Memory Resident Page Atlas - Mainkill1/SpiritBoot GitHub Wiki

SpiritBoot resident page atlas and additional object sizes

Exact build and accounting

This extension describes merged SpiritBoot main d4350b60, reconstructed tree 1277f2b7bf45a0992ef56d45d55815396d46ac8d, release64. It uses the same shipped image as Memory-Function-and-Table-Ledger. It includes twenty-five additional compiler-proved global sizes and eight runtime structure-body proofs across two passes; see Memory-Additional-Table-Lifetimes for the second pass. No firmware or benchmark procedure was changed.

102 image pages / 417,792 bytes / 408 KiB comprise one 4,096-byte header page and 101 section pages. Resident section content is 403,256 bytes; section-end backing outside content is 10,440 bytes. This is the image only. PFN arrays, dynamically allocated caches, stacks and pool objects outside the image have separate owners.

Of resident content, 367,003 bytes now have proved compiler-extent or sizeof owners and 36,253 bytes remain assembly/data/alignment of unresolved object boundaries. These totals are disjoint. Each row below identifies its full 4 KiB image page, owners and remaining bytes. Physical addresses were additionally verified through the live page tables of the paused, completed frozen public guest. This is one matched checkpoint, not every game or reset state. See Memory-Runtime-Physical-Owners.

Whole-section packing can recover little by itself: retaining the separate header page, a permission-agnostic packing of 403,256 section bytes requires at least 99 section pages plus the header, versus 102 actual pages. That idealized upper bound is 8 KiB. Combining header bytes with section contents and changing the layout can make a different bound; neither calculation proves a deployable change. The 228 KiB image gap cannot be solved by removing section-tail padding alone.

Additional globals and runtime structure bodies

Sizes below are actual sizeof constants compiled in copies of their unchanged production translation units with the captured release64 flags. LTO was disabled only to retain the measurement constants. A next-symbol interval is not a substitute. All global addresses were matched to this exact linked image.

Object Exact body bytes Current placement Purpose and lifetime
XeRunningTitlePathA 520 .bss at 0x8405ece0 Current title path; reset/launch handoff uses it.
KiInitialThread 736 .bss at 0x84064360 Boot thread becomes runtime initial/idle scheduling state.
KiInitialProcess 632 .bss at 0x84062060 Initial kernel process, referenced by runtime threads.
KiTimerTableLock 64 .bss at 0x84062400 Runtime timer synchronization.
KiProcessorBlock 128 .bss at 0x8405e440 Processor control-block pointer array; declared for 32 slots despite single-CPU target. A smaller definition needs every consumer checked.
KiNode0 40 .bss at 0x84062340 Initial node bookkeeping retained by kernel state.
HalDispatchTable 96 .data at 0x84052320 Published HAL function/data routes.
HalPrivateDispatchTable 80 .data at 0x840522c0 Private HAL routes. Actual 80 bytes, not its 96-byte next-symbol interval.
KeTickCount 12 .bss at 0x8406044c Live timer-maintained public clock; writable.
KiTimerTableListHead 512 .bss at 0x84061bc0 Live timer buckets and deadline state.
NxcMutex 32 .bss at 0x8405f560 Cache synchronization, writable.
NxcLruList 8 .bss at 0x8405f558 Cache block LRU head, writable.
NxcMapList 8 .bss at 0x8405f550 Active cache-map list head, writable.
NxcFreeBcbs 4 .bss at 0x84064684 Pointer to reusable BCB list; pointer is not the retained objects.
NXC_MAP 152 Structure type body; not an additional allocation Per-map body, includes embedded PRIVATE_CACHE_MAP; do not charge the embedded body again.
NXC_BLOCK 40 Structure type body; not an additional allocation One cache-slot descriptor; already inside the 1,360-byte static descriptor array.
NXC_BCB 32 Structure type body; not an additional allocation Individually pooled pin handle; up to eight released handles retained. Pool capacity/header/page costs are additional and overlap pool accounting.
PRIVATE_CACHE_MAP 88 Structure type body; not an additional allocation Per-file private cache state; one instance embedded in NXC_MAP.

Together with the earlier 34 global/table proofs and eleven globals in Memory-Additional-Table-Lifetimes, this gives 59 exact global/table sizes plus eight exact runtime structure-body sizes. These are overlapping levels of description where a structure is embedded or an array contains its instances; their sizes must not all be summed as firmware RAM.

Resident proved bytes by owned source attribution

This groups disjoint named bytes by a unique compiled definition candidate or the sizeof-proved defining source. Ambiguous LTO/assembly origins remain unresolved. Shared callees and inlined work are not redistributed to callers, and this is not a performance ranking.

Owned source family Proved resident bytes
drivers/filesystems/vfatfs 44,401
ntoskrnl/ke 36,867
ntoskrnl/io/iomgr 32,563
drivers/storage/ide 31,568
Unresolved or multiple source definitions 30,129
ntoskrnl/xb/mm 29,456
ntoskrnl/ob 21,563
ntoskrnl/xb/xbe.c 16,887
ntoskrnl/xb/kistacks.c 16,384
drivers/storage/class 15,359
ntoskrnl/ex 12,784
hal/halx86 12,034
sdk/lib/rtl 11,620
drivers/filesystems/xdvdfs 6,895
Generated tables 6,422
ntoskrnl/xb/crypto.c 6,149
ntoskrnl/ps 5,965
ntoskrnl/xb/interrupt.c 4,796
drivers/storage/partmgr 4,590
ntoskrnl/mm 3,216
drivers/base 2,337
sdk/lib/crt 1,960
ntoskrnl/fsrtl 1,770
ntoskrnl/xb/devtree.c 1,502
ntoskrnl/xb/eeprom.c 1,426
ntoskrnl/xb/obcreate.c 1,412
ntoskrnl/fstub 1,119
ntoskrnl/rtl 865
sdk/lib/cryptlib 665
ntoskrnl/xb/nls-stubs.c 634
ntoskrnl/inbv 613
drivers/bus 591
ntoskrnl/xb/refurb.c 466
ntoskrnl/xb/rwlock.c 411
ntoskrnl/xb/titlekeys.c 336
ntoskrnl/xb/sizeddata.c 284
ntoskrnl/xb/ide.c 264
ntoskrnl/xb/rtlprintf.c 168
ntoskrnl/xb/exflist.c 153
ntoskrnl/xb/pci.c 87
ntoskrnl/xb/psstats.c 81
ntoskrnl/xb/procobj.c 80
ntoskrnl/xb/kd-release-stubs.c 53
ntoskrnl/xb/pnpstubs.c 39
ntoskrnl/xb/rtlassert.c 24
ntoskrnl/xb/rtlbyteswap.c 10
ntoskrnl/xb/devnode.c 5
Proved subtotal 367,003
Unattributed resident content 36,253
Resident section content 403,256

Every resident section page

Owner amounts are intersections of proved extents with this page, not a claim that each owner occupies a separate page. Unknown is content with unresolved object boundaries. Padding is backing beyond the section content. Removing only one owner from a shared page normally recovers zero complete pages. The header page precedes these rows at VA 0x84000000, captured PA 0x03400000, and is charged separately as 4,096 bytes.

