionTypeRuntime � SystemFeatureConfigurationSectionTypeUsageTriggers ��� SystemFeatureConfigurationSectionTypeCount ���n t � _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE .?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@ ��� LockQueueUnusedSpare0 LockQueueUnusedSpare1 LockQueueUnusedSpare2 LockQueueUnusedSpare3 LockQueueVacbLock LockQueueMasterLock �� LockQueueNonPagedPoolLock LockQueueIoCancelLock LockQueueUnusedSpare8 LockQueueIoVpbLock ���
LockQueueIoDatabaseLock �� LockQueueIoCompletionLock LockQueueNtfsStructLock ��
LockQueueAfdWorkQueueLock LockQueueBcbLock � LockQueueUnusedSpare15 ��� LockQueueUnusedSpare16 ��� LockQueueMaximumLock �J t � _KSPIN_LOCK_QUEUE_NUMBER .?AW4_KSPIN_LOCK_QUEUE_NUMBER@@ ���
�
�
#
�
�
F
�
�
y
�
�
���
���
���
���� -FC -MT -c -Zc:wchar_t- -Zl -Zp8 -Gy -Gm- -W4 -Gz -hotpatch -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Oy- -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427
� f � -arch:IA32 -Gw -wd4316 -wd4973 -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X � � � � � � ��YQ>6
3���{ �j�n�M���'��Aі�f�2������Z2������Z����/B ��Ib
��-��ꅫ�ց�5����sz�K�D�\�} =5s2%�\EG`f�LCc�Bh��fX @comp.idk�� @feat.00� ��� @vol.md �� .debug$S 3 e .rdata �ہ e .rdata �w � e .rdata h�Q� e < .rdata kE�� e U o _main _isspace .rdata kE�� e � � .rdata ��R e � � 5 X r � .text$mn |�k� e .debug$S , e .text$mn
9 K�t� e .debug$S � c
e � �
$LN3 �
� �
.debug$S 4 e .debug$S
@ e .debug$S 8 e .debug$T �h e .chks64 � e ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ ??_C@_13CGOKJPIL@?$AA?1@ _RtlNtPathSeperatorString __imp__NtTerminateProcess@8 _RtlAlternateDosPathSeperatorString __imp__RtlUnicodeStringToAnsiString@12 _RtlDosPathSeperatorsString _NtRecordEnvironmentPointers@8 _NtStartupCountEnvironmentStrings@4 __imp__RtlNormalizeProcessParams@4 __imp__RtlAllocateHeap@12 __imp__RtlFreeAnsiString@4 ___security_init_cookie _NtProcessStartup@4 _NtProcessStartup_AfterSecurityCookieInitialized@4 $SkipInit$71 $CountEnvironmentStrings$70
/113 1606895307 100666 34099 `
L �F�_;� + .debug$S �. � @ B.rdata X1 @0@.rdata \1 @0@.rdata b1 @0@.rdata f1 n1 @0@.rdata x1 �1 @0@.rdata �1 �1 @0@.text$mn ; �1 `.debug$S � �1 �3
@B.text$mn , !4 `.debug$S � M4 �5 @B.debug$S 4 W6 �6 @B.debug$S @ �6 �6 @B.debug$S 8 �6 +7 @B.debug$T �F ?7 @ B.chks64 � ~
.drectve 7�
� { = d:\os\obj\x86fre\minkernel\urtl\objfre\i386\helper.obj : < � k k
Microsoft (R) Optimizing Compiler � � & JobObjectReserved2Information 2 SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED & JobObjectReserved9Information � � ! JobObjectWakeInformation ( JobObjectClearPeakJobMemoryUsed ' ) JobObjectReserved19Information 5 JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME * ' JobObjectServerSiloUserSharedData ' ( JobObjectReserved18Information PsMaxWakeReasons ' * JobObjectReserved20Information ' % JobObjectReserved15Information & , JobObjectContainerTelemetryId % TP_CALLBACK_PRIORITY_INVALID # JobObjectFreezeInformation ' . JobObjectReserved24Information 2 FeatureConfigurationPriorityImageOverride , SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS ' JobObjectReserved12Information ( ) JobObjectServerSiloRunningState - SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE JobObjectSharedCommit & JobObjectReserved3Information & ( JobObjectServerSiloInitialize + SystemProcessClassificationMaximum # % JobObjectSiloRootDirectory ' ' JobObjectReserved17Information * JobObjectIoAttribution ' JobObjectReserved11Information & JobObjectReserved4Information PowerUserMaximum ! MemoryContiguityStateMax � * ( JobObjectMemoryUsageInformation � * JobObjectIoRateControlInformation & JobObjectReserved8Information ' , JobObjectReserved22Information $ TP_CALLBACK_PRIORITY_NORMAL * JOB_OBJECT_IO_RATE_CONTROL_ENABLE ' - JobObjectReserved23Information ' JobObjectReserved13Information % " � SystemPoolZeroingInformation & JobObjectReserved1Information & JobObjectReserved6Information 0 $ JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS 9 JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL JobObjectClearEvent & JobObjectReserved5Information & JobObjectReserved7Information 2 $ JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH ) JobObjectInterferenceInformation , & JobObjectServerSiloBasicInformation JobObjectContainerId 0 / JobObjectThreadImpersonationInformation - JobObjectSiloSystemRoot ' JobObjectCycleTimeNotification ' JobObjectReserved10Information + $ JOB_OBJECT_NET_RATE_CONTROL_ENABLE , + JobObjectMemoryPartitionInformation A JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP & KCONTINUE_UNWIND # ) VRF_TRIAGE_CONTEXT_DEFAULT / JobObjectExtendedAccountingInformation , SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN % . JobObjectEnergyTrackingState ' + JobObjectReserved21Information + COR_VERSION_MAJOR_V2 ' / JobObjectReserved25Information ' & JobObjectReserved16Information ' JobObjectReserved14Information 3 - SystemFeatureConfigurationSectionTypeCount ' JobObjectBackgroundInformation / LockQueueUnusedSpare16 0 JobObjectTimerVirtualizationInformation - $ JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG / JobObjectSchedulingRankBiasInformation / SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE # PULONG64
PPVOID _TP_CALLBACK_PRIORITY _JOBOBJECTINFOCLASS _UNICODE_STRING _PS_WAKE_REASON " _SYSTEM_INFORMATION_CLASS ( $ JOB_OBJECT_NET_RATE_CONTROL_FLAGS LONG_PTR u PUINT_PTR " ULONG_PTR p PCHAR ! wchar_t " SE_WS_APPX_SIGNATURE_ORIGIN UNICODE_STRING ' JOB_OBJECT_IO_RATE_CONTROL_FLAGS _USER_ACTIVITY_PRESENCE PLONG PBOOLEAN & _KCONTINUE_TYPE LONG # ULONG64
" SIZE_T # + ReplacesCorHdrNumericDefines q PWCH
PSHORT / _KSPIN_LOCK_QUEUE_NUMBER ) _VRF_TRIAGE_CONTEXT " TP_VERSION u PUINT32 p CCHAR * _RTL_FEATURE_CONFIGURATION_PRIORITY TP_CALLBACK_PRIORITY " LOGICAL 1 - _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE
t INT UCHAR " LCID BOOLEAN
! USHORT PVOID q WCHAR PSE_SIGNING_LEVEL % _SYSTEM_PROCESS_CLASSIFICATION
LONG64 " ULONG
q PWCHAR q PWSTR NTSTATUS
HANDLE # ULONGLONG
" PULONG
u size_t LONGLONG - _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE SHORT PLONG64 p CHAR � ` `���[4dx���By%�Г��� z�&K�-�pW " ���{�$��N�� ��~p��o7��T�1*���. F F?�Z#��.Wi�/0��=�� �9*W�-� l m��] ~_�B �3�쌰��l]��(��Q��@� � .6oA�}4�ؐ,��ǣ�
+h��4�Q�X3� � ܇h���6
���d3�����:iW�jG^��t� � m����Wc�L����z0� ���ٶ�$< � n����*��
Ռ�T�~�}����� ��� �G�/�m��hB-����-q�b}��Y�~Y 9 T�@�
2��U��p�|��� ��k����[p*& b ��z!��<y5�1�aF�=)�;ђ�)Y bčW � C���4�h��y��t:;K�͑\�Df��1 � � ����̫��2r�WQ��K��TI�Up��/�z � � F9�6K�v�/�|S��]t�RF�W2��I � PH<��R�N�-Ulֵ��S�O�7g�n�䯲*�� 3E �� �r`QQ���e��e����`z� i @ E~/EX"�-�p-���i����`��.�z#�0� e H�}ӰWU����f1O_�d ��Hf�
��N�nZ � p
y��f�9����|= 6���4 ��n`�RM� � X�Y
��m�kּg�L��~�g���x�5�
� 焙v GI��� ����P�
��W� )\��u��ݡ�_6 mV����*���[�1�l&�! D ��%|�#o5a�0i�^�{�ơz[ l���HR j )G�xS�l�F,�yV���6�}�����ָ@��j � n*�\T�uM�fk �<�t���L�ee�#a�� � ���O.@=4L�C�ي�m�;_�iM %q� � �����y�Q+���{"WÌ�R~̟���H���? � �4y4[G�c �c��e��U�W,Qᨵ7�� �t�T�`���Niu�$�I8FQ@e�}&f�S��E�� 6 �D�rlBsm�DE�cQ����}W� �w��±� ` N�Q� 4O&K�� +l;x�2�%��ݮ�pZ,� � ��������0TcIC4�U��m��sF'<�Z � �4Y����|��B�N��m#��*�sE��Bp�� � ����$�3�3EJ�I �h@�oa`�� � �� ��/�5h��d�����,�]0�f& (� �kE9OӨ��.I F��SY9G&��.��?堳( 4 �D&<�@)�Z?��as� z�����A��? p� e S���M�"��S��U}h�g�c�q�c5w�k���8 � @ȍl2��X�1��}���e��C��>�ȢF)� � �A+��z'����k��mD�XL���t � B-<y�� ��9P/�M�#��_��<�� φ6R^ � �*�����ou��M+K�Ŋ�;��qh� � �ý3NP� ��eb�nM `I����<�F G �:B{m�n=�g���\c*�ӏ���Z" ��Y i ��3)�J�$��{�.
