PDB Symbols - Startupscan.dll (0xE2590F0FECC14D513C4B291B09E89E4490B9DD7C5F6F4B97A2D1ADA428E41411)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\Startupscan.dll Base=0x180000000 SHA-256=E2590F0FECC14D513C4B291B09E89E4490B9DD7C5F6F4B97A2D1ADA428E41411
PDB: Startupscan.pdb GUID={70DA24FE-FBB4-884D-EB48F0D3254325D7} Age=1

275 located named symbols:
0x1800066B8: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x180003734: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800041F8: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180001DA0: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x1800043C8: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x180003910: "__cdecl FindPESection" _FindPESection
0x1800041A8: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x180005440: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180005378: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x18000665C: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x180006020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180004040: "unsigned short const * __ptr64 * g_StartupApp_Extensions" ?g_StartupApp_Extensions@@3PAPEBGA
0x180004C58: "TotalStartupEntries" ??_C@_1CI@CAKJDLNC@?$AAT?$AAo?$AAt?$AAa?$AAl?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAE?$AAn?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x18000322C: "__cdecl CRT_INIT" _CRT_INIT
0x180004288: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001160: "unsigned long __cdecl SusRunOEMTaskOffline(struct _SYSPREP_OS_OFFLINE * __ptr64)" ?SusRunOEMTaskOffline@@YAKPEAU_SYSPREP_OS_OFFLINE@@@Z
0x180001080: WppControlCallback
0x180003BB0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180002940: "long __cdecl SuspRunStartupAppTask(struct _SYSPREP_OS_OFFLINE * __ptr64,enum StartupScanFlags)" ?SuspRunStartupAppTask@@YAJPEAU_SYSPREP_OS_OFFLINE@@W4StartupScanFlags@@@Z
0x180001704: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180004B70: "" ??_C@_00CNPNBAHC@?$AA@
0x1800043D8: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x180004228: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x180004B88: ".exe" ??_C@_19DOGDICKI@?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x1800042E0: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x1800053C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x180004210: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180004368: "__cdecl _imp_wcschr" __imp_wcschr
0x180004810: "%APPDATA%\Microsoft\Windows\Star" ??_C@_1HA@EMNECJJP@?$AA?$CF?$AAA?$AAP?$AAP?$AAD?$AAA?$AAT?$AAA?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAS?$AAt?$AAa?$AAr@
0x1800043F0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18000664C: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x1800045B0: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180004240: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180004230: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1800038F3: "__cdecl XcptFilter" _XcptFilter
0x1800043F8: "__cdecl _xc_a" __xc_a
0x180004378: "__cdecl _imp_wcsstr" __imp_wcsstr
0x180006660: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800044E0: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x1800041F0: "__cdecl _imp_FindClose" __imp_FindClose
0x180004620: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x180004960: "APPDATA" ??_C@_1BA@EOPDFCEA@?$AAA?$AAP?$AAP?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1800011C0: "unsigned long __cdecl SusRunOEMTaskOnline(int)" ?SusRunOEMTaskOnline@@YAKH@Z
0x180004B98: ".pif" ??_C@_19NAAHMDDH@?$AA?4?$AAp?$AAi?$AAf?$AA?$AA@
0x1800066C0: g_pfnResultLoggingCallback
0x180004AD0: "Software\Microsoft\Windows\Curre" ??_C@_1IG@NEHIEKHE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800044F8: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x1800027BC: "long __cdecl SuspRaiseNotification(enum _SUS_NOTIFICATION)" ?SuspRaiseNotification@@YAJW4_SUS_NOTIFICATION@@@Z
0x180004370: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180004278: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x1800066A0: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x1800044B0: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1800043A0: "__cdecl _imp_memset" __imp_memset
0x180003ACF: "__cdecl initterm" _initterm
0x1800053F0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800066E8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180004310: "__cdecl _imp_Sleep" __imp_Sleep
0x180004420: "__cdecl _xi_z" __xi_z
0x180006654: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180004A20: "Software\Microsoft\Windows\Curre" ??_C@_1HA@JGFCEHPN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800041C0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180006668: g_pfnThrowPlatformException
0x180004490: WPP_39e8560d084e3570bac7e65a998fd540_Traceguids
0x1800065F8: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x180001220: "long __cdecl SusResetNotification(void)" ?SusResetNotification@@YAJXZ
