Opcode And Task Enumeration. and shell items?

Matthew Seyer
13 min readMar 19, 2019

--

Continuing my momentum on my PyWindowsThingies (name to change one day) project. Today I add Task and Operation enumeration for ETW events. This continues to help put events into context. The following is an example of what Operations and Tasks can look like for a given publisher.

A publishes metadata

This now allows me to map tasks to ETW monitoring!

Tasks enumerated while monitoring

I now have better insight into the context of event values.

The goal of this project has been to better understand the structure of the forensic artifacts we interact with. One item of interest has been to better understand certain shell items, and when they are used, structures, etc. So I searched across publisher tasks to try and look for anything that might have to do with shell items. Thats when I discovered an interesting provider. Microsoft-Windows-Shell-Core. Below is output from the print_publishers.py script. I think you will see some very interesting tasks that I look forward to playing with including FileAccessAPI_*, and ShellItem_*.

----------------------------------------------
Publisher: Microsoft-Windows-Shell-Core
GUID: 30336ED4-E327-447C-9DE0-51B652C86108
----------------------------------------------
--- Keywords ---
0x0000000000010000: Shell
0x0000000000020000: Properties
0x0000000000040000: FileClassStoreAndIconCache
0x0000000000080000: Controls
0x0000000000100000: APICalls
0x0000000000200000: InternetExplorer
0x0000000000400000: ShutdownUX
0x0000000000800000: CopyEngine
0x0000000001000000: Tasks
0x0000000002000000: WDI
0x0000000004000000: StartupPerf
0x0000000008000000: StructuredQuery
0x0000000010000000: Grep
0x0000000020000000: ItemCollection
0x0000000040000000: SearchPerf
0x0000000080000000: ActiveSetup
0x0000000100000000: ExplorerPerf
0x0000000200000000: LogonPerformance
0x0000000400000000: ElizaPrototype [Eliza Prototype]
0x0000000800000000: CloudExperienceHost
0x0000001000000000: Restore
0x0000002000000000: OOBEHealth
0x0000200000000000: ms:Telemetry
0x0001000000000000: win:ResponseTime [Response Time]
0x0008000000000000: win:SQM [SQM]
--- Operations ---
0x0000000000000000: win:Info [Info]
0x0000000000010000: win:Start [Start]
0x0000000000020000: win:Stop [Stop]
--- Tasks ---
0x0000000000000001: AggregatePropertyProvider_GetValue
0x0000000000000003: AggregatePropertyProvider_GetValueObject
0x0000000000000065: AutoplayCPL_PopulateUI
0x0000000000000067: AutoplayCPL_Create
0x0000000000000069: AutoplayCPL_LayoutInitialized
0x000000000000006F: DeskCPL_ShowDialog
0x0000000000000071: DeskCPL_DisplayDialog
0x0000000000000079: MainCPL_CPLAppletInvoked
0x000000000000007B: MainCPL_DialogPaint
0x00000000000001F5: AutoListEditor_Controls_Rendering
0x00000000000001F7: AutoListEditor_FilterConditions_Rendering
0x00000000000001F9: AutoListEditor_Filter_ChangeNotify
0x00000000000001FB: AutoListEditor_Filters_Rendering
0x00000000000001FD: AutoListEditor_Scopes_Rendering
0x00000000000003E9: AutoLists_QueryDefaultLocation
0x00000000000003EB: AutoLists_QueryResultsDisplayed
0x00000000000003ED: AutoLists_QueryResultsExecuted
0x00000000000003EF: AutoLists_QueryResultsStacked
0x00000000000003F3: AutoLists_GetRemoteFolderPath
0x00000000000003F5: AutoLists_LoadFromXML
0x00000000000003F7: AutoLists_LoadFromStream
0x00000000000003F9: AutoLists_LoadComponentChain
0x00000000000003FB: AutoLists_GetWorkgroupNetInfo
0x00000000000003FD: AutoLists_MSSQuery
0x00000000000003FF: AutoLists_ProcessNextBatch
0x0000000000000401: AutoLists_MergeEnumToView
0x0000000000000403: AutoLists_MSSQueryAddResultsToQueue
0x0000000000000405: InfoBar_Click_Count_AddToIndex
0x0000000000000409: InfoBar_Display_Count_Indexer_Busy
0x000000000000040B: InfoBar_Display_Count_Indexer_Disabled
0x000000000000040D: InfoBar_NonIndexed_Location_Count
0x000000000000040F: DataLayer_CreateResultSets
0x0000000000000411: DataLayer_CreateSession
0x0000000000000413: DataLayer_CreateCommand
0x0000000000000415: DataLayer_CommandExecute
0x0000000000000417: DataLayer_RowsetGetCount
0x0000000000000419: DataLayer_RowsetGetRows
0x000000000000041B: DataLayer_RowsetGetData
0x000000000000041F: DataLayer_ItemBindHandler
0x0000000000000421: DataLayer_ExtractProperties
0x0000000000000423: DataLayer_RowsetGetReferencedRowset
0x0000000000000427: DataLayer_GetDataSourceProperties
0x0000000000000429: DataLayer_SetDataSourceProperties
0x000000000000042B: DataLayer_GetRowsetProperties
0x000000000000042D: DataLayer_RowsetFindIndex
0x000000000000042F: DataLayer_RowsetCountForGroup
0x0000000000000431: DataLayer_CollectionImmediateIndex
0x0000000000000433: DataLayer_CollectionLeafIndex
0x0000000000000435: DataLayer_RSMImmediateIndex
0x0000000000000437: DataLayer_RSMLeafIndex
0x0000000000000439: DataLayer_CollectionMemberOfGroup
0x000000000000043B: DataLayer_CollectionCount
0x000000000000043C: DataLayer_CollectionCountCached
0x000000000000043D: DataLayer_CollectionCountTaskPending
0x000000000000043F: DataLayer_CountTask
0x0000000000000440: DataLayer_CountTaskQueued
0x0000000000000441: DataLayer_CountTaskCancelled
0x0000000000000443: DataLayer_CollectionGetItem
0x0000000000000444: DataLayer_CollectionGetResultCached
0x0000000000000446: DataLayer_GetResultTask
0x0000000000000447: DataLayer_GetResultTaskQueued
0x0000000000000448: DataLayer_GetResultTaskCancelled
0x000000000000044A: DataLayer_RSMNotification
0x000000000000044B: DataLayer_RSMNotificationArrival
0x000000000000044D: DataLayer_RSMRealization
0x000000000000044E: DataLayer_RSMRealizationCancelled
0x000000000000044F: DataLayer_RSMRealizationNextBatch
0x0000000000000451: DataLayer_RSMGetGroupManager
0x0000000000000453: DataLayer_ResultSetRealize
0x0000000000000455: DataLayer_ResultSetProcessBatch
0x0000000000000457: DataLayer_ResultSetEnum
0x0000000000000459: DataLayer_ResultSetWaitForResults
0x000000000000045B: DataLayer_ResultSetFilterResults
0x000000000000045D: DataLayer_ResultSetSortResults
0x000000000000045F: DataLayer_ResultSetGroupResults
0x0000000000000461: DataLayer_ResultSetMergeBatch
0x0000000000000463: DataLayer_GenerateSnippet
0x0000000000000465: DataLayer_CalculateStackThumbnailCacheId
0x0000000000000467: DataLayer_BuildStackThumbnail
0x0000000000000469: DataLayer_ReuseFirstBatch
0x000000000000046B: DataLayer_ReuseCached
0x000000000000046D: DataLayer_StackThumbnails_Rendering
0x000000000000046F: DataLayer_StackThumbnails_PickPictures
0x0000000000000474: DataLayer_GetRowsAt
0x0000000000000476: DataLayer_GetRowFromHROW
0x0000000000000478: DataLayer_ItemRealizeItem
0x000000000000047A: DataLayer_ItemCompareItem
0x000000000000047C: DataLayer_ItemCompareItemIdentity
0x000000000000047E: DataLayer_ItemGetValue
0x0000000000000480: DataLayer_AppItemsStateModifyCommitFailure
0x0000000000000579: OpenSearch_RowsetInitialize
0x000000000000057B: OpenSearch_GetRowsAt
0x000000000000057D: OpenSearch_FillCachedPage
0x0000000000000581: OpenSearch_NormalizeResultsPage
0x0000000000000583: OpenSearch_ParseResultsPage
0x0000000000000585: OpenSearch_PreConnect
0x0000000000000587: OpenSearch_Http_Response
0x0000000000000589: OpenSearch_Description_Installed
0x000000000000058B: OpenSearch_Provider_Queried
0x00000000000005DC: ShellTask_UdfFormatter_FormatThread
0x00000000000005DE: ShellTask_ShellLink_VerifyPathThread
0x00000000000005E0: ShellTask_RunDialog_CheckRunInSeparateThread
0x00000000000005E2: ShellTask_Restart_ShutdownThread
0x00000000000005E4: ShellTask_MountPoint_RegisterThread
0x00000000000005E6: ShellTask_Format_FormatThread
0x00000000000005E8: ShellTask_FileFldr_GetFindDataThread
0x00000000000005EA: ShellTask_CloseSession_TipThread
0x00000000000005EE: ShellTask_UserLibrary_RestoreLibrariesThread
0x00000000000005F0: ShellTask_Options_SetupAndRunPropertySheetThread
0x00000000000005F2: ShellTask_Desktop_LocalServerThread
0x00000000000005F4: ShellTask_BackPropSheet_SizeCheckerThread
0x00000000000005F6: ShellTask_Undo_UndoThread
0x00000000000005F8: ShellTask_PropSheet_PropSheetThread
0x00000000000005FA: ShellTask_PropSheet_FormatThread
0x00000000000005FC: ShellTask_ShellLink_SearchThread
0x00000000000005FE: ShellTask_Encrypt_EncryptThread
0x0000000000000600: ShellTask_SDSPatch_FindPrinterThread
0x0000000000000602: ShellTask_ChangeNotify_ChangeNotifyThread
0x0000000000000604: ShellTask_Schedule_ShellTaskThread
0x0000000000000606: ShellTask_RunAsNewUser_RunAsThread
0x0000000000000608: ShellTask_RichPreview_PreviewThread
0x000000000000060A: ShellTask_PostBootReminder_ReminderThread
0x000000000000060C: ShellTask_RegFldr_DisconnectDialogThread
0x000000000000060E: ShellTask_ProgressDialog_DialogThread
0x0000000000000610: ShellTask_ProgressDialog_SyncDialogThread
0x0000000000000612: ShellTask_PlacesFldr_RestoreFavoritesThread
0x0000000000000614: ShellTask_OtherUsersBarrier_WizardThread
0x0000000000000616: ShellTask_OpenContainingMenu_InvokeThread
0x0000000000000618: ShellTask_NamespaceWalk_AsyncWalkThread
0x000000000000061A: ShellTask_NetApi_NetConnectThread
0x000000000000061C: ShellTask_MulPropSheet_SizeThread
0x000000000000061E: ShellTask_MulPropSheet_ApplySingleThread
0x0000000000000620: ShellTask_MulPropSheet_AppluMultipleThread
0x0000000000000622: ShellTask_MountPointLocal_EjectThread
0x0000000000000624: ShellTask_Autorun_AutorunPromptThread
0x0000000000000626: ShellTask_MenuBand_FadeTaskThread
0x0000000000000628: ShellTask_LinkProp_LinkCheckThread
0x000000000000062A: ShellTask_Library_OpenLocationThread
0x000000000000062C: ShellTask_Library_RemoveLocationThread
0x000000000000062E: ShellTask_Library_RunTaskThread
0x0000000000000630: ShellTask_Library_SetPinUnpinThread
0x0000000000000632: ShellTask_Library_AddLocationThread
0x0000000000000634: ShellTask_ItemHandlerCache_MessagePumpThread
0x0000000000000636: ShellTask_FSDropTarget_DoDropThread
0x0000000000000638: ShellTask_CheckDiskDialog_DialogThread
0x000000000000063A: ShellTask_Enum_EnumThread
0x000000000000063C: ShellTask_DrvX_MakeConnectionThread
0x000000000000063E: ShellTask_DrvX_DrvSizeThread
0x0000000000000640: ShellTask_DefCM_DeleteItemsThread
0x0000000000000642: ShellTask_CopyFGD_CopyThread
0x0000000000000644: ShellTask_Collection_RealizeThread
0x0000000000000646: ShellTask_CloseSession_CloseThread
0x0000000000000648: ShellTask_CDBurn_NotifyThread
