Skip to content

Commit

Permalink
Merge branch 'master' into master-dm
Browse files Browse the repository at this point in the history
  • Loading branch information
@DartVanya
DartVanya authored Nov 22, 2024
2 parents 4aa8cab + ead4088 commit 53fe931
Show file tree
Hide file tree
Showing 3 changed files with 51 additions and 6 deletions.
4 changes: 2 additions & 2 deletions KSystemInformer/include/kph.h
View file
Original file line number Diff line number Diff line change
Expand Up @@ -249,15 +249,15 @@ SIZE_T InterlockedExchangeIfGreaterSizeT(

#define ProbeOutputType(pointer, type) \
_Pragma("warning(suppress : 6001)") \
ProbeForWrite(pointer, sizeof(type), TYPE_ALIGNMENT(type))
ProbeForRead(pointer, sizeof(type), TYPE_ALIGNMENT(type))

#define ProbeInputType(pointer, type) \
_Pragma("warning(suppress : 6001)") \
ProbeForRead(pointer, sizeof(type), TYPE_ALIGNMENT(type))

#define ProbeOutputBytes(pointer, size) \
_Pragma("warning(suppress : 6001)") \
ProbeForWrite(pointer, size, TYPE_ALIGNMENT(BYTE))
ProbeForRead(pointer, size, TYPE_ALIGNMENT(BYTE))

#define ProbeInputBytes(pointer, size) \
_Pragma("warning(suppress : 6001)") \
Expand Down
38 changes: 34 additions & 4 deletions kphlib/kphdyn.c
View file
Original file line number Diff line number Diff line change
Expand Up @@ -79,8 +79,8 @@ CONST BYTE KphDynConfig[] =
0x79, 0x20, 0x8c, 0xcb, 0xa3, 0xe3, 0x53, 0x4e,
0x8b, 0x2e, 0xc1, 0x9c, 0x0a, 0x53, 0x1a, 0x14,
0x65, 0x71, 0xc4, 0x66, 0x4a, 0x82, 0x8a, 0xf3,
0x67, 0x50, 0xfa, 0xb7, 0x3a, 0x25, 0x61, 0xf8,
0x08, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x1a,
0x67, 0x50, 0xfa, 0xb7, 0x3a, 0x25, 0x61, 0x07,
0x09, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x1a,
0x3c, 0x9f, 0x55, 0x00, 0x20, 0x85, 0x00, 0x00,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x14,
0xd1, 0xa9, 0x55, 0x00, 0x20, 0x85, 0x00, 0x00,
Expand Down Expand Up @@ -1602,6 +1602,8 @@ CONST BYTE KphDynConfig[] =
0xd8, 0x6d, 0xbf, 0x00, 0x60, 0x04, 0x01, 0x38,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x43,
0xe4, 0x6c, 0xa1, 0x00, 0x60, 0x04, 0x01, 0x38,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xbe,
0x70, 0x8e, 0x18, 0x00, 0x60, 0x04, 0x01, 0x38,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xdc,
0x82, 0x29, 0xce, 0x00, 0x60, 0x04, 0x01, 0x38,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x39,
Expand Down Expand Up @@ -1934,6 +1936,10 @@ CONST BYTE KphDynConfig[] =
0x07, 0xc8, 0x2c, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0xa8,
0xfc, 0x2b, 0xe8, 0x00, 0x20, 0x04, 0x01, 0xf2,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xc5,
0xd7, 0x37, 0xe5, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x73,
0x6d, 0xa2, 0xdb, 0x00, 0x20, 0x04, 0x01, 0xf2,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xd5,
0x2d, 0xaf, 0x3a, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0xc9,
Expand Down Expand Up @@ -2286,7 +2292,11 @@ CONST BYTE KphDynConfig[] =
0xd9, 0xba, 0x58, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x3d,
