Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 9637d80afb90d9029463d5e74cb4f20c --

Hashes
MD5: 9637d80afb90d9029463d5e74cb4f20c
SHA1: 4c723ec50dd7a096e6b2cabf6412125f52637f37
SHA256: bc42a54e4f6598ab5babba24e4b30ecf1792e1328539f39198bc344d36ab1fab
SSDEEP: 6144:ESTtf4jfBXJPQAj8sEPoog8NJB7bNxNjcHaK:/Y8zgo9JxbNx1c
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Cpp_v60_DLL_additional | YRP/Microsoft_Visual_Cpp | YRP/IsPE32 | YRP/IsDLL | YRP/IsConsole | YRP/HasDebugData | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/Dropper_Strings | YRP/spreading_file | YRP/win_mutex | YRP/win_registry | YRP/win_files_operation |
Parent Files
07b8c227806b6e7d003c6ea006beb524
Strings
		!This program cannot be run in DOS mode.
`.data
.shared
@.reloc
BLOB_TYPE_CONTAINER
BLOB_TYPE_HASHLIST
BLOB_TYPE_PATHTREE
BLOB_TYPE_CONFIG
System\Restore\StMgr.exe
AlwaysCompress
BroadcastTestMessages
TestKeys
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\TestKeys
Msg_TestDiskMonitor
Msg_TestThawSM
Msg_TestFreezeSM
Msg_TestCurrentDSSize
Msg_TestStopFIFO
Msg_TestStartFIFO
Msg_TestStopCabbing
Msg_TestStartCabbing
CABDONE
VERSION
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\Cfg\Cabbing
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\Cfg\ReservedDiskSpace
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\Cfg\RegSnapShotInterval
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\Cabbing
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\ReservedDiskSpace
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr\RegSnapShotInterval
Compression
TotalFileSizePerCab
CheckInterval
InitialWait
Cabbing
Status
DiskUsage
AbsoluteValue
Percent
ReservedDiskSpace
RegSnapShotInterval
SOFTWARE\Microsoft\Windows\CurrentVersion\StateMgr
C:\_RESTORE\LOGS
C:\_RESTORE\TEMP
C:\_RESTORE
C:\WINDOWS
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
VxDMon.cfg
VxdCfg
Microsoft PC State Manager
STATEMGRPROC
\System\Restore\StateMgr.exe
OOBEInProgress
DelayFirstRstpt
FirstRun
*StateMgr
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
VxDMon.dat
VxdDat
*VxDMon
\System\VxDMon.vxd
TempDir
LogDir
StaticVxD
System\CurrentControlSet\Services\VxD\VxDMon
\System\Restore\DataStor.ini
DSROOT
DSINFO.DAT
EXTRACT
ARCHIVE
_RESTORE
rstrs2l.dat
SystemRestore
VxdCdPage
Microsoft System Restore Shell Execute Hook
{cadf41b6-f13d-11d2-83af-0060b057ca9b}
VxdDoNotOptimizeDelete
szIgnorePaths
Software\Missing Sock\Undo
Unknown error
Failure compressing data
Client requested abort
Could not create cabinet file
Unknown compression type
Could not create a temporary file
Insufficient memory in FCI
Failure reading file to be stored in cabinet
Failure opening file to be stored in cabinet
No error
RegisterServiceProcess
KERNEL32.DLL
\ARCHIVE.LCK
ChgLogHdr
\LOGS\Stats.dat
\wininit.ini
Wininit
\vxdlog.log
RENAME_FILE
DELETE_DIR
DELETE_FILE
\wininitlog.old
\wininit.log
\lastsfp.bak
\lastsfp.dat
\vxdsfp.bak
\vxdsfp.log
\vxdlog
\vxdlast.log
First Run of System Restore
Windows Boot
Windows Shutdown
System Check Point
\FIFO.LOG
\RESTOREPT.NEW
\RESTOREPT.LOG
\REGSNAPSHOT.LOG
\Profiles
\CLASSES.DAT
\SYSTEM.DAT
\USER.DAT
\BKUPVXDLASTLOG
\BKUPWININITLOG
\BKUPLOG
RG*.CAB
FS*.CAB
CHANGE.LOG
Statemgr
LocalDisk
VXDLOG.LOG
RestoreUninstall
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
\system\vxdmon.dat
\system\restore\filelist.xml
\system\restore\vxdbuild.exe
\system\restore\utils\confirm.bat
restoreBVT
deleteSR.bat
\system\restore
\temp\deleteSR.bat
CabbingEnd_Event
Suspend_Event
Freeze_Event
Sfp_Pending_Event
Sfp_Init_Event
Synch_Event
ShutDown_Event
VxdArchive_Event
Archive_Event
SMGRProc_Mutex
ChangeLogAPI_Mutex
BootTime_Mutex
Reg_Mutex
SMInit_Mutex
CommitFSChgs_Mutex
SHEX_Mutex
SFP_Mutex
%s%ld.OUT
%s%ld.IN
\Inventory.dat