0x000000000000064A: ShellTask_CDBurn_DropThread
0x000000000000064C: ShellTask_CDBurn_WizardThread
0x000000000000064E: ShellTask_CDBurn_EraseThread
0x0000000000000650: ShellTask_CDBurn_BurnThread
0x0000000000000652: ShellTask_BitBucket_DispatchThread
0x0000000000000654: ShellTask_BitBucket_PurgeAllThread
0x0000000000000656: ShellTask_AsyncInvoke_InvokeThread
0x000000000000065C: ShellTask_ResultSetFactory_EnumThread
0x000000000000065E: ShellTask_IndexClusionCache_HandleNetworkPathThread
0x0000000000000660: ShellTask_IndexClusionCache_HandlePathThread
0x0000000000000662: ShellTask_Notify_StartupThread
0x0000000000000664: ShellTask_PublishedItems_EnumItemsThread
0x0000000000000668: ShellTask_Library_ShareUnshareLocationThread
0x000000000000066A: ShellTask_ItemHandler_GetHandlerThread
0x000000000000066C: ShellTask_ItemHandler_SetHandlerThread
0x000000000000066E: ShellTask_SearchHelpers_InitIndexDataThread
0x0000000000000670: ShellTask_SearchHelpers_CheckCrawlScopeThread
0x0000000000000672: ShellTask_Library_CommitScopeChangesThread
0x0000000000000674: ShellTask_ItemsView_SendReentrancyReportThread
0x0000000000000676: ShellTask_MtPtRemote_UpdateInfoThread
0x0000000000000678: ShellTask_Timeout_CallwithTimeoutThread
0x000000000000067A: ShellTask_ShellBrowser_CancelNavigationReportThread
0x000000000000067C: ShellTask_PerfTrack_LogStartEventThread
0x000000000000067E: ShellTask_WSDPublisher_PublishMessageThread
0x0000000000000680: ShellTask_WSDPublisher_CleanUpThread
0x0000000000000682: ShellTask_WSDPublisher_InitThread
0x0000000000000684: ShellTask_ShellUrl_AsyncParseThread
0x0000000000000688: ShellTask_RecycleBin_CompactAndPurgeThread
0x000000000000068A: ShellTask_PublishedItems_UpdatePublishedItemsThread
0x000000000000068C: ShellTask_PublishedItems_UpdateLibrariesThread
0x000000000000068E: ShellTask_PrivateProfile_AsyncUpdateCacheThread
0x0000000000000690: ShellTask_MultiComplete_WorkThread
0x0000000000000692: ShellTask_MountPoint_InitLocalDriveThread
0x0000000000000694: ShellTask_Library_UpdateLocationSupportStatusThread
0x0000000000000696: ShellTask_LowDisk_WorkThread
0x0000000000000698: ShellTask_LowDisk_CheckDiskSpaceThread
0x000000000000069A: ShellTask_Library_UpdateScopeOnRenameThread
0x000000000000069C: ShellTask_Library_GetLibraryDescriptionThread
0x000000000000069E: ShellTask_Library_ValidateAndResolveLocationsThread
0x00000000000006A0: ShellTask_EnumFiles_CheckDiskForInsertThread
0x00000000000006A2: ShellTask_SearchIndexNotificationsQueue_FlushNotificationsThread
0x00000000000006A4: ShellTask_BitBucket_UpdateRecycleBinIconThread
0x00000000000006A6: ShellTask_AutoPlay_ProcessDevicesEventsThread
0x00000000000006A8: ShellTask_ACThread_GenerationCompletionListThread
0x00000000000006AA: ShellTask_CollectionLock_AddTaskTimerThread
0x00000000000006AC: ShellTask_ShellExecute_ExecuteThread
0x00000000000006AE: ShellTask_ExecUnknown_InstallAppThread
0x00000000000006B0: ShellTask_InvokeCommand_DoInvokeThread
0x00000000000006B2: ShellTask_ProfsvcPostBootReminder_ReminderThread
0x00000000000007D1: Browseui_CBrowserFrame_CreateInstance
0x00000000000007D3: Browseui_CBrowserFrame_Close
0x00000000000007D5: Browseui_FeedViewer_PreviewStream
0x00000000000007D7: Browseui_Tabs_CloseTab
0x00000000000007D9: Browseui_Tabs_SwitchTabs
0x00000000000007DB: Browseui_Tabs_CloseOtherTabs
0x00000000000007DD: Browseui_SHOpenFolderWindow
0x00000000000007DF: Browseui_FrameMessagePump_Return
0x00000000000007E1: Browseui_FrameMessagePump_Back
0x00000000000007E3: Browseui_FrameMessagePump_Next
0x00000000000007E5: Browseui_FrameMessagePump_Prior
0x00000000000007E6: Browseui_FrameMessagePump_KeyDown
0x00000000000007E7: Browseui_FrameMessagePump_LButtonAction
0x00000000000007E8: Browseui_FrameMessagePump_RButtonAction
0x00000000000007E9: Browseui_Tabs_AddTabButton
0x00000000000007EB: Browseui_Tabs_TabReadyForNavigate
0x00000000000007ED: Browseui_Tabs_AddTabAPI
0x00000000000007EF: Browseui_CAddressEditBox_OnEndEditA
0x00000000000007F1: Browseui_Breadcrumb_Dropdown_Click
0x00000000000007F3: Browseui_Breadcrumb_Dropdown_Show
0x00000000000007F5: Browseui_WndProcBS_Restore
0x00000000000007F7: Browseui_WndProcBS_Minimize
0x00000000000007F9: Browseui_WndProcBS_Maximize
0x00000000000007FB: Browseui_CShellBrowser2_BrowseObject
0x00000000000007FD: Browseui_Back_Button_Clicked
0x00000000000007FF: Browseui_Forward_Button_Clicked
0x0000000000000801: Browseui_NavBar_CreateBands
0x0000000000000803: Browseui_AddressBand_PositionChildWindows
0x0000000000000805: Browseui_SearchControl_PositionChildWindows
0x0000000000000807: Browseui_AddressBand_OnBackgroundStateChanged
0x0000000000000809: Browseui_AutoComplete_StartCompletion
0x000000000000080B: Browseui_AutoComplete_UpdateCompletion
0x000000000000080D: Browseui_AutoComplete_StartSearch
0x000000000000080F: Browseui_AutoComplete_OnSearchComplete
0x0000000000000811: Browseui_AddressEditBox_ParsePath
0x0000000000000813: Browseui_FrameMessagePump_Activate
0x0000000000000815: Browseui_Browser_Navigate
0x0000000000000817: Browseui_Breadcrumb_RebuildToolbar
0x0000000000000BB9: CTray_MessageLoop_LButtonAction
0x0000000000000BBB: CTray_MessageLoop_Return
0x0000000000000BBD: CTray_Responsiveness
0x0000000000000FA1: ComCtl32_CommandLinks_Create
0x0000000000000FA3: ComCtl32_CommandLinks_Rendering
0x0000000000000FA5: Comctl32_ImageList_Draw
0x0000000000000FA7: ComCtl32_PropertyPage_CreatePropertySheetPage
0x0000000000000FA9: ComCtl32_TaskDialog_Open
0x0000000000000FAB: ComCtl32_Wizard_Open
0x0000000000000FAD: ComCtl32_Wizard_UserDismiss
0x0000000000000FAF: Comctl32_ImageList_Rebuild
0x0000000000001389: Comdlg32_FileDialog_Ready
0x000000000000138B: Comdlg32_FileDialog_FrameFirstVisible
0x000000000000138C: Comdlg32_FileDialog_FrameFirstRedraw
0x0000000000001771: CommandModule_ChangeNotify
0x0000000000001839: Thumbnails_Extract
0x000000000000183B: Thumbnails_FastExtract
0x000000000000183D: Thumbnails_CacheLookup
0x000000000000183F: Thumbnails_Adornment
0x0000000000001841: Thumbnails_ExtractNoCache
0x0000000000001843: Thumbnails_FolderThumbnailRender
0x0000000000001845: Thumbnails_ResizeCache
0x0000000000001847: Thumbnails_Initialize
0x0000000000001849: Thumbnails_GetThumbnail
0x000000000000184B: Thumbnails_SetThumbnail
0x000000000000184D: Thumbnails_GetAspectRatio
0x000000000000184F: Thumbnails_DiskCleanup
0x0000000000001851: Thumbnails_ReadThumbsDB
0x0000000000001853: Thumbnails_LoadFromThumbsDB
0x0000000000001855: Thumbnails_WriteThumbsDB
0x0000000000001857: Thumbnails_CropLookupSize
0x0000000000001859: Thumbnails_HostSelfDestruct
0x000000000000185B: Thumbnails_ExtractionTimeout
0x000000000000185C: RemoteThumbsDb_SQM
0x000000000000185F: Thumbnails_FullExtractionFailed
0x0000000000001860: Thumbnails_CacheDataFile_GetThumbnail
0x0000000000001862: Thumbnails_GetThumbnailStream
0x0000000000001965: CommonFileDialog_ApplyProperties
0x0000000000001967: CommonFileDialog_ControlsChangeNotify
0x0000000000001969: CommonFileDialog_DetectSlowNetworkLocation
0x000000000000196B: CommonFileDialog_ExecuteOpen
0x000000000000196D: CommonFileDialog_Open
0x000000000000196F: CommonFileDialog_PlacesBar_Rendering
0x0000000000001971: CommonFileDialog_PopulateControls
0x0000000000001973: CommonFileDialog_SQM
0x0000000000001B59: ConflictResolution_CRUD_Open
0x0000000000001B5B: ConflictResolution_Rendering
0x0000000000001B5D: ConflictResolution_UserIgnoreChangeNotify
0x0000000000001F41: DetailsPropertyPage_AddPages
0x0000000000001F43: DetailsPropertyPage_Open
0x0000000000001F45: DetailsPropertyPage_Save
0x000000000000251D: Explorer_StartMenu_Open
0x000000000000251F: Explorer_StartMenu_Ready
0x0000000000002521: Explorer_StartPane_AllProgram_Folder_Open
0x0000000000002525: Explorer_StartPane_AllPrograms_Show
0x0000000000002527: Explorer_StartPane_Cascade_Show
0x0000000000002529: Explorer_StartPane_OpenBox_Char
0x000000000000252B: Explorer_StartPane_OpenBox_Launch
0x000000000000252D: Explorer_StartPane_OpenBox_SearchReady
0x000000000000252F: Explorer_StartMenu_Show
0x0000000000002531: Explorer_StartMenu_Hide
0x0000000000002533: Explorer_StartPane_OpenBox_TopMatchReady
0x0000000000002535: Explorer_StartMenu_ControlPanel_Launch
0x0000000000002537: Explorer_StartMenu_Favorites_Launch
0x0000000000002539: Explorer_StartMenu_RecentItems_Launch
0x000000000000253B: Explorer_StartMenu_Help_Launch
0x000000000000253D: Explorer_StartMenu_Network_Launch
0x000000000000253F: Explorer_StartMenu_Printers_Launch
0x0000000000002543: Explorer_StartMenu_SPAD_Launch
0x0000000000002545: Explorer_StartMenu_AdminTools_Launch
0x0000000000002547: Explorer_StartMenu_Run_Launch
0x0000000000002549: Explorer_StartMenu_MFU_Launch
0x000000000000254B: Explorer_StartMenu_Pinned_Launch
0x000000000000254D: Explorer_StartMenu_ConnectTo_Launch
0x000000000000254F: Explorer_StartPane_AllPrograms_BackButton
0x0000000000002551: ExplorerFrame_OpenComputer
0x0000000000002553: ExplorerFrame_OpenDocuments
0x0000000000002555: ExplorerFrame_OpenMusic
0x0000000000002557: ExplorerFrame_OpenPictures
0x0000000000002558: ExplorerFrame_NavigateDataSource
0x0000000000002559: Explorer_StartMenu_Visible_Menu_Items
0x000000000000255B: Explorer_StartMenu_Mode
0x000000000000255D: Explorer_StartMenu_Pinned_Item_Added
0x000000000000255F: Explorer_StartMenu_Pinned_Item_Removed
0x0000000000002560: Explorer_StartMenu_Pinned_Items_Rearranged
0x0000000000002561: Explorer_StartPane_AllPrograms_Launched
0x0000000000002563: Explorer_StartMenu_Pinned_Count
0x0000000000002565: Explorer_StartMenu_MFU_Count
0x0000000000002567: Explorer_StartPane_AllPrograms_Folder_Opened
0x0000000000002569: Explorer_StartPane_AllPrograms_Count
0x000000000000256D: Explorer_StartMenu_NetworkCons_Launch
0x000000000000256F: Explorer_Is_Mobile_PC
0x0000000000002571: Explorer_Is_Joined_To_Domain
0x0000000000002573: Explorer_StartMenu_Cascading_Menu_Items
0x0000000000002575: Explorer_User_Account_Type
0x0000000000002577: Explorer_Breadcrumbbar_Selected_Navigation
0x0000000000002579: Explorer_Breadcrumbbar_Edited_Navigation
0x000000000000257B: Explorer_WordWheel_Activated
0x000000000000257D: ExplorerFrame_OpenProfile
0x000000000000257F: Explorer_Help_Launched
0x0000000000002581: Explorer_InitializingExplorer
0x0000000000002583: Explorer_CreateTray
0x0000000000002587: Explorer_CreateTrayWindow
0x0000000000002589: Explorer_InitStartButton
