Generated by JEB on 2019/08/01

PE: C:\Windows\System32\cryptcatsvc.dll Base=0x180000000 SHA-256=F2C4A1BDF3C5CEAF1BE2BA739B060926F256A94B72512ABAC221F83AB974EE79
PDB: cryptcatsvc.pdb GUID={EC1FC763-B269-AE27-FBDF11E47F0599DB} Age=1

998 located named symbols:
0x180015100: "__cdecl _imp_EnumServicesStatusExW" __imp_EnumServicesStatusExW
0x1800186C8: "\??\Volume" ??_C@_1BG@KPDPFBJH@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x18001E7B0: "void * __ptr64 __ptr64 g_hJetDBOpenThread" ?g_hJetDBOpenThread@@3PEAXEA
0x180016DD0: "SystemShutdown initiated during " ??_C@_1FO@IFCJKDOM@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAd?$AAu?$AAr?$AAi?$AAn?$AAg?$AA?5@
0x180014D40: "__cdecl _imp_CreateHardLinkW" __imp_CreateHardLinkW
0x18000F5BC: "private: static bool __cdecl CSystemWriter::DirExists(unsigned short * __ptr64)" ?DirExists@CSystemWriter@@CA_NPEAG@Z
0x180004B58: "void __cdecl _CatDBStopChangeNotifications(void)" ?_CatDBStopChangeNotifications@@YAXXZ
0x180018668: "\??\UNC\" ??_C@_1BC@MAMPPFNN@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x1800055B0: "__cdecl _raise_securityfailure" __raise_securityfailure
0x1800150B8: "__cdecl _imp_CreateThreadpoolWork" __imp_CreateThreadpoolWork
0x180014D38: api-ms-win-core-file-l1-1-0_NULL_THUNK_DATA
0x18001180C: RtlDecodeUtf16LE
0x180016800: "%X.CAT" ??_C@_1O@CLBJALCO@?$AA?$CF?$AAX?$AA?4?$AAC?$AAA?$AAT?$AA?$AA@
0x180014E30: "__cdecl _imp_GetThreadLocale" __imp_GetThreadLocale
0x180014DB0: api-ms-win-core-heap-obsolete-l1-1-0_NULL_THUNK_DATA
0x180015528: "JetOpenAfterBootMilliseconds" ??_C@_1DK@DOPGDODD@?$AAJ?$AAe?$AAt?$AAO?$AAp?$AAe?$AAn?$AAA?$AAf?$AAt?$AAe?$AAr?$AAB?$AAo?$AAo?$AAt?$AAM?$AAi?$AAl?$AAl?$AAi?$AAs?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x1800058B0: "__cdecl FindPESection" _FindPESection
0x180006067: "__cdecl _imp_load_JetDelete" __imp_load_JetDelete
0x1800161E8: "MpQueryFileTrustByHandle" ??_C@_0BJ@LPGEENOO@MpQueryFileTrustByHandle?$AA@
0x18000BB3C: "unsigned long __cdecl _CatDBMapJetError(long)" ?_CatDBMapJetError@@YAKJ@Z
0x1800154B0: "DontRemoveCatalogsDuringSync" ??_C@_1DK@OAIMLGFH@?$AAD?$AAo?$AAn?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAs?$AAD?$AAu?$AAr?$AAi?$AAn?$AAg?$AAS?$AAy?$AAn?$AAc?$AA?$AA@
0x180021008: "__cdecl _imp_JetBeginTransaction" __imp_JetBeginTransaction
0x18001F9F0: EventLogFilePath
0x1800044E0: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x180021110: "__cdecl _imp_CoInitializeEx" __imp_CoInitializeEx
0x180004F70: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x1800151D8: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x180014F58: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x18001C024: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000F0C0: "private: bool __cdecl CSystemWriter::AddPathToWriterMetadata(class IVssCreateWriterMetadata * __ptr64,unsigned short * __ptr64) __ptr64" ?AddPathToWriterMetadata@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAG@Z
0x1800175C0: "AddCoreCsiFiles : GetProcAddress" ??_C@_1IK@EKCDFGHB@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAc?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs@
0x18001C010: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-kernel32-legacy-l1-1-0
0x1800134D8: pSetupOpenKey
0x1800167E0: "%d" ??_C@_15KNBIKKIN@?$AA?$CF?$AAd?$AA?$AA@
0x18001E000: "struct _DBJETPARAM * g_rgJetParams" ?g_rgJetParams@@3PAU_DBJETPARAM@@A
0x180016560: "AddCatalog(%s):: ERROR_ACCESS_DE" ??_C@_1EK@NKBIJHPB@?$AAA?$AAd?$AAd?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ?$AA?3?$AA?3?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS?$AA_?$AAD?$AAE@
0x180021108: ESENT_NULL_THUNK_DATA_DLA
0x180008F18: "long __cdecl CatHelperSetCatalogListColumn(unsigned __int64,unsigned __int64,unsigned long,unsigned long,unsigned short const * __ptr64)" ?CatHelperSetCatalogListColumn@@YAJ_K0KKPEBG@Z
0x18001E100: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180014C80: "__cdecl _imp_RaiseException" __imp_RaiseException
0x180017D30: "AddCorePnPFiles : Adding driver " ??_C@_1GI@IIPFCJOC@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAP?$AAn?$AAP?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?5@
0x180017060: "TraverseDir : pSetupStringTableA" ??_C@_1GG@NELKEDJ@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAp?$AAS?$AAe?$AAt?$AAu?$AAp?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAT?$AAa?$AAb?$AAl?$AAe?$AAA@
0x180014E20: "__cdecl _imp_LCMapStringW" __imp_LCMapStringW
0x18000509C: "__cdecl CRT_INIT" _CRT_INIT
0x18000F150: "private: bool __cdecl CSystemWriter::AddWin32ServiceFiles(void * __ptr64,void * __ptr64) __ptr64" ?AddWin32ServiceFiles@CSystemWriter@@AEAA_NPEAX0@Z
0x180010E14: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::ReportErrorOrigination(struct Windows::ErrorHandling::_RTL_CALL_SITE const * __ptr64) __ptr64" ?ReportErrorOrigination@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXPEBU_RTL_CALL_SITE@34@@Z
0x180014EC0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180015060: "__cdecl _imp_CloseThreadpoolWait" __imp_CloseThreadpoolWait
0x180014C28: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x1800186F8: "\DosDevices\UNC\" ??_C@_1CC@EIHGKOOD@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAU?$AAN?$AAC?$AA?2?$AA?$AA@
0x180015B60: "+HashCatNameTable_HashCol" ??_C@_1DG@CFFMFFKA@?$AA?$CL?$AAH?$AAa?$AAs?$AAh?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAH?$AAa?$AAs?$AAh?$AAC?$AAo?$AAl?$AA?$AA?$AA?$AA@
0x180008FB0: s_SSCatDBSmartlockerDefenderCheck
0x1800128FC: pSetupBeginSynchronizedAccess
0x1800173E0: "*.*" ??_C@_17ECHFBE@?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x180015220: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000601F: "__cdecl _imp_load_JetCreateInstanceW" __imp_load_JetCreateInstanceW
0x1800062B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x18000FFB0: "int __cdecl StFileCallback(void * __ptr64,long,unsigned short const * __ptr64,void * __ptr64,unsigned int,__int64)" ?StFileCallback@@YAHPEAXJPEBG0I_J@Z
0x1800199B0: "Software\Microsoft\Windows\Curre" ??_C@_1GA@MOFIHEOM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x1800125FC: "__cdecl pSpUtilsStringTableEnum" _pSpUtilsStringTableEnum
0x180015148: "__cdecl _imp__wcslwr" __imp__wcslwr
0x180014CC8: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x180015018: "__cdecl _imp_GetSystemWindowsDirectoryW" __imp_GetSystemWindowsDirectoryW
0x1800155E0: "Software\Microsoft\Cryptography\" ??_C@_1FE@NMFLHBLI@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x180002CE8: "int __cdecl _CatDBCloseDatabaseFile(struct _JET_DB_STRUCT * __ptr64,int)" ?_CatDBCloseDatabaseFile@@YAHPEAU_JET_DB_STRUCT@@H@Z
0x18001F940: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUxlnnlmUkprfgroUlyquivUznwGEUtolyzoOlyq@pkiutil" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUwhUhvxfirgbUxibkglzkrUxlnnlmUkprfgroUlyquivUznwGEUtolyzoOlyq@pkiutil
0x180015078: "__cdecl _imp_CreateThreadpoolWait" __imp_CreateThreadpoolWait
0x180017120: "AddCoreCLRFiles : GetWindowsDire" ??_C@_1FM@HAPAHDOH@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAL?$AAR?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAD?$AAi?$AAr?$AAe@
0x180006055: "__cdecl _imp_load_JetInit3W" __imp_load_JetInit3W
0x180017490: "AddCoreCsiFiles : LoadLibrary fa" ??_C@_1GI@PNCMPCHG@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAL?$AAo?$AAa?$AAd?$AAL?$AAi?$AAb?$AAr?$AAa?$AAr?$AAy?$AA?5?$AAf?$AAa@
0x18000FA74: "private: static void __cdecl CSystemWriter::LogSystemErrorEvent(unsigned long,unsigned short const * __ptr64,unsigned long)" ?LogSystemErrorEvent@CSystemWriter@@CAXKPEBGK@Z
0x18000F97C: "private: int __cdecl CSystemWriter::IsWin32ServicesComponentRequired(void) __ptr64" ?IsWin32ServicesComponentRequired@CSystemWriter@@AEAAHXZ
0x180015098: "__cdecl _imp_SetThreadpoolWait" __imp_SetThreadpoolWait
0x18001F8A8: "struct _RTL_CRITICAL_SECTION g_IgnoreListCS" ?g_IgnoreListCS@@3U_RTL_CRITICAL_SECTION@@A
0x1800150E0: "__cdecl _imp_MapGenericMask" __imp_MapGenericMask
0x180016780: "CatNameAttrTable_Index" ??_C@_1CO@LGFMJMEL@?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAA?$AAt?$AAt?$AAr?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x1800210B0: "__cdecl _imp_JetCreateIndexW" __imp_JetCreateIndexW
0x180015068: "__cdecl _imp_WaitForThreadpoolWaitCallbacks" __imp_WaitForThreadpoolWaitCallbacks
0x18000F4D4: "private: bool __cdecl CSystemWriter::AddWin32ServiceFilesComponent(class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddWin32ServiceFilesComponent@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x180014FE8: "__cdecl _imp_AcquireSRWLockShared" __imp_AcquireSRWLockShared
0x180019C48: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180014F08: "__cdecl _imp_RegDeleteKeyExW" __imp_RegDeleteKeyExW
0x180018398: ".exe" ??_C@_19DOGDICKI@?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x180017350: "AddCoreCLRFiles : unable to conc" ??_C@_1JA@HFLABBII@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAL?$AAR?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAu?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAc@
0x1800180D0: ".SYS" ??_C@_19GEHBKJLM@?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
0x180016300: "SyncDB:: ChangedFileAttributesFo" ??_C@_1FG@CBELNLJM@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAd?$AAF?$AAi?$AAl?$AAe?$AAA?$AAt?$AAt?$AAr?$AAi?$AAb?$AAu?$AAt?$AAe?$AAs?$AAF?$AAo@
0x180018090: "%SystemRoot%\System32\Drivers\" ??_C@_1DO@CCAPDOPB@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAs?$AA?2?$AA?$AA@
0x18001E6D0: "__cdecl _hmod__ESENT_dll" __hmod__ESENT_dll
0x18001BE30: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l1-1-0
0x1800089B0: CatDbOfflineRebuildDatabasesW
0x18001E774: "unsigned long g_dwJetDBState" ?g_dwJetDBState@@3KA
0x1800210B8: "__cdecl _imp_JetPrepareUpdate" __imp_JetPrepareUpdate
0x180015668: "System\Setup" ??_C@_1BK@DBNBIMPE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAe?$AAt?$AAu?$AAp?$AA?$AA@
0x18000600D: "__cdecl _imp_load_JetCloseDatabase" __imp_load_JetCloseDatabase
0x1800150F0: "__cdecl _imp_GetAce" __imp_GetAce
0x18001BB88: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLB
0x180005F6B: "__cdecl _imp_load_JetCreateTableW" __imp_load_JetCreateTableW
0x180014C18: "__cdecl _imp_RpcServerUnregisterIf" __imp_RpcServerUnregisterIf
0x180021070: "__cdecl _imp_JetCreateInstanceW" __imp_JetCreateInstanceW
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnPostSnapshot(class IVssWriterComponents * __ptr64) __ptr64" ?OnPostSnapshot@CVssWriter@@UEAA_NPEAVIVssWriterComponents@@@Z
0x1800151A8: "__cdecl _imp_wcschr" __imp_wcschr
0x180014F90: "__cdecl _imp_SetEvent" __imp_SetEvent
0x18001E7E8: "void * __ptr64 __ptr64 g_hInitializeThread" ?g_hInitializeThread@@3PEAXEA
0x18000399C: PkiAlloc
0x18001F920: "int g_fFilterNonePresentCatalogs" ?g_fFilterNonePresentCatalogs@@3HA
0x180017CC0: "%systemroot%\system32\DriverStor" ??_C@_1GC@JEKKECMN@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAS?$AAt?$AAo?$AAr@
0x18001F950: "int g_fLogErrorsToFile" ?g_fLogErrorsToFile@@3HA
0x180015020: "__cdecl _imp_GetLocalTime" __imp_GetLocalTime
