Generated by JEB on 2019/08/01

PE: C:\Windows\System32\runonce.exe Base=0x140000000 SHA-256=E4AFEF687BCEFB9A581299FB35946C869C6D0E000966E688589A48907C352432
PDB: runonce.pdb GUID={F2FD1F7A-DD59-231B-F352FB9E5B6423F1} Age=1

677 located named symbols:
0x14000A4F8: "__cdecl _imp_EventSetInformation" __imp_EventSetInformation
0x14000F7A0: "bool (__cdecl* __ptr64 wil::g_pfnIsDebuggerPresent)(void)" ?g_pfnIsDebuggerPresent@wil@@3P6A_NXZEA
0x14000A6E8: "__cdecl _imp_DialogBoxParamW" __imp_DialogBoxParamW
0x140008C04: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000B018: "SetupFlags" ??_C@_1BG@OALGFCIE@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?$AA@
0x14000A848: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x14000A4F0: "__cdecl _imp_EventRegister" __imp_EventRegister
0x140003084: "void __cdecl wil::details::ReportFailure_Hr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long)" ?ReportFailure_Hr@details@wil@@YAXPEAXIPEBD110W4FailureType@2@J@Z
0x14000A720: "__cdecl _imp_MsgWaitForMultipleObjectsEx" __imp_MsgWaitForMultipleObjectsEx
0x140008EF0: "__cdecl FindPESection" _FindPESection
0x14000B408: "h" ??_C@_13CACJPPAP@?$AAh?$AA?$AA@
0x14000A7F8: "__cdecl _imp_OutputDebugStringW" __imp_OutputDebugStringW
0x140001D60: StringCchCatW
0x140002474: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x14000A990: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x14000CB54: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x14000C988: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140008EE0: "__cdecl wsetargv" _wsetargv
0x140005D84: "int __cdecl _ExecuteOldEqualsLineWorker(unsigned short * __ptr64,int,struct IUnknown * __ptr64)" ?_ExecuteOldEqualsLineWorker@@YAHPEAGHPEAUIUnknown@@@Z
0x14000F840: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x14000F070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140007250: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::Release`adjustor{8}' (void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@W7EAAKXZ
0x14000B7F0: "Load" ??_C@_19OGNEHOBL@?$AAL?$AAo?$AAa?$AAd?$AA?$AA@
0x14000A820: "__cdecl _imp_RaiseException" __imp_RaiseException
0x14000AB98: "__cdecl _imp___wgetmainargs" __imp___wgetmainargs
0x14000ABC0: "__cdecl _imp_CoInitialize" __imp_CoInitialize
0x14000A540: "__cdecl _imp_CreateFontIndirectW" __imp_CreateFontIndirectW
0x14000A8F0: "__cdecl _imp_GetProcessId" __imp_GetProcessId
0x1400077D8: "private: virtual __cdecl CExecuteRunAppFilter::~CExecuteRunAppFilter(void) __ptr64" ??1CExecuteRunAppFilter@@EEAA@XZ
0x1400087F6: CloseHandle
0x14000A570: "__cdecl _imp_SetBkColor" __imp_SetBkColor
0x14000A900: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14000328C: "void __cdecl wil::details::in1diag3::_FailFast_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?_FailFast_GetLastError@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x140007E20: "[thunk]:public: virtual unsigned long __cdecl CExecuteRunAppFilter::Release`adjustor{8}' (void) __ptr64" ?Release@CExecuteRunAppFilter@@W7EAAKXZ
0x140009218: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x14000AA88: api-ms-win-core-winrt-string-l1-1-0_NULL_THUNK_DATA
0x140009320: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14000A650: SHELL32_NULL_THUNK_DATA
0x14000668C: "long __cdecl ProcessPackagedStartupTask(struct IUnknown * __ptr64,struct Windows::ApplicationModel::Internal::IStartupTaskInternal * __ptr64)" ?ProcessPackagedStartupTask@@YAJPEAUIUnknown@@PEAUIStartupTaskInternal@Internal@ApplicationModel@Windows@@@Z
0x14000ADA0: Explorer_ProcessRunOnce_Stop
0x14000BA70: "__cdecl GUID_00000000_0000_0000_c000_000000000046" _GUID_00000000_0000_0000_c000_000000000046
0x140006CA0: "long __cdecl WaitForCompletion<struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64> >(struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64> * __ptr64,enum tagCOWAIT_FLAGS,void * __ptr64)" ??$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z
0x14000A140: "const CExecuteRunAppFilter::`vftable'{for `ICreatedProcess'}" ??_7CExecuteRunAppFilter@@6BICreatedProcess@@@
0x14000ADB0: ShellTraceId_Explorer_ExecutingFromRunKeyAsJob_Stop
0x14000655C: ProcessRun32On64
0x140005990: "public: virtual long __cdecl Microsoft::WRL::FtmBase::ReleaseMarshalData(struct IStream * __ptr64) __ptr64" ?ReleaseMarshalData@FtmBase@WRL@Microsoft@@UEAAJPEAUIStream@@@Z
0x14000F048: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> wil::details::g_processLocalData" ?g_processLocalData@details@wil@@3V?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@details_abi@2@A
0x140002924: "void __cdecl wil::details::WilRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x14000A4D8: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x14000B21E: "" ??_C@_00CNPNBAHC@?$AA@
0x14000AE30: ShellTraceId_Explorer_ExecutingFromRunKeyAsJob_Start
0x14000F760: "__cdecl commode" _commode
0x14000BE90: "__cdecl GUID_000214e6_0000_0000_c000_000000000046" _GUID_000214e6_0000_0000_c000_000000000046
0x14000A898: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x14000A210: "const CStartupTracker::`vftable'{for `IServiceProvider'}" ??_7CStartupTracker@@6BIServiceProvider@@@
0x14000B420: "Local\SM0:%d:%d:%hs" ??_C@_1CI@EOLMILME@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAS?$AAM?$AA0?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAd?$AA?3?$AA?$CF?$AAh?$AAs?$AA?$AA@
0x14000F920: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> wil::details::g_threadFailureCallbacks" ?g_threadFailureCallbacks@details@wil@@3V?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@A
0x14000A4D0: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x14000CB40: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x14000F0C0: c_szSetup
0x14000A9C0: "__cdecl _imp_SetEvent" __imp_SetEvent
0x14000B770: "explorer.exe" ??_C@_0N@DGECLGHJ@explorer?4exe?$AA@
0x14000ABC8: ole32_NULL_THUNK_DATA
0x14000A5A8: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140008DC0: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000ABD8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x14000F8BC: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x14000B338: "Msg:[%ws] " ??_C@_1BG@MCLOHHAM@?$AAM?$AAs?$AAg?$AA?3?$AA?$FL?$AA?$CF?$AAw?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x14000F76C: "__cdecl fmode" _fmode
0x14000A8B8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000BA60: "__cdecl GUID_00000003_0000_0000_c000_000000000046" _GUID_00000003_0000_0000_c000_000000000046
0x140003640: "public: __cdecl wil::details_abi::ThreadLocalData::~ThreadLocalData(void) __ptr64" ??1ThreadLocalData@details_abi@wil@@QEAA@XZ
0x14000A890: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1400020F8: wWinMain
0x14000F788: g_cxSmIcon
0x14000AA70: "__cdecl _imp_WindowsGetStringRawBuffer" __imp_WindowsGetStringRawBuffer
0x14000AAA8: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x14000A7A8: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x140008E1E: "__cdecl XcptFilter" _XcptFilter
0x14000ABE0: "__cdecl _xc_a" __xc_a
0x14000A600: "__cdecl _imp_CreateProcessW" __imp_CreateProcessW
0x14000F800: "void (__cdecl* __ptr64 wil::details::g_pfnOriginateCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnOriginateCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x14000B268: "ReturnHr" ??_C@_08KFPKLAKH@ReturnHr?$AA@
0x14000807C: "private: unsigned long __cdecl CStartupTracker::_ReadSetting(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned long) __ptr64" ?_ReadSetting@CStartupTracker@@AEAAKPEAUHKEY__@@PEBGKK@Z
0x14000CAF0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-string-l1-1-0
0x14000A920: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x1400038B8: "public: static bool __cdecl wil::details::ThreadFailureCallbackHolder::GetThreadContext(struct wil::FailureInfo * __ptr64,class wil::details::ThreadFailureCallbackHolder * __ptr64,char * __ptr64,unsigned __int64)" ?GetThreadContext@ThreadFailureCallbackHolder@details@wil@@SA_NPEAUFailureInfo@3@PEAV123@PEAD_K@Z
