Skip to content

Retail 5838 Data and Physical Atlas

Jump to bottom
Codex edited this page Oct 10, 2026 · 1 revision

Retail 5838: typed objects and complete known-page atlas

Companion: Retail-5838-BIOS-Size-and-Layout. This atlas identifies known image/page-table backing in a incomplete pre-probe boot snapshot. It does not assign unproved pool/cache/stack ownership. All remaining physical pages are retained in the private one-row-per-PFN ledger as unresolved. No reference payloads or table values are published.

1. Every currently bounded data object

The 2,194-byte union below is disjoint from the known instruction union. Names are public ABI or format names. Interface footprint does not prove a larger internal object allocation boundary. Ten OBJECT_TYPE records contain 50 callback slots, of which 28 are nonzero kernel-code roots at this snapshot; callback addresses are withheld from this table.

Object / format Virtual start Proved bytes Section Extent basis
PE export directory 0x800102c0 40 .text PE directory contract
PE export address array 0x800102e8 1464 .text PE count times entry width
PE module-name storage 0x800108a0 13 .text PE terminated field; contents withheld
PE debug directory 0x800108b0 28 .text PE advertised directory
PE debug record 0 0x80012b50 37 .text PE advertised record; contents withheld
ExEventObjectType 0x800108cc 28 .text public ABI footprint; not private allocation extent
ExMutantObjectType 0x800108e8 28 .text public ABI footprint; not private allocation extent
ExSemaphoreObjectType 0x80010914 28 .text public ABI footprint; not private allocation extent
ExTimerObjectType 0x8001093c 28 .text public ABI footprint; not private allocation extent
HalDiskCachePartitionCount 0x80012338 4 .text public ABI footprint; not private allocation extent
IoCompletionObjectType 0x80010a20 28 .text public ABI footprint; not private allocation extent
IoDeviceObjectType 0x80010a3c 28 .text public ABI footprint; not private allocation extent
IoFileObjectType 0x80010a58 28 .text public ABI footprint; not private allocation extent
MmGlobalData 0x80010cfc 32 .text public ABI footprint; not private allocation extent
KeTimeIncrement 0x80010ca8 4 .text public ABI footprint; not private allocation extent
ObDirectoryObjectType 0x80010d30 28 .text public ABI footprint; not private allocation extent
ObSymbolicLinkObjectType 0x80010d4c 28 .text public ABI footprint; not private allocation extent
PsThreadObjectType 0x80010e04 28 .text public ABI footprint; not private allocation extent
XboxKrnlVersion 0x80010a08 8 .text public ABI footprint; not private allocation extent
XePublicKeyData 0x80012698 284 .text public ABI footprint; not private allocation extent

2. Every known physical image/table page

The table contains 171 distinct pages: 153 image and 18 installed page-table pages. Image-section lists show boundary sharing. Alias counts include direct RAM views and do not indicate allocation multiplicity. Empty contents do not prove the page is free. Writable alias presence prevents assuming executable-flag sections are globally immutable.