0x1800043C0: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x180003ADB: "__cdecl _C_specific_handler" __C_specific_handler
0x180004618: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x1800066B1: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x1800016B8: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x1800065F0: WPP_REGISTRATION_GUIDS
0x1800042D8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x180003B2C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180006670: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x1800065C8: WPP_MAIN_CB
0x180004BE8: "Run" ??_C@_17NMIMIGP@?$AAR?$AAu?$AAn?$AA?$AA@
0x1800042C8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x1800038FF: "__cdecl amsg_exit" _amsg_exit
0x180004640: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1FM@KNABEEEB@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800041B0: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x180004790: "%PROGRAMDATA%\Microsoft\Windows\" ??_C@_1HI@JOBIHCPE@?$AA?$CF?$AAP?$AAR?$AAO?$AAG?$AAR?$AAA?$AAM?$AAD?$AAA?$AAT?$AAA?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x180002D2C: "long __cdecl SuspUtilsMarkAsOEM(unsigned short * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,enum _SUS_STARTUP_TYPE,int)" ?SuspUtilsMarkAsOEM@@YAJPEAGPEAUHKEY__@@PEBGW4_SUS_STARTUP_TYPE@@H@Z
0x180004BC8: ".bat" ??_C@_19PINKOIBI@?$AA?4?$AAb?$AAa?$AAt?$AA?$AA@
0x180004250: "__cdecl _imp_PathCchStripToRoot" __imp_PathCchStripToRoot
0x1800018B0: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x180004880: "Wow6432Node" ??_C@_1BI@OFGMIEIL@?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?$AA@
0x180001110: "void __cdecl SusRunTask(struct HWND__ * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short const * __ptr64,int)" ?SusRunTask@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEBGH@Z
0x180006658: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x1800016D4: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x180001C94: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x180004720: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1GK@FMBODHD@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800042E8: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180004990: "%APPDATA" ??_C@_1BC@HMOPAPIP@?$AA?$CF?$AAA?$AAP?$AAP?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x1800041D8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800049A8: "ProgramData" ??_C@_1BI@PCFBINBH@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x180004280: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800066D8: "__cdecl _native_startup_lock" __native_startup_lock
0x180001280: DllMain
0x1800066A8: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x180006648: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x180004360: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x180006600: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x180004388: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800042F8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180004238: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800041C8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180006010: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180003B08: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800043B8: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180005300: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x180004898: "SOFTWARE" ??_C@_1BC@JDKNNDON@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?$AA@
0x180004290: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003108: "public: long __cdecl StartupDB::StartupApproval::Initialize(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long) __ptr64" ?Initialize@StartupApproval@StartupDB@@QEAAJPEAUHKEY__@@PEBG1K@Z
0x1800039C0: "__cdecl ValidateImageBase" _ValidateImageBase
0x180004C80: "OEMStartupEntries" ??_C@_1CE@LGGBBCCI@?$AAO?$AAE?$AAM?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAE?$AAn?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x1800018C0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x180004548: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x180005314: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x180001384: WPP_SF_
0x180004A00: "%APPDATA%" ??_C@_1BE@LLEILKPG@?$AA?$CF?$AAA?$AAP?$AAP?$AAD?$AAA?$AAT?$AAA?$AA?$CF?$AA?$AA@
0x180006650: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x180003470: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004340: "__cdecl _imp__initterm" __imp__initterm
0x180005350: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180004320: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x1800053A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-path-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-path-l1-1-0