Windows Millennium
RestorRc
`Failed to create the Data Store
ConfigureSmgr failed
SR Disabled. llDefaultDSSize: %ld
SR Enabled. llDefaultDSSize: %ld
Space Assigned to DS: %ld %ld
g_smConfig.m_dwPercent: %ld
Unable to disable SR
Failed to Open HKLM; hr=%ld
Chosen Drive: %s; Free Space:  %lld
Chosen Drive: %s; Total Space: %lld
Current Drive: %s; Free Space: %ld
Free Space: %ld %ld
GetDiskFreeSpaceEx failed for Drive: %s; hr=0x%x
szDirPath: %s
Drive: %s
dwRetVal: %ld
GetLogicalDriveStrings failed; hr=0x%x
szWinDrive: %s
Z:\mpcfre\restore\src\statemgr\statemgrdll\firstrun.cpp
CFirstRun::hrCreateDS
RegSetValue failed on %s; hr=0x%x
RegCreateKeyEx failed on %s; hr=0x%x
lpszTempDirVal=%s
GetDSTemp failed
lpszLogsDirVal=%s
Out of Memory
GetDSLogDir failed
CFirstRun::SetupVxD
Shell Execute Hook initialized
RegCloseKey failed;  hr=0x%x
RegOpenKeyEx failed on %s; hr=0x%x
CFirstRun::SetupShExHook
State Manager initialized
_StrCat failed for %s and %s
CFirstRun::SetupStateMgr
Failed to delete: %s; hr=%ld
szWinLog: %s
GetWindowsDirectory failed; hr=0x%x
CFirstRun::InitFirstRun
VxD Enabled
VXDCTL_INITIALIZE_VXD failed
DeviceIoControl failed for VXDCTL_INITIALIZE_VXD
Issuing VXDCTL_INITIALIZE_VXD
DeviceIoControl failed for VXDCTL_CHECK_INIT
Issuing VXDCTL_CHECK_INIT
CreateFile failed for %s; hr=0x%x
lpszVxDPath=%s
CFirstRun::InitializeVxD
`Z:\mpcfre\restore\src\statemgr\statemgrdll\uninstall.cpp
CUninstall::Init
RegDeleteKey failed on %s; hr=0x%x
CUninstall::UnInstallVxD
State Manager Uninstalled
RegDeleteValue failed on %s; hr=0x%x
CUninstall::UninstallStateMgr
Shell Execute Hook Uninstalled
CUninstall::UninstallShExHook
Unable to destroy the data store
Failed to gain access to data store
Unable to initialize the data store
CUninstall::DestroyDS
VxD disabled
DeviceIoControl failed for VXDCTL_DISABLE_VXD
Issuing VXDCTL_DISABLE_VXD
CUninstall::DisableVxD
Error 0x%x writing to file %s
Error 0x%x creating file %s
%s%d.%s
Cannot alloc memory for FILESTOCAB
No filelist; scan and check passed
Given up
Registry file %s failed scan test attempt %d
Error %d loading registry file %s
LoadScanAndSave
`X:\_Restore
X:\_Restore\SRDISKID.DAT
\_Restore\DISKCFG.DAT
%windir%\system\setup.ini
%windir%\powerpnt.ini
%windir%\wavemix.ini
%windir%\tasks\desktop.ini
%windir%\win.ini
%windir%\system.ini
FIRSTRUNMODIFY_SETTINGSCANCELLED_OPERATION
DEVICE_DRIVER_CHANGE
WINDOWS_BOOT
WINDOWS_SHUTDOWN
CHECKPOINT
RESTORE
APPLICATION_RUN
OE_SETTING
ACCESSIBILITY_SETTING
DESKTOP_SETTING
APPLICATION_UNINSTALL
APPLICATION_INSTALL
`cannot get address for GetIdleMinutes  ec=%d
cannot get address for BeginIdleDetection  ec=%d
cannot load MSIDLE ec=%d
Z:\mpcfre\restore\src\statemgr\statemgrdll\statemgr.cpp
InitializeIdleDetection
MSIDLE
GetDSLogDir fails
Failed to get Temp Directory
Failed to get Archive Directory
CStateMgr::SetGlobalNames
ResetSR failed
BkupWininitLog failed
BkupVxDLast failed
BkupVxDLogs failed
Unable to Enable Archiving
State Manager Initialization complete
Warning! During Init - InitVxDSFPLog Failed
Restore Point log processing has failed
Drives have added / removed or formatted- reseting SR
Unable to write disk ID / Config
VxD initialization has failed
Unable to Initialize IPC for State Mgr
Failed to configure State Mgr
Failed to get Directory names 
Unable to initialize Data Store
CStateMgr::Init
Unable to write current drive configuration at %s (err: %d)
GetWindowsDirectory returned a path in an unknown format: %s
Unable to write disk id on %c: (err: %d)
Unable to create disk id on %c: (err: %d)
Unable to get windows directory. (err: %d)
Unable to create _restore dir on %c: (err: %d)
CStateMgr::WriteNewConfig
Unable to read current drive configuration from %s (err: %d)
Failed to write new config.