0x18000BCC0: "int __cdecl _CatDBRemoveCatNameFromHashesListOfCatNames(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64,unsigned short const * __ptr64)" ?_CatDBRemoveCatNameFromHashesListOfCatNames@@YAHPEAU_JET_DB_STRUCT@@PEAUJET_DB_HASH_TABLE_IDS@@PEAU_CRYPTOAPI_BLOB@@PEBG@Z
0x180008880: "int __cdecl _CatDBIgnoreChangesForFile(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_CatDBIgnoreChangesForFile@@YAHPEBG0@Z
0x180015268: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180003170: "int __cdecl _CatDBJET_errFailure(long)" ?_CatDBJET_errFailure@@YAHJ@Z
0x180016F90: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x180005D40: NdrServerCall2
0x18001BBB0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLB
0x180021170: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLA
0x180021158: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLA
0x18001BBA0: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLB
0x18001BE80: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-file-l2-1-0
0x18001B7F0: api-ms-win-service-management-l1-1-0_NULL_THUNK_DATA_DLN
0x18001B808: api-ms-win-service-management-l2-1-0_NULL_THUNK_DATA_DLN
0x180015A00: CAPI2_CATDB_ADD_CATALOG_STOP_EVENT
0x180014F88: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180014E28: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x180015170: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x180005FE9: "__cdecl _imp_load_JetCloseTable" __imp_load_JetCloseTable
0x180014CF0: "__cdecl _imp_SetFilePointer" __imp_SetFilePointer
0x180015208: "__cdecl _imp_ShipAssert" __imp_ShipAssert
0x180015568: "MaxFreezeJetOpenMilliseconds" ??_C@_1DK@NKCOKCMA@?$AAM?$AAa?$AAx?$AAF?$AAr?$AAe?$AAe?$AAz?$AAe?$AAJ?$AAe?$AAt?$AAO?$AAp?$AAe?$AAn?$AAM?$AAi?$AAl?$AAl?$AAi?$AAs?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x180016600: "EnumCatalogs:: microseconds: %d" ??_C@_1EA@HDPOPHFB@?$AAE?$AAn?$AAu?$AAm?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAs?$AA?3?$AA?3?$AA?5?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?3?$AA?5?$AA?$CF?$AAd?$AA?$AA@
0x1800121F0: "__cdecl pSpUtilsStringTableAddString" _pSpUtilsStringTableAddString
0x18000588C: "__cdecl XcptFilter" _XcptFilter
0x180015270: "__cdecl _xc_a" __xc_a
0x1800166F8: "1.3.6.1.4.1.311.2.1.4" ??_C@_0BG@NAOBPDMJ@1?43?46?41?44?41?4311?42?41?44?$AA@
0x1800060C1: "__cdecl _imp_load_JetDeleteTableW" __imp_load_JetDeleteTableW
0x180015190: "__cdecl _imp_wcsstr" __imp_wcsstr
0x18000EA3C: "private: bool __cdecl CSystemWriter::AddCoreFiles(bool,class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddCoreFiles@CSystemWriter@@AEAA_N_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x180004E28: "private: static int __cdecl CSystemWriter::WaitForServiceRunning(unsigned short const * __ptr64)" ?WaitForServiceRunning@CSystemWriter@@CAHPEBG@Z
0x180018688: "\??\HardDisk" ??_C@_1BK@PLLAELKC@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAD?$AAi?$AAs?$AAk?$AA?$AA@
0x180021060: "__cdecl _imp_JetGetColumnInfoW" __imp_JetGetColumnInfoW
0x18001B5F8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_core_com_l1_1_0_dll
0x180010E24: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::SetInvalidParameter(void) __ptr64" ?SetInvalidParameter@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x180015490: CAPI2_CATDB_ENUM_CATALOG_FROM_HASH_START_EVENT
0x180015740: "S-1-5-80-242729624-280608522-221" ??_C@_1HM@JOOFPKPD@?$AAS?$AA?9?$AA1?$AA?9?$AA5?$AA?9?$AA8?$AA0?$AA?9?$AA2?$AA4?$AA2?$AA7?$AA2?$AA9?$AA6?$AA2?$AA4?$AA?9?$AA2?$AA8?$AA0?$AA6?$AA0?$AA8?$AA5?$AA2?$AA2?$AA?9?$AA2?$AA2?$AA1@
0x180014C40: "__cdecl _imp_GetDateFormatA" __imp_GetDateFormatA
0x180021130: "__cdecl _imp_ConvertStringSidToSidW" __imp_ConvertStringSidToSidW
0x180014CE0: "__cdecl _imp_FindClose" __imp_FindClose
0x180004760: "int __cdecl _CatDBStartChangeNotifications(void)" ?_CatDBStartChangeNotifications@@YAHXZ
0x1800210E8: "__cdecl _imp_JetTerm" __imp_JetTerm
0x1800210D8: "__cdecl _imp_JetSeek" __imp_JetSeek
0x180011A24: StringCchCopyW
0x18000AD78: "int __cdecl _CatDBDeleteInvalidCatalogFilesFromDatabase(struct _JET_DB_STRUCT * __ptr64,int,unsigned short const * __ptr64,unsigned long * __ptr64)" ?_CatDBDeleteInvalidCatalogFilesFromDatabase@@YAHPEAU_JET_DB_STRUCT@@HPEBGPEAK@Z
0x18001318C: pSetupMapFileForWrite
0x180016550: "TMP" ??_C@_17DDHKMLLK@?$AAT?$AAM?$AAP?$AA?$AA@
0x1800171F8: "assembly" ??_C@_1BC@JPPKMMFP@?$AAa?$AAs?$AAs?$AAe?$AAm?$AAb?$AAl?$AAy?$AA?$AA@
0x180014D88: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180021138: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLA
0x180010E34: RtlAppendLUnicodeStringToLUnicodeString
0x18001F958: ?g_pfnRtlErrorReportFunction@?A0x98913741@@3P6AXPEBU_RTL_CALL_SITE@ErrorHandling@Windows@@AEBU_GUID@@K@ZEA
0x180015228: "__cdecl _imp_RtlNtStatusToDosErrorNoTeb" __imp_RtlNtStatusToDosErrorNoTeb
0x180021010: "__cdecl _imp_JetBeginSessionW" __imp_JetBeginSessionW
0x180016A30: "OnIdentity() : AddComponent() ca" ??_C@_1JM@FOJIPCLA@?$AAO?$AAn?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AA?$CI?$AA?$CJ?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?$CI?$AA?$CJ?$AA?5?$AAc?$AAa@
0x180016190: "\Windows Defender\MpClient.dll" ??_C@_1DO@BNKICPIA@?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAD?$AAe?$AAf?$AAe?$AAn?$AAd?$AAe?$AAr?$AA?2?$AAM?$AAp?$AAC?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180014CE8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x180018740: "\SystemRoot" ??_C@_1BI@OMNCDEIM@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x180015138: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x180015358: "__cdecl _guard_iat_table" __guard_iat_table
0x180021018: "__cdecl _imp_JetRollback" __imp_JetRollback
0x180014E70: api-ms-win-core-processenvironment-l1-1-0_NULL_THUNK_DATA
0x180018110: "\systemroot\" ??_C@_1BK@NBLOFKLI@?$AA?2?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
0x180016740: "+CatNameAttrTable_CatNameCol" ??_C@_1DM@LOAMIHAG@?$AA?$CL?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAA?$AAt?$AAt?$AAr?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAC?$AAo?$AAl?$AA?$AA?$AA?$AA@
0x180006278: memcpy
0x180014E00: "__cdecl _imp_LoadLibraryExW" __imp_LoadLibraryExW
0x180016150: "On" ??_C@_15GLMKGGNF@?$AAO?$AAn?$AA?$AA@
0x180016220: "%s Corruption" ??_C@_1BM@MPICCFKM@?$AA?$CF?$AAs?$AA?5?$AAC?$AAo?$AAr?$AAr?$AAu?$AAp?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1800159C0: CAPI2_CATDB_ADD_CATALOG_START_EVENT
0x180014CC0: "__cdecl _imp_GetTempFileNameW" __imp_GetTempFileNameW
0x180002C00: "int __cdecl _CatDBAttachAndOpenDatabase(struct _JET_DB_STRUCT * __ptr64,int,enum __MIDL_ICatDBSvc_0001,int)" ?_CatDBAttachAndOpenDatabase@@YAHPEAU_JET_DB_STRUCT@@HW4__MIDL_ICatDBSvc_0001@@H@Z
0x1800151B0: "__cdecl _imp_memset" __imp_memset
0x180014FE0: "__cdecl _imp_WaitForSingleObjectEx" __imp_WaitForSingleObjectEx
0x180014FA8: "__cdecl _imp_WaitForMultipleObjectsEx" __imp_WaitForMultipleObjectsEx
0x180004D0C: "private: bool __cdecl CSystemWriter::Initialize(void) __ptr64" ?Initialize@CSystemWriter@@AEAA_NXZ
0x180014FF0: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x180014D50: api-ms-win-core-file-l2-1-0_NULL_THUNK_DATA
0x180005A6F: "__cdecl initterm" _initterm
0x1800174F8: "BeginFileMapEnumeration" ??_C@_0BI@MFPFBKPG@BeginFileMapEnumeration?$AA@
0x1800159B0: CAPI2_CATDB_REMOVE_CATALOG_START_EVENT
0x18001BE44: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x18001E6F8: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180014DB8: "__cdecl _imp_GetOverlappedResult" __imp_GetOverlappedResult
0x180015008: "__cdecl _imp_Sleep" __imp_Sleep
0x180017CB0: "INF" ??_C@_17CHCCJFKN@?$AAI?$AAN?$AAF?$AA?$AA@
0x18000A000: "int __cdecl _CatDBAddValueToExistingHashCatNameRow(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,unsigned short const * __ptr64)" ?_CatDBAddValueToExistingHashCatNameRow@@YAHPEAU_JET_DB_STRUCT@@PEAUJET_DB_HASH_TABLE_IDS@@PEBG@Z
0x180015290: "__cdecl _xi_z" __xi_z
0x180014CA0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180021020: "__cdecl _imp_JetUpdate" __imp_JetUpdate
0x180010A80: "void __cdecl ErrLog_LogString(unsigned short * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,int)" ?ErrLog_LogString@@YAXPEAG00H@Z
0x180015368: CAPI2_CATDB_SYNC_SUBSYSTEM_STOP_EVENT
0x180005F7D: "__cdecl _imp_load_JetSeek" __imp_load_JetSeek
0x180005A7B: "__cdecl _C_specific_handler" __C_specific_handler
0x1800060D3: "__cdecl _imp_load_JetUpdate" __imp_load_JetUpdate
0x180001010: MIDL_user_free
0x180014F80: "__cdecl _imp_ReleaseSRWLockExclusive" __imp_ReleaseSRWLockExclusive
0x180017C20: "AddCoreCbsFiles : AddPathToWrite" ??_C@_1JA@PLFHODIM@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAb?$AAs?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAP?$AAa?$AAt?$AAh?$AAT?$AAo?$AAW?$AAr?$AAi?$AAt?$AAe@
0x18001BC10: ESENT_NULL_THUNK_DATA_DLB
0x18000932C: "unsigned long __cdecl _CatDBAddCatalog(void * __ptr64,unsigned long,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64)" ?_CatDBAddCatalog@@YAKPEAXKPEBG11PEAPEAG@Z
0x18001E740: "unsigned char g_CatalogChangesShuttingDown" ?g_CatalogChangesShuttingDown@@3EA
0x18001E758: "struct _CATDB_CONFIG_PARA g_CatDBConfigPara" ?g_CatDBConfigPara@@3U_CATDB_CONFIG_PARA@@A
0x180001B50: "unsigned long __cdecl CryptsvcDllCtrl(unsigned long,unsigned long,unsigned long,void * __ptr64)" ?CryptsvcDllCtrl@@YAKKKKPEAX@Z
0x180012F18: pSetupGrowMappedFileAtOffset
0x1800162A8: "SyncAllDBs" ??_C@_1BG@HIPOGEEL@?$AAS?$AAy?$AAn?$AAc?$AAA?$AAl?$AAl?$AAD?$AAB?$AAs?$AA?$AA@
0x180016ACC: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x180010594: CatUtil_Close
0x180014D78: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180010154: "private: bool __cdecl CSystemWriter::TraverseDir(unsigned short * __ptr64,void * __ptr64) __ptr64" ?TraverseDir@CSystemWriter@@AEAA_NPEAGPEAX@Z
0x1800106C0: CatUtil_Open
0x180005DD7: "__cdecl _imp_load_DriverStoreEnumW" __imp_load_DriverStoreEnumW
0x1800163E0: "SyncDB:: DeleteInvalidCatalogFil" ??_C@_1IK@HDAAPPBH@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAF?$AAi?$AAl@
0x18001867C: "\\" ??_C@_15LEKKCGMK@?$AA?2?$AA?2?$AA?$AA@
0x180005B31: "__cdecl _imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_load_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18000A9B8: "int __cdecl _CatDBDeleteAndCreateTables(struct _JET_DB_STRUCT * __ptr64)" ?_CatDBDeleteAndCreateTables@@YAHPEAU_JET_DB_STRUCT@@@Z
0x180005E62: "__cdecl _imp_load_JetSetColumn" __imp_load_JetSetColumn
0x180021148: "__cdecl _imp_OpenServiceW" __imp_OpenServiceW
0x180014D60: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180012B60: pSetupStringTableStringFromId
0x180014EE8: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x18000617C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180008DC0: "long __cdecl CatHelperRetrieveLongColumnAsStringVector(unsigned __int64,unsigned __int64,unsigned long,unsigned long,unsigned short * __ptr64 & __ptr64,unsigned short * __ptr64 * __ptr64 & __ptr64,unsigned long & __ptr64)" ?CatHelperRetrieveLongColumnAsStringVector@@YAJ_K0KKAEAPEAGAEAPEAPEAGAEAK@Z
0x18001118C: RtlReallocateLUnicodeString
0x180014C88: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x1800186E0: "\\?\Volume" ??_C@_1BG@CPJCOMEA@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x1800089A0: "int __cdecl CryptCATAdminCatalogDatabase(void)" ?CryptCATAdminCatalogDatabase@@YAHXZ
