Generated by JEB on 2019/08/01

PE: C:\Windows\System32\sdrsvc.dll Base=0x180000000 SHA-256=805A50808F24F2CFDF506BFAAC78AE4768AF5098D157FD7A6493F958C170D8B3
PDB: sdrsvc.pdb GUID={2B87A102-EB93-41BE-07C1998D5CABB48E} Age=1

1163 located named symbols:
0x18001F050: "_ReadStringFromRegistry" ??_C@_0BI@NCANHCML@_ReadStringFromRegistry?$AA@
0x18001F880: "%s.0.%s" ??_C@_1BA@LDMIOFBC@?$AA?$CF?$AAs?$AA?4?$AA0?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x18001D150: "__cdecl GUID_00000001_0000_0000_c000_000000000046" _GUID_00000001_0000_0000_c000_000000000046
0x18001E828: WPP_f8b0889fb14f39b3a8bfd593ba3f9804_Traceguids
0x180016D2C: "long __cdecl VerifyClientMembership(enum WELL_KNOWN_SID_TYPE)" ?VerifyClientMembership@@YAJW4WELL_KNOWN_SID_TYPE@@@Z
0x18001BA48: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x1800066C0: "public: virtual long __cdecl CSdrRestoreService::CreateQueryObject(struct ISdCommon2 * __ptr64 * __ptr64,struct ISdGlobalCatalog * __ptr64 * __ptr64) __ptr64" ?CreateQueryObject@CSdrRestoreService@@UEAAJPEAPEAUISdCommon2@@PEAPEAUISdGlobalCatalog@@@Z
0x18001988C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18001DE18: "CSdController::Cancel" ??_C@_0BG@EIEPCHMP@CSdController?3?3Cancel?$AA@
0x18001BAA8: "__cdecl _imp_ImpersonateLoggedOnUser" __imp_ImpersonateLoggedOnUser
0x18001B738: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x180017E6C: "public: long __cdecl CBsString::LoadStringResource(struct HINSTANCE__ * __ptr64,unsigned int) __ptr64" ?LoadStringResource@CBsString@@QEAAJPEAUHINSTANCE__@@I@Z
0x180019A80: "__cdecl FindPESection" _FindPESection
0x18001F338: "SxDeleteFile" ??_C@_0N@JNEKLOOJ@SxDeleteFile?$AA@
0x180025058: "__cdecl _imp_CoCreateGuid" __imp_CoCreateGuid
0x1800141CC: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x180006DE4: "private: static long __cdecl CSdController::_SleepConditionVariable(struct _RTL_CONDITION_VARIABLE * __ptr64,struct _RTL_CRITICAL_SECTION * __ptr64,unsigned long)" ?_SleepConditionVariable@CSdController@@CAJPEAU_RTL_CONDITION_VARIABLE@@PEAU_RTL_CRITICAL_SECTION@@K@Z
0x180025048: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x18001DD90: "CSdController::QueryProgress" ??_C@_0BN@OHNFGBCP@CSdController?3?3QueryProgress?$AA@
0x18001B870: "__cdecl _imp_SetThreadToken" __imp_SetThreadToken
0x180018030: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x18001DE68: "CSdController::VerifyDeviceWithC" ??_C@_0CL@PILPDCPD@CSdController?3?3VerifyDeviceWithC@
0x180021574: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000D368: WPP_SF_sdsdd
0x18001E918: CLSID_CSdrRestoreService
0x18001EAA0: "SdStartTracing" ??_C@_0P@OGGGFDEO@SdStartTracing?$AA@
0x180002AF0: ?GetCategoryMap@?$CComCoClass@VCSdrRestoreService@@$1?CLSID_CSdrRestoreService@@3U_GUID@@B@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x18001BB40: api-ms-win-security-provider-l1-1-0_NULL_THUNK_DATA
0x18001C098: FOLDERID_Contacts
0x1800214FC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x18001B828: "__cdecl _imp_VirtualProtect" __imp_VirtualProtect
0x180025028: "__cdecl _imp_CoInitializeSecurity" __imp_CoInitializeSecurity
0x18001EBB0: WPP_26ec439bb39237363fafa49be0aedf48_Traceguids
0x180019C70: "__cdecl _tailMerge_oleaut32_dll" __tailMerge_oleaut32_dll
0x180008F70: "private: long __cdecl CSdController::_ClearFullBackupFlag(void) __ptr64" ?_ClearFullBackupFlag@CSdController@@AEAAJXZ
0x18001EFD8: "ConfigureProxySecurityBlanket" ??_C@_0BO@NKEBJFKI@ConfigureProxySecurityBlanket?$AA@
0x180023550: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180017F60: "public: long __cdecl CBsString::ExpandEnvironmentStringsW(unsigned short const * __ptr64) __ptr64" ?ExpandEnvironmentStringsW@CBsString@@QEAAJPEBG@Z
0x180003830: "public: virtual long __cdecl ATL::CComContainedObject<class CSdrRestoreService>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComContainedObject@VCSdrRestoreService@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001CBB8: c_wszSafedocsScheduleLastResultHr
0x18000CBA0: "long __cdecl Log_SD_INFO_BACKUP_STARTED(class CSxFunctionTracer * __ptr64,unsigned long,unsigned short const * __ptr64)" ?Log_SD_INFO_BACKUP_STARTED@@YAJPEAVCSxFunctionTracer@@KPEBG@Z
0x18001ED58: "SeBackupPrivilege" ??_C@_1CE@MBNFGOEN@?$AAS?$AAe?$AAB?$AAa?$AAc?$AAk?$AAu?$AAp?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18000F744: "long __cdecl VerifyCallerSystem(void)" ?VerifyCallerSystem@@YAJXZ
0x180015CC4: "public: long __cdecl CSxList<class CSxNodeList,class CSxNodeItem>::RemoveHead(class CSxNodeItem * __ptr64 * __ptr64) __ptr64" ?RemoveHead@?$CSxList@VCSxNodeList@@VCSxNodeItem@@@@QEAAJPEAPEAVCSxNodeItem@@@Z
0x18001BC38: "__cdecl _imp__vscwprintf" __imp__vscwprintf
0x180019DF8: "__cdecl _imp_load_CoInitializeSecurity" __imp_load_CoInitializeSecurity
0x18001B7A8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x180015850: "long __cdecl SxDeleteDirectory(unsigned short const * __ptr64,int)" ?SxDeleteDirectory@@YAJPEBGH@Z
0x18001E938: CLSID_SdEngine2
0x18001B760: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x18000BD60: "public: virtual long __cdecl CSdController::WaitForStart(unsigned long,struct _GUID) __ptr64" ?WaitForStart@CSdController@@UEAAJKU_GUID@@@Z
0x18001D4EC: "B" ??_C@_13OPKGLAFF@?$AAB?$AA?$AA@
0x18001C188: "ForceRemove" ??_C@_1BI@JFAIJMHL@?$AAF?$AAo?$AAr?$AAc?$AAe?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x1800192AC: "__cdecl CRT_INIT" _CRT_INIT
0x18001B890: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18001E928: IID_ISdRestore2
0x18001BA98: api-ms-win-eventlog-legacy-l1-1-0_NULL_THUNK_DATA
0x18001BB28: "__cdecl _imp_LookupAccountSidW" __imp_LookupAccountSidW
0x180003D68: "public: static long __cdecl ATL::CComObjectRootBase::InternalQueryInterface(void * __ptr64,struct ATL::_ATL_INTMAP_ENTRY const * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?InternalQueryInterface@CComObjectRootBase@ATL@@SAJPEAXPEBU_ATL_INTMAP_ENTRY@2@AEBU_GUID@@PEAPEAX@Z
0x180001238: WPP_SF_L
0x180009D4C: "private: long __cdecl CSdController::_FailureIsCredentialsError(unsigned short const * __ptr64,long) __ptr64" ?_FailureIsCredentialsError@CSdController@@AEAAJPEBGJ@Z
0x18001C320: "CD Burning" ??_C@_1BG@BJFFAMPO@?$AAC?$AAD?$AA?5?$AAB?$AAu?$AAr?$AAn?$AAi?$AAn?$AAg?$AA?$AA@
0x180001320: WppControlCallback
0x18001A180: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18001B6F0: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x18001F6F8: "VerifyClientMembership" ??_C@_0BH@GMGGONPL@VerifyClientMembership?$AA@
0x18001C6C8: c_wszSafedocsScheduleLastSuccess
0x18001EE48: "TraceStorageDeviceProp" ??_C@_0BH@KNOHJICA@TraceStorageDeviceProp?$AA@
0x180003C90: "public: virtual struct IUnknown * __ptr64 __cdecl CSdController::GetControllingUnknown(void) __ptr64" ?GetControllingUnknown@CSdController@@UEAAPEAUIUnknown@@XZ
0x180025018: "__cdecl _imp_VarUI4FromStr" __imp_VarUI4FromStr
0x18001DB28: "CSdController::_UpdatePersistent" ??_C@_0CH@GGFMBNA@CSdController?3?3_UpdatePersistent@
0x180002D30: "public: virtual unsigned long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdController> >::AddRef(void) __ptr64" ?AddRef@?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdController@@@ATL@@@ATL@@UEAAKXZ
0x1800038B0: "public: virtual unsigned long __cdecl ATL::CComContainedObject<class CSdrRestoreService>::AddRef(void) __ptr64" ?AddRef@?$CComContainedObject@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x180003760: "protected: long __cdecl CSxComObjectRootEx<class CSdController,class ATL::CComMultiThreadModelNoCS>::_AtlInitialConstruct(void) __ptr64" ?_AtlInitialConstruct@?$CSxComObjectRootEx@VCSdController@@VCComMultiThreadModelNoCS@ATL@@@@IEAAJXZ
0x18001C108: IID_IClientSecurity
0x18001BB78: "__cdecl _imp_CreateServiceW" __imp_CreateServiceW
0x18001C8E8: WPP_ThisDir_CTLGUID_ControlGuid
0x18001CEC0: "DllRegisterServer" ??_C@_0BC@NPBLIDJ@DllRegisterServer?$AA@
0x18001C1D8: "Contacts" ??_C@_1BC@JGDGJPJM@?$AAC?$AAo?$AAn?$AAt?$AAa?$AAc?$AAt?$AAs?$AA?$AA@
0x18001B718: "__cdecl _imp_RemoveDirectoryW" __imp_RemoveDirectoryW
0x18001193C: "void __cdecl FreeUserProfileData(struct _UserProfileData * __ptr64)" ?FreeUserProfileData@@YAXPEAU_UserProfileData@@@Z
0x18001F7B0: "%s%s(0x%08X)" ??_C@_1BK@KPNKJCIE@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CI?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX?$AA?$CJ?$AA?$AA@
0x18001C200: "Downloads" ??_C@_1BE@EEIEOKP@?$AAD?$AAo?$AAw?$AAn?$AAl?$AAo?$AAa?$AAd?$AAs?$AA?$AA@
0x18001D4A0: "HKEY_CURRENT_CONFIG" ??_C@_1CI@BBJOACGG@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAC?$AAO?$AAN?$AAF?$AAI?$AAG?$AA?$AA@
0x18001CE50: c_wszSdGroupPolicyKey
0x18001D4E4: "S" ??_C@_13HADIAKP@?$AAS?$AA?$AA@
0x18001B8F0: "__cdecl _imp_RegLoadKeyW" __imp_RegLoadKeyW
0x180019DE6: "__cdecl _imp_load_CoRegisterClassObject" __imp_load_CoRegisterClassObject
0x180025030: "__cdecl _imp_CoRevokeClassObject" __imp_CoRevokeClassObject
0x18001CDA0: c_wszSafedocsDeviceTargetKey
0x18001B910: "__cdecl _imp_RegDeleteKeyW" __imp_RegDeleteKeyW
0x180001530: DllGetClassObject
0x18001F610: "SOFTWARE\MICROSOFT\WINDOWS NT\Cu" ??_C@_1IA@NMLEPFAJ@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAI?$AAC?$AAR?$AAO?$AAS?$AAO?$AAF?$AAT?$AA?2?$AAW?$AAI?$AAN?$AAD?$AAO?$AAW?$AAS?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x18001F8F0: "%s.%d.%s" ??_C@_1BC@ELIACAKH@?$AA?$CF?$AAs?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x18001F828: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180023D3C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um
0x180020E5C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shell32_l1_2_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_shell_shell32_l1_2_0_dll
0x180018170: "long __cdecl SxGet0XLogFileCount(unsigned short const * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64)" ?SxGet0XLogFileCount@@YAJPEBGPEAK11@Z
0x1800250B8: ext-ms-win-shell-shell32-l1-2-0_NULL_THUNK_DATA_DLA
0x180003120: "public: virtual unsigned long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdrRestoreService> >::Release(void) __ptr64" ?Release@?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@@ATL@@UEAAKXZ
0x18001B8B8: "__cdecl _imp_RegEnumValueW" __imp_RegEnumValueW
0x18002145C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x18001E9A8: IID_ISdBackupConfig
0x1800212A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x18001EA10: WPP_37d9a2896bad3495ee15cb8430de76ce_Traceguids
0x18001BFF8: FOLDERID_LocalAppDataLow
0x18001C2D8: "AppData\LocalLow" ??_C@_1CC@GFLEKFIL@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AAL?$AAo?$AAw?$AA?$AA@
0x18001B780: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x18001D170: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszServiceDllValue" ?s_wszServiceDllValue@CSdRestoreServiceModule@@0QBGB
0x18001BC68: "__cdecl _imp_wcschr" __imp_wcschr
0x18001CFC0: "CSdRestoreServiceModule::_SetSer" ??_C@_0CL@JGHHBFH@CSdRestoreServiceModule?3?3_SetSer@
0x1800049D0: "protected: long __cdecl ATL::CRegParser::AddValue(class ATL::CRegKey & __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,bool) __ptr64" ?AddValue@CRegParser@ATL@@IEAAJAEAVCRegKey@2@PEBGPEAG_N@Z
0x18001C1F0: "Desktop" ??_C@_1BA@CBCBMBGJ@?$AAD?$AAe?$AAs?$AAk?$AAt?$AAo?$AAp?$AA?$AA@
0x18001C0B8: FOLDERID_Links
0x180017348: "public: long __cdecl CBsString::Insert(unsigned long,unsigned short const * __ptr64) __ptr64" ?Insert@CBsString@@QEAAJKPEBG@Z
0x18001D068: "Shutdown" ??_C@_08NKPDJDJD@Shutdown?$AA@
0x18001D760: "CSdController::_VerifyUncDeviceA" ??_C@_0CG@HMEMBJNE@CSdController?3?3_VerifyUncDeviceA@
0x180016138: "long __cdecl SxRegReadString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,class CBsString * __ptr64)" ?SxRegReadString@@YAJPEAUHKEY__@@PEBGPEAVCBsString@@@Z
0x18001D530: "API-MS-Win-Core-LocalRegistry-L1" ??_C@_1FC@DBDBPMB@?$AAA?$AAP?$AAI?$AA?9?$AAM?$AAS?$AA?9?$AAW?$AAi?$AAn?$AA?9?$AAC?$AAo?$AAr?$AAe?$AA?9?$AAL?$AAo?$AAc?$AAa?$AAl?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?9?$AAL?$AA1@
0x18001BD18: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x18001ED80: "SeRestorePrivilege" ??_C@_1CG@LMBBLCJG@?$AAS?$AAe?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18001C7E0: c_wszSafedocsScheduleLastResultTime
0x180025078: "__cdecl _imp_CoImpersonateClient" __imp_CoImpersonateClient
0x180021498: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x18001B070: "const ATL::CComContainedObject<class CSdController>::`vftable'{for `ISdScheduledBackup'}" ??_7?$CComContainedObject@VCSdController@@@ATL@@6BISdScheduledBackup@@@
0x18001F478: "SxSetFileAttributes" ??_C@_0BE@IIHJLHHB@SxSetFileAttributes?$AA@
0x18001B9A8: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180017420: "public: long __cdecl CBsString::AntiCanonicalize(void) __ptr64" ?AntiCanonicalize@CBsString@@QEAAJXZ
0x18001B818: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x18001BAB8: "__cdecl _imp_RevertToSelf" __imp_RevertToSelf
0x180003C40: "[thunk]:public: virtual long __cdecl ATL::CComContainedObject<class CSdController>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComContainedObject@VCSdController@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x18001BF60: "__cdecl _sz_ext_ms_win_security_credui_l1_1_1_dll" __sz_ext_ms_win_security_credui_l1_1_1_dll
0x180002910: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdController> > >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdController@@@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001B138: "const ATL::CComObjectGlobal<class CSdrRestoreService>::`vftable'" ??_7?$CComObjectGlobal@VCSdrRestoreService@@@ATL@@6B@
0x18001BA78: api-ms-win-eventing-controller-l1-1-0_NULL_THUNK_DATA
0x18002154C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-obsolete-l1-1-0
0x18001D078: "Idle timeout" ??_C@_0N@KHJGLPNI@Idle?5timeout?$AA@
0x18001DAD8: "CSdController::_SetStaleConfigFl" ??_C@_0CD@BJCLIHDP@CSdController?3?3_SetStaleConfigFl@
0x18001328C: "long __cdecl WriteCredsToRegistry(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?WriteCredsToRegistry@@YAJPEBG0@Z