Page VA Captured PA Section Proved owner intersections (bytes) Unknown Padding
0x84001000 0x3401000 .text No compiler extent/sizeof owner established 4,096 0
0x84002000 0x3402000 .text No compiler extent/sizeof owner established 4,096 0
0x84003000 0x3403000 .text _AmdSetTransferMode 1013; _A_SHAUpdate@12 417; _ApplyPalette.lto_priv.0 340; _AtaAddChannel@8 280; _A_SHAFinal@8 248 1,798 0
0x84004000 0x3404000 .text _AtaDispatchPnp@8 1840; _AtaCalculateTimings.constprop.0 384; _AtaDispatchDeviceControl@8 347; _AtaDeviceAnalyzeDmaError.isra.0 324; _AtaAddChannel@8 38; _AtaDeviceSetAddressingMode 267; _AtaDeviceHandleRequestSense.lto_priv.0 158; _AtaCtrlSetTransferMode 143; _AtaDeviceLogEvent.lto_priv.0 130; _AtaDeviceQueueEmptyEvent 96; _AtaChanEnableInterruptsSync 92; _AtaDeviceQueueEvent 81; _AtaCopyIdStringSafe 56; _AtaCtrlCallStartController 43; _AtaCopyIdStringUnsafe 38; _AtaCtrlAbortChannel 37; _AtaCtrlDowngradeInterfaceSpeed 3 19 0
0x84005000 0x3405000 .text _AtaDispatchPnp@8 3682; _AtaDispatchScsi@8 412 2 0
0x84006000 0x3406000 .text _AtaPortWorkerThread@4 1060; _AtaPortSelectTimings 1030; _AtaDispatchScsi@8 67; _AtaPortQueueEvent 240; _AtaPortSendRequest 236; _AtaPortNotification 200; _AtaPortIoTimer@8 199; _AtaFdoFindNextDeviceByPath 162; _AtaPortFindDeviceForAction 161; _AtaPortEnumeratePort 139; _AtaFdoFindDeviceByPath.constprop.0 129; _AtaFdoDeviceListInsert.constprop.0 108; _AtaPortOnResetNotification 92; _AtaPortSignalWorkerThread 59; _AtaPdoCompletionRoutine@12 48; _AtaPortCompleteInternalRequest 45; _AtaPortMarkDeviceFailed 43; _AtaPortTimeout 42; _AtaPortWorkerSignalDpc@16 15 21 0
0x84007000 0x3407000 .text _AtaPortWorkerThread@4 2704; _AtaReqCompleteRequest.lto_priv.0 683; _AtaReqDeviceQueueDispatchNextRequest 64; _AtaReqDeviceQueueAddSrb.lto_priv.0 157; _AtaReqCopySatlBuffer.lto_priv.0 154; _AtaReqCompleteReadCapacity.lto_priv.0 110; _AtaReqDeviceQueueCancelIo@8 98; _AtaReadWriteCommand.lto_priv.0 75; _AtaReqCompletionDpc@16 39 12 0
0x84008000 0x3408000 .text _AtaReqStartRequest.lto_priv.0 1356; _AtaReqSendRequest 544; _AtaReqSetFixedAtaSenseData 416; _AtaReqDispatchRequest 361; _AtaReqDeviceQueueDispatchNextRequest 197; _AtaReqWaitForOutstandingIoToComplete 108; _AtaReqFlushDeviceQueue 209; _AtaReqStartIo 204; _AtaReqThawQueue 127; _AtaReqRemovePortRequest 122; _AtaReqSetFixedSenseData 103; _AtaReqPortQueueListDispatchNextRequest.lto_priv.0 76; _AtaReqGetTagForRequest.lto_priv.0 65; _AtaReqPreparePrdTable@16 61; _AtaReqStartCompletionDpc 46; _AtaReqDeviceQueueRemoveEntry 35; _AtaReqFreezeQueue 28; _AtaReqTerminateInvalidField.lto_priv.0 15 23 0
0x84009000 0x3409000 .text _CcInitializeCacheMap@20 216; _CcCopyWrite@20 553; _CcCopyRead@24 529; _AvSendTVEncoderOption@16 374; _BusSetData@20 308; _BnMontMul 303; _CcFlushCache@16 241; _BuildResourceList.lto_priv.0 234; _AtaReqWaitForOutstandingIoToComplete 117; _AtaStorageNotificationlDpc@16 177; _BnMulMod 154; _BusGetData@20 131; _AvSetDisplayMode@24 128; _BnReduce 86; _AtaSleep 86; _BnDoubleMod 76; _BnSubtract 71; _BusTranslate@24 59; _BnCompare 43; [email protected]_priv.0 39; _BusGetDmaAdapter@12 38; _AtaStorageNotificationWorker@8 22; _AtaSwapIdString 22; [email protected] 15; _AvSetSavedDataAddress@4 12; _AvGetSavedDataAddress@0 6; _CcCanIWrite@16 5; _BusIfRef@4 3; _BusIfDeref@4 3 45 0
0x8400a000 0x340a000 .text [email protected] 832; _ClassCreateClose@8 84; [email protected] 614; _CcInitializeCacheMap@20 345; _CdromAddDevice@8 415; _CdromDeviceControl@8 336; _CcSetFileSizes@8 326; _ClassClaimDevice@8 215; _CcUnpinData@4 211; _ClassAsynchronousCompletion@12 206; _CdromInitDevice@4 135; [email protected] 79; _CdromReadWriteVerification@8 79; [email protected] 57; _ClassAddDevice@8 53; _ClassAcquireRemoveLockEx@16 47; _CdromStartDevice@4 24; [email protected] 14 24 0
0x8400b000 0x340b000 .text _ClassDispatchPnp@8 2006; [email protected] 737; _ClassCreateClose@8 613; _ClassDeviceControl@8 451; _ClassGetDescriptor@12 64; _ClassDeviceControlDispatch@8 115; [email protected] 67; _ClassDispatchUnimplemented@8 29 14 0
0x8400c000 0x340c000 .text [email protected] 1452; _ClassReadDriveCapacity@4 1126; _ClassReadWrite@8 112; [email protected] 570; [email protected] 449; _ClassGetDescriptor@12 238; _ClassInitializeSrbLookasideList@8 91; _ClassGlobalDispatch@8 47 11 0
0x8400d000 0x340d000 .text _ClassSendSrbSynchronous@20 1114; _ClassReadWrite@8 620; _ClasspRetryRequestDpc@16 366; _ClasspReleaseQueue 315; _ClassSendDeviceIoControlSynchronous@28 260; [email protected] 247; _CleanupTransferPacketToWorkingSetSize 20; _ClasspUpdateDiskProperties@8 209; _ClasspBuildDeviceMdl 151; _ClasspAllocateReleaseQueueIrp 146; _ClassSendIrpSynchronous@8 114; _ClassReleaseQueueCompletion@12 106; _ClasspInitializeTimer 101; _ClasspTimerTick@16 99; _ClasspSendSynchronousCompletion@12 97; _ClassReleaseRemoveLock@8 58; _ClassSignalCompletion@12 48 25 0
0x8400e000 0x340e000 .text _DiskDeviceControl@8 1396; _DiskAddDevice@8 850; _DesBlock 326; _DesLoadTable 248; _CleanupTransferPacketToWorkingSetSize 193; _DestroyTransferPacket 162; _DequeueFreeTransferPacketEx 155; _DesCryptBlock 151; _CountAvailableClusters 106; _DisableWriteCache@8 92; _DesPermute 72; _CleanupTransferPacketToWorkingSetSizeWorker@12 60; _DiskBootDriverReinit@12 38; _DefaultQueryInfoBufferCheck.lto_priv.0 37; _DefaultQueryInfoBufferCheck.lto_priv.1 37; _DefaultQueryInfoBufferCheck.lto_priv.2 37; _DefaultQueryInfoBufferCheck.lto_priv.3 37; _DefaultQueryInfoBufferCheck 37; _DesBit 25; _DbgPrint 3 34 0
0x8400f000 0x340f000 .text _DiskDeviceControl@8 86; _DiskInitFdo@4 1135; _DiskSetCacheInformation@8 880; _DiskFdoProcessError@16 934; _DiskGetCacheInformation@8 417; _DiskReadWriteVerification@8 246; _DiskGetPortGeometry 194; _DiskReadDriveCapacity 188; _DiskDriverReinit@12 3 13 0
0x84010000 0x3410000 .text _DoQuery.lto_priv.0 3271; _DiskSetCacheInformation@8 75; _EnqueueFreeTransferPacket 288; _DiskStartFdo@4 251; _DoScroll.constprop.0 208 3 0
0x84011000 0x3411000 .text _ExCreateHandle@8 988; _ExAcquireResourceSharedLite@8 569; _EnqueueFreeTransferPacket 118; _ExAllocatePoolWithTag@12 388; _ExAcquireResourceExclusiveLite@8 280; _ExDestroyHandle@12 229; _ExFreePoolWithTag@8 222; _ExDeleteResourceLite@4 172; _ExAcquireReadWriteLockShared@4 110; _ExInitializeResourceLite@4 106; _ExInitializeRundownProtectionCacheAware@8 106; [email protected] 101; _ExInitializeReadWriteLock@4 75; _ExAcquireReadWriteLockExclusive@4 74; _ExAllocatePoolWithQuotaTag@12 63; _ExDereferenceCallBackBlock@8 62; _ExAllocateFromNPagedLookasideList 57; _ExAllocateFromNPagedLookasideList.lto_priv.0.lto_priv.0 57; @ExAcquireRundownProtectionCacheAware@4 56; @ExAcquireFastMutex@4 46; _ExInterlockedAddLargeInteger@16 45; _ExFreeToNPagedLookasideList 39; _ExFreeToNPagedLookasideList.lto_priv.0.lto_priv.0 39; _ExFreePool@4 29; _ExIsResourceAcquiredExclusiveLite@4 20; _ExGetPreviousMode@0 3 42 0
0x84012000 0x3412000 .text @ExReleaseResourceLite@4 408; _ExQueryNonVolatileSetting@20 384; _ExSaveNonVolatileSetting@16 277; @ExfAcquirePushLockShared@4 240; @ExfAcquirePushLockExclusive@4 224; @ExfReleasePushLock@4 194; @ExfReleasePushLockShared@4 186; @ExfWakePushLock@8 174; _ExReadWriteRefurbInfo@12 171; _ExQueueWorkItem@8 165; _ExpAllocateLowLevelTable@8 154; @ExfUnblockPushLock@8 152; _ExReleaseReadWriteLock@4 152; @ExfWaitForRundownProtectionRelease@4 143; _ExReferenceCallBackBlock@4 125; @[email protected] 108; [email protected] 44; @ExfReleaseRundownProtectionEx@8 86; _ExMapHandleToPointer@8 74; @ExfReleaseRundownProtection@4 66; @ExfReleasePushLockExclusive@4 65; @ExReleaseFastMutex@4 61; @ExfInterlockedInsertTailList@12 53; @ExReleaseRundownProtectionCacheAware@4 52; @ExfInterlockedRemoveHeadList@8 51; @ExfTryToWakePushLock@4 46; @ExfAcquireRundownProtection@4 36; _ExSystemTimeToLocalTime@8 33; _ExLocalTimeToSystemTime@8 32; _ExSizeOfRundownProtectionCacheAware@0 31; @ExfInterlockedCompareExchange64@12 29; _ExIsResourceAcquiredExclusiveLite@4 7; _ExUnlockHandleTableEntry@8 27 46 0