0x1800039CC: "private: static int __cdecl CSystemWriter::IsSystemSetupInProgress(void)" ?IsSystemSetupInProgress@CSystemWriter@@CAHXZ
0x180014F10: "__cdecl _imp_RegEnumKeyExW" __imp_RegEnumKeyExW
0x180013900: "__cdecl pSpUtilsInstallLogUninitialize" _pSpUtilsInstallLogUninitialize
0x180003CB0: "int __cdecl _CatDBInitJetDatabaseParams(unsigned __int64 * __ptr64)" ?_CatDBInitJetDatabaseParams@@YAHPEA_K@Z
0x18001E710: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInst" ?g_hInst@@3PEAUHINSTANCE__@@EA
0x180014BE0: "__cdecl _imp_CertFreeCTLContext" __imp_CertFreeCTLContext
0x180011950: SpUtilsSetTargetWindowsDir
0x180015638: "SystemSetupInProgress" ??_C@_1CM@DHJDDPJO@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAe?$AAt?$AAu?$AAp?$AAI?$AAn?$AAP?$AAr?$AAo?$AAg?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1800104C0: "int __cdecl VerifyDirectoryPath(unsigned short * __ptr64)" ?VerifyDirectoryPath@@YAHPEAG@Z
0x1800046A4: "public: static void __cdecl CSystemWriter::Shutdown(void)" ?Shutdown@CSystemWriter@@SAXXZ
0x1800151F0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x1800118E0: RtlUpcaseUCSCharacter
0x180014F68: api-ms-win-core-string-l1-1-0_NULL_THUNK_DATA
0x180005FB3: "__cdecl _imp_load_JetInit" __imp_load_JetInit
0x1800185B8: "CatalogDB: %s: %s at line #%u en" ??_C@_0DJ@HPEJFONA@CatalogDB?3?5?$CFs?3?5?$CFs?5at?5line?5?$CD?$CFu?5en@
0x18001BF20: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18001E880: "struct CATDB_CHANGES_WAIT_CONTEXT g_CatrootChangesWaitContext" ?g_CatrootChangesWaitContext@@3UCATDB_CHANGES_WAIT_CONTEXT@@A
0x180005898: "__cdecl amsg_exit" _amsg_exit
0x1800060AF: "__cdecl _imp_load_JetDeleteTableA" __imp_load_JetDeleteTableA
0x18000EB60: "private: bool __cdecl CSystemWriter::AddCorePnPFiles(class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddCorePnPFiles@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x180015A20: CAPI2_CATDB_SYNC_CATALOG_STOP_EVENT
0x180004D80: "public: long __cdecl CVssWriterEx::Initialize(struct _GUID,unsigned short const * __ptr64,enum VSS_USAGE_TYPE,enum VSS_SOURCE_TYPE,enum _VSS_APPLICATION_LEVEL,unsigned long,enum VSS_ALTERNATE_WRITER_STATE,bool,unsigned short const * __ptr64) __ptr64" ?Initialize@CVssWriterEx@@QEAAJU_GUID@@PEBGW4VSS_USAGE_TYPE@@W4VSS_SOURCE_TYPE@@W4_VSS_APPLICATION_LEVEL@@KW4VSS_ALTERNATE_WRITER_STATE@@_N1@Z
0x180005F47: "__cdecl _imp_load_JetOpenDatabaseW" __imp_load_JetOpenDatabaseW
0x1800181B0: "AddWin32ServiceFiles: OpenSCMana" ??_C@_1IO@HAPPOPHM@?$AAA?$AAd?$AAd?$AAW?$AAi?$AAn?$AA3?$AA2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAS?$AAC?$AAM?$AAa?$AAn?$AAa@
0x180019C44: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180014BD0: "__cdecl _imp_CryptDecodeObject" __imp_CryptDecodeObject
0x180003584: "unsigned long __cdecl _CatDBGetDatabaseFileNames(unsigned short * __ptr64 * __ptr64 const)" ?_CatDBGetDatabaseFileNames@@YAKQEAPEAG@Z
0x180005B43: "__cdecl _imp_load_QueryServiceStatusEx" __imp_load_QueryServiceStatusEx
0x18001E6B0: "__cdecl _hmod__api_ms_win_service_management_l1_1_0_dll" __hmod__api_ms_win_service_management_l1_1_0_dll
0x180010E24: "public: void __cdecl Windows::ErrorHandling::Rtl::CBaseFrame<class Windows::ErrorHandling::Rtl::CSimpleNtStatusCarryingFrame>::SetInvalidParameter_NullPointer(void) __ptr64" ?SetInvalidParameter_NullPointer@?$CBaseFrame@VCSimpleNtStatusCarryingFrame@Rtl@ErrorHandling@Windows@@@Rtl@ErrorHandling@Windows@@QEAAXXZ
0x18001E6B8: "__cdecl _hmod__api_ms_win_core_com_l1_1_0_dll" __hmod__api_ms_win_core_com_l1_1_0_dll
0x1800186A8: "\\?\HardDisk" ??_C@_1BK@HLKEOGEF@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAD?$AAi?$AAs?$AAk?$AA?$AA@
0x18001F954: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUohgirmtUfnlwvRmlmgwooUlyquivUznwGEUhgwrmxOlyq@lstring-nontdll" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUohgirmtUfnlwvRmlmgwooUlyquivUznwGEUhgwrmxOlyq@lstring-nontdll
0x1800150E8: "__cdecl _imp_AccessCheck" __imp_AccessCheck
0x180015C78: "HashCatNameTableSHA1" ??_C@_1CK@PGIPIDO@?$AAH?$AAa?$AAs?$AAh?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x1800164E0: "SyncDB:: Error while updating th" ??_C@_1HA@CHCKOCBD@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAw?$AAh?$AAi?$AAl?$AAe?$AA?5?$AAu?$AAp?$AAd?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAt?$AAh@
0x18000611B: "__cdecl _imp_load_JetMove" __imp_load_JetMove
0x180002760: "int __cdecl _CatDBReleaseDatabaseToCache(struct _JET_DB_STRUCT * __ptr64,int)" ?_CatDBReleaseDatabaseToCache@@YAHPEAU_JET_DB_STRUCT@@H@Z
0x18001E6A0: "__cdecl _hmod__api_ms_win_security_sddl_l1_1_0_dll" __hmod__api_ms_win_security_sddl_l1_1_0_dll
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnBackupComplete(class IVssWriterComponents * __ptr64) __ptr64" ?OnBackupComplete@CVssWriter@@UEAA_NPEAVIVssWriterComponents@@@Z
0x18000FF88: "protected: long __cdecl CVssWriter::SetWriterFailure(long) __ptr64" ?SetWriterFailure@CVssWriter@@IEAAJJ@Z
0x180015070: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180018100: "\??\" ??_C@_19JHEHLFPM@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AA?$AA@
0x18000C218: "long __cdecl _CatDBSeekInHashCatNameTable(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64)" ?_CatDBSeekInHashCatNameTable@@YAJPEAU_JET_DB_STRUCT@@PEAUJET_DB_HASH_TABLE_IDS@@PEAU_CRYPTOAPI_BLOB@@@Z
0x180012AC8: pSetupStringTableLookUpString
0x180003284: "int __cdecl _CatDBSyncAllDBs(int,int * __ptr64)" ?_CatDBSyncAllDBs@@YAHHPEAH@Z
0x180014F50: "__cdecl _imp_WideCharToMultiByte" __imp_WideCharToMultiByte
0x1800151B8: "__cdecl _imp_strcmp" __imp_strcmp
0x18001E780: "void * __ptr64 __ptr64 g_hJetDBFreezeWaitEvent" ?g_hJetDBFreezeWaitEvent@@3PEAXEA
0x180015BC8: "HashCatNameTable_CatNameCol" ??_C@_1DI@FDJAOBDB@?$AAH?$AAa?$AAs?$AAh?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAC?$AAo?$AAl?$AA?$AA@
0x18000E2C0: "public: virtual void * __ptr64 __cdecl CVssWriter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCVssWriter@@UEAAPEAXI@Z
0x180014D08: "__cdecl _imp_SetEndOfFile" __imp_SetEndOfFile
0x18001E830: "struct _RTL_CRITICAL_SECTION g_CatDirCashCS" ?g_CatDirCashCS@@3U_RTL_CRITICAL_SECTION@@A
0x180021118: "__cdecl _imp_CoUninitialize" __imp_CoUninitialize
0x18000FC60: "public: virtual bool __cdecl CSystemWriter::OnAbort(void) __ptr64" ?OnAbort@CSystemWriter@@UEAA_NXZ
0x1800168D0: "Creation of CSystemWriter initia" ??_C@_1HA@GFJLFLFM@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAo?$AAf?$AA?5?$AAC?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa@
0x180014FC0: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x18001E7D8: "unsigned short * __ptr64 __ptr64 g_pwszDatabaseFileBaseDirectory" ?g_pwszDatabaseFileBaseDirectory@@3PEAGEA
0x180014FC8: "__cdecl _imp_ReleaseSRWLockShared" __imp_ReleaseSRWLockShared
0x180014F28: api-ms-win-core-registry-l1-1-0_NULL_THUNK_DATA
0x180002A08: PkiFree
0x1800135B8: pSetupOpenKeyEx
0x18000D510: s_SSCatDBRebuildDatabase
0x1800157C0: "CatRoot2" ??_C@_1BC@JPPDOLHM@?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA2?$AA?$AA@
0x180015108: api-ms-win-service-core-l1-1-1_NULL_THUNK_DATA
0x180014CB0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180014DE0: api-ms-win-core-kernel32-legacy-l1-1-0_NULL_THUNK_DATA
0x180016DA0: "0x%08X (unresolvable)" ??_C@_1CM@GBOILAGB@?$AA0?$AAx?$AA?$CF?$AA0?$AA8?$AAX?$AA?5?$AA?$CI?$AAu?$AAn?$AAr?$AAe?$AAs?$AAo?$AAl?$AAv?$AAa?$AAb?$AAl?$AAe?$AA?$CJ?$AA?$AA@
0x18000B178: "int __cdecl _CatDBExtractJetError(unsigned long,long * __ptr64)" ?_CatDBExtractJetError@@YAHKPEAJ@Z
0x180012E74: pSetupFileExists
0x1800175A0: "CloseFileMapEnumeration" ??_C@_0BI@NOPJHBLM@CloseFileMapEnumeration?$AA@
0x1800167E8: "%d (0x%x)" ??_C@_1BE@LOFHBGOB@?$AA?$CF?$AAd?$AA?5?$AA?$CI?$AA0?$AAx?$AA?$CF?$AAx?$AA?$CJ?$AA?$AA@
0x180012F90: pSetupMakeSurePathExists
0x180014E98: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x180004034: "int __cdecl _CatDBInitializeShutdown(int,int)" ?_CatDBInitializeShutdown@@YAHHH@Z
0x180014D48: "__cdecl _imp_ReadDirectoryChangesW" __imp_ReadDirectoryChangesW
0x180014BE8: "__cdecl _imp_CryptHashCertificate2" __imp_CryptHashCertificate2
0x18001E6E8: "__cdecl _native_startup_lock" __native_startup_lock
0x180006130: DllMain
0x18000CF20: s_SSCatDBDeleteCatalog
0x180011034: RtlEqualLUnicodeStringPrefix
0x180005FA1: "__cdecl _imp_load_JetTerm" __imp_load_JetTerm
0x180018720: "\DosDevices\" ??_C@_1BK@LABJKOM@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
0x18001E738: "struct _TP_WORK * __ptr64 __ptr64 g_CatrootSyncWork" ?g_CatrootSyncWork@@3PEAU_TP_WORK@@EA
0x180014E18: api-ms-win-core-libraryloader-l1-1-0_NULL_THUNK_DATA
0x1800028D8: "int __cdecl _CatDBCloseCachedDatabases(void)" ?_CatDBCloseCachedDatabases@@YAHXZ
0x1800061E0: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18001BF70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l1-1-0
0x180015188: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1800151A0: "__cdecl _imp_wcscat_s" __imp_wcscat_s
0x18001BFAC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-string-l2-1-0
0x180017410: "AddCoreCsiFiles : AddFilesToFile" ??_C@_1FM@HEKIOJMA@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AAT?$AAo?$AAF?$AAi?$AAl?$AAe@
0x180015168: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180016810: "%s\%s" ??_C@_1M@DFKENGJN@?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AAs?$AA?$AA@
0x1800166A0: "PauseResumeService():: ERROR_ACC" ??_C@_1FG@BDALJIAA@?$AAP?$AAa?$AAu?$AAs?$AAe?$AAR?$AAe?$AAs?$AAu?$AAm?$AAe?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?$CI?$AA?$CJ?$AA?3?$AA?3?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAA?$AAC?$AAC@
0x180015720: "edb*.log" ??_C@_1BC@GAJDNELK@?$AAe?$AAd?$AAb?$AA?$CK?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x180014EA8: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x180014F40: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000F5E0: "int __cdecl EnumPublishInfCallback(struct HDRIVERSTORE__ * __ptr64,unsigned short const * __ptr64,struct _DRIVERSTORE_DRIVERPACKAGE_INFOW * __ptr64,__int64)" ?EnumPublishInfCallback@@YAHPEAUHDRIVERSTORE__@@PEBGPEAU_DRIVERSTORE_DRIVERPACKAGE_INFOW@@_J@Z
0x18001E778: "int g_fJetDBFreeze" ?g_fJetDBFreeze@@3HA
0x18001E6C0: "__cdecl _hmod__ext_ms_win_fs_vssapi_l1_1_0_dll" __hmod__ext_ms_win_fs_vssapi_l1_1_0_dll
0x180017EB0: "SOFTWARE\Microsoft\Windows\Curre" ??_C@_1IC@CJGOPMBN@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x18001E6C8: "__cdecl _hmod__drvstore_dll" __hmod__drvstore_dll
0x1800210F0: "__cdecl _imp_JetInit" __imp_JetInit
0x18001BED0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-1-0
0x18000CE20: s_SSCatDBAddCatalog
0x180015050: "__cdecl _imp_GetWindowsDirectoryW" __imp_GetWindowsDirectoryW
0x18000E074: "int __cdecl _CatDBDVerifyGUIDString(unsigned short const * __ptr64)" ?_CatDBDVerifyGUIDString@@YAHPEBG@Z
0x180019B90: "setupapi.app.log" ??_C@_1CC@MLAOCMDE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAa?$AAp?$AAp?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x180014CA8: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000391C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000E504: "private: bool __cdecl CSystemWriter::AddCoreCLRFiles(class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddCoreCLRFiles@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x18001E0F0: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180006158: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180011BA0: pSetupExceptionHandler