PFN Physical start Known backing Intersecting image sections Present virtual aliases Writable aliases All zero at capture
15 0xf000 page-table backing — 2 2 False
16 0x10000 kernel image backing .text; headers 1 0 False
17 0x11000 kernel image backing .text 1 0 False
18 0x12000 kernel image backing .text 1 0 False
19 0x13000 kernel image backing .text 1 0 False
20 0x14000 kernel image backing .text 1 0 False
21 0x15000 kernel image backing .text 1 0 False
22 0x16000 kernel image backing .text 1 0 False
23 0x17000 kernel image backing .text 1 0 False
24 0x18000 kernel image backing .text 1 0 False
25 0x19000 kernel image backing .text 1 0 False
26 0x1a000 kernel image backing .text 1 0 False
27 0x1b000 kernel image backing .text 1 0 False
28 0x1c000 kernel image backing .text 1 0 False
29 0x1d000 kernel image backing .text 1 0 False
30 0x1e000 kernel image backing .text 1 0 False
31 0x1f000 kernel image backing .text 1 0 False
32 0x20000 kernel image backing .text 1 0 False
33 0x21000 kernel image backing .text 1 0 False
34 0x22000 kernel image backing .text 1 0 False
35 0x23000 kernel image backing .text 1 0 False
36 0x24000 kernel image backing .text 1 0 False
37 0x25000 kernel image backing .text 1 0 False
38 0x26000 kernel image backing .text 1 0 False
39 0x27000 kernel image backing .text 1 0 False
40 0x28000 kernel image backing .text 1 0 False
41 0x29000 kernel image backing .text 1 0 False
42 0x2a000 kernel image backing .text 1 0 False
43 0x2b000 kernel image backing .text 1 0 False
44 0x2c000 kernel image backing .text 1 0 False
45 0x2d000 kernel image backing .text 1 0 False
46 0x2e000 kernel image backing .text 1 0 False
47 0x2f000 kernel image backing .text 1 0 False
48 0x30000 kernel image backing .text 1 0 False
49 0x31000 kernel image backing .text 1 0 False
50 0x32000 kernel image backing .text 1 0 False
51 0x33000 kernel image backing .text 1 0 False
52 0x34000 kernel image backing .text 1 0 False
53 0x35000 kernel image backing .text 1 0 False
54 0x36000 kernel image backing .data; .text; IDEXPRDT 1 1 False
55 0x37000 kernel image backing .data 1 1 False
56 0x38000 kernel image backing .data 1 1 True
57 0x39000 kernel image backing .data 1 1 True
58 0x3a000 kernel image backing .data 1 1 False
59 0x3b000 kernel image backing .data; STICKY 1 1 False
60 0x3c000 kernel image backing INIT; STICKY 1 1 False
61 0x3d000 kernel image backing INIT 1 1 False
62 0x3e000 kernel image backing INIT 1 1 False
63 0x3f000 kernel image backing INIT 1 1 False
64 0x40000 kernel image backing INIT 1 1 False
65 0x41000 kernel image backing INIT 1 1 False
66 0x42000 kernel image backing INIT 1 1 False
67 0x43000 kernel image backing INIT 1 1 False
68 0x44000 kernel image backing INIT 1 1 False
69 0x45000 kernel image backing INIT 1 1 False
70 0x46000 kernel image backing INIT 1 1 False
71 0x47000 kernel image backing INIT 1 1 False
72 0x48000 kernel image backing INIT 1 1 False
73 0x49000 kernel image backing INIT 1 1 False
74 0x4a000 kernel image backing INIT 1 1 False
75 0x4b000 kernel image backing INIT 1 1 True
76 0x4c000 kernel image backing INIT 1 1 False
77 0x4d000 kernel image backing INIT 1 1 False
78 0x4e000 kernel image backing INIT 1 1 False
79 0x4f000 kernel image backing INIT 1 1 False
80 0x50000 kernel image backing INIT 1 1 False
81 0x51000 kernel image backing INIT 1 1 False
82 0x52000 kernel image backing INIT 1 1 False
83 0x53000 kernel image backing INIT 1 1 False
84 0x54000 kernel image backing INIT 1 1 False
85 0x55000 kernel image backing INIT 1 1 False
86 0x56000 kernel image backing INIT 1 1 False
87 0x57000 kernel image backing INIT 1 1 False
88 0x58000 kernel image backing INIT 1 1 False
89 0x59000 kernel image backing INIT 1 1 False
90 0x5a000 kernel image backing INIT 1 1 False
91 0x5b000 kernel image backing INIT 1 1 False
92 0x5c000 kernel image backing INIT 1 1 False
93 0x5d000 kernel image backing INIT 1 1 False
94 0x5e000 kernel image backing INIT 1 1 False
95 0x5f000 kernel image backing INIT 1 1 False
96 0x60000 kernel image backing INIT 1 1 False
97 0x61000 kernel image backing INIT 1 1 False
98 0x62000 kernel image backing INIT 1 1 False
99 0x63000 kernel image backing INIT 1 1 False
100 0x64000 kernel image backing INIT 1 1 False
101 0x65000 kernel image backing INIT 1 1 False
102 0x66000 kernel image backing INIT 1 1 False
103 0x67000 kernel image backing INIT 1 1 False
104 0x68000 kernel image backing INIT 1 1 False
105 0x69000 kernel image backing INIT 1 1 False
106 0x6a000 kernel image backing INIT 1 1 False
