Findings in the M1 7850 leak

there is TaskUI.exe which is 'Modern Windows Task Manager'

and one small thing, in the EventViewer's event categories, you can see how Microsoft actually spells TWINUI, it is 'TWinUI', not 'TwinUI',
so it maybe means 'Tablet Windows UI' or 'Touch Windows UI', not really 'Twin' something.

 

You need to login to view this posts content.

 

Well, if you re running TaskUI from the normal shell, TaskUI detect that its not running in the immersive shell, so it just calls "taksmgr.exe" and quit itself.

you can start ProcessExploerer and see this behaviour in action.

 

there are WindowsProximityAPI.dll and WindowsProximityService.dll which indicates that Windows will support proximity sensors, this is currently a feature of Windows Phone or Windows Mobile.

 

there is a dll called 'mi.dll', it is 'Management Infrastructure', it should be the shiny new name of good old WMI, Windows Management Instrumentation. and there is also some related dlls like miutils.dll, wmitomi.dll ..... boring stuff

also is there msipc.dll the 'Microsoft Information Protection and Control Client', another shiny new name, for the old msdrm.dll, or Windows Rights Management Services Client. and all the RMActivate(blahblah).exe in current Windows are renamed to ipcActivate(blahblah).exe in Windows 8. boring.

 

StreamingManager.dll "Microsoft Streaming Manager", functions:

DeletePackageVersion
DestroySession
GetPackage
LoadFeature
LoadPackage
Shutdown
StagePackageVersion
Startup
UnloadPackage
UpdatePackage

why its interesting (kinda) ? because there is a driver called appxstrm.sys: Streaming Mini-Filter Driver
its a file system filtering driver, and its name starts with 'appx'.

it might be related to security, or drm, or sandboxing .... ???? I have no idea.

 

one last thing: SRH.DLL, Screen Reader Helper DLL, this includes a modern (dui) version of Windows Narrator, the screen reader for blind users.

OK, M1 is realy boring now, not much there to see I guess.

I would better wait patiently for something newer.

 

ok, one more thing, the structure of a database file: PackageRepository.edb
I dont know what it is.

Code:

Extensible Storage Engine Utilities for Microsoft(R) Windows(R)
Version 6.1
Copyright (C) Microsoft Corporation. All Rights Reserved.

Initiating FILE DUMP mode...
         Database: PackageRepository.edb

******************************* META-DATA DUMP *******************************
Name                                               Type    ObjidFDP    PgnoFDP
==============================================================================
Packa                                               Db            1          1

Dependency                                          Tbl          17         52
  DependencyKey                                     Pri          17         52
  DependentPackage_Name                             Idx          18         57
DependencyGraph                                     Tbl          19         58
  GraphKey                                          Pri          19         58
  User_Dependent_Supplier                           Idx          20         63
  User_Supplier                                     Idx          21         64
Extension                                           Tbl          22         65
  Category                                          Idx          24         71
  ExtensionKey                                      Pri          22         65
  User_PackageKey_Category_Keystring                Idx          23         70
MSysLocales                                         Tbl           9         36
  KeyPrimary                                        Pri           9         36
MSysObjects                                         Tbl           2          4
  Id                                                Pri           2          4
  Name                                              Idx           4          7
  RootObjects                                       Idx           5         10
MSysObjectsShadow                                   Tbl           3         24
  Id                                                Pri           3         24
MSysObjids                                          Tbl           6         33
  primary                                           Pri           6         33
MSysUnicodeFixupVer2                                Tbl           7         34
  primary                                           Pri           7         34
  secondary                                         Idx           8         35
Package                                             Tbl          10         37
  PackageID                                         Idx          11         42
  PackageKey                                        Pri          10         37
  PackageMoniker                                    Idx          12         43
  State                                             Idx          13         44
Visibility                                          Tbl          14         45
  PackageKey                                        Idx          15         50
  UserSID_PackageKey                                Pri          14         45
  UserSID_VisibilityState                           Idx          16         51
******************************************************************************

Operation completed successfully in 1.250 seconds.

 

You need to login to view this posts content.