0x18000538C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x180004180: SHLWAPI_NULL_THUNK_DATA
0x1800066C8: "__cdecl _onexitend" __onexitend
0x1800043E8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800041E0: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x180004298: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800041A0: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x180004338: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180004410: "__cdecl _xi_a" __xi_a
0x180004328: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x1800041B8: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180004188: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x180004BA8: ".lnk" ??_C@_19BEHMAPDG@?$AA?4?$AAl?$AAn?$AAk?$AA?$AA@
0x180004C28: "UnSeenStartupEntries" ??_C@_1CK@DENADFIH@?$AAU?$AAn?$AAS?$AAe?$AAe?$AAn?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAE?$AAn?$AAt?$AAr?$AAi?$AAe?$AAs?$AA?$AA@
0x180006000: WPP_GLOBAL_Control
0x180004CA4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18000533C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180004970: "%PROGRAMDATA%" ??_C@_1BM@EFAIFGND@?$AA?$CF?$AAP?$AAR?$AAO?$AAG?$AAR?$AAA?$AAM?$AAD?$AAA?$AAT?$AAA?$AA?$CF?$AA?$AA@
0x180001044: WPP_SF_D
0x1800066F0: "__cdecl pRawDllMain" _pRawDllMain
0x1800065C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUxkohUsvzogsxvmgviUhgzigfkhxzmUwooUlyquivUznwGEUhgzigfkhxzmkOlyq@Startupscan" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUxkohUsvzogsxvmgviUhgzigfkhxzmUwooUlyquivUznwGEUhgzigfkhxzmkOlyq@Startupscan
0x1800031E4: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180003710: "__cdecl _security_check_cookie" __security_check_cookie
0x180004408: "__cdecl _xc_z" __xc_z
0x180005404: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x1800042A0: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180004220: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180006030: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x180004330: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004BD8: "Run32" ??_C@_1M@FJKHEEHP@?$AAR?$AAu?$AAn?$AA3?$AA2?$AA?$AA@
0x180004208: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x1800043B0: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x1800066B0: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x180002294: "long __cdecl SuspCountFolderStartupApps(struct _SYSPREP_OS_OFFLINE * __ptr64,enum StartupScanFlags,struct _SUS_COUNTS * __ptr64)" ?SuspCountFolderStartupApps@@YAJPEAU_SYSPREP_OS_OFFLINE@@W4StartupScanFlags@@PEAU_SUS_COUNTS@@@Z
0x180003BD0: "__cdecl _chkstk" __chkstk
0x1800041E8: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x180001434: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x180004480: POLID_EnableAllStartupApplications
0x180004308: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x180006690: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x180004260: "__cdecl _imp_PathCchCombine" __imp_PathCchCombine
0x180005418: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180002124: "long __cdecl ExpandOfflineFolderPath(unsigned short * __ptr64,unsigned long,unsigned short * __ptr64,unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64)" ?ExpandOfflineFolderPath@@YAJPEAGK00PEBG0@Z
0x180001E30: "long __cdecl SuspCountRegKeyPathStartupApps(struct _SUS_COUNTS * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,enum StartupScanFlags)" ?SuspCountRegKeyPathStartupApps@@YAJPEAU_SUS_COUNTS@@PEAUHKEY__@@PEBG2W4StartupScanFlags@@@Z
0x1800042B0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180004428: "__cdecl _guard_fids_table" __guard_fids_table
0x1800043A8: msvcrt_NULL_THUNK_DATA
0x180004070: "__cdecl load_config_used" _load_config_used
0x180004BF0: "StartupFolder" ??_C@_1BM@MKPCFFBA@?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAF?$AAo?$AAl?$AAd?$AAe?$AAr?$AA?$AA@
0x1800053B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x180004398: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180001860: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x180001BF8: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x180004300: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800042A8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800043D0: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x1800038E7: free
0x1800042F0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003AF0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180004270: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180004248: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x18000169C: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x180004508: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x180001730: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x1800048B0: "Microsoft\Windows\CurrentVersion" ??_C@_1HE@IBBGMIAC@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn@