0x000000000000258B: Explorer_CreateDesktop
0x000000000000258D: Explorer_InitInstrumentation
0x000000000000258F: Explorer_FolderSettings
0x0000000000002591: Explorer_Start
0x0000000000002593: Explorer_StartMenu_Games_Launch
0x0000000000002595: Explorer_MessageLoop
0x0000000000002597: Explorer_KickedOffDelayedBootWork
0x0000000000002599: Explorer_PlaySoundRequest
0x000000000000259B: Explorer_PlaySoundExecute
0x000000000000259D: Explorer_PlaySoundWait
0x000000000000259F: Explorer_SessionChangeMessage
0x00000000000025A1: Explorer_PowerMessage
0x00000000000025A3: Explorer_PowerBroadcastMessage
0x00000000000025A5: Explorer_LoadingIconCache
0x00000000000025A7: Explorer_IconCache_ImageListSize
0x00000000000025A9: Explorer_IconCache_TableSize
0x00000000000025AB: Explorer_Roaming_SyncAtLogon
0x00000000000025AD: Explorer_Roaming_WaitAtLogon
0x00000000000025AF: Explorer_Startup_PhaseReached
0x00000000000025B0: Explorer_Startup_Step
0x00000000000025B2: Explorer_Startup_SerializationWait
0x00000000000025B4: Explorer_Startup_ParallelStep
0x00000000000025B7: Explorer_Roaming_BootstrapRestore
0x00000000000025BF: Explorer_WriteDataForOEMApp
0x00000000000025C1: Explorer_WriteDataForOEMApp_ShellTask
0x00000000000025E3: Explorer_Startup_InitializeDesktop
0x00000000000025E5: Explorer_ProcessRunOnceEx
0x00000000000025E7: Explorer_ProcessRunOnce
0x00000000000025E9: Explorer_EnumeratingRunKey
0x00000000000025EB: Explorer_ExecutingFromRunKey
0x00000000000025ED: Explorer_ExecutingFromRunKeyAsJob
0x00000000000025EF: Explorer_ExecutingFromStartupMenu
0x00000000000025F1: Explorer_StartupAppName
0x00000000000025F2: Explorer_BoxingProcess
0x00000000000025F4: Explorer_Startup_Run6432_Stats
0x00000000000025F5: Explorer_Startup_Run6432_Failed
0x0000000000002649: Explorer_MinimizeAllThread
0x000000000000264A: Explorer_StartMenu_RunDialog
0x000000000000264C: Explorer_StartMenu_AppTile_Hover
0x000000000000264D: Explorer_DestinationList_Close
0x000000000000264E: Explorer_DestinationList_Launch
0x0000000000002650: EXPLORER_NAVIGATE
0x0000000000002652: EXPLORER_DRAG_DROP
0x0000000000002653: Explorer_PinDefaultItems_RetrievePidlFailure
0x0000000000002654: Explorer_PinnedListItemRemoved
0x00000000000026AD: SearchFolder_StartMenu_BaseQuery
0x00000000000026AF: ExplorerFrame_FirstPage_RealizeGroupPass1
0x00000000000026B1: ExplorerFrame_FirstPage_RealizeGroupPass2
0x00000000000026B3: ExplorerFrame_ExplorerLauncher_Launch_Failure
0x00000000000026B5: SearchFolder_CreateItemCollection
0x00000000000026B7: Shell32_ObservableCollection_OnCollectionChanged
0x00000000000026B8: Shell32_ObservableCollection_OnGetCountDone
0x00000000000026B9: Shell32_ObservableCollection_OnPrepareDone
0x00000000000026BA: Shell32_ObservableCollection_OnItemsAdded
0x00000000000026BB: Shell32_ObservableCollection_OnItemsDeleted
0x00000000000026BC: Shell32_ObservableCollection_OnItemMoved
0x00000000000026BD: Shell32_ObservableCollection_OnItemTranslated
0x00000000000026BE: Shell32_ObservableCollection_OnUniqueLeafCountChanged
0x00000000000026BF: Shell32_ObservableCollection_OnCancelled
0x0000000000002711: ExplorerTemplates_ChangeNotify
0x0000000000002AF9: FilterControl_ApplyingFilter
0x0000000000002AFB: FilterControl_PopulateFilters
0x0000000000002AFD: FilterControl_Show
0x0000000000002AFF: FilterControl_UserCheckedFilter
0x0000000000002B01: FilterControl_InsertFilters
0x0000000000002B05: ListViewPopup_SetRedraw
0x0000000000002B07: ListViewPopup_SizeToContent
0x0000000000002B09: FilterControl_Stack
0x0000000000002EE1: Shlwapi_SHRegisterValidateTemplate
0x0000000000002F45: Shlwapi_SHGetSignatureInfo
0x0000000000002F46: Shlwapi_SHGetSignatureInfo_Authenticode
0x0000000000002F47: Shlwapi_SHGetSignatureInfo_Catalog
0x0000000000002F48: Shlwapi_SHGetSignatureInfo_WinVerifyTrust
0x0000000000002F49: Shlwapi_SHGetSignatureInfo_VersionInfo
0x0000000000002F4A: Shlwapi_SHGetSignatureInfo_OSCheck
0x0000000000002F4B: Shlwapi_SHGetSignatureInfo_CheckChainToMSRoot
0x00000000000032C9: NamespaceControl_ChangeNotify
0x00000000000032CB: NamespaceControl_Expand
0x00000000000032CD: NamespaceControl_Plus_Calculation
0x00000000000032CF: NamespaceControl_Rendering
0x000000000000332D: Feed_Search
0x00000000000034BD: Notification_UserDismiss
0x00000000000034BF: Notification_Launch
0x00000000000034C1: Notification_Displayed
0x00000000000034C3: Notification_While_Busy
0x00000000000034C5: Notification_While_Inactive
0x00000000000034C7: Notification_Dismissed
0x00000000000034C9: Notification_TimedOut
0x00000000000034CB: Notification_Settings
0x00000000000034CD: Notification_WrenchDismissed
0x00000000000036B1: PreviewPane_CommitChange
0x00000000000036B3: PreviewPane_UpdateSelection
0x00000000000036B5: PreviewPane_MetadataExtractorDoWork
0x00000000000036B7: PreviewPane_MetadataExtractorDispatch
0x00000000000036B9: PreviewPane_SQM
0x0000000000003715: StatusBarModule_GetPropertiesWorkItemDoWork
0x0000000000003717: StatusBarModule_GetPropertiesWorkItemDispatch
0x0000000000003779: TypeAhead_SearchHistoryResults
0x000000000000377B: TypeAhead_LocalMetadataResults
0x000000000000377D: TypeAhead_ExternalResults
0x000000000000377F: TypeAhead_OnQuery
0x0000000000003781: TypeAhead_ResultsPrimary
0x0000000000003783: TypeAhead_ResultsSecondary
0x0000000000003785: TypeAhead_Timeout
0x0000000000003787: TypeAhead_SearchHistoryStore
0x0000000000003789: TypeAhead_SearchHistoryCleared
0x000000000000378B: TypeAhead_CancelQuery
0x000000000000378C: TypeAhead_Enabled
0x00000000000038A5: Properties_BaseControl_Create
0x00000000000038A7: Properties_BaseControl_WindowlessDraw
0x00000000000038A9: Properties_CalendarControl_Create
0x00000000000038AB: Properties_CalendarControl_GetValue
0x00000000000038AD: Properties_CalendarControl_SetValue
0x00000000000038AF: Properties_DrawPercentFull_WindowlessDraw
0x00000000000038B1: Properties_DrawProgressBar_WindowlessDraw
0x00000000000038B3: Properties_DropListControl_Create
0x00000000000038B5: Properties_DropListControl_GetValue
0x00000000000038B7: Properties_DropListControl_SetValue
0x00000000000038B9: Properties_MVPControl_Create
0x00000000000038BB: Properties_MVPControl_GetValue
0x00000000000038BD: Properties_MVPControl_SetValue
0x00000000000038BF: Properties_MVPControl_WindowlessDraw
0x00000000000038C1: Properties_MultiLineEditControl_Create
0x00000000000038C3: Properties_MultiLineEditControl_GetValue
0x00000000000038C5: Properties_MultiLineEditControl_SetValue
0x00000000000038C7: Properties_NavDropDownControl_Create
0x00000000000038C9: Properties_NavDropDownControl_GetValue
0x00000000000038CB: Properties_NavDropDownControl_SetValue
0x00000000000038CD: Properties_RatingsControl_Create
0x00000000000038CF: Properties_RatingsControl_GetValue
0x00000000000038D1: Properties_RatingsControl_SetValue
0x00000000000038D3: Properties_RatingsControl_WindowlessDraw
0x00000000000038D5: Properties_SingleLineEditControl_Create
0x00000000000038D7: Properties_SingleLineEditControl_GetValue
0x00000000000038D9: Properties_SingleLineEditControl_SetValue
0x00000000000038DB: Properties_MultiComplete_Populate
0x00000000000038DD: Properties_MultiComplete_Query
0x00000000000038DF: Properties_MultiComplete_Match
0x00000000000038E1: Properties_PropVariantChangeType_Coercion
0x00000000000038E3: Properties_PropVariantHelper_Coercion
0x00000000000038E5: Properties_VariantHelper_Coercion
0x0000000000003A99: PropertyApply_DoOperation
0x0000000000003A9B: PropertyApply_SHApplyPropertiesToItem
0x0000000000003C8D: PropertyDescription_FormatForDisplay
0x0000000000003C8F: PropertyDescription_SHFormatForDisplay
0x0000000000003C91: PropertyDescription_SHGetPropertyDescription
0x0000000000003C93: PropertyDescription_SHGetPropertyDescriptionByName
0x0000000000003C95: PropertyDescription_SHGetPropertyDescriptionListFromString
0x0000000000003C97: PropertyDescription_CoerceToCanonicalValue
0x0000000000003C99: PropertyDescription_IsValueCanonical
0x0000000000003C9B: PropertySchema_LoadFromSavedBinaryForm
0x0000000000003C9D: PropertySchema_SaveAsBinaryForm
0x0000000000003C9F: SemanticType_PSGetSemanticTypeByName
0x0000000000004075: PropertyProvider_Commit
0x0000000000004077: PropertyProvider_GetValue
0x0000000000004079: PropertyProvider_GetValueObject
0x000000000000407B: PropertyProvider_SetValue
0x000000000000407D: PropertyStoreOverPropertySetStorage_GetValue
0x000000000000407F: PropertyStoreOverPropertySetStorage_SetValue
0x0000000000004081: PropertyStoreOverPropertySetStorage_Commit
0x00000000000040D8: FilePropertyStoreFactory_GetPropertyHandler
0x00000000000040DA: FilePropertyStoreFactory_GetInnateStore
0x00000000000040DC: FilePropertyStoreFactory_GetFallbackStore
0x00000000000040DE: FilePropertyStoreFactory_GetDesktopIniStore
0x00000000000040E0: FileFolderInnateStore_GetValue
0x00000000000040E2: FileFolderInnateStore_GetCount
0x00000000000040E4: FileFolderInnateStore_GetAt
0x00000000000040E6: FileFolderFallbackStore_GetValue
0x00000000000040E8: FileFolderFallbackStore_GetCount
0x00000000000040EA: FileFolderFallbackStore_GetAt
0x00000000000040EB: FileFolder_UseItemCacheContext
0x000000000000413C: ShellItem_GetPropertyStore
0x000000000000413E: ShellItem_GetPropertyStoreForKeys
0x0000000000004140: ShellItem_GetPropertyStoreWithCreateObject
0x0000000000004142: ShellItem_GetPropertyDescriptionList
0x0000000000004144: ShellItem_CreatePropertyProviderHelper
0x0000000000004146: ShellItemArray_GetPropertyStore
0x0000000000004148: ShellItemArray_GetPropertyDescriptionList
0x000000000000414A: CachedShellItem_GetPropertyStore
0x000000000000414C: ItemFallbackStore_GetValue
0x000000000000414E: ItemFallbackStore_GetCount
0x0000000000004150: ItemFallbackStore_GetAt
0x0000000000004152: ItemStoreOverFolder_GetValue
0x0000000000004154: ItemStoreOverFolder_GetValueFromDetailsEx
0x0000000000004156: ItemStoreOverFolder_GetCount
0x0000000000004158: ItemStoreOverFolder_GetAt
0x00000000000041AD: Library_SQM_CreateLibrary
0x00000000000041AE: Library_SQM_AddFolder
0x00000000000041AF: Library_Location_Count
0x00000000000041B0: Library_InUsersRoot_Count
0x00000000000041B1: Library_Save_Location
0x00000000000041B2: Library_Add_Location
0x00000000000041B3: Library_Remove_Location
0x00000000000041B4: Library_Has_Reordered_Locations
0x00000000000041B5: Add_Library_Location_EntryPoint
0x0000000000004205: PHLocationCreator_ScanSearchRoots