0x1800052F4: "public: long __cdecl ATL::CRegKey::DeleteSubKey(unsigned short const * __ptr64) __ptr64" ?DeleteSubKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180002C50: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CSdrRestoreService> >,class ATL::CComCreator<class ATL::CComAggObject<class CSdrRestoreService> > >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCSdrRestoreService@@@ATL@@@ATL@@V?$CComCreator@V?$CComAggObject@VCSdrRestoreService@@@ATL@@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000A224: "private: long __cdecl CSdController::_UpdateTarget(struct _SD_STORAGE_DEVICE_PROP * __ptr64) __ptr64" ?_UpdateTarget@CSdController@@AEAAJPEAU_SD_STORAGE_DEVICE_PROP@@@Z
0x18001BB58: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x180019A68: "__cdecl XcptFilter" _XcptFilter
0x18001BD20: "__cdecl _xc_a" __xc_a
0x180023B4C: "private: static int CSxComObjectRootEx<class CSdController,class ATL::CComMultiThreadModelNoCS>::s_fEnableRefTrace" ?s_fEnableRefTrace@?$CSxComObjectRootEx@VCSdController@@VCComMultiThreadModelNoCS@ATL@@@@0HA
0x18001D120: "__cdecl GUID_2af1fe1b_1ec5_4190_bd89_04dfa7ede9ea" _GUID_2af1fe1b_1ec5_4190_bd89_04dfa7ede9ea
0x18001D598: "advapi32.dll" ??_C@_1BK@JHLNAEJL@?$AAa?$AAd?$AAv?$AAa?$AAp?$AAi?$AA3?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001205C: "long __cdecl CreateProtectedRegistryKey(struct HKEY__ * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 * __ptr64)" ?CreateProtectedRegistryKey@@YAJPEAUHKEY__@@PEBGPEAPEAU1@@Z
0x18001EEC0: "GetUserProfilePath" ??_C@_0BD@EKMFPHFP@GetUserProfilePath?$AA@
0x180010550: "long __cdecl GetUserProfilePath(struct HKEY__ * __ptr64 const,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetUserProfilePath@@YAJQEAUHKEY__@@PEBGPEAPEAG@Z
0x180020E1C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x18001F710: "VerifyCallerMembership" ??_C@_0BH@PAAJPECK@VerifyCallerMembership?$AA@
0x180019CEF: "__cdecl _imp_load_CoTaskMemFree" __imp_load_CoTaskMemFree
0x18001EF08: "GetUserShellPaths" ??_C@_0BC@EPHLMNOI@GetUserShellPaths?$AA@
0x18001B318: "const ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdrRestoreService> >::`vftable'" ??_7?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@@ATL@@6B@
0x180008CC0: "private: long __cdecl CSdController::_GetAsyncCallObject(struct ISdCallback2 * __ptr64,struct AsyncISdCallback2 * __ptr64 * __ptr64,struct ISynchronize * __ptr64 * __ptr64) __ptr64" ?_GetAsyncCallObject@CSdController@@AEAAJPEAUISdCallback2@@PEAPEAUAsyncISdCallback2@@PEAPEAUISynchronize@@@Z
0x18001B730: "__cdecl _imp_FindClose" __imp_FindClose
0x18001CFF0: "CSdRestoreServiceModule::Initial" ??_C@_0CE@LGJCENPI@CSdRestoreServiceModule?3?3Initial@
0x1800099A8: "private: long __cdecl CSdController::_LogBackupStatus(class CSxFunctionTracer * __ptr64,enum _SD_BACKUP_RESULT,int,long,unsigned short const * __ptr64) __ptr64" ?_LogBackupStatus@CSdController@@AEAAJPEAVCSxFunctionTracer@@W4_SD_BACKUP_RESULT@@HJPEBG@Z
0x1800211A0: ext-ms-win-shell-shell32-l1-2-0_NULL_THUNK_DATA_DLB
0x18001F920: "SxRotateLogs" ??_C@_0N@CAGPNDHA@SxRotateLogs?$AA@
0x180010D60: "long __cdecl GetUserProfileData(struct HKEY__ * __ptr64 const,unsigned short const * __ptr64,struct _UserProfileData * __ptr64 * __ptr64)" ?GetUserProfileData@@YAJQEAUHKEY__@@PEBGPEAPEAU_UserProfileData@@@Z
0x18000455C: "public: long __cdecl ATL::CComCriticalSection::Init(void) __ptr64" ?Init@CComCriticalSection@ATL@@QEAAJXZ
0x18001ED18: "GetNetworkCredentials" ??_C@_0BG@NKCKLDHC@GetNetworkCredentials?$AA@
0x18000EEA4: "long __cdecl FormatSafeDocsErrorCode(long,class CBsString * __ptr64)" ?FormatSafeDocsErrorCode@@YAJJPEAVCBsString@@@Z
0x18001B768: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x18001BAF0: "__cdecl _imp_SetSecurityDescriptorOwner" __imp_SetSecurityDescriptorOwner
0x18001D0D0: "CSdRestoreServiceModule::Registe" ??_C@_0CC@HDFIIECI@CSdRestoreServiceModule?3?3Registe@
0x180019C4B: "__cdecl lock" _lock
0x180001660: HandlerEx
0x18001CF98: "CSdRestoreServiceModule::_Handle" ??_C@_0CG@GAALGDBI@CSdRestoreServiceModule?3?3_Handle@
0x180006C18: "private: __cdecl CSdController::~CSdController(void) __ptr64" ??1CSdController@@AEAA@XZ
0x180019A5C: "__cdecl callnewh" _callnewh
0x180003C50: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CSdController>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObject@VCSdController@@@ATL@@W7EAAKXZ
0x180002D30: "public: virtual unsigned long __cdecl ATL::CComAggObject<class CSdrRestoreService>::AddRef(void) __ptr64" ?AddRef@?$CComAggObject@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x180011F8C: "long __cdecl IsRPCError(long)" ?IsRPCError@@YAJJ@Z
0x18001B708: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180001650: ServiceMain
0x18001BC58: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18001BEDC: "__cdecl _guard_iat_table" __guard_iat_table
0x18001EBF0: "\\?\" ??_C@_19MJCDBCKE@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AA?$AA@
0x18001B850: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180006CE8: "private: long __cdecl CSdController::FinalConstruct(void) __ptr64" ?FinalConstruct@CSdController@@AEAAJXZ
0x180005E84: "public: long __cdecl ATL::CRegParser::RegisterBuffer(unsigned short const * __ptr64,int) __ptr64" ?RegisterBuffer@CRegParser@ATL@@QEAAJPEBGH@Z
0x18001D2B0: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszSvcDependencies" ?s_wszSvcDependencies@CSdRestoreServiceModule@@0QBGB
0x18001A152: memcpy
0x18001F400: "SxTraverseFilesFirst" ??_C@_0BF@JLIGJKAH@SxTraverseFilesFirst?$AA@
0x18001D4C8: "LocalServer32" ??_C@_1BM@KADAJJA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAe?$AAr?$AAv?$AAe?$AAr?$AA3?$AA2?$AA?$AA@
0x18001F420: "_DeleteDirectory" ??_C@_0BB@JKNNLABG@_DeleteDirectory?$AA@
0x18001F4D8: "SxRegReadULONGLONG" ??_C@_0BD@IOJKFFFM@SxRegReadULONGLONG?$AA@
0x18001BFE8: FOLDERID_LocalAppData
0x18001B7F8: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x18001EEE8: "Sid" ??_C@_17NKMLOKHF@?$AAS?$AAi?$AAd?$AA?$AA@
0x18001EC18: "SdIsPathUNC" ??_C@_0M@JINGADPM@SdIsPathUNC?$AA@
0x18001B930: "__cdecl _imp_RtlCaptureStackBackTrace" __imp_RtlCaptureStackBackTrace
0x18001F8C0: "SxCheckWBDiagSession" ??_C@_0BF@HDMBOFDB@SxCheckWBDiagSession?$AA@
0x18001CB20: c_wszSafedocsDeviceFree
0x180023D28: "private: static struct HINSTANCE__ * __ptr64 __ptr64 CBsString::s_hModuleNetMsg" ?s_hModuleNetMsg@CBsString@@0PEAUHINSTANCE__@@EA
0x18001BC90: "__cdecl _imp_memset" __imp_memset
0x18001C490: "Cookies" ??_C@_1BA@FDGNOLII@?$AAC?$AAo?$AAo?$AAk?$AAi?$AAe?$AAs?$AA?$AA@
0x18001B748: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x180003530: "public: virtual unsigned long __cdecl ATL::CComContainedObject<class CSdController>::AddRef(void) __ptr64" ?AddRef@?$CComContainedObject@VCSdController@@@ATL@@UEAAKXZ
0x180019C3F: "__cdecl initterm" _initterm
0x18001C240: "Saved Games" ??_C@_1BI@HACJAPPJ@?$AAS?$AAa?$AAv?$AAe?$AAd?$AA?5?$AAG?$AAa?$AAm?$AAe?$AAs?$AA?$AA@
0x18001BA50: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x18001DBC0: "CSdController::_GetConfig" ??_C@_0BK@HBECKFBN@CSdController?3?3_GetConfig?$AA@
0x1800091C8: "private: long __cdecl CSdController::_ReadPersistentStatus(struct _SD_SCHEDULED_BACKUP_STATUS * __ptr64) __ptr64" ?_ReadPersistentStatus@CSdController@@AEAAJPEAU_SD_SCHEDULED_BACKUP_STATUS@@@Z
0x180004530: "public: static long __cdecl CSdController::UpdateRegistry(int)" ?UpdateRegistry@CSdController@@SAJH@Z
0x18001CC68: c_wszSafedocsScheduleLastResultTarget
0x18002131C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180023D60: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18001E7D0: "__cdecl GUID_11a66efa_382e_451a_9234_1e0e12ef3085" _GUID_11a66efa_382e_451a_9234_1e0e12ef3085
0x18001B9C8: "__cdecl _imp_Sleep" __imp_Sleep
0x18001DDD0: "CSdController::WaitForCompletion" ??_C@_0CB@CPDAEDLD@CSdController?3?3WaitForCompletion@
0x180017E18: "public: void __cdecl CBsString::Transfer(class CBsString * __ptr64) __ptr64" ?Transfer@CBsString@@QEAAXPEAV1@@Z
0x18001D358: "HKCR" ??_C@_19NCHLBIN@?$AAH?$AAK?$AAC?$AAR?$AA?$AA@
0x18001BD58: "__cdecl _xi_z" __xi_z
0x18001ECF8: "GetConfiguredNetworkCredentials" ??_C@_0CA@KDIMAIG@GetConfiguredNetworkCredentials?$AA@
0x18001B6C8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180003E84: "long __cdecl ATL::AtlRegisterClassCategoriesHelper(struct _GUID const & __ptr64,struct ATL::_ATL_CATMAP_ENTRY const * __ptr64,int)" ?AtlRegisterClassCategoriesHelper@ATL@@YAJAEBU_GUID@@PEBU_ATL_CATMAP_ENTRY@1@H@Z
0x180020F68: ext-ms-win-security-credui-l1-1-1_NULL_THUNK_DATA_DLN
0x18001D720: "spCommon->QueryStorageDevice( pw" ??_C@_0DP@GPKLGEEK@spCommon?9?$DOQueryStorageDevice?$CI?5pw@
0x18001D790: "D:AR(A;;FR;;;AU)(A;OICI;FA;;;CO)" ??_C@_1IC@GGIJHBOM@?$AAD?$AA?3?$AAA?$AAR?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAF?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AAO?$AAI?$AAC?$AAI?$AA?$DL?$AAF?$AAA?$AA?$DL?$AA?$DL?$AA?$DL?$AAC?$AAO?$AA?$CJ@
0x180025000: "__cdecl _imp_CryptUnprotectData" __imp_CryptUnprotectData
0x1800197B4: "__cdecl _C_specific_handler" __C_specific_handler
0x18000D9C0: "long __cdecl SdSafeDuplicateStr(unsigned short * __ptr64 * __ptr64,unsigned short const * __ptr64)" ?SdSafeDuplicateStr@@YAJPEAPEAGPEBG@Z
0x18001B198: "const ATL::CComObject<class CSdController>::`vftable'{for `ISdScheduledBackup'}" ??_7?$CComObject@VCSdController@@@ATL@@6BISdScheduledBackup@@@
0x180023D20: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhzuvwlxhUfgrohUlyquivUznwGEUhgwzucOlyq@sd_utils" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhzuvwlxhUfgrohUlyquivUznwGEUhgwzucOlyq@sd_utils
0x180021538: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventlog-legacy-l1-1-0
0x18001F8A8: "SxCompressLogFile" ??_C@_0BC@BHHOIPNF@SxCompressLogFile?$AA@
0x180009658: "private: long __cdecl CSdController::_UpdatePersistentStatus(enum _SD_BACKUP_RESULT,long,long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?_UpdatePersistentStatus@CSdController@@AEAAJW4_SD_BACKUP_RESULT@@JJPEBG111H@Z
0x18001BBE8: "__cdecl _imp__onexit" __imp__onexit
0x18001B798: "__cdecl _imp_InterlockedPopEntrySList" __imp_InterlockedPopEntrySList
0x18001A15E: memmove
0x18001B250: "const ATL::CComObjectGlobal<class CSdController>::`vftable'{for `ISdScheduledBackup'}" ??_7?$CComObjectGlobal@VCSdController@@@ATL@@6BISdScheduledBackup@@@
0x180003C60: "[thunk]:public: virtual unsigned long __cdecl ATL::CComContainedObject<class CSdController>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComContainedObject@VCSdController@@@ATL@@W7EAAKXZ
0x180014AB8: "public: long __cdecl CSxNodeListStack::AddItem(unsigned short const * __ptr64,int) __ptr64" ?AddItem@CSxNodeListStack@@QEAAJPEBGH@Z
0x180012B54: "long __cdecl DeleteRegistryKeyTree(struct HKEY__ * __ptr64,unsigned short const * __ptr64,int)" ?DeleteRegistryKeyTree@@YAJPEAUHKEY__@@PEBGH@Z
0x180009038: "private: long __cdecl CSdController::_SetFullBackupFlag(void) __ptr64" ?_SetFullBackupFlag@CSdController@@AEAAJXZ
0x18000EFE0: "long __cdecl GetConfiguredNetworkCredentials(unsigned short const * __ptr64,void * __ptr64 * __ptr64,struct _SID * __ptr64)" ?GetConfiguredNetworkCredentials@@YAJPEBGPEAPEAXPEAU_SID@@@Z
0x180023C70: WPP_REGISTRATION_GUIDS
0x18001C630: "My Pictures" ??_C@_1BI@GHDPBHNA@?$AAM?$AAy?$AA?5?$AAP?$AAi?$AAc?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x18001EDD0: "VerifyCallerSystem" ??_C@_0BD@LFELDCDM@VerifyCallerSystem?$AA@
0x1800250A0: "__cdecl _imp_CredUIParseUserNameW" __imp_CredUIParseUserNameW
0x18001987D: malloc
0x18001BB88: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x18001EA6C: "dwErr" ??_C@_05HABMCAIK@dwErr?$AA@
0x18001B758: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18001C5D8: "Personal" ??_C@_1BC@EANCBBIH@?$AAP?$AAe?$AAr?$AAs?$AAo?$AAn?$AAa?$AAl?$AA?$AA@
0x18001B9B0: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x18001D8F8: "CSdController::_AddDefaultUserLi" ??_C@_0DD@PHFDLLMG@CSdController?3?3_AddDefaultUserLi@
0x18001DA20: "SeTcbPrivilege" ??_C@_1BO@DHGLBHEP@?$AAS?$AAe?$AAT?$AAc?$AAb?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180019110: "long __cdecl SxStopTracing(unsigned short const * __ptr64)" ?SxStopTracing@@YAJPEBG@Z
0x18001B8E0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18001D5D8: "CSdrRestoreService::CreateRestor" ??_C@_0CI@BCAPNEC@CSdrRestoreService?3?3CreateRestor@
0x180019D8C: "__cdecl _imp_load_CoTaskMemRealloc" __imp_load_CoTaskMemRealloc
0x18001A050: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180013B88: "long __cdecl SxSetProcessPriorities(enum _IO_PRIORITY_HINT,unsigned long,unsigned char)" ?SxSetProcessPriorities@@YAJW4_IO_PRIORITY_HINT@@KE@Z
0x18000CAB0: "public: virtual long __cdecl CSdController::GetNetshareUsername(unsigned short * __ptr64 * __ptr64) __ptr64" ?GetNetshareUsername@CSdController@@UEAAJPEAPEAG@Z
0x18000E0A0: "long __cdecl SdStartTracing(unsigned short * __ptr64 * __ptr64)" ?SdStartTracing@@YAJPEAPEAG@Z
0x18001CC90: c_wszSafedocsScheduleLocalBackupSpaceUsed
0x18001C8E8: "struct _GUID const c_guidServiceTracingControlGuid" ?c_guidServiceTracingControlGuid@@3U_GUID@@B
0x180001510: DllCanUnloadNow
0x180023C80: "struct WARBIRD::_MODULE_INFO * WARBIRD::g_arModuleInfo" ?g_arModuleInfo@WARBIRD@@3PAU_MODULE_INFO@1@A
0x18000B7B0: "public: virtual long __cdecl CSdController::Register(struct ISdCallback2 * __ptr64,struct _GUID * __ptr64) __ptr64" ?Register@CSdController@@UEAAJPEAUISdCallback2@@PEAU_GUID@@@Z
0x18001B900: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x18001C148: CLSID_StdComponentCategoriesMgr
0x18001C4F8: "SendTo" ??_C@_1O@KKAKEEFA@?$AAS?$AAe?$AAn?$AAd?$AAT?$AAo?$AA?$AA@
0x18001C8F8: c_wszSafedocsScheduleActionCenterstate
0x180007284: "private: static long __cdecl CSdController::_VerifyUncDeviceAccess(unsigned short const * __ptr64,struct _SID * __ptr64,unsigned long * __ptr64)" ?_VerifyUncDeviceAccess@CSdController@@CAJPEBGPEAU_SID@@PEAK@Z
0x180019E0A: "__cdecl _imp_load_CoRevokeClassObject" __imp_load_CoRevokeClassObject
0x18001BD00: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x18001E8F8: IID_ISdScheduledBackup
0x180020ED0: CRYPT32_NULL_THUNK_DATA_DLN
0x18001B8D0: "__cdecl _imp_RegUnLoadKeyW" __imp_RegUnLoadKeyW
0x18001B950: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180023C48: WPP_MAIN_CB
0x18001E9F8: "FAILED[TRACK]" ??_C@_0O@HMCJKGCN@FAILED?$FLTRACK?$FN?$AA@
0x18001BCF0: "__cdecl _imp_NtSetThreadExecutionState" __imp_NtSetThreadExecutionState
0x18000C080: "public: virtual long __cdecl CSdController::SetCredentials(unsigned short const * __ptr64,unsigned short * __ptr64) __ptr64" ?SetCredentials@CSdController@@UEAAJPEBGPEAG@Z