0x1800155A8: "MaxEnumJetOpenMilliseconds" ??_C@_1DG@GLNAHHME@?$AAM?$AAa?$AAx?$AAE?$AAn?$AAu?$AAm?$AAJ?$AAe?$AAt?$AAO?$AAp?$AAe?$AAn?$AAM?$AAi?$AAl?$AAl?$AAi?$AAs?$AAe?$AAc?$AAo?$AAn?$AAd?$AAs?$AA?$AA@
0x180015950: "__cdecl _sz_api_ms_win_core_com_l1_1_0_dll" __sz_api_ms_win_core_com_l1_1_0_dll
0x1800173E8: "%systemroot%\winsxs" ??_C@_1CI@BKHFLBEM@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAw?$AAi?$AAn?$AAs?$AAx?$AAs?$AA?$AA@
0x180017B90: "%ProgramData%\Microsoft\Crypto" ??_C@_1DO@PENEDLCP@?$AA?$CF?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAD?$AAa?$AAt?$AAa?$AA?$CF?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AA?$AA@
0x180013220: pSetupUnmapFileAndSetEOF
0x180015140: "__cdecl _imp_memcmp" __imp_memcmp
0x180013980: "__cdecl pSpUtilsLogSetPath" _pSpUtilsLogSetPath
0x180017510: "AddCoreCsiFiles : GetProcAddress" ??_C@_1IK@DAMIMPOE@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAc?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs@
0x18001E750: "struct _TP_TIMER * __ptr64 __ptr64 g_DrainIgnoreListTimer" ?g_DrainIgnoreListTimer@@3PEAU_TP_TIMER@@EA
0x18000DA40: "int __cdecl _CatDBCatalogFileExists(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_CatDBCatalogFileExists@@YAHPEBG0@Z
0x18001E7F0: "private: static class CSystemWriter * __ptr64 __ptr64 CSystemWriter::sm_pWriter" ?sm_pWriter@CSystemWriter@@0PEAV1@EA
0x18000ABA0: "int __cdecl _CatDBDeleteCatalogEntriesFromDatabase(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64,int)" ?_CatDBDeleteCatalogEntriesFromDatabase@@YAHPEAU_JET_DB_STRUCT@@PEBGH@Z
0x1800109E0: "void __cdecl ErrLog_LogPrintfW(unsigned short * __ptr64,int,unsigned short const * __ptr64,...)" ?ErrLog_LogPrintfW@@YAXPEAGHPEBGZZ
0x1800161D0: "MpSmartLockerEnable" ??_C@_0BE@PDDIFDDK@MpSmartLockerEnable?$AA@
0x180016EE0: "TraverseDir : Unable to build Di" ??_C@_1GA@POMHPMON@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAb?$AAu?$AAi?$AAl?$AAd?$AA?5?$AAD?$AAi@
0x180014C50: "__cdecl _imp_OutputDebugStringA" __imp_OutputDebugStringA
0x1800210D0: "__cdecl _imp_JetCreateTableW" __imp_JetCreateTableW
0x180010CA4: "void __cdecl _WriteErrorOut(unsigned short * __ptr64,char * __ptr64,int)" ?_WriteErrorOut@@YAXPEAGPEADH@Z
0x1800150D8: "__cdecl _imp_EqualSid" __imp_EqualSid
0x180005F11: "__cdecl _imp_load_JetCommitTransaction" __imp_load_JetCommitTransaction
0x180017820: "AddCoreCsiFiles : GetNextFileMap" ??_C@_1GE@BDJGAGMK@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAN?$AAe?$AAx?$AAt?$AAF?$AAi?$AAl?$AAe?$AAM?$AAa?$AAp@
0x18001B7B8: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLN
0x180005FD7: "__cdecl _imp_load_JetSetSystemParameterW" __imp_load_JetSetSystemParameterW
0x180015CA8: "SHA1" ??_C@_19DILNDFJH@?$AAS?$AAH?$AAA?$AA1?$AA?$AA@
0x18000CB74: "int __cdecl _CatDBUpdateCatNameAttrTableAttrColumn(struct _JET_DB_STRUCT * __ptr64,struct _CATALOG_ATTR_STRUCT * __ptr64)" ?_CatDBUpdateCatNameAttrTableAttrColumn@@YAHPEAU_JET_DB_STRUCT@@PEAU_CATALOG_ATTR_STRUCT@@@Z
0x18001BBC0: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLB
0x180021120: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA_DLA
0x18001C060: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x180014E88: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180014FA0: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180019B00: "\REGISTRY\MACHINE\SYSTEM\Current" ??_C@_1IK@IEFPOEFM@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1800036E0: "unsigned short * __ptr64 __cdecl _CATDBConstructWSTRPath(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_CATDBConstructWSTRPath@@YAPEAGPEBG0@Z
0x18001BFFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-obsolete-l1-1-0
0x18000EE04: "private: bool __cdecl CSystemWriter::AddLegacyDriver(unsigned short * __ptr64,class IVssCreateWriterMetadata * __ptr64,void * __ptr64,struct SC_HANDLE__ * __ptr64) __ptr64" ?AddLegacyDriver@CSystemWriter@@AEAA_NPEAGPEAVIVssCreateWriterMetadata@@PEAXPEAUSC_HANDLE__@@@Z
0x1800151E0: "__cdecl _imp_RtlReAllocateHeap" __imp_RtlReAllocateHeap
0x180011BF0: pSetupInitializeUtils
0x1800118A8: RtlReportErrorOrigination
0x1800169A0: "OnIdentity() : AddComponent() ca" ??_C@_1IM@DDLIIFHK@?$AAO?$AAn?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AA?$CI?$AA?$CJ?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?$CI?$AA?$CJ?$AA?5?$AAc?$AAa@
0x180019C44: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x18000DDB4: "char * __ptr64 __cdecl _CatDBConvertWszToCodePageCat(unsigned short const * __ptr64,unsigned short const * __ptr64,unsigned int,unsigned long * __ptr64)" ?_CatDBConvertWszToCodePageCat@@YAPEADPEBG0IPEAK@Z
0x180009B2C: "int __cdecl _CatDBAddCatalogEntriesToDatabase(struct _JET_DB_STRUCT * __ptr64,struct _CTL_CONTEXT const * __ptr64,unsigned short const * __ptr64)" ?_CatDBAddCatalogEntriesToDatabase@@YAHPEAU_JET_DB_STRUCT@@PEBU_CTL_CONTEXT@@PEBG@Z
0x180005960: "__cdecl ValidateImageBase" _ValidateImageBase
0x180014E60: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x180017670: "AddCoreCsiFiles : GetProcAddress" ??_C@_1IG@OOLKBICP@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAc?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs@
0x180001760: "int __cdecl _CatDBAcquireOpenDatabaseFromCache(struct _JET_DB_STRUCT * __ptr64 * __ptr64,unsigned short const * __ptr64,int,enum __MIDL_ICatDBSvc_0001,unsigned long,int,int)" ?_CatDBAcquireOpenDatabaseFromCache@@YAHPEAPEAU_JET_DB_STRUCT@@PEBGHW4__MIDL_ICatDBSvc_0001@@KHH@Z
0x1800159A0: "__cdecl _sz_ESENT_dll" __sz_ESENT_dll
0x180021058: "__cdecl _imp_JetInit3W" __imp_JetInit3W
0x18000D420: s_SSCatDBPrepareForCall
0x180014C10: "__cdecl _imp_RpcServerRegisterIf3" __imp_RpcServerRegisterIf3
0x1800045C0: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x18001F978: g_sputils_WindowsDirectory
0x1800180E0: "%SystemRoot%\" ??_C@_1BM@EGAEJFL@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AA?$AA@
0x18000608B: "__cdecl _imp_load_JetMakeKey" __imp_load_JetMakeKey
0x180017180: "AddCoreCLRFiles : GetWindowsDire" ??_C@_1HC@LABJCJNE@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAL?$AAR?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAG?$AAe?$AAt?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AAD?$AAi?$AAr?$AAe@
0x1800151E8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180018788: "\\?\HarddiskVolume" ??_C@_1CG@CPGMNPIJ@?$AA?2?$AA?2?$AA?$DP?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x18000CC80: "int __cdecl _CatDBUpdateCatalogPathChangedTime(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64,int)" ?_CatDBUpdateCatalogPathChangedTime@@YAHPEAU_JET_DB_STRUCT@@PEBGH@Z
0x180005EED: "__cdecl _imp_load_JetRetrieveColumn" __imp_load_JetRetrieveColumn
0x1800157BC: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x18000E2C0: "public: virtual void * __ptr64 __cdecl CVssWriter::`vector deleting destructor'(unsigned int) __ptr64" ??_ECVssWriter@@UEAAPEAXI@Z
0x180014D68: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x180015990: "__cdecl _sz_drvstore_dll" __sz_drvstore_dll
0x180014E10: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x180018638: "CatalogDB: %s: %S %S " ??_C@_0BH@NMCOBKLN@CatalogDB?3?5?$CFs?3?5?$CFS?5?$CFS?$AN?6?$AA@
0x180006079: "__cdecl _imp_load_JetCreateDatabaseW" __imp_load_JetCreateDatabaseW
0x18001E72C: "unsigned long g_dwJetDBOpenRefCnt" ?g_dwJetDBOpenRefCnt@@3KA
0x18001E114: g_sputils_IsOnlineWindowsDirectory
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnBackOffIOOnVolume(unsigned short * __ptr64,struct _GUID,struct _GUID) __ptr64" ?OnBackOffIOOnVolume@CVssWriter@@UEAA_NPEAGU_GUID@@1@Z
0x180014F98: "__cdecl _imp_AcquireSRWLockExclusive" __imp_AcquireSRWLockExclusive
0x18001B678: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x180014DA0: "__cdecl _imp_LocalSize" __imp_LocalSize
0x18000EED4: "private: bool __cdecl CSystemWriter::AddLegacyDriverFiles(class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddLegacyDriverFiles@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x180017F40: "AddCorePnPFiles : Enumerating Pn" ??_C@_1HI@ODKHAEBF@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAP?$AAn?$AAP?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAP?$AAn@
0x180014F78: api-ms-win-core-string-l2-1-0_NULL_THUNK_DATA
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnContinueIOOnVolume(unsigned short * __ptr64,struct _GUID,struct _GUID) __ptr64" ?OnContinueIOOnVolume@CVssWriter@@UEAA_NPEAGU_GUID@@1@Z
0x180009E0C: "int __cdecl _CatDBAddNewRowToHashCatNameTable(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64,unsigned short const * __ptr64)" ?_CatDBAddNewRowToHashCatNameTable@@YAHPEAU_JET_DB_STRUCT@@PEAUJET_DB_HASH_TABLE_IDS@@PEAU_CRYPTOAPI_BLOB@@PEBG@Z
0x1800052E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180005D30: NdrServerCallAll
0x18001E7E0: "int g_fHasWriteJetDatabaseParams" ?g_fHasWriteJetDatabaseParams@@3HA
0x180015110: "__cdecl _imp__initterm" __imp__initterm
0x180010564: "private: static long __cdecl CSystemWriter::WinErrorToWriterError(unsigned long)" ?WinErrorToWriterError@CSystemWriter@@CAJK@Z
0x18001BFD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-debug-l1-1-0
0x180016D78: " System Error: " ??_C@_1CC@DAIFIKLE@?$AA?6?$AA?6?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAE?$AAr?$AAr?$AAo?$AAr?$AA?3?$AA?6?$AA?$AA@
0x180014DD8: "__cdecl _imp_MoveFileW" __imp_MoveFileW
0x180017AA0: "%systemroot%\ServiceProfiles\Net" ??_C@_1JK@NCKJNGEB@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAN?$AAe?$AAt@
0x180016840: "Win32 Services Files" ??_C@_1CK@CCNGKGLO@?$AAW?$AAi?$AAn?$AA3?$AA2?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180021100: "__cdecl _imp_JetSetSystemParameterW" __imp_JetSetSystemParameterW
0x18001B828: ext-ms-win-fs-vssapi-l1-1-0_NULL_THUNK_DATA_DLN
0x180019C08: "setupapi.ev2" ??_C@_1BK@GPOMBCMC@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA2?$AA?$AA@
0x1800210E0: "__cdecl _imp_JetOpenTableW" __imp_JetOpenTableW
0x180014C08: "__cdecl _imp_RpcImpersonateClient" __imp_RpcImpersonateClient
0x1800153F0: "CatNameAttrTable_CatNameCol" ??_C@_1DI@OFILBDND@?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAA?$AAt?$AAt?$AAr?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAC?$AAo?$AAl?$AA?$AA@
0x180014C90: "__cdecl _imp_SetLastError" __imp_SetLastError
0x18001E798: "unsigned long g_dwJetDBPendingOpenRefCnt" ?g_dwJetDBPendingOpenRefCnt@@3KA
0x180014BD8: "__cdecl _imp_CertCreateContext" __imp_CertCreateContext
0x18001C04C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800177D0: "AddCoreCsiFiles : LocalAlloc() f" ??_C@_1EO@OHCJDHJG@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAL?$AAo?$AAc?$AAa?$AAl?$AAA?$AAl?$AAl?$AAo?$AAc?$AA?$CI?$AA?$CJ?$AA?5?$AAf@
0x180005CE4: "__cdecl _imp_load_QueryServiceConfigW" __imp_load_QueryServiceConfigW
0x180005F23: "__cdecl _imp_load_JetCreateIndexW" __imp_load_JetCreateIndexW
0x180005865: wcsrchr
0x180021178: "__cdecl _imp_DriverStoreEnumW" __imp_DriverStoreEnumW