0x84013000 0x3413000 .text _FAT32FindAndMarkAvailableCluster 336; _FAT16FindAndMarkAvailableCluster 448; _ExpWorkerThreadEntryPoint@4 443; _FAT32CountAvailableClusters 369; _FAT16CountAvailableClusters 335; @ExpWaitForResource@8 319; _FAT16GetNextCluster 266; _FAT16WriteCluster 262; _ExpExpandResourceOwnerTable@8 248; _ExpDeleteTimer@4 213; _ExpTimerApcKernelRoutine@20 173; _ExpLockHandleTableEntry@8 140; _ExpTimerDpcRoutine@16 107; [email protected] 62; @ExpOptimizePushLockList@8 96; _ExpLookupHandleTableEntry@8 87; _ExpAllocateTablePagedPool@8 61; _ExpFreeLowLevelTable@8 59; _ExpDeleteMutant@4 46 26 0
0x84014000 0x3414000 .text [email protected] 744; _FATXAddEntry 602; _FATXGetNextDirEntry 578; _FAT32FindAndMarkAvailableCluster 138; _FdoEnumerateDevices.isra.0 450; _FATXDelEntry 352; _FAT32GetNextCluster 312; _FATXIsDirectoryEmpty 308; _FAT32WriteCluster 303; [email protected] 196; _FsRtlDoesNameContainWildCards@4 70; _ForwardIrpAndForget@8 31 12 0
0x84015000 0x3415000 .text [email protected] 137; _HalGetScatterGatherList@32 570; _FscSetCacheSize@4 459; _FscInvalidateIdleBlocks@0 213; @HalEndSystemInterrupt2@8 179; _GetNextClusterExtend 170; _FsdSystemTimeToDosDateTime 161; _HalRegisterShutdownNotification@8 144; _HalReadWritePCISpace@24 156; [email protected] 155; _HalAllocateCommonBuffer@16 135; _FsdDosDateTimeToSystemTime.isra.0 134; _FsRtlWorkerThread@4 117; _FsRtlStackOverflowRead@4 116; _HalReadSMBusValue@16 111; [email protected] 109; _HalGetInterruptVector@24 101; _FsRtlNotifyInitializeSync@4 98; _HalPutScatterGatherList@12 92; _GetNextCluster 89; _HalPutDmaAdapter@4 84; _HalReadSMCTrayState@8 81; _HalEnableSystemInterrupt@12 81; _HalDisableSystemInterrupt@8 47; [email protected] 47; _FsRtlNotifyUninitializeSync@4 45; [email protected] 45; _HalFreeCommonBuffer@24 44; _HalBeginSystemInterrupt@12 44; @[email protected] 32; @HalClearSoftwareInterrupt@4 14; _FscGetCacheSize@0 9; _HalEnableSecureTrayEject@0 8; _HalInitiateShutdown@0 8; _HalIsResetOrShutdownPending@0 6 55 0
0x84016000 0x3416000 .text _HaliRegisterBusHandler@32 798; _HalpGetDmaAdapter@12 736; _HalpGetPCIData@24 80; @HalpClockInterruptHandler@4 280; @HalpApcInterruptHandler@4 258; _HalRegisterShutdownNotification@8 17; @HalpEndSoftwareInterrupt2@8 126; _HalpAllocateArray@4 121; _HalpDismissIrq15Level@12 120; _HalpDismissIrq15@12 119; _HalpDismissIrq07Level@12 114; _HalpDismissIrq07@12 113; _HalpDismissIrq13Level@12 108; _HalpDispatchInterrupt2 108; _HalpDismissIrq13@12 107; _HalpDismissIrqLevel@12 104; @HalpApcInterrupt2ndEntry@4 101; _HaliTranslateBusAddress@24 100; _HalpDismissIrqGeneric@12 100; _HalTranslateBusAddress@24 88; _HalWriteSMBusValue@16 66; @HalpDispatchInterrupt2ndEntry@4 65; @HalRequestSoftwareInterrupt@4 57; _HalReturnToFirmware@4 40; @HaliReferenceHandlerForBus@8 34; _HalpGetAdapterMaximumPhysicalAddress@4 29; _HalWriteSMCScratchRegister@4 26; _HalpAcquireCmosSpinLock@0 9; _HaliQuerySystemInformation@16 8; _HaliSetSystemInformation@12 8; @HaliReferenceBusHandler@4 4; @HaliDereferenceBusHandler@4 4; _HalpBiosDisplayReset@0 3; _HaliHaltSystem@0 3 42 0
0x84017000 0x3417000 .text _HalpGrowMapBufferWorker@4 538; _InbvDisplayString@4 24; _HalpScatterGatherAdapterControl@16 316; _HalpSetPCIData@24 305; _HalpGetPCIData@24 214; _HalpXboxSmBusTransfer.lto_priv.0 247; _HalpTranslateSystemBusAddress@24 157; _IdeInitialize.lto_priv.0 156; _HalpPCIConfig@24 144; _HalpValidPCISlot@8 123; _HalpTranslateIsaBusAddress@24 121; _HalpXboxPowerAction.lto_priv.0 109; _HalpReadPCIConfig@20 99; _HalpWritePCIConfig@20 85; _HalpGrowArray@8 74; _IdeInterrupt@0 66; _HalpPCIReadUshortType1@16 64; _HalpPCIWriteUshortType1@16 64; _HalpPCISynchronizeType1@16 64; _HalpPCIReadUcharType1@16 62; _HalpPCIReadUlongType1@16 62; _HalpPCIWriteUcharType1@16 62; _HalpPCIWriteUlongType1@16 62; _HalpHardwareInterruptLevel2 62; _IdeStart@8 56; _HalpXboxSmBusReadByte 55; _HalpGetSystemInterruptVector@24 53; @HalpLookupHandler@16 53; _IdeTimeout@0 47; _IdeTimerDpc@16 45; _InbvAcquireLock@0 42; _IdeNext@0 42; _HalpXboxSmBusWriteByte 40; _HalpXboxBlacklistedPCISlot 39; _IdeFinish@0 37; _I2CTransmitByteGetReturn.lto_priv.0 35; _HalpSetTimerRollOver@4 30; _HalpPCIReleaseSynchronzationType1@8 30; _I2CWriteBytetoRegister.isra.0 19; _I2CTransmitWord.isra.0 18; _IdePoll@0 11; _HalpNoAdjustResourceList@12 8; _HalpNoAssignSlotResources@32 8; _HalpReleaseCmosSpinLock@0 8; _HalpNoBusData@24 5; _HalpHardwareInterrupt0 3; _HalpHardwareInterrupt1 3; _HalpHardwareInterrupt2 3; _HalpHardwareInterrupt3 3; _HalpHardwareInterrupt4 3; _HalpHardwareInterrupt5 3; _HalpHardwareInterrupt6 3; _HalpHardwareInterrupt7 3; _HalpHardwareInterrupt8 3; _HalpHardwareInterrupt9 3; _HalpHardwareInterrupt10 3; _HalpHardwareInterrupt11 3; _HalpHardwareInterrupt12 3; _HalpHardwareInterrupt13 3; _HalpHardwareInterrupt14 3; _HalpHardwareInterrupt15 3; @HalpTrap0DHandler@4 2 85 0
0x84018000 0x3418000 .text _InitializeTransferPackets 634; _IoBuildDeviceIoControlRequest@36 567; _IoBuildAsynchronousFsdRequest@24 519; _InbvDisplayString@4 436; _IoCheckShareAccess@20 52; _InterpretCapacityData 352; [email protected] 293; _IoAllocateIrp@8 282; _IoAllocateDriverObjectExtension@16 196; _IoBuildPartialMdl@16 178; _IoCancelIrp@4 129; [email protected] 84; _IoBuildSynchronousFsdRequest@28 84; [email protected] 63; _IoAllocateWorkItem@4 63; _IoAttachDeviceToDeviceStackSafe@12 48; _IoAttachDeviceToDeviceStack@8 37; _InbvReleaseLock@0 27; _IoAcquireVpbSpinLock@4 22; _IoAllocateErrorLogEntry@8 5 25 0
0x84019000 0x3419000 .text [email protected] 244; [email protected] 489; _IoFreeMapRegisters@12 426; _IoCheckShareAccess@20 331; _IoFreeAdapterChannel@4 329; [email protected] 307; _IoDeleteDevice@4 176; _IoGetRelatedDeviceObject@4 167; _IoForwardIrpSynchronously@8 151; _IoFreeIrp@4 143; _IoFreeMdl@4 131; [email protected] 130; _IoGetStackLimits@8 120; [email protected] 115; _IoCreateSymbolicLink@8 103; _IoInitializeIrp@12 87; _IoQueueThreadIrp@4 82; _IoCreateDevice@28 73; _IoGetDriverObjectExtension@8 67; _IoGetAttachedDeviceReference@4 61; _IoDetachDevice@4 57; _IoQueueWorkItem@16 54; _IoIsOperationSynchronous@4 43; [email protected] 39; [email protected] 39; _IoFreeWorkItem@4 31; @IoGetPagingIoPriority@4 24; _IoReadDiskSignature@12 18; _IoInvalidDeviceRequest@8 8; _IoGetConfigurationInformation@0 6; _IoMarkIrpMustComplete@4 3 42 0
0x8401a000 0x341a000 .text @IofCompleteRequest@8 924; [email protected] 477; [email protected] 420; _IoSetShareAccess@16 257; _IoSynchronousPageWrite@20 208; _IopAcquireFileObjectLock@16 167; _IoSetIoCompletion@24 160; _IopAbortInterruptedIrp@8 153; _IopAttachDeviceToDeviceStackSafe@12 146; [email protected] 117; _IopCleanupAfterException@16 117; _IopAllocateIrpMustSucceed@4 107; _IoUpdateShareAccess@8 96; _IoRemoveShareAccess@8 96; @IofCallDriver@8 93; [email protected] 92; _IoStartNextPacket@8 80; _IopCleanupFailedIrp@12 69; [email protected] 63; _IoStartTimer@4 63; [email protected] 43; _IopAbortIrpKernelApc@4 25; _IoSetHardErrorOrVerifyDevice@8 24; _IoReleaseCancelSpinLock@4 21; _IoReleaseVpbSpinLock@4 21; [email protected] 20 37 0
