{
  "started_utc": "2026-09-16T07:37:07.228522+00:00",
  "script_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\prepare_symbols.py",
  "script_sha256": "091a8e3c22818286a8db55fc08c56ff005d41e0774e761b00a76d2f98235362c",
  "sources": [
    "https://learn.microsoft.com/en-us/windows/win32/debug/using-symsrv",
    "https://learn.microsoft.com/en-us/windows/win32/debug/pe-format",
    "https://llvm.org/docs/PDB/MsfFile.html",
    "https://llvm.org/docs/PDB/PdbStream.html",
    "https://llvm.org/docs/PDB/DbiStream.html",
    "https://github.com/microsoft/microsoft-pdb/blob/master/PDB/dbi/pdb.cpp#L808-L882"
  ],
  "purpose": "Finite PDB file preparation only; no diagnostic runtime, debugger, builds, tests, or resident configuration changes",
  "mapping_method": "Recorded missing PCs queried with GetModuleHandleExW(FROM_ADDRESS|UNCHANGED_REFCOUNT) in this preparation process, then checked against exact DLL SizeOfImage",
  "mapping_scope_limit": "Original forced capture did not record module bases. These are directly observed matching system-module address ranges in the preparation process, not a module enumeration of the terminated capture process.",
  "search_path_environment": {
    "SPT_NET_DIAG_SYMBOL_DIR": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\flat"
  },
  "integration_requirement": "Append this plain local absolute directory to the explicit executable-directory DbgHelp search path before initialization. Retain exact-PDB and ignore-CodeView-path policies; do not add srv, URLs, UNC, ambient symbol paths, or capture-time downloads.",
  "modules": [
    {
      "dll_path": "C:\\Windows\\System32\\KernelBase.dll",
      "preparation_process_base": "0x7ff8ba590000",
      "recorded_pcs": [
        {
          "pc": "0x7ff8ba5ac11f",
          "rva": "0x1c11f"
        }
      ],
      "dll_sha256": "8e8499fc4750ebc487a30cd07dc7db635ba6dbe9b66f83ec695a5af70b71c07c",
      "dll_size": 4195552,
      "pe": {
        "machine": "0x8664",
        "timestamp": "0xca32cd54",
        "image_size": 4186112,
        "codeview": {
          "guid": "D218BA2F-1C9B-5E12-CC72-23574B1B6698",
          "age": 1,
          "key": "D218BA2F1C9B5E12CC7223574B1B66981",
          "name": "kernelbase.pdb",
          "embedded_path": "kernelbase.pdb"
        }
      },
      "download_url": "https://msdl.microsoft.com/download/symbols/kernelbase.pdb/D218BA2F1C9B5E12CC7223574B1B66981/kernelbase.pdb",
      "cache_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\cache\\kernelbase.pdb\\D218BA2F1C9B5E12CC7223574B1B66981\\kernelbase.pdb",
      "http_status": 200,
      "final_download_url": "https://vsblobprodscussu5shard33.blob.core.windows.net/b-4712e0edc5a240eabf23330d7df68e77/2881B7985B305C184B3F0205B3BD4551BC4CCD633315CA1504075A12BEC5B40000.blob",
      "redirect_query_omitted": true,
      "acquisition": "downloaded",
      "pdb_identity": {
        "guid": "D218BA2F-1C9B-5E12-CC72-23574B1B6698",
        "info_age": 2,
        "dbi_age": 1,
        "version": 20000404,
        "signature": 3392326996,
        "dbi_version": 19990903
      },
      "pdb_sha256": "fa6329b19b06a69258fb69e115a4a4b2b28c73a3fa86d990e9faad7ac3a67e38",
      "pdb_size": 12488704,
      "identity_match": true,
      "identity_validation": "GUID exact; DBI age exact to image CodeView; info age >= image age, per Microsoft PDB1::OpenValidate4",
      "flat_staging": "hardlink",
      "flat_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\flat\\kernelbase.pdb",
      "flat_sha256": "fa6329b19b06a69258fb69e115a4a4b2b28c73a3fa86d990e9faad7ac3a67e38",
      "status": "prepared"
    },
    {
      "dll_path": "C:\\Windows\\System32\\kernel32.dll",
      "preparation_process_base": "0x7ff8bbb10000",
      "recorded_pcs": [
        {
          "pc": "0x7ff8bbb3e957",
          "rva": "0x2e957"
        }
      ],
      "dll_sha256": "26410f4948e0ed66936880596e2b5a59efce481a7c97086049b385f00325c341",
      "dll_size": 836232,
      "pe": {
        "machine": "0x8664",
        "timestamp": "0xb7daf818",
        "image_size": 823296,
        "codeview": {
          "guid": "2554A4D7-DED5-5C1D-6F03-3011500EA781",
          "age": 1,