0x180014E08: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x180016820: "System Files" ??_C@_1BK@MBPBFDBF@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x18001E6A8: "__cdecl _hmod__api_ms_win_service_management_l2_1_0_dll" __hmod__api_ms_win_service_management_l2_1_0_dll
0x18000F6C8: "private: static unsigned long __cdecl CSystemWriter::FindBinaryForService(unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,struct SC_HANDLE__ * __ptr64)" ?FindBinaryForService@CSystemWriter@@CAKPEAG_KPEAPEAGPEAUSC_HANDLE__@@@Z
0x180015040: "__cdecl _imp_GetVersionExW" __imp_GetVersionExW
0x180018240: "AddWin32ServiceFiles: EnumServic" ??_C@_1JM@CBHPGKOE@?$AAA?$AAd?$AAd?$AAW?$AAi?$AAn?$AA3?$AA2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?3?$AA?5?$AAE?$AAn?$AAu?$AAm?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc@
0x180012C74: pSpUtilsConvertStringCaseSensitive
0x18001BEE4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-registry-l1-1-0
0x1800185F8: "CatalogDB: %s: %s at line #%u en" ??_C@_0DK@MOJNLDOC@CatalogDB?3?5?$CFs?3?5?$CFs?5at?5line?5?$CD?$CFu?5en@
0x180016AD0: "Could not open the Service Contr" ??_C@_1FI@GOGJEOLJ@?$AAC?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAr@
0x18000609D: "__cdecl _imp_load_JetEndSession" __imp_load_JetEndSession
0x18001F944: "int g_fLogErrorsToDebugger" ?g_fLogErrorsToDebugger@@3HA
0x180017FC0: "AddCorePnPFiles: Unable to expan" ??_C@_1GA@BNAPDHBJ@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAP?$AAn?$AAP?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAe?$AAx?$AAp?$AAa?$AAn@
0x18001BC00: drvstore_NULL_THUNK_DATA_DLB
0x180021180: drvstore_NULL_THUNK_DATA_DLA
0x180014BF0: CRYPT32_NULL_THUNK_DATA
0x18001B818: drvstore_NULL_THUNK_DATA_DLN
0x180016390: "SyncDB:: Enabling enum filtering" ??_C@_1EM@OBHAPOGI@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAE?$AAn?$AAa?$AAb?$AAl?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAn?$AAu?$AAm?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAi?$AAn?$AAg@
0x1800060F7: "__cdecl _imp_load_JetBeginSessionW" __imp_load_JetBeginSessionW
0x180016F40: "TraverseDir : Unable to FindFirs" ??_C@_1EO@CBIFKMKI@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAF?$AAi?$AAn?$AAd?$AAF?$AAi?$AAr?$AAs@
0x1800159D0: CAPI2_CATDB_SYNC_CATALOG_START_EVENT
0x180017210: "AddCoreCLRFiles : unable to conc" ??_C@_1IG@LHNIDEPM@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAL?$AAR?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAu?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAc@
0x18001E6D8: "__cdecl _onexitend" __onexitend
0x180014EB8: "__cdecl _imp_CreateThread" __imp_CreateThread
0x180021038: "__cdecl _imp_JetEndSession" __imp_JetEndSession
0x180016728: "1.3.6.1.4.1.311.12.1.3" ??_C@_0BH@KIIEEHJG@1?43?46?41?44?41?4311?412?41?43?$AA@
0x180016BA0: "Could not query the status of th" ??_C@_1GO@FDDAOOFK@?$AAC?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAu?$AAs?$AA?5?$AAo?$AAf?$AA?5?$AAt?$AAh@
0x1800115D4: RtlCompareEncodedLBlobs
0x1800210F8: "__cdecl _imp_JetSetCurrentIndexW" __imp_JetSetCurrentIndexW
0x1800156F8: "edb.chk" ??_C@_1BA@GDEHPJA@?$AAe?$AAd?$AAb?$AA?4?$AAc?$AAh?$AAk?$AA?$AA@
0x180015260: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180010614: CatUtil_CreateCTLContextFromFileName
0x1800158A0: "EventSystem" ??_C@_1BI@LMLBNFHH@?$AAE?$AAv?$AAe?$AAn?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x180019A68: "\REGISTRY\MACHINE" ??_C@_1CE@BGEMHEPM@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?$AA@
0x1800092AC: "long __cdecl StringCbPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCbPrintfW@@YAJPEAG_KPEBGZZ
0x180014D18: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x180015A10: CAPI2_CATDB_REMOVE_CATALOG_STOP_EVENT
0x180014E90: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180014CF8: "__cdecl _imp_GetFileAttributesExW" __imp_GetFileAttributesExW
0x1800150A0: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180013694: pSetupQueryValue
0x180015160: "__cdecl _imp__resetstkoflw" __imp__resetstkoflw
0x18000E68C: "private: bool __cdecl CSystemWriter::AddCoreCbsFiles(class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddCoreCbsFiles@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x180015230: "__cdecl _imp_EtwEventRegister" __imp_EtwEventRegister
0x180002460: "public: static bool __cdecl CSystemWriter::Startup(void)" ?Startup@CSystemWriter@@SA_NXZ
0x180015250: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x180015810: CAPI2_PROVIDER
0x18000E298: "public: __cdecl Traversal::DirectoryStack::EntryHolder::~EntryHolder(void) __ptr64" ??1EntryHolder@DirectoryStack@Traversal@@QEAA@XZ
0x180017000: "TraverseDir : Unable to build fi" ??_C@_1FC@JJFOJKNG@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAb?$AAu?$AAi?$AAl?$AAd?$AA?5?$AAf?$AAi@
0x18000FC60: "public: virtual bool __cdecl CSystemWriter::OnThaw(void) __ptr64" ?OnThaw@CSystemWriter@@UEAA_NXZ
0x180021000: "__cdecl _imp_JetDetachDatabaseW" __imp_JetDetachDatabaseW
0x180015058: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180015280: "__cdecl _xi_a" __xi_a
0x180015378: CAPI2_CATDB_SYNC_SUBSYSTEM_START_EVENT
0x180021190: ext-ms-win-fs-vssapi-l1-1-0_NULL_THUNK_DATA_DLA
0x180015028: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180014C58: api-ms-win-core-debug-l1-1-0_NULL_THUNK_DATA
0x180014C70: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180021078: "__cdecl _imp_JetCloseDatabase" __imp_JetCloseDatabase
0x180015C00: "HashCatNameTable_HashCol" ??_C@_1DC@EBJEHDBE@?$AAH?$AAa?$AAs?$AAh?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAH?$AAa?$AAs?$AAh?$AAC?$AAo?$AAl?$AA?$AA@
0x180017910: "AddCoreCsiFiles : pSetupStringTa" ??_C@_1GO@MBEECKCG@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAp?$AAS?$AAe?$AAt?$AAu?$AAp?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAT?$AAa@
0x180018650: "CatalogDB: %s: %S " ??_C@_0BE@GGAPKGFP@CatalogDB?3?5?$CFs?3?5?$CFS?$AN?6?$AA@
0x1800150F8: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180005F8F: "__cdecl _imp_load_JetOpenTableW" __imp_load_JetOpenTableW
0x180017E30: "AddCorePnPFiles : Adding enumera" ??_C@_1HG@KKLIBAPH@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAP?$AAn?$AAP?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa@
0x180018020: "AddCorePnPFiles : Opening PnpLoc" ??_C@_1GO@HECDIDHM@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAP?$AAn?$AAP?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAO?$AAp?$AAe?$AAn?$AAi?$AAn?$AAg?$AA?5?$AAP?$AAn?$AAp?$AAL?$AAo?$AAc@
0x180016480: "SyncDB:: SyncCatalogFile failed," ??_C@_1FO@MJNDMOD@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAS?$AAy?$AAn?$AAc?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AAF?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?0@
0x180021150: "__cdecl _imp_CloseServiceHandle" __imp_CloseServiceHandle
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnVSSShutdown(void) __ptr64" ?OnVSSShutdown@CVssWriter@@UEAA_NXZ
0x18000A110: "int __cdecl _CatDBCatnameAlreadyInHashesListOfCats(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,unsigned short const * __ptr64)" ?_CatDBCatnameAlreadyInHashesListOfCats@@YAHPEAU_JET_DB_STRUCT@@PEAUJET_DB_HASH_TABLE_IDS@@PEBG@Z
0x180015360: "Off" ??_C@_17KKIALEEP@?$AAO?$AAf?$AAf?$AA?$AA@
0x180016208: "HashCatNameTable" ??_C@_0BB@ONKPBHGJ@HashCatNameTable?$AA@
0x180016ED0: "%s\*" ??_C@_19CDBNEOLI@?$AA?$CF?$AAs?$AA?2?$AA?$CK?$AA?$AA@
0x180021050: "__cdecl _imp_JetDelete" __imp_JetDelete
0x180012D04: pSetupAppendPath
0x180016204: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x18001BF0C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180014E58: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1800025FC: "int __cdecl _CatDBSyncDB(int,unsigned short const * __ptr64,unsigned short const * __ptr64,int,int,int * __ptr64)" ?_CatDBSyncDB@@YAHHPEBG0HHPEAH@Z
0x180005768: "__cdecl _report_rangecheckfailure" __report_rangecheckfailure
0x18001E790: "void * __ptr64 __ptr64 g_hJetDBServiceStopWaitEvent" ?g_hJetDBServiceStopWaitEvent@@3PEAXEA
0x18001E700: "__cdecl pRawDllMain" _pRawDllMain
0x18001E7D0: "int g_fDBSvcInitialized" ?g_fDBSvcInitialized@@3HA
0x180005B4F: "__cdecl _tailMerge_api_ms_win_service_management_l2_1_0_dll" __tailMerge_api_ms_win_service_management_l2_1_0_dll
0x180021040: "__cdecl _imp_JetMakeKey" __imp_JetMakeKey
0x180016F94: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x180015C38: "HashCatNameTableSHA256" ??_C@_1CO@JJMAGHEE@?$AAH?$AAa?$AAs?$AAh?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x1800137D0: "__cdecl pSpUtilsSetTextLogPath" _pSpUtilsSetTextLogPath
0x1800210A8: "__cdecl _imp_JetCommitTransaction" __imp_JetCommitTransaction
0x180005FFB: "__cdecl _imp_load_JetGetDatabaseFileInfoW" __imp_load_JetGetDatabaseFileInfoW
0x180006290: strcmp
0x180012BF8: pSpUtilsCharLower
0x180001B40: "public: virtual bool __cdecl CVssWriterEx::OnIdentifyEx(class IVssCreateWriterMetadataEx * __ptr64) __ptr64" ?OnIdentifyEx@CVssWriterEx@@UEAA_NPEAVIVssCreateWriterMetadataEx@@@Z
0x1800158F0: "__cdecl _sz_api_ms_win_service_management_l2_1_0_dll" __sz_api_ms_win_service_management_l2_1_0_dll
0x180015920: "__cdecl _sz_api_ms_win_service_management_l1_1_0_dll" __sz_api_ms_win_service_management_l1_1_0_dll
0x18000A258: "int __cdecl _CatDBCreateDBFile(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64)" ?_CatDBCreateDBFile@@YAHPEAU_JET_DB_STRUCT@@PEBG@Z
0x180014FD0: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x18001B638: "__cdecl _DELAY_IMPORT_DESCRIPTOR_drvstore_dll" __DELAY_IMPORT_DESCRIPTOR_drvstore_dll
0x18001C038: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x180017A00: "%systemroot%\ServiceProfiles\Loc" ??_C@_1JG@HOLKLBHL@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAL?$AAo?$AAc@
0x180015480: CAPI2_CATDB_ENUM_CATALOG_FROM_HASH_STOP_EVENT
0x1800151C8: "__cdecl _imp_NtQueryValueKey" __imp_NtQueryValueKey
0x180014FB8: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180015158: "__cdecl _imp__vsnprintf" __imp__vsnprintf
0x180021188: "__cdecl _imp_CreateWriterEx" __imp_CreateWriterEx
0x180005580: "__cdecl _security_check_cookie" __security_check_cookie
0x1800135D4: pSetupOpenPredefinedKey
0x180015880: "System Writer" ??_C@_1BM@BGBMACD@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?$AA@
0x180015278: "__cdecl _xc_z" __xc_z
0x180005D1A: "__cdecl _imp_load_CoInitializeEx" __imp_load_CoInitializeEx
0x180014EC8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180014DF8: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x180019A10: "SetupOverride" ??_C@_1BM@IOHCBIPI@?$AAS?$AAe?$AAt?$AAu?$AAp?$AAO?$AAv?$AAe?$AAr?$AAr?$AAi?$AAd?$AAe?$AA?$AA@
0x18000D2C0: s_SSCatDBPauseResumeService
0x180006043: "__cdecl _imp_load_JetGetColumnInfoW" __imp_load_JetGetColumnInfoW
0x18001E7C8: "unsigned __int64 g_JetInstance" ?g_JetInstance@@3_KA
0x1800150A8: "__cdecl _imp_WaitForThreadpoolWorkCallbacks" __imp_WaitForThreadpoolWorkCallbacks
0x18001F8F8: "struct _RTL_CRITICAL_SECTION g_CleanupTempFilesCS" ?g_CleanupTempFilesCS@@3U_RTL_CRITICAL_SECTION@@A
0x18001E7A0: "void * __ptr64 __ptr64 g_hJetDBOpenThreadWaitEvent" ?g_hJetDBOpenThreadWaitEvent@@3PEAXEA
0x180016710: "1.3.6.1.4.1.311.12.1.2" ??_C@_0BH@LBJPHGNH@1?43?46?41?44?41?4311?412?41?42?$AA@