w ~�/�l���M� � I�(��+�S�u��]?�z�9NP�3Q�MJ�B � j�v��b~�ۥ�)0M�/�띡e��� \� @Z � ����ɵ\|5 ��Z��b���Q 3 ���kb���B ! ����FAP�icû����;�|" B7�㙨^ �9 O ���� k|)�E@���B�#���b�V�<�2Ǡ3 r 3*�ָ䊀��DJ՝�� ��q/�=M�f�t� � � �S:c٭ؙo߮ ���qO>�)o��Z� � �-h/� S��~����
a!�1k��j � ��#YV^b%�}��/'p�O�Gʈ?��z��� ��V��� Ť��ڃ "��?�f�R�s�[Y�%=� / D�n��q���9��a�_�G���H�E���-W��xZ R �$�����+`�.?�ʿA��=Gݗ��'Lm y @�J���ۊ�މ
��H��s��P��˓YH� � �>� j�t�&~8^�B��J2�/Ru�~ � &��8�i_u& ��>�-Z%�f�>R69ϓ5�%� � *�7�C
TQ�� ?R����֪¸��FHc�� -�?bF��,U1�.Er;H�Ԡ`p I��4M ; } ��da�nGۛ'�*���M���G�]����" a ��܆�f؇��"xU. @����;2}X��}H � G�*㥬2����M���}�b�R�̫�)�� � *s�4��bc�v�7���h\Sř�_s� �4�h� � y3�
6$��g涧i0����
�E�g$E��$ � �J��W6���,�)J dɫ7�%eڭ��
/��J��5\�Z��_g4�4�%]�L�� ��3h� ?
�p[F����ll�<��A�=��l}�K���R� b
k�3 �G�� ��F2#�)� ER�O|��v\;� �
h҄� �3(/�e��f��`�z&�e$P��MD� �
f߹��R�|��ڕ����G/S�6�<��� �
o�&���-�},��'�w��_�BIS;�§g
�7; �
W|A
w�O�?�pU]~-�2�!�\O����5� �A�T:�U 3�QZ� j-r76y�c~���� = ���^br�ee��� ���Nǐ����5�j�Ja _ ��*
Y,�}��Ƴ�������X���� � ��'��,��@H4sS�k�!Ȫ:ݬ���"fE) � �0:s�0pV�eҐ����lj� �6�Ȗ0 � � ƨ��T ��� Ȓ� ���)n���y��aP`I � ��a�;.+�!6�%ri� E�Q�p�u�G�g�.� ����8�����L�v���X m*����I/i�� > �U��Q�u"��w�!� �fB"���`ru^���9 h �
���mcJAt�qe�el��]�;�L�� � ��� [r�"��衷� �R ��ҹ�� �� � ����w�^��ȯ�
?���;��f���B(H� � �[��=�
Tǜ�
]����>d��Wƫ���
�۠�Җ �{���� ���n"]�,$J�� 4
�[�-%`4�����o2�>�'�q.qg�Gn��) X
5�y�.b�X�W�?�dT�bՃ綕<$QD1��q z
oL>
�P� ��VrɑE.�(�d�jФW��� � ! onecore\external\ddk\inc\ntnls.h onecore\internal\sdk\inc\ntconfig.h onecore\external\shared\inc\guiddef.h onecore\external\sdk\inc\ntarm64.h onecore\external\sdk\inc\ntarm64_x.h onecore\external\ddk\inc\ntimage.h onecore\external\shared\inc\ntstatus.h minkernel\urtl\helper.c onecore\internal\sdk\inc\ntwow64.h onecore\internal\sdk\inc\minwin\umstls.h onecore\external\shared\inc\pshpack4.h onecore\internal\sdk\inc\ntkeapi.h onecore\internal\sdk\inc\ntwow64_x.h onecore\external\shared\inc\pshpack2.h onecore\internal\sdk\inc\ntkeapi_x.h onecore\internal\sdk\inc\ntpsapi.h onecore\internal\sdk\inc\ntpsapi_x.h onecore\external\sdk\inc\minwin\rtlsupportapi.h onecore\external\shared\inc\minwin\apiset.h onecore\external\shared\inc\minwin\apisetcconv.h onecore\external\sdk\inc\crt\string.h onecore\internal\sdk\inc\minwin\xstateapi.h onecore\internal\sdk\inc\rtlhashdef.h onecore\internal\sdk\inc\minwin\ntpnpapi.h onecore\external\shared\inc\cfg.h shared\inc\winapifamily.h onecore\internal\sdk\inc\ntrtlpath.h onecore\internal\sdk\inc\nxi386.h shared\inc\winpackagefamily.h onecore\external\shared\inc\kernelspecs.h onecore\internal\sdk\inc\warning.h onecore\external\shared\inc\basetsd.h onecore\internal\sdk\inc\suppress_x.h minkernel\urtl\startup.h onecore\external\sdk\inc\minwin\minappmodel.h onecore\internal\sdk\inc\nt.h onecore\internal\sdk\inc\rtlfeatureconfigtypes.h onecore\external\sdk\inc\crt\excpt.h onecore\internal\sdk\inc\ntrtl.h onecore\external\sdk\inc\crt\crtdefs.h onecore\internal\sdk\inc\ntrtl_x.h onecore\external\shared\inc\specstrings.h onecore\external\shared\inc\ip2string.h onecore\external\shared\inc\sal.h onecore\external\shared\inc\concurrencysal.h onecore\external\shared\inc\specstrings_strict.h onecore\external\shared\inc\specstrings_undef.h onecore\external\shared\inc\driverspecs.h onecore\external\shared\inc\sdv_driverspecs.h onecore\internal\sdk\inc\ntexapi.h onecore\external\sdk\inc\crt\vadefs.h onecore\internal\sdk\inc\ntexapi_x.h onecore\internal\sdk\inc\ntobapi.h onecore\internal\sdk\inc\ntobapi_x.h onecore\internal\sdk\inc\minwin\ntioapi.h onecore\internal\sdk\inc\nttpapi.h onecore\external\shared\inc\devioctl.h onecore\internal\sdk\inc\minwin\ntioapi_x.h onecore\internal\sdk\inc\ntiolog.h onecore\external\sdk\inc\ntassert.h