0x32, 0xba, 0x5c, 0x00, 0x20, 0x04, 0x01, 0xf2,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xf2,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x07,
0xd5, 0x65, 0x52, 0x00, 0x80, 0x04, 0x01, 0x38,
0x02, 0x00, 0x00, 0x02, 0x00, 0x64, 0x86, 0xe8,
0x1c, 0xd9, 0x6d, 0x00, 0xe0, 0x10, 0x00, 0xf8,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xf2,
0xf7, 0xe5, 0xc2, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x74,
0xbc, 0x5c, 0xe9, 0x00, 0x70, 0x04, 0x01, 0x76,
Expand Down Expand Up @@ -2738,6 +2748,10 @@ CONST BYTE KphDynConfig[] =
0x39, 0x70, 0xcd, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0xcd,
0x76, 0xec, 0x7c, 0x00, 0x10, 0x04, 0x01, 0xf2,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x9c,
0x4f, 0x49, 0x95, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x60,
0xb7, 0x53, 0x39, 0x00, 0x10, 0x04, 0x01, 0xf2,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xbf,
0x92, 0xbb, 0xaf, 0x00, 0x70, 0x04, 0x01, 0x76,
0x02, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xf5,
Expand Down Expand Up @@ -2776,7 +2790,9 @@ CONST BYTE KphDynConfig[] =
0x22, 0x08, 0xaf, 0x00, 0xe0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x02, 0x00, 0x64, 0x86, 0xe0,
0x3b, 0x95, 0xfe, 0x00, 0x00, 0x11, 0x00, 0xf8,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x0b,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x71,
0x85, 0x60, 0x4e, 0x00, 0xe0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x0b,
0xca, 0x2a, 0xe0, 0x00, 0xe0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x31,
0xb5, 0x48, 0x94, 0x00, 0x90, 0x24, 0x01, 0x6e,
Expand Down Expand Up @@ -2956,6 +2972,10 @@ CONST BYTE KphDynConfig[] =
0x28, 0x50, 0x3c, 0x00, 0xf0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x39,
0x6d, 0x8d, 0x8f, 0x00, 0x90, 0x24, 0x01, 0x6e,
0x03, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x80,
0xfd, 0x7b, 0x5c, 0x00, 0xf0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0xd5,
0x5a, 0x39, 0xed, 0x00, 0x90, 0x24, 0x01, 0x6e,
0x03, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0x2e,
0x05, 0x8b, 0x11, 0x00, 0xf0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x0a,
Expand Down Expand Up @@ -3074,6 +3094,12 @@ CONST BYTE KphDynConfig[] =
0x60, 0x19, 0xdd, 0x00, 0xa0, 0x24, 0x01, 0x6e,
0x03, 0x00, 0x00, 0x02, 0x00, 0x64, 0x86, 0xb6,
0x57, 0x87, 0x4b, 0x00, 0x00, 0x11, 0x00, 0xf8,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0x86, 0xc1,
0x08, 0xce, 0x89, 0x00, 0xf0, 0x44, 0x01, 0x30,
0x03, 0x00, 0x00, 0x01, 0x00, 0x64, 0x86, 0x55,
0x5a, 0x5c, 0x72, 0x00, 0x90, 0x24, 0x01, 0x6e,
0x03, 0x00, 0x00, 0x02, 0x00, 0x64, 0x86, 0x98,
0x23, 0x45, 0x7f, 0x00, 0x00, 0x11, 0x00, 0xf8,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0xaa, 0x76,
0x52, 0xdc, 0x59, 0x00, 0xb0, 0x8c, 0x00, 0xac,
0x03, 0x00, 0x00, 0x00, 0x00, 0x64, 0xaa, 0x2a,
Expand Down Expand Up @@ -4672,6 +4698,10 @@ CONST BYTE KphDynConfig[] =
0xe5, 0x07, 0x6d, 0x00, 0x90, 0x24, 0x01, 0xda,
0x05, 0x00, 0x00, 0x02, 0x00, 0x64, 0xaa, 0xfa,
0x44, 0x40, 0x9b, 0x00, 0xe0, 0x10, 0x00, 0xf8,
0x00, 0x00, 0x00, 0x00, 0x00, 0x64, 0xaa, 0xa4,
0xaf, 0x30, 0xc6, 0x00, 0x90, 0x24, 0x01, 0xda,