0x14000B3A8: "RaiseFailFastException" ??_C@_0BH@EEDPADAA@RaiseFailFastException?$AA@
0x14000AE00: Explorer_ProcessRunOnce_Start
0x140001E04: StringCchCopyW
0x1400042A0: "unsigned char * __ptr64 __cdecl wil::details::WriteResultString<char const * __ptr64>(unsigned char * __ptr64,unsigned char * __ptr64,char const * __ptr64,char const * __ptr64 * __ptr64)" ??$WriteResultString@PEBD@details@wil@@YAPEAEPEAE0PEBDPEAPEBD@Z
0x14000AA80: "__cdecl _imp_WindowsCreateStringReference" __imp_WindowsCreateStringReference
0x14000BBC8: ".etl" ??_C@_19DEKJANFJ@?$AA?4?$AAe?$AAt?$AAl?$AA?$AA@
0x14000A528: COMCTL32_NULL_THUNK_DATA
0x140007E30: "[thunk]:public: virtual unsigned long __cdecl CExecuteRunAppFilter::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CExecuteRunAppFilter@@W7EAAKXZ
0x14000A868: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140009189: "__cdecl lock" _lock
0x140008640: "[thunk]:private: virtual void * __ptr64 __cdecl CStartupTracker::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECStartupTracker@@GBA@EAAPEAXI@Z
0x14000F7B8: g_pfnResultLoggingCallback
0x14000BCA0: "Software\Microsoft\Windows\Curre" ??_C@_1IG@NEHIEKHE@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000B280: "FailFast" ??_C@_08IAOKKAJK@FailFast?$AA@
0x14000926F: "__cdecl callnewh" _callnewh
0x14000A840: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x140007740: "public: virtual unsigned long __cdecl CStartupTracker::AddRef(void) __ptr64" ?AddRef@CStartupTracker@@UEAAKXZ
0x14000AD48: "__cdecl _guard_iat_table" __guard_iat_table
0x140005290: IUnknown_SetStartupDB
0x14000BD30: "Software\Microsoft\Windows\Curre" ??_C@_1HK@PLJNJPDC@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000581C: "void __cdecl Microsoft::WRL::Details::RaiseException(long,unsigned long)" ?RaiseException@Details@WRL@Microsoft@@YAXJK@Z
0x1400091B6: GetLastError
0x14000F7D0: "bool wil::details::g_resultMessageCallbackSet" ?g_resultMessageCallbackSet@details@wil@@3_NA
0x14000A748: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x14000A8A8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x1400036D8: "public: void __cdecl wil::details_abi::ThreadLocalData::SetLastError(struct wil::FailureInfo const & __ptr64) __ptr64" ?SetLastError@ThreadLocalData@details_abi@wil@@QEAAXAEBUFailureInfo@3@@Z
0x14000A4E8: "__cdecl _imp_EventWriteTransfer" __imp_EventWriteTransfer
0x14000B238: "kernelbase.dll" ??_C@_1BO@MFOKJHPK@?$AAk?$AAe?$AAr?$AAn?$AAe?$AAl?$AAb?$AAa?$AAs?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140007690: "public: virtual long __cdecl CObjectWithSite::SetSite(struct IUnknown * __ptr64) __ptr64" ?SetSite@CObjectWithSite@@UEAAJPEAUIUnknown@@@Z
0x14000AB10: "__cdecl _imp_memset" __imp_memset
0x14000A5F8: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x14000A9F0: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x14000B4E0: "ShellDesktopSwitchEvent" ??_C@_1DA@JNJPEACF@?$AAS?$AAh?$AAe?$AAl?$AAl?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AAS?$AAw?$AAi?$AAt?$AAc?$AAh?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
0x14000A9D0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x1400090AF: "__cdecl initterm" _initterm
0x14000CA14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x14000F990: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140003B04: ?create@?$semaphore_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@QEAAJJJPEBGKPEAU_SECURITY_ATTRIBUTES@@@Z
0x14000AA18: "__cdecl _imp_Sleep" __imp_Sleep
0x14000A798: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x14000AC30: "__cdecl _xi_z" __xi_z
0x14000F8B0: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x14000A518: "__cdecl _imp_DPA_Create" __imp_DPA_Create
0x140008540: "public: virtual long __cdecl CStartupTracker::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CStartupTracker@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000AA78: "__cdecl _imp_WindowsDeleteString" __imp_WindowsDeleteString
0x14000A818: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000F7F8: g_pfnThrowPlatformException
0x14000A698: "__cdecl _imp_IUnknown_Set" __imp_IUnknown_Set
0x14000344C: "public: void __cdecl wil::details_abi::ThreadLocalFailureInfo::Set(struct wil::FailureInfo const & __ptr64,unsigned int) __ptr64" ?Set@ThreadLocalFailureInfo@details_abi@wil@@QEAAXAEBUFailureInfo@3@I@Z
0x14000F8B4: "long volatile `void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)'::`2'::s_failureId" ?s_failureId@?1??LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@3@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@3@@Z@4JC
0x1400090BB: "__cdecl _C_specific_handler" __C_specific_handler
0x140007EFC: "private: __cdecl CStartupTracker::CStartupTracker(void) __ptr64" ??0CStartupTracker@@AEAA@XZ
0x14000A5A0: "__cdecl _imp_lstrlenW" __imp_lstrlenW
0x1400070D0: "public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000A550: "__cdecl _imp_GetTextExtentPointW" __imp_GetTextExtentPointW
0x14000B520: "__cdecl GUID_087471a8_0058_4321_9dd3_8289cf523f81" _GUID_087471a8_0058_4321_9dd3_8289cf523f81
0x14000BC58: "__cdecl GUID_000214e4_0000_0000_c000_000000000046" _GUID_000214e4_0000_0000_c000_000000000046
0x14000B3A0: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x14000A9F8: "__cdecl _imp_CreateSemaphoreExW" __imp_CreateSemaphoreExW
0x14000AA60: "__cdecl _imp_RoGetActivationFactory" __imp_RoGetActivationFactory
0x14000F7B0: "bool wil::g_fIsDebuggerPresent" ?g_fIsDebuggerPresent@wil@@3_NA
0x1400028D4: "int __cdecl wil::details::RecordReturn(long)" ?RecordReturn@details@wil@@YAHJ@Z
0x14000AB20: "__cdecl _imp__onexit" __imp__onexit
0x140004CE0: "unsigned long __cdecl _JobObjectWaitingThreadProc(void * __ptr64)" ?_JobObjectWaitingThreadProc@@YAKPEAX@Z
0x140008338: "private: long __cdecl CStartupTracker::_GetProcessStatistics(void * __ptr64,struct CStartupTracker::PROCESS_STATISTICS * __ptr64) __ptr64" ?_GetProcessStatistics@CStartupTracker@@AEAAJPEAXPEAUPROCESS_STATISTICS@1@@Z
0x14000A850: "__cdecl _imp_HeapFree" __imp_HeapFree
0x14000AFA8: Microsoft_Windows_Shell_CoreLevels
0x14000B3C0: "RtlDllShutdownInProgress" ??_C@_0BJ@FLFGNKIC@RtlDllShutdownInProgress?$AA@
0x1400045D4: SHEnumRegApps
0x1400059C0: "public: virtual long __cdecl Microsoft::WRL::FtmBase::DisconnectObject(unsigned long) __ptr64" ?DisconnectObject@FtmBase@WRL@Microsoft@@UEAAJK@Z
0x140009263: malloc
0x14000B158: "RunOnceEx6432" ??_C@_1BM@KJKNHDCH@?$AAR?$AAu?$AAn?$AAO?$AAn?$AAc?$AAe?$AAE?$AAx?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x14000B0B8: "RunOnceExProcess" ??_C@_0BB@FLGKJEAM@RunOnceExProcess?$AA@
0x14000A560: "__cdecl _imp_CreateCompatibleDC" __imp_CreateCompatibleDC
0x14000B078: c_szTimeChangedRunOnce
0x14000A4C8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000A718: "__cdecl _imp_PeekMessageW" __imp_PeekMessageW
0x1400092A0: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140004D28: "long __cdecl _ShellExecuteRegAppWithJobObject(unsigned short const * __ptr64,enum RRA_FLAGS,struct IUnknown * __ptr64)" ?_ShellExecuteRegAppWithJobObject@@YAJPEBGW4RRA_FLAGS@@PEAUIUnknown@@@Z
0x14000B3DC: "wil" ??_C@_03KGBNGMMC@wil?$AA@
0x14000F810: "void (__cdecl* __ptr64 wil::details::g_pfnThrowResultException)(struct wil::FailureInfo const & __ptr64)" ?g_pfnThrowResultException@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x14000B678: "rundll32.exe" ??_C@_1BK@GLCOODMC@?$AAr?$AAu?$AAn?$AAd?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000A9A0: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x14000B878: "Run" ??_C@_17NMIMIGP@?$AAR?$AAu?$AAn?$AA?$AA@
0x1400077A0: "private: virtual void * __ptr64 __cdecl CExecuteRunAppFilter::`vector deleting destructor'(unsigned int) __ptr64" ??_ECExecuteRunAppFilter@@EEAAPEAXI@Z
0x14000A5D8: "__cdecl _imp_GetPrivateProfileIntW" __imp_GetPrivateProfileIntW
0x140008ED3: "__cdecl amsg_exit" _amsg_exit
0x14000AB00: "__cdecl _imp__callnewh" __imp__callnewh