0x0000000000004207: PHLocationCreator_CreateSearchRootLocations
0x0000000000004209: PHLocationCreator_RemoveSearchRootLocations
0x000000000000420B: PHLocationCreator_SQM_CreateLibrary
0x0000000000004269: Scope_Flatten
0x000000000000426B: ScopePicker_Open
0x000000000000426D: ScopePicker_Folders_Rendering
0x000000000000426F: Scope_Load_From_XML
0x0000000000004271: Scope_Load_From_Stream
0x0000000000004273: ScopePicker_CScope_Load_From_Stream
0x00000000000042CD: Shake_Minimize
0x00000000000042CF: Shake_Restore
0x00000000000042D1: Shake_MinimizeWorker
0x00000000000042D3: Shake_RestoreWorker
0x00000000000042D5: Shake_MinimizeEnabled
0x00000000000042D7: Shake_DetectionCount
0x000000000000445D: ResolveUserNames_ResolveSids
0x000000000000445F: ResolveUserNames_ResolveStringSid
0x0000000000004461: ResolveUserNames_SHResolveUserNames
0x0000000000004463: ResolveUserNames_FriendlyNameLookup
0x0000000000004465: ResolveUserNames_SingleSidToNameLookup
0x0000000000004467: ResolveUserNames_MultipleSidsToNamesLookup
0x0000000000004469: ResolveUserNames_CachedFriendlyNameLookup
0x000000000000446B: GetCorrectOwnerSid_Lookup
0x000000000000446D: GetCorrectOwnerSid_LookupFromRegistry
0x0000000000004651: Shdocvw_BaseBrowser_DocumentComplete
0x0000000000004653: Shdocvw_BaseBrowser_ExplorerWindowReady
0x0000000000004655: Shdocvw_BaseBrowser_Navigate
0x0000000000004657: Shdocvw_PanningTool_ScrollElementBy
0x0000000000004659: Shdocvw_PanningTool_GetPanningProperties
0x000000000000465B: Shdocvw_PanningTool_SinglePan
0x000000000000465C: Shdocvw_PanningTool_Change_PanningMode
0x000000000000465D: Shdocvw_BaseBrowser_Explorer_Search_Query_Stream
0x000000000000465F: ExplorerFrame_FrameFirstVisible
0x0000000000004661: ExplorerFrame_FrameFirstRedraw
0x0000000000004845: Shell32_AutoListEditor_CommitSearch
0x0000000000004847: Shell32_AutoListEditor_Displayed
0x0000000000004849: Shell32_AutoListEditor_FillScopes
0x000000000000484B: Shell32_AutoListEditor_GetPropertyList
0x000000000000484D: Shell32_AutoListEditor_LaunchSearch
0x000000000000484F: Shell32_AutoPlay_IDynamicHWHandler
0x0000000000004851: Shell32_AutoPlay_IHWNotificationHandler
0x0000000000004853: Shell32_AutoPlay_IQueryCancelAutoPlay
0x0000000000004855: Shell32_AutoPlay_Logic
0x0000000000004858: Shell32_AutoPlay_DXP
0x0000000000004859: Shell32_AutoPlay_Sniff
0x000000000000485B: Shell32_CDesktopBrowser_LButtonAction
0x000000000000485C: Shell32_CDesktopBrowser_ShellReady
0x000000000000485D: Shell32_CExplorerBrowser_BrowseObjectInternal
0x000000000000485F: Shell32_CFindCmd_DoSearch
0x0000000000004861: Shell32_CGrepQuery_Crawl
0x0000000000004863: Shell32_CommandModule_SelectionChange
0x0000000000004865: Shell32_ControlPanel_CategoryView_Init
0x0000000000004867: Shell32_ControlPanel_CategoryView_LoadTasks
0x0000000000004869: Shell32_ControlPanel_CategoryView_Search
0x000000000000486B: Shell32_ControlPanel_NavPane_Init
0x000000000000486D: Shell32_PinnedApplications_SQMStream
0x000000000000486F: Shell32_AutoPlay_Proximity_Sniff
0x0000000000004871: Shell32_DefView_LoadImage
0x0000000000004873: Shell32_DefView_AutoSizeColumns
0x0000000000004875: Shell32_DefView_Enumeration
0x0000000000004877: Shell32_DefView_Filter
0x0000000000004879: Shell32_DefView_Filter_Generation
0x000000000000487B: Shell32_DefView_FirstBatch
0x000000000000487D: Shell32_DefView_Group
0x000000000000487F: Shell32_DefView_Initial_Sort
0x0000000000004881: Shell32_DefView_ListViewDone
0x0000000000004883: Shell32_DefView_PropertiesDone
0x0000000000004885: Shell32_DefView_RightClickContextMenu
0x0000000000004887: Shell32_DefView_Stack
0x0000000000004889: Shell32_DefView_Thumbnail_Extract
0x000000000000488B: Shell32_CollectionLock_GetSingleQueueItem
0x000000000000488D: Shell32_CollectionLock_GetQueueItems
0x000000000000488F: Shell32_DefView_Thumbnail_Update
0x0000000000004891: Shell32_DefView_Thumbnail_Updateview
0x0000000000004893: Shell32_DefView_ViewModeChange
0x0000000000004895: Shell32_Defview_Sort
0x0000000000004897: Shell32_GeneratingContextMenu
0x0000000000004899: Shell32_InvokingContextMenu
0x000000000000489B: Shell32_KnownFolderManager_GetEnumKnownFolders
0x000000000000489D: Shell32_KnownFolder_GetLocation
0x000000000000489F: Shell32_KnownFolder_GetPath
0x00000000000048A1: Shell32_KnownFolder_SetPath
0x00000000000048A3: Shell32_List_Add
0x00000000000048A5: Shell32_List_Enum
0x00000000000048A7: Shell32_List_Remove
0x00000000000048A9: Shell32_MountPoint_SHHardwareEvent
0x00000000000048AB: Shell32_MountPoint_SHHardwareEvent_DeviceArrived
0x00000000000048AD: Shell32_MountPoint_SHHardwareEvent_DeviceRemoved
0x00000000000048AF: Shell32_MountPoint_SHHardwareEvent_DeviceUpdated
0x00000000000048B1: Shell32_MountPoint_SHHardwareEvent_MountPointArrived
0x00000000000048B3: Shell32_MountPoint_SHHardwareEvent_MountPointRemoved
0x00000000000048B5: Shell32_MountPoint_SHHardwareEvent_VolumeArrived
0x00000000000048B7: Shell32_MountPoint_SHHardwareEvent_VolumeDismounted
0x00000000000048B9: Shell32_MountPoint_SHHardwareEvent_VolumeMounted
0x00000000000048BB: Shell32_MountPoint_SHHardwareEvent_VolumeRemoved
0x00000000000048BD: Shell32_MountPoint_SHHardwareEvent_VolumeUpdated
0x00000000000048BF: Shell32_MountPoint_WMDeviceChange
0x00000000000048C1: Shell32_MountPoint_WMDeviceChange_MediaArrival
0x00000000000048C3: Shell32_MountPoint_WMDeviceChange_MediaRemoval
0x00000000000048C5: Shell32_MountPoint_WMDeviceChange_MountPointArrival
0x00000000000048C7: Shell32_MountPoint_WMDeviceChange_MountPointRemoval
0x00000000000048C9: Shell32_MountPoint_WMDeviceChange_NetShareArrival
0x00000000000048CB: Shell32_MountPoint_WMDeviceChange_NetShareRemoval
0x00000000000048CD: Shell32_PSC_Autolist_Show
0x00000000000048CF: Shell32_PSC_Explorer_Template_Change
0x00000000000048D1: Shell32_SHGetFolderLocation
0x00000000000048D3: Shell32_SHGetFolderLocationEx
0x00000000000048D5: Shell32_SHGetFolderPath
0x00000000000048D7: Shell32_SHGetFolderPathEx
0x00000000000048D9: Shell32_SHSetFolderPath
0x00000000000048DD: Shell32_DefView_Keydown
0x00000000000048DE: Shell32_DefView_NoIShellFolder2
0x00000000000048E1: Shell32_ControlPanel_SQM_LinkClicked
0x00000000000048E2: Shell32_ControlPanel_SQM_ViewMode
0x00000000000048E3: Shell32_ControlPanel_FloppyOrCD_Launch
0x00000000000048E4: Shell32_ControlPanel_SQM_ViewChange
0x00000000000048E5: Shell32_ExplorerBrowser_Ready
0x00000000000048E7: Shell32_DefView_HighQualityStretch
0x00000000000048E9: Shell32_DefView_Scroll
0x00000000000048ED: Shell32_DefView_Filtering_Clicked
0x00000000000048F3: Shell32_Search_Index_Enabled
0x00000000000048F4: Shell32_List_LaunchInBasket
0x00000000000048F5: Shell32_ItemThumbnail_SetItems
0x00000000000048F7: Shell32_ItemThumbnail_Prefetch
0x00000000000048F9: Shell32_ItemThumbnail_Draw
0x00000000000048FB: Shell32_NetFolder_ParseDisplayName
0x00000000000048FD: Shell32_NetFolder_ParseUNCName
0x00000000000048FF: Shell32_NetFolder_SHWNetGetResourceInformationAlloc
0x0000000000004901: Shell32_NetFolder_WNetGetResourceParent
0x0000000000004903: Shell32_NetFolder_WNetUseConnection
0x0000000000004905: Shell32_DefView_Property_Extraction
0x0000000000004907: Shell32_DefView_Property_Extract
0x0000000000004909: Shell32_DefView_Property_ReadAsOneBatch
0x000000000000490B: Shell32_DefView_GetEnumerator
0x000000000000490D: Shell32_DefView_Thumbnail_EnumLookup
0x000000000000490F: Shell32_Autoplay_Master_Switch
0x0000000000004911: Shell32_Autoplay_Default_Handler
0x0000000000004913: Shell32_StartMenuQueryFactory_WaitForNextResult
0x0000000000004915: Shell32_StartMenuQueryFactory_Programs
0x0000000000004917: Shell32_StartMenuQueryFactory_Programs_Grep
0x0000000000004919: Shell32_StartMenuQueryFactory_Programs_Run
0x000000000000491B: Shell32_StartMenuQueryFactory_Programs_ControlPanels
0x000000000000491D: Shell32_StartMenuQueryFactory_Internet
0x000000000000491F: Shell32_StartMenuQueryFactory_Internet_Run
0x0000000000004921: Shell32_StartMenuQueryFactory_Internet_Favorites
0x0000000000004923: Shell32_StartMenuQueryFactory_Internet_History
0x0000000000004925: Shell32_StartMenuQueryFactory_Files
0x0000000000004927: Shell32_StartMenuQueryFactory_Files_Recent
0x0000000000004929: Shell32_StartMenuQueryFactory_Files_DisplayName
0x000000000000492B: Shell32_StartMenuQueryFactory_Files_FullText
0x000000000000492D: Shell32_StartMenuQueryFactory_Communications
0x000000000000492F: Shell32_StartMenuQueryFactory_Communications_Contacts
0x0000000000004931: Shell32_StartMenuQueryFactory_Communications_FullText
0x0000000000004933: Shell32_IsElevationRequired
0x0000000000004935: Shell32_IndexInfoCache_Refresh
0x0000000000004937: Shell32_DefView_FireFolderChanged
0x0000000000004939: Shell32_DefView_FireContentsChanged
0x000000000000493B: Shell32_DUIFrame_SendContentsChanged
0x000000000000493D: Shell32_DUIFrame_SendFolderChanged
0x000000000000493F: Shell32_SHExtCoCreateInstance_Valid
0x0000000000004940: Shell32_DefView_AddColumn
0x0000000000004941: Shell32_ItemStore_ExtractProperty
0x0000000000004949: Shell32_KnownFolderManager_Redirect
0x000000000000494B: Shell32_KnownFolderManager_Redirect_Copy
0x000000000000494D: Shell32_CDesktopBrowser_DesktopIconLayoutRestore
0x0000000000004950: Shell32_CDesktopBrowser_DesktopAutoArrange
0x0000000000004951: Shell32_CDesktopBrowser_DesktopAlignToGrid
0x0000000000004952: Shell32_CDesktopBrowser_DesktopIconSize
0x0000000000004953: Shell32_PrivProf_CacheCount
0x0000000000004955: Shell32_CollectionLock_InsertQueueItem
0x0000000000004957: Shell32_CGrepQuery_EvaluateItem
0x0000000000004959: Shell32_CConditionEvaluator_DoesItemMatchCondition
0x000000000000495B: Shell32_CGrepConditionEvaluator_DoesContentMatchCondition
0x000000000000495D: Shell32_GrepDoesItemMatchCondition
0x000000000000495F: Shell32_SubCommandMenu_Enumerate
0x0000000000004963: Shell32_MountPoint_InitLocalDrives
0x0000000000004965: CDesktopBrowser_WallpaperAnimation_Setup
0x0000000000004967: CDesktopBrowser_WallpaperAnimation_Cleanup
0x0000000000004969: Shell32_CDesktopBrowser_SortyBy
0x000000000000496A: Shell32_CDesktopBrowser_IconPositions
0x000000000000496B: Shell32_CDesktopBrowser_WindowRegItem
0x000000000000496C: Shell32_CDesktopBrowser_NonWindowRegItem
0x000000000000496D: Shell32_CDesktopBrowser_ItemCount
0x000000000000496E: Shell32_CDesktopBrowser_UsageTime
0x000000000000496F: Shell32_DefView_LoadColumns