fixed disk %c: changed to non-fixed
Unable to read disk id from %s (err: %d)
Drive ID mismatch for %c:.  ID file reports %c:.
Disk ID present, but disk not in global config
The Disk ID file is missing on a know disk (%c:)
New disk (%c:) added to system
Unable to open current drive configuration at %s (err: %d)
CStateMgr::CheckDriveStatus
Gone below fifo trigger
Gone below freeze trigger
Windrive Free=%I64d
Not enough space for SR to function
GetDiskFreeSpaceEx failed. ec=%d
GetDSRoot failed
CStateMgr::GetDiskSpaceStatus
Setting m_fs.m_llDAlloc to g_smConfig.m_dwAbsoluteValue (%lld)
Unable to get free disk space: %d
m_fs.m_llDCur: %lld
CStateMgr::UpdateDataStoreLimits
Unable to AddFile to Cab
End of cabbing suspension signalled
SetEvent failed, Error: %ld
Failed to Freeze SR
We are out of disk space
CStateMgr::HandleCabbingErrors
ShutDown Event signalled by Message Thread
Shutdown cleanup _TMP* files
Updating usage time CommitDSInfo fails
InitFIFOStats failed
Suspend Event signalled
Error setting %s; hr=0x%x
Setting Sync Event - end of cabbing
Low Disk Condition
SR is frozen. Checking to see if we can THAW
ChkDSnPeformFIFO failed
CommitVxDRecFSChgs failed
Enough Space for SR to function
Error resetting %s; hr=0x%x
Resetting Sync Event - beginning of cabbing
No sfp processing pending
Timeout waiting for SfpPending event; hr=0x%x
PC is not idle. Cant CAB now.
PC is running on Battery. Cant CAB now.
Starting to CAB because of idle time
Failed to do restore point log CHECKPOINTING
g_dwErr: %ld
Triggering FIFO - disk space below 80MB
SR is frozen
Wait Failed
SR is Frozen
Freeze Event signalled
Disabling Compression
Wait failed; hr=0x%x
Compression Enabled for BBT
Archive Event signalled by ChgLogAPI
Wininit log Event signalled by Main Thread
FreezeSR failed
dwLastRegSnap: %ld
Updating usage time to %u
See if idle time allows for cabbing
Reached limit of acceptable vxd notifications
g_llTempFileSize: %lld
Unable to UpdateTempFileSize
Vxd Archive Event signalled
g_llSessionDiskUsage: %lld
System Restore is Frozen now
dwTimeOut: %ld ms
First Wait: %ld ms
Initial Wait: %ld ms
SR is thawed
Unable to thaw SR
dwRegSnapTimeout: %ld seconds
OpenEvent failed for: %s; hr=%ld
Starting Periodic DS Mgmt tasks
CStateMgr::PeriodicDSMgmt
Unable to open: %s. Error - %ld
ReadFile failed for %s; hr=%ld
DeleteFile failed for %s; hr=%ld
Offset in LastSfp = %ld
No leftover entries - VxDSfp.Bak missing
No leftover entries - LastSfp.Bak missing
ProcessLeftoverSfpEntries
Unable to open: %s. Error - %u
Reached end of SFP entries
Failed to Read the SFP Log Entry Page from File. Error %u
Failed to SetFilePointer - Error %u
Reached EOF - wrapping around
Sleeping for %ld milliseconds
CT=%I64d OT=%I64d
Skipping first entry
Setting FilePointer: OffsetOfPage - %u, hVxDSFPLog - 0x%X
VXDSFPLog processing has Failed!
SFP Request from VxD with Offset: %u, fProcessAll=%d
CStateMgr::SFPHandler
SFPProcessFileChanges done
Calling SFPProcessFileChanges
rgpSFPData[0]->pszTempFileName: %s
Unable to obtain DSTemp
rgpSFPData[0]->pszFileName: %s
VxD message's SeqNum: %lld
ProcessSFPEntry
WriteFile failed for %s; hr=%ld
LogLastSfp
DeviceIoControl failed for VXDCTL_INIT_COMM
DeviceIoControl failed for VXDCTL_INIT_COMM; hr=0x%x
Issuing VXDCTL_INIT_COMM command to VxD
VxD initialization was not successful
Unknown Status returned by VxD
Handle VxD intialization Status
DeviceIoControl failed for VXDCTLCHECKINIT_OUT
DeviceIoControl failed for VXDCTLCHECKINIT_OUT; hr=0x%x
Issuing VXDCTL_CHECK_INIT command to VxD
m_hVxD is NULL
CStateMgr::CheckVxdInit
m_lpszRestorePtLogPath=%s
CStateMgr::InitRestorePtLog
m_hVxDSFPLog - 0x%X m_lpSFPVirtMem - 0x%X  m_dwSFPVirtMemSize - %u
Unable to allocate Virtual Memory: Error %u
Successfully opened SFP VxD Log: %s
Opening SFP VxD Log: %s..
InitVxDSFPLog - m_hVxDSFPLog - 0x%X
CStateMgr::InitVxDSFPLog
Failed to create: %s; hr=%ld
Failed to create m_hSFPNotifyWininitEvent; hr=%ld
CreateMutex failed to create: %s
FindWindow failed; hr=0x%x
Failed to Free the resource library; hr=0x%x
All Strings loaded from resource Dll
m_szWindowClass=%s
Failed to load IDC_STATEMGRPROC from: %s; hr=0x%x
m_szTitle=%s
Failed to load IDS_APP_TITLE from: %s; hr=0x%x
Failed to load Resource Dll: %s; hr=0x%x
Loading %s
CStateMgr::InitIPC
Timeout waiting for State Manager; hr=0x%x
System did not change
Unable to release SHEX Mutex
MakeRestorePtLogEntry failed
TakeRegSnapshot failed
fChanged=%d, nSeqNum=%ld, dwVxDStatus=%ld
System is dirty
DeviceIoControl failed for VXDCTL_GET_SEQ_NUMBER
Issuing VXDCTL_GET_SEQ_NUMBER command to VxD
Performing Idle Time Check Point
m_hRegMutex is NULL
Not safe to make a restore point now
CStateMgr::AddIdleTimeCheckPt
Release Mutex failed; hr: %ld
VxD does not want State Mgr to CAB files...
Done CABBING files
Cabbing time up so exiting out
Failed to Archive Temp files
BkupLog failed
Cannot backup vxdlog.n
DeviceIoControl failed for VXDCTL_SWITCH_ACTIVELOG
Issuing VXDCTL_FLUSH_VXD_LOG command to VxD
File System is dirty
No need to worry about CABBing right now
DeviceIoControl failed for VXDCTL_GET_FS_STATUS
Issuing VXDCTL_GET_FS_STATUS command to VxD
Archiving VxD copied files
Switching vxdlog because temp directory has files
ArchiveBkupLog failed
Obtained Mutex to Access Data Store
Waiting to obtain Mutex
CABBing is disabled
CStateMgr::CommitVxDRecFSChgs
FIFO over - total amount fifoed: %I64d
Failed to delete restore points
Unable to FIFO out oldest CAB
ShutDown has been signalled
... Updated data store size requires more FIFO
UpdateSessionUsage failed
End of FIFO, check if more FIFO required
First system checkpoint deleted
 %s %s
Flushing all restore pts: llSeqNum= %I64x
Condition a) is met
FIFO still needs to happen
FIFO needs to happen
Enough space available on Data Store
Amount FIFOed = %I64d
Looping to check for cabs to FIFO
Failed to open: %s
szFIFOLog: %s
g_llTempFileSize: %ld
UpdateTempSize failed
No Need to FIFO
Checking for FIFO condition
CStateMgr::ChkDSnPerformFIFO
SendMessage failed; hr=0x%x
State Manager Process Window is not set
CStateMgr::SMIoControl
Failed to create: %s
szInFilePath: %s
GetTempPath failed; hr=%ld
lpInBuf is NULL
WriteIN
%ld BYTES read from %s
szOutFilePath: %s
CStateMgr::ReadOUT
ReadIN
CStateMgr::WriteOUT
Failed to delete: %s
CStateMgr::CleanIPC
CabRegistryFiles failed
%s is not present
LoadScanAndSave failed for: %s; error: %ld
lpszClassesDat=%s
lpszSystemDat=%s
LoadScanAndSave failed for: %s, error: %ld
%s does not exist
lpszUserDat=%s
lpszTmp1=%s
FindFirstFile failed for %s; hr=0x%x
lpszSearchPath=%s
lpszProfilesDir=%s
CreateRegSnapShot failed
regtemp
SR is not enabled.
CStateMgr::TakeRegSnapshot
CommitRegSnapShot failed
AddFileToRegSnapShot failed for %s
CabIniFiles failed
Temp=%s, NameInCab=%s
%s added to Registry snapshot
CabRegistryFiles
Unable to add mandatory file %s to reg snapshot
Cannot add %s to reg snapshot
Added %s to reg snapshot
Unable to add optional file %s to reg snapshot
CabIniFiles
Invalid Sequence Number passed: %lld
MoveFile failed; hr=%ld
Moving: %s to %s
Failed to write to New restore pt log
WriteFile failed; hr=%ld
m_llLastSeq  : %lld
m_llFirstSeq : %lld
m_dwSize     : %ld
m_bDesc    : %s
m_szCab    : %s
m_llSeqNum : %lld
FindFirstRestorePt fails
lpszNewRestorePtLogPath=%s
m_llLastSeq: %lld
m_llFirstSeq: %lld
ReadFile failed; hr=%ld
Unable to Open: %s; hr=%ld
g_lpszLogsDir: %s
m_lpszRestorePtLogPath: %s
Invalid Sequence Number: %ld
m_lpszRestorePtLogPath is NULL
InitRestorePtLog failed
CStateMgr::ModifyRestorePtLogEntry
m_dwLastSnapShotTime: %ld
m_dwStartTime: %u
CommitDSInfo fails
Cab=%s
SeqNum=%lld
Type=%ld
Size=%ld
Desc=%s
time=%s
Restore Point Log Entry::
Failed to Write Entry; %ld
SetFilePointer failed while updating header; hr=%ld
Unable to Create RestorePt.log
%s exists
m_dwSize: %ld
Creating: %s
lpszCab is NULL
CStateMgr::MakeRestorePtLogEntry
ppEntry is NULL
m_dsObj.Init failed
Obtained Mutex to Handle Commit FS Changes Request
OpenMutex failed to create: %s; hr=%ld
CStateMgr::FindFirstRestorePt
_Malloc failed
dwSize=%ld
Finished reading the restore point log
FindFirstRestorePt has not been called
CStateMgr::FindNextRestorePt
%s is not SFP protected
Calling SfpIsFileProtectedS on %s
SFP is disabled
lpszSrc is NULL
CStateMgr::ChecknNotifySFP
Cannot read SFP regkey value - SFP is enabled
SFP disabled
SR is enabled
SR is disabled
Querying: %s\%s
CStateMgr::CheckSFPSREnable
RegCloseKey failed; hr=0x%x
m_dwCompression: %ld
RegQueryValueEx failed; hr=0x%x
m_dwTotalFileSizePerCab: %ld
m_dwCheckInterval: %ld
m_dwInitialWait: %ld
m_dwStatus: %ld
m_dwMax: %ld
m_dwAbsoluteValue: %ld
m_dwPercent: %ld
m_dwMin: %ld
m_dwNext: %ld
m_dwFirst: %ld
Querying: %s
RegOpenKeyEx failed; hr=0x%x
Opening: %s
CStateMgr::InitConfig
Unable to release Reg Mutex
Failed to make restore pt log entry
Making Restore Point Log Entry
Failed to take registry snapshot
Taking Registry snapshot
Issuing VXDCTL_GET_SEQ_NUMBER to VxD
FIRSTRUN restore point already made
CStateMgr::MakeFirstRstpt
m_dwBroadcastTestMessages: %ld
CStateMgr::RegisterTestMessages
Failed to get Data Store Information
g_smConfig.m_dwMax:           %ld MB
g_smConfig.m_dwDiskUsage:     %ld MB
g_smConfig.