0x05, 0x00, 0x00, 0x02, 0x00, 0x64, 0xaa, 0x15,
0x15, 0xba, 0xc8, 0x00, 0xe0, 0x10, 0x00, 0xf8,
0x00, 0x00, 0x00, 0x18, 0x00, 0x18, 0x04, 0x20,
0x00, 0x30, 0x00, 0x10, 0x00, 0x28, 0x00, 0x14,
0x00, 0x11, 0x00, 0x10, 0x00, 0x18, 0x00, 0x00,
Expand Down
15 changes: 15 additions & 0 deletions kphlib/kphdyn.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -768,6 +768,7 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.19041.330" file="ntoskrnl.exe" hash="4a9443bba3a42a501e8ded52d0e25341923d53b24be22013039a981b6a1d6cc6" timestamp="0x924b9e55" size="0x01046000">6</data>
<data arch="amd64" version="10.0.19041.331" file="ntoskrnl.exe" hash="a4a3762c9ee0424eb79cca8c61e0978c16f437c158f9ae2f528b84a80ab51851" timestamp="0xbf6dd82e" size="0x01046000">6</data>
<data arch="amd64" version="10.0.19041.388" file="ntoskrnl.exe" hash="8c71d9df32fe8f63d4865e322eaaad6bf85ebd2b7e05fd3be4ec12b790fb6a85" timestamp="0xa16ce443" size="0x01046000">6</data>
<data arch="amd64" version="10.0.19041.421" file="ntoskrnl.exe" hash="ce9fe3d0ea27867027027af325d52bda83e6472ab1e57baafda57afdceca4bb7" timestamp="0x188e70be" size="0x01046000">6</data>
<data arch="amd64" version="10.0.19041.423" file="ntoskrnl.exe" hash="f230a92e50b065e6d6307b805369dd275adeec59efaa850cd66e575a31e4fb3a" timestamp="0xce2982dc" size="0x01046000">6</data>
<data arch="amd64" version="10.0.19041.450" file="ntoskrnl.exe" hash="1878b3aef56db720fda0307fe88d4283849b08af6a7a97d42f3cc8b10081f61b" timestamp="0x07503e39" size="0x01046000">6</data>
<data arch="amd64" version="10.0.19041.487" file="ntoskrnl.exe" hash="75db4f25ab8eac2a51870381336a53d3e73d65779ed94445a5ade89aa8547bd6" timestamp="0xad73188d" size="0x01046000">6</data>
Expand Down Expand Up @@ -934,6 +935,8 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.20348.1607" file="ntkrla57.exe" hash="1567df898ba7207c82be8289e1e4fa596ffa968631725aa104ce1b62a0c6a792" timestamp="0x5af40a5b" size="0x01042000">13</data>
<data arch="amd64" version="10.0.20348.1668" file="ntoskrnl.exe" hash="f47286c93e14d6a3f796fbe96dfd2c342f7532f3dfc8909a16ef3cee2097238b" timestamp="0x2cc80715" size="0x01047000">8</data>
<data arch="amd64" version="10.0.20348.1668" file="ntkrla57.exe" hash="a2e4b3644de004492dd92dea553f2a63f4ded0e289578c4b561a7fa32c208831" timestamp="0xe82bfca8" size="0x01042000">13</data>
<data arch="amd64" version="10.0.20348.1726" file="ntoskrnl.exe" hash="8c5fefffa77c17329868f1c59e8bf8768f3b4d60d0c9fa3e7687be7ee218437c" timestamp="0xe537d7c5" size="0x01047000">8</data>
<data arch="amd64" version="10.0.20348.1726" file="ntkrla57.exe" hash="ea837d33a45e347c46f99386a77afb76e106a9961d3812fc03b9251bea7282ee" timestamp="0xdba26d73" size="0x01042000">13</data>
<data arch="amd64" version="10.0.20348.1787" file="ntoskrnl.exe" hash="c3fd33f4abdb09e429c64d99f2d6555c8acc3519ae7dd48f8185cc5cc057c345" timestamp="0x3aaf2dd5" size="0x01047000">8</data>
<data arch="amd64" version="10.0.20348.1787" file="ntkrla57.exe" hash="b497648d57aa242e04baa72a03aaf2338ca38a707952bdbb086ad7a6029227f6" timestamp="0xf5f610c9" size="0x01042000">13</data>