0x8401b000 0x341b000 .text _IopDeviceFsIoControl@44 768; _IopCreateFile@64 763; _IopCreateDevice@32 740; _IopCompleteRequest@20 732; _IopDeleteFile@4 533; [email protected] 38; _IopDeleteDevice@4 200; _IopDeleteDriver@4 98; _IopDereferenceVpbAndFree@4 95; _IopDeleteIoCompletion@4 73; [email protected] 44 12 0
0x8401c000 0x341c000 .text _IopParseDevice@40 2876; _IopDeviceFsIoControl@44 630; _IopFinalizeAsynchronousIo@24 180; _IopFreeMiniPacket@4 81; _IopLockFileObject.constprop.0 73; _IopLockFileObject.constprop.1 73; _IopGetFileMode 55; @[email protected] 43; _IopInvalidDeviceRequest@8 34; _IopFreeIrpKernelApc@20 25; _IopGetSetSecurityObject@32 5 21 0
0x8401d000 0x341d000 .text _IopParseDevice@40 405; _KeBugCheckWithTf@24 408; _IopQueryDeviceInformation@24 464; [email protected] 325; _IopShutdownBaseFileSystems@4 266; _IssueSyncIoControlRequest.constprop.0 238; _IopUnloadDevice@4 198; _IopStartNextPacketByKeyEx@12 153; _IopStartNextPacketByKey@12 144; _KeAlertResumeThread@4 142; _IopStartNextPacket@8 136; _IopParseFile@40 128; _KeAlertThread@8 113; _IopTimerDispatch@16 106; _KeBoostPriorityThread@8 93; _IsThereAChildOpened.lto_priv.0 80; _IopUpdateOperationCount.lto_priv.0.lto_priv.0 80; _IopUpdateTransferCount.lto_priv.0 72; _IopUnlockFileObject.lto_priv.0.lto_priv.0 62; _KeBugCheckUnicodeToAnsi@12 62; [email protected]_priv.0 60; _KeBugCheckEx@20 51; _IsDotOrDotDot 48; _IopSynchronousCompletion@12 48; _IopWorkItemCallback@4 42; _KeAcquireInterruptSpinLock@4 39; _KeBugCheck@4 39; @KeAcquireQueuedSpinLock@4 30; @KeAcquireInStackQueuedSpinLockRaiseToSynch@8 26 38 0
0x8401e000 0x341e000 .text _KeBugCheckWithTf@24 692; _KeDelayExecutionThread@12 919; _KeInitThread@36 452; [email protected] 616; _KeConnectInterrupt@4 351; _KeGetBugMessageText@8 325; _KeDisconnectInterrupt@4 249; _KeCancelTimer@4 164; _KeFlushQueueApc@8 147; _KeForceResumeThread@4 93; _KeFlushEntireTb@8 33; _KeClearEvent@4 12; _KeEnterCriticalRegion@0 10; _KeGetCurrentIrql@0 6; _KeGetCurrentThread@0 6 21 0
0x8401f000 0x341f000 .text _KeRemoveQueue@12 1344; _KeInitThread@36 203; _KeReleaseMutant@16 263; _KeQueryPerformanceCounter@4 224; _KeInsertQueueDpc@12 174; _KeInitializeMutant@8 137; _KeReleaseSemaphore@16 128; _KeInsertByKeyDeviceQueue@12 118; _KeRemoveByKeyDeviceQueue@8 117; _KePulseEvent@12 111; _KeInsertQueueApc@16 97; _KeInsertDeviceQueue@8 83; _KeRemoveDeviceQueue@4 82; _KeRemoveEntryDeviceQueue@8 80; _KeInitializeQueue@8 71; _KeInsertHeadQueue@8 70; _KeQueryBasePriorityThread@4 69; _KeInsertQueue@8 68; _KeLeaveCriticalRegion@0 47; _KeInitializeTimerEx@8 47; [email protected] 42; _KeInitializeMutex@8 41; _KeQuerySystemTime@4 38; @[email protected] 37; _KeInitializeSemaphore@12 37; _KeInitializeEvent@12 34; _KeReleaseInterruptSpinLock@8 33; _KeInitializeDpc@12 30; @KeReleaseQueuedSpinLock@8 29; _KeInitializeTimer@4 29; _KeQueryInterruptTime@0 26; @KeInitializeGate@4 24; _KeInitializeDeviceQueue@4 22; @KeReleaseInStackQueuedSpinLock@4 17; _KeRaiseIrqlToDpcLevel@0 13; _KeRaiseIrqlToSynchLevel@0 13; _KeIsExecutingDpc@0 13; _KeQueryPerformanceFrequency@0 8; _KeQueryTimeIncrement@0 6 71 0
0x84020000 0x3420000 .text _KeRemoveQueue@12 248; [email protected] 1247; _KeSetTimerEx@20 367; _KeSetBasePriorityThread@8 309; _KeSaveFloatingPointState@4 249; _KeSetEventBoostPriority@8 226; _KeSetEvent@12 225; _KeRestoreFloatingPointState@4 176; @KeSignalGateBoostPriority@4 68; _KeRundownQueue@4 137; _KeRemoveQueueApc@4 128; _KeRemoveQueueDpc@4 100; _KeRevertToUserAffinityThread@0 98; _KeResumeThread@4 97; _KeSetPriorityThread@8 90; _KeSetSystemAffinityThread@4 86; _KeSetPriorityProcess@8 80; _KeSetTimer@16 51; _KeResetEvent@4 43; _KeSetDisableBoostThread@8 40; _KeSetImportanceDpc@8 3 28 0
0x84021000 0x3421000 .text _KeWaitForMultipleObjects@32 1463; _KeWaitForSingleObject@20 280; @KeUpdateSystemTime@12 732; [email protected] 691; @[email protected] 203; _KeStartThread@4 180; @KeSignalGateBoostPriority@4 81; _KeSuspendThread@4 141; _KeStackAttachProcess@8 114; _KeTestAlertThread@4 89; _KeSynchronizeExecution@12 74; _KeUnstackDetachProcess@4 31 17 0
0x84022000 0x3422000 .text _KeWaitForSingleObject@20 923; @KiDeferredReadyThread@4 624; [email protected] 548; [email protected] 28; _KiAdjustQuantumThread@4 241; _KiDeliverUserApcs@0 227; @KiChainedDispatch@8 189; _KiContinue@12 161; @KiDebugServiceHandler@4 159; @[email protected] 159; @KiCheckForSListFault@4 154; @KiActivateWaiterQueue@4 115; _KiConnectVectorToInterrupt@8 111; @KiAcquireGuardedMutex@4 97; @KfLowerIrql@4 78; @KiDebugHandler@16 74; _KiCheckForKernelApcDelivery@0 73; @KefAcquireSpinLockAtDpcLevel@4 48; @KiAcquireFastMutex@4 47; @KfRaiseIrql@4 12 28 0
0x84023000 0x3423000 .text _KiDispatchInterrupt@0 747; @KiInsertQueueApc@8 558; _KiInsertQueue@12 394; [email protected] 301; @KiExitDispatcher@4 282; @KiInsertTreeTimer@12 244; @KiEoiHelper@4 261; [email protected] 245; _KiDoBugCheckCallbacks@0 192; _KiFlushNPXState@4 180; _KiGetVectorDispatch@8 162; @KiInsertTimerTable@8 143; [email protected] 139; _KiDispatchExceptionFromTrapFrame@32 119; _KiIdleLoop 105 24 0
0x84024000 0x3424000 .text _KiTimerExpiration@16 316; @KiNpxHandler@12 507; @KiSetPriorityThread@8 487; @KiSwapContextExit@8 371; @KiRaiseSecurityCheckFailureHandler@4 278; @KiRetireDpcList@4 275; @KiInsertTreeTimer@12 28; @KiServiceExit2@4 233; @KiSignalTimer@4 231; @KiSwapThread@8 209; @KiRaiseAssertionHandler@4 192; _KiSaveProcessorControlState@4 169; @KiInterruptTemplateHandler@8 151; _KiRaiseException@20 108; @KiSelectNextThread@4 107; @KiInterruptDispatch@8 98; @KiSwapContextEntry@8 86; _KiThreadStartup@0 69; _KiSuspendThread@12 53; _KiReadyThread@4 50; @KiSystemFatalException@8 40; _KiSuspendRundown@4 3; _KiSuspendNop@20 3 32 0
0x84025000 0x3425000 .text _KiTimerExpiration@16 668; @KiTrap07Handler@4 400; @KiTrap0DHandler@4 353; _KiTrap02Handler 309; @KiTrap0EHandler@4 287; @KiTrap06Handler@4 254; @KiTrap03Handler@4 205; @KiTrap01Handler@4 200; @KiTrap04Handler@4 188; @KiTrap00Handler@4 187; @KiTrap05Handler@4 187; @KiTrap09Handler@4 145; @KiTrap0AHandler@4 144; @KiTrap0BHandler@4 144; @KiTrap0CHandler@4 144; @KiTrap0FHandler@4 128; _KiTrap08Handler 134 19 0
0x84026000 0x3426000 .text _MmAllocateSystemMemory@8 530; _MmCreateKernelStackEx@12 407; @KiTrap13Handler@4 392; [email protected] 358; [email protected] 299; @KiUnlinkThread@8 237; _MmDeleteKernelStackEx@12 223; @KiUnexpectedInterruptTailHandler@4 219; _LdrpAccessResource@16 219; @KiWaitTest@8 208; _MiFreeInitializationCode@8 194; @KiTrap10Handler@4 186; _MmBuildMdlForNonPagedPool@4 165; @KiTrap11Handler@4 145; @KiTrap0FHandler@4 16; _MmChangeKernelResourceSectionProtection@4 99; [email protected] 63; @KiUnwaitThread@12 40; _MmFreeContiguousMemorySpecifyCache@12 20; _KiUnexpectedInterrupt 18; _MatchAll@16 5; [email protected] 5; [email protected] 5; _MmCanFileBeTruncated@8 5 38 0
0x84027000 0x3427000 .text _MmLockUnlockBufferPages@12 632; _NewTransferPacket 565; _MmProbeAndLockPages@12 538; _NtCancelTimer@8 388; [email protected] 367; _MmUnlockPages@4 284; [email protected] 276; _MmQueryStatistics@4 220; _MmFreeSystemMemory@8 199; _MmQueryAddressProtect@4 195; _MmUnmapLockedPages@8 115; _MmGetPhysicalAddress@4 111; _Mmi386MakeKernelPageTableGlobal 77; _MmLockUnlockPhysicalPage@8 55; _NextCluster 47; _MmFreeContiguousMemorySpecifyCache@12 2; [email protected] 5 20 0
0x84028000 0x3428000 .text _NtQueryDirectoryFile@44 1004; _NtCreateSymbolicLinkObject@16 535; _NtFlushBuffersFile@8 501; _NtCancelTimer@8 54; _NtCreateTimer@16 285; _NtCreateEvent@20 260; _NtCreateIoCompletion@16 228; _NtCreateDirectoryObject@12 226; _NtContinue@8 204; _NtPulseEvent@8 185; _NtOpenDirectoryObject@12 147; _NtOpenSymbolicLinkObject@12 142; _NtDeviceIoControlFile@40 95; _NtMakeTemporaryObject@4 89; _NtClearEvent@4 85; _NtClose@4 29 27 0