0x14000A5B8: "__cdecl _imp_ExitProcess" __imp_ExitProcess
0x14000A6A8: "__cdecl _imp_QISearch" __imp_QISearch
0x14000A5B0: "__cdecl _imp_SetInformationJobObject" __imp_SetInformationJobObject
0x14000A7F0: "__cdecl _imp_DebugBreak" __imp_DebugBreak
0x140007948: "long __cdecl _ThunkICIX(struct _CMINVOKECOMMANDINFOEX * __ptr64,void * __ptr64 * __ptr64)" ?_ThunkICIX@@YAJPEAU_CMINVOKECOMMANDINFOEX@@PEAPEAX@Z
0x14000732C: "int __cdecl _SHKeyHasSubkeys(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int)" ?_SHKeyHasSubkeys@@YAHPEAUHKEY__@@PEBGH@Z
0x140003DA0: "public: void __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Release(void) __ptr64" ?Release@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAXXZ
0x14000F9B0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUlhhsvooUifmlmxvUlyquivUznwGEUkivxlnkOlyq@runonce" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUlhhsvooUifmlmxvUlyquivUznwGEUkivxlnkOlyq@runonce
0x14000ADC0: ShellTraceId_Explorer_ExecutingPackagedStartupApp_Start
0x14000AE40: ShellTraceId_Explorer_ExecutingFromRunKey_Stop
0x14000AA08: "__cdecl _imp_ReleaseSemaphore" __imp_ReleaseSemaphore
0x14000AD60: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x14000A640: "__cdecl _imp_SHParseDisplayName" __imp_SHParseDisplayName
0x14000AB88: "__cdecl _imp_exit" __imp_exit
0x140002AD0: "void __cdecl wil::details::DebugBreak(void)" ?DebugBreak@details@wil@@YAXXZ
0x14000BA40: "__cdecl GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90" _GUID_af86e2e0_b12d_4c6a_9c5a_d7aa65101e90
0x14000AB38: "__cdecl _imp__lock" __imp__lock
0x140007E30: "[thunk]:public: virtual unsigned long __cdecl CStartupTracker::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@CStartupTracker@@W7EAAKXZ
0x14000A580: GDI32_NULL_THUNK_DATA
0x14000A998: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x14000915C: atexit
0x14000B988: "shell\lib\runonce\runonce.cpp" ??_C@_0BO@BPABJIMJ@shell?2lib?2runonce?2runonce?4cpp?$AA@
0x14000F808: "bool wil::details::g_processShutdownInProgress" ?g_processShutdownInProgress@details@wil@@3_NA
0x14000F8AC: "long volatile `int __cdecl wil::details::RecordException(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordException@details@wil@@YAHJ@Z@4JC
0x14000BE88: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x1400028F0: "int __cdecl wil::details::RecordLog(long)" ?RecordLog@details@wil@@YAHJ@Z
0x14000A7C8: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x14000A6B0: "__cdecl _imp_IUnknown_SetSite" __imp_IUnknown_SetSite
0x140002F78: "void __cdecl wil::details::ReportFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,enum wil::details::ReportFailureOptions)" ?ReportFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBGW4ReportFailureOptions@12@@Z
0x14000AB58: "__cdecl _imp__wcmdln" __imp__wcmdln
0x14000F7A8: "class wil::details_abi::ProcessLocalStorage<struct wil::details_abi::ProcessLocalData> * __ptr64 __ptr64 wil::details_abi::g_pProcessLocalData" ?g_pProcessLocalData@details_abi@wil@@3PEAV?$ProcessLocalStorage@UProcessLocalData@details_abi@wil@@@12@EA
0x14000ADF0: ShellTraceId_Explorer_Startup_SerializationWait_Start
0x14000A968: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x14000A110: "const CExecuteRunAppFilter::`vftable'{for `CObjectWithSite'}" ??_7CExecuteRunAppFilter@@6BCObjectWithSite@@@
0x14000A1B0: "const CStartupTracker::`vftable'{for `CObjectWithSite'}" ??_7CStartupTracker@@6BCObjectWithSite@@@
0x14000A838: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x14000B960: "/Run6432" ??_C@_1BC@GPCNEJAC@?$AA?1?$AAR?$AAu?$AAn?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x14000A6A0: "__cdecl _imp_SHUnicodeToAnsi" __imp_SHUnicodeToAnsi
0x14000AE10: ShellTraceId_Explorer_EnumeratingRunKey_Start
0x14000A778: "__cdecl _imp_ReleaseDC" __imp_ReleaseDC
0x14000A918: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1400091A1: "__cdecl _dllonexit" __dllonexit
0x140008680: SHCreateProcessWithArgs
0x140003F34: "public: void * __ptr64 __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@QEAAPEAXI@Z
0x14000F980: "__cdecl _native_startup_lock" __native_startup_lock
0x14000BE78: IID_ICreatedProcess
0x14000B068: "Setup" ??_C@_1M@OAMLNNNM@?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x1400078F0: "public: virtual long __cdecl CExecuteRunAppFilter::QueryService(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryService@CExecuteRunAppFilter@@UEAAJAEBU_GUID@@0PEAPEAX@Z
0x14000F830: "bool (__cdecl* __ptr64 wil::g_pfnWilFailFast)(struct wil::FailureInfo const & __ptr64)" ?g_pfnWilFailFast@wil@@3P6A_NAEBUFailureInfo@1@@ZEA
0x14000F8A8: "long volatile `int __cdecl wil::details::RecordLog(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordLog@details@wil@@YAHJ@Z@4JC
0x14000F184: "private: static long volatile wil::details::ThreadFailureCallbackHolder::s_telemetryId" ?s_telemetryId@ThreadFailureCallbackHolder@details@wil@@0JC
0x14000A6E0: "__cdecl _imp_EndDialog" __imp_EndDialog
0x140008E00: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000CA8C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x14000F860: "char * `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_szModule" ?s_szModule@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4PADA
0x14000CB04: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x14000AB60: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000A578: "__cdecl _imp_ExtTextOutW" __imp_ExtTextOutW
0x14000A8F8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x14000A978: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000A8B0: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140006FE0: "private: virtual void * __ptr64 __cdecl `long __cdecl WaitForCompletion<struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64> >(struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64> * __ptr64,enum tagCOWAIT_FLAGS,void * __ptr64)'::`2'::FTMEventDelegate::`scalar deleting destructor'(unsigned int) __ptr64" ??_GFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@EEAAPEAXI@Z
0x14000AA68: api-ms-win-core-winrt-l1-1-0_NULL_THUNK_DATA
0x14000B8F4: "?" ??_C@_13HGPDMIBE@?$AA?$DP?$AA?$AA@
0x14000CAC8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-provider-l1-1-0
0x14000A7A0: "__cdecl _imp_GetMenuDefaultItem" __imp_GetMenuDefaultItem
0x14000A608: KERNEL32_NULL_THUNK_DATA
0x14000AA48: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x14000F914: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUifmlmxvUlyquivUznwGEUkivxlnkOlyq@runonce" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUifmlmxvUlyquivUznwGEUkivxlnkOlyq@runonce
0x140005368: McTemplateU0qz
0x140005840: "public: virtual long __cdecl Microsoft::WRL::FtmBase::GetUnmarshalClass(struct _GUID const & __ptr64,void * __ptr64,unsigned long,void * __ptr64,unsigned long,struct _GUID * __ptr64) __ptr64" ?GetUnmarshalClass@FtmBase@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAXK1KPEAU4@@Z
0x14000A828: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140009224: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x14000AAC0: api-ms-win-eventing-provider-l1-1-0_NULL_THUNK_DATA
0x14000927C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x14000AA00: "__cdecl _imp_OpenSemaphoreW" __imp_OpenSemaphoreW
0x14000A618: "__cdecl _imp_SHCreateDirectory" __imp_SHCreateDirectory
0x14000F9A8: g_SizeTextExt
0x140008670: "[thunk]:public: virtual long __cdecl CStartupTracker::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CStartupTracker@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x14000A730: "__cdecl _imp_DrawTextW" __imp_DrawTextW
0x14000AB48: "__cdecl _imp__commode" __imp__commode
0x14000C974: "__cdecl _IMPORT_DESCRIPTOR_SHLWAPI" __IMPORT_DESCRIPTOR_SHLWAPI
0x1400077A0: "private: virtual void * __ptr64 __cdecl CExecuteRunAppFilter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCExecuteRunAppFilter@@EEAAPEAXI@Z
0x14000AB70: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14000B5F8: "(null)" ??_C@_1O@CEDCILHN@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