0x0000000000004971: Shell32_CopyEngine_FileOperation
0x0000000000004973: Shell32_CopyEngine_OverallOperation
0x0000000000004975: Shell32_CopyEngine_OverallTransfer
0x0000000000004977: Shell32_CopyEngine_ConfirmedDelete
0x0000000000004979: Shell32_CopyEngine_WillRecycleToBin
0x000000000000497B: Shell32_CopyEngine_RecycleItem
0x000000000000497D: Shell32_CopyEngine_FileOpen
0x000000000000497F: Shell32_CopyEngine_CallMoveFile
0x0000000000004981: Shell32_CommonPlaces_Drop
0x0000000000004983: Shell32_ReadingPaneModule_Load
0x0000000000004985: Shell32_LinkTracking
0x0000000000004987: Shell32_CopyEngine_SQMStream
0x00000000000049C7: Shell32_CopyEngine_UAC_CopyEngine_Elevation
0x0000000000004989: Shell32_AppDestList_Custom_Commit
0x000000000000498B: Shell32_AppDestList_Custom_Load
0x000000000000498D: Shell32_AppDestList_Custom_LoadRemoved
0x000000000000498F: Shell32_AppDestList_Custom_RemoveDest
0x0000000000004991: Shell32_UA_FireEvent
0x0000000000004993: Shell32_UA_UpdateLoggerState
0x0000000000004995: Shell32_UA_SetEntry
0x0000000000004999: Shell32_UA_GarbageCollectScheduled
0x000000000000499B: Shell32_UA_GarbageCollect
0x000000000000499D: Shell32_UA_SnapRValuesScheduled
0x000000000000499F: Shell32_UA_SnapRValues
0x00000000000049A1: Shell32_UA_DeleteEntry
0x00000000000049A3: Shell32_UA_RenameEntry
0x00000000000049A5: Shell32_UA_ReplaceNMaxCandidate
0x00000000000049A7: Shell32_UA_RebuildSessionScheduled
0x00000000000049A9: Shell32_UA_RebuildSession
0x00000000000049AB: Shell32_AutoDestList_GetList
0x00000000000049AD: Shell32_AutoDestList_AddUsagePoint
0x00000000000049AF: Shell32_AutoDestList_PinItem
0x00000000000049B1: Shell32_DragDropHelper_UpdateLayeredWindow
0x00000000000049B3: Shell32_AutoDestList_IsPinned
0x00000000000049B5: Shell32_AutoDestList_CalculateDecay
0x00000000000049B7: Shell32_AutoDestList_GarbageCollecting
0x00000000000049B9: Shell32_BrowserProgressAggregator_Register
0x00000000000049BB: Shell32_BrowserProgressAggregator_Unregister
0x00000000000049BD: Shell32_FilterDestByAssoc
0x00000000000049BF: Shell32_AppDestList_Custom_AppendCategory
0x00000000000049C1: Shell32_DefView_CreateNewCollection
0x00000000000049C3: Shell32_DefView_ExecStop
0x00000000000049C5: Shell32_DefView_ExecRefresh
0x00000000000049C9: Shell32_ItemThumbnail_Prefetch_Dispatch
0x00000000000049D5: Shell32_CopyEngine_FileCreate
0x00000000000049D7: Shell32_CopyEngine_ProgressUpdate
0x00000000000049D9: Shell32_CopyEngine_FileOperation_Info
0x00000000000049DB: Shell32_CopyEngine_ProgressUpdateSkipped
0x00000000000049DD: Shell32_CopyEngine_ProgressData
0x00000000000049DF: Shell32_CopyEngine_ProgressEstimate
0x00000000000049E1: Shell32_CopyEngine_ProgressSpeed
0x00000000000049E3: Shell32_CopyEngine_MoveAsCopyDelete
0x00000000000049E5: Shell32_DragDropHelper_AddInfoToWindow
0x00000000000049E7: Shell32_DragDropHelper_ExtractThumbnail
0x00000000000049E9: Shell32_SHDoDragDrop_Drop
0x00000000000049EB: Shell32_PerfMarker1
0x00000000000049ED: Shell32_PerfMarker2
0x00000000000049EF: Shell32_PerfMarker3
0x00000000000049F5: Shell32_NewMenu_Folder
0x00000000000049F6: Shell32_NewMenu_Shortcut
0x00000000000049F7: Shell32_NewMenu_Other
0x00000000000049F8: Shell32_DesktopContextMenu_Personalize
0x00000000000049F9: Shell32_DesktopContextMenu_Display
0x00000000000049FB: Shell32_SCFFileUsage_SQM
0x00000000000049FD: Shell32_ExternalOverlayDllLoad
0x00000000000049FF: Shell32_RunFileDlgDisplayed
0x0000000000004A06: Shell32_SHChangeNotify_Register_Client
0x0000000000004A08: Shell32_SHChangeNotify_Register_NotifyThread
0x0000000000004A0A: Shell32_SHChangeNotify_Deregister_Client
0x0000000000004A0C: Shell32_SHChangeNotify_Deregister_NotifyThread
0x0000000000004A0E: Shell32_SHChangeNotify_Notify_Client
0x0000000000004A10: Shell32_SHChangeNotify_Notify_NotifyThread
0x0000000000004A12: Shell32_SHChangeNotify_SendNotification_NotifyThread
0x0000000000004A14: Shell32_SHChangeNotify_HungApp
0x0000000000004A1A: UndoNode_PreItemChanged
0x0000000000004A1C: UndoNode_PostItemChanged
0x0000000000004A1E: UndoNode_PostLeave
0x0000000000004A20: UndoNode_Cleanup
0x0000000000004A22: CopyEngine_PerformUndo
0x0000000000004A24: CopyEngine_ClearUndo
0x0000000000004A39: ShellTraceId_TaskScheduler_ResumeTask
0x0000000000004A3B: ShellTraceId_TaskScheduler_RunTask
0x0000000000004A3D: ShellTraceId_TaskScheduler_PurgeTasks
0x0000000000004A3F: ShellTraceId_TaskScheduler_AddIdleTask
0x0000000000004A41: ShellTraceId_TaskScheduler_AddTask
0x0000000000004A9D: Shell32_RecentDoc_Processed
0x0000000000004B01: LUA_Elevation_Attempts
0x0000000000004BC9: FileClassStore_SetFileClassHandler
0x0000000000004BCB: FileClassStore_SetFileClassInt
0x0000000000004BCD: FileClassStore_SetFileClassString
0x0000000000004BCF: FileClassStore_LookupFileClassHandler
0x0000000000004BD1: FileClassStore_LookupFileClassString
0x0000000000004BD3: FileClassStore_LookupFileClassInt
0x0000000000004BD5: IconCache_LookupIcon
0x0000000000004BD7: IconCache_AddIcon
0x0000000000004BD9: IconCache_RemoveIcon
0x0000000000004BDB: IconCache_GetFileOverlayInfo
0x0000000000004BDD: IconCache_CacheMiss
0x0000000000004BDF: IconCache_ScaleImage
0x0000000000004C2D: CDesktopFolder_ParseDisplayName
0x0000000000004C2F: CDesktopFolder_GetDisplayNameOf
0x0000000000004C91: Shell32_ControlPanel_HomePage_Init
0x0000000000004C93: Shell32_ControlPanel_LoadApplets
0x0000000000004C95: Shell32_ControlPanel_LoadTasks
0x0000000000004C97: Shell32_ControlPanel_Search
0x0000000000004C9B: Shell32_ControlPanel_Search_NoResults
0x0000000000004C9D: Shell32_ControlPanel_SearchResults_Applet
0x0000000000004C9F: Shell32_ControlPanel_SearchResults_Task
0x0000000000004CA1: Shell32_ControlPanel_TaskStateCondition
0x0000000000004CA3: Shell32_ControlPanel_NavPane_Mode
0x0000000000004CA5: Shell32_ControlPanel_NavPane_TransitionAnimation
0x0000000000004CA7: Shell32_ControlPanel_NavPane_LinkAdded
0x0000000000004CA9: Shell32_ControlPanel_TypeAheadSearch_Timeout
0x0000000000004CAB: Shell32_ControlPanel_TypeAheadSearch_NotFound
0x0000000000004CAC: Shell32_ControlPanel_SlowAppletsLoaded
0x0000000000004CB3: Explorer_ControlPanel_Settings_Sync
0x0000000000004D59: ShowDesktop_Usage
0x0000000000004D5B: ShowDesktop_RaiseDesktop
0x0000000000004D5D: ShowDesktop_RegistryWrite
0x0000000000004DBC: StartButton_ChangeState
0x0000000000004E21: StartMenu_OpenContextMenu
0x0000000000004E23: StartMenu_PinItemToMenu
0x0000000000004E25: StartMenu_Fill_MenuCache
0x0000000000004E27: StartMenu_Left_Control_Button_Split_Open
0x0000000000004E29: StartMenu_Right_Control_Button_Split_Open
0x0000000000004E2B: StartMenu_Left_Control_Button_Label
0x0000000000004E2D: StartMenu_Right_Control_Button_Label
0x0000000000004E2F: StartMenu_Logoff_Usage_Stream
0x0000000000004E31: StartMenu_Username_Clicked
0x0000000000004E33: StartMenu_UserTile_Clicked
0x0000000000004E35: StartMenu_Search_Usage
0x0000000000004E37: StartMenu_AllPrograms_Search_Usage
0x0000000000004E39: StartMenu_Search_TopResult_Launch
0x0000000000004E3B: StartMenu_Advanced_Search_Launch
0x0000000000004E3D: StartMenu_Search_Result_Launch
0x0000000000004E3F: StartMenu_Search_UNC_Path
0x0000000000004E41: StartMenu_WordWheel_Activated
0x0000000000004E43: StartMenu_Search_Computer_Count
0x0000000000004E45: StartMenu_Search_Internet_Count
0x0000000000004E47: StartMenu_Search_URL_Count
0x0000000000004E49: StartMenu_Search_Dropdown_Count
0x0000000000004E4B: StartMenu_Search_Group_Usage
0x0000000000004E4D: StartMenu_Applications_Launched
0x0000000000004E4F: Rearranging_StartMenuTaskbar
0x0000000000004E51: Pinned_Applications
0x0000000000004E53: DestinationRemoval_StartMenuTaskbar
0x0000000000004E55: Pinned_Destinations_StartMenuTaskbar
0x0000000000004E57: Destination_Menu_Usage_StartMenuTaskbar
0x0000000000004E59: Start_Menu_Recent_Items_Menu
0x0000000000004E5B: StartMenu_MFU_Application_Removal
0x0000000000004E5D: Application_Launches_StartMenuTaskbar
0x0000000000004E5F: TurnOffUsageTrackingStartMenuTaskbar
0x0000000000004E61: Taskbar_DestinationList_Prepopulate
0x0000000000004E63: StartMenu_DestinationList_Refresh
0x0000000000004E65: StartMenu_DestinationList_EnumData
0x0000000000004E67: Destination_Menu_Action_StartMenuTaskbar
0x0000000000004E68: Destination_Menu_Layout_StartMenuTaskbar
0x0000000000004E69: Destination_Removal_StartMenuTaskbar
0x0000000000004E6B: StartMenu_Animation
0x0000000000004E86: StartMenuCPL_Load
0x0000000000004E88: StartMenuCPL_Apply
0x0000000000004E8A: TaskbarCPL_Load
0x0000000000004E8C: TaskbarCPL_Apply
0x0000000000004E8F: StartMenu_ByUsage_EnumItems
0x00000000000051A4: UserTile_Taskbar_Control_Initialize
0x00000000000051A6: UserTile_Store_Commit
0x00000000000051A9: UserTile_Store_GetImage
0x00000000000051AB: UserTile_Store_SetImageFromFile
0x00000000000051AD: UserTile_Store_SetImageFromStream
0x00000000000051AF: UserTile_Store_SetImageFromBitmap
0x00000000000051B2: UserTile_DynamicTile_Init
0x00000000000051B4: UserTile_DynamicTile_Playback
0x00000000000051B6: UserTile_Taskbar_Control_DelayInitialize
0x00000000000051B8: UserInfo_GetUserName
0x0000000000005209: SystemTray_ChangeNotify
0x000000000000520B: SystemTray_UserClickedChevon_ChangeNotify
0x000000000000520D: SystemTray_OverflowShown
0x000000000000520F: SystemTray_IconAdded
0x0000000000005211: SystemTray_IconRemoved
0x0000000000005213: SystemTray_IconModified
0x0000000000005215: SystemTray_SystemPromote
0x0000000000005217: SystemTray_ShowBalloon
0x0000000000005219: SystemTray_RearrangeIcon
0x00000000000055F1: Taskbar_GroupState_ChangeNotify
0x00000000000055F3: Taskbar_LockState_ChangeNotify
0x00000000000055F5: Taskbar_Click
0x00000000000055F6: StarterEdition_AppLimitViolations
0x00000000000055F7: Taskbar_Settings
0x00000000000055F9: Taskbar_Location
0x00000000000055FB: Taskbar_Size
0x00000000000055FD: Taskbar_Quicklaunch_Item_Launch
0x00000000000055FE: New_Taskbar_Pinned_Items_Rearranged
0x00000000000055FF: Taskbar_Glomming_Enabled
0x0000000000005601: Taskbar_Quicklaunch_Enabled
0x0000000000005603: Taskbar_RegisterThumbnail
0x0000000000005605: Taskbar_ShowThumbnail
0x0000000000005607: Taskbar_Glomming_Count
0x0000000000005609: Taskbar_Window_Count
0x000000000000560B: Taskbar_SetProgress
0x000000000000560D: Taskbar_SetProgressState
0x000000000000560E: Taskbar_ButtonGroup_Added
0x000000000000560F: Taskbar_ButtonGroup_GlomStateChange