0x18001D130: "__cdecl GUID_a9f63151_4ccf_4c63_9b5a_3ba524a33886" _GUID_a9f63151_4ccf_4c63_9b5a_3ba524a33886
0x18001D320: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszMultiszSvcName" ?s_wszMultiszSvcName@CSdRestoreServiceModule@@0QBGB
0x18001C9C0: c_wszSafedocsSchedulingKey
0x18001F2C8: "AssertPrivilege" ??_C@_0BA@IKKFBAOP@AssertPrivilege?$AA@
0x18001D140: "__cdecl GUID_40a7882c_7138_4711_82e3_1016ef591b32" _GUID_40a7882c_7138_4711_82e3_1016ef591b32
0x1800213A8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18001B8F8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x180019A74: "__cdecl amsg_exit" _amsg_exit
0x18001BC00: "__cdecl _imp__callnewh" __imp__callnewh
0x18001D5B8: "RegDeleteKeyW" ??_C@_0O@BJCLIAAA@RegDeleteKeyW?$AA@
0x180019F13: "__cdecl _imp_load_SHCreateItemFromParsingName" __imp_load_SHCreateItemFromParsingName
0x18001DD20: "CSdController::_GetConfiguredNet" ??_C@_0DA@LJNGPCIC@CSdController?3?3_GetConfiguredNet@
0x180021290: "__cdecl _IMPORT_DESCRIPTOR_SXSHARED" __IMPORT_DESCRIPTOR_SXSHARED
0x18001F528: "SxRegWriteString" ??_C@_0BB@HFFAKGE@SxRegWriteString?$AA@
0x180025090: "__cdecl _imp_CoRegisterClassObject" __imp_CoRegisterClassObject
0x180016008: "long __cdecl SxRegReadULONGLONG(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned __int64 * __ptr64,int)" ?SxRegReadULONGLONG@@YAJPEAUHKEY__@@PEBGPEA_KH@Z
0x18001C5F0: "Documents" ??_C@_1BE@EJKFPHKG@?$AAD?$AAo?$AAc?$AAu?$AAm?$AAe?$AAn?$AAt?$AAs?$AA?$AA@
0x18001F820: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x18001EC98: "vsstrace.dll" ??_C@_1BK@DCLFGMKH@?$AAv?$AAs?$AAs?$AAt?$AAr?$AAa?$AAc?$AAe?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001CD78: "struct _GUID const c_guidBlbEngineTracingControlGuid" ?c_guidBlbEngineTracingControlGuid@@3U_GUID@@B
0x18001B9F0: "__cdecl _imp_CreateWaitableTimerW" __imp_CreateWaitableTimerW
0x18001C940: c_wszSafedocsStatusKey
0x18000EAA4: "long __cdecl GetMachineNameFromUNC(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetMachineNameFromUNC@@YAJPEBGPEAPEAG@Z
0x180023B18: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x18001C678: "Videos" ??_C@_1O@IEFJOIKC@?$AAV?$AAi?$AAd?$AAe?$AAo?$AAs?$AA?$AA@
0x18001B9E0: "__cdecl _imp_SleepConditionVariableCS" __imp_SleepConditionVariableCS
0x18001D9E8: "SeIncreaseQuotaPrivilege" ??_C@_1DC@OJMEBNEI@?$AAS?$AAe?$AAI?$AAn?$AAc?$AAr?$AAe?$AAa?$AAs?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x180019E1C: "__cdecl _imp_load_CoCreateGuid" __imp_load_CoCreateGuid
0x180001868: "public: long __cdecl CSdRestoreServiceModule::ServiceMain(void) __ptr64" ?ServiceMain@CSdRestoreServiceModule@@QEAAJXZ
0x18001F810: IID_ISecurityCallContext
0x18001C0E8: GUID_NULL
0x18000CCB4: "long __cdecl Log_SD_INFO_BACKUP_SUCCEEDED(class CSxFunctionTracer * __ptr64,unsigned long)" ?Log_SD_INFO_BACKUP_SUCCEEDED@@YAJPEAVCSxFunctionTracer@@K@Z
0x180023B20: "__cdecl _hmod__CRYPT32_dll" __hmod__CRYPT32_dll
0x18001B970: "__cdecl _imp_lstrcmpiW" __imp_lstrcmpiW
0x18000F7CC: "long __cdecl VerifyCallerAdmin(void)" ?VerifyCallerAdmin@@YAJXZ
0x18001BC20: "__cdecl _imp__lock" __imp__lock
0x1800034A0: "public: virtual struct IUnknown * __ptr64 __cdecl ATL::CComContainedObject<class CSdController>::GetControllingUnknown(void) __ptr64" ?GetControllingUnknown@?$CComContainedObject@VCSdController@@@ATL@@UEAAPEAUIUnknown@@XZ
0x18001D9A8: "SeAssignPrimaryTokenPrivilege" ??_C@_1DM@DFENMBKN@?$AAS?$AAe?$AAA?$AAs?$AAs?$AAi?$AAg?$AAn?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18001DC28: "CSdController::_EnsureBackupTarg" ??_C@_0CD@JOALBBGC@CSdController?3?3_EnsureBackupTarg@
0x180019854: atexit
0x18001ECD0: "FormatSafeDocsErrorCode" ??_C@_0BI@OOEGHHLD@FormatSafeDocsErrorCode?$AA@
0x18001B340: "const ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdController> >::`vftable'" ??_7?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdController@@@ATL@@@ATL@@6B@
0x18001C078: FOLDERID_Downloads
0x18000DE88: "long __cdecl SdStopTracing(unsigned short const * __ptr64,unsigned char,unsigned char)" ?SdStopTracing@@YAJPEBGEE@Z
0x18001F4C4: " " ??_C@_13HOIJIPNN@?$AA?5?$AA?$AA@
0x18001806C: "long __cdecl SxAllocateEventTraceProp(struct _EVENT_TRACE_PROPERTIES * __ptr64 * __ptr64)" ?SxAllocateEventTraceProp@@YAJPEAPEAU_EVENT_TRACE_PROPERTIES@@@Z
0x180025040: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x18001BB68: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x18001ECE8: WPP_8718616a0cc63e593114e83bc28db566_Traceguids
0x18001B998: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180017A38: "public: void __cdecl CBsString::TrimRight(unsigned short const * __ptr64) __ptr64" ?TrimRight@CBsString@@QEAAXPEBG@Z
0x18001C258: "Searches" ??_C@_1BC@GEJKHFOL@?$AAS?$AAe?$AAa?$AAr?$AAc?$AAh?$AAe?$AAs?$AA?$AA@
0x18001B908: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x18001BA40: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1800166E0: "long __cdecl SxGetLastAsrRestoreId(class CBsString * __ptr64)" ?SxGetLastAsrRestoreId@@YAJPEAVCBsString@@@Z
0x18001F690: "LastInstance" ??_C@_1BK@HCPJICLG@?$AAL?$AAa?$AAs?$AAt?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x18001F2F0: "SxLoadSystem32LibraryEx" ??_C@_0BI@JKBFCAKD@SxLoadSystem32LibraryEx?$AA@
0x180019038: "long __cdecl SxEnableTraceCustom(unsigned __int64,struct _GUID,unsigned long,unsigned long)" ?SxEnableTraceCustom@@YAJ_KU_GUID@@KK@Z
0x18001D048: "CSdRestoreServiceModule::Run" ??_C@_0BN@GPPOGAEP@CSdRestoreServiceModule?3?3Run?$AA@
0x18001B6E8: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x18001BA38: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x18001F770: "?\UNC\" ??_C@_1O@IBEKDEPM@?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x18001B7C0: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x18001EF20: "GetUserProfileData" ??_C@_0BD@OGHHNFE@GetUserProfileData?$AA@
0x18001BC48: "__cdecl _imp__wcsupr" __imp__wcsupr
0x18001E8D8: "Log_SD_ERROR_BACKUP_FAILED" ??_C@_0BL@LHICMNJL@Log_SD_ERROR_BACKUP_FAILED?$AA@
0x18001CB40: c_wszProfileList
0x180004120: "long __cdecl ATL::AtlModuleGetClassObject(struct ATL::_ATL_MODULE * __ptr64,struct _GUID const & __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?AtlModuleGetClassObject@ATL@@YAJPEAU_ATL_MODULE@1@AEBU_GUID@@1PEAPEAX@Z
0x18001CCF0: c_wszSafedocsDisableMonitoring
0x180002DA0: "public: virtual long __cdecl ATL::CComObject<class CSdController>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCSdController@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001D6B0: "CSdController::FinalRelease" ??_C@_0BM@DHFOKEHB@CSdController?3?3FinalRelease?$AA@
0x18001E878: "Log_SD_WARNING_BACKUP_CANCELLED" ??_C@_0CA@JMAIALEG@Log_SD_WARNING_BACKUP_CANCELLED?$AA@
0x18001BCD8: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x18001BA18: "__cdecl _imp_GetSystemInfo" __imp_GetSystemInfo
0x18001B888: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180019C63: "__cdecl _dllonexit" __dllonexit
0x180015C00: "public: long __cdecl CSxList<class CSxNodeListStack,class CSxNodeList>::RemoveHead(class CSxNodeList * __ptr64 * __ptr64) __ptr64" ?RemoveHead@?$CSxList@VCSxNodeListStack@@VCSxNodeList@@@@QEAAJPEAPEAVCSxNodeList@@@Z
0x18001F890: "%s.0.?.%s" ??_C@_1BE@NEDGFOOO@?$AA?$CF?$AAs?$AA?4?$AA0?$AA?4?$AA?$DP?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x18001D3C0: "HKEY_CLASSES_ROOT" ??_C@_1CE@PACHPJFI@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAL?$AAA?$AAS?$AAS?$AAE?$AAS?$AA_?$AAR?$AAO?$AAO?$AAT?$AA?$AA@
0x18001D500: """ ??_C@_13NEIAEHFG@?$AA?$CC?$AA?$AA@
0x18001C568: "Recent" ??_C@_1O@CMKINKFN@?$AAR?$AAe?$AAc?$AAe?$AAn?$AAt?$AA?$AA@
0x180023D40: "__cdecl _native_startup_lock" __native_startup_lock
0x18001F730: "private: static unsigned short const * const CBsString::s_wszEmpty" ?s_wszEmpty@CBsString@@0QBGB
0x18001D240: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszSvchostKey" ?s_wszSvchostKey@CSdRestoreServiceModule@@0QBGB
0x1800013A8: DllMain
0x18000A864: "private: long __cdecl CSdController::_HasSRHappened(struct _SD_BACKUP_CONFIG * __ptr64) __ptr64" ?_HasSRHappened@CSdController@@AEAAJPEAU_SD_BACKUP_CONFIG@@@Z
0x1800121D0: "long __cdecl SetRegKeyVirtualization(struct HKEY__ * __ptr64,int,int,int)" ?SetRegKeyVirtualization@@YAJPEAUHKEY__@@HHH@Z
0x18000DC28: "long __cdecl EnsureTracingDirectory(class CBsString * __ptr64)" ?EnsureTracingDirectory@@YAJPEAVCBsString@@@Z
0x18001C068: FOLDERID_CDBurning
0x18001C218: "Favorites" ??_C@_1BE@PDPMPIAC@?$AAF?$AAa?$AAv?$AAo?$AAr?$AAi?$AAt?$AAe?$AAs?$AA?$AA@
0x18001D018: "CSdRestoreServiceModule::_InitCo" ??_C@_0CK@KPCAPAAO@CSdRestoreServiceModule?3?3_InitCo@
0x18000B5B0: "private: long __cdecl CSdController::_GetConfiguredNetworkCredentials(unsigned short const * __ptr64) __ptr64" ?_GetConfiguredNetworkCredentials@CSdController@@AEAAJPEBG@Z
0x180017C78: "public: long __cdecl CBsString::Append(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Append@CBsString@@QEAAJPEBG00@Z
0x18000F3EC: "long __cdecl CreateNetworkAccessTokenFromCreds(unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64)" ?CreateNetworkAccessTokenFromCreds@@YAJPEBG0PEAPEAX@Z
0x18001DDF8: "CSdController::WaitForStart" ??_C@_0BM@OBKGFMED@CSdController?3?3WaitForStart?$AA@
0x18000E9AC: "long __cdecl SdIsPathUNC(unsigned short const * __ptr64)" ?SdIsPathUNC@@YAJPEBG@Z
0x180023D38: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUyhhgirmtUlyquivUznwGEUhgwzucOlyq@bsstring" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUyhhgirmtUlyquivUznwGEUhgwzucOlyq@bsstring
0x18001C660: "My Videos" ??_C@_1BE@PPMKFLIL@?$AAM?$AAy?$AA?5?$AAV?$AAi?$AAd?$AAe?$AAo?$AAs?$AA?$AA@
0x18001A0B4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18001DE98: "CSdController::ChangeMedia" ??_C@_0BL@NEMCAMBO@CSdController?3?3ChangeMedia?$AA@
0x18001DB70: "CSdController::_FailureIsCredent" ??_C@_0CK@EPLLKFPI@CSdController?3?3_FailureIsCredent@
0x180021344: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x18001BC08: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x18001BC70: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18001B9D8: "__cdecl _imp_InitializeConditionVariable" __imp_InitializeConditionVariable
0x180016944: "long __cdecl SxLogEvent(unsigned short const * __ptr64,unsigned long,unsigned short,unsigned short,unsigned short const * __ptr64 * __ptr64 const,struct SX_EVENT_LOG_BINARY_DATA const * __ptr64)" ?SxLogEvent@@YAJPEBGKGGQEAPEBGPEBUSX_EVENT_LOG_BINARY_DATA@@@Z
0x1800212CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x18001BC28: "__cdecl _imp_realloc" __imp_realloc
0x18001BBD8: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180015EC0: "long __cdecl SxRegReadDWORD(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long * __ptr64,int)" ?SxRegReadDWORD@@YAJPEAUHKEY__@@PEBGPEAKH@Z
0x18001DCC8: "CSdController::_PerformScheduled" ??_C@_0CH@OCCNLCAN@CSdController?3?3_PerformScheduled@
0x18001B938: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18001B810: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x18001483C: "public: long __cdecl CSxNodeListStack::TopItem(class CSxNodeItem * __ptr64 * __ptr64) __ptr64" ?TopItem@CSxNodeListStack@@QEAAJPEAPEAVCSxNodeItem@@@Z
0x180004550: "public: static void __cdecl ATL::CComObjectRootBase::ObjectMain(bool)" ?ObjectMain@CComObjectRootBase@ATL@@SAX_N@Z
0x18000FA18: WPP_SF_i
0x18001BCE8: "__cdecl _imp_WinSqmAddToStream" __imp_WinSqmAddToStream
0x1800031A0: "public: virtual long __cdecl ATL::CComClassFactorySingleton<class CSdrRestoreService>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x180015D70: "long __cdecl SxCheckVolumeCompressedEncrypted(unsigned short const * __ptr64,int * __ptr64,int * __ptr64)" ?SxCheckVolumeCompressedEncrypted@@YAJPEBGPEAH1@Z
0x18001B6E0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180019228: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18001E898: "Log_SD_ERROR_SNAPSHOT_FAILED" ??_C@_0BN@EGHAMAID@Log_SD_ERROR_SNAPSHOT_FAILED?$AA@
0x18001C738: "struct _GUID const c_guidUdfdTracingControlGuid" ?c_guidUdfdTracingControlGuid@@3U_GUID@@B
0x18001ECC0: "NTFS" ??_C@_19ENNDBEJL@?$AAN?$AAT?$AAF?$AAS?$AA?$AA@
0x180018448: "long __cdecl SxCompressLogFile(unsigned short const * __ptr64)" ?SxCompressLogFile@@YAJPEBG@Z
0x18001F348: "CSxNodeListStack::Push" ??_C@_0BH@HCCBEJPN@CSxNodeListStack?3?3Push?$AA@
0x180023540: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18001A02C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180013D48: "long __cdecl AssertPrivilege(unsigned short const * __ptr64)" ?AssertPrivilege@@YAJPEBG@Z
0x180008EB8: "private: long __cdecl CSdController::_ReleaseUI(struct _GUID) __ptr64" ?_ReleaseUI@CSdController@@AEAAJU_GUID@@@Z
0x18001BF00: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x18001BCE0: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x18001F2A0: "DecryptBlob" ??_C@_0M@PKAOAIKI@DecryptBlob?$AA@
0x180002AF0: ?GetObjectDescription@?$CComCoClass@VCSdrRestoreService@@$1?CLSID_CSdrRestoreService@@3U_GUID@@B@ATL@@SAPEBGXZ
0x180013CBC: GetLastFailureAsHRESULT
0x18001B210: "const ATL::CComAggObject<class CSdController>::`vftable'" ??_7?$CComAggObject@VCSdController@@@ATL@@6B@
0x18001B918: api-ms-win-core-registry-l2-1-0_NULL_THUNK_DATA
0x18001B370: ?_entries@?1??_GetEntries@CSdrRestoreService@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x18001BC88: "__cdecl _imp_memcmp" __imp_memcmp
0x18001BCC0: "__cdecl _imp_NtSetInformationKey" __imp_NtSetInformationKey
0x18001B788: "__cdecl _imp_InterlockedPushEntrySList" __imp_InterlockedPushEntrySList
0x18001F560: "Software\Microsoft\Windows NT\Cu" ??_C@_1HG@FDPPJLPH@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x180002AF0: ?GetCategoryMap@?$CComCoClass@VCSdController@@$1?CLSID_CSdController@@3U_GUID@@B@ATL@@SAPEBU_ATL_CATMAP_ENTRY@2@XZ
0x1800175CC: "public: long __cdecl CBsString::Format(unsigned short const * __ptr64,...) __ptr64" ?Format@CBsString@@QEAAJPEBGZZ
0x18001BC40: "__cdecl _imp_strchr" __imp_strchr
0x18001250C: "long __cdecl ReadStringFromRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?ReadStringFromRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAGH@Z
0x18001F0F8: "DeleteRegistryKeyTree" ??_C@_0BG@PFEOPEMD@DeleteRegistryKeyTree?$AA@
0x180002778: "public: long __cdecl CSdRestoreServiceModule::Unregister(void) __ptr64" ?Unregister@CSdRestoreServiceModule@@QEAAJXZ