0x84029000 0x3429000 .text _NtQueryInformationFile@20 1352; _NtQueryDirectoryFile@44 191; _NtQueryVolumeInformationFile@20 867; _NtQuerySymbolicLinkObject@12 372; _NtQueryTimer@20 258; _NtQueryMutant@20 250; _NtQueueApcThread@20 88; _NtQueryEvent@20 237; _NtQuerySemaphore@20 237; _NtQueryIoCompletion@20 231 13 0
0x8402a000 0x342a000 .text _NtSetInformationFile@20 1700; _NtReadFile@36 1290; _NtRemoveIoCompletion@20 302; _NtQueueApcThread@20 156; _NtReleaseSemaphore@12 201; _NtSetEvent@8 185; _NtRaiseException@12 148; _NtResumeThread@8 101 13 0
0x8402b000 0x342b000 .text _NtSetInformationFile@20 1124; _NtWriteFile@36 920; _NtSetTimer@28 799; _NtSetSystemTime@8 427; _NtWaitForSingleObject@12 200; _NtWaitForSingleObjectEx@16 147; _NtSetIoCompletion@20 132; _NtSuspendThread@8 122; _NtWaitForMultipleObjectsEx@24 92; _NtUserIoApcDispatcher@12 71; _NtSignalAndWaitForSingleObjectEx@20 54 8 0
0x8402c000 0x342c000 .text _NtWriteFile@36 744; _NxMmFreeContiguousMemory@4 429; _NxDrainShutdownNotifications 409; _NtYieldExecution@0 408; _NxMmAllocateContiguousMemoryEx@20 404; _NxPhyInitialize@8 272; _NxMmSetAddressProtect@12 276; _NxMmPersistContiguousMemory@12 257; _NxMmClaimGpuInstanceMemory@8 229; _NxMmQueryAllocationSize@4 95; _NxMmCreateKernelStack@8 87; _NxMmDeleteKernelStack@8 85; _NxMmIsAddressValid@4 80; _NxMmMapIoSpace@12 67; _NxPhyGetLinkState@4 59; _NxMmAllocateContiguousMemory@4 52; _NxHalEnableSystemInterrupt@8 45; _NxHalDisableSystemInterrupt@4 37; _NxMmGetPhysicalAddress@4 36 25 0
0x8402d000 0x342d000 .text _NxcGetBlock.lto_priv.0 1193; _NxVmAllocateVirtualMemory@20 1015; _NxPoolPagesAlloc 540; _NxcPagingIo 64; _NxcFlushBlock 413; _NxPhyInitialize@8 71; _NxcFlushMap.lto_priv.0 323; _NxPoolPagesFree 194; _NxPoolPagesSetMovable 131; _NxRemoveRegistration 77; _NxcLookupBlock 60 15 0
0x8402e000 0x342e000 .text _NxcPinCommon.lto_priv.0 643; _NxcPagingIo 394; _NxkEepromOpen.lto_priv.0 369; _NxkMmEnsureXboxWindows 345; _NxkMmRestoreInitPages 295; _NxkIdeUnbindChannel 252; _NxkMmPublishPersistence@4 183; _NxcShortWait 159; _NxkIdeStartRequest 156; _NxkMmSetPersistentPages 72; _NxkMmQueryRestored 106; _NxkIdeFinishRequest.constprop.0 97; _NxkMmEnsureMmioWindow 95; _NxkIdeBindInterrupt 92; _NxkEepromLoad 84; _NxkDeriveKey.lto_priv.0 80; _NxkIdeIsr@8 76; _NxkIdeStartTimer.constprop.0 76; _NxkIdeTimeout.constprop.0 71; _NxkMmDonateHeapPages 69; _NxkIdeStartNext.constprop.0 66; _NxkEepromStore 56; _NxkMmClearPersistence 54; [email protected]_priv.0 53; _NxkIdeResetComplete 31; _NxkIdeSetHardwareIsr 30; _NxkIdeSetTimeout 28; _NxkCaseInit.lto_priv.0 21; _NxkIdeCompletionDpc 6 37 0
0x8402f000 0x342f000 .text _NxkPageSupplyTakeRunRelocate 835; _NxkSignalAndWaitForSingleObjectMode@20 478; [email protected] 350; _NxpContigTakeSlot.lto_priv.0 328; _NxkRefurbSector 295; [email protected] 253; _NxkShutdownAbortPowerRequest@0 148; _NxkPageSupplyTakeRun 144; _NxkMmSetPersistentPages 72; _NxpPhyReadReg 134; _NxpPhyUpdateLinkState 130; _NxpPhyWriteReg.constprop.0 40; _NxkPageSupplyPin 114; _NxkShutdownNotifications@0 103; _NxkShaResumedPass 92; _NxkPageSupplyTakeAny@4 87; _NxkPageSupplyReturn@4 83; _NxpPhyClearLock.lto_priv.0 74; _NxkPageSupplyCanPin 67; _NxpPhyWaitForLinkUp 59; _NxpAllocFailed 58; _NxkPageSupplySetOwner 46; _NxkPageSupplyIsPinned 44; _NxkPageSupplyIsFree 34 28 0
0x84030000 0x3430000 .text [email protected] 1944; _NxvCommitRange 452; [email protected] 447; _NxpUnlink 145; _NxpReclaimEmptyBucketPages 141; _NxpPhyWriteReg.constprop.0 89; _NxvProtectToPte.lto_priv.0 116; _NxpPushHead 111; _NxvEnsureInit.lto_priv.0 110; _NxvDecommitRange 102; _NxvFreePageAtPte 67; _NxvAllocRegion 65; _NxppSetRange 60; _NxvInsertRegion 60; _NxvPteToProtect.lto_priv.0 52; _NxppTestRange 47; _NxvFindRegion 35; [email protected] 29 24 0
0x84031000 0x3431000 .text _ObInsertObject@24 2538; [email protected] 56; [email protected] 975; _ObQueryNameString@16 384; _ObDereferenceProcessHandleTable@4 45; @ObDereferenceObjectEx@8 39; _ObDereferenceObjectDeferDelete@4 30; _ObMakeTemporaryObject@4 17 12 0
0x84032000 0x3432000 .text _ObpCreateHandle@40 424; _ObQueryNameString@16 416; _ObpAllocateObject@24 538; _ObReferenceObjectByHandle@24 508; [email protected] 462; _ObpCloseHandle@8 388; _ObpCaptureObjectName@16 301; @ObfDereferenceDeviceMap@4 292; _ObpCloseHandleTableEntry@20 244; _ObpCaptureObjectCreateInformation@24 149; _ObReferenceProcessHandleTable@4 94; @ObfDereferenceObject@4 84; _ObpChargeQuotaForObject@12 77; _ObReferenceObjectByPointer@16 45; @ObReferenceObjectSafe@4 43; @ObfReferenceObject@4 12 19 0
0x84033000 0x3433000 .text _ObpLookupEntryDirectory@20 604; _ObpCreateHandle@40 556; _ObpDeleteNameCheck@4 870; _ObpIncrementHandleCount@24 769; _ObpDeleteObject@8 474; _ObpDecrementHandleCount@16 331; [email protected] 142; _ObpInsertEntryDirectory@12 137; _ObpFreeObjectNameBuffer@4 100; _ObpDeferObjectDeletion@4 58; _ObpDeleteSymbolicLink@4 38 17 0
0x84034000 0x3434000 .text _ObpLookupObjectName@44 2671; _ObpLookupEntryDirectory@20 424; _ObpParseSymbolicLink@40 836; _ObpReferenceDeviceMap@0 80; _ObpReapObject@4 84 1 0
0x84035000 0x3435000 .text _PartMgrPnp@8 1648; _PartMgrDeviceControl@8 1848; _PartMgrAddDevice@8 216; _ObpReferenceDeviceMap@0 79; _OffsetToCluster 137; @[email protected] 126; _ObpValidateAccessMask@4 35 7 0
0x84036000 0x3436000 .text _PartMgrPnp@8 523; _PataStartIo 749; _PataProcessRequest 680; _PataResetChannel 477; _PataPollingTimerDpc@16 184; _PataIsDevicePresent 172; _PataLoadTaskFile 171; _PataSaveTaskFile 166; _PataCompleteCommand 152; _PciAddDevice@8 32; _PataEnableInterrupts 133; _PataPioDataOut 114; _PataPioDataIn 109; _PataIdentifyDevice 91; _PartMgrReadWrite@8 86; _PataChannelIsr@8 82; _PataIssueSoftwareReset 58; _PataPrepareIo 43; _PataEnumerateChannel 31; _PataReadStatus 12; _PataAllocateSlot 3 28 0
0x84037000 0x3437000 .text _PciIdeXDispatchPnp@8 2932; _PciIdeXAddDevice@8 652; _PciIdeChannelIsr@8 159; _PciAddDevice@8 109; _PciIdePreparePrdTable 124; _PciCfgWrite32 45; _PciCfgAddress.lto_priv.0 42; _PciIdeCheckInterrupt 21 12 0
0x84038000 0x3438000 .text _PciIdeXDispatchPnp@8 2149; _Phase1Initialization@4 328; _PciPnpControl@8 819; _PdoDispatchPnp@8 634; _PciRead 45; _PciWrite 45; _PdoDispatchDefault@8 29; _PdoDispatchPower@8 24; _PciIdeXPdoCompletionRoutine@12 5 18 0
0x84039000 0x3439000 .text _PspExitThread@4 392; [email protected] 1381; _Phase1Initialization@4 809; _PsSuspendThread@8 343; _PspDeleteThread@4 319; _PreserveRow.constprop.0 188; _PsSetCreateThreadNotifyRoutine@4 171; _PmWritableAlias 99; [email protected] 95; _PmChecksum.constprop.0 67; _PsTerminateSystemThread@4 57; _PmSet.lto_priv.0 47; _PsExitSpecialApc@20 44; _PmHash.lto_priv.0 33; _PmBit.lto_priv.0 29 22 0
0x8403a000 0x343a000 .text _PspExitThread@4 2426; _RawDispatch@8 1000; _RawCheckForDismount@8 263; _PspSystemThreadStartup@8 133; _PspReapRoutine@4 115; _RawCompletionRoutine@12 67; _PspQueueApcSpecialApc@20 22; _READ_PORT_BUFFER_USHORT@12 20; _READ_PORT_BUFFER_UCHAR@12 19; _READ_PORT_BUFFER_ULONG@12 19 12 0
0x8403b000 0x343b000 .text _RawDispatch@8 1048; _ReadVolumeLabel.lto_priv.0 818; _RawMountVolume@4 706; _RetryTransferPacket 461; _RtlCharToInteger@12 132; _RtlAnsiStringToUnicodeString@12 218; _RtlCaptureStackBackTrace@16 147; _RtlAppendUnicodeToString@8 138; _RtlAppendUnicodeStringToString@8 131; _RtlAppendStringToString@8 90; _RtlAnsiCharToUnicodeChar@4 85; _ReadfromSMBus.constprop.0.isra.0 56; _RawShutdown@8 27; _RtlCallVectoredExceptionHandlers@8 5; [email protected]_priv.0 5; _RawUnload@4 3 26 0