0x0000000000005610: Taskbar_ButtonGroup_Removed
0x0000000000005611: Taskbar_Window_Added
0x0000000000005612: Taskbar_Window_Active
0x0000000000005613: Taskbar_Window_Removed
0x0000000000005614: Taskbar_HoverUIShow
0x0000000000005615: Taskbar_Item_Created
0x0000000000005616: Taskbar_Item_Destroyed
0x0000000000005617: Taskbar_Group_Created
0x0000000000005618: Taskbar_Group_Destroyed
0x0000000000005619: Taskbar_Group_AddItem
0x000000000000561A: Taskbar_Group_RemoveItem
0x000000000000561B: Taskbar_Animation
0x000000000000561C: Taskbar_AnimFrame
0x000000000000561D: Taskbar_ComputeLayout
0x000000000000561E: Taskbar_Compute_Row_Layout
0x000000000000561F: Taskbar_ButtonGroup_Rearranged
0x0000000000005620: Taskbar_Switcher_Context_Menu
0x0000000000005621: Taskbar_Scrolling_Stream
0x0000000000005622: Taskbar_Window_Picker_Triggers
0x0000000000005623: Thumbnail_Window_Picker_Interaction_Stream
0x0000000000005624: Legacy_Glom_Interaction_Stream
0x0000000000005625: Taskbar_Compute_Column_Layout
0x0000000000005626: Taskbar_Taskband_Icon_Size
0x0000000000005627: Progress_Bars_Customers
0x0000000000005628: Progress_Bars_Glom_Count
0x0000000000005629: Progress_Bars_Paused_Count
0x000000000000562A: Taskbar_ThumbBar_AddButtons
0x000000000000562B: Taskbar_ThumbBar_UpdateButton
0x000000000000562C: Taskbar_ThumbBar_Create
0x000000000000562E: Taskbar_ThumbBar_Click
0x000000000000562F: Taskbar_OverlayIcon
0x0000000000005630: Taskbar_Item_Flashing
0x0000000000005631: Taskbar_OpenWindowContextMenu
0x0000000000005633: Taskbar_UserActivityTracker
0x0000000000005634: Taskbar_RunAsAdmin_ShiftCtrl_Count
0x0000000000005635: Taskbar_NewInstanceContextMenu_Count
0x0000000000005636: Taskbar_NewInstanceContextMenu_RunAsAdmin_Count
0x0000000000005637: Taskbar_DeskbandStream
0x0000000000005638: Thumbnail_Toolbar_Stream
0x0000000000005639: Taskbar_NumberOfRows
0x000000000000563A: ApplicationOverlays
0x000000000000563B: Taskbar_Secondary_Glomming_Enabled
0x000000000000563C: Taskbar_Multimon_Configuration
0x000000000000563D: Number_Of_Displays
0x000000000000563E: Taskbar_Multimon_Window_Count
0x000000000000563F: Taskbar_Settings_Changed
0x0000000000005640: Taskbar_Immersive_Show
0x0000000000005641: Taskbar_Immersive_Hide
0x0000000000005642: Taskbar_PinInitialItems
0x00000000000059D9: ViewControl_UserSplitButtonClick
0x00000000000059DB: ViewControl_UserViewModeSelect
0x00000000000059DD: ViewControl_ViewModeChangeNotify
0x00000000000059DF: ViewControl_SQMStream
0x00000000000059E0: TopView_Usage
0x00000000000059E1: TopView_Save
0x00000000000059E2: ViewMode_Change
0x00000000000059E3: Sort_Change
0x00000000000059E4: Stack_Change
0x00000000000059E5: Group_Change
0x0000000000005A3D: WordWheel_UserKeypress_ChangeNotify
0x0000000000005A47: SendTo_Populate
0x0000000000005AA1: Glass_Colorization
0x0000000000005AA3: Glass_Composition_Enabled
0x0000000000005AA5: Glass_Theme_Active
0x0000000000006591: CTrackEvents_OperationEventStart
0x0000000000006592: CTrackEvents_OperationQueueInfo
0x0000000000006593: CTrackEvents_StartTimedOperation
0x0000000000006595: CTrackEvents_StopTimedOperation
0x0000000000006597: CTrackEvents_OperationEventEnd
0x0000000000006599: Shell32_AdviseCollection
0x000000000000659B: Shell32_CDefViewSink_PostMessage
0x0000000000006979: PerfTrack_DesktopBackgroundCpl
0x000000000000697B: PerfTrack_ColorSchemeCpl
0x000000000000697D: PerfTrack_StartPane_AllPrograms_Show
0x000000000000697F: PerfTrack_StartPane_AllPrograms_BackButton
0x0000000000006981: PerfTrack_StartPane_ShowItem
0x0000000000006983: PerfTrack_StartPane_SearchItem
0x0000000000006985: PerfTrack_StartPane_LogOffMenu
0x0000000000006987: PerfTrack_StartPane_TopMatchReady
0x0000000000006989: PerfTrack_Explorer_DocumentsLibrary_Local_PageDisplayed
0x000000000000698B: PerfTrack_Explorer_DocumentsLibrary_Local_PageCompleted
0x000000000000698D: PerfTrack_Explorer_DocumentsLibrary_Network_PageDisplayed
0x000000000000698F: PerfTrack_Explorer_DocumentsLibrary_Network_PageCompleted
0x0000000000006991: PerfTrack_Explorer_DocumentsLibrary_OpenSearch_PageDisplayed
0x0000000000006993: PerfTrack_Explorer_DocumentsLibrary_OpenSearch_PageCompleted
0x0000000000006995: PerfTrack_Explorer_PicturesLibrary_Local_PageDisplayed
0x0000000000006997: PerfTrack_Explorer_PicturesLibrary_Local_PageCompleted
0x0000000000006999: PerfTrack_Explorer_PicturesLibrary_Network_PageDisplayed
0x000000000000699B: PerfTrack_Explorer_PicturesLibrary_Network_PageCompleted
0x000000000000699D: PerfTrack_Explorer_PicturesLibrary_OpenSearch_PageDisplayed
0x000000000000699F: PerfTrack_Explorer_PicturesLibrary_OpenSearch_PageCompleted
0x00000000000069A1: PerfTrack_Explorer_MusicLibrary_Local_PageDisplayed
0x00000000000069A3: PerfTrack_Explorer_MusicLibrary_Local_PageCompleted
0x00000000000069A5: PerfTrack_Explorer_MusicLibrary_Network_PageDisplayed
0x00000000000069A7: PerfTrack_Explorer_MusicLibrary_Network_PageCompleted
0x00000000000069A9: PerfTrack_Explorer_MusicLibrary_OpenSearch_PageDisplayed
0x00000000000069AB: PerfTrack_Explorer_MusicLibrary_OpenSearch_PageCompleted
0x00000000000069AD: PerfTrack_Explorer_VideosLibrary_Local_PageDisplayed
0x00000000000069AF: PerfTrack_Explorer_VideosLibrary_Local_PageCompleted
0x00000000000069B1: PerfTrack_Explorer_VideosLibrary_Network_PageDisplayed
0x00000000000069B3: PerfTrack_Explorer_VideosLibrary_Network_PageCompleted
0x00000000000069B5: PerfTrack_Explorer_VideosLibrary_OpenSearch_PageDisplayed
0x00000000000069B7: PerfTrack_Explorer_VideosLibrary_OpenSearch_PageCompleted
0x00000000000069B9: PerfTrack_Explorer_Invoke_Cancelled
0x00000000000069C5: PerfTrack_Explorer_UsersFiles_PageDisplayed
0x00000000000069C7: PerfTrack_Explorer_UsersFiles_PageCompleted
0x00000000000069C9: PerfTrack_CFD_DocumentsLibrary_Local_PageDisplayed
0x00000000000069CB: PerfTrack_CFD_DocumentsLibrary_Local_PageCompleted
0x00000000000069CD: PerfTrack_CFD_DocumentsLibrary_Network_PageDisplayed
0x00000000000069CF: PerfTrack_CFD_DocumentsLibrary_Network_PageCompleted
0x00000000000069D1: PerfTrack_CFD_DocumentsLibrary_OpenSearch_PageDisplayed
0x00000000000069D3: PerfTrack_CFD_DocumentsLibrary_OpenSearch_PageCompleted
0x00000000000069D5: PerfTrack_CFD_PicturesLibrary_Local_PageDisplayed
0x00000000000069D7: PerfTrack_CFD_PicturesLibrary_Local_PageCompleted
0x00000000000069D9: PerfTrack_CFD_PicturesLibrary_Network_PageDisplayed
0x00000000000069DB: PerfTrack_CFD_PicturesLibrary_Network_PageCompleted
0x00000000000069DD: PerfTrack_CFD_PicturesLibrary_OpenSearch_PageDisplayed
0x00000000000069DF: PerfTrack_CFD_PicturesLibrary_OpenSearch_PageCompleted
0x00000000000069E1: PerfTrack_CFD_MusicLibrary_Local_PageDisplayed
0x00000000000069E3: PerfTrack_CFD_MusicLibrary_Local_PageCompleted
0x00000000000069E5: PerfTrack_CFD_MusicLibrary_Network_PageDisplayed
0x00000000000069E7: PerfTrack_CFD_MusicLibrary_Network_PageCompleted
0x00000000000069E9: PerfTrack_CFD_MusicLibrary_OpenSearch_PageDisplayed
0x00000000000069EB: PerfTrack_CFD_MusicLibrary_OpenSearch_PageCompleted
0x00000000000069ED: PerfTrack_CFD_VideosLibrary_Local_PageDisplayed
0x00000000000069EF: PerfTrack_CFD_VideosLibrary_Local_PageCompleted
0x00000000000069F1: PerfTrack_CFD_VideosLibrary_Network_PageDisplayed
0x00000000000069F3: PerfTrack_CFD_VideosLibrary_Network_PageCompleted
0x00000000000069F5: PerfTrack_CFD_VideosLibrary_OpenSearch_PageDisplayed
0x00000000000069F7: PerfTrack_CFD_VideosLibrary_OpenSearch_PageCompleted
0x0000000000006A05: PerfTrack_CFD_UsersFiles_PageDisplayed
0x0000000000006A07: PerfTrack_CFD_UsersFiles_PageCompleted
0x0000000000006A09: PerfTrack_StartMenu_Search_PageDisplayed
0x0000000000006A0B: PerfTrack_StartMenu_Search_PageCompleted
0x0000000000006A0D: PerfTrack_Taskbar_Launch
0x0000000000006A0F: PerfTrack_HoverUI_FadeIn
0x0000000000006A11: PerfTrack_StartMenu_ControlPanel
0x0000000000006A13: PerfTrack_StartMenu_Pictures
0x0000000000006A14: PerfTrack_StartMenu_Pictures_Network
0x0000000000006A15: PerfTrack_StartMenu_Music
0x0000000000006A16: PerfTrack_StartMenu_Music_Network
0x0000000000006A17: PerfTrack_StartMenu_Documents
0x0000000000006A18: PerfTrack_StartMenu_Documents_Network
0x0000000000006A19: PerfTrack_SearchBox_CharactersTyped
0x0000000000006A1B: PerfTrack_Taskbar_DestinationList_Up
0x0000000000006A1D: PerfTrack_StartMenu_DestinationList_Up
0x0000000000006A1F: PerfTrack_Explorer_NetworkFileFolderView
0x0000000000006A21: PerfTrack_Explorer_NetworkFolderHighDPI
0x0000000000006A23: PerfTrack_Explorer_LocalFolderHighDPI
0x0000000000006A25: PerfTrack_Explorer_FrameClose
0x0000000000006A27: PerfTrack_Explorer_Templates_GroupedView
0x0000000000006A29: PerfTrack_Explorer_Templates_StackedView
0x0000000000006A2B: PerfTrack_Explorer_Templates_ThumbnailView
0x0000000000006A2D: PerfTrack_Explorer_Templates_SearchGroupedView
0x0000000000006A2F: PerfTrack_Explorer_Templates_SearchStackedView
0x0000000000006A31: PerfTrack_Explorer_Templates_SearchThumbnailView
0x0000000000006A33: PerfTrack_Explorer_Templates_SearchGrepView
0x0000000000006A35: PerfTrack_Explorer_Templates_OpenSearchView
0x0000000000006A37: PerfTrack_FilterMenu_EnumeratesTypeValues
0x0000000000006A39: PerfTrack_FilterMenu_ListEnumeratesRange
0x0000000000006A3B: PerfTrack_FilterMenu_MRUEnumerateValues
0x0000000000006A3D: PerfTrack_FilterMenu_MRUListEnumeratesRanges
0x0000000000006A3F: PerfTrack_FilterMenu_MRUControlRenders
0x0000000000006A41: PerfTrack_HomeGroup_EnumInView
0x0000000000006A43: PerfTrack_HomeGroup_EnumInNavPane
0x0000000000006A45: PerfTrack_HomeGroup_RemotePC_EnumInView
0x0000000000006A47: PerfTrack_HomeGroup_PublishedItem_PageDisplayed
0x0000000000006A49: PerfTrack_OpenSearch_QueryServer
0x0000000000006A4B: PerfTrack_Explorer_ItemsView_PageScroll
0x0000000000006A4D: PerfTrack_Shell32_CopyEngine_CancelDlg
0x0000000000006A4F: PerfTrack_LibraryLocation_AddedToLib
0x0000000000006A51: PerfTrack_InspectorGadget
0x0000000000006A53: PerfTrack_InspectorWindow
0x0000000000006A55: PerfTrack_FilterMenu_FilterSuggestInitial
0x0000000000006A57: PerfTrack_FilterMenu_FilterSuggestFinal
0x0000000000006A59: PerfTrack_Taskbar_Launch_Explorer
0x0000000000006A5C: PerfTrack_Explorer_Templates_SearchIndexedView
0x0000000000006A5E: PerfTrack_Explorer_ExplorerStartToDesktopReady
0x0000000000006A60: PerfTrack_HomeGroup_PublishedItem_PageComplete