0x18001C440: "AppData\Local\Microsoft\Windows\" ??_C@_1FA@EAJICEIM@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18001BAC8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180020F58: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x18001D680: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x18001C1B8: "Delete" ??_C@_1O@JDLOHAN@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x180021108: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x180025098: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x18002159C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x18001B878: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18001B988: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x18000BC70: "public: virtual long __cdecl CSdController::WaitForCompletion(unsigned long,struct _GUID) __ptr64" ?WaitForCompletion@CSdController@@UEAAJKU_GUID@@@Z
0x18001C1A0: "NoRemove" ??_C@_1BC@GCKHIPE@?$AAN?$AAo?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180014744: "public: long __cdecl CSxNodeListStack::Pop(void) __ptr64" ?Pop@CSxNodeListStack@@QEAAJXZ
0x1800214AC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-lsalookup-l2-1-0
0x180019FAA: "__cdecl _tailMerge_ext_ms_win_security_credui_l1_1_1_dll" __tailMerge_ext_ms_win_security_credui_l1_1_1_dll
0x180002DC0: "public: virtual unsigned long __cdecl ATL::CComObjectGlobal<class CSdController>::Release(void) __ptr64" ?Release@?$CComObjectGlobal@VCSdController@@@ATL@@UEAAKXZ
0x180019D7A: "__cdecl _imp_load_VarUI4FromStr" __imp_load_VarUI4FromStr
0x18001D088: "CSdRestoreServiceModule::Stop" ??_C@_0BO@ENCNPPHF@CSdRestoreServiceModule?3?3Stop?$AA@
0x18000458C: "public: long __cdecl ATL::CRegObject::AddReplacement(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?AddReplacement@CRegObject@ATL@@QEAAJPEBG0@Z
0x1800086B0: "private: long __cdecl CSdController::_AddAppDataPathsToEngine(struct ISdBackup2 * __ptr64,struct _UserProfileData * __ptr64) __ptr64" ?_AddAppDataPathsToEngine@CSdController@@AEAAJPEAUISdBackup2@@PEAU_UserProfileData@@@Z
0x18001D518: "TYPELIB" ??_C@_1BA@KFOBIOMM@?$AAT?$AAY?$AAP?$AAE?$AAL?$AAI?$AAB?$AA?$AA@
0x180012A24: "long __cdecl WriteBinaryToRegistryEncrypted(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned char const * __ptr64,unsigned long)" ?WriteBinaryToRegistryEncrypted@@YAJPEAUHKEY__@@PEBGPEBEK@Z
0x18001B8C0: "__cdecl _imp_RegDeleteValueW" __imp_RegDeleteValueW
0x180017D54: "private: long __cdecl CBsString::_Append(unsigned long,unsigned long,unsigned long * __ptr64 const,unsigned short const * __ptr64 * __ptr64 const) __ptr64" ?_Append@CBsString@@AEAAJKKQEAKQEAPEBG@Z
0x180025060: "__cdecl _imp_CoRevertToSelf" __imp_CoRevertToSelf
0x18001F820: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000B6D4: "private: long __cdecl CSdController::_VerifySavedCredentials(void) __ptr64" ?_VerifySavedCredentials@CSdController@@AEAAJXZ
0x180019B30: "__cdecl ValidateImageBase" _ValidateImageBase
0x180012818: "long __cdecl ReadBinaryFromRegistryEncrypted(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,int)" ?ReadBinaryFromRegistryEncrypted@@YAJPEAUHKEY__@@PEBGPEAPEAEPEAKH@Z
0x18001C0D8: IID_IUnknown
0x18001B7C8: "__cdecl _imp_SizeofResource" __imp_SizeofResource
0x18001C128: IID_ISynchronize
0x180009FF0: "private: long __cdecl CSdController::_GetConfig(struct _SD_BACKUP_CONFIG * __ptr64) __ptr64" ?_GetConfig@CSdController@@AEAAJPEAU_SD_BACKUP_CONFIG@@@Z
0x18000D938: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18000D8A0: "long __cdecl StringCchCopyNW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,unsigned __int64)" ?StringCchCopyNW@@YAJPEAG_KPEBG1@Z
0x18001C1C8: "AppData" ??_C@_1BA@MFEODJDO@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18001EE18: "CleanupBackupUsers" ??_C@_0BD@EHBOKLMG@CleanupBackupUsers?$AA@
0x18001BCF8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x18001BAF8: "__cdecl _imp_DuplicateTokenEx" __imp_DuplicateTokenEx
0x18001D378: "HKLM" ??_C@_19PEALEEJB@?$AAH?$AAK?$AAL?$AAM?$AA?$AA@
0x1800212B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18001879C: "long __cdecl SxMergeExtraLogs(unsigned short const * __ptr64,unsigned long)" ?SxMergeExtraLogs@@YAJPEBGK@Z
0x180006284: "public: long __cdecl ATL::CComModule::UpdateRegistryFromResourceS(unsigned int,int,struct ATL::_ATL_REGMAP_ENTRY * __ptr64) __ptr64" ?UpdateRegistryFromResourceS@CComModule@ATL@@QEAAJIHPEAU_ATL_REGMAP_ENTRY@2@@Z
0x18001C178: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18001D988: "CSdController::_WaitForUI" ??_C@_0BK@GFLEGCIB@CSdController?3?3_WaitForUI?$AA@
0x180001214: WPP_SF_
0x18001C748: "struct _GUID const c_guidUdfsTracingControlGuid" ?c_guidUdfsTracingControlGuid@@3U_GUID@@B
0x18001C810: c_wszSafedocsCredentialsPassword
0x18001F868: "SxGet0XLogFileCount" ??_C@_0BE@KHNIIEO@SxGet0XLogFileCount?$AA@
0x18001B7D8: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180023B38: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhzuvwlxhUhwihexUlyquivUznwGEUkivxlnkOlyq@sdrsvc" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhzuvwlxhUhwihexUlyquivUznwGEUkivxlnkOlyq@sdrsvc
0x180019D9E: "__cdecl _imp_load_CoTaskMemAlloc" __imp_load_CoTaskMemAlloc
0x180011A78: "long __cdecl EnumUserProfilePaths(struct HKEY__ * __ptr64,unsigned long * __ptr64,struct _UserProfileData * __ptr64 * __ptr64)" ?EnumUserProfilePaths@@YAJPEAUHKEY__@@PEAKPEAPEAU_UserProfileData@@@Z
0x180020E9C: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x18001B9D0: "__cdecl _imp_WakeAllConditionVariable" __imp_WakeAllConditionVariable
0x18001C7A0: c_wszSafedocsScheduleLastResultTargetPresName
0x18000CDA4: "long __cdecl Log_SD_WARNING_BACKUP_CANCELLED(class CSxFunctionTracer * __ptr64,unsigned long)" ?Log_SD_WARNING_BACKUP_CANCELLED@@YAJPEAVCSxFunctionTracer@@K@Z
0x18001D1B8: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszServiceDllValName" ?s_wszServiceDllValName@CSdRestoreServiceModule@@0QBGB
0x18001B980: api-ms-win-core-string-obsolete-l1-1-0_NULL_THUNK_DATA
0x180001DDC: "private: long __cdecl CSdRestoreServiceModule::_InitComSecurity(void) __ptr64" ?_InitComSecurity@CSdRestoreServiceModule@@AEAAJXZ
0x18001C708: c_wszDisableBackupToOptical
0x18001B968: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x18001E998: CLSID_SdBackupConfig
0x1800194F0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18001C800: "struct _GUID const c_guidSppTracingControlGuid" ?c_guidSppTracingControlGuid@@3U_GUID@@B
0x18001C848: "struct _GUID const c_guidAsrTracingControlGuid" ?c_guidAsrTracingControlGuid@@3U_GUID@@B
0x18001BC30: "__cdecl _imp_iswspace" __imp_iswspace
0x18001BBC0: "__cdecl _imp__initterm" __imp__initterm
0x18001B698: "__cdecl _imp_SxTracerDebuggerBreak" __imp_SxTracerDebuggerBreak
0x180014500: "public: static long __cdecl CSxNodeItem::CreateInstance(class CSxNodeItem * __ptr64 * __ptr64)" ?CreateInstance@CSxNodeItem@@SAJPEAPEAV1@@Z
0x18001DE48: "CSdController::SetCredentials" ??_C@_0BO@PLHJDFJ@CSdController?3?3SetCredentials?$AA@
0x18001F110: "ReadCredsFromRegistry" ??_C@_0BG@KFKLMMAJ@ReadCredsFromRegistry?$AA@
0x18001D6D0: "CSdController::_SleepConditionVa" ??_C@_0CH@NGHHBDBM@CSdController?3?3_SleepConditionVa@
0x18001F378: "CSxNodeListStack::TopItem" ??_C@_0BK@JHANJGGJ@CSxNodeListStack?3?3TopItem?$AA@
0x18001B2F0: "const ATL::CComClassFactorySingleton<class CSdController>::`vftable'" ??_7?$CComClassFactorySingleton@VCSdController@@@ATL@@6B@
0x18001BB38: "__cdecl _imp_SetEntriesInAclW" __imp_SetEntriesInAclW
0x180025070: "__cdecl _imp_StringFromGUID2" __imp_StringFromGUID2
0x18001DD78: "CSdController::Register" ??_C@_0BI@MLICAHDF@CSdController?3?3Register?$AA@
0x18001B6D0: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18001497C: "public: long __cdecl CSxNodeListStack::TopItemDelete(void) __ptr64" ?TopItemDelete@CSxNodeListStack@@QEAAJXZ
0x18001EC40: WPP_26e3cc33d48f314a72210053b106b996_Traceguids
0x1800053B0: "protected: long __cdecl ATL::CRegParser::SkipAssignment(unsigned short * __ptr64) __ptr64" ?SkipAssignment@CRegParser@ATL@@IEAAJPEAG@Z
0x18001C648: "Pictures" ??_C@_1BC@OAKGMGEA@?$AAP?$AAi?$AAc?$AAt?$AAu?$AAr?$AAe?$AAs?$AA?$AA@
0x18001456C: "public: static long __cdecl CSxNodeList::CreateInstance(class CSxNodeList * __ptr64 * __ptr64)" ?CreateInstance@CSxNodeList@@SAJPEAPEAV1@@Z
0x180021588: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x180019E64: "__cdecl _imp_load_CoImpersonateClient" __imp_load_CoImpersonateClient
0x1800051B4: "public: long __cdecl ATL::CRegKey::RecurseDeleteKey(unsigned short const * __ptr64) __ptr64" ?RecurseDeleteKey@CRegKey@ATL@@QEAAJPEBG@Z
0x180001A58: "private: long __cdecl CSdRestoreServiceModule::_HandlePower(unsigned long,void * __ptr64) __ptr64" ?_HandlePower@CSdRestoreServiceModule@@AEAAJKPEAX@Z
0x18001B7E8: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180023D18: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUgizxrmtUlyquivUznwGEUhgwzucOlyq@tracing" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUgizxrmtUlyquivUznwGEUhgwzucOlyq@tracing
0x1800163F8: "long __cdecl SxRegWriteULONGLONG(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned __int64)" ?SxRegWriteULONGLONG@@YAJPEAUHKEY__@@PEBG_K@Z
0x18001F908: "%s.0.%d.%s" ??_C@_1BG@NNKOBMJN@?$AA?$CF?$AAs?$AA?4?$AA0?$AA?4?$AA?$CF?$AAd?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x1800031F0: "public: virtual long __cdecl ATL::CComObject<class CSdrRestoreService>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCSdrRestoreService@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x180018CC0: "long __cdecl SxStartTracing(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned long,unsigned __int64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?SxStartTracing@@YAJPEBG0KPEA_KPEAPEAG@Z
0x18001C858: c_wszSafedocsCredentialsUser
0x18001EEB0: WPP_3cacd3b84ff030d218593a00377c71be_Traceguids
0x1800212F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x18001B740: "__cdecl _imp_MoveFileExW" __imp_MoveFileExW
0x18001F5D8: "LastRestoreId" ??_C@_1BM@EIKMMEBO@?$AAL?$AAa?$AAs?$AAt?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAI?$AAd?$AA?$AA@
0x180017C08: "public: long __cdecl CBsString::Append(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Append@CBsString@@QEAAJPEBG0@Z
0x180023B28: "__cdecl _hmod__ext_ms_win_shell_shell32_l1_2_0_dll" __hmod__ext_ms_win_shell_shell32_l1_2_0_dll
0x18001BAD0: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x180003CA0: "public: virtual long __cdecl ATL::CComClassFactory::LockServer(int) __ptr64" ?LockServer@CComClassFactory@ATL@@UEAAJH@Z
0x1800134B4: "long __cdecl StringCbLengthW(unsigned short const * __ptr64,unsigned __int64,unsigned __int64 * __ptr64)" ?StringCbLengthW@@YAJPEBG_KPEA_K@Z
0x180021524: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l2-1-0
0x18001DED8: "CSdController::_HasASRHappened" ??_C@_0BP@NOAHPGFB@CSdController?3?3_HasASRHappened?$AA@
0x180001758: "public: long __cdecl CSdRestoreServiceModule::InitializeCOM(int) __ptr64" ?InitializeCOM@CSdRestoreServiceModule@@QEAAJH@Z
0x18001C028: FOLDERID_History
0x18001B688: "__cdecl _imp_SxTracerShouldTrackFailure" __imp_SxTracerShouldTrackFailure
0x18000DB50: "long __cdecl GetSDTracingDirectory(class CBsString * __ptr64)" ?GetSDTracingDirectory@@YAJPEAVCBsString@@@Z
0x18001C290: "AppData\Local" ??_C@_1BM@CIFLCNLH@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?$AA@
0x180023D50: "__cdecl _onexitend" __onexitend
0x18001BB00: "__cdecl _imp_AdjustTokenPrivileges" __imp_AdjustTokenPrivileges
0x18001D390: "HKPD" ??_C@_19PNBHMJPL@?$AAH?$AAK?$AAP?$AAD?$AA?$AA@
0x18001EA50: "::DeleteFile( *pstrDir )" ??_C@_0BJ@FDMEOCFD@?3?3DeleteFile?$CI?5?$CKpstrDir?5?$CJ?$AA@
0x180019C57: "__cdecl unlock" _unlock
0x18000546C: "protected: long __cdecl ATL::CRegParser::NextToken(unsigned short * __ptr64) __ptr64" ?NextToken@CRegParser@ATL@@IEAAJPEAG@Z
0x18001BD10: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1800106F8: "long __cdecl GetUserSid(struct HKEY__ * __ptr64 const,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64)" ?GetUserSid@@YAJQEAUHKEY__@@PEBGPEAPEAE@Z
0x180017B44: "public: long __cdecl CBsString::Append(unsigned short const * __ptr64,unsigned long) __ptr64" ?Append@CBsString@@QEAAJPEBGK@Z
0x18000C9D0: "private: long __cdecl CSdController::_HasASRHappened(struct _SD_BACKUP_CONFIG const * __ptr64) __ptr64" ?_HasASRHappened@CSdController@@AEAAJPEBU_SD_BACKUP_CONFIG@@@Z
0x180023CE0: "class CSdRestoreServiceModule g_Service" ?g_Service@@3VCSdRestoreServiceModule@@A
0x18001DA88: "CSdController::_ClearFullBackupF" ??_C@_0CE@LNOIEE@CSdController?3?3_ClearFullBackupF@
0x18001F398: "CSxNodeListStack::TopItemDelete" ??_C@_0CA@IILOPHBK@CSxNodeListStack?3?3TopItemDelete?$AA@
0x18001B728: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x18001CEB4: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x18001B880: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x18001EFB8: "__cdecl GUID_d550d193_668c_47e2_a512_fbed58fd82bc" _GUID_d550d193_668c_47e2_a512_fbed58fd82bc
0x180020DFC: "__cdecl _DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll" __DELAY_IMPORT_DESCRIPTOR_OLEAUT32_dll
0x180017474: "public: long __cdecl CBsString::ReverseFind(unsigned short)const __ptr64" ?ReverseFind@CBsString@@QEBAJG@Z
0x18001EA08: "FAILED" ??_C@_06OHCJKBJM@FAILED?$AA@
0x18001BFA8: FOLDERID_SendTo
0x180013B08: HRESULTFromNTSTATUS
0x18001BA90: "__cdecl _imp_RegisterEventSourceW" __imp_RegisterEventSourceW
0x18001BAC0: "__cdecl _imp_GetTokenInformation" __imp_GetTokenInformation
0x180021188: CRYPT32_NULL_THUNK_DATA_DLB
0x18001EFF8: "IsRPCError" ??_C@_0L@BLFBHFDO@IsRPCError?$AA@
0x18001E8B8: "Log_SD_ERROR_TARGET_FAILED" ??_C@_0BL@MOBHFJPB@Log_SD_ERROR_TARGET_FAILED?$AA@
0x18001BCB8: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180019DD4: "__cdecl _imp_load_CoCreateInstance" __imp_load_CoCreateInstance
0x180017F34: "public: void __cdecl CBsString::UnTrailing(unsigned short) __ptr64" ?UnTrailing@CBsString@@QEAAXG@Z
0x180008A7C: "private: long __cdecl CSdController::_WaitForUI(struct ISdCallback2 * __ptr64 * __ptr64,struct _GUID * __ptr64) __ptr64" ?_WaitForUI@CSdController@@AEAAJPEAPEAUISdCallback2@@PEAU_GUID@@@Z
0x18001BA20: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18001BD48: "__cdecl _xi_a" __xi_a