<data arch="amd64" version="10.0.20348.1850" file="ntoskrnl.exe" hash="6916446a5677f164fff65b1e2f91399c856da145dd46800c4f1cdf8b47bed5f5" timestamp="0xea20a8e2" size="0x01047000">8</data>
Expand Down Expand Up @@ -1110,6 +1113,8 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.22000.3197" file="ntkrla57.exe" hash="d4d7f0599857b29bbc5e0aa61df5413ed34a805b9fde967f6d1642f68c68cad3" timestamp="0x4ac540ad" size="0x01042000">13</data>
<data arch="amd64" version="10.0.22000.3260" file="ntoskrnl.exe" hash="913bc1ae4f89554145e75968e8de1084bca5682d00fcf77415097fe5f713f50a" timestamp="0x58bad9ee" size="0x01047000">8</data>
<data arch="amd64" version="10.0.22000.3260" file="ntkrla57.exe" hash="8687fc3d2f74eb98f1690c83fd5015e992e62397531d5beb1c9dadf8ffcec260" timestamp="0x5cba323d" size="0x01042000">13</data>
<data arch="amd64" version="10.0.22494.1000" file="ntoskrnl.exe" hash="1519d0a9ea28d9bf720bf75b5c4afd39937e51e78310867e478dfbe6907b50b0" timestamp="0x5265d507" size="0x01048000">6</data>
<data arch="amd64" version="10.0.22495.1000" file="lxcore.sys" hash="8021fdbd678c00c10076c3e582d3fc82b5b5d7f9e8be8553e7bc5a50bc26c984" timestamp="0x6dd91ce8" size="0x0010e000">14</data>
<data arch="amd64" version="10.0.22567.200" file="ntoskrnl.exe" hash="8e719872fcc04d041c874101946214b31a12de9039937395e693b536ed681455" timestamp="0xc2e5f7f2" size="0x01047000">8</data>
<data arch="amd64" version="10.0.22616.1" file="ntoskrnl.exe" hash="ecb1eb4178b561074f3eb4a5ae5f12bb96e21a3ca5514a34aa726bdddabc25b8" timestamp="0xe95cbc74" size="0x01047000">8</data>
<data arch="amd64" version="10.0.22616.1" file="ntkrla57.exe" hash="c48bd91a1896b40b6b9940ec561bb7cf8d0a9fa29e3bb106aa445d4df7b596be" timestamp="0x42a12a38" size="0x01041000">13</data>
Expand Down Expand Up @@ -1336,6 +1341,8 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.22621.4455" file="ntkrla57.exe" hash="bb9b19cfd4998364a76b6727bf4a32b10039a43cabd1674b76ef8dde0e38f5c8" timestamp="0x0aa34024" size="0x01041000">13</data>
<data arch="amd64" version="10.0.22621.4510" file="ntoskrnl.exe" hash="5085d964c9a1b0dfc2323bd24780d6ab5c794a9623968660193d625fec3f98ce" timestamp="0xcd703981" size="0x01047000">8</data>
<data arch="amd64" version="10.0.22621.4510" file="ntkrla57.exe" hash="7056586426aa77e3dec3aabf3e55ddbcacac17ed832af63467828d89bdec9dbb" timestamp="0x7cec76cd" size="0x01041000">13</data>
<data arch="amd64" version="10.0.22621.4541" file="ntoskrnl.exe" hash="61b9596eae4484650cbc8fd0add025624074eeb2f89167c369c0cf09d36b7aee" timestamp="0x95494f9c" size="0x01047000">8</data>
<data arch="amd64" version="10.0.22621.4541" file="ntkrla57.exe" hash="7acf1f634fcfe44d64eca9c44b875a5a126724bfedbcb7393ce2844af762836b" timestamp="0x3953b760" size="0x01041000">13</data>
<data arch="amd64" version="10.0.23536.1000" file="ntoskrnl.exe" hash="58d0f4956b7591ad1f5d8d2d679fea168a6bf3f1c6749cf9271caeec9e335c5d" timestamp="0xafbb92bf" size="0x01047000">8</data>
<data arch="amd64" version="10.0.23560.1000" file="ntoskrnl.exe" hash="2689bef2125116914e5daff076f7019dccc92371fb96e42671099564a731aa89" timestamp="0xcafe66f5" size="0x01047000">8</data>