0x180001E20: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x180004218: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x180004190: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x1800045F0: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x180004348: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800043E0: ntdll_NULL_THUNK_DATA
0x180004BB8: ".cmd" ??_C@_19BDKLHPGC@?$AA?4?$AAc?$AAm?$AAd?$AA?$AA@
0x1800044D0: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x1800045A0: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x180004530: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x180006018: "__cdecl _security_cookie" __security_cookie
0x180003BD0: "__cdecl alloca_probe" _alloca_probe
0x180001944: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x180004608: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x180002FEC: "public: long __cdecl StartupDB::StartupApproval::GetBlockedItemInfo(unsigned short const * __ptr64,struct StartupDB::BLOCKEDITEMINFO * __ptr64) __ptr64" ?GetBlockedItemInfo@StartupApproval@StartupDB@@QEAAJPEBGPEAUBLOCKEDITEMINFO@2@@Z
0x180004200: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180004B78: WPP_9a6447a92aa036fcf5a8cc7fdab515a9_Traceguids
0x180005364: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180004198: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x180004258: "__cdecl _imp_PathCchAppend" __imp_PathCchAppend
0x180004A14: "\*" ??_C@_15PKPONJIK@?$AA?2?$AA?$CK?$AA?$AA@
0x1800042C0: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x1800066D0: "__cdecl _onexitbegin" __onexitbegin
0x180004178: "__cdecl _imp_SHWindowsPolicy" __imp_SHWindowsPolicy
0x180001920: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x180004380: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1800041D0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x1800049C0: "Users\Default\AppData\Roaming" ??_C@_1DM@OMEKIEKJ@?$AAU?$AAs?$AAe?$AAr?$AAs?$AA?2?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?2?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAR?$AAo?$AAa?$AAm?$AAi?$AAn?$AAg?$AA?$AA@
0x1800042B8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x1800039F4: "__cdecl _security_init_cookie" __security_init_cookie
0x180006678: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x1800042D0: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x1800052EC: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180004928: "shell\cpls\healthcenter\startups" ??_C@_0DF@MBKCJLJB@shell?2cpls?2healthcenter?2startups@
0x180001DE4: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x180004350: "__cdecl _imp_malloc" __imp_malloc
0x1800045C8: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x180006680: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x180003770: "__cdecl _report_gsfailure" __report_gsfailure
0x180002EBC: "unsigned long __cdecl SuspUtilsSetTestValues(unsigned long,unsigned long,unsigned long)" ?SuspUtilsSetTestValues@@YAKKKK@Z
0x1800066E0: "__cdecl _native_startup_state" __native_startup_state
0x180006644: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x180004A90: "EnableStartupAppNotification" ??_C@_1DK@KGNPKAOH@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAA?$AAp?$AAp?$AAN?$AAo?$AAt?$AAi?$AAf?$AAi?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800016F0: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x180004268: api-ms-win-core-path-l1-1-0_NULL_THUNK_DATA
0x180004568: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x1800013B0: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x180004C10: "TestMode" ??_C@_1BC@ICKMDDC@?$AAT?$AAe?$AAs?$AAt?$AAM?$AAo?$AAd?$AAe?$AA?$AA@
0x180006688: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x1800044A0: WPP_ThisDir_CTLGUID_StartupScanGuid
0x18000542C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180006640: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x180004358: "__cdecl _imp_free" __imp_free
0x180003960: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180004318: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180004390: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x1800044EC: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x180005328: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x1800053DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180006698: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x1800046A0: "SOFTWARE\Wow6432Node\Microsoft\W" ??_C@_1HE@JFBOOPFO@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAW?$AAo?$AAw?$AA6?$AA4?$AA3?$AA2?$AAN?$AAo?$AAd?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
0x180003B96: memset
0x180005454: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180002BE0: "long __cdecl SuspUtilsCheckFlags(unsigned long * __ptr64,unsigned short * __ptr64,struct HKEY__ * __ptr64,unsigned short const * __ptr64,enum _SUS_STARTUP_TYPE,int)" ?SuspUtilsCheckFlags@@YAJPEAKPEAGPEAUHKEY__@@PEBGW4_SUS_STARTUP_TYPE@@H@Z

[JEB Decompiler by PNF Software]