0x18000C3CC: "int __cdecl _CatDBSyncCatalogFile(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64,unsigned short const * __ptr64,struct _WIN32_FIND_DATAW const * __ptr64,unsigned long * __ptr64)" ?_CatDBSyncCatalogFile@@YAHPEAU_JET_DB_STRUCT@@PEBG1PEBU_WIN32_FIND_DATAW@@PEAK@Z
0x18001B5D8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l1_1_0_dll
0x180012A80: pSetupStringTableInitialize
0x1800033DC: "int __cdecl _CatDBDeleteJetFiles(int)" ?_CatDBDeleteJetFiles@@YAHH@Z
0x180014DC0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x180001090: s_SSCatDBEnumCatalogs
0x180015030: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180014D80: "__cdecl _imp_HeapReAlloc" __imp_HeapReAlloc
0x180014D90: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x180014C60: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180017330: "Microsoft.Net" ??_C@_1BM@OBAOPKGN@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAN?$AAe?$AAt?$AA?$AA@
0x180018758: "\Device\HarddiskVolume" ??_C@_1CO@JFDIPJLA@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAH?$AAa?$AAr?$AAd?$AAd?$AAi?$AAs?$AAk?$AAV?$AAo?$AAl?$AAu?$AAm?$AAe?$AA?$AA@
0x180014D70: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x18001E870: "struct _RTL_SRWLOCK g_CatDirCashSRW" ?g_CatDirCashSRW@@3U_RTL_SRWLOCK@@A
0x1800151F8: "__cdecl _imp_RtlFormatCurrentUserKeyPath" __imp_RtlFormatCurrentUserKeyPath
0x180014D30: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x1800182E0: "AddWin32ServiceFiles: Unable to " ??_C@_1LE@DHAGKPEM@?$AAA?$AAd?$AAd?$AAW?$AAi?$AAn?$AA3?$AA2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5@
0x180015090: "__cdecl _imp_CloseThreadpoolWork" __imp_CloseThreadpoolWork
0x1800129BC: pSetupStringTableDestroy
0x180005D08: "__cdecl _imp_load_CloseServiceHandle" __imp_load_CloseServiceHandle
0x18001F9B8: GlobalDevLogData
0x180003A6C: "void __cdecl _CatDBInitConfigPara(void)" ?_CatDBInitConfigPara@@YAXXZ
0x180021048: "__cdecl _imp_JetCreateDatabaseW" __imp_JetCreateDatabaseW
0x180017650: "GetNextFileMapContent" ??_C@_0BG@BIBJPCGJ@GetNextFileMapContent?$AA@
0x180011CA4: pSetupUninitializeUtils
0x180010874: "void __cdecl ErrLog_LogError(unsigned short * __ptr64,unsigned long,unsigned long,unsigned long,int,int)" ?ErrLog_LogError@@YAXPEAGKKKHH@Z
0x180015CC0: "D:(A;;GRGWGX;;;WD)(A;;GRGWGX;;;R" ??_C@_1BGK@IKNMNACI@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AAG?$AAW?$AAG?$AAX?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AAG?$AAW?$AAG?$AAX?$AA?$DL?$AA?$DL?$AA?$DL?$AAR@
0x180014E48: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x180015248: "__cdecl _imp_EtwEventEnabled" __imp_EtwEventEnabled
0x1800210C0: "__cdecl _imp_JetOpenDatabaseW" __imp_JetOpenDatabaseW
0x180016B30: "Could not open the EventSystem s" ??_C@_1GE@IPKPDEJH@?$AAC?$AAo?$AAu?$AAl?$AAd?$AA?5?$AAn?$AAo?$AAt?$AA?5?$AAo?$AAp?$AAe?$AAn?$AA?5?$AAt?$AAh?$AAe?$AA?5?$AAE?$AAv?$AAe?$AAn?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAs@
0x18001172C: RtlReallocateLBlob
0x18001E808: "struct _RTL_CRITICAL_SECTION g_JetDBOpenCS" ?g_JetDBOpenCS@@3U_RTL_CRITICAL_SECTION@@A
0x180009BA0: "int __cdecl _CatDBAddHashCatNamePair(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64,unsigned short const * __ptr64)" ?_CatDBAddHashCatNamePair@@YAHPEAU_JET_DB_STRUCT@@PEAUJET_DB_HASH_TABLE_IDS@@PEAU_CRYPTOAPI_BLOB@@PEBG@Z
0x180014D00: "__cdecl _imp_CreateDirectoryW" __imp_CreateDirectoryW
0x180014F48: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000B138: "unsigned short const * __ptr64 __cdecl _CatDBExtractCatBaseName(unsigned short const * __ptr64)" ?_CatDBExtractCatBaseName@@YAPEBGPEBG@Z
0x1800150C0: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180002860: "long __cdecl _CatDBSeekInCatNameAttrTable(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64)" ?_CatDBSeekInCatNameAttrTable@@YAJPEAU_JET_DB_STRUCT@@PEBG@Z
0x180013A64: SpUtilsMallocElements
0x180015690: "{???????????????????????????????" ??_C@_1EO@GCLNONCD@?$AA?$HL?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP?$AA?$DP@
0x180003894: "int __cdecl _CatDBDeleteFiles(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_CatDBDeleteFiles@@YAHPEBG0@Z
0x180015820: "Software\Microsoft\Cryptography\" ??_C@_1FO@FCDFJGBB@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAy?$AA?2@
0x18001E7A8: "int g_fJetDBFirstPendingOpen" ?g_fJetDBFirstPendingOpen@@3HA
0x180005C59: "__cdecl _imp_load_CoUninitialize" __imp_load_CoUninitialize
0x180014F60: "__cdecl _imp_MultiByteToWideChar" __imp_MultiByteToWideChar
0x180021160: "__cdecl _imp_QueryServiceStatusEx" __imp_QueryServiceStatusEx
0x18001BFC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x180005F35: "__cdecl _imp_load_JetPrepareUpdate" __imp_load_JetPrepareUpdate
0x180014EE0: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000E724: "private: bool __cdecl CSystemWriter::AddCoreCsiFiles(class IVssCreateWriterMetadata * __ptr64,void * __ptr64) __ptr64" ?AddCoreCsiFiles@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@PEAX@Z
0x180017BD0: "%systemroot%\System32\Microsoft\" ??_C@_1FA@MFFHNODO@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2@
0x180014DC8: "__cdecl _imp_CopyFileW" __imp_CopyFileW
0x180015298: "__cdecl _guard_fids_table" __guard_fids_table
0x180014C38: "__cdecl _imp_GetTimeFormatA" __imp_GetTimeFormatA
0x1800151C0: msvcrt_NULL_THUNK_DATA
0x18001B5B8: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_service_management_l2_1_0_dll
0x180014180: "__cdecl load_config_used" _load_config_used
0x18000FCC0: "public: virtual bool __cdecl CSystemWriter::OnIdentify(class IVssCreateWriterMetadata * __ptr64) __ptr64" ?OnIdentify@CSystemWriter@@UEAA_NPEAVIVssCreateWriterMetadata@@@Z
0x180005DE3: "__cdecl _tailMerge_drvstore_dll" __tailMerge_drvstore_dll
0x18000A4A0: "int __cdecl _CatDBCreateDBTables(struct _JET_DB_STRUCT * __ptr64,unsigned long)" ?_CatDBCreateDBTables@@YAHPEAU_JET_DB_STRUCT@@K@Z
0x180014FD8: "__cdecl _imp_ReleaseMutex" __imp_ReleaseMutex
0x180021028: "__cdecl _imp_JetDeleteTableW" __imp_JetDeleteTableW
0x180005D58: "__cdecl _tailMerge_ext_ms_win_fs_vssapi_l1_1_0_dll" __tailMerge_ext_ms_win_fs_vssapi_l1_1_0_dll
0x18001B598: "__cdecl _DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_api_ms_win_security_sddl_l1_1_0_dll
0x180021030: "__cdecl _imp_JetDeleteTableA" __imp_JetDeleteTableA
0x180014ED0: "__cdecl _imp_QueryPerformanceFrequency" __imp_QueryPerformanceFrequency
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnPrepareBackup(class IVssWriterComponents * __ptr64) __ptr64" ?OnPrepareBackup@CVssWriter@@UEAA_NPEAVIVssWriterComponents@@@Z
0x1800165B0: "DeleteCatalog(%s):: ERROR_ACCESS" ??_C@_1FA@LBIODIBF@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ?$AA?3?$AA?3?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAA?$AAC?$AAC?$AAE?$AAS?$AAS@
0x180013454: pSetupDuplicateString
0x180014C78: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180014C68: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x18001B618: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ext_ms_win_fs_vssapi_l1_1_0_dll" __DELAY_IMPORT_DESCRIPTOR_ext_ms_win_fs_vssapi_l1_1_0_dll
0x180003944: LIST_AddTail
0x180012930: pSetupStringTableAddString
0x18001BEF8: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x18001BE6C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x1800156E0: "edb*.jrs" ??_C@_1BC@MGMPAMLA@?$AAe?$AAd?$AAb?$AA?$CK?$AA?4?$AAj?$AAr?$AAs?$AA?$AA@
0x18001BEA8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processenvironment-l1-1-0
0x18001F948: "int g_fLogWarnings" ?g_fLogWarnings@@3HA
0x180015B98: "HashCatNameTable_Index" ??_C@_1CO@HCMKDPOD@?$AAH?$AAa?$AAs?$AAh?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x18000E0DC: "int __cdecl _CatDBMoveInUseFileToTempLocation(unsigned short const * __ptr64)" ?_CatDBMoveInUseFileToTempLocation@@YAHPEBG@Z
0x180014C48: api-ms-win-core-datetime-l1-1-0_NULL_THUNK_DATA
0x180015128: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180010F08: RtlConcatenateLUnicodeStrings
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnPreRestore(class IVssWriterComponents * __ptr64) __ptr64" ?OnPreRestore@CVssWriter@@UEAA_NPEAVIVssWriterComponents@@@Z
0x18001E858: "struct LIST_ g_CatalogDBCacheList" ?g_CatalogDBCacheList@@3ULIST_@@A
0x180016E80: "TraverseDir : Unable to pop dire" ??_C@_1EO@ELBPMAPP@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAo?$AAp?$AA?5?$AAd?$AAi?$AAr?$AAe@
0x180014DE8: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180015218: "__cdecl _imp_NtClose" __imp_NtClose
0x180010BC4: "long __cdecl StringCchPrintfA(char * __ptr64,unsigned __int64,char const * __ptr64,...)" ?StringCchPrintfA@@YAJPEAD_KPEBDZZ
0x180016870: "Allocation of CSystemWriter obje" ??_C@_1FG@OEKGIDCH@?$AAA?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAo?$AAf?$AA?5?$AAC?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?5?$AAo?$AAb?$AAj?$AAe@
0x18000D7F8: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x18001BBF0: ext-ms-win-fs-vssapi-l1-1-0_NULL_THUNK_DATA_DLB
0x1800138A4: "__cdecl pSpUtilsTextLogUninitialize" _pSpUtilsTextLogUninitialize
0x18001E7F8: "struct _LIST_ENTRY g_IgnoreList" ?g_IgnoreList@@3U_LIST_ENTRY@@A
0x180016CA0: "System Writer object failed to s" ??_C@_1GC@BNJMOKFI@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?5?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAs@
0x180014F38: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180016470: "*.cat" ??_C@_1M@FOCJHFAG@?$AA?$CK?$AA?4?$AAc?$AAa?$AAt?$AA?$AA@
0x180014ED8: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180021090: "__cdecl _imp_JetCloseTable" __imp_JetCloseTable
0x18001F970: g_sputils_LogInitialized
0x180001B30: "public: virtual bool __cdecl CSystemWriter::OnPrepareBackup(class IVssWriterComponents * __ptr64) __ptr64" ?OnPrepareBackup@CSystemWriter@@UEAA_NPEAVIVssWriterComponents@@@Z
0x1800150B0: "__cdecl _imp_SubmitThreadpoolWork" __imp_SubmitThreadpoolWork
0x180014FF8: "__cdecl _imp_InitializeSRWLock" __imp_InitializeSRWLock
0x18000DCF0: "char * __ptr64 __cdecl _CatDBConvertWszToCodePage(unsigned short const * __ptr64,unsigned int,unsigned long * __ptr64)" ?_CatDBConvertWszToCodePage@@YAPEADPEBGIPEAK@Z
0x18001E788: "struct _JET_DB_PENDING_OPEN_STRUCT * __ptr64 __ptr64 g_pJetDBPendingOpenHead" ?g_pJetDBPendingOpenHead@@3PEAU_JET_DB_PENDING_OPEN_STRUCT@@EA
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnPostRestore(class IVssWriterComponents * __ptr64) __ptr64" ?OnPostRestore@CVssWriter@@UEAA_NPEAVIVssWriterComponents@@@Z
0x180014E50: "__cdecl _imp_CreateFileMappingW" __imp_CreateFileMappingW
0x18000223C: "void __cdecl _CatDBCloseJet(int)" ?_CatDBCloseJet@@YAXH@Z
0x180001A20: "int __cdecl _CatDBOpenJet(int,unsigned long)" ?_CatDBOpenJet@@YAHHK@Z
0x180014F30: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180005880: "__cdecl purecall" _purecall
0x180014EF0: "__cdecl _imp_RegQueryInfoKeyW" __imp_RegQueryInfoKeyW
0x180019C48: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180005AB2: "__cdecl _tailMerge_api_ms_win_security_sddl_l1_1_0_dll" __tailMerge_api_ms_win_security_sddl_l1_1_0_dll
0x180002A44: "int __cdecl _CatDBRetrieveCatNameAttrTableAttrColumn(struct _JET_DB_STRUCT * __ptr64,struct _CATALOG_ATTR_STRUCT * __ptr64)" ?_CatDBRetrieveCatNameAttrTableAttrColumn@@YAHPEAU_JET_DB_STRUCT@@PEAU_CATALOG_ATTR_STRUCT@@@Z