0x14000C8E8: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x14000B510: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x14000BBA0: "RunStuffHasBeenRun" ??_C@_1CG@OHIHMJDI@?$AAR?$AAu?$AAn?$AAS?$AAt?$AAu?$AAf?$AAf?$AAH?$AAa?$AAs?$AAB?$AAe?$AAe?$AAn?$AAR?$AAu?$AAn?$AA?$AA@
0x14000A8E0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000A9E8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x140001238: RunOnceFill
0x14000A728: "__cdecl _imp_LoadBitmapW" __imp_LoadBitmapW
0x140008BB0: wWinMainCRTStartup
0x14000A4C0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x14000B030: "MSBATCH.INF" ??_C@_1BI@ELFAMNOO@?$AAM?$AAS?$AAB?$AAA?$AAT?$AAC?$AAH?$AA?4?$AAI?$AAN?$AAF?$AA?$AA@
0x140008FA0: "__cdecl ValidateImageBase" _ValidateImageBase
0x140007060: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::Release(void) __ptr64" ?Release@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@UEAAKXZ
0x1400080E0: "public: virtual long __cdecl CStartupTracker::SetStartupDB(struct HKEY__ * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetStartupDB@CStartupTracker@@UEAAJPEAUHKEY__@@PEBG@Z
0x140008650: "[thunk]:public: virtual long __cdecl CStartupTracker::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CStartupTracker@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x1400091D0: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x14000B9B0: "Software\Microsoft\Windows\Curre" ??_C@_1IA@NMAOIEH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000ADD0: ShellTraceId_Explorer_Startup_SerializationWait_Stop
0x140001E04: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x14000F7C8: "class wil::details_abi::ThreadLocalStorage<class wil::details::ThreadFailureCallbackHolder * __ptr64> * __ptr64 __ptr64 wil::details::g_pThreadFailureCallbacks" ?g_pThreadFailureCallbacks@details@wil@@3PEAV?$ThreadLocalStorage@PEAVThreadFailureCallbackHolder@details@wil@@@details_abi@2@EA
0x14000A908: "__cdecl _imp_TerminateThread" __imp_TerminateThread
0x14000AE20: ShellTraceId_Explorer_ExecutingFromRunKey_Start
0x14000AD90: ShellTraceId_Explorer_EnumeratingRunKey_Stop
0x14000AE50: ShellTraceId_Explorer_ExecutingPackagedStartupApp_Stop
0x140002AE0: "void __cdecl wil::details::WilDynamicLoadRaiseFailFastException(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?WilDynamicLoadRaiseFailFastException@details@wil@@YAXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@Z
0x14000B530: "TSAppCMP.DLL" ??_C@_1BK@FGPPACNH@?$AAT?$AAS?$AAA?$AAp?$AAp?$AAC?$AAM?$AAP?$AA?4?$AAD?$AAL?$AAL?$AA?$AA@
0x14000B2D0: "(caller: %p) " ??_C@_1BM@EAHLIJPA@?$AA?$CI?$AAc?$AAa?$AAl?$AAl?$AAe?$AAr?$AA?3?$AA?5?$AA?$CF?$AAp?$AA?$CJ?$AA?5?$AA?$AA@
0x14000C9EC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140006C88: ProcessPerUserRunOnce
0x14000A738: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x14000A6D8: "__cdecl _imp_GetDlgItem" __imp_GetDlgItem
0x14000B6E0: "%SystemRoot%\SysWOW64" ??_C@_1CM@FNAPCOAA@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAW?$AAO?$AAW?$AA6?$AA4?$AA?$AA@
0x140008660: "[thunk]:public: virtual unsigned long __cdecl CStartupTracker::Release`adjustor{8}' (void) __ptr64" ?Release@CStartupTracker@@W7EAAKXZ
0x140007270: HasRunStuffBeenDone
0x14000A6F0: "__cdecl _imp_DestroyMenu" __imp_DestroyMenu
0x14000BA50: "__cdecl GUID_00000036_0000_0000_c000_000000000046" _GUID_00000036_0000_0000_c000_000000000046
0x14000A858: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14000CB68: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x14000B400: "_p0" ??_C@_17ONNCDEJM@?$AA_?$AAp?$AA0?$AA?$AA@
0x14000F8B8: "long volatile `int __cdecl wil::details::RecordReturn(long)'::`2'::s_cErrorCount" ?s_cErrorCount@?1??RecordReturn@details@wil@@YAHJ@Z@4JC
0x14000A930: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x140001EE0: ParseCmdLine
0x14000F768: "__cdecl newmode" _newmode
0x14000A9B8: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x14000A8D0: "__cdecl _imp_PathCchAddExtension" __imp_PathCchAddExtension
0x14000AB68: "__cdecl _imp__initterm" __imp__initterm
0x14000AB90: "__cdecl _imp___set_app_type" __imp___set_app_type
0x14000CA78: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x14000A9D8: "__cdecl _imp_CreateMutexExW" __imp_CreateMutexExW
0x14000A6F8: "__cdecl _imp_LoadCursorW" __imp_LoadCursorW
0x14000A810: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000F000: Microsoft_Windows_Shell_Core_Provider_Context
0x14000F838: "unsigned char (__cdecl* __ptr64 `unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)'::`2'::s_pfnRtlDllShutdownInProgress)(void)" ?s_pfnRtlDllShutdownInProgress@?1??RtlDllShutdownInProgress@details@wil@@YAEXZ@4P6AEXZEA
0x140007DD0: "[thunk]:private: virtual void * __ptr64 __cdecl CExecuteRunAppFilter::`vector deleting destructor'`adjustor{16}' (unsigned int) __ptr64" ??_ECExecuteRunAppFilter@@GBA@EAAPEAXI@Z
0x14000F9A0: g_dwThread
0x14000AA30: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x14000CAB4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-path-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-path-l1-1-0
0x140007830: "public: virtual long __cdecl CExecuteRunAppFilter::OnCreated(struct ICreateProcessOutputs * __ptr64) __ptr64" ?OnCreated@CExecuteRunAppFilter@@UEAAJPEAUICreateProcessOutputs@@@Z
0x14000CA50: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x140001E8C: "__cdecl DoRunOnceEx" _DoRunOnceEx
0x14000A690: "__cdecl _imp_ShellMessageBoxW" __imp_ShellMessageBoxW
0x14000BBD8: "ExplorerStartupLog" ??_C@_1CG@EIAOODAL@?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAL?$AAo?$AAg?$AA?$AA@
0x140005F84: ProcessOldRunAndLoadEquals
0x14000A6C8: SHLWAPI_NULL_THUNK_DATA
0x140006FE0: "private: virtual void * __ptr64 __cdecl `long __cdecl WaitForCompletion<struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64> >(struct Windows::Foundation::IAsyncOperation<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64> * __ptr64,enum tagCOWAIT_FLAGS,void * __ptr64)'::`2'::FTMEventDelegate::`vector deleting destructor'(unsigned int) __ptr64" ??_EFTMEventDelegate@?1???$WaitForCompletion@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@U?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@23@@@YAJPEAU?$IAsyncOperation@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@W4tagCOWAIT_FLAGS@@PEAX@Z@EEAAPEAXI@Z
0x14000F970: "__cdecl _onexitend" __onexitend
0x14000A5D0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x14000AB80: "__cdecl _imp__exit" __imp__exit
0x140009195: "__cdecl unlock" _unlock
0x14000ABD0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000A9B0: "__cdecl _imp_IsCharAlphaNumericW" __imp_IsCharAlphaNumericW
0x14000A688: "__cdecl _imp_StrCmpICW" __imp_StrCmpICW
0x14000A910: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000A628: "__cdecl _imp_SHRestricted" __imp_SHRestricted
0x14000A7B8: USER32_NULL_THUNK_DATA
0x14000F998: g_hInst
0x14000A668: "__cdecl _imp_SHGetValueW" __imp_SHGetValueW
0x1400010D4: CreateGlobals
0x14000F770: g_hbrBkGnd
0x14000ABB0: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x14000B008: "\Setup" ??_C@_1O@EHFLDIME@?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x14000A800: "__cdecl _imp_IsDebuggerPresent" __imp_IsDebuggerPresent
0x14000A7D8: "__cdecl _imp_CoGetApartmentType" __imp_CoGetApartmentType
0x14000AA50: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x14000AC18: "__cdecl _xi_a" __xi_a
0x14000A938: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x14000AA38: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14000A808: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x14000F84C: "unsigned int volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`2'::lastThread" ?lastThread@?1??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4IC
0x140008EE0: "__cdecl matherr" _matherr
0x14000AB30: "__cdecl _imp__unlock" __imp__unlock