0x18001F940: "%s.0.1.%s" ??_C@_1BE@MKPPGOFN@?$AA?$CF?$AAs?$AA?4?$AA0?$AA?4?$AA1?$AA?4?$AA?$CF?$AAs?$AA?$AA@
0x18001C340: "AppData\Local\Microsoft\Windows\" ??_C@_1FE@OJNFALAO@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18001DEB8: "CSdController::AskRestore" ??_C@_0BK@LGGFPICN@CSdController?3?3AskRestore?$AA@
0x18001D480: "HKEY_DYN_DATA" ??_C@_1BM@HAGMMHIA@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAD?$AAY?$AAN?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18001BA08: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180016F80: "private: static long __cdecl CBsString::_AllocateData(unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?_AllocateData@CBsString@@CAJKPEAPEAGPEAK@Z
0x18001B6B8: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180002C70: "public: virtual long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdrRestoreService> >::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800064B0: "public: static long __cdecl CSdrRestoreService::UpdateRegistry(int)" ?UpdateRegistry@CSdrRestoreService@@SAJH@Z
0x18001CA50: c_wszSafedocsUser_Key
0x18001D8D8: "*.library-ms" ??_C@_1BK@LFHNJAGI@?$AA?$CK?$AA?4?$AAl?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?9?$AAm?$AAs?$AA?$AA@
0x18001D878: "CSdController::_AddAllUsersDataP" ??_C@_0CN@CJMIHEFE@CSdController?3?3_AddAllUsersDataP@
0x18001BC18: "__cdecl _imp__unlock" __imp__unlock
0x18001BB10: "__cdecl _imp_LogonUserExW" __imp_LogonUserExW
0x180003550: "public: virtual long __cdecl ATL::CComAggObject<class CSdController>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComAggObject@VCSdController@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001F830: "SxAllocateEventTraceProp" ??_C@_0BJ@GNNHEIAE@SxAllocateEventTraceProp?$AA@
0x18001BB08: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x18001D4E8: "D" ??_C@_13MKMNOPIJ@?$AAD?$AA?$AA@
0x18001DD50: "CSdController::_VerifySavedCrede" ??_C@_0CH@GHIMAOLE@CSdController?3?3_VerifySavedCrede@
0x180025068: "__cdecl _imp_CoGetCallContext" __imp_CoGetCallContext
0x18001D410: "HKEY_LOCAL_MACHINE" ??_C@_1CG@GFBEANJL@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAL?$AAO?$AAC?$AAA?$AAL?$AA_?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x180025088: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x18001B048: "const ATL::CComContainedObject<class CSdController>::`vftable'{for `ISdCallback2'}" ??_7?$CComContainedObject@VCSdController@@@ATL@@6BISdCallback2@@@
0x18001F308: WPP_fe0b416e53013f034f3eec1b5711a87b_Traceguids
0x180001800: "public: long __cdecl CSdRestoreServiceModule::UninitializeCOM(void) __ptr64" ?UninitializeCOM@CSdRestoreServiceModule@@QEAAJXZ
0x180013914: WPP_SF_dD
0x180013964: WPP_SF_dd
0x180002F58: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CSdController> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCSdController@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001BB80: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x18000F898: WPP_SF_dS
0x180003C10: "[thunk]:public: virtual long __cdecl ATL::CComObjectGlobal<class CSdController>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectGlobal@VCSdController@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x180002C90: "public: virtual unsigned long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdController> >::Release(void) __ptr64" ?Release@?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdController@@@ATL@@@ATL@@UEAAKXZ
0x18000D7E8: "public: long __cdecl CSxFunctionTracer::LogEvent(unsigned short const * __ptr64,unsigned long,unsigned short,unsigned long,unsigned short,unsigned short const * __ptr64 * __ptr64 const)const __ptr64" ?LogEvent@CSxFunctionTracer@@QEBAJPEBGKGKGQEAPEBG@Z
0x180016AE0: "long __cdecl IsTokenMember(void * __ptr64,enum WELL_KNOWN_SID_TYPE,int * __ptr64)" ?IsTokenMember@@YAJPEAXW4WELL_KNOWN_SID_TYPE@@PEAH@Z
0x18001C2B0: "Local AppDataLow" ??_C@_1CC@CEIDCFHN@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AAL?$AAo?$AAw?$AA?$AA@
0x180010828: "long __cdecl GetFriendlyNameForUser(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,class CBsString * __ptr64)" ?GetFriendlyNameForUser@@YAJPEBG00PEAVCBsString@@@Z
0x180010124: "long __cdecl CleanupBackupConfigFields(struct _SD_BACKUP_CONFIG * __ptr64)" ?CleanupBackupConfigFields@@YAJPEAU_SD_BACKUP_CONFIG@@@Z
0x18001F1A0: "WriteCredsToRegistry" ??_C@_0BF@BPLENDMN@WriteCredsToRegistry?$AA@
0x180019F1F: "__cdecl _tailMerge_ext_ms_win_shell_shell32_l1_2_0_dll" __tailMerge_ext_ms_win_shell_shell32_l1_2_0_dll
0x18001ECB4: "IsNTFS" ??_C@_06HIJLOOHM@IsNTFS?$AA@
0x18001797C: "public: long __cdecl CBsString::FormatErrorCode(long,unsigned long,struct ___FORMAT_ERRORCODE_SEARCH_DLL_ENTRY const * __ptr64,unsigned long,struct ___FORMAT_ERRORCODE_ERROR_MAP_ENTRTY const * __ptr64) __ptr64" ?FormatErrorCode@CBsString@@QEAAJJKPEBU___FORMAT_ERRORCODE_SEARCH_DLL_ENTRY@@KPEBU___FORMAT_ERRORCODE_ERROR_MAP_ENTRTY@@@Z
0x1800230D8: WPP_GLOBAL_Control
0x18001E7C0: "__cdecl GUID_b63ea76d_1f85_456f_a19c_48159efa858b" _GUID_b63ea76d_1f85_456f_a19c_48159efa858b
0x18001E9C8: IID_ISdRestoreObjectSetup
0x180017AE0: "public: long __cdecl CBsString::Set(struct _GUID const & __ptr64) __ptr64" ?Set@CBsString@@QEAAJAEBU_GUID@@@Z
0x18001D160: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18002136C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18001B840: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x18001BCC8: "__cdecl _imp_NtQueryKey" __imp_NtQueryKey
0x180002AF0: ?GetObjectDescription@?$CComCoClass@VCSdController@@$1?CLSID_CSdController@@3U_GUID@@B@ATL@@SAPEBGXZ
0x18000F854: WPP_SF_D
0x180001280: WPP_SF_d
0x18001B7F0: "__cdecl _imp_FindResourceExW" __imp_FindResourceExW
0x18001BCD0: "__cdecl _imp_NtQueryVolumeInformationFile" __imp_NtQueryVolumeInformationFile
0x180023D68: "__cdecl pRawDllMain" _pRawDllMain
0x18001632C: "long __cdecl SxRegWriteDWORD(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned long)" ?SxRegWriteDWORD@@YAJPEAUHKEY__@@PEBGK@Z
0x18001DEF8: "CSdController::GetNetshareUserna" ??_C@_0CD@CKFMBMFK@CSdController?3?3GetNetshareUserna@
0x18000BF40: "public: virtual long __cdecl CSdController::Start(void) __ptr64" ?Start@CSdController@@UEAAJXZ
0x1800021DC: "private: long __cdecl CSdRestoreServiceModule::SignalShutdown(void) __ptr64" ?SignalShutdown@CSdRestoreServiceModule@@AEAAJXZ
0x1800213F8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l2-1-0
0x1800015E0: DllUnregisterServer
0x180023B30: "__cdecl _hmod__ext_ms_win_security_credui_l1_1_1_dll" __hmod__ext_ms_win_security_credui_l1_1_1_dll
0x18000B9A0: "public: virtual long __cdecl CSdController::QueryProgress(struct SD_SCHEDULED_BACKUP_PROGRESS * __ptr64) __ptr64" ?QueryProgress@CSdController@@UEAAJPEAUSD_SCHEDULED_BACKUP_PROGRESS@@@Z
0x18001BBF0: "__cdecl _imp___dllonexit" __imp___dllonexit
0x180003890: "public: virtual unsigned long __cdecl ATL::CComContainedObject<class CSdrRestoreService>::Release(void) __ptr64" ?Release@?$CComContainedObject@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x18001E908: CLSID_CSdController
0x18000DF88: "long __cdecl SdGetLogFileNamePrefix(class CBsString * __ptr64)" ?SdGetLogFileNamePrefix@@YAJPEAVCBsString@@@Z
0x18000FA5C: "long __cdecl TraceBackupConfigFields(struct _SD_BACKUP_CONFIG * __ptr64)" ?TraceBackupConfigFields@@YAJPEAU_SD_BACKUP_CONFIG@@@Z
0x18001921C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180003AC0: "protected: long __cdecl CSxComObjectRootEx<class CSdrRestoreService,class ATL::CComMultiThreadModelNoCS>::_AtlInitialConstruct(void) __ptr64" ?_AtlInitialConstruct@?$CSxComObjectRootEx@VCSdrRestoreService@@VCComMultiThreadModelNoCS@ATL@@@@IEAAJXZ
0x180002C70: "public: virtual long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdController> >::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdController@@@ATL@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001D8A8: "CSdController::_AddUserLibraryPa" ??_C@_0CM@DAEKFEP@CSdController?3?3_AddUserLibraryPa@
0x18001C830: c_wszSafedocsDeviceSize
0x180021358: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18001B9A0: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180003940: "public: virtual unsigned long __cdecl ATL::CComAggObject<class CSdrRestoreService>::Release(void) __ptr64" ?Release@?$CComAggObject@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x180019790: "__cdecl _security_check_cookie" __security_check_cookie
0x18001F8D8: "SxMergeExtraLogs" ??_C@_0BB@OODJBCN@SxMergeExtraLogs?$AA@
0x18001EC50: "sdengin2.dll" ??_C@_1BK@JLMJGOBG@?$AAs?$AAd?$AAe?$AAn?$AAg?$AAi?$AAn?$AA2?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180023D1C: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhzuvwlxhUkilkUlyquivUznwGEUhgwzucOlyq@sd_prop" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUhgliUhcUhzuvwlxhUkilkUlyquivUznwGEUhgwzucOlyq@sd_prop
0x18001BD40: "__cdecl _xc_z" __xc_z
0x180019DB0: "__cdecl _imp_load_CoInitializeEx" __imp_load_CoInitializeEx
0x18001E978: IID_ISdWhcNotifier
0x180004268: "public: void __cdecl ATL::CComModule::Term(void) __ptr64" ?Term@CComModule@ATL@@QEAAXXZ
0x1800213BC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x18001B898: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x18001B800: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180018F74: "long __cdecl SxEnableTraceDefault(unsigned __int64,struct _GUID,unsigned long)" ?SxEnableTraceDefault@@YAJ_KU_GUID@@K@Z
0x1800214E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-provider-l1-1-0
0x18001CAC0: c_wszSafedocsScheduleLastResultTargetLabel
0x18001C4A0: "AppData\Roaming\Microsoft\Window" ??_C@_1FE@IKJEENCP@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAR?$AAo?$AAa?$AAm?$AAi?$AAn?$AAg?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw@
0x180006EFC: "private: static long __cdecl CSdController::_VerifyDeviceWithCreds(unsigned short const * __ptr64,void * __ptr64,struct _SID * __ptr64,struct _SD_STORAGE_DEVICE_PROP * __ptr64,unsigned long * __ptr64)" ?_VerifyDeviceWithCreds@CSdController@@CAJPEBGPEAXPEAU_SID@@PEAU_SD_STORAGE_DEVICE_PROP@@PEAK@Z
0x18001C038: FOLDERID_Pictures
0x18001F500: "SxRegWriteDWORD" ??_C@_0BA@DGLOAICN@SxRegWriteDWORD?$AA@
0x18001B3F0: ?_entries@?1??_GetEntries@CComClassFactory@ATL@@SAPEBU_ATL_INTMAP_ENTRY@3@XZ@4QBU43@B
0x18001B7B0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180025038: "__cdecl _imp_CoCreateInstance" __imp_CoCreateInstance
0x18001BA00: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18001D3B0: "HKCC" ??_C@_19OFICIBHH@?$AAH?$AAK?$AAC?$AAC?$AA?$AA@
0x18001BBB8: api-ms-win-shell-shellcom-l1-1-0_NULL_THUNK_DATA
0x18000C180: "public: virtual long __cdecl CSdController::VerifyDeviceWithCredentials(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64,unsigned long,struct _SD_STORAGE_DEVICE_PROP * __ptr64,unsigned long * __ptr64) __ptr64" ?VerifyDeviceWithCredentials@CSdController@@UEAAJPEBG0PEAGKPEAU_SD_STORAGE_DEVICE_PROP@@PEAK@Z
0x18001D3E8: "HKEY_CURRENT_USER" ??_C@_1CE@HLHNCBPM@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAC?$AAU?$AAR?$AAR?$AAE?$AAN?$AAT?$AA_?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180021510: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-logon-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-logon-l1-1-0
0x18001B770: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x18001BA80: "__cdecl _imp_ReportEventW" __imp_ReportEventW
0x18001BB30: api-ms-win-security-lsalookup-l2-1-0_NULL_THUNK_DATA
0x18001D330: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszSvcName" ?s_wszSvcName@CSdRestoreServiceModule@@0QBGB
0x18001B6A8: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180002D30: "public: virtual unsigned long __cdecl ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdrRestoreService> >::AddRef(void) __ptr64" ?AddRef@?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@@ATL@@UEAAKXZ
0x18000C4F0: "public: virtual long __cdecl CSdController::ChangeMedia(unsigned short const * __ptr64,enum _SD_CHANGE_MEDIA_WANTED,enum _SD_CHANGE_MEDIA_REASON,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?ChangeMedia@CSdController@@UEAAJPEBGW4_SD_CHANGE_MEDIA_WANTED@@W4_SD_CHANGE_MEDIA_REASON@@00@Z
0x18001A1A0: "__cdecl _chkstk" __chkstk
0x18001F130: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1HA@EIBDGILM@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800064D0: "public: virtual long __cdecl CSdrRestoreService::CreateRestoreObject(struct ISdRestore2 * __ptr64 * __ptr64,struct ISdGlobalCatalog * __ptr64 * __ptr64) __ptr64" ?CreateRestoreObject@CSdrRestoreService@@UEAAJPEAPEAUISdRestore2@@PEAPEAUISdGlobalCatalog@@@Z
0x18000BE40: "public: virtual long __cdecl CSdController::Cancel(struct _GUID) __ptr64" ?Cancel@CSdController@@UEAAJU_GUID@@@Z
0x18000D128: "long __cdecl Log_SD_ERROR_BACKUP_FAILED(class CSxFunctionTracer * __ptr64,unsigned long,long)" ?Log_SD_ERROR_BACKUP_FAILED@@YAJPEAVCSxFunctionTracer@@KJ@Z
0x18001B6F8: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x18001D690: "CSdController::FinalConstruct" ??_C@_0BO@MDFGPCFF@CSdController?3?3FinalConstruct?$AA@
0x18001BB60: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x1800213D0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-management-l1-1-0
0x180001B60: "private: long __cdecl CSdRestoreServiceModule::_SetServiceStatus(unsigned long) __ptr64" ?_SetServiceStatus@CSdRestoreServiceModule@@AEAAJK@Z
0x18001C510: "AppData\Roaming\Microsoft\Window" ??_C@_1FC@DJANCKGM@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAR?$AAo?$AAa?$AAm?$AAi?$AAn?$AAg?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw@
0x18001DC80: "CSdController::_SetNetworkCreden" ??_C@_0CG@KNLFKGPC@CSdController?3?3_SetNetworkCreden@
0x18001352C: "long __cdecl CleanupBackupProgressFields(struct SD_BACKUP_PROGRESS * __ptr64)" ?CleanupBackupProgressFields@@YAJPEAUSD_BACKUP_PROGRESS@@@Z
0x1800035C0: "public: virtual unsigned long __cdecl ATL::CComAggObject<class CSdController>::Release(void) __ptr64" ?Release@?$CComAggObject@VCSdController@@@ATL@@UEAAKXZ
0x18001F7D0: "%s%s(0x%08X[0x%08X])" ??_C@_1CK@HPDLCOHM@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$CI?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX?$AA?$FL?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX?$AA?$FN?$AA?$CJ?$AA?$AA@