0x8403c000 0x343c000 .text [email protected] 375; _RtlDispatchException@8 315; _RtlExtendedMagicDivide@20 274; _RtlCharToInteger@12 103; _RtlCompareUnicodeString@12 173; _RtlImageNtHeaderEx@20 173; _RtlDowncaseUnicodeString@12 163; _RtlCompareString@12 161; _RtlIntegerToChar@16 150; [email protected] 150; _RtlClearBits@12 136; _RtlSetBits@12 132; _RtlNtStatusToDosError@4 130; [email protected] 126; [email protected] 116; _RtlGetCallersAddress@8 106; _RtlCreateUnicodeString@8 103; _RtlIntegerToUnicodeString@12 102; [email protected] 97; _RtlExtendedLargeIntegerDivide@16 93; _RtlInitUnicodeString@8 69; _RtlMultiByteToUnicodeN@20 67; _RtlMapGenericMask@8 66; _RtlInitAnsiString@8 65; _RtlEqualString@12 64; _RtlEqualUnicodeString@12 64; [email protected] 63; _RtlCopyString@8 59; _RtlFreeAnsiString@4 54; _RtlFreeUnicodeString@4 54; _RtlOemToUnicodeN@20 52; _RtlImageNtHeader@4 52; _RtlExtendedIntegerMultiply@12 38; _RtlClearBit@8 31; _RtlLowerChar@4 22; _RtlDowncaseUnicodeChar@4 21; _RtlMultiByteToUnicodeSize@12 17 60 0
0x8403d000 0x343d000 .text _RtlUnwind@16 563; _RtlTimeFieldsToTime@8 411; _RtlWalkFrameChain@12 383; _RtlpCallHandler 382; _RtlTimeToTimeFields@8 375; _RtlUnicodeStringToInteger@12 329; _RtlUnicodeStringToAnsiString@12 208; _RtlStringCchPrintfExA.constprop.0 163; _RtlUpcaseUnicodeString@12 148; _RtlSetBits@12 4; _RtlStringCbPrintfA.lto_priv.0.lto_priv.0 106; _RtlpDowncaseUnicodeChar@4 16; [email protected] 95; _RtlStringCchPrintfA.lto_priv.0 85; _RtlUpcaseUnicodeToMultiByteN@20 84; _RtlStringCchPrintfExW.constprop.0 82; _RtlUpperString@8 79; _RtlUnicodeToMultiByteN@20 75; _RtlStringCbPrintfW.lto_priv.0.lto_priv.0 54; _RtlStringCchPrintfW.lto_priv.0 52; _RtlUnicodeToOemN@20 52; _RtlSprintf 44; _RtlSnprintf 43; _RtlVsprintf 41; _RtlVsnprintf 40; _RtlpAllocateMemory@8 39; [email protected] 25; _RtlUpperChar@4 22; _RtlUpcaseUnicodeChar@4 21; _RtlUnicodeToMultiByteSize@12 17; @RtlUshortByteSwap@4 5; @RtlUlongByteSwap@4 5; _RtlpCheckForActiveDebugger@0 3 45 0
0x8403e000 0x343e000 .text _TransferPktComplete@12 1276; _ServiceTransferRequest 709; _SetupReadWriteTransferPacket 495; _SubmitTransferPacket 382; _SetupDriveCapacityTransferPacket 227; _StepLowMemRetry 198; _TransferPacketRetryTimerDpc@16 152; _TransferPacketQueueRetryDpc 136; _RtlpDowncaseUnicodeChar@4 80; _RtlpUpcaseUnicodeChar@4 88; [email protected] 85; _SetPixel 84; _RtlpHandleDpcStackException@16 73; _RtlpFreeMemory@8 61; _RtlpGetStackLimits@8 31 19 0
0x8403f000 0x343f000 .text _TransferPktComplete@12 1009; _VfatCommonRead 864; _VfatCheckForDismount 835; _VfatCleanupFile.lto_priv.0 499; _VfatBuildRequest@8 242; _VfatBlockDeviceIoControl.constprop.0 208; _VfatCloseFile 180; _UpdateFileSize 157; [email protected]_priv.0 39; _VfatAcquireForLazyWrite@8 39; [email protected]_priv.0 8; [email protected]_priv.0 3 13 0
0x84040000 0x3440000 .text _VfatDispatchRequest.lto_priv.0 3392; _VfatCommonRead 701 3 0
0x84041000 0x3441000 .text _VfatDispatchRequest.lto_priv.0 4096 0 0
0x84042000 0x3442000 .text _VfatDispatchRequest.lto_priv.0 3028; _VfatFlushVolume 364; [email protected]_priv.0 169; _VfatDoRequest@4 156; [email protected]_priv.0 153; _VfatFlushFile.lto_priv.0 117; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 3 46 0
0x84043000 0x3443000 .text _VfatMount.lto_priv.0 1761; _VfatHasFileSystem.lto_priv.0 672; _VfatQueryVolumeInformation.part.0 4; _VfatFlushVolume 42; _VfatOpenFile.lto_priv.0 340; _VfatLockOrUnlockVolume.lto_priv.0 280; _VfatLockUserBuffer 205; _VfatMoveEntry 204; _VfatGetBasicInformation 190; _VfatFlushWriteThrough 134; _VfatGetStandardInformation 106; _VfatGetUserBuffer 79; _VfatHandleDeferredWrite@8 15; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5; [email protected]_priv.0 5 34 0
0x84044000 0x3444000 .text _VfatSetAllocationSizeInformation 1116; _VfatRead 687; _VfatQueryVolumeInformation.part.0 537; _VfatShutdown@8 384; _VfatReadDiskPartial 368; _VfatUpdateEntry 272; _VfatRenameChildFCB.lto_priv.0 303; _VfatReadDisk.constprop.0 185; _VfatReadWritePartialCompletion@12 130; _VfatStackOverflowRead@8 46; [email protected]_priv.0 23; _VfatReleaseFromLazyWrite@4 18; [email protected]_priv.0 8; [email protected]_priv.0 3 16 0
0x84045000 0x3445000 .text _VfatWrite 2816; _WalkFatChain 528; _VfatWriteDiskPartial 368; _VfatUpdateEntry 49; [email protected] 140; _VidSolidColorFill@20 129; _WRITE_PORT_BUFFER_USHORT@12 20; _WRITE_PORT_BUFFER_UCHAR@12 19; _WRITE_PORT_BUFFER_ULONG@12 19 8 0
0x84046000 0x3446000 .text _XbScatterGather 1281; _WalkFatChain 82; _XcpKeyTable@12 344; _XcpHMAC@28 373; _XcpBlockCryptCBC@28 251; _XbSgCompletion@12 192; _XbSgRelease 134; _WriteCluster 124; _XcpBlockCrypt@20 82; _XcHMAC@28 67; _XcBlockCryptCBC@28 67; _XcpDESKeyParity@8 62; _WriteToSMBus.constprop.0.isra.0 59; _XcUpdateCrypto@8 55; _XcModExp@20 53; _XcBlockCrypt@20 53; @XbExfInterlockedInsertHeadList@8 51; @XbExfInterlockedInsertTailList@8 51; @XbExfInterlockedRemoveHeadList@4 51; _XcSHAUpdate@12 39; _XcRC4Key@12 39; _XcRC4Crypt@12 39; _XcPKEncPublic@12 39; _XcPKDecPrivate@12 39; _XcVerifyPKCS1Signature@12 39; _XcKeyTable@12 39; _XbExpBugCheck 36; _XcSHAFinal@8 31; _XcDESKeyParity@8 31; _XcCryptService@8 31; _XcSHAInit@4 23; _XcPKGetKeyLen@4 23; @XbHalpIoReadPartitionTableStub@16 20; @XbHalpExamineMBRStub@16 15; _XbExpStub_7@12 13; _XbExpStub_11@12 13; _XbExpStub_374@8 13; _XbExpStub_375@8 13; _XbExpStub_376@0 13; _XbExpStub_377@8 13; _XbExpStub_378@8 13; @XbHalpIoSetPartitionInformationStub@16 8; @XbHalpIoWritePartitionTableStub@20 8; _XcpCryptService@8 5; @XbHalpAssignDriveLettersStub@16 3 66 0
0x84047000 0x3447000 .text _XdvdDispatchDirectoryControl@8 100; _XcpPKDecPrivate@12 930; _XcpModExp@20 745; _XdvdDispatchCreate@8 625; _XcpKeyTable@12 100; _XcpVerifyPKCS1Signature@12 432; _XcpPKEncPublic@12 352; _XdvdDispatchClose@8 209; _XcpShaStore 111; _XcpShaLoad 96; _XcpSHAInit@4 91; _XdvdDispatchDeviceControl@8 79; _XcpSHAUpdate@12 64; _XcpSHAFinal@8 59; _XdvdDispatchCleanup@8 27; _XcpRC4Key@12 21; _XcpRC4Crypt@12 21; _XcpPKGetKeyLen@4 10 24 0
0x84048000 0x3448000 .text _XdvdDispatchDirectoryControl@8 1331; _XdvdDispatchRead@8 835; _XdvdDispatchFileSystemControl@8 658; _XdvdDispatchQueryInformation@8 457; _XdvdMatchName 56; _XdvdDispatchQueryVolumeInformation@8 312; _XdvdEnumerateTable 287; _XdvdDispatchSetInformation@8 115; _XdvdDispatchWrite@8 34 11 0
0x84049000 0x3449000 .text _XdvdResolvePath 1101; _XeHalReturnToFirmware@4 582; _XdvdMatchName 299; _XeDismountNamedVolume 212; _XdvdReadDirentTable 205; _XeIoCreateDevice@24 190; _XeExQueryPoolBlockSize@4 188; _XdvdTargetRead.constprop.0 165; _XeIoCreateFile@40 143; _XeInterruptGetShadow.lto_priv.0 133; _XeIoCreateSymbolicLink@8 108; _XeApcKernelTrampoline@20 114; @XeInterlockedPushEntrySList@8 105; @XeInterlockedPopEntrySList@4 88; _XeApcRundownTrampoline@4 69; _XeInterruptBindNative.constprop.0 56; _XeHalGetInterruptVector@8 56; _XeAllocTls.lto_priv.0 49; _XeExAllocatePool@4 38; _XeExAllocatePoolWithTag@8 37; _XeIoAllocateIrp@4 30; _XeDbgPrompt@12 23; @XeInterlockedCompareExchange@12 11; @XeInterlockedIncrement@4 11; [email protected]_priv.0 10; @XeInterlockedExchange@8 10; @XeInterlockedDecrement@4 9; @XeInterlockedExchangeAdd@8 7 47 0