0x0000000000006A62: Delayed_Filter_Contents
0x0000000000006A63: PerfTrack_ControlPanel_CategoryNavigation
0x0000000000006A64: PerfTrack_StartMenu_SystemControlPanel_Launch
0x0000000000006A6B: PerfTrack_Explorer_Navigation
0x0000000000006A6C: PerfTrack_CFD_Navigation
0x0000000000006A6F: PerfTrack_HomeGroup_User_EnumInView
0x0000000000006A71: PerfTrack_HomeGroup_KnownLibrary_PageComplete
0x0000000000006A73: PerfTrack_HomeGroup_KnownLibrary_PageDisplayed
0x0000000000006A75: PerfTrack_HomeGroup_LocalPC_EnumInView
0x0000000000006A77: PerfTrack_Launcher_Login
0x0000000000006A79: PerfTrack_DeviceUX_DeviceCenter_EnumInView
0x0000000000006D61: Shell32_AppResolverCache_DevTrace
0x0000000000006DE1: Shell32_StateStoreCommitRetry
0x0000000000006DE3: Shell32_AppResolver_InitialDefaultLayout
0x0000000000006DE7: Shell32_AppResolver_UpdateLayout
0x0000000000006DE9: Shell32_AppResolver_RefreshCache
0x0000000000006DED: Shell32_AppResolverCache_AddShortcut
0x0000000000006DEE: Shell32_AppResolverCache_RemoveShortcut
0x0000000000006DEF: Shell32_AppResolverCache_UpdateShortcut
0x0000000000006DF1: Shell32_RegistryPackageChangeListener_AppStateChange
0x0000000000006DF3: Shell32_RegistryPackageChangeListener_AppStateReset
0x0000000000006DF5: Shell32_AppResolver_DualModeDisallowed
0x0000000000006DF7: Shell32_RegistryPackageChangeListener_Rescan
0x0000000000006DF9: Shell32_RegistryPackageChangeListener_ApplyChange
0x0000000000006DFB: Shell32_LauncherLayoutManager_ChangeNotify
0x0000000000006DFD: Shell32_AppResolverCache_ImportShortcut
0x0000000000006E03: Shell32_AppResolver_GetAppIDForWindow
0x0000000000006E0F: Shell32_AppResolver_ScanScheduled
0x0000000000006E11: Shell32_AppResolver_Scan
0x0000000000006E13: Shell32_AppResolver_CacheCommitted
0x0000000000006E14: Shell32_AppResolver_ParseVisualElementsManifest
0x0000000000006E17: Shell32_WindowPropStore_SetValue
0x0000000000006E19: Shell32_WindowPropStore_GetValue
0x0000000000006E1B: Shell32_WindowPropStore_ValueRemoved
0x0000000000006E1D: AppResolver_AppInstallation
0x0000000000006E1F: Shell32_OperationTile_SQMStream
0x0000000000006E21: Shell32_OperationManager_SQMStream
0x0000000000006E23: Shell32_ConflictUI_SQMStream
0x000000000000C351: ShellLib_AdjustImage
0x000000000000C3B5: ShutdownUX_ShowMenu
0x000000000000C3B7: ShutdownUX_DefaultButtonPress
0x000000000000C3B9: ShutdownUX_SelectMenuItem
0x000000000000C3BB: ShutdownUX_StartMenuCriticalPath
0x000000000000C419: CDBurn_SQM_PrepareDisc_Launch
0x000000000000C41B: CDBurn_SQM_PrepareDisc_Mastered
0x000000000000C41D: CDBurn_SQM_PrepareDisc_LiveFS
0x000000000000C41F: CDBurn_SQM_Mastered_Session
0x000000000000C421: CDBurn_SQM_SessionOpenOnEject_Multi
0x000000000000C423: CDBurn_SQM_SessionOpenOnEject_Single
0x000000000000C425: CDBurn_SQM_IsoBurn_Session
0x000000000000C427: CDBurn_SQM_CloseSession_Command
0x000000000000C429: CDBurn_IsoBurn_Launch
0x000000000000C42B: CDBurn_IsoBurn_Task
0x000000000000EA61: IE_HistoryBrokerStartup
0x000000000000EA63: IE_HistoryBrokerShutdown
0x000000000000EA65: IE_AddToHistory
0x000000000000EA67: IE_QueryHistory
0x000000000000EA69: IE_EnumHistoryRecords
0x000000000000EA6B: IE_LegacyHistoryAdd
0x000000000000EA6D: IE_LegacyHistoryQuery
0x000000000000EA6F: IE_LegacyHistoryEnum
0x000000000000EA71: IE_CreateThumbnail
0x000000000000EA73: IE_ScaleThumbnail
0x000000000000EA75: IE_CompressThumbnail
0x000000000000EA77: IE_GenerateThumbnail
0x000000000000EA79: IE_LButtonAction
0x000000000000EA7B: IE_ExtensionCreate
0x000000000000EA7D: IE_ExtensionSetSite
0x000000000000EA7F: IE_ExtensionShowDW
0x000000000000EA81: IE_ExtensionCloseDW
0x000000000000EA83: IE_ExtensionSetSiteNull
0x000000000000EA85: IE_ExtensionRelease
0x000000000000EAC5: StructuredQuery_ParseText
0x000000000000EAC7: StructuredQuery_Resolve
0x000000000000EAC9: StructuredQuery_InitQueryParser
0x000000000000EACB: StructuredQuery_RestateQuery
0x000000000000EACD: StructuredQuery_CreateSchemaBinary
0x000000000000EACF: StructuredQuery_LoadSchemaBinary
0x000000000000EAD1: StructuredQuery_SaveSchemaBinary
0x000000000000EAD3: StructuredQuery_FindMatches
0x000000000000EAD5: StructuredQuery_CreateWordBreaker
0x000000000000EAD7: StructuredQuery_InitWordBreaker
0x000000000000EB29: SearchBox_ColorAQS
0x000000000000EB2B: SearchBox_Popup_Show
0x000000000000EB2D: SearchBox_MRU_Populate
0x000000000000EB2F: SEARCHBOX_USAGE
0x000000000000EB35: SearchBox_PropertyValues_Populate
0x000000000000EB37: SearchBox_Acquired_Focus
0x000000000000EB38: SearchBox_LinguisticAlternativeGenerator_GenerateAlternatives
0x000000000000EB3A: SearchBox_SearchConversionList_Animation
0x000000000000EB3C: SearchBox_SearchConversionList_BeginUIElement
0x000000000000EB3D: SearchBox_SearchConversionList_UpdateUIElement
0x000000000000EB3E: SearchBox_SearchConversionList_EndUIElement
0x000000000000EB8D: TryHarder_Draw_All
0x000000000000EB8F: TryHarder_Calculate_Scopes
0x000000000000EB91: TryHarder_Calculate_Search_File_Contents
0x000000000000EB93: TryHarder_Calculate_Search_Subfolders
0x000000000000EB95: TryHarder_Start_New_Search
0x000000000000EB97: TryHarder_Internet_Rollover
0x000000000000EBF1: NetworkUX_NewNetCountMaxReached
0x000000000000EC55: NAVPANE_ACTION
0x000000000000EC57: NAVIGATIONPANE_ITEMCOUNTS
0x000000000000ECB9: ItemsView_UIItemsView_BatchFirstEvent
0x000000000000ECBB: ItemsView_UIItemsView_BatchTimer
0x000000000000ECBD: ItemsView_UIItemsView_FlushBatch
0x000000000000ECBF: ItemsView_UIItemsView_EndBatching
0x000000000000ECC1: ItemsView_UIItemsView_NotifyContentsChanged
0x000000000000ECC3: ItemsView_UIItemsView_PreProcessEventQueue
0x000000000000ECC5: ItemsView_UIItem_OnItemEvent
0x000000000000ECC7: ItemsView_UICollection_OnCollectionEvent
0x000000000000ECC9: ItemsView_UIItemsView_Paint
0x000000000000ECCB: ItemsView_LineScroller_RealizeContent
0x000000000000ECCD: ItemsView_LineScroller_LayoutPass
0x000000000000ECCF: ItemsView_LineScroller_DesiredSizePass
0x000000000000ECD1: ItemsView_ItemDevirtualizer_ForegroundFullDevirtualization
0x000000000000ECD3: ItemsView_UIColumnHeader_SortColumn
0x000000000000ECD5: ItemsView_SelectionState_SelectionChange
0x000000000000ECD7: ItemsView_AnimationManager_SetupAnimation
0x000000000000ECD9: ItemsView_AnimationManager_FinishAnimationSetup
0x000000000000ECDB: ItemsView_AnimationManager_AllocateHBITMAP
0x000000000000ECDD: ItemsView_AnimationManager_AnimationLoop
0x000000000000ECDF: ItemsView_AnimationManager_Paint
0x000000000000ECE1: ItemsView_SQM
0x000000000000ECE3: ItemsView_UIItemsView_Prefetch
0x000000000000ECE5: ItemsView_UIItemsView_PreparePrefetch
0x000000000000ECE7: ItemsView_UIItemsView_BlockRedraw
0x000000000000ECE9: ItemsView_UIItemsView_RunFirstPageResults
0x000000000000ECEB: ItemsView_ItemDevirtualizer_FullDevirtualization
0x000000000000ECEC: ItemsView_ItemDevirtualizer_PartialDevirtualization
0x000000000000ECED: ItemsView_FirstPage_UpdateCountReport
0x000000000000ECEF: ItemsView_UIItemsView_StartBatchTimer
0x000000000000ECF1: ItemsView_UIItemsView_PostEvent
0x000000000000ECF3: Shell32_CDesktopBrowser_PaintWallpaper
0x000000000000ECF5: Shell32_CWallpaperWindow_CaptureWallpaper
0x000000000000ED1D: Shell_DesktopBackgroundSlideshow_Tick
0x000000000000ED21: Shell_DesktopBackgroundSlideshow_Workitem
0x000000000000ED22: Shell32_CDesktopBrowser_Slideshow_IsRunning
0x000000000000ED23: Shell32_CDesktopBrowser_Slideshow_Refresh
0x000000000000ED24: Shell32_CDesktopBrowser_Slideshow_Tick_Timer
0x000000000000ED25: Shell32_CDesktopBrowser_Slideshow_Tick_Manual
0x000000000000ED26: Shell32_CDesktopBrowser_Slideshow_Enable
0x000000000000ED27: Shell32_AutoColorization_ColorChosen
0x000000000000ED28: Shell32_AutoColorization_Analysis
0x000000000000ED2A: Shell32_CDesktopWallpaper_AutoSpan
0x000000000000ED2B: Shell32_CDesktopWallpaper_AutoDecision
0x000000000000ED2C: Shell32_CDesktopWallpaper_WallpaperPosition
0x000000000000ED4F: Shell32_ActiveSetup
0x000000000000ED51: Shell32_ActiveSetup_RunInstallUninstallStubsWorker
0x000000000000ED53: Shell32_ActiveSetup_RunOneInstallStub
0x000000000000ED55: Shell32_ActiveSetup_RunPendingGPOs
0x000000000000ED57: Shell32_ActiveSetup_RunSetupCommand
0x000000000000ED81: ShellLib_DUIControls_CandidateList_Show
0x000000000000ED82: ShellLib_DUIControls_CandidateList_Hide
0x000000000000ED83: ShellLib_DUIControls_CandidateList_DataSourceChanged
0x000000000000ED84: ShellLib_DUIControls_CandidateList_UIReady
0x000000000000ED85: ShellLib_DUIControls_CandidateList_PageChanged
0x000000000000ED86: ShellLib_DUIControls_CandidateList_CandidateFocusChanged
0x000000000000ED87: ShellLib_DUIControls_CandidateList_CloseButtonPressed
0x000000000000ED88: ShellLib_DUIControls_CandidateList_Finalize
0x000000000000ED89: ShellLib_DUIControls_CandidateList_FillInterrupted
0x000000000000ED8A: ShellLib_DUIControls_CandidateList_ResumeFill
0x000000000000ED8B: ShellLib_DUIControls_CandidateList_ForcedPageBreak
0x000000000000ED8C: ShellLib_DUIControls_CandidateList_RealizePage
0x000000000000ED8E: ShellLib_DUIControls_CandidateList_PageLayout
0x000000000000ED90: ShellLib_DUIControls_CandidateList_RealizationComplete
0x000000000000ED91: ShellLib_DUIControls_CandidateList_RedoPaging
0x000000000000ED92: ShellLib_DUIControls_CandidateList_PagingComplete
0x000000000000ED93: ShellLib_DUIControls_CandidateList_ButtonPressed
0x000000000000ED94: ShellLib_DUIControls_CandidateList_ButtonReleased
0x000000000000ED95: ShellLib_DUIControls_CandidateList_PagingAnimation
0x000000000000ED97: ShellLib_DUIControls_CandidateList_TouchPan
0x000000000000ED99: ShellLib_DUIControls_CandidateList_ViewRender
0x000000000000EDE5: ShellTask_ExecAssoc_ReputationCheck
0x000000000000EDE7: ShellTask_ExecAssoc_ReputationTelemetry
0x000000000000EDE9: ShellTask_ExecAssoc_ScrubZoneIdentifier
0x000000000000EDEB: ShellTask_ExecAssoc_ZoneCheckFile
0x000000000000EDF2: ShellTask_Download_SafeOpenPromptForShellExec
0x000000000000EDF3: ShellTask_SmartScreen_CheckReputation
0x000000000000EE49: Shell32_UnknownFileDialog_Create
0x000000000000EE4B: Shell32_DefaultAssociationsProfileHandler_OnCreate_OEM
0x000000000000EE4D: Shell32_DefaultAssociationsProfileHandler_OnLoad_GroupPolicy
0x000000000000EF11: Shell32_SyncIntegration_Manager_Initialize
0x000000000000EF1A: Shell32_SyncIntegration_Manager_Notifications
0x000000000000EF24: Shell32_SyncIntegration_Manager_GetStatus