0x140004AE0: "int __cdecl _DoTermsrvAppStuff(unsigned short const * __ptr64,enum RRA_FLAGS * __ptr64)" ?_DoTermsrvAppStuff@@YAHPEBGPEAW4RRA_FLAGS@@@Z
0x14000AA58: "__cdecl _imp_RoActivateInstance" __imp_RoActivateInstance
0x140007DE0: "[thunk]:public: virtual unsigned long __cdecl CExecuteRunAppFilter::Release`adjustor{16}' (void) __ptr64" ?Release@CExecuteRunAppFilter@@WBA@EAAKXZ
0x14000747C: "long __cdecl StartLogging(struct _TRACE_INFO const * __ptr64,unsigned short const * __ptr64)" ?StartLogging@@YAJPEBU_TRACE_INFO@@PEBG@Z
0x14000A6C0: "__cdecl _imp_PathQuoteSpacesW" __imp_PathQuoteSpacesW
0x14000A180: "const CObjectWithSite::`vftable'" ??_7CObjectWithSite@@6B@
0x14000A7D0: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x14000A740: "__cdecl _imp_ExitWindowsEx" __imp_ExitWindowsEx
0x140007740: "public: virtual unsigned long __cdecl CExecuteRunAppFilter::AddRef(void) __ptr64" ?AddRef@CExecuteRunAppFilter@@UEAAKXZ
0x14000B590: "RunDLL32.EXE Shell32.DLL,ShellEx" ??_C@_1GG@MLDMIJCJ@?$AAR?$AAu?$AAn?$AAD?$AAL?$AAL?$AA3?$AA2?$AA?4?$AAE?$AAX?$AAE?$AA?5?$AAS?$AAh?$AAe?$AAl?$AAl?$AA3?$AA2?$AA?4?$AAD?$AAL?$AAL?$AA?0?$AAS?$AAh?$AAe?$AAl?$AAl?$AAE?$AAx@
0x14000A030: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::`vftable'{for `Microsoft::WRL::Details::ImplementsHelper<struct Microsoft::WRL::RuntimeClassFlags<2>,1,struct Microsoft::WRL::Details::ImplementsMarker<class Microsoft::WRL::FtmBase> >'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@6B?$ImplementsHelper@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00U?$ImplementsMarker@VFtmBase@WRL@Microsoft@@@Details@23@@Details@12@@
0x14000B6A0: "iernonce.dll,RunOnceExProcess" ??_C@_1DM@OJLJDOCL@?$AAi?$AAe?$AAr?$AAn?$AAo?$AAn?$AAc?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?0?$AAR?$AAu?$AAn?$AAO?$AAn?$AAc?$AAe?$AAE?$AAx?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x140001A50: ShrinkToFit
0x14000BA80: "__cdecl GUID_94ea2b94_e9cc_49e0_c0ff_ee64ca8f5b90" _GUID_94ea2b94_e9cc_49e0_c0ff_ee64ca8f5b90
0x1400023D8: McGenEventWrite
0x1400076E0: "public: virtual void * __ptr64 __cdecl CObjectWithSite::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCObjectWithSite@@UEAAPEAXI@Z
0x14000859C: StartupTracker_CreateInstance
0x14000C9B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x14000CB18: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x14000BC78: "__cdecl GUID_6d5140c1_7436_11ce_8034_00aa006009fa" _GUID_6d5140c1_7436_11ce_8034_00aa006009fa
0x1400058A0: "public: virtual long __cdecl Microsoft::WRL::FtmBase::GetMarshalSizeMax(struct _GUID const & __ptr64,void * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64) __ptr64" ?GetMarshalSizeMax@FtmBase@WRL@Microsoft@@UEAAJAEBU_GUID@@PEAXK1KPEAK@Z
0x14000BE10: "SteadyTimeNeededInMSec" ??_C@_1CO@BCEIPGPE@?$AAS?$AAt?$AAe?$AAa?$AAd?$AAy?$AAT?$AAi?$AAm?$AAe?$AAN?$AAe?$AAe?$AAd?$AAe?$AAd?$AAI?$AAn?$AAM?$AAS?$AAe?$AAc?$AA?$AA@
0x14000F900: Microsoft_Windows_Shell_CoreEnableBits
0x14000A638: "__cdecl _imp_SHEvaluateSystemCommandTemplate" __imp_SHEvaluateSystemCommandTemplate
0x14000AB28: "__cdecl _imp___dllonexit" __imp___dllonexit
0x14000A770: "__cdecl _imp_GetWindowRect" __imp_GetWindowRect
0x140003300: "private: static long __cdecl wil::details_abi::SemaphoreValue::GetValueFromSemaphore(void * __ptr64,long * __ptr64)" ?GetValueFromSemaphore@SemaphoreValue@details_abi@wil@@CAJPEAXPEAJ@Z
0x14000C94C: "__cdecl _IMPORT_DESCRIPTOR_COMCTL32" __IMPORT_DESCRIPTOR_COMCTL32
0x1400091C4: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x140001B70: dlgProcRunOnce
0x14000A678: "__cdecl _imp_IUnknown_QueryService" __imp_IUnknown_QueryService
0x14000CA3C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x14000A680: "__cdecl _imp_IsOS" __imp_IsOS
0x140008BE0: "__cdecl _security_check_cookie" __security_check_cookie
0x14000AC10: "__cdecl _xc_z" __xc_z
0x14000A878: "__cdecl _imp_GetQueuedCompletionStatus" __imp_GetQueuedCompletionStatus
0x140003180: "long __cdecl wil::details::ReportFailure_GetLastErrorHr(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastErrorHr@details@wil@@YAJPEAXIPEBD110W4FailureType@2@@Z
0x14000A928: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x14000A5C0: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x14000F190: g_header_init_WilInitialize_ResultMacros_DesktopOrSystem
0x14000AB40: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000A758: "__cdecl _imp_GetWindowTextW" __imp_GetWindowTextW
0x14000A880: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x14000AA40: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140002B40: "unsigned char __cdecl wil::details::RtlDllShutdownInProgress(void)" ?RtlDllShutdownInProgress@details@wil@@YAEXZ
0x14000B978: "Run32" ??_C@_1M@FJKHEEHP@?$AAR?$AAu?$AAn?$AA3?$AA2?$AA?$AA@
0x140008630: "[thunk]:public: virtual unsigned long __cdecl CStartupTracker::Release`adjustor{16}' (void) __ptr64" ?Release@CStartupTracker@@WBA@EAAKXZ
0x14000A588: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x14000F7C0: "bool wil::g_fBreakOnFailure" ?g_fBreakOnFailure@wil@@3_NA
0x14000F098: szFallback
0x14000A7C0: "__cdecl _imp_CoWaitForMultipleHandles" __imp_CoWaitForMultipleHandles
0x14000BB00: "__cdecl GUID_104ba70f_4eed_4a8e_a5b5_cf4a5b86c218" _GUID_104ba70f_4eed_4a8e_a5b5_cf4a5b86c218
0x140006B74: ProcessRun
0x14000A860: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x14000A780: "__cdecl _imp_GetDC" __imp_GetDC
0x14000A6D0: "__cdecl _imp_SetWindowPos" __imp_SetWindowPos
0x140009340: "__cdecl _chkstk" __chkstk
0x14000B568: "RunDLL32.EXE" ??_C@_1BK@OKJGAIGL@?$AAR?$AAu?$AAn?$AAD?$AAL?$AAL?$AA3?$AA2?$AA?4?$AAE?$AAX?$AAE?$AA?$AA@
0x14000A0C8: "const Microsoft::WRL::FtmBase::`vftable'" ??_7FtmBase@WRL@Microsoft@@6B@
0x14000A750: "__cdecl _imp_GetParent" __imp_GetParent
0x140007E70: "private: virtual void * __ptr64 __cdecl CStartupTracker::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCStartupTracker@@EEAAPEAXI@Z
0x14000BB80: "__cdecl GUID_9a3392ce_bb67_4d5d_a130_59b6ca9ee5a3" _GUID_9a3392ce_bb67_4d5d_a130_59b6ca9ee5a3
0x1400083F0: "public: virtual long __cdecl CStartupTracker::WaitForSteadyState(void * __ptr64) __ptr64" ?WaitForSteadyState@CStartupTracker@@UEAAJPEAX@Z
0x140002650: "long __cdecl wil::GetFailureLogString(unsigned short * __ptr64,unsigned __int64,struct wil::FailureInfo const & __ptr64)" ?GetFailureLogString@wil@@YAJPEAG_KAEBUFailureInfo@1@@Z
0x14000AD50: POLID_EnableAllStartupApplications
0x14000F780: g_hfont
0x1400076B0: "public: virtual long __cdecl CObjectWithSite::GetSite(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?GetSite@CObjectWithSite@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000BDB0: "ProcessCPUPercentMax" ??_C@_1CK@FJGBIGCC@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAC?$AAP?$AAU?$AAP?$AAe?$AAr?$AAc?$AAe?$AAn?$AAt?$AAM?$AAa?$AAx?$AA?$AA@
0x14000A660: "__cdecl _imp_SHExpandEnvironmentStringsW" __imp_SHExpandEnvironmentStringsW
0x1400032AC: "void __cdecl wil::details::in1diag3::FailFast_Unexpected(void * __ptr64,unsigned int,char const * __ptr64)" ?FailFast_Unexpected@in1diag3@details@wil@@YAXPEAXIPEBD@Z
0x14000A8A0: "__cdecl _imp_GetModuleHandleA" __imp_GetModuleHandleA
0x14000A988: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x14000A648: "__cdecl _imp_SHBindToParent" __imp_SHBindToParent
0x14000F8C0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUhglxpUlyquivUznwGEUhglxpOlyq@stock" __@@_PchSym_@00@KxulyqvxgPillgKxuhsvooUoryUhglxpUlyquivUznwGEUhglxpOlyq@stock
0x14000F7E0: "void (__cdecl* __ptr64 wil::details::g_pfnLoggingCallback)(struct wil::FailureInfo const & __ptr64)" ?g_pfnLoggingCallback@details@wil@@3P6AXAEBUFailureInfo@2@@ZEA
0x140007260: "[thunk]:public: virtual long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x14000A598: "__cdecl _imp_CreateJobObjectW" __imp_CreateJobObjectW
0x14000AA98: "__cdecl _imp_StopTraceW" __imp_StopTraceW