<data arch="amd64" version="10.0.23606.1000" file="ntoskrnl.exe" hash="9eab47b7f0a4a74dbfb9a26c5b67c17e5a6409c099393529d2ad454b597cc6d9" timestamp="0x1a63f27c" size="0x01047000">8</data>
Expand All @@ -1355,6 +1362,7 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.26016.1012" file="ntoskrnl.exe" hash="19c2785cc907f6e821c3dce782e10b7b3d07f58c8dbc41cc9e2e4ff341675ac0" timestamp="0xdb46672e" size="0x0124c000">8</data>
<data arch="amd64" version="10.0.26040.1000" file="ntoskrnl.exe" hash="69197a7aa80e6bbdb3858becf2beeb3953173ae4ccc30cf747e7c5c59fbe8628" timestamp="0xaf082233" size="0x0144e000">25</data>
<data arch="amd64" version="10.0.26040.1000" file="lxcore.sys" hash="61c7deb58233d991e2a46344d32373865f301bde2cbfb9e98b189c6506d3ac8e" timestamp="0xfe953be0" size="0x00110000">14</data>
<data arch="amd64" version="10.0.26058.1100" file="ntoskrnl.exe" hash="730911accbdc0dbde1551ab07d66ab5db4df2880d332c91978486ecc8f97b279" timestamp="0x4e608571" size="0x0144e000">25</data>
<data arch="amd64" version="10.0.26080.1" file="ntoskrnl.exe" hash="0c1b6d83b54c0edce234e2bfc959bfc28f2e645e1b329a763efbbefd50881f9e" timestamp="0xe02aca0b" size="0x0144e000">25</data>
<data arch="amd64" version="10.0.26080.1" file="ntkrla57.exe" hash="7a1dc4cfb1e75048002a788d4c0de9413e9f45d31966363c865073160dee93c6" timestamp="0x9448b531" size="0x01249000">26</data>
<data arch="amd64" version="10.0.26080.1" file="lxcore.sys" hash="b93d6c66f8ea85c8e7a97af527c819d9e2155be8cb54a9255883080a471c88a3" timestamp="0x507c391f" size="0x00110000">14</data>
Expand Down Expand Up @@ -1445,6 +1453,8 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.26100.2222" file="ntkrla57.exe" hash="85c0deceba0a7c3cc0bdb040b11264b0c36c538ece6b6622bd824813d630ca77" timestamp="0x8af285a1" size="0x01249000">26</data>
<data arch="amd64" version="10.0.26100.2314" file="ntoskrnl.exe" hash="866bc13d7872cc9f7f1807d1d6bfac63ed9b761651c653258ec972eed493bd95" timestamp="0x3c5028de" size="0x0144f000">25</data>
<data arch="amd64" version="10.0.26100.2314" file="ntkrla57.exe" hash="a71c16e34017ac4d35c131ad8a420fb50e703020a800544439c981905d7f145b" timestamp="0x8f8d6d39" size="0x01249000">26</data>
<data arch="amd64" version="10.0.26100.2448" file="ntoskrnl.exe" hash="591d34d91113b4929ac2e16683e7bc697edbc81a8894d1fdfce5a9e004e9c865" timestamp="0x5c7bfd80" size="0x0144f000">25</data>
<data arch="amd64" version="10.0.26100.2448" file="ntkrla57.exe" hash="b177f877a561b9c7230e009c352cdc07d39eb5de38c3434d492947998e6f2b78" timestamp="0xed395ad5" size="0x01249000">26</data>
<data arch="amd64" version="10.0.26100.2454" file="ntoskrnl.exe" hash="7550d69115ee1a763ee92d26c24a8b340533f60bf61f06d79f282552850ab5a7" timestamp="0x118b052e" size="0x0144f000">25</data>
<data arch="amd64" version="10.0.26100.2454" file="ntkrla57.exe" hash="96f7d80ef1962b2ca2943eb05962d0871b2463e34de80de47cb1d517628a14d4" timestamp="0x9772fc0a" size="0x01249000">26</data>