0x180017038: "private: long __cdecl CBsString::_CombinePathImpl(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?_CombinePathImpl@CBsString@@AEAAJPEBG000000000@Z
0x18001D1D0: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszServiceDllKey" ?s_wszServiceDllKey@CSdRestoreServiceModule@@0QBGB
0x18001F228: "CleanupBackupStatusFields" ??_C@_0BK@FOLEDPAL@CleanupBackupStatusFields?$AA@
0x18001DCF0: "CSdController::_ClearNetShareTar" ??_C@_0CN@FFMLGBGG@CSdController?3?3_ClearNetShareTar@
0x18001DE30: "CSdController::Start" ??_C@_0BF@EJNEJLM@CSdController?3?3Start?$AA@
0x18001C920: c_wszSafedocsScheduleBackupFlags
0x18001CBD8: "struct _GUID const c_guidGuiTracingControlGuid" ?c_guidGuiTracingControlGuid@@3U_GUID@@B
0x180009E9C: "private: long __cdecl CSdController::_IsStaleBitSet(int * __ptr64) __ptr64" ?_IsStaleBitSet@CSdController@@AEAAJPEAH@Z
0x18001B710: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x18001B940: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18001F2B0: "SxSetProcessPriorities" ??_C@_0BH@EHPJKLPH@SxSetProcessPriorities?$AA@
0x18001C3B0: "AppData\Local\Microsoft\Windows\" ??_C@_1HC@HBDNBBD@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2@
0x18001B0E8: "const ATL::CComObject<class CSdrRestoreService>::`vftable'" ??_7?$CComObject@VCSdrRestoreService@@@ATL@@6B@
0x180011C24: "long __cdecl GetShellPath(struct _UserProfileData * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?GetShellPath@@YAJPEAU_UserProfileData@@PEBGPEAPEAG@Z
0x18001D3A0: "HKDD" ??_C@_19GFFAIJHG@?$AAH?$AAK?$AAD?$AAD?$AA?$AA@
0x18001DCA8: "CSdController::_HasSRHappened" ??_C@_0BO@JLNOEACD@CSdController?3?3_HasSRHappened?$AA@
0x18001F360: "CSxNodeListStack::Pop" ??_C@_0BG@FPNLOEMJ@CSxNodeListStack?3?3Pop?$AA@
0x180006930: "public: virtual long __cdecl CSdrRestoreService::StopTracing(unsigned short * __ptr64,unsigned char) __ptr64" ?StopTracing@CSdrRestoreService@@UEAAJPEAGE@Z
0x180019DC2: "__cdecl _imp_load_CoUninitialize" __imp_load_CoUninitialize
0x18001D858: "CSdController::_ConfigureEngine" ??_C@_0CA@ONCAJIEF@CSdController?3?3_ConfigureEngine?$AA@
0x18001B948: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x18001EEF0: "GetFriendlyNameForUser" ??_C@_0BH@NGMFMAIH@GetFriendlyNameForUser?$AA@
0x180021420: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x18001BB98: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA
0x18001B010: "const ATL::CComContainedObject<class CSdrRestoreService>::`vftable'" ??_7?$CComContainedObject@VCSdrRestoreService@@@ATL@@6B@
0x180017308: "public: long __cdecl CBsString::Find(unsigned short,unsigned long)const __ptr64" ?Find@CBsString@@QEBAJGK@Z
0x18001BBA8: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA
0x18001F3D8: "_GetFileAttributesTag" ??_C@_0BG@OMCHLOLL@_GetFileAttributesTag?$AA@
0x18001B120: "const ATL::CComAggObject<class CSdrRestoreService>::`vftable'" ??_7?$CComAggObject@VCSdrRestoreService@@@ATL@@6B@
0x18001B8A8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18001F068: "ReadStringFromRegistry" ??_C@_0BH@LJMOBCOO@ReadStringFromRegistry?$AA@
0x18001D670: "__cdecl GUID_c7930797_7deb_45c9_aa71_ae0dc66251d6" _GUID_c7930797_7deb_45c9_aa71_ae0dc66251d6
0x18001BD60: "__cdecl _guard_fids_table" __guard_fids_table
0x18001B958: "__cdecl _imp_CharNextW" __imp_CharNextW
0x18001BAB0: "__cdecl _imp_CreateWellKnownSid" __imp_CreateWellKnownSid
0x18001BC98: msvcrt_NULL_THUNK_DATA
0x18001B580: "__cdecl load_config_used" _load_config_used
0x18001C270: "Local AppData" ??_C@_1BM@HNPONCLD@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?5?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x18001D628: "CSdrRestoreService::StartTracing" ??_C@_0CB@LBPMFHL@CSdrRestoreService?3?3StartTracing@
0x180021448: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x18001CF48: "CSdRestoreServiceModule::Service" ??_C@_0CF@HGMLJONF@CSdRestoreServiceModule?3?3Service@
0x180023D24: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUfgrohUlyquivUznwGEUfgrohsOlyq@utils" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUhgliUhcUfgrohUlyquivUznwGEUfgrohsOlyq@utils
0x18001F270: "CleanupBackupProgressFields" ??_C@_0BM@GHFFGBGB@CleanupBackupProgressFields?$AA@
0x18001BBB0: "__cdecl _imp_SHCoCreateInstance" __imp_SHCoCreateInstance
0x18000B494: "private: long __cdecl CSdController::_ClearNetShareTargetSpaceInfo(void) __ptr64" ?_ClearNetShareTargetSpaceInfo@CSdController@@AEAAJXZ
0x18001DC50: "CSdController::_EnsureTargetNotB" ??_C@_0CL@MEBKNEFM@CSdController?3?3_EnsureTargetNotB@
0x180019E52: "__cdecl _imp_load_StringFromGUID2" __imp_load_StringFromGUID2
0x18001B6C0: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x18001B6B0: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18001C428: "History" ??_C@_1BA@JJMCCKFL@?$AAH?$AAi?$AAs?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x1800022E4: "public: long __cdecl CSdRestoreServiceModule::Register(void) __ptr64" ?Register@CSdRestoreServiceModule@@QEAAJXZ
0x180003C10: "[thunk]:public: virtual long __cdecl ATL::CComObject<class CSdController>::QueryInterface`adjustor{8}' (struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObject@VCSdController@@@ATL@@W7EAAJAEBU_GUID@@PEAPEAX@Z
0x1800143B4: "long __cdecl SxDeleteFile(unsigned short const * __ptr64)" ?SxDeleteFile@@YAJPEBG@Z
0x18001CC08: c_wszSafedocsTracingFlags
0x180003C70: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObjectGlobal<class CSdController>::AddRef`adjustor{8}' (void) __ptr64" ?AddRef@?$CComObjectGlobal@VCSdController@@@ATL@@W7EAAKXZ
0x180002D30: "public: virtual unsigned long __cdecl ATL::CComAggObject<class CSdController>::AddRef(void) __ptr64" ?AddRef@?$CComAggObject@VCSdController@@@ATL@@UEAAKXZ
0x18001D588: "RegDeleteKeyExW" ??_C@_0BA@LILAPHGE@RegDeleteKeyExW?$AA@
0x18001DBE0: "CSdController::QueryDeviceProper" ??_C@_0CF@HKCNDEKD@CSdController?3?3QueryDeviceProper@
0x18000A318: "private: long __cdecl CSdController::_EnsureBackupTarget(struct ISdCommon2 * __ptr64,struct _SD_STORAGE_DEVICE_PROP * __ptr64,struct _SD_STORAGE_DEVICE_PROP * __ptr64) __ptr64" ?_EnsureBackupTarget@CSdController@@AEAAJPEAUISdCommon2@@PEAU_SD_STORAGE_DEVICE_PROP@@1@Z
0x1800214D4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x18000BB00: "public: virtual long __cdecl CSdController::QueryLastStatus(struct _SD_SCHEDULED_BACKUP_STATUS * __ptr64) __ptr64" ?QueryLastStatus@CSdController@@UEAAJPEAU_SD_SCHEDULED_BACKUP_STATUS@@@Z
0x18001BCB0: "__cdecl _imp_NtSetInformationProcess" __imp_NtSetInformationProcess
0x18001F4A0: "SxCheckVolumeCompressedEncrypted" ??_C@_0CB@JNOJOPAL@SxCheckVolumeCompressedEncrypted@
0x18001CED8: "DllUnregisterServer" ??_C@_0BE@IIFJAPHG@DllUnregisterServer?$AA@
0x1800214C0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18000C980: "public: virtual long __cdecl CSdController::AskRestore(unsigned short const * __ptr64,unsigned short const * __ptr64,struct _MSD_FILE_INFO * __ptr64,struct _MSD_FILE_INFO * __ptr64,unsigned long,long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64) __ptr64" ?AskRestore@CSdController@@UEAAJPEBG0PEAU_MSD_FILE_INFO@@1KJPEAPEAGPEAK@Z
0x1800174A8: "public: long __cdecl CBsString::FormatV(unsigned short const * __ptr64,char * __ptr64) __ptr64" ?FormatV@CBsString@@QEAAJPEBGPEAD@Z
0x18001F4C8: "SxRegReadDWORD" ??_C@_0P@CADLPMOB@SxRegReadDWORD?$AA@
0x1800139B8: Win32FromHRESULT
0x18001D368: "HKCU" ??_C@_19JAPAIJDE@?$AAH?$AAK?$AAC?$AAU?$AA?$AA@
0x18001BBC8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x18000798C: "private: static long __cdecl CSdController::_MatchDevice(struct _SD_STORAGE_DEVICE_PROP * __ptr64,struct _SD_STORAGE_DEVICE_PROP * __ptr64)" ?_MatchDevice@CSdController@@CAJPEAU_SD_STORAGE_DEVICE_PROP@@0@Z
0x18001EE00: "CleanupBackupRoots" ??_C@_0BD@JEDLHNCL@CleanupBackupRoots?$AA@
0x180003510: "public: virtual unsigned long __cdecl ATL::CComContainedObject<class CSdController>::Release(void) __ptr64" ?Release@?$CComContainedObject@VCSdController@@@ATL@@UEAAKXZ
0x18001ED30: "CreateNetworkAccessTokenFromCred" ??_C@_0CC@NKLMNDLP@CreateNetworkAccessTokenFromCred@
0x18001EC08: "Already existed" ??_C@_0BA@CKMGKMPC@Already?5existed?$AA@
0x180025010: CRYPT32_NULL_THUNK_DATA_DLA
0x1800034B0: "public: virtual long __cdecl ATL::CComContainedObject<class CSdController>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComContainedObject@VCSdController@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001C780: c_wszSafedocsCredentialsKey
0x18001B2C8: "const ATL::CComClassFactorySingleton<class CSdrRestoreService>::`vftable'" ??_7?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@6B@
0x18001C0F8: CLSID_GlobalOptions
0x180019E76: "__cdecl _imp_load_CryptProtectData" __imp_load_CryptProtectData
0x18001EED8: "GetUserSid" ??_C@_0L@HFMIPLIA@GetUserSid?$AA@
0x18001F0D8: "WriteBinaryToRegistryEncrypted" ??_C@_0BP@PFOGMPJG@WriteBinaryToRegistryEncrypted?$AA@
0x18001DC08: "CSdController::_UpdateTarget" ??_C@_0BN@FBAMFCIE@CSdController?3?3_UpdateTarget?$AA@
0x18001EBC0: "EnsureDirectoryExists" ??_C@_0BG@MKGAPCPL@EnsureDirectoryExists?$AA@
0x18001B7D0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x18001F540: "SxGetLastSystemRestoreId" ??_C@_0BJ@FEFEDCAF@SxGetLastSystemRestoreId?$AA@
0x180023560: "struct _GUID ATL::GUID_ATLVer30" ?GUID_ATLVer30@ATL@@3U_GUID@@A
0x180005614: "protected: long __cdecl ATL::CRegParser::RegisterSubkeys(unsigned short * __ptr64,struct HKEY__ * __ptr64,int,int) __ptr64" ?RegisterSubkeys@CRegParser@ATL@@IEAAJPEAGPEAUHKEY__@@HH@Z
0x18001B928: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18001B8A0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x18000CFD0: "long __cdecl Log_SD_ERROR_TARGET_FAILED(class CSxFunctionTracer * __ptr64,unsigned long,unsigned short const * __ptr64,long)" ?Log_SD_ERROR_TARGET_FAILED@@YAJPEAVCSxFunctionTracer@@KPEBGJ@Z
0x18001F318: "SxClearDifficultAttributes" ??_C@_0BL@KCBBCC@SxClearDifficultAttributes?$AA@
0x18001C230: "Links" ??_C@_1M@ECGJKODJ@?$AAL?$AAi?$AAn?$AAk?$AAs?$AA?$AA@
0x1800038D0: "public: virtual long __cdecl ATL::CComAggObject<class CSdrRestoreService>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComAggObject@VCSdrRestoreService@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001456C: "public: static long __cdecl CSxNodeListStack::CreateInstance(class CSxNodeListStack * __ptr64 * __ptr64)" ?CreateInstance@CSxNodeListStack@@SAJPEAPEAV1@@Z
0x18001F438: "_DeleteDirectoryTraverseCallback" ??_C@_0CB@GNLKBEPC@_DeleteDirectoryTraverseCallback@
0x18001B830: "__cdecl _imp_VirtualAlloc" __imp_VirtualAlloc
0x1800020F4: "private: long __cdecl CSdRestoreServiceModule::Run(void) __ptr64" ?Run@CSdRestoreServiceModule@@AEAAJXZ
0x180019F9E: "__cdecl _imp_load_CredUIParseUserNameW" __imp_load_CredUIParseUserNameW
0x180019871: free
0x18000D2D8: WPP_SF_sdd
0x18001BA88: "__cdecl _imp_DeregisterEventSource" __imp_DeregisterEventSource
0x1800142A4: "long __cdecl SxClearDifficultAttributes(unsigned short const * __ptr64,unsigned long * __ptr64)" ?SxClearDifficultAttributes@@YAJPEBGPEAK@Z
0x18001BAE8: "__cdecl _imp_SetSecurityDescriptorGroup" __imp_SetSecurityDescriptorGroup
0x180007B20: "private: long __cdecl CSdController::_ConfigureEngine(struct ISdBackup2 * __ptr64,unsigned short const * __ptr64,struct _SD_BACKUP_CONFIG * __ptr64,long * __ptr64) __ptr64" ?_ConfigureEngine@CSdController@@AEAAJPEAUISdBackup2@@PEBGPEAU_SD_BACKUP_CONFIG@@PEAJ@Z
0x180019E82: "__cdecl _tailMerge_crypt32_dll" __tailMerge_crypt32_dll
0x1800103C4: WPP_SF_SSD
0x180010488: WPP_SF_SSd
0x180006B48: WPP_SF_sSd
0x18001EC88: "spp.dll" ??_C@_1BA@CADMJLEI@?$AAs?$AAp?$AAp?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001B838: "__cdecl _imp_VirtualQuery" __imp_VirtualQuery
0x18001B790: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x18001EFC8: WPP_788a924028c93ab476c050690c96aa96_Traceguids
0x18001D2C0: "private: static unsigned short const * const CSdRestoreServiceModule::s_wszSvcBinaryPath" ?s_wszSvcBinaryPath@CSdRestoreServiceModule@@0QBGB
0x180002DF8: "public: static long __cdecl ATL::CComCreator<class ATL::CComAggObject<class CSdController> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComAggObject@VCSdController@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001B920: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180019A50: "__cdecl purecall" _purecall
0x18001B8B0: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x18001F828: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180020E3C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll" __DELAY_IMPORT_DESCRIPTOR_CRYPT32_dll
0x18000D450: "public: __cdecl CSxFunctionTracer::CSxFunctionTracer(char const * __ptr64,unsigned short,unsigned short) __ptr64" ??0CSxFunctionTracer@@QEAA@PEBDGG@Z
0x18001CD88: "struct _GUID const c_guidEngineTracingControlGuid" ?c_guidEngineTracingControlGuid@@3U_GUID@@B
0x18001F248: "CleanupScheduledBackupStatusFiel" ??_C@_0CD@MFMCFLEJ@CleanupScheduledBackupStatusFiel@
0x180004550: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18001B848: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x18001B820: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x18001A146: memcmp
0x18001BA10: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x18000E4F8: "long __cdecl EnsureDirectoryExists(unsigned short const * __ptr64,struct _SECURITY_ATTRIBUTES const * __ptr64,int,int)" ?EnsureDirectoryExists@@YAJPEBGPEBU_SECURITY_ATTRIBUTES@@HH@Z
0x18001E9B8: IID_ISdCommon2
0x180019CFB: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x18001BC50: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x18001D0F4: "" ??_C@_13NOLLCAOD@?$AA?$AA?$AA?$AA@
0x18000F92C: WPP_SF_dSSD
0x180010A44: "long __cdecl GetUserShellPaths(unsigned short const * __ptr64,unsigned short const * __ptr64,struct HKEY__ * __ptr64 const,unsigned long * __ptr64,struct SHELL_FOLDER_PATH * __ptr64 * __ptr64)" ?GetUserShellPaths@@YAJPEBG0QEAUHKEY__@@PEAKPEAPEAUSHELL_FOLDER_PATH@@@Z
0x18001BF88: FOLDERID_Desktop
0x180023570: "struct ___FORMAT_ERRORCODE_ERROR_MAP_ENTRTY * g_rgStdMappedErrors" ?g_rgStdMappedErrors@@3PAU___FORMAT_ERRORCODE_ERROR_MAP_ENTRTY@@A
0x18000CE94: "long __cdecl Log_SD_ERROR_SNAPSHOT_FAILED(class CSxFunctionTracer * __ptr64,unsigned long,long)" ?Log_SD_ERROR_SNAPSHOT_FAILED@@YAJPEAVCSxFunctionTracer@@KJ@Z