0x14000C9C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x14000A948: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x14000B750: "/RunOnce6432" ??_C@_1BK@ONCJKNIB@?$AA?1?$AAR?$AAu?$AAn?$AAO?$AAn?$AAc?$AAe?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x14000AC38: "__cdecl _guard_fids_table" __guard_fids_table
0x140005400: "unsigned long __cdecl SHProcessMessagesUntilEventsEx(struct HWND__ * __ptr64,void * __ptr64 * __ptr64,unsigned long,unsigned long,unsigned long,unsigned long)" ?SHProcessMessagesUntilEventsEx@@YAKPEAUHWND__@@PEAPEAXKKKK@Z
0x14000AE60: Microsoft_Windows_Shell_CoreKeywords
0x14000ABA0: msvcrt_NULL_THUNK_DATA
0x14000A590: "__cdecl _imp_AssignProcessToJobObject" __imp_AssignProcessToJobObject
0x14000A3B0: "__cdecl load_config_used" _load_config_used
0x14000A160: "const CExecuteRunAppFilter::`vftable'{for `IServiceProvider'}" ??_7CExecuteRunAppFilter@@6BIServiceProvider@@@
0x14000A9C8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x14000A610: "__cdecl _imp_ILFree" __imp_ILFree
0x1400039C0: "void __cdecl wil::details::GetContextAndNotifyFailure(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?GetContextAndNotifyFailure@details@wil@@YAXPEAUFailureInfo@2@PEAD_K@Z
0x1400078D0: "public: virtual long __cdecl CExecuteRunAppFilter::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CExecuteRunAppFilter@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x14000A710: "__cdecl _imp_PostQuitMessage" __imp_PostQuitMessage
0x140002270: McGenEventUnregister
0x1400076E0: "public: virtual void * __ptr64 __cdecl CObjectWithSite::`vector deleting destructor'(unsigned int) __ptr64" ??_ECObjectWithSite@@UEAAPEAXI@Z
0x1400073DC: "int __cdecl _SHKeyHasValues(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int)" ?_SHKeyHasValues@@YAHPEAUHKEY__@@PEBGH@Z
0x140006450: "int __cdecl _RunStartupGroup(struct STARTUPGROUP const * __ptr64,int,struct IUnknown * __ptr64)" ?_RunStartupGroup@@YAHPEBUSTARTUPGROUP@@HPEAUIUnknown@@@Z
0x14000326C: "long __cdecl wil::details::in1diag3::Return_GetLastError(void * __ptr64,unsigned int,char const * __ptr64)" ?Return_GetLastError@in1diag3@details@wil@@YAJPEAXIPEBD@Z
0x14000A5E0: "__cdecl _imp_SetTermsrvAppInstallMode" __imp_SetTermsrvAppInstallMode
0x14000B730: "/RunOnceEx6432" ??_C@_1BO@EFFFPFEG@?$AA?1?$AAR?$AAu?$AAn?$AAO?$AAn?$AAc?$AAe?$AAE?$AAx?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x14000F850: "long volatile `void __cdecl wil::SetLastError(struct wil::FailureInfo const & __ptr64)'::`5'::depth" ?depth@?4??SetLastError@wil@@YAXAEBUFailureInfo@2@@Z@4JC
0x14000CAA0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x140004C30: ExecuteRegAppEnumProc
0x140001834: "__cdecl HandleLBDrawItem" _HandleLBDrawItem
0x14000C924: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x14000AAE8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140005960: "public: virtual long __cdecl Microsoft::WRL::FtmBase::UnmarshalInterface(struct IStream * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?UnmarshalInterface@FtmBase@WRL@Microsoft@@UEAAJPEAUIStream@@AEBU_GUID@@PEAPEAX@Z
0x14000ABA8: "__cdecl _imp_NtQueryInformationProcess" __imp_NtQueryInformationProcess
0x140005C20: ProcessRunOnce
0x14000A510: "__cdecl _imp_DPA_Destroy" __imp_DPA_Destroy
0x140007E00: "[thunk]:public: virtual long __cdecl CExecuteRunAppFilter::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CExecuteRunAppFilter@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x140002A80: "char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)" ?GetCurrentModuleName@details@wil@@YAPEBDXZ
0x14000A760: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x14000254C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14000B0D0: "RunOnce6432" ??_C@_1BI@ODDLDPLI@?$AAR?$AAu?$AAn?$AAO?$AAn?$AAc?$AAe?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x140002EDC: "void __cdecl wil::details::WilFailFast(struct wil::FailureInfo const & __ptr64)" ?WilFailFast@details@wil@@YAXAEBUFailureInfo@2@@Z
0x14000A970: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000BB10: "unsigned short const * const RuntimeClass_Windows_ApplicationModel_Internal_StartupTaskInternal" ?RuntimeClass_Windows_ApplicationModel_Internal_StartupTaskInternal@@3QBGB
0x14000A940: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14000B448: "FirstRequiresUserInput" ??_C@_1CO@OGKIAHBP@?$AAF?$AAi?$AAr?$AAs?$AAt?$AAR?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AAs?$AAU?$AAs?$AAe?$AAr?$AAI?$AAn?$AAp?$AAu?$AAt?$AA?$AA@
0x14000F764: "__cdecl dowildcard" _dowildcard
0x14000B1B8: "Explorer" ??_C@_1BC@PKEHKAEB@?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr?$AA?$AA@
0x14000B3E0: "internal\sdk\inc\wil\resource.h" ??_C@_0CA@BIKDFFBC@internal?2sdk?2inc?2wil?2resource?4h?$AA@
0x1400070B0: "public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::AddRef(void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@UEAAKXZ
0x140004340: "public: static long __cdecl wil::details_abi::SemaphoreValue::TryGetValue<unsigned __int64>(unsigned short const * __ptr64,unsigned __int64 * __ptr64,bool * __ptr64)" ??$TryGetValue@_K@SemaphoreValue@details_abi@wil@@SAJPEBGPEA_KPEA_N@Z
0x14000BB90: "struct _GUID const g_SHSqmGlobalSession" ?g_SHSqmGlobalSession@@3U_GUID@@B
0x14000BC88: "__cdecl GUID_c2b937aa_3110_4398_8a56_f34c6342d244" _GUID_c2b937aa_3110_4398_8a56_f34c6342d244
0x14000AAB0: "__cdecl _imp_EventWrite" __imp_EventWrite
0x14000920C: free
0x14000F120: c_szRunOnce
0x14000AFF8: Microsoft_Windows_Shell_Core_Provider
0x14000B480: "Software\Microsoft\Windows\Curre" ??_C@_1FO@MLNDMPPM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140002BA8: "long __cdecl wil::details::GetLastErrorFailHr(void)" ?GetLastErrorFailHr@details@wil@@YAJXZ
0x14000A980: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140009200: "__cdecl purecall" _purecall
0x14000A958: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x1400030C8: "unsigned long __cdecl wil::details::ReportFailure_GetLastError(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType)" ?ReportFailure_GetLastError@details@wil@@YAKPEAXIPEBD110W4FailureType@2@@Z
0x1400059E4: ProcessRunOnceEx
0x1400050B8: "long __cdecl _ShellExecuteRegAppWorker(unsigned short const * __ptr64,enum RRA_FLAGS,struct IUnknown * __ptr64)" ?_ShellExecuteRegAppWorker@@YAJPEBGW4RRA_FLAGS@@PEAUIUnknown@@@Z
0x140009180: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000A8C0: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x14000AA28: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x140007E70: "private: virtual void * __ptr64 __cdecl CStartupTracker::`vector deleting destructor'(unsigned int) __ptr64" ??_ECStartupTracker@@EEAAPEAXI@Z
0x14000AAC8: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x140007240: "[thunk]:public: virtual unsigned long __cdecl Microsoft::WRL::Details::RuntimeClassImpl<struct Microsoft::WRL::RuntimeClassFlags<2>,1,0,0,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$RuntimeClassImpl@U?$RuntimeClassFlags@$01@WRL@Microsoft@@$00$0A@$0A@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@Details@WRL@Microsoft@@W7EAAKXZ
0x14000B410: "WilError_02" ??_C@_0M@NMJHHMC@WilError_02?$AA@
0x140008E2C: RtlpImageNtHeader
0x14000A8E8: "__cdecl _imp_SetPriorityClass" __imp_SetPriorityClass
0x14000A700: "__cdecl _imp_SetCursor" __imp_SetCursor
0x1400028B8: "int __cdecl wil::details::RecordException(long)" ?RecordException@details@wil@@YAHJ@Z
0x14000A620: "__cdecl _imp_SHCreateSessionKey" __imp_SHCreateSessionKey
0x14000B290: "%hs(%d)\%hs!%p: " ??_C@_1CC@CMMBNPBE@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?2?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x140002950: "bool __cdecl wil::details::GetModuleInformation(void * __ptr64,unsigned int * __ptr64,char * __ptr64,unsigned __int64)" ?GetModuleInformation@details@wil@@YA_NPEAXPEAIPEAD_K@Z
0x14000A548: "__cdecl _imp_SelectObject" __imp_SelectObject
0x1400032F0: "void __cdecl wil::details::in1diag3::_FailFastImmediate_Unexpected(void)" ?_FailFastImmediate_Unexpected@in1diag3@details@wil@@YAXXZ