0x000000000000EF74: Shell32_DiscImage_MountVerb
0x000000000000EF75: Shell32_DiscImage_MountVerb_SQMStream
0x000000000000EF88: Shell32_LibraryManagementDialog_CreateIcon
0x000000000000EF8A: Shell32_LibraryManagementDialog_SaveChanges
0x000000000000EF8C: Shell32_LibraryGroupPolicy_EnforceInSSO
0x000000000000EF8E: Shell32_LibraryGroupPolicy_CreateKnownFolder
0x000000000000EF9C: OperationManager_TileAdded
0x000000000000EF9D: OperationManager_TileRemoved
0x000000000000EF9E: OperationManager_TileStateChanged
0x000000000000EF9F: OperationManager_TileCancelled
0x000000000000EFA0: OperationManager_ServiceModeChange
0x000000000000EFA1: OperationManager_EnthusiastMode_TileRateChartProgressStart
0x000000000000EFA2: OperationManager_EnthusiastMode_TileRateChartRescale
0x000000000000EFA3: OperationManager_EnthusiastMode_TileRateChartUpdate
0x000000000000EFA4: OperationManager_ConfirmationCreated
0x000000000000EFA5: OperationManager_ConfirmationFinished
0x000000000000EFA6: OperationManager_ConflictCreated
0x000000000000EFA7: OperationManager_ConflictFinished
0x000000000000EFA8: OperationManager_Discovering
0x000000000000EFA9: OperationManager_Paused
0x000000000000EFAA: OperationManager_Executing
0x000000000000EFAB: OperationManager_Cancelled
0x000000000000EFAC: OperationManager_Interrupted
0x000000000000EFAD: OperationManager_Pausing
0x000000000000EFAE: OperationManager_Resuming
0x000000000000EFB0: FileAccessAPI_Enumeration
0x000000000000EFB4: FileAccessAPI_Enumeration_GetView
0x000000000000EFB6: FileAccessAPI_Enumeration_GetAt
0x000000000000EFB8: FileAccessAPI_Enumeration_GetCount
0x000000000000EFBA: FileAccessAPI_StreamAccess_GetStream
0x000000000000EFBC: FileAccessAPI_StreamAccess_Read
0x000000000000EFBE: FileAccessAPI_StreamAccess_Write
0x000000000000EFC0: FileAccessAPI_StreamAccess_Commit
0x000000000000EFC4: FileAccessAPI_PropertyAccess_GetProperties
0x000000000000EFCA: FileAccessAPI_PropertyAccess_Commit
0x000000000000EFCE: FileAccessAPI_GetKnownItem
0x000000000000EFD8: FileAccessAPI_GetThumbnail
0x000000000000EFE2: FileAccessAPI_Create
0x000000000000EFE4: FileAccessAPI_Delete
0x000000000000EFE6: FileAccessAPI_Rename
0x000000000000EFEC: FileAccessAPI_AddPersistedItem
0x000000000000EFEE: FileAccessAPI_AddReplacePersistedItem
0x000000000000EFF0: FileAccessAPI_RemovePersistedItem
0x000000000000EFF2: FileAccessAPI_ClearAllPersistedItems
0x000000000000EFF4: FileAccessAPI_GetPersistedItem
0x000000000000EFF6: FileAccessAPI_EnumeratePersistedItemTokens
0x000000000000EFF8: FileAccessAPI_GetItemFromPath
0x000000000000EFFA: FileAccessAPI_GetMusicProperties
0x000000000000EFFC: FileAccessAPI_GetVideoProperties
0x000000000000EFFE: FileAccessAPI_GetImageProperties
0x000000000000F000: FileAccessAPI_GetDocumentProperties
0x000000000000F002: FileAccessAPI_StreamedFile_DataRequest
0x000000000000F004: FileAccessAPI_StreamedFile_WriteStream
0x000000000000F006: FileAccessAPI_StreamedFile_Abandoned
0x000000000000F008: FileAccessAPI_Copy
0x000000000000F00A: FileAccessAPI_Move
0x000000000000F00C: FileAccessAPI_GetBasicProperties
0x000000000000F00E: FileAccessAPI_ValidatePath
0x000000000000F010: FileAccessAPI_CacheFlush
0x000000000000F011: DataLayerCacheFlush
0x000000000000F014: ShellOplocks_NotGranted
0x000000000000F015: ShellOplocks_Broken
0x000000000000F016: ShellOplocks_BrokenAndWaiting
0x000000000000F018: ShellOplocks_Acknowledged
0x000000000000F03D: SetUserDefaults_ProgramListPopulated
0x000000000000F03F: SetUserDefaults_ProgramAssociationsPopulated
0x000000000000F041: SetUserDefaults_DefaultSet
0x000000000000F0A0: DataPackage_GetProperties
0x000000000000F0A2: DataPackage_GetAvailableFormats
0x000000000000F0A4: DataPackage_Contains
0x000000000000F0A6: DataPackage_GetDataAsync
0x000000000000F0A8: DataPackage_GetResourceMapAsync
0x000000000000F0AA: DataPackage_SetData
0x000000000000F0AC: DataPackage_InvokeDataProviderHandler
0x000000000000F0AE: DataPackage_GetText
0x000000000000F0B0: DataPackage_SetText
0x000000000000F0B2: DataPackage_GetCustomText
0x000000000000F0B4: DataPackage_SetCustomText
0x000000000000F0B6: DataPackage_GetHtml
0x000000000000F0B8: DataPackage_SetHtml
0x000000000000F0BA: DataPackage_GetUri
0x000000000000F0BC: DataPackage_SetUri
0x000000000000F0BE: DataPackage_GetRtf
0x000000000000F0C0: DataPackage_SetRtf
0x000000000000F0C2: DataPackage_GetBitmap
0x000000000000F0C4: DataPackage_SetBitmap
0x000000000000F0C6: DataPackage_GetStorageItemsAsync
0x000000000000F0C8: HtmlFormatHelper_GetStaticFragment
0x000000000000F0CA: DataPackage_SetStorageItems
0x000000000000F0CC: DataObjectProvider_GetDataObject
0x000000000000F0CE: DataObjectProvider_SetDataObject
0x000000000000F0D0: HtmlFormatHelper_CreateHtmlFormat
0x000000000000F0D2: Clipboard_GetContent
0x000000000000F0D4: Clipboard_SetContent
0x000000000000F230: PlaylistFolder_DataSource_Created
0x000000000000F231: PlaylistFolder_DataSource_ItemEnumeration
0x000000000000F232: PlaylistFolder_DataSource_DocumentParse
0x000000000000F244: PlaylistFolder_Document_Load
0x000000000000F245: PlaylistFolder_Document_GetItem
0x000000000000F246: PlaylistFolder_Document_Insert
0x000000000000F247: PlaylistFolder_Document_Remove
0x000000000000F248: PlaylistFolder_Document_Move
0x000000000000F249: PlaylistFolder_Document_Commit
0x000000000000F24A: PlaylistFolder_Document_Save
0x000000000000F262: Shell32_MountPoint_VolumeAddedOrUpdated
0x000000000000F264: Shell32_MountPoint_VolumeRemoved
0x000000000000F266: Shell32_MountPoint_CreateEventForVolumeArrival
0x000000000000F268: Shell32_MountPoint_GetAndRemoveVolumeAndItsMtPts
0x000000000000F26A: Shell32_MountPoint_UpdateVolumeRegInfo
0x000000000000F26C: Shell32_MountPoint_CreateVolumeObject
0x000000000000F26E: Shell32_MountPoint_GetLabel
0x000000000000F270: Shell32_MountPoint_MountPointAdded
0x000000000000F272: Shell32_MountPoint_CreateMtPtLocalWithVolume
0x000000000000F274: Shell32_MountPoint_OnMountPointArrival
0x000000000000F276: Shell32_MountPoint_GetMountPoint
0x000000000000F278: OperationManager_TileAnimation_Started
0x000000000000F279: OperationManager_TileAnimation_Frame_Updated
0x000000000000F27A: OperationManager_TileAnimation_Terminated
0x000000000000F27B: OperationManager_TileAnimation_Frame_Skipped
0x000000000000F27E: Shell32_MountPoint_SendQueryCancelAutoPlayMessage
0x000000000000F294: Shell_Scaling_Cache_Updated
0x000000000000F2A8: TileManagement_PackageInfo_LoadFromManifest
0x000000000000F2A9: TileManagement_PackageInfo_LoadFromDisk
0x000000000000F2AA: TileManagement_PackageInfo_VerifyInformation
0x000000000000F2AB: TileManagement_PackageInfo_Revert
0x000000000000F2AC: TileManagement_PackageInfo_Commit
0x000000000000F2AD: TileManagement_PackageInfo_Commit_InstallTile
0x000000000000F2AE: TileManagement_AppTileInfo_InitContentTileRoaming
0x000000000000F2AF: TileManagement_AppTileInfo_VerifyInformation
0x000000000000F2B0: TileManagement_AppTileInfo_Revert
0x000000000000F2B1: TileManagement_AppTileInfo_Commit
0x000000000000F2B2: TileManagement_AppTileInfo_PopulateShortcut
0x000000000000F2B3: TileManagement_AppTileInfo_CommitShortcut
0x000000000000F2B4: TileManagement_PackageInfo_InstallStateChange
0x000000000000F2B5: TileManagement_AppTileInfo_Commit_Create
0x000000000000F2B6: TileManagement_AppTileInfo_Commit_Update
0x000000000000F2B7: TileManagement_AppTileInfo_Commit_Delete
0x000000000000F2B8: TileManagement_AppTileInfo_Commit_Temporary
0x000000000000F2B9: TileManagement_AppTileInfo_Commit_ChangePropValue
0x000000000000F2BA: TileManagement_AppTileInfo_Revert_Create
0x000000000000F2BB: TileManagement_AppTileInfo_Revert_Update
0x000000000000F2BC: TileManagement_AppTileInfo_Revert_Delete
0x000000000000F2BD: TileManagement_PackageInfo_Remove_Folder
0x000000000000F2BE: TileManagement_AppTileInfo_Increment_LastWriteTime
0x000000000000F2BF: TileManagement_AppTileInfo_UpdateLSN_Badge
0x000000000000F2C0: TileManagement_AppTileInfo_RevertUpdateLSN_Badge
0x000000000000F2C1: TileManagement_AppTileInfo_RemoveLSN_Badge
0x000000000000F2C2: TileManagement_AppTileInfo_UpdateLSN_Tile
0x000000000000F2C3: TileManagement_AppTileInfo_RevertUpdateLSN_Tile
0x000000000000F2C4: TileManagement_AppTileInfo_RemoveLSN_Tile
0x000000000000F2C5: TileManagement_PackageInfo_MergePriFailed
0x000000000000F2C6: FilePicker_NamespaceExtensionFilter_Allow
0x000000000000F2C7: FilePicker_NamespaceExtensionFilter_Deny
0x000000000000F2DA: LogonPerformance_TaskRunTime
0x000000000000F2F8: Activation_Watermark_Register_Licensing_Event_Error
0x000000000000F2F9: Activation_Watermark_Window_Creation_Error
0x000000000000F2FA: Activation_Watermark_Render_Error
0x000000000000F2FB: Activation_Watermark_Failed_To_Get_Genuine_Status
0x000000000000F2FC: Activation_Watermark_Init
0x000000000000F32A: TileManagement_AppTileInfo_UpdateLSN_Alarm
0x000000000000F32B: TileManagement_AppTileInfo_RevertUpdateLSN_Alarm
0x000000000000F32C: TileManagement_AppTileInfo_RemoveLSN_Alarm
0x000000000000F35C: DataPackage_GetApplicationLink
0x000000000000F35E: DataPackage_SetApplicationLink
0x000000000000F370: FilePlaceholder_Save
0x000000000000F372: FilePlaceholder_ClearPrimaryStream
0x000000000000F374: FilePlaceholder_SetPlaceholderStates
0x000000000000F376: ExtrinsicPropertyStore_Commit
0x000000000000F378: FilePlaceholder_StreamResolver_VerifyFileVersion
0x000000000000F37A: FilePlaceholder_StreamResolver_RetrievePrimaryStream
0x000000000000F37C: FileChunkMap_Create
0x000000000000F37E: FileChunkMap_Delete
0x000000000000F37F: FileChunkMap_SetFileCompletionState
0x000000000000F381: FilePlaceholder_Hydration_Timeout
0x000000000000F38E: TileManagement_PackageInfo_InstallFailed
0x000000000000F3AC: StartMenuFeedback
0x000000000000F3C0: CloudExperienceHost_AppActivity
0x000000000000F3C2: CloudExperienceHost_AppEvent1
0x000000000000F3C3: CloudExperienceHost_AppEvent2
0x000000000000F3C4: CloudExperienceHost_WebAppActivity
0x000000000000F3C6: CloudExperienceHost_WebAppEvent1
0x000000000000F3C7: CloudExperienceHost_WebAppEvent2
0x000000000000F3C8: Explorer_ExecutingPackagedStartupApp
0x000000000000F3D4: LogonTask_Restore
0x000000000000F3E8: AppDefaults_UserChoiceHashMismatch
0x000000000000F3E9: AppDefaults_ResetToRecommended
0x000000000000F3EA: AppDefaults_UpgradeToRecommendedApp
0x000000000000F3EB: AppDefaults_Info
0x000000000000F3FC: OOBEHealth_Progress

I hope I have piqued your interest.

--

--