0x180021560: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-shell-shellcom-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-shell-shellcom-l1-1-0
0x18001CAF0: c_wszSafedocsScheduleLastResultDetailedHr
0x18001BB48: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18002140C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x18001D600: "CSdrRestoreService::CreateQueryO" ??_C@_0CG@KKOKMGAD@CSdrRestoreService?3?3CreateQueryO@
0x180021434: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180003640: "public: virtual unsigned long __cdecl ATL::CComObject<class CSdController>::Release(void) __ptr64" ?Release@?$CComObject@VCSdController@@@ATL@@UEAAKXZ
0x18001D650: "CSdrRestoreService::StopTracing" ??_C@_0CA@DGFKLGAM@CSdrRestoreService?3?3StopTracing?$AA@
0x18001B808: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x18001EDE8: "VerifyCallerAdmin" ??_C@_0BC@DJFMCJLP@VerifyCallerAdmin?$AA@
0x18001B960: "__cdecl _imp_CharPrevW" __imp_CharPrevW
0x18001DA40: "CSdController::_GetAsyncCallObje" ??_C@_0CD@IFAABGFK@CSdController?3?3_GetAsyncCallObje@
0x180003318: "public: static long __cdecl ATL::CComCreator<class ATL::CComObject<class CSdrRestoreService> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObject@VCSdrRestoreService@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001BA68: "__cdecl _imp_ControlTraceW" __imp_ControlTraceW
0x180023B48: "private: static int CSxComObjectRootEx<class CSdrRestoreService,class ATL::CComMultiThreadModelNoCS>::s_fEnableRefTrace" ?s_fEnableRefTrace@?$CSxComObjectRootEx@VCSdrRestoreService@@VCComMultiThreadModelNoCS@ATL@@@@0HA
0x180025050: "__cdecl _imp_CoTaskMemAlloc" __imp_CoTaskMemAlloc
0x18001F510: "SxRegWriteULONGLONG" ??_C@_0BE@LCOMAGLB@SxRegWriteULONGLONG?$AA@
0x18000FF48: "long __cdecl TraceBackupUsers(unsigned long,struct _SD_BACKUP_USER_DATA * __ptr64)" ?TraceBackupUsers@@YAJKPEAU_SD_BACKUP_USER_DATA@@@Z
0x18001BA58: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x1800250A8: ext-ms-win-security-credui-l1-1-1_NULL_THUNK_DATA_DLA
0x18001C0A8: FOLDERID_SavedGames
0x18001CC40: c_wszProfileImagePath
0x18001C620: "Music" ??_C@_1M@BODBFBFO@?$AAM?$AAu?$AAs?$AAi?$AAc?$AA?$AA@
0x18001EC00: "Created" ??_C@_07BBIDHECN@Created?$AA@
0x18001CD50: c_wszNtUserDat
0x180003C30: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObjectGlobal<class CSdController>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObjectGlobal@VCSdController@@@ATL@@W7EAAKXZ
0x18000A100: "private: virtual long __cdecl CSdController::QueryDeviceProperties(unsigned short const * __ptr64,struct _SD_STORAGE_DEVICE_PROP * __ptr64) __ptr64" ?QueryDeviceProperties@CSdController@@EEAAJPEBGPEAU_SD_STORAGE_DEVICE_PROP@@@Z
0x18001B3A0: ?_entries@?1??_GetEntries@CSdController@@SAPEBU_ATL_INTMAP_ENTRY@ATL@@XZ@4QBU34@B
0x18001BBF8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x1800172CC: "public: void __cdecl CBsString::BoundUpdateLength(unsigned long) __ptr64" ?BoundUpdateLength@CBsString@@QEAAXK@Z
0x180002AD0: "public: static long __cdecl ATL::CComCreator2<class ATL::CComCreator<class ATL::CComObject<class CSdController> >,class ATL::CComCreator<class ATL::CComAggObject<class CSdController> > >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator2@V?$CComCreator@V?$CComObject@VCSdController@@@ATL@@@ATL@@V?$CComCreator@V?$CComAggObject@VCSdController@@@ATL@@@2@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18001CF18: "CSdRestoreServiceModule::Uniniti" ??_C@_0CJ@CBJAFKIH@CSdRestoreServiceModule?3?3Uniniti@
0x180019F01: "__cdecl _imp_load_CryptUnprotectData" __imp_load_CryptUnprotectData
0x18001DAB0: "CSdController::_SetFullBackupFla" ??_C@_0CC@GMDJAGFD@CSdController?3?3_SetFullBackupFla@
0x18001BD08: ntdll_NULL_THUNK_DATA
0x180016FFC: "private: void __cdecl CBsString::_Release(void) __ptr64" ?_Release@CBsString@@AEAAXXZ
0x18001BBD0: "__cdecl _imp_memcpy" __imp_memcpy
0x180025008: "__cdecl _imp_CryptProtectData" __imp_CryptProtectData
0x1800068B0: "public: virtual long __cdecl CSdrRestoreService::StartTracing(unsigned short * __ptr64 * __ptr64) __ptr64" ?StartTracing@CSdrRestoreService@@UEAAJPEAPEAG@Z
0x180020E7C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_1_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_security_credui_l1_1_1_dll
0x18001CEF0: "CSdRestoreServiceModule::Initial" ??_C@_0CH@FHLBONJI@CSdRestoreServiceModule?3?3Initial@
0x18001EBD8: "\\?\UNC\" ??_C@_1BC@NAEGMMKI@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x180001C34: "private: long __cdecl CSdRestoreServiceModule::Initialize(void) __ptr64" ?Initialize@CSdRestoreServiceModule@@AEAAJXZ
0x18001C398: "Cache" ??_C@_1M@ELMJBOIA@?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
0x1800138B4: WPP_SF_Ddd
0x18001F9B0: WPP_b8d9f9f0d7d03dc277d47c4b31e28c25_Traceguids
0x18001DDB0: "CSdController::QueryLastStatus" ??_C@_0BP@IIIDPKPP@CSdController?3?3QueryLastStatus?$AA@
0x18001EE78: "TraceBackupUsers" ??_C@_0BB@FDPOADOJ@TraceBackupUsers?$AA@
0x18001B530: "protected: static unsigned short const * __ptr64 * ATL::CRegParser::rgszNeverDelete" ?rgszNeverDelete@CRegParser@ATL@@1PAPEBGA
0x18000FD00: "long __cdecl TraceStorageDeviceProp(struct _SD_STORAGE_DEVICE_PROP * __ptr64)" ?TraceStorageDeviceProp@@YAJPEAU_SD_STORAGE_DEVICE_PROP@@@Z
0x1800031F0: "public: virtual long __cdecl ATL::CComObjectGlobal<class CSdrRestoreService>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectGlobal@VCSdrRestoreService@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x1800159C8: "long __cdecl SxSetFileAttributes(unsigned short const * __ptr64,unsigned long)" ?SxSetFileAttributes@@YAJPEBGK@Z
0x180003C20: "[thunk]:public: virtual unsigned long __cdecl ATL::CComObject<class CSdController>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComObject@VCSdController@@@ATL@@W7EAAKXZ
0x180014EFC: "long __cdecl SxTraverseFilesFirst(unsigned short const * __ptr64,long (__cdecl*)(void * __ptr64,unsigned short const * __ptr64,int),void * __ptr64)" ?SxTraverseFilesFirst@@YAJPEBGP6AJPEAX0H@Z1@Z
0x18001B7B8: "__cdecl _imp_GetComputerNameW" __imp_GetComputerNameW
0x180003730: "public: virtual unsigned long __cdecl ATL::CComObject<class CSdController>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCSdController@@@ATL@@UEAAKXZ
0x18001C138: IID_ICallFactory
0x18001EE90: "CleanupBackupConfigFields" ??_C@_0BK@JFJPPLIE@CleanupBackupConfigFields?$AA@
0x18001BA30: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180003B8C: "public: __cdecl CSdrRestoreService::~CSdrRestoreService(void) __ptr64" ??1CSdrRestoreService@@QEAA@XZ
0x18000888C: "private: long __cdecl CSdController::_AddUserShellPathsToEngine(struct ISdBackup2 * __ptr64,struct _UserProfileData * __ptr64,struct _SD_BACKUP_USER_DATA * __ptr64) __ptr64" ?_AddUserShellPathsToEngine@CSdController@@AEAAJPEAUISdBackup2@@PEAU_UserProfileData@@PEAU_SD_BACKUP_USER_DATA@@@Z
0x1800165B8: "long __cdecl SxGetLastSystemRestoreId(class CBsString * __ptr64)" ?SxGetLastSystemRestoreId@@YAJPEAVCBsString@@@Z
0x180021330: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180017D1C: "public: long __cdecl CBsString::SetPath(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?SetPath@CBsString@@QEAAJPEBG000000000@Z
0x180002DE0: "public: virtual unsigned long __cdecl ATL::CComObjectGlobal<class CSdController>::AddRef(void) __ptr64" ?AddRef@?$CComObjectGlobal@VCSdController@@@ATL@@UEAAKXZ
0x1800145FC: "public: long __cdecl CSxNodeListStack::Push(void) __ptr64" ?Push@CSxNodeListStack@@QEAAJXZ
0x18001BA28: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180023548: "__cdecl _security_cookie" __security_cookie
0x18001C688: c_wszSafedocsScheduleTotalBackupSpaceUsed
0x18001CD18: c_wszTempUserProfileKey
0x18001F6E8: "IsTokenMember" ??_C@_0O@BOCLAADA@IsTokenMember?$AA@
0x18001B8E8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180023D30: "private: static struct HINSTANCE__ * __ptr64 __ptr64 CBsString::s_hModuleNTDLL" ?s_hModuleNTDLL@CBsString@@0PEAUHINSTANCE__@@EA
0x18001F0B8: "ReadBinaryFromRegistryEncrypted" ??_C@_0CA@ICFHCONO@ReadBinaryFromRegistryEncrypted?$AA@
0x18001A1A0: "__cdecl alloca_probe" _alloca_probe
0x18001BAA0: "__cdecl _imp_CheckTokenMembership" __imp_CheckTokenMembership
0x180012FBC: "long __cdecl ReadCredsFromRegistry(unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?ReadCredsFromRegistry@@YAJPEAPEAG0@Z
0x18001E858: "Log_SD_INFO_BACKUP_SUCCEEDED" ??_C@_0BN@ONMACFIF@Log_SD_INFO_BACKUP_SUCCEEDED?$AA@
0x180003C80: "[thunk]:public: virtual unsigned long __cdecl ATL::CComContainedObject<class CSdController>::Release`adjustor{8}' (void) __ptr64" ?Release@?$CComContainedObject@VCSdController@@@ATL@@W7EAAKXZ
0x18001F080: "ReadExpandStringFromRegistry" ??_C@_0BN@NEADHNDC@ReadExpandStringFromRegistry?$AA@
0x18001E968: CLSID_CSdWhcNotifier
0x18001B750: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x18001F800: CLSID_SidResolver
0x18001BA70: "__cdecl _imp_EnableTraceEx2" __imp_EnableTraceEx2
0x18001F968: "SxEnableTraceDefault" ??_C@_0BF@EGPFLLK@SxEnableTraceDefault?$AA@
0x1800215B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-controller-l1-1-0
0x18001E988: IID_AsyncISdCallback2
0x180017EF0: "public: long __cdecl CBsString::Trailing(unsigned short) __ptr64" ?Trailing@CBsString@@QEAAJG@Z
0x18001B778: "__cdecl _imp_LocalFree" __imp_LocalFree
0x1800212E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18001B7A0: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x18001E838: "Log_SD_INFO_BACKUP_STARTED" ??_C@_0BL@PJEALDGE@Log_SD_INFO_BACKUP_STARTED?$AA@
0x18001EA78: "SdStopTracing" ??_C@_0O@PHEPKDIM@SdStopTracing?$AA@
0x18001D818: "CSdController::_VerifyCreds" ??_C@_0BM@MIAOJJOP@CSdController?3?3_VerifyCreds?$AA@
0x180002DA0: "public: virtual long __cdecl ATL::CComObjectGlobal<class CSdController>::QueryInterface(struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?QueryInterface@?$CComObjectGlobal@VCSdController@@@ATL@@UEAAJAEBU_GUID@@PEAPEAX@Z
0x18001EE60: "TraceBackupRoots" ??_C@_0BB@IANLNFAE@TraceBackupRoots?$AA@
0x18001EA88: "SdGetLogFileNamePrefix" ??_C@_0BH@NFLJCENM@SdGetLogFileNamePrefix?$AA@
0x18001F3B8: "CSxNodeListStack::AddItem" ??_C@_0BK@DJBGLNFB@CSxNodeListStack?3?3AddItem?$AA@
0x18001B700: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x18001DB00: "CSdController::_ReadPersistentSt" ??_C@_0CF@MKMPONCH@CSdController?3?3_ReadPersistentSt@
0x18001BCA8: "__cdecl _imp_RtlGetLastNtStatus" __imp_RtlGetLastNtStatus
0x18001F418: "\*" ??_C@_15PKPONJIK@?$AA?2?$AA?$CK?$AA?$AA@
0x180011D84: "long __cdecl ConfigureProxySecurityBlanket(struct IUnknown * __ptr64)" ?ConfigureProxySecurityBlanket@@YAJPEAUIUnknown@@@Z
0x18001B8C8: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x180023B50: "class ATL::CComModule _Module" ?_Module@@3VCComModule@ATL@@A
0x180023D58: "__cdecl _onexitbegin" __onexitbegin
0x18001D438: "HKEY_USERS" ??_C@_1BG@BGODANIO@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAU?$AAS?$AAE?$AAR?$AAS?$AA?$AA@
0x18001BB90: "__cdecl _imp_DeleteService" __imp_DeleteService
0x180019E2E: "__cdecl _imp_load_CoRevertToSelf" __imp_load_CoRevertToSelf
0x18001F0A0: "ReadBinaryFromRegistry" ??_C@_0BH@PNICALGL@ReadBinaryFromRegistry?$AA@
0x18001D4F0: "Module" ??_C@_1O@MNLDABAF@?$AAM?$AAo?$AAd?$AAu?$AAl?$AAe?$AA?$AA@
0x18001E818: "__cdecl GUID_43826d1e_e718_42ee_bc55_a1e261c37bfe" _GUID_43826d1e_e718_42ee_bc55_a1e261c37bfe
0x18001C058: FOLDERID_Videos
0x18001EC28: "GetMachineNameFromUNC" ??_C@_0BG@MEEGNAMD@GetMachineNameFromUNC?$AA@
0x180017218: "public: long __cdecl CBsString::ExtendBuffer(unsigned long) __ptr64" ?ExtendBuffer@CBsString@@QEAAJK@Z
0x18001C860: c_wszShellFolderKey
0x180004704: "public: long __cdecl ATL::CRegParser::PreProcessBuffer(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?PreProcessBuffer@CRegParser@ATL@@QEAAJPEBGPEAPEAG@Z
0x18001EA20: "GetSDTracingDirectory" ??_C@_0BG@JIICKIGD@GetSDTracingDirectory?$AA@
0x18001BC60: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x18001DB50: "CSdController::_LogBackupStatus" ??_C@_0CA@OGEIMMFA@CSdController?3?3_LogBackupStatus?$AA@
0x18001EE30: "TraceBackupConfigFields" ??_C@_0BI@KOIKCGGF@TraceBackupConfigFields?$AA@
0x18001D930: "CSdController::_AddAppDataPathsT" ??_C@_0CI@NKDIHPFO@CSdController?3?3_AddAppDataPathsT@
0x18001B6D8: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18001B868: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18001F008: WPP_0ed13e1651e631a9384525426c34f727_Traceguids
0x18000A554: "private: long __cdecl CSdController::_EnsureTargetNotBlockedByGP(struct _SD_STORAGE_DEVICE_PROP * __ptr64) __ptr64" ?_EnsureTargetNotBlockedByGP@CSdController@@AEAAJPEAU_SD_STORAGE_DEVICE_PROP@@@Z
0x180017BB4: "public: long __cdecl CBsString::Append(unsigned short const * __ptr64) __ptr64" ?Append@CBsString@@QEAAJPEBG@Z
0x180003F94: "public: long __cdecl ATL::CComModule::RegisterServer(int,struct _GUID const * __ptr64) __ptr64" ?RegisterServer@CComModule@ATL@@QEAAJHPEBU_GUID@@@Z
0x18001F218: WPP_ff8a4246707838120ac3d4893de8b5d2_Traceguids
0x180004048: "public: long __cdecl ATL::CComModule::RegisterClassObjects(unsigned long,unsigned long) __ptr64" ?RegisterClassObjects@CComModule@ATL@@QEAAJKK@Z
0x18001B8D8: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x18000F208: "long __cdecl GetNetworkCredentials(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,void * __ptr64 * __ptr64,struct _SID * __ptr64,int * __ptr64)" ?GetNetworkCredentials@@YAJPEBG00PEAPEAXPEAU_SID@@PEAH@Z
0x18001B170: "const ATL::CComObject<class CSdController>::`vftable'{for `ISdCallback2'}" ??_7?$CComObject@VCSdController@@@ATL@@6BISdCallback2@@@
0x18001C758: c_wszDisableBackupToDisk
0x18001E9E8: IID_ISdScheduleConfigPriv
0x180018598: "long __cdecl SxCheckWBDiagSession(void)" ?SxCheckWBDiagSession@@YAJXZ
0x180019B64: "__cdecl _security_init_cookie" __security_init_cookie
0x18001F2D8: "AssertPrivilegeOnToken" ??_C@_0BH@DCBBOALI@AssertPrivilegeOnToken?$AA@
0x18001D0F8: "CSdRestoreServiceModule::Unregis" ??_C@_0CE@GCKMOABH@CSdRestoreServiceModule?3?3Unregis@
0x18001E948: IID_ISdCallback2
0x18001BFC8: FOLDERID_Favorites
0x180021380: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x18001C118: IID_IGlobalOptions
0x18001BF98: FOLDERID_Recent
0x18001BAE0: "__cdecl _imp_SetSecurityDescriptorDacl" __imp_SetSecurityDescriptorDacl
0x18000DA74: "void __cdecl CleanupStorageDeviceProp(struct _SD_STORAGE_DEVICE_PROP * __ptr64)" ?CleanupStorageDeviceProp@@YAXPEAU_SD_STORAGE_DEVICE_PROP@@@Z