<data arch="amd64" version="10.0.26200.5001" file="ntoskrnl.exe" hash="2b5c8f42ce4fb4e3bfda5ee55f3a0c44f1f4b938321829c8e261060397c66c29" timestamp="0x0f947d63" size="0x0144e000">25</data>
Expand Down Expand Up @@ -1504,6 +1514,9 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="amd64" version="10.0.27749.1000" file="ntoskrnl.exe" hash="037ce2813e6b29e84b5e436d84f804cfc5ef48a3f71789650252f26c2ed3245e" timestamp="0x46946984" size="0x0144f000">25</data>
<data arch="amd64" version="10.0.27749.1000" file="ntkrla57.exe" hash="1a0b288ccb8aed2f6bf9711ed0d6c9483e671d37e26def464cebe891a013f726" timestamp="0xdd196057" size="0x0124a000">26</data>
<data arch="amd64" version="10.0.27749.1000" file="lxcore.sys" hash="b1b3fbadd805b41e2f99fec1bb7f9fba0f03cb5c4c0e24f52425f9f020cd442f" timestamp="0x4b8757b6" size="0x00110000">14</data>
<data arch="amd64" version="10.0.27754.1000" file="ntoskrnl.exe" hash="321066eb65b474efaf335e733daad006a163a4f04a4f458cabee277f0f8bb1f3" timestamp="0x89ce08c1" size="0x0144f000">25</data>
<data arch="amd64" version="10.0.27754.1000" file="ntkrla57.exe" hash="cfb92d94163f28f841fb1bb7286bbc2a2cabc0f281bc960fc51c4efec09c5bb9" timestamp="0x725c5a55" size="0x01249000">26</data>
<data arch="amd64" version="10.0.27754.1000" file="lxcore.sys" hash="7f24293aee987d1a11e4e04ae1c51f0ca47f912cedaed54d0356164260fd8e9e" timestamp="0x7f452398" size="0x00110000">14</data>
<data arch="arm64" version="10.0.16299.19" file="ntoskrnl.exe" hash="b87af01f8162b8742490e40ea96c3df977ccaed3c1d4239e84f1a515c9fa719d" timestamp="0x59dc5276" size="0x008cb000">15</data>
<data arch="arm64" version="10.0.16299.64" file="ntoskrnl.exe" hash="b69c45a5f36a89b328f8c33206827aa9a20aab9b6de82072746ebb90d4fddc2e" timestamp="0x59f0002a" size="0x008cb000">15</data>
<data arch="arm64" version="10.0.16299.125" file="ntoskrnl.exe" hash="42d360571b1e75b36dc497f58d4f65bc1ee8e8c512d9e1c0d29ab3232ccb901b" timestamp="0x5a29b7fc" size="0x008cb000">15</data>
Expand Down Expand Up @@ -2303,6 +2316,8 @@ THIS IS AN AUTOGENERATED FILE, DO NOT MODIFY
<data arch="arm64" version="10.0.27744.1000" file="lxcore.sys" hash="ade02b11befcef5b7a598672ae39ba0d84311b67612252908aa2bc03cd3fc46b" timestamp="0xa324caa6" size="0x0010e000">14</data>
<data arch="arm64" version="10.0.27749.1000" file="ntoskrnl.exe" hash="dbec1f1ac91746c14786495cc86677ad21a0bf61846f64e9a650e4ab21e476d0" timestamp="0x6d07e52f" size="0x01249000">24</data>
<data arch="arm64" version="10.0.27749.1000" file="lxcore.sys" hash="137742bbda1b1b2a5ab33dfc18d277e25ac67c2d07f04a65cfcf85b2a0075f3c" timestamp="0x9b4044fa" size="0x0010e000">14</data>
<data arch="arm64" version="10.0.27754.1000" file="ntoskrnl.exe" hash="84a68ac9dbebcefedf73636544615af39f904ebf2e9ca823f6e1004a2648339b" timestamp="0xc630afa4" size="0x01249000">24</data>
<data arch="arm64" version="10.0.27754.1000" file="lxcore.sys" hash="f09d30bffac5a21fd8cd631d5859f420dd27260fe090ae49c362ae0d5f4ce2be" timestamp="0xc8ba1515" size="0x0010e000">14</data>
<fields id="15">
<field value="0x0018" name="EgeGuid"/>
<field value="0x03c0" name="EpObjectTable"/>
Expand Down

0 comments on commit 53fe931

Please sign in to comment.