0x14000A888: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000BE40: "ProcessWaitTimeoutInMSec" ??_C@_1DC@KJBJMPDJ@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAW?$AAa?$AAi?$AAt?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AAI?$AAn?$AAM?$AAS?$AAe?$AAc?$AA?$AA@
0x14000A708: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x140007DF0: "[thunk]:public: virtual unsigned long __cdecl CExecuteRunAppFilter::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CExecuteRunAppFilter@@WBA@EAAKXZ
0x14000B378: "[%hs(%hs)] " ??_C@_1BI@PKOCHLJN@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAh?$AAs?$AA?$CJ?$AA?$FN?$AA?6?$AA?$AA@
0x14000AAF0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x14000A788: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x14000A9A8: "__cdecl _imp_CharLowerW" __imp_CharLowerW
0x14000ABB8: ntdll_NULL_THUNK_DATA
0x14000F778: g_hBoldFont
0x14000B800: "Software\Microsoft\Windows NT\Cu" ??_C@_1HE@JNLICCIN@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x14000B258: "Exception" ??_C@_09FBNMMHMJ@Exception?$AA@
0x140007A5C: "__cdecl ShellExecuteRunApp" _ShellExecuteRunApp
0x14000B710: "%s\runonce.exe" ??_C@_1BO@CJBNAJF@?$AA?$CF?$AAs?$AA?2?$AAr?$AAu?$AAn?$AAo?$AAn?$AAc?$AAe?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000B328: " " ??_C@_19NMAFMAH@?$AA?5?$AA?5?$AA?5?$AA?5?$AA?$AA@
0x14000B2B8: "%hs!%p: " ??_C@_1BC@HOGHCIFF@?$AA?$CF?$AAh?$AAs?$AA?$CB?$AA?$CF?$AAp?$AA?3?$AA?5?$AA?$AA@
0x14000B1D0: "ExplorerStartupLog_RunOnce" ??_C@_1DG@MBEFHAJC@?$AAE?$AAx?$AAp?$AAl?$AAo?$AAr?$AAe?$AAr?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAL?$AAo?$AAg?$AA_?$AAR?$AAu?$AAn?$AAO?$AAn?$AAc?$AAe?$AA?$AA@
0x14000BA30: "__cdecl GUID_f771cc67_0856_5efd_ac6f_37b6e05c63e2" _GUID_f771cc67_0856_5efd_ac6f_37b6e05c63e2
0x14000A078: "const Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::`vftable'{for `Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>'}" ??_7?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@6B?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@@
0x14000BA90: "unsigned short const * const RuntimeClass_Windows_ApplicationModel_Internal_StartupTaskActivator" ?RuntimeClass_Windows_ApplicationModel_Internal_StartupTaskActivator@@3QBGB
0x1400061F8: "void __cdecl Fire_Explorer_Startup_Run6432_Failed(unsigned short const * __ptr64)" ?Fire_Explorer_Startup_Run6432_Failed@@YAXPEBG@Z
0x14000ADE0: ShellTraceId_Explorer_Startup_Run6432_Failed
0x1400013F0: RunAppsInList
0x14000CA28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x14000AAE0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x140005624: "void __cdecl SHTraceSQMStream(struct _EVENT_DESCRIPTOR const * __ptr64,unsigned long,struct _SHSQM_STREAM_ENTRY * __ptr64,unsigned long)" ?SHTraceSQMStream@@YAXPEBU_EVENT_DESCRIPTOR@@KPEAU_SHSQM_STREAM_ENTRY@@K@Z
0x14000F068: "__cdecl _security_cookie" __security_cookie
0x14000A4E0: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x140009340: "__cdecl alloca_probe" _alloca_probe
0x140007E40: "public: virtual unsigned long __cdecl CStartupTracker::Release(void) __ptr64" ?Release@CStartupTracker@@UEAAKXZ
0x140002C28: "void __cdecl wil::details::LogFailure(void * __ptr64,unsigned int,char const * __ptr64,char const * __ptr64,char const * __ptr64,void * __ptr64,enum wil::FailureType,long,unsigned short const * __ptr64,bool,unsigned short * __ptr64,unsigned __int64,char * __ptr64,unsigned __int64,struct wil::FailureInfo * __ptr64)" ?LogFailure@details@wil@@YAXPEAXIPEBD110W4FailureType@2@JPEBG_NPEAG_KPEAD6PEAUFailureInfo@2@@Z
0x14000B390: "[%hs] " ??_C@_1O@PJKHPDBK@?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?6?$AA?$AA@
0x14000BDE0: "ProcessHardFaultsMax" ??_C@_1CK@EIOOIMFJ@?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAH?$AAa?$AAr?$AAd?$AAF?$AAa?$AAu?$AAl?$AAt?$AAs?$AAM?$AAa?$AAx?$AA?$AA@
0x14000A5E8: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000AAA0: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x1400071E0: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::`vector deleting destructor'(unsigned int) __ptr64" ??_E?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@UEAAPEAXI@Z
0x14000CB2C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x140005304: IUnknown_WaitForSteadyState
0x14000A558: "__cdecl _imp_DeleteObject" __imp_DeleteObject
0x14000A5F0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x14000B0F0: "Software\Microsoft\Windows\Curre" ??_C@_1GE@HLGCOFKK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000F060: "__cdecl _defaultmatherr" __defaultmatherr
0x14000C9D8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1400022A0: McGenControlCallbackV2
0x14000A7E8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x14000AFE8: ShellTraceId_Explorer_StartupAppName_Info
0x1400087EA: CreateProcessW
0x14000A8C8: "__cdecl _imp_PathCchAppend" __imp_PathCchAppend
0x14000A5C8: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x14000A960: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x14000F978: "__cdecl _onexitbegin" __onexitbegin
0x14000A9E0: "__cdecl _imp_CreateEventExW" __imp_CreateEventExW
0x14000F828: "unsigned char (__cdecl* __ptr64 wil::details::g_pfnRtlDllShutdownInProgress)(void)" ?g_pfnRtlDllShutdownInProgress@details@wil@@3P6AEXZEA
0x14000A6B8: "__cdecl _imp_SHWindowsPolicy" __imp_SHWindowsPolicy
0x1400081F0: "public: virtual long __cdecl CStartupTracker::IsStartupItemBlocked(unsigned short const * __ptr64) __ptr64" ?IsStartupItemBlocked@CStartupTracker@@UEAAJPEBG@Z
0x140002C04: "void __cdecl wil::ThrowResultException(struct wil::FailureInfo const & __ptr64)" ?ThrowResultException@wil@@YAXAEBUFailureInfo@1@@Z
0x14000AB18: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000A830: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000A1E0: "const CStartupTracker::`vftable'{for `IStartupTracker'}" ??_7CStartupTracker@@6BIStartupTracker@@@
0x14000CADC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-winrt-l1-1-0
0x14000C8FC: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x14000A4B8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x14000173C: "__cdecl HandleLBMeasureItem" _HandleLBMeasureItem
0x14000F8A0: "struct HINSTANCE__ * __ptr64 __ptr64 g_wil_details_ntdllModuleHandle" ?g_wil_details_ntdllModuleHandle@@3PEAUHINSTANCE__@@EA
0x140007E10: "[thunk]:public: virtual long __cdecl CExecuteRunAppFilter::QueryInterface`adjustor{16}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@CExecuteRunAppFilter@@WBA@EAAJAEBU_GUID@@PEAPEAX@Z
0x1400037F8: "struct wil::details_abi::ThreadLocalData * __ptr64 __cdecl wil::details_abi::GetThreadLocalDataCache(bool)" ?GetThreadLocalDataCache@details_abi@wil@@YAPEAUThreadLocalData@12@_N@Z
0x140008FD4: "__cdecl _security_init_cookie" __security_init_cookie
0x14000F818: "void (__cdecl* __ptr64 wil::details::g_pfnRaiseFailFastException)(struct _EXCEPTION_RECORD * __ptr64,struct _CONTEXT * __ptr64,unsigned long)" ?g_pfnRaiseFailFastException@details@wil@@3P6AXPEAU_EXCEPTION_RECORD@@PEAU_CONTEXT@@K@ZEA
0x14000AB78: "__cdecl _imp__cexit" __imp__cexit
0x140005900: "public: virtual long __cdecl Microsoft::WRL::FtmBase::MarshalInterface(struct IStream * __ptr64,struct _GUID const & __ptr64,void * __ptr64,unsigned long,void * __ptr64,unsigned long) __ptr64" ?MarshalInterface@FtmBase@WRL@Microsoft@@UEAAJPEAUIStream@@AEBU_GUID@@PEAXK2K@Z
0x14000A950: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x14000A538: "__cdecl _imp_GetObjectW" __imp_GetObjectW
0x140008E88: "__cdecl get_image_app_type" _get_image_app_type
0x14000AAB8: "__cdecl _imp_EventEnabled" __imp_EventEnabled
0x14000C938: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000BC00: "%LocalAppData%\Microsoft\Windows" ??_C@_1FE@OIJCPDJO@?$AA?$CF?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs@
0x140007DF0: "[thunk]:public: virtual unsigned long __cdecl CStartupTracker::AddRef`adjustor{16}' (void) __ptr64" ?AddRef@CStartupTracker@@WBA@EAAKXZ
0x14000A010: "const Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>::`vftable'" ??_7?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@6B@
0x14000B780: "Software\Microsoft\Windows NT\Cu" ??_C@_1GK@NIBGBKLB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140004020: ?MakeAndInitialize@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@CAJPEBG$$QEAV?$unique_any_t@V?$mutex_t@V?$unique_storage@U?$resource_policy@PEAXP6AXPEAX@Z$1?CloseHandle@details@wil@@YAX0@ZU?$integral_constant@_K$0A@@wistd@@PEAX$0A@$$T@details@wil@@@details@wil@@Uerr_returncode_policy@3@@wil@@@3@PEAPEAV123@@Z
0x14000F908: "public: static class Microsoft::WRL::Details::ModuleBase * __ptr64 __ptr64 Microsoft::WRL::Details::ModuleBase::module_" ?module_@ModuleBase@Details@WRL@Microsoft@@2PEAV1234@EA
0x14000A530: "__cdecl _imp_CreateSolidBrush" __imp_CreateSolidBrush
0x140003238: "void __cdecl wil::details::in1diag3::Return_Hr(void * __ptr64,unsigned int,char const * __ptr64,long)" ?Return_Hr@in1diag3@details@wil@@YAXPEAXIPEBDJ@Z
0x1400023AC: McGenEventRegister
0x140003BA0: "public: static long __cdecl wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData>::Acquire(char const * __ptr64,class wil::details_abi::ProcessLocalStorageData<struct wil::details_abi::ProcessLocalData> * __ptr64 * __ptr64)" ?Acquire@?$ProcessLocalStorageData@UProcessLocalData@details_abi@wil@@@details_abi@wil@@SAJPEBDPEAPEAV123@@Z
0x14000AAF8: "__cdecl _imp_malloc" __imp_malloc
0x14000AAD0: "__cdecl _imp__purecall" __imp__purecall
0x14000A508: ADVAPI32_NULL_THUNK_DATA
0x1400068E4: "long __cdecl ProcessPackagedStartupTasks(struct IUnknown * __ptr64)" ?ProcessPackagedStartupTasks@@YAJPEAUIUnknown@@@Z
0x14000A500: "__cdecl _imp_EventUnregister" __imp_EventUnregister
0x14000B350: "CallContext:[%hs] " ??_C@_1CG@CGJKEFKG@?$AAC?$AAa?$AAl?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?3?$AA?$FL?$AA?$CF?$AAh?$AAs?$AA?$FN?$AA?5?$AA?$AA@
0x14000C910: "__cdecl _IMPORT_DESCRIPTOR_GDI32" __IMPORT_DESCRIPTOR_GDI32
0x14000F7F0: "void (__cdecl* __ptr64 wil::details::g_pfnDebugBreak)(void)" ?g_pfnDebugBreak@details@wil@@3P6AXXZEA
0x14000F790: g_hdcMem
0x140008C40: "__cdecl _report_gsfailure" __report_gsfailure
0x140007760: "public: virtual unsigned long __cdecl CExecuteRunAppFilter::Release(void) __ptr64" ?Release@CExecuteRunAppFilter@@UEAAKXZ
0x14000B900: "Software\Microsoft\Windows\Curre" ??_C@_1FM@OEMODDEO@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000B188: "AlternateShellStartup" ??_C@_1CM@HCEOOCDJ@?$AAA?$AAl?$AAt?$AAe?$AAr?$AAn?$AAa?$AAt?$AAe?$AAS?$AAh?$AAe?$AAl?$AAl?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AA?$AA@
0x1400090C8: "__cdecl onexit" _onexit
0x140008560: "public: virtual long __cdecl CStartupTracker::QueryService(struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryService@CStartupTracker@@UEAAJAEBU_GUID@@0PEAPEAX@Z
0x14000AA90: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x14000F7D8: "void (__cdecl* __ptr64 wil::details::g_pfnTelemetryCallback)(bool,struct wil::FailureInfo const & __ptr64)" ?g_pfnTelemetryCallback@details@wil@@3P6AX_NAEBUFailureInfo@2@@ZEA
0x14000F988: "__cdecl _native_startup_state" __native_startup_state
0x14000B220: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000A630: "__cdecl _imp_RunInstallUninstallStubs" __imp_RunInstallUninstallStubs
0x14000A568: "__cdecl _imp_BitBlt" __imp_BitBlt
0x14000F848: "long volatile `int __cdecl wil::details::RecordFailFast(long)'::`2'::s_hrErrorLast" ?s_hrErrorLast@?1??RecordFailFast@details@wil@@YAHJ@Z@4JC
0x14000B880: "Software\Microsoft\Windows NT\Cu" ??_C@_1HC@HHIMMLAA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140002910: "int __cdecl wil::details::RecordFailFast(long)" ?RecordFailFast@details@wil@@YAHJ@Z
0x14000A8D8: api-ms-win-core-path-l1-1-0_NULL_THUNK_DATA
0x1400071E0: "public: virtual void * __ptr64 __cdecl Microsoft::WRL::RuntimeClass<struct Microsoft::WRL::RuntimeClassFlags<2>,struct Windows::Foundation::IAsyncOperationCompletedHandler<struct Windows::Foundation::Collections::IVectorView<class Windows::ApplicationModel::Internal::StartupTaskInternal * __ptr64> * __ptr64>,class Microsoft::WRL::FtmBase>::`scalar deleting destructor'(unsigned int) __ptr64" ??_G?$RuntimeClass@U?$RuntimeClassFlags@$01@WRL@Microsoft@@U?$IAsyncOperationCompletedHandler@PEAU?$IVectorView@PEAVStartupTaskInternal@Internal@ApplicationModel@Windows@@@Collections@Foundation@Windows@@@Foundation@Windows@@VFtmBase@23@@WRL@Microsoft@@UEAAPEAXI@Z
0x14000A790: "__cdecl _imp_GetSysColor" __imp_GetSysColor
0x14000B2F0: "%hs(%d) tid(%x) %08X %ws" ??_C@_1DC@MFHOKFOG@?$AA?$CF?$AAh?$AAs?$AA?$CI?$AA?$CF?$AAd?$AA?$CJ?$AA?5?$AAt?$AAi?$AAd?$AA?$CI?$AA?$CF?$AAx?$AA?$CJ?$AA?5?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CF?$AAw?$AAs?$AA?$AA@
0x14000A7B0: "__cdecl _imp_CreatePopupMenu" __imp_CreatePopupMenu
0x14000A7E0: "__cdecl _imp_CoCreateFreeThreadedMarshaler" __imp_CoCreateFreeThreadedMarshaler
0x14000C960: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x14000A768: "__cdecl _imp_MessageBeep" __imp_MessageBeep
0x14000AB50: "__cdecl _imp__fmode" __imp__fmode
0x1400025CC: "unsigned short * __ptr64 __cdecl wil::details::LogStringPrintf(unsigned short * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,...)" ?LogStringPrintf@details@wil@@YAPEAGPEAGPEBG1ZZ
0x14000B550: "GetTermsrCompatFlagsEx" ??_C@_0BH@JKILMEEP@GetTermsrCompatFlagsEx?$AA@
0x14000BC68: "__cdecl GUID_fc4801a3_2ba9_11cf_a229_00aa003d7352" _GUID_fc4801a3_2ba9_11cf_a229_00aa003d7352
0x14000F820: "char const * __ptr64 (__cdecl* __ptr64 wil::details::g_pfnGetModuleName)(void)" ?g_pfnGetModuleName@details@wil@@3P6APEBDXZEA
0x14000A870: "__cdecl _imp_CreateIoCompletionPort" __imp_CreateIoCompletionPort
0x14000CA00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x14000B610: "Software\Microsoft\Windows\Curre" ??_C@_1GI@OMPNFJBH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x14000B048: "NoPrompt2Boot" ??_C@_1BM@FNPAFACA@?$AAN?$AAo?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA2?$AAB?$AAo?$AAo?$AAt?$AA?$AA@
0x14000F844: "bool volatile `char const * __ptr64 __cdecl wil::details::GetCurrentModuleName(void)'::`2'::s_fModuleValid" ?s_fModuleValid@?1??GetCurrentModuleName@details@wil@@YAPEBDXZ@4_NC
0x14000AAD8: "__cdecl _imp_free" __imp_free
0x14000F798: g_iState
0x140002434: McTemplateU0
0x140008F40: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000AA20: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x14000B208: "`EnableManifestedProviderForMicrosoftTelemetry'::`2'::Traits" ?Traits@?1??EnableManifestedProviderForMicrosoftTelemetry@@9@9
0x14000A658: "__cdecl _imp_SHDeleteValueW" __imp_SHDeleteValueW
0x140006350: "__cdecl Startup_ExecuteRegAppEnumProc" _Startup_ExecuteRegAppEnumProc
0x14000A520: "__cdecl _imp_DPA_InsertPtr" __imp_DPA_InsertPtr
0x14000AB08: "__cdecl _imp_memcpy_s" __imp_memcpy_s
0x1400063A4: "void __cdecl Fire_Explorer_Startup_Run6432_Stats(unsigned long,unsigned long)" ?Fire_Explorer_Startup_Run6432_Stats@@YAXKK@Z
0x14000B274: "LogHr" ??_C@_05OILEHMGB@LogHr?$AA@
0x14000AFD8: ShellTraceId_Explorer_Startup_Run6432_Stats
0x14000CA64: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x14000B178: "Run6432" ??_C@_1BA@EPLENBEC@?$AAR?$AAu?$AAn?$AA6?$AA4?$AA3?$AA2?$AA?$AA@
0x14000AA10: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x14000C99C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x14000F7E8: "void (__cdecl* __ptr64 wil::details::g_pfnGetContextAndNotifyFailure)(struct wil::FailureInfo * __ptr64,char * __ptr64,unsigned __int64)" ?g_pfnGetContextAndNotifyFailure@details@wil@@3P6AXPEAUFailureInfo@2@PEAD_K@ZEA
0x140004A60: McTemplateU0z
0x140009306: memset
0x14000CB7C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x14000F191: g_header_init_InitializeResultHeader
0x14000B098: "iernonce.dll" ??_C@_1BK@CJECNHDK@?$AAi?$AAe?$AAr?$AAn?$AAo?$AAn?$AAc?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x14000A670: "__cdecl _imp_PathFindFileNameW" __imp_PathFindFileNameW

[JEB Decompiler by PNF Software]