onecore\internal\sdk\inc\minwin\ntregapi.h onecore\internal\sdk\inc\affinity.h onecore\internal\sdk\inc\ntregapi_x.h onecore\internal\sdk\inc\volatile_accessors.h onecore\external\shared\inc\pshpack8.h onecore\internal\sdk\inc\ntldr.h onecore\internal\sdk\inc\nturtl.h onecore\external\ddk\inc\ntpoapi.h onecore\internal\sdk\inc\ntmmapi.h onecore\internal\sdk\inc\nttmapi.h onecore\internal\sdk\inc\ntmmapi_x.h onecore\external\shared\inc\ktmtypes.h onecore\internal\sdk\inc\ntlpcapi.h onecore\internal\sdk\inc\rtlrbtree.h onecore\external\shared\inc\dpfilter.h onecore\external\ddk\inc\mce.h onecore\internal\sdk\inc\pebteb.h onecore\external\shared\inc\sdkddkver.h onecore\external\shared\inc\pshpack1.h onecore\internal\sdk\inc\ntseapi.h onecore\internal\sdk\inc\ntseapi_x.h onecore\internal\sdk\inc\ntxcapi.h onecore\internal\sdk\inc\ntxcapi_x.h onecore\internal\sdk\inc\minwin\ntdef_p.h onecore\external\shared\inc\poppack.h onecore\external\sdk\inc\crt\stdarg.h onecore\external\shared\inc\minwin\ntdef.h onecore\external\sdk\inc\crt\ctype.h onecore\internal\sdk\inc\ntrtlstringandbuffer.h onecore\internal\sdk\inc\ntelfapi.h onecore\internal\sdk\inc\nti386.h onecore\internal\sdk\inc\nti386_x.h $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $23 $T0 4 - ^ = � L7 \ \ / /
��U��MV3���t"f91t �U �
�������f��u�f91u���U �2^]� � D ; �
. �
� A G ; 7 �NtRecordEnvironmentPointers >q Environment A 3 E D
> Envp A $ E D �" q Environment Envp O � X ; L 7 � 8 � 9 � ; � = �* 9 �4 C �7 E � x |
� �
� �
� �
p t
��U��UV3��ƅ�t���@�
��f��u�f92u�^]� � D , �
�
� � F G , ( �NtStartupCountEnvironmentStrings >q Environment A $ E D >" Count A
�" q Environment O� X , L ! � & � ' � ( � ) �" ' �' / �( 0 � x |
� �
� �
� �
D H
� ' %
RtlNtPathSeperatorString
� 1 /
RtlAlternateDosPathSeperatorString
� ) '
RtlDosPathSeperatorsString
� q & NtRecordEnvironmentPointers
q " . NtStartupCountEnvironmentStrings ��� JobObjectBasicAccountingInformation �� JobObjectBasicLimitInformation ��� JobObjectBasicProcessIdList �� JobObjectBasicUIRestrictions � JobObjectSecurityLimitInformation JobObjectEndOfJobTimeInformation � JobObjectAssociateCompletionPortInformation �� JobObjectBasicAndIoAccountingInformation � JobObjectExtendedLimitInformation
JobObjectJobSetInformation ��� JobObjectGroupInformation JobObjectNotificationLimitInformation
JobObjectLimitViolationInformation ��� JobObjectGroupInformationEx �� JobObjectCpuRateControlInformation ��� JobObjectCompletionFilter JobObjectCompletionCounter ��� JobObjectFreezeInformation ��� JobObjectExtendedAccountingInformation ��� JobObjectWakeInformation � JobObjectBackgroundInformation ��� JobObjectSchedulingRankBiasInformation ��� JobObjectTimerVirtualizationInformation �� JobObjectCycleTimeNotification ��� JobObjectClearEvent �� JobObjectInterferenceInformation � JobObjectClearPeakJobMemoryUsed �� JobObjectMemoryUsageInformation �� JobObjectSharedCommit JobObjectContainerId � JobObjectIoRateControlInformation % JobObjectSiloRootDirectory ��� & JobObjectServerSiloBasicInformation �� ' JobObjectServerSiloUserSharedData ( JobObjectServerSiloInitialize ) JobObjectServerSiloRunningState �� * JobObjectIoAttribution ��� + JobObjectMemoryPartitionInformation �� , JobObjectContainerTelemetryId - JobObjectSiloSystemRoot �� . JobObjectEnergyTrackingState � / JobObjectThreadImpersonationInformation �� JobObjectReserved1Information JobObjectReserved2Information JobObjectReserved3Information JobObjectReserved4Information JobObjectReserved5Information JobObjectReserved6Information JobObjectReserved7Information JobObjectReserved8Information JobObjectReserved9Information JobObjectReserved10Information ��� JobObjectReserved11Information ��� JobObjectReserved12Information ��� JobObjectReserved13Information ��� JobObjectReserved14Information ��� JobObjectNetRateControlInformation ��� ! JobObjectNotificationLimitInformation2 ��� " JobObjectLimitViolationInformation2 �� # JobObjectCreateSilo �� $ JobObjectSiloBasicInformation % JobObjectReserved15Information ��� & JobObjectReserved16Information ��� ' JobObjectReserved17Information ��� ( JobObjectReserved18Information ��� ) JobObjectReserved19Information ��� * JobObjectReserved20Information ��� + JobObjectReserved21Information ��� , JobObjectReserved22Information ��� - JobObjectReserved23Information ��� . JobObjectReserved24Information ��� / JobObjectReserved25Information ��� 0 MaxJobObjectInfoClass > I t _JOBOBJECTINFOCLASS .?AW4_JOBOBJECTINFOCLASS@@ �. onecore\internal\sdk\inc\ntpsapi_x.h ���� SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN �� SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE � SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS �� SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE ���N t
SE_WS_APPX_SIGNATURE_ORIGIN .?AW4SE_WS_APPX_SIGNATURE_ORIGIN@@ �* onecore\internal\sdk\inc\ntseapi.h �B
! Length ���
! MaximumLength
q Buffer ���:
_UNICODE_STRING .?AU_UNICODE_STRING@@ JOB_OBJECT_IO_RATE_CONTROL_ENABLE JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL � JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP � JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS ���Z t JOB_OBJECT_IO_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_IO_RATE_CONTROL_FLAGS@@ ��� PsWakeReasonUser � PsWakeReasonExecutionRequired PsWakeReasonKernel ��� PsWakeReasonInstrumentation �� PsWakeReasonPreserveProcess �� PsWakeReasonActivityReference PsWakeReasonWorkOnBehalf � PsMaxWakeReasons �6 t _PS_WAKE_REASON .?AW4_PS_WAKE_REASON@@ � TP_CALLBACK_PRIORITY_HIGH TP_CALLBACK_PRIORITY_NORMAL �� TP_CALLBACK_PRIORITY_LOW � TP_CALLBACK_PRIORITY_INVALID � TP_CALLBACK_PRIORITY_COUNT ���B t _TP_CALLBACK_PRIORITY .?AW4_TP_CALLBACK_PRIORITY@@ �6 FeatureConfigurationPriorityImageDefault � FeatureConfigurationPriorityService �� FeatureConfigurationPriorityUser �
FeatureConfigurationPriorityUserPolicy ��� FeatureConfigurationPriorityTest � FeatureConfigurationPriorityImageOverride FeatureConfigurationPriorityMax ��^ t _RTL_FEATURE_CONFIGURATION_PRIORITY .?AW4_RTL_FEATURE_CONFIGURATION_PRIORITY@@ �: onecore\internal\sdk\inc\rtlfeatureconfigtypes.h ���
SystemProcessClassificationNormal SystemProcessClassificationSystem SystemProcessClassificationSecureSystem �� SystemProcessClassificationMemCompression SystemProcessClassificationRegistry �� SystemProcessClassificationMaximum ���V t _SYSTEM_PROCESS_CLASSIFICATION .?AW4_SYSTEM_PROCESS_CLASSIFICATION@@ ���* onecore\internal\sdk\inc\ntexapi.h �~ PowerUserPresent � PowerUserNotPresent �� PowerUserInactive PowerUserMaximum � PowerUserInvalid �F t _USER_ACTIVITY_PRESENCE .?AW4_USER_ACTIVITY_PRESENCE@@ �* onecore\external\ddk\inc\ntpoapi.h � MemoryNotContiguous �� MemoryAlignedAndContiguous ��� MemoryNotResident MemoryNotEligibleToMakeContiguous MemoryContiguityStateMax �f t _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE .?AW4_MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE@@ ���* onecore\internal\sdk\inc\ntmmapi.h �# SystemBasicInformation ��� SystemProcessorInformation ��� SystemPerformanceInformation � SystemTimeOfDayInformation ��� SystemPathInformation SystemProcessInformation � SystemCallCountInformation ��� SystemDeviceInformation �� SystemProcessorPerformanceInformation SystemFlagsInformation ���
SystemCallTimeInformation SystemModuleInformation �� SystemLocksInformation ���
SystemStackTraceInformation �� SystemPagedPoolInformation ��� SystemNonPagedPoolInformation SystemHandleInformation �� SystemObjectInformation �� SystemPageFileInformation SystemVdmInstemulInformation � SystemVdmBopInformation �� SystemFileCacheInformation ��� SystemPoolTagInformation � SystemInterruptInformation ��� SystemDpcBehaviorInformation � SystemFullMemoryInformation �� SystemLoadGdiDriverInformation ��� SystemUnloadGdiDriverInformation � SystemTimeAdjustmentInformation �� SystemSummaryMemoryInformation ��� SystemMirrorMemoryInformation SystemPerformanceTraceInformation SystemObsolete0 �� ! SystemExceptionInformation ��� " SystemCrashDumpStateInformation �� # SystemKernelDebuggerInformation �� $ SystemContextSwitchInformation ��� % SystemRegistryQuotaInformation ��� & SystemExtendServiceTableInformation �� ' SystemPrioritySeperation � ( SystemVerifierAddDriverInformation ��� ) SystemVerifierRemoveDriverInformation * SystemProcessorIdleInformation ��� + SystemLegacyDriverInformation , SystemCurrentTimeZoneInformation � - SystemLookasideInformation ��� . SystemTimeSlipNotification ��� / SystemSessionCreate �� 0 SystemSessionDetach �� 1 SystemSessionInformation � 2 SystemRangeStartInformation �� 3 SystemVerifierInformation 4 SystemVerifierThunkExtend 5 SystemSessionProcessInformation �� 6 SystemLoadGdiDriverInSystemSpace � 7 SystemNumaProcessorMap ��� 8 SystemPrefetcherInformation �� 9 SystemExtendedProcessInformation � : SystemRecommendedSharedDataAlignment � ; SystemComPlusPackage � < SystemNumaAvailableMemory = SystemProcessorPowerInformation �� > SystemEmulationBasicInformation �� ? SystemEmulationProcessorInformation �� @ SystemExtendedHandleInformation �� A SystemLostDelayedWriteInformation B SystemBigPoolInformation � C SystemSessionPoolTagInformation �� D SystemSessionMappedViewInformation ��� E SystemHotpatchInformation F SystemObjectSecurityMode � G SystemWatchdogTimerHandler ��� H SystemWatchdogTimerInformation ��� I SystemLogicalProcessorInformation J SystemWow64SharedInformationObsolete � K SystemRegisterFirmwareTableInformationHandler L SystemFirmwareTableInformation ��� M SystemModuleInformationEx N SystemVerifierTriageInformation �� O SystemSuperfetchInformation �� P SystemMemoryListInformation �� Q SystemFileCacheInformationEx � R SystemThreadPriorityClientIdInformation �� S SystemProcessorIdleCycleTimeInformation �� T SystemVerifierCancellationInformation U SystemProcessorPowerInformationEx V SystemRefTraceInformation W SystemSpecialPoolInformation � X SystemProcessIdInformation ��� Y SystemErrorPortInformation ��� Z SystemBootEnvironmentInformation � [ SystemHypervisorInformation �� \ SystemVerifierInformationEx �� ] SystemTimeZoneInformation ^ SystemImageFileExecutionOptionsInformation ��� _ SystemCoverageInformation ` SystemPrefetchPatchInformation ��� a SystemVerifierFaultsInformation �� b SystemSystemPartitionInformation � c SystemSystemDiskInformation �� d SystemProcessorPerformanceDistribution ��� e SystemNumaProximityNodeInformation ��� f SystemDynamicTimeZoneInformation � g SystemCodeIntegrityInformation ��� h SystemProcessorMicrocodeUpdateInformation i SystemProcessorBrandString ��� j SystemVirtualAddressInformation �� k SystemLogicalProcessorAndGroupInformation l SystemProcessorCycleTimeInformation �� m SystemStoreInformation ��� n SystemRegistryAppendString ��� o SystemAitSamplingValue ��� p SystemVhdBootInformation � q SystemCpuQuotaInformation r SystemNativeBasicInformation � s SystemErrorPortTimeouts �� t SystemLowPriorityIoInformation ��� u SystemBootEntropyInformation � v SystemVerifierCountersInformation w SystemPagedPoolInformationEx � x SystemSystemPtesInformationEx y SystemNodeDistanceInformation z SystemAcpiAuditInformation ��� { SystemBasicPerformanceInformation | SystemQueryPerformanceCounterInformation � } SystemSessionBigPoolInformation �� ~ SystemBootGraphicsInformation SystemScrubPhysicalMemoryInformation � � SystemBadPageInformation � � SystemProcessorProfileControlArea � SystemCombinePhysicalMemoryInformation ��� � SystemEntropyInterruptTimingInformation �� � SystemConsoleInformation � � SystemPlatformBinaryInformation �� � SystemPolicyInformation �� � SystemHypervisorProcessorCountInformation � SystemDeviceDataInformation �� � SystemDeviceDataEnumerationInformation ��� � SystemMemoryTopologyInformation �� � SystemMemoryChannelInformation ��� � SystemBootLogoInformation � SystemProcessorPerformanceInformationEx �� � SystemCriticalProcessErrorLogInformation � � SystemSecureBootPolicyInformation � SystemPageFileInformationEx �� � SystemSecureBootInformation �� � SystemEntropyInterruptTimingRawInformation ��� � SystemPortableWorkspaceEfiLauncherInformation � SystemFullProcessInformation � � SystemKernelDebuggerInformationEx � SystemBootMetadataInformation � SystemSoftRebootInformation �� � SystemElamCertificateInformation � � SystemOfflineDumpConfigInformation ��� � SystemProcessorFeaturesInformation ��� � SystemRegistryReconciliationInformation �� � SystemEdidInformation � SystemManufacturingInformation ��� � SystemEnergyEstimationConfigInformation �� � SystemHypervisorDetailInformation � SystemProcessorCycleStatsInformation � � SystemVmGenerationCountInformation ��� � SystemTrustedPlatformModuleInformation ��� � SystemKernelDebuggerFlags � SystemCodeIntegrityPolicyInformation � � SystemIsolatedUserModeInformation � SystemHardwareSecurityTestInterfaceResultsInformation � SystemSingleModuleInformation � SystemAllowedCpuSetsInformation �� � SystemVsmProtectionInformation ��� � SystemInterruptCpuSetsInformation � SystemSecureBootPolicyFullInformation � SystemCodeIntegrityPolicyFullInformation � � SystemAffinitizedInterruptProcessorInformation ��� � SystemRootSiloInformation � SystemCpuSetInformation �� � SystemCpuSetTagInformation ��� � SystemWin32WerStartCallout ��� � SystemSecureKernelProfileInformation � � SystemCodeIntegrityPlatformManifestInformation ��� � SystemInterruptSteeringInformation ��� � SystemSupportedProcessorArchitectures � SystemMemoryUsageInformation � � SystemCodeIntegrityCertificateInformation � SystemPhysicalMemoryInformation �� � SystemControlFlowTransition �� � SystemKernelDebuggingAllowed � � SystemActivityModerationExeState � � SystemActivityModerationUserSettings � � SystemCodeIntegrityPoliciesFullInformation ��� � SystemCodeIntegrityUnlockInformation � � SystemIntegrityQuotaInformation �� � SystemFlushInformation ��� � SystemProcessorIdleMaskInformation ��� � SystemSecureDumpEncryptionInformation � SystemWriteConstraintInformation � � SystemKernelVaShadowInformation �� � SystemHypervisorSharedPageInformation � SystemFirmwareBootPerformanceInformation � � SystemCodeIntegrityVerificationInformation ��� � SystemFirmwarePartitionInformation ��� � SystemSpeculationControlInformation �� � SystemDmaGuardPolicyInformation �� � SystemEnclaveLaunchControlInformation � SystemWorkloadAllowedCpuSetsInformation �� � SystemCodeIntegrityUnlockModeInformation � � SystemLeapSecondInformation �� � SystemFlags2Information �� � SystemSecurityModelInformation ��� � SystemCodeIntegritySyntheticCacheInformation � � SystemFeatureConfigurationInformation � SystemFeatureConfigurationSectionInformation � � SystemFeatureUsageSubscriptionInformation � SystemSecureSpeculationControlInformation � SystemSpacesBootInformation �� � SystemFwRamdiskInformation ��� � SystemWheaIpmiHardwareInformation � SystemDifSetRuleClassInformation � � SystemDifClearRuleClassInformation ��� � SystemDifApplyPluginVerificationOnDriver � � SystemDifRemovePluginVerificationOnDriver � SystemShadowStackInformation � � SystemBuildVersionInformation � SystemPoolLimitInformation ��� � SystemCodeIntegrityAddDynamicStore ��� � SystemCodeIntegrityClearDynamicStores � SystemPoolZeroingInformation � � MaxSystemInfoClass ���J � t ! _SYSTEM_INFORMATION_CLASS .?AW4_SYSTEM_INFORMATION_CLASS@@ � JOB_OBJECT_NET_RATE_CONTROL_ENABLE ��� JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG � JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS ��Z t # JOB_OBJECT_NET_RATE_CONTROL_FLAGS .?AW4JOB_OBJECT_NET_RATE_CONTROL_FLAGS@@ �z KCONTINUE_UNWIND � KCONTINUE_RESUME � KCONTINUE_LONGJUMP ��� KCONTINUE_SET KCONTINUE_LAST ���6 t % _KCONTINUE_TYPE .?AW4_KCONTINUE_TYPE@@ �* onecore\internal\sdk\inc\ntxcapi.h �: VRF_TRIAGE_CONTEXT_NONE �� VRF_TRIAGE_CONTEXT_DEFAULT ��� VRF_TRIAGE_CONTEXT_DEVELOPMENT ��� VRF_TRIAGE_CONTEXT_CERTIFICATION � VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED ��� VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING � NUM_VRF_TRIAGE_CONTEXTS ��> t ( _VRF_TRIAGE_CONTEXT .?AW4_VRF_TRIAGE_CONTEXT@@ �* COMIMAGE_FLAGS_ILONLY COMIMAGE_FLAGS_32BITREQUIRED � COMIMAGE_FLAGS_IL_LIBRARY COMIMAGE_FLAGS_STRONGNAMESIGNED �� COMIMAGE_FLAGS_NATIVE_ENTRYPOINT � � COMIMAGE_FLAGS_TRACKDEBUGDATA � COMIMAGE_FLAGS_32BITPREFERRED COR_VERSION_MAJOR_V2 � COR_VERSION_MAJOR COR_VERSION_MINOR COR_DELETED_NAME_LENGTH �� COR_VTABLEGAP_NAME_LENGTH NATIVE_TYPE_MAX_CB ��� � COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE � IMAGE_COR_MIH_METHODRVA �� IMAGE_COR_MIH_EHRVA �� IMAGE_COR_MIH_BASICBLOCK � COR_VTABLE_32BIT � COR_VTABLE_64BIT � COR_VTABLE_FROM_UNMANAGED COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN ��� COR_VTABLE_CALL_MOST_DERIVED � IMAGE_COR_EATJ_THUNK_SIZE MAX_CLASS_NAME ��� MAX_PACKAGE_NAME �R t * ReplacesCorHdrNumericDefines .?AW4ReplacesCorHdrNumericDefines@@ ���� SystemFeatureConfigurationSectionTypeBoot SystemFeatureConfigurationSectionTypeRuntime � SystemFeatureConfigurationSectionTypeUsageTriggers ��� SystemFeatureConfigurationSectionTypeCount ���n t , _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE .?AW4_SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE@@ ��� LockQueueUnusedSpare0 LockQueueUnusedSpare1 LockQueueUnusedSpare2 LockQueueUnusedSpare3 LockQueueVacbLock LockQueueMasterLock �� LockQueueNonPagedPoolLock LockQueueIoCancelLock LockQueueUnusedSpare8 LockQueueIoVpbLock ���
LockQueueIoDatabaseLock �� LockQueueIoCompletionLock LockQueueNtfsStructLock ��
LockQueueAfdWorkQueueLock LockQueueBcbLock � LockQueueUnusedSpare15 ��� LockQueueUnusedSpare16 ��� LockQueueMaximumLock �J t . _KSPIN_LOCK_QUEUE_NUMBER .?AW4_KSPIN_LOCK_QUEUE_NUMBER@@ ���
���
���
���
���� -FC -MT -c -Zc:wchar_t- -Zl -Zp8 -Gy -Gm- -W4 -Gz -hotpatch -EHs- -EHc- -GR- -GF -GS -Ox -Os -GL -Oy- -Z7 -Zc:alignedNew- -Zc:noexceptTypes- -w15043 -Zc:rvalueCast -ZH:SHA_256 -wd4986 -wd4987 -wd4471 -wd4369 -wd4309 -wd4754 -wd4427
4 f 5 -arch:IA32 -Gw -wd4316 -wd4973 -Brepro -Zc:sizedDealloc- -Wv:19.11 -Qspectre -guard:cf -TC -X � 0 1 2 3 6 ��Q�U�r���{ �j�n�M���'��Aі�f�2������Z2������Z����/�_��)3ۇHju- x���Y7�8O`�W0�D�� ]�Y�ѯ|�*�1>��Zr���3�\; �� @comp.idk�� @feat.00� ��� @vol.md �� .debug$S �. e .rdata �ہ e .rdata �w � e .rdata h�Q� e < .rdata kE�� e U .rdata kE�� e o .rdata ��R e � .text$mn ; *�� e .debug$S �
e .text$mn
, ��� e .debug$S �
e � �
.debug$S 4 e .debug$S
@ e .debug$S 8 e .debug$T �F e .chks64 � e � ??_C@_13FPGAJAPJ@?$AA?2@ ??_C@_15MNCACJLI@?$AA?2?$AA?1@ ??_C@_13CGOKJPIL@?$AA?1@ _RtlNtPathSeperatorString _RtlAlternateDosPathSeperatorString _RtlDosPathSeperatorsString _NtRecordEnvironmentPointers@8 _NtStartupCountEnvironmentStrings@4