          "key": "2554A4D7DED55C1D6F033011500EA7811",
          "name": "kernel32.pdb",
          "embedded_path": "kernel32.pdb"
        }
      },
      "download_url": "https://msdl.microsoft.com/download/symbols/kernel32.pdb/2554A4D7DED55C1D6F033011500EA7811/kernel32.pdb",
      "cache_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\cache\\kernel32.pdb\\2554A4D7DED55C1D6F033011500EA7811\\kernel32.pdb",
      "http_status": 200,
      "final_download_url": "https://vsblobprodscussu5shard3.blob.core.windows.net/b-4712e0edc5a240eabf23330d7df68e77/0F18CF8A3790FA4D95207557F10E898FEBC0AA17A133A65FE5E05BE2D3EF7BFA00.blob",
      "redirect_query_omitted": true,
      "acquisition": "downloaded",
      "pdb_identity": {
        "guid": "2554A4D7-DED5-5C1D-6F03-3011500EA781",
        "info_age": 2,
        "dbi_age": 1,
        "version": 20000404,
        "signature": 3084580888,
        "dbi_version": 19990903
      },
      "pdb_sha256": "ce6ba1233b94e863720112238700c79931f377ab21f906810949107ea6cdda5f",
      "pdb_size": 1044480,
      "identity_match": true,
      "identity_validation": "GUID exact; DBI age exact to image CodeView; info age >= image age, per Microsoft PDB1::OpenValidate4",
      "flat_staging": "hardlink",
      "flat_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\flat\\kernel32.pdb",
      "flat_sha256": "ce6ba1233b94e863720112238700c79931f377ab21f906810949107ea6cdda5f",
      "status": "prepared"
    },
    {
      "dll_path": "C:\\Windows\\System32\\ntdll.dll",
      "preparation_process_base": "0x7ff8bd240000",
      "recorded_pcs": [
        {
          "pc": "0x7ff8bd2ead6c",
          "rva": "0xaad6c"
        },
        {
          "pc": "0x7ff8bd3a00e4",
          "rva": "0x1600e4"
        }
      ],
      "dll_sha256": "b8f3a6aaf71ddf1a0ffd43cfa058b4ea55296332ea0c1f98b69ca785b3220087",
      "dll_size": 2517928,
      "pe": {
        "machine": "0x8664",
        "timestamp": "0xba65e4a2",
        "image_size": 2514944,
        "codeview": {
          "guid": "18062223-13D4-1042-66A4-820B86925E3B",
          "age": 1,
          "key": "1806222313D4104266A4820B86925E3B1",
          "name": "ntdll.pdb",
          "embedded_path": "ntdll.pdb"
        }
      },
      "download_url": "https://msdl.microsoft.com/download/symbols/ntdll.pdb/1806222313D4104266A4820B86925E3B1/ntdll.pdb",
      "cache_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\cache\\ntdll.pdb\\1806222313D4104266A4820B86925E3B1\\ntdll.pdb",
      "http_status": 200,
      "final_download_url": "https://vsblobprodscussu5shard64.blob.core.windows.net/b-4712e0edc5a240eabf23330d7df68e77/C457CD4DA00401279F77FA5ECD093E2C30D6E7D8B525B7AF80DB5D558832E09C00.blob",
      "redirect_query_omitted": true,
      "acquisition": "downloaded",
      "pdb_identity": {
        "guid": "18062223-13D4-1042-66A4-820B86925E3B",
        "info_age": 4,
        "dbi_age": 1,
        "version": 20000404,
        "signature": 3127239842,
        "dbi_version": 19990903
      },
      "pdb_sha256": "fc9070080eed7be0124f96f09cf11942360e96aa0e47300c81d859f37c9264ca",
      "pdb_size": 1921024,
      "identity_match": true,
      "identity_validation": "GUID exact; DBI age exact to image CodeView; info age >= image age, per Microsoft PDB1::OpenValidate4",
      "flat_staging": "hardlink",
      "flat_path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\symbols\\flat\\ntdll.pdb",
      "flat_sha256": "fc9070080eed7be0124f96f09cf11942360e96aa0e47300c81d859f37c9264ca",
      "status": "prepared"
    }
  ],
  "errors": [],
  "capture_evidence": {
    "path": "C:\\Users\\decid\\Documents\\projects\\spt-core\\.spt\\preserved\\302\\todlando-windows\\forced-1\\analysis\\stacks.jsonl",
    "sha256": "9ea0af7c18ac1926bbf5f7ac63bfcf63d4806b3561db5dfc8faab5b1c75b51c8",
    "first_capture_id": "s0",
    "broker_pid": 21656,
    "worker_tids": [
      41240,
      36468
    ],
    "first_missing_pcs": [
      "0x7ff8ba5ac11f",
      "0x7ff8bbb3e957",
      "0x7ff8bd2ead6c",
      "0x7ff8bd3a00e4"
    ],
    "additional_missing_pcs_in_later_captures": []
  },
  "status": "prepared",
  "finished_utc": "2026-09-16T07:37:09.338429+00:00"
}