107 0x6b000 kernel image backing INIT 1 1 False
108 0x6c000 kernel image backing INIT 1 1 False
109 0x6d000 kernel image backing INIT 1 1 False
110 0x6e000 kernel image backing INIT 1 1 False
111 0x6f000 kernel image backing INIT 1 1 False
112 0x70000 kernel image backing INIT 1 1 False
113 0x71000 kernel image backing INIT 1 1 False
114 0x72000 kernel image backing INIT 1 1 False
115 0x73000 kernel image backing INIT 1 1 False
116 0x74000 kernel image backing INIT 1 1 False
117 0x75000 kernel image backing INIT 1 1 False
118 0x76000 kernel image backing INIT 1 1 False
119 0x77000 kernel image backing INIT 1 1 False
120 0x78000 kernel image backing INIT 1 1 False
121 0x79000 kernel image backing INIT 1 1 True
122 0x7a000 kernel image backing INIT 1 1 True
123 0x7b000 kernel image backing INIT 1 1 True
124 0x7c000 kernel image backing INIT 1 1 True
125 0x7d000 kernel image backing INIT 1 1 True
126 0x7e000 kernel image backing INIT 1 1 True
127 0x7f000 kernel image backing INIT 1 1 True
128 0x80000 kernel image backing INIT 1 1 True
129 0x81000 kernel image backing INIT 1 1 True
130 0x82000 kernel image backing INIT 1 1 True
131 0x83000 kernel image backing INIT 1 1 True
132 0x84000 kernel image backing INIT 1 1 True
133 0x85000 kernel image backing INIT 1 1 True
134 0x86000 kernel image backing INIT 1 1 True
135 0x87000 kernel image backing INIT 1 1 True
136 0x88000 kernel image backing INIT 1 1 True
137 0x89000 kernel image backing INIT 1 1 True
138 0x8a000 kernel image backing INIT 1 1 True
139 0x8b000 kernel image backing INIT 1 1 True
140 0x8c000 kernel image backing INIT 1 1 True
141 0x8d000 kernel image backing INIT 1 1 True
142 0x8e000 kernel image backing INIT 1 1 True
143 0x8f000 kernel image backing INIT 1 1 True
144 0x90000 kernel image backing INIT 1 1 True
145 0x91000 kernel image backing INIT 1 1 True
146 0x92000 kernel image backing INIT 1 1 True
147 0x93000 kernel image backing INIT 1 1 True
148 0x94000 kernel image backing INIT 1 1 True
149 0x95000 kernel image backing INIT 1 1 True
150 0x96000 kernel image backing INIT 1 1 True
151 0x97000 kernel image backing INIT 1 1 True
152 0x98000 kernel image backing INIT 1 1 True
153 0x99000 kernel image backing INIT 1 1 True
154 0x9a000 kernel image backing INIT 1 1 True
155 0x9b000 kernel image backing INIT 1 1 True
156 0x9c000 kernel image backing INIT 1 1 True
157 0x9d000 kernel image backing INIT 1 1 True
158 0x9e000 kernel image backing INIT 1 1 True
159 0x9f000 kernel image backing INIT 1 1 True
160 0xa0000 kernel image backing INIT 1 1 True
161 0xa1000 kernel image backing INIT 1 1 True
162 0xa2000 kernel image backing INIT 1 1 True
163 0xa3000 kernel image backing INIT 1 1 True
164 0xa4000 kernel image backing INIT 1 1 True
165 0xa5000 kernel image backing INIT 1 1 True
166 0xa6000 kernel image backing INIT 1 1 True
167 0xa7000 kernel image backing INIT 1 1 False
168 0xa8000 kernel image backing INIT 1 1 False
192 0xc0000 page-table backing — 1 1 False
16368 0x3ff0000 page-table backing — 2 2 False
16369 0x3ff1000 page-table backing — 2 2 False
16370 0x3ff2000 page-table backing — 2 2 False
16371 0x3ff3000 page-table backing — 2 2 False
16372 0x3ff4000 page-table backing — 2 2 False
16373 0x3ff5000 page-table backing — 2 2 False
16374 0x3ff6000 page-table backing — 2 2 False
16375 0x3ff7000 page-table backing — 2 2 False
16376 0x3ff8000 page-table backing — 2 2 False
16377 0x3ff9000 page-table backing — 2 2 False
16378 0x3ffa000 page-table backing — 2 2 False
16379 0x3ffb000 page-table backing — 2 2 False
16380 0x3ffc000 page-table backing — 2 2 False
16381 0x3ffd000 page-table backing — 2 2 False
16382 0x3ffe000 page-table backing — 2 2 False
16383 0x3fff000 page-table backing — 2 2 False

3. Every unresolved RAM interval

The following compressed intervals cover every unresolved PFN. The end is excluded; ranges are disjoint and sum to 16,213 pages. They are not asserted free, dead or firmware-owned. A settled public probe plus actual allocator/stack/callback ownership is required to subdivide them.

Physical start Physical end Pages
0x0 0xf000 15
0xa9000 0xc0000 23
0xc1000 0x3ff0000 16175

Source baseline: SpiritBoot 27149596, Roswell 1569e2e8 plus ordered patches. See Clean-Room-and-Validation for evidence boundaries and Export-Index for complete export coverage.

SpiritBoot reference

Internal contracts

BIOS sizes and layouts

Resident memory research

Retail 5838 and current main sizing update — 2026-10-10

Memory removal workbook and kernel overhaul

Clone this wiki locally