0x18002127C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18001DA68: "CSdController::_ReleaseUI" ??_C@_0BK@CFEPEBPM@CSdController?3?3_ReleaseUI?$AA@
0x18001F958: "SxStopTracing" ??_C@_0O@NJPCLMKN@SxStopTracing?$AA@
0x18001BB50: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x18001BBE0: "__cdecl _imp_memmove" __imp_memmove
0x18001EF38: "EnumUserProfilePaths" ??_C@_0BF@OPDNPFHF@EnumUserProfilePaths?$AA@
0x18001BF30: "__cdecl _sz_ext_ms_win_shell_shell32_l1_2_0_dll" __sz_ext_ms_win_shell_shell32_l1_2_0_dll
0x180002B00: "public: static long __cdecl ATL::CComCreator<class ATL::CComObjectNoLock<class ATL::CComClassFactorySingleton<class CSdrRestoreService> > >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComObjectNoLock@V?$CComClassFactorySingleton@VCSdrRestoreService@@@ATL@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x1800039B0: "public: virtual unsigned long __cdecl ATL::CComObject<class CSdrRestoreService>::Release(void) __ptr64" ?Release@?$CComObject@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x18001E958: IID_ISdBackup2
0x18000D56C: "public: __cdecl CSxFunctionTracer::~CSxFunctionTracer(void) __ptr64" ??1CSxFunctionTracer@@QEAA@XZ
0x18001C048: FOLDERID_Music
0x18001D5C8: WPP_f8a9411704e932357c4780e5dd4eddfe_Traceguids
0x18001B500: ?map@?1??VTFromRegType@CRegParser@ATL@@KAHPEBGAEAG@Z@4QBUtypemap@?1??123@KAH01@Z@B
0x180025080: "__cdecl _imp_CoTaskMemRealloc" __imp_CoTaskMemRealloc
0x18001B9B8: "__cdecl _imp_SetWaitableTimer" __imp_SetWaitableTimer
0x1800043D8: "long __cdecl ATL::AtlModuleInit(struct ATL::_ATL_MODULE * __ptr64,struct ATL::_ATL_OBJMAP_ENTRY * __ptr64,struct HINSTANCE__ * __ptr64)" ?AtlModuleInit@ATL@@YAJPEAU_ATL_MODULE@1@PEAU_ATL_OBJMAP_ENTRY@1@PEAUHINSTANCE__@@@Z
0x180002D50: "public: virtual long __cdecl ATL::CComClassFactorySingleton<class CSdController>::CreateInstance(struct IUnknown * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64) __ptr64" ?CreateInstance@?$CComClassFactorySingleton@VCSdController@@@ATL@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z
0x1800125A4: "long __cdecl ReadExpandStringFromRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,int)" ?ReadExpandStringFromRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAGH@Z
0x18001BC78: "__cdecl _imp_malloc" __imp_malloc
0x18001BC10: "__cdecl _imp__purecall" __imp__purecall
0x18001F490: WPP_2e3e846db9fc3d2626ab6421027a8f10_Traceguids
0x180003208: "public: static long __cdecl ATL::CComCreator<class ATL::CComAggObject<class CSdrRestoreService> >::CreateInstance(void * __ptr64,struct _GUID const & __ptr64,void * __ptr64 * __ptr64)" ?CreateInstance@?$CComCreator@V?$CComAggObject@VCSdrRestoreService@@@ATL@@@ATL@@SAJPEAXAEBU_GUID@@PEAPEAX@Z
0x18000ED08: "long __cdecl IsNTFS(unsigned short const * __ptr64)" ?IsNTFS@@YAJPEBG@Z
0x18001F850: "SxQueryTraceSession" ??_C@_0BE@MKELCBLB@SxQueryTraceSession?$AA@
0x18001B720: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180002DC0: "public: virtual unsigned long __cdecl ATL::CComObjectGlobal<class CSdrRestoreService>::Release(void) __ptr64" ?Release@?$CComObjectGlobal@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x18001C6A8: c_wszEventSourceSafeDocs
0x18001F5F8: "SxGetLastAsrRestoreId" ??_C@_0BG@PEDJCHCP@SxGetLastAsrRestoreId?$AA@
0x18001C6E0: c_wszSafedocsScheduleLastResultString
0x18001BFD8: FOLDERID_RoamingAppData
0x180023B40: "class ATL::CComModule * __ptr64 __ptr64 ATL::_pModule" ?_pModule@ATL@@3PEAVCComModule@1@EA
0x180020F78: ext-ms-win-shell-shell32-l1-2-0_NULL_THUNK_DATA_DLN
0x18001F290: "EncryptBlob" ??_C@_0M@ECIKMDID@EncryptBlob?$AA@
0x18001F930: "SxStartTracing" ??_C@_0P@KKCBPOAP@SxStartTracing?$AA@
0x18001BAD8: "__cdecl _imp_DuplicateToken" __imp_DuplicateToken
0x18001C300: "AppData\Roaming" ??_C@_1CA@DAIHJGCF@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAR?$AAo?$AAa?$AAm?$AAi?$AAn?$AAg?$AA?$AA@
0x18001BF20: "__cdecl _sz_CRYPT32_dll" __sz_CRYPT32_dll
0x18001BCA0: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x180006D7C: "private: void __cdecl CSdController::FinalRelease(void) __ptr64" ?FinalRelease@CSdController@@AEAAXXZ
0x18001CF70: "CSdRestoreServiceModule::Handler" ??_C@_0CB@OMCPCNAG@CSdRestoreServiceModule?3?3Handler@
0x18001BB20: "__cdecl _imp_LookupPrivilegeValueW" __imp_LookupPrivilegeValueW
0x180018A30: "long __cdecl SxRotateLogs(unsigned short const * __ptr64,unsigned long)" ?SxRotateLogs@@YAJPEBGK@Z
0x180017600: "private: long __cdecl CBsString::_GetErrorText(long,unsigned long,struct ___FORMAT_ERRORCODE_SEARCH_DLL_ENTRY const * __ptr64,unsigned long,struct ___FORMAT_ERRORCODE_ERROR_MAP_ENTRTY const * __ptr64,long * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64) __ptr64" ?_GetErrorText@CBsString@@AEAAJJKPEBU___FORMAT_ERRORCODE_SEARCH_DLL_ENTRY@@KPEBU___FORMAT_ERRORCODE_ERROR_MAP_ENTRTY@@PEAJPEAPEAG3@Z
0x1800198D0: "__cdecl _report_gsfailure" __report_gsfailure
0x18001C088: FOLDERID_SavedSearches
0x18001DBA0: "CSdController::_IsStaleBitSet" ??_C@_0BO@LDKJHMDB@CSdController?3?3_IsStaleBitSet?$AA@
0x180005000: "int __cdecl ATL::_ATL_SAFE_ALLOCA_IMPL::_Atlresetstkoflw(void)" ?_Atlresetstkoflw@_ATL_SAFE_ALLOCA_IMPL@ATL@@YAHXZ
0x18001C008: FOLDERID_InternetCache
0x18001B990: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x18001D0A8: "CSdRestoreServiceModule::SignalS" ??_C@_0CI@OJGGFFNF@CSdRestoreServiceModule?3?3SignalS@
0x180002DE0: "public: virtual unsigned long __cdecl ATL::CComObjectGlobal<class CSdrRestoreService>::AddRef(void) __ptr64" ?AddRef@?$CComObjectGlobal@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x1800197C0: "__cdecl onexit" _onexit
0x18001D340: "REGISTRY" ??_C@_1BC@KAILKFFG@?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?$AA@
0x18001B978: "__cdecl _imp_lstrcpynW" __imp_lstrcpynW
0x180009100: "private: long __cdecl CSdController::_SetStaleConfigFlag(void) __ptr64" ?_SetStaleConfigFlag@CSdController@@AEAAJXZ
0x180021394: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-1
0x18001B6A0: SXSHARED_NULL_THUNK_DATA
0x18001F4F0: "SxRegReadString" ??_C@_0BA@JFJBABAL@SxRegReadString?$AA@
0x18001BA60: "__cdecl _imp_StartTraceW" __imp_StartTraceW
0x18001E9D8: IID_ISdAsyncPriv
0x180023D48: "__cdecl _native_startup_state" __native_startup_state
0x18001D6F8: "CSdController::_VerifyDeviceWith" ??_C@_0CG@GOPIBFJL@CSdController?3?3_VerifyDeviceWith@
0x18001F780: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001F038: "SetRegKeyVirtualization" ??_C@_0BI@EHHEJJB@SetRegKeyVirtualization?$AA@
0x1800076B0: "private: static long __cdecl CSdController::_VerifyCreds(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_VerifyCreds@CSdController@@CAJPEBG0@Z
0x18001F018: "CreateProtectedRegistryKey" ??_C@_0BL@MIPGCJFN@CreateProtectedRegistryKey?$AA@
0x18001C018: FOLDERID_Cookies
0x18000856C: "private: long __cdecl CSdController::_AddDefaultUserLibraryPathsToEngine(struct ISdBackup2 * __ptr64,struct _UserProfileData * __ptr64) __ptr64" ?_AddDefaultUserLibraryPathsToEngine@CSdController@@AEAAJPEAUISdBackup2@@PEAU_UserProfileData@@@Z
0x18001F460: "SxDeleteDirectory" ??_C@_0BC@EELADBEN@SxDeleteDirectory?$AA@
0x18001F6D0: "VerifyTokenMembership" ??_C@_0BG@ENCLLPPC@VerifyTokenMembership?$AA@
0x18001D388: "HKU" ??_C@_17PJOJPMPB@?$AAH?$AAK?$AAU?$AA?$AA@
0x18001B7E0: "__cdecl _imp_LoadResource" __imp_LoadResource
0x18001262C: "long __cdecl ReadBinaryFromRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,int)" ?ReadBinaryFromRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAEPEAKH@Z
0x18001BB70: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x18000513C: "bool __cdecl ATL::_ATL_SAFE_ALLOCA_IMPL::_AtlVerifyStackAvailable(unsigned __int64)" ?_AtlVerifyStackAvailable@_ATL_SAFE_ALLOCA_IMPL@ATL@@YA_N_K@Z
0x18001EDA8: "SeSecurityPrivilege" ??_C@_1CI@EODHFOHP@?$AAS?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAP?$AAr?$AAi?$AAv?$AAi?$AAl?$AAe?$AAg?$AAe?$AA?$AA@
0x18000A728: "private: long __cdecl CSdController::_SetNetworkCredentials(struct ISdAsync2 * __ptr64,void * __ptr64,struct _SID * __ptr64) __ptr64" ?_SetNetworkCredentials@CSdController@@AEAAJPEAUISdAsync2@@PEAXPEAU_SID@@@Z
0x18001D838: "CSdController::_MatchDevice" ??_C@_0BM@DGCHNDOH@CSdController?3?3_MatchDevice?$AA@
0x180016E40: "long __cdecl VerifyCallerMembership(enum WELL_KNOWN_SID_TYPE)" ?VerifyCallerMembership@@YAJW4WELL_KNOWN_SID_TYPE@@@Z
0x180016A28: "long __cdecl VerifyTokenMembership(void * __ptr64,enum WELL_KNOWN_SID_TYPE)" ?VerifyTokenMembership@@YAJPEAXW4WELL_KNOWN_SID_TYPE@@@Z
0x18001D450: "HKEY_PERFORMANCE_DATA" ??_C@_1CM@KHNNAOIC@?$AAH?$AAK?$AAE?$AAY?$AA_?$AAP?$AAE?$AAR?$AAF?$AAO?$AAR?$AAM?$AAA?$AAN?$AAC?$AAE?$AA_?$AAD?$AAA?$AAT?$AAA?$AA?$AA@
0x18001CCC0: c_wszDisableBackupToNetwork
0x18001F798: "netmsg.dll" ??_C@_1BG@OJMHCGKI@?$AAn?$AAe?$AAt?$AAm?$AAs?$AAg?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001C180: "Val" ??_C@_17LLMMEOJD@?$AAV?$AAa?$AAl?$AA?$AA@
0x180021308: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x1800250B0: "__cdecl _imp_SHCreateItemFromParsingName" __imp_SHCreateItemFromParsingName
0x180013FEC: "struct HINSTANCE__ * __ptr64 __cdecl SxLoadSystem32LibraryEx(unsigned short const * __ptr64,void * __ptr64,unsigned long)" ?SxLoadSystem32LibraryEx@@YAPEAUHINSTANCE__@@PEBGPEAXK@Z
0x180020EE0: OLEAUT32_NULL_THUNK_DATA_DLN
0x18001B858: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x18001D508: "CLSID" ??_C@_1M@KANJNLFF@?$AAC?$AAL?$AAS?$AAI?$AAD?$AA?$AA@
0x180025020: OLEAUT32_NULL_THUNK_DATA_DLA
0x1800210F8: OLEAUT32_NULL_THUNK_DATA_DLB
0x180001550: DllRegisterServer
0x18001CD68: "struct _GUID const c_guidShellExtTracingControlGuid" ?c_guidShellExtTracingControlGuid@@3U_GUID@@B
0x18001D958: "CSdController::_AddUserShellPath" ??_C@_0CK@NJAKFEEO@CSdController?3?3_AddUserShellPath@
0x1800211B0: ext-ms-win-security-credui-l1-1-1_NULL_THUNK_DATA_DLB
0x18001C818: c_wszNtUserMan
0x18000600C: "protected: long __cdecl ATL::CRegObject::RegisterFromResource(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,int) __ptr64" ?RegisterFromResource@CRegObject@ATL@@IEAAJPEBG00H@Z
0x18000A958: "private: long __cdecl CSdController::_PerformScheduledBackup(void) __ptr64" ?_PerformScheduledBackup@CSdController@@AEAAJXZ
0x180013710: "long __cdecl DecryptBlob(unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?DecryptBlob@@YAJPEBEKPEAPEAEPEAK@Z
0x18001C168: CLSID_ShellLibrary
0x180021470: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18001B420: ?map@?1??HKeyFromString@CRegParser@ATL@@KAPEAUHKEY__@@PEAG@Z@4QBUkeymap@?1??123@KAPEAU4@0@Z@B
0x180003A90: "public: virtual unsigned long __cdecl ATL::CComObject<class CSdrRestoreService>::AddRef(void) __ptr64" ?AddRef@?$CComObject@VCSdrRestoreService@@@ATL@@UEAAKXZ
0x18001BBA0: "__cdecl _imp_ChangeServiceConfig2W" __imp_ChangeServiceConfig2W
0x18001C0C8: FOLDERID_Libraries
0x18001F3F0: "sh.IsValid()" ??_C@_0N@DFEAELIA@sh?4IsValid?$CI?$CJ?$AA@
0x180019E40: "__cdecl _imp_load_CoGetCallContext" __imp_load_CoGetCallContext
0x18001EC70: "blbres.dll" ??_C@_1BG@CNOFGGDM@?$AAb?$AAl?$AAb?$AAr?$AAe?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x18001BB18: api-ms-win-security-logon-l1-1-0_NULL_THUNK_DATA
0x180006ACC: WPP_SF_SD
0x18000D260: WPP_SF_sd
0x180006ACC: WPP_SF_Sd
0x18001BC80: "__cdecl _imp_free" __imp_free
0x180019AD0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18001B9E8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18001B9F8: api-ms-win-core-synch-l1-2-1_NULL_THUNK_DATA
0x180006A14: WPP_SF_SS
0x18001BFB8: FOLDERID_Documents
0x180007CB0: "private: long __cdecl CSdController::_AddAllUsersDataPathsToEngine(struct ISdBackup2 * __ptr64,struct _SD_BACKUP_CONFIG * __ptr64,long * __ptr64) __ptr64" ?_AddAllUsersDataPathsToEngine@CSdController@@AEAAJPEAUISdBackup2@@PEAU_SD_BACKUP_CONFIG@@PEAJ@Z
0x180013E48: "long __cdecl AssertPrivilegeOnToken(void * __ptr64,unsigned short const * __ptr64)" ?AssertPrivilegeOnToken@@YAJPEAXPEBG@Z
0x18001B860: "__cdecl _imp_OpenProcessToken" __imp_OpenProcessToken
0x1800122D4: "long __cdecl _ReadStringFromRegistry(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,int,unsigned long)" ?_ReadStringFromRegistry@@YAJPEAUHKEY__@@PEBGPEAPEAGHK@Z
0x180021484: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x18001C608: "My Music" ??_C@_1BC@IEKACCOI@?$AAM?$AAy?$AA?5?$AAM?$AAu?$AAs?$AAi?$AAc?$AA?$AA@
0x18001B9C0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x18001B228: "const ATL::CComObjectGlobal<class CSdController>::`vftable'{for `ISdCallback2'}" ??_7?$CComObjectGlobal@VCSdController@@@ATL@@6BISdCallback2@@@
0x1800213E4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18001C580: "AppData\Roaming\Microsoft\Window" ??_C@_1FC@LPKPLEGB@?$AAA?$AAp?$AAp?$AAD?$AAa?$AAt?$AAa?$AA?2?$AAR?$AAo?$AAa?$AAm?$AAi?$AAn?$AAg?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw@
0x180013588: "long __cdecl EncryptBlob(unsigned char const * __ptr64,unsigned long,unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EncryptBlob@@YAJPEBEKPEAPEAEPEAK@Z
0x180007F5C: "private: long __cdecl CSdController::_AddUserLibraryPathsToEngine(struct ISdBackup2 * __ptr64,int,struct _UserProfileData * __ptr64,struct _SD_BACKUP_USER_DATA * __ptr64) __ptr64" ?_AddUserLibraryPathsToEngine@CSdController@@AEAAJPEAUISdBackup2@@HPEAU_UserProfileData@@PEAU_SD_BACKUP_USER_DATA@@@Z
0x18001C158: IID_ICatRegister
0x1800069AC: WPP_SF_S
0x1800012BC: WPP_SF_s
0x18001A16A: memset
0x1800215C4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x18001CBE8: c_wszSafedocsScheduleLastResultCode
0x180023B10: "__cdecl _hmod__OLEAUT32_dll" __hmod__OLEAUT32_dll
0x180003CC0: "public: void __cdecl CSxRefTraceList::CaptureStackTrace(unsigned long) __ptr64" ?CaptureStackTrace@CSxRefTraceList@@QEAAXK@Z
0x18001B690: "__cdecl _imp_SxTracerGetThreadContextRetail" __imp_SxTracerGetThreadContextRetail
0x1800164C8: "long __cdecl SxRegWriteString(struct HKEY__ * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64)" ?SxRegWriteString@@YAJPEAUHKEY__@@PEBG1@Z
0x18001BEF0: "__cdecl _sz_OLEAUT32_dll" __sz_OLEAUT32_dll
0x18001F980: "SxEnableTraceCustom" ??_C@_0BE@OCAJIOAO@SxEnableTraceCustom?$AA@
0x18001EA38: "EnsureTracingDirectory" ??_C@_0BH@GBNGGLEC@EnsureTracingDirectory?$AA@
0x18001EF50: "GetShellPath" ??_C@_0N@JFJJDDPB@GetShellPath?$AA@

[JEB Decompiler by PNF Software]