0x8404a000 0x344a000 .text _XeLoadXbe.isra.0 1354; _XeKeInsertQueueApc@16 339; _XeLoadSection@4 324; _XeNtCreateEvent@16 24; _XeIoSynchronousDeviceIoControlRequest@32 180; _XeIoDeleteSymbolicLink@4 158; _XeKeInitializeInterrupt@28 156; _XeKeSynchronizeExecution@12 154; _XeIoSynchronousFsdRequest@20 150; [email protected] 149; _XeIoCreateSymbolicLink@8 18; _XeKeQueryPerformanceCounter@0 122; _XeNamedObjectRoot 110; _XeKeConnectInterrupt@4 108; _XeIoQueryFileInformation@20 89; _XeNtCreateDirectoryObject@8 77; _XeIoQueryVolumeInformation@20 76; _XeIoStartNextPacketByKey@8 71; _XeKeInitializeApc@28 70; _XeIoDismountVolumeByName@4 69; _XeIoSetIoCompletion@20 58; _XeKeDisconnectInterrupt@4 53; _XeNtAllocateVirtualMemory@20 52; _XeIoStartPacket@12 44; _XeIoStartNextPacket@4 29; _XeKeGetCurrentThread@0 11; _XeKeQueryInterruptTime@0 10 41 0
0x8404b000 0x344b000 .text _XeNtDuplicateObject@12 1283; _XeNtFreeVirtualMemory@12 556; _XeNtProtectVirtualMemory@16 387; _XeNtQueryDirectoryFile@40 180; _XeNtCreateSemaphore@16 240; _XeNtCreateEvent@16 214; _XeNtDeleteFile@4 233; _XeNtCreateMutant@12 189; _XeNtCreateFile@36 140; _XeNtOpenFile@24 137; _XeNtPulseEvent@8 99; _XeNtFsControlFile@40 93; _XeNtCreateTimer@12 84; _XeNtCreateIoCompletion@16 83; _XeNtOpenDirectoryObject@8 77; _XeNtOpenSymbolicLinkObject@8 77 24 0
0x8404c000 0x344c000 .text _XeNtQueryDirectoryObject@24 1013; _XeObCreateObject@16 654; _XeObInsertObject@16 124; _XeNtSetInformationFile@20 524; _XeNtQueryVirtualMemory@8 448; _XeNtQueryDirectoryFile@40 125; _XeNtQueryFullAttributesFile@8 249; _XeNtQuerySymbolicLinkObject@12 177; _XeNtReleaseMutant@8 145; _XeNtReadFile@32 79; _XeNtWriteFile@32 79; _XeNtSetTimerEx@32 67; _XeNtWriteFileGather@32 67; _XeNtReadFileScatter@32 64; _XeNtQueryEvent@8 51; _XeNtQueryMutant@8 51; _XeNtQuerySemaphore@8 51; _XeNtQueryTimer@8 51; _XeNtQueryIoCompletion@8 51 26 0
0x8404d000 0x344d000 .text _XeObInsertObject@16 436; _XeTranslateOa 552; [email protected]_priv.0 410; _XePsCreateSystemThreadEx@40 302; _XeObReferenceObjectByName@20 283; _XeObOpenObjectByPointer@12 278; _XeUnloadSection@4 201; _XeObReferenceObjectByHandle@12 186; _XeOpenFile.lto_priv.0 159; _XeObjectTypeToInternal 130; _XeObOpenObjectByName@16 130; _XeObReferenceObjectByPointer@8 110; _XeResolveOrdinal.lto_priv.0 104; _XeRtlEnterCriticalSection@4 86; _XePsCreateSystemThread@20 83; _XePsQueryStatistics@4 81; _XeRtlTryEnterCriticalSection@4 63; @XobDereferenceObject@4 59; _XeRtlLeaveCriticalSection@4 56; _XeObMakeTemporaryObject@4 52; _XepDecommitRange 51; @XeObfDereferenceObject@4 46; @XeObfReferenceObject@4 45; _XeRtlInitializeCriticalSection@4 43; _XobIsTitleObject 35; _XeRtlEnterCriticalSectionAndRegion@4 27; _XeRtlLeaveCriticalSectionAndRegion@4 27; _XeRtlAssert@16 12; _XeRtlRip@12 12 37 0
0x8404e000 0x344e000 .text _streamout 1606; _vfatDelFCBFromTable 28; _vfatAddFCBToTable 173; __SEH3$_common_except_handler.constprop.0 168; _rc4_crypt 117; _rc4_init 105; _mbtowc 103; _strstr 95; __vsnwprintf 90; _vfatAttachFCBToFileObject 89; __swprintf 89; _sprintf 87; __vsnprintf 86; __SEH3$_GetFilterResult.constprop.0 84; __SEH3$_Unregister 79; _streamout_astring 75; _streamout_wstring 75; _XobIsTitleType 74; __SEH3$_FilterFunction.2 52; _memcmp 47; _towlower 47; __SEH3$_C_except_handler 46; __SEH3$_FinallyFunction.7 46; __SEH3$_CallFinally.constprop.0 42; _streamout_char 40; __SEH3$_FilterFunction.19 39; _streamout_char 36; _iswctype 33; __SEH3$_FilterFunction.3 31; __SEH3$_FilterFunction.8 31; __SEH3$_FilterFunction.6 23; __SEH3$_FilterFunction.4 23; __SEH3$_FilterFunction.11 19; __SEH3$_FilterFunction.21 19; __SEH3$_FilterFunction.8 19; _XobShimDelete@4 17; __SEH3$_JumpToTarget.lto_priv.0 17; __SEH3$_FinallyFunction.3 14; _XobShimClose@20 13; __SEH3$_FilterFunction.6.lto_priv.0 7; __SEH3$_FilterFunction.20.lto_priv.0 7; __SEH3$_FilterFunction.27 7; __SEH3$_FilterFunction.34 7; __SEH3$_FilterFunction.20.lto_priv.1 7; __SEH3$_FilterFunction.13 7; __SEH3$_FilterFunction.20.lto_priv.2 7; __SEH3$_FilterFunction.6.lto_priv.1 7; __SEH3$_FilterFunction.5 7; __SEH3$_FilterFunction.11 7; __SEH3$_FilterFunction.25 7; __SEH3$_FilterFunction.31 7; __SEH3$_FilterFunction.9 7; __SEH3$_FilterFunction.16 7; __SEH3$_FilterFunction.23 7; __SEH3$_FilterFunction.6 7; __SEH3$_FilterFunction.20 7; __SEH3$_FilterFunction.27 7; __SEH3$_FilterFunction.6 7; __SEH3$_FilterFunction.13 7 79 0
0x8404f000 0x344f000 .text _vfatGetFCBForFile 1752; _vfatFindDirSpace 1235; _vfatFCBInitializeCacheFromVolume 413; _vfatInitFCBFromDirEntry 76; _vfatGrabFCBFromTable 197; _vfatDelFCBFromTable 147; _vfatDestroyFCB 133; _vfatDestroyCCB 56; _vfatDirEntryGetFirstCluster 41; _vfatFCBIsRoot 30 16 0
0x84050000 0x3450000 .text _wstreamout 1060; _vfatRenameEntry 585; _vfatNewFCB 452; _vfatOpenRootFCB 377; _vfatInitFCBFromDirEntry 289; _vfatUpdateFCB 306; _vfatPrepareTargetForRename.isra.0 243; _vfatMakeFullName 231; _vfatMakeFCBFromDirEntry 171; _vfatReleaseFCB 131; _vfatSplitPathName 78; _wctomb 77; _vfatNameHash 76 20 0
0x84051000 0x3451000 .text _wstreamout 980; _xHalTranslateBusAddress@24 36; _xbv_malloc.lto_priv.0 33; _xHalInitPowerManagement@8 8; _xHalEndMirroring@4 8; _xHalMirrorPhysicalMemory@16 8; _xHalQueryBusSlots@16 8; _xHalSetSystemInformation@12 8; _xHalQuerySystemInformation@16 8; _xHalRegisterBusHandler@32 8; _xHalAllocateMapRegisters@16 8; _xKdSetupPciDeviceForDebugging@8 8; _xKdReleasePciDeviceForDebugging@4 8; _xHalGetInterruptTranslator@28 8; _xHalVectorToIDTEntry@4 7; _xHalInitPnpDriver@0 6; _xHalStartMirroring@0 6; _xKdGetAcpiTablePhase@8 5; _xHalLocateHiberRanges@4 3; _xHalSetWakeEnable@4 3; @xHalHandlerForBus@8 3; _xHalSetWakeAlarm@12 3; _xKdUnmapVirtualAddress@12 3; _xHalHaltSystem@0 2; _xHalEndOfBoot@0 1; @xHalReferenceHandler@4 1 24 2,892
0x84052000 0x3452000 .data HalDispatchTable 96; HalPrivateDispatchTable 80; HalpSpecialDismissTable 64 1,824 2,032
0x84053000 0x3453000 .rdata _VidpFontData 1248; _NxkrnlNlsCase 992; IopFileMapping 16 1,840 0
0x84054000 0x3454000 .rdata _NxkrnlNlsCase 3878 218 0
0x84055000 0x3455000 .rdata _table_c0020001 128; _table_c0030001 48; _table_c0030059 36; _table_c00a0001 216; _table_c0130001 88; _table_c0150001 156; DesSBox 512 2,912 0
0x84056000 0x3456000 .rdata _table_40000370 4; _table_40020056 4; _table_400200af 4; _table_80000001 156; _table_80000288 8; _table_80090300 288; _table_80092010 16; _table_80096004 4; _table_80130001 20; _table_c0000001 1644; _table_c0000202 1584; _table_c0020001 268 96 0
0x84057000 0x3457000 .rdata _table_00000102 128; _table_40000002 144; _error_table 240; HalpSpecialDismissLevelTable 64 3,520 0
0x84058000 0x3458000 .rdata _NxkExportDirectory 1552 2,544 0
0x84059000 0x3459000 .rdata No compiler extent/sizeof owner established 1,288 2,808
0x8405a000 0x345a000 .bss _KiDoubleFaultStackData 4096 0 0
0x8405b000 0x345b000 .bss _P0BootStackData 4096 0 0
0x8405c000 0x345c000 .bss _P0BootStackData 4096 0 0
0x8405d000 0x345d000 .bss _P0BootStackData 4096 0 0
0x8405e000 0x345e000 .bss _NxContigInitial.lto_priv.0 1024; _PmRestored.lto_priv.0 2048; XeRunningTitlePathA 520; KiProcessorBlock 128 376 0
0x8405f000 0x345f000 .bss _NxcBlocks.lto_priv.0 1360; NxcMutex 32; NxcLruList 8; NxcMapList 8; HalpIDTUsageFlags 256; HalpIDTUsage 512 1,920 0
0x84060000 0x3460000 .bss _NxpPageState.lto_priv.0 1344; _NxpClassMap.lto_priv.0 257; KeTickCount 12; XeEventTable 512 1,971 0
0x84061000 0x3461000 .bss _NxpPageState.lto_priv.0 2752; KiTimerTableListHead 512 832 0
0x84062000 0x3462000 .bss _XeInterruptShadows 2208; KiInitialProcess 632; KiTimerTableLock 64; KiNode0 40; IdexChannelObject 264 888 0
0x84063000 0x3463000 .bss _XeInterruptShadows 1984; _PmSelected 1568; NxkEepromImage 256 288 0
0x84064000 0x3464000 .bss _PmSelected 480; _NxpFreeLists 28; KiInitialThread 736; NxcFreeBcbs 4; XboxAlternateSignatureKeys 256; XePublicKeyData 284 1,196 1,112
0x84065000 0x3465000 PAGE No compiler extent/sizeof owner established 2,500 1,596

RAM versus ROM placement

The linked resident section flags mark 89 pages / 356 KiB readonly and 12 pages / 48 KiB writable, plus the separate header page. Readonly encompasses .text, .rdata and PAGE; it does not establish that every page is immutable at runtime. The CPU initialization patches RtlPrefetchMemoryNonTemporal, so its whole page must retain writable RAM backing or use a different proven patch strategy. The existing optional ROM prototype explicitly excludes it.

For direct ROM execution, uncompressed final linked instruction bytes must be available through executable mappings at the expected virtual addresses. A compressed BIOS payload cannot be called directly. Keeping virtual addresses stable preserves direct relative branches and published pointers only if every target remains mapped and all mutable accesses still reach RAM. Callback copies, public import thunks, interrupt/error paths, reset entry and save-state restore must be checked. Table addresses and PE/public metadata readers are also consumers, even when no function call occurs.

The previous ROM prototype (#118) returns 88 former RAM pages / 352 KiB in its own matched probe, and sampled entry backing moves from RAM to flash. That is separate older-head evidence, not an accepted reduction in current main. PGR2 encountered a guest bugcheck on Deck and a distinct host assertion in diagnostic reproduction. Moving readonly pages is therefore a substantial but unqualified mechanism; this atlas does not silently certify it.

The existing Complex observations show sampled public runtime entries backed by RAM and no post-title ROM PC entries in two bounded traces. They do not exclude rare/reset/error ROM routes, or accesses through temporary aliases. A smaller resident RAM implementation is established; runtime execution from ROM as its explanation is not.

Unobserved and removable are separate conclusions

The freshly recomputed conservative graph finds no emitted extent absent from both runtime and INIT root reachability. It deliberately treats public exports and potential asynchronous/callback entries as compatibility roots. That can over-retain bodies; it is not proof they all execute. Conversely, 199 Complex public entries were unobserved in the bounded traces, which is not proof they can be removed.

A removal or INIT placement proposal needs: current compiled-body identity; every incoming direct, public and stored-pointer route; callback publication and clearing sites; all in-flight request/return lifetimes; and an exercised reset/error path. Workload coverage is supporting evidence, never the only gate. Ten forced-resident storage roots already have a separate lifetime audit; copied class dispatch tables and channel/timer/completion callbacks prevent treating the public boot seal as a complete retirement proof.

Reproducibility and next reductions

The lab retains compile-extra-sizes.py, captured per-TU compiler commands/assembly, extra-sizeof.json, build-atlas.py, the complete page/owner JSON and CSV, and the earlier linked-image inventory. Private Complex contents are not inputs to this atlas. Evidence remains outside product main.

The next changes should target measured owners: bounded pool reuse with an actual idle/reclaim boundary; smaller persistent allocator metadata; one fully retired callback family; or a separately qualified ROM placement repair. The draft immediate-pool-trim policy recovered 100 KiB after stress but caused burst allocation churn, so it is not merged. A small object-byte reduction or unobserved symbol alone is not a recovered-page result.