0x180006109: "__cdecl _imp_load_JetBeginTransaction" __imp_load_JetBeginTransaction
0x18000D7E0: MIDL_user_allocate
0x180005A90: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x180014E68: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x180014E38: api-ms-win-core-localization-l1-2-0_NULL_THUNK_DATA
0x180017B40: "%systemroot%\System32\Microsoft\" ??_C@_1EO@CACFKMBG@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2@
0x18000626C: memcmp
0x180014DA8: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x18001F94C: "int g_fErrLogInitialized" ?g_fErrLogInitialized@@3HA
0x180015038: "__cdecl _imp_GetSystemDirectoryW" __imp_GetSystemDirectoryW
0x180005C65: "__cdecl _tailMerge_api_ms_win_core_com_l1_1_0_dll" __tailMerge_api_ms_win_core_com_l1_1_0_dll
0x180015180: "__cdecl _imp_wcsrchr" __imp_wcsrchr
0x180016158: "dberr.txt" ??_C@_1BE@IJBGPAJJ@?$AAd?$AAb?$AAe?$AAr?$AAr?$AA?4?$AAt?$AAx?$AAt?$AA?$AA@
0x180005BDA: "__cdecl _tailMerge_api_ms_win_service_management_l1_1_0_dll" __tailMerge_api_ms_win_service_management_l1_1_0_dll
0x1800107F0: "void __cdecl ErrLog_Initialize(void)" ?ErrLog_Initialize@@YAXXZ
0x180004A28: "void __cdecl _CatDBCleanupTempFiles(void)" ?_CatDBCleanupTempFiles@@YAXXZ
0x1800060E5: "__cdecl _imp_load_JetRollback" __imp_load_JetRollback
0x180002790: "int __cdecl _CatDBIsCatalogPathChanged(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?_CatDBIsCatalogPathChanged@@YAHPEAU_JET_DB_STRUCT@@PEBGPEAH@Z
0x180016240: "Init:: Database previously shutd" ??_C@_1FG@HLHMPJP@?$AAI?$AAn?$AAi?$AAt?$AA?3?$AA?3?$AA?5?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?5?$AAp?$AAr?$AAe?$AAv?$AAi?$AAo?$AAu?$AAs?$AAl?$AAy?$AA?5?$AAs?$AAh?$AAu?$AAt?$AAd@
0x1800055A4: wcschr
0x180021128: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18001BE58: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180019C28: "setupapi.ev3" ??_C@_1BK@NHFAHFKH@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA3?$AA?$AA@
0x18001E708: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUhvgfkzkrUhkfgrohUfmrxlwvUlyquivUznwGEUkivxlnkOlyq@sputilsu" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUkmkUhvgfkzkrUhkfgrohUfmrxlwvUlyquivUznwGEUkivxlnkOlyq@sputilsu
0x180015390: "CatNameAttrTable" ??_C@_1CC@NDPIDPBN@?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAA?$AAt?$AAt?$AAr?$AAT?$AAa?$AAb?$AAl?$AAe?$AA?$AA@
0x180016640: "RebuildDatabase(%s):: ERROR_ACCE" ??_C@_1FE@PHIJCMGA@?$AAR?$AAe?$AAb?$AAu?$AAi?$AAl?$AAd?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$CI?$AA?$CF?$AAs?$AA?$CJ?$AA?3?$AA?3?$AA?5?$AAE?$AAR?$AAR?$AAO?$AAR?$AA_?$AAA?$AAC?$AAC?$AAE@
0x180015708: "res*.log" ??_C@_1BC@PKMLMOEN@?$AAr?$AAe?$AAs?$AA?$CK?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x180011EC8: pSpUtilsSetLogPath
0x180021068: "__cdecl _imp_JetAddColumnW" __imp_JetAddColumnW
0x180015130: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180016940: "OnIdentity() : SetRestoreMethod(" ??_C@_1FO@CNFMIAMM@?$AAO?$AAn?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAt?$AAy?$AA?$CI?$AA?$CJ?$AA?5?$AA?3?$AA?5?$AAS?$AAe?$AAt?$AAR?$AAe?$AAs?$AAt?$AAo?$AAr?$AAe?$AAM?$AAe?$AAt?$AAh?$AAo?$AAd?$AA?$CI@
0x18001115C: RtlIsLUnicodeStringValid
0x180014F70: "__cdecl _imp_CharLowerW" __imp_CharLowerW
0x180015258: ntdll_NULL_THUNK_DATA
0x180015178: "__cdecl _imp_memcpy" __imp_memcpy
0x1800150C8: "__cdecl _imp_GetSecurityDescriptorDacl" __imp_GetSecurityDescriptorDacl
0x1800025B0: "public: virtual __cdecl CVssWriter::~CVssWriter(void) __ptr64" ??1CVssWriter@@UEAA@XZ
0x180011E14: pSpUtilsQueryOverrideValue
0x180004CB0: "private: static unsigned long __cdecl CSystemWriter::InitializeThreadFunc(void * __ptr64)" ?InitializeThreadFunc@CSystemWriter@@CAKPEAX@Z
0x180015240: "__cdecl _imp_EtwEventUnregister" __imp_EtwEventUnregister
0x180012574: "__cdecl pSpUtilsStringTableDestroy" _pSpUtilsStringTableDestroy
0x180002570: "public: virtual void * __ptr64 __cdecl CSystemWriter::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCSystemWriter@@UEAAPEAXI@Z
0x180019A90: "\REGISTRY\MACHINE\SOFTWARE\Class" ??_C@_1EG@LKPPLMDE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAA?$AAC?$AAH?$AAI?$AAN?$AAE?$AA?2?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAC?$AAl?$AAa?$AAs?$AAs@
0x180008BDC: "long __cdecl CatHelperAddToLongColumn(unsigned __int64,unsigned __int64,unsigned long,unsigned short const * __ptr64)" ?CatHelperAddToLongColumn@@YAJ_K0KPEBG@Z
0x18000DF04: "unsigned short * __ptr64 __cdecl _CatDBCreateNewCatalogFileName(unsigned short const * __ptr64,unsigned short const * __ptr64,int * __ptr64)" ?_CatDBCreateNewCatalogFileName@@YAPEAGPEBG0PEAH@Z
0x18001BE1C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x180015080: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180012798: "__cdecl pSpUtilsStringTableLookUpString" _pSpUtilsStringTableLookUpString
0x18001E748: "struct _TP_WAIT * __ptr64 __ptr64 g_CatrootChangesWait" ?g_CatrootChangesWait@@3PEAU_TP_WAIT@@EA
0x18001E0F8: "__cdecl _security_cookie" __security_cookie
0x18001BF84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-1
0x180018530: "%SystemRoot%\System32\CatRoot2\d" ??_C@_1FC@BECLGMGP@?$AA?$CF?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2?$AA?2?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA2?$AA?2?$AAd@
0x180014EF8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x180011D34: pSpUtilsOpenSetupKey
0x180015200: "__cdecl _imp_EvtIntReportEventAndSourceAsync" __imp_EvtIntReportEventAndSourceAsync
0x180016170: "ProgramFiles" ??_C@_1BK@CECDDAML@?$AAP?$AAr?$AAo?$AAg?$AAr?$AAa?$AAm?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?$AA@
0x180015088: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x180019A40: "setupapi.dev.log" ??_C@_1CC@LMHLAGMD@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAd?$AAe?$AAv?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x180014D20: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x180014D58: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180005D4C: "__cdecl _imp_load_CreateWriterEx" __imp_load_CreateWriterEx
0x180014D98: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180005BCE: "__cdecl _imp_load_OpenServiceW" __imp_load_OpenServiceW
0x18001BE94: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180016E30: "TraverseDir : Unable to push Bas" ??_C@_1EM@ECFIKCNO@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAu?$AAs?$AAh?$AA?5?$AAB?$AAa?$AAs@
0x180014DD0: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x180014CD8: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1800185A8: "catdbsvc.cpp" ??_C@_0N@BLIMNFGL@catdbsvc?4cpp?$AA@
0x180009C54: "int __cdecl _CatDBAddNewRowToCatNameAttrTable(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64,struct _CATALOG_ATTR_STRUCT * __ptr64)" ?_CatDBAddNewRowToCatNameAttrTable@@YAHPEAU_JET_DB_STRUCT@@PEBGPEAU_CATALOG_ATTR_STRUCT@@@Z
0x180016C40: "System Writer object failed to i" ??_C@_1FO@PAILDEEG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?5?$AAW?$AAr?$AAi?$AAt?$AAe?$AAr?$AA?5?$AAo?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi@
0x1800159E0: CAPI2_CATDB_REBUILD_DATABASE_STOP_EVENT
0x1800167B0: "Microsoft-Windows-CAPI2" ??_C@_1DA@PBDCKGPH@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?9?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?9?$AAC?$AAA?$AAP?$AAI?$AA2?$AA?$AA@
0x1800170D0: "TraverseDir : Unable to FindNext" ??_C@_1EM@EIHGBNIA@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAF?$AAi?$AAn?$AAd?$AAN?$AAe?$AAx?$AAt@
0x180014F20: "__cdecl _imp_RegCreateKeyExW" __imp_RegCreateKeyExW
0x18001E6E0: "__cdecl _onexitbegin" __onexitbegin
0x180014BF8: "__cdecl _imp_I_RpcBindingIsClientLocal" __imp_I_RpcBindingIsClientLocal
0x18001F9F8: InstallLogFilePath
0x1800041A0: "unsigned short * __ptr64 __cdecl _CatDBGetCatrootDirW(int)" ?_CatDBGetCatrootDirW@@YAPEAGH@Z
0x18001F9E8: StringLogFilePath
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnIdentify(class IVssCreateWriterMetadata * __ptr64) __ptr64" ?OnIdentify@CVssWriter@@UEAA_NPEAVIVssCreateWriterMetadata@@@Z
0x1800157E8: "Catalog Database" ??_C@_1CC@MFKCFFIL@?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?5?$AAD?$AAa?$AAt?$AAa?$AAb?$AAa?$AAs?$AAe?$AA?$AA@
0x180008C78: "long __cdecl CatHelperRetrieveLongColumn(unsigned __int64,unsigned __int64,unsigned long,unsigned long,unsigned short * __ptr64 * __ptr64,unsigned long * __ptr64)" ?CatHelperRetrieveLongColumn@@YAJ_K0KKPEAPEAGPEAK@Z
0x180015198: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180017700: "AddCoreCsiFiles : BeginFileEnume" ??_C@_1GC@BOMGJIIC@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAB?$AAe?$AAg?$AAi?$AAn?$AAF?$AAi?$AAl?$AAe?$AAE?$AAn?$AAu?$AAm?$AAe@
0x180001B30: "public: virtual bool __cdecl CSystemWriter::OnPrepareSnapshot(void) __ptr64" ?OnPrepareSnapshot@CSystemWriter@@UEAA_NXZ
0x180014C00: "__cdecl _imp_RpcRevertToSelf" __imp_RpcRevertToSelf
0x18000BBE8: "int __cdecl _CatDBRemoveCatNameFromCatNameTable(struct _JET_DB_STRUCT * __ptr64,unsigned short const * __ptr64)" ?_CatDBRemoveCatNameFromCatNameTable@@YAHPEAU_JET_DB_STRUCT@@PEBG@Z
0x180014C98: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180014E78: "__cdecl _imp_GetCurrentThread" __imp_GetCurrentThread
0x18001B7D0: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA_DLN
0x180017890: "AddCoreCsiFiles : RtlConvertNtFi" ??_C@_1HI@KEGKGEIB@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAs?$AAi?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAR?$AAt?$AAl?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAN?$AAt?$AAF?$AAi@
0x180014DF0: "__cdecl _imp_FreeLibraryAndExitThread" __imp_FreeLibraryAndExitThread
0x18000FE94: "public: long __cdecl Traversal::DirectoryStack::Push(unsigned short * __ptr64,unsigned short * __ptr64) __ptr64" ?Push@DirectoryStack@Traversal@@QEAAJPEAG0@Z
0x180014F00: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x180016C10: "CoInitializeEx failed." ??_C@_1CO@BHHHMFIL@?$AAC?$AAo?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAE?$AAx?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?4?$AA?$AA@
0x180005AA6: "__cdecl _imp_load_ConvertStringSidToSidW" __imp_load_ConvertStringSidToSidW
0x180005994: "__cdecl _security_init_cookie" __security_init_cookie
0x18000FC80: "public: virtual bool __cdecl CSystemWriter::OnFreeze(void) __ptr64" ?OnFreeze@CSystemWriter@@UEAA_NXZ
0x1800172A0: "AddCoreCLRFiles : AddFilesToFile" ??_C@_1JA@MJAMOBAJ@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAC?$AAL?$AAR?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAF?$AAi?$AAl?$AAe?$AAs?$AAT?$AAo?$AAF?$AAi?$AAl?$AAe@
0x180014F18: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x180016D60: " Details: " ??_C@_1BI@DEBJLJGM@?$AA?6?$AA?6?$AAD?$AAe?$AAt?$AAa?$AAi?$AAl?$AAs?$AA?3?$AA?6?$AA?$AA@
0x180002E40: "long __cdecl _CatDBOpenTables(struct _JET_DB_STRUCT * __ptr64,int,enum __MIDL_ICatDBSvc_0001)" ?_CatDBOpenTables@@YAJPEAU_JET_DB_STRUCT@@HW4__MIDL_ICatDBSvc_0001@@@Z
0x180021088: "__cdecl _imp_JetSetColumn" __imp_JetSetColumn
0x18001F8D0: "struct _RTL_CRITICAL_SECTION g_CatDBAddDeleteCS" ?g_CatDBAddDeleteCS@@3U_RTL_CRITICAL_SECTION@@A
0x18000E324: "private: bool __cdecl CSystemWriter::AddCatalogFiles(class IVssCreateWriterMetadata * __ptr64,bool) __ptr64" ?AddCatalogFiles@CSystemWriter@@AEAA_NPEAVIVssCreateWriterMetadata@@_N@Z
0x18001BDF4: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18001E730: "long g_CatrootChangesSyncInFlight" ?g_CatrootChangesSyncInFlight@@3JA
0x180014D10: "__cdecl _imp_CompareFileTime" __imp_CompareFileTime
0x180011F90: pSpUtilsSetLogPathFromRegKey
0x1800150D0: "__cdecl _imp_GetFileSecurityW" __imp_GetFileSecurityW
0x18000DC40: "unsigned short * __ptr64 __cdecl _CatDBConvertCodePageToWsz(char const * __ptr64,unsigned int,unsigned long * __ptr64)" ?_CatDBConvertCodePageToWsz@@YAPEAGPEBDIPEAK@Z
0x18000BD6C: "int __cdecl _CatDBRemoveCatNameFromMultiValuedColumn(struct _JET_DB_STRUCT * __ptr64,unsigned __int64,unsigned long,unsigned short const * __ptr64)" ?_CatDBRemoveCatNameFromMultiValuedColumn@@YAHPEAU_JET_DB_STRUCT@@_KKPEBG@Z
0x180006031: "__cdecl _imp_load_JetAddColumnW" __imp_load_JetAddColumnW
0x1800151D0: "__cdecl _imp_NtOpenKey" __imp_NtOpenKey
0x18001E7E4: "int g_fShuttingDown" ?g_fShuttingDown@@3HA
0x180002D94: "void __cdecl _CatDBCloseDBTables(struct _JET_DB_STRUCT * __ptr64,int)" ?_CatDBCloseDBTables@@YAXPEAU_JET_DB_STRUCT@@H@Z
0x180015118: "__cdecl _imp_malloc" __imp_malloc
0x180004988: "void __cdecl _CatDBReleaseResources(bool,bool)" ?_CatDBReleaseResources@@YAX_N0@Z
0x180015150: "__cdecl _imp__purecall" __imp__purecall
0x180019AD8: "\REGISTRY\USER" ??_C@_1BO@PBBLJICK@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAS?$AAE?$AAR?$AA?$AA@
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnVSSApplicationStartup(void) __ptr64" ?OnVSSApplicationStartup@CVssWriter@@UEAA_NXZ
0x180019BE8: "setupapi.ev1" ??_C@_1BK@HNFJLNCM@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAe?$AAv?$AA1?$AA?$AA@
0x18001F960: g_NTSTATUS_to_break_on
0x1800031E8: "int __cdecl _CatDBEnsureDirExists(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?_CatDBEnsureDirExists@@YAHPEBG0@Z
0x180014CB8: "__cdecl _imp_WriteFile" __imp_WriteFile
0x180018588: "CatDBLogging" ??_C@_1BK@CLDFAMHE@?$AAC?$AAa?$AAt?$AAD?$AAB?$AAL?$AAo?$AAg?$AAg?$AAi?$AAn?$AAg?$AA?$AA@
0x18001BEBC: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180015048: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x180021098: "__cdecl _imp_JetRetrieveColumn" __imp_JetRetrieveColumn
0x180014D28: "__cdecl _imp_GetFileSize" __imp_GetFileSize
0x1800179C0: "%systemroot%\servicing\Version" ??_C@_1DO@JMMAKLBG@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?2?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x180016298: "JetInit" ??_C@_1BA@IKNDFEAJ@?$AAJ?$AAe?$AAt?$AAI?$AAn?$AAi?$AAt?$AA?$AA@
0x180014C30: RPCRT4_NULL_THUNK_DATA
0x180015A30: "%systemroot%\ServiceProfiles\Net" ??_C@_1MC@KEENDCBK@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAs?$AA?2?$AAN?$AAe?$AAt@
0x180013350: pSetupConcatenatePaths
0x180005EFF: "__cdecl _imp_load_JetAttachDatabaseW" __imp_load_JetAttachDatabaseW
0x1800055F0: "__cdecl _report_gsfailure" __report_gsfailure
0x180015238: "__cdecl _imp_EtwEventWrite" __imp_EtwEventWrite
0x1800110D4: RtlInitLUnicodeStringFromNullTerminatedString
0x180001B30: "public: virtual bool __cdecl CVssWriter::OnBackupShutdown(struct _GUID) __ptr64" ?OnBackupShutdown@CVssWriter@@UEAA_NU_GUID@@@Z
0x180015210: "__cdecl _imp_NtOpenFile" __imp_NtOpenFile
0x180002570: "public: virtual void * __ptr64 __cdecl CSystemWriter::`vector deleting destructor'(unsigned int) __ptr64" ??_ECSystemWriter@@UEAAPEAXI@Z
0x1800210C8: "__cdecl _imp_JetMove" __imp_JetMove
0x180014FB0: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800129FC: pSetupStringTableEnum
0x1800154A0: "catdb" ??_C@_1M@MPJDAFII@?$AAc?$AAa?$AAt?$AAd?$AAb?$AA?$AA@
0x1800046FC: "private: bool __cdecl CSystemWriter::Uninitialize(void) __ptr64" ?Uninitialize@CSystemWriter@@AEAA_NXZ
0x180005E6E: "__cdecl _tailMerge_esent_dll" __tailMerge_esent_dll
0x180017470: "sfc_os.dll" ??_C@_1BG@OHDPLNNN@?$AAs?$AAf?$AAc?$AA_?$AAo?$AAs?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x180015388: "|" ??_C@_13PPFCDPMH@?$AA?$HM?$AA?$AA@
0x180016358: "SyncDB:: AddCatalog: " ??_C@_1CM@LBIPICLP@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAA?$AAd?$AAd?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?3?$AA?5?$AA?$AA@
0x180021168: "__cdecl _imp_QueryServiceConfigW" __imp_QueryServiceConfigW
0x18001E6F0: "__cdecl _native_startup_state" __native_startup_state
0x1800154F0: "EnablePerformanceCounters" ??_C@_1DE@OJGINGMH@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAP?$AAe?$AAr?$AAf?$AAo?$AAr?$AAm?$AAa?$AAn?$AAc?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1800159F0: CAPI2_CATDB_REBUILD_DATABASE_START_EVENT
0x18000D878: "unsigned long __cdecl _CatDBCanWriteToPath(unsigned short const * __ptr64)" ?_CatDBCanWriteToPath@@YAKPEBG@Z
0x18000CE50: s_SSCatDBAddCatalog2
0x180005F59: "__cdecl _imp_load_JetDetachDatabaseW" __imp_load_JetDetachDatabaseW
0x18000318C: "unsigned long __cdecl _CatDBInstanceCount(unsigned short const * __ptr64)" ?_CatDBInstanceCount@@YAKPEBG@Z
0x18001E7C0: "unsigned short * __ptr64 __ptr64 g_pwszCatalogFileBaseDirectory" ?g_pwszCatalogFileBaseDirectory@@3PEAGEA
0x180021140: "__cdecl _imp_OpenSCManagerW" __imp_OpenSCManagerW
0x180015C68: "SHA256" ??_C@_1O@HECGKAIN@?$AAS?$AAH?$AAA?$AA2?$AA5?$AA6?$AA?$AA@
0x180014E80: "__cdecl _imp_ExitThread" __imp_ExitThread
0x180021080: "__cdecl _imp_JetGetDatabaseFileInfoW" __imp_JetGetDatabaseFileInfoW
0x180014EB0: "__cdecl _imp_SetThreadPriority" __imp_SetThreadPriority
0x18001BFE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-datetime-l1-1-0
0x1800158C0: "__cdecl _sz_api_ms_win_security_sddl_l1_1_0_dll" __sz_api_ms_win_security_sddl_l1_1_0_dll
0x18000C35C: "int __cdecl _CatDBSync(long * __ptr64)" ?_CatDBSync@@YAHPEAJ@Z
0x18001BF34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180014EA0: "__cdecl _imp_OpenThreadToken" __imp_OpenThreadToken
0x180005CF6: "__cdecl _imp_load_OpenSCManagerW" __imp_load_OpenSCManagerW
0x1800210A0: "__cdecl _imp_JetAttachDatabaseW" __imp_JetAttachDatabaseW
0x1800183B0: "AddWin32ServiceFiles: Unable to " ??_C@_1MC@PPLMPMF@?$AAA?$AAd?$AAd?$AAW?$AAi?$AAn?$AA3?$AA2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5@
0x18001E770: "int g_fJetDBServiceStop" ?g_fJetDBServiceStop@@3HA
0x180014E40: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x180016FA0: "TraverseDir : Unable to push sub" ??_C@_1FG@IMHJGKKM@?$AAT?$AAr?$AAa?$AAv?$AAe?$AAr?$AAs?$AAe?$AAD?$AAi?$AAr?$AA?5?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5?$AAp?$AAu?$AAs?$AAh?$AA?5?$AAs?$AAu?$AAb@
0x180019BB8: "setupapi.offline.log" ??_C@_1CK@ENDBLDLE@?$AAs?$AAe?$AAt?$AAu?$AAp?$AAa?$AAp?$AAi?$AA?4?$AAo?$AAf?$AAf?$AAl?$AAi?$AAn?$AAe?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x1800162C0: "SyncDB:: DeleteCatalog: " ??_C@_1DC@HNLCJFND@?$AAS?$AAy?$AAn?$AAc?$AAD?$AAB?$AA?3?$AA?3?$AA?5?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAC?$AAa?$AAt?$AAa?$AAl?$AAo?$AAg?$AA?3?$AA?5?$AA?$AA@
0x180016D10: "CoInitializeEx failed in Unitial" ??_C@_1EK@DPNFOBLN@?$AAC?$AAo?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAE?$AAx?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAi?$AAn?$AA?5?$AAU?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl@
0x180005FC5: "__cdecl _imp_load_JetSetCurrentIndexW" __imp_load_JetSetCurrentIndexW
0x18001B658: "__cdecl _DELAY_IMPORT_DESCRIPTOR_ESENT_dll" __DELAY_IMPORT_DESCRIPTOR_ESENT_dll
0x18001B7A0: ESENT_NULL_THUNK_DATA_DLN
0x18000B7E8: "int __cdecl _CatDBIterateOverCTL(struct _JET_DB_STRUCT * __ptr64,struct _CTL_CONTEXT const * __ptr64,unsigned short const * __ptr64,int (__cdecl*)(struct _JET_DB_STRUCT * __ptr64,struct JET_DB_HASH_TABLE_IDS * __ptr64,struct _CRYPTOAPI_BLOB * __ptr64,unsigned short const * __ptr64))" ?_CatDBIterateOverCTL@@YAHPEAU_JET_DB_STRUCT@@PEBU_CTL_CONTEXT@@PEBGP6AH0PEAUJET_DB_HASH_TABLE_IDS@@PEAU_CRYPTOAPI_BLOB@@2@Z@Z
0x18001BF5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180014C20: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x18000399C: "void * __ptr64 __cdecl _CatDBAlloc(unsigned __int64)" ?_CatDBAlloc@@YAPEAX_K@Z
0x1800153B8: "CatNameAttrTable_AttrCol" ??_C@_1DC@NCBJCOID@?$AAC?$AAa?$AAt?$AAN?$AAa?$AAm?$AAe?$AAA?$AAt?$AAt?$AAr?$AAT?$AAa?$AAb?$AAl?$AAe?$AA_?$AAA?$AAt?$AAt?$AAr?$AAC?$AAo?$AAl?$AA?$AA@
0x18001F988: GlobalAppLogData
0x180017770: "SystemShutdown initiated during " ??_C@_1GA@EOHOOBP@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAS?$AAh?$AAu?$AAt?$AAd?$AAo?$AAw?$AAn?$AA?5?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAt?$AAe?$AAd?$AA?5?$AAd?$AAu?$AAr?$AAi?$AAn?$AAg?$AA?5@
0x180018130: "AddLegacyDriverFiles: Unable to " ??_C@_1HK@JHMAHDKJ@?$AAA?$AAd?$AAd?$AAL?$AAe?$AAg?$AAa?$AAc?$AAy?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?3?$AA?5?$AAU?$AAn?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAt?$AAo?$AA?5@
0x180015120: "__cdecl _imp_free" __imp_free
0x180012698: "__cdecl pSpUtilsStringTableInitializeEx" _pSpUtilsStringTableInitializeEx
0x180005900: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180013290: "__cdecl pSpUtilsDestroySynchronizedAccess" _pSpUtilsDestroySynchronizedAccess
0x18000E2FC: "public: void * __ptr64 __cdecl Traversal::DirectoryStack::DirectoryEntry::`scalar deleting destructor'(unsigned int) __ptr64" ??_GDirectoryEntry@DirectoryStack@Traversal@@QEAAPEAXI@Z
0x180015010: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1800140E8: "const CVssWriter::`vftable'" ??_7CVssWriter@@6B@
0x180008990: "void __cdecl CatDbOfflineRebuildDatabasesRundll32W(struct HWND__ * __ptr64,struct HINSTANCE__ * __ptr64,unsigned short * __ptr64,int)" ?CatDbOfflineRebuildDatabasesRundll32W@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEAGH@Z
0x18000C128: "int __cdecl _CatDBRetrieveCatNameAttrTableCatNameColumn(struct _JET_DB_STRUCT * __ptr64,unsigned short * __ptr64)" ?_CatDBRetrieveCatNameAttrTableCatNameColumn@@YAHPEAU_JET_DB_STRUCT@@PEAG@Z
0x1800157D8: "CatRoot" ??_C@_1BA@ILLJEMFA@?$AAC?$AAa?$AAt?$AAR?$AAo?$AAo?$AAt?$AA?$AA@
0x18001BE08: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x180014CD0: "__cdecl _imp_SetFileAttributesW" __imp_SetFileAttributesW
0x180011214: RtlConvertNtFilePathToWin32FilePath
0x18001BF48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-localization-l1-2-0
0x180015000: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800132D8: "__cdecl pSpUtilsInitializeSynchronizedAccess" _pSpUtilsInitializeSynchronizedAccess
0x18001BF98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180015970: "__cdecl _sz_ext_ms_win_fs_vssapi_l1_1_0_dll" __sz_ext_ms_win_fs_vssapi_l1_1_0_dll
0x180006284: memset
0x18001C074: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180019A30: "LogPath" ??_C@_1BA@NHOPJJJG@?$AAL?$AAo?$AAg?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
0x180017DA0: "AddCorePnPFiles : Enumerating dr" ??_C@_1IE@FPDEBKPN@?$AAA?$AAd?$AAd?$AAC?$AAo?$AAr?$AAe?$AAP?$AAn?$AAP?$AAF?$AAi?$AAl?$AAe?$AAs?$AA?5?$AA?3?$AA?5?$AAE?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt?$AAi?$AAn?$AAg?$AA?5?$AAd?$AAr@
0x180017980: "%systemroot%\servicing\packages" ??_C@_1EA@PIEBPJKN@?$AA?$CF?$AAs?$AAy?$AAs?$AAt?$AAe?$AAm?$AAr?$AAo?$AAo?$AAt?$AA?$CF?$AA?2?$AAs?$AAe?$AAr?$AAv?$AAi?$AAc?$AAi?$AAn?$AAg?$AA?2?$AAp?$AAa?$AAc?$AAk?$AAa?$AAg?$AAe?$AAs?$AA?$AA@
0x180014060: "const CSystemWriter::`vftable'" ??_7CSystemWriter@@6B@

[JEB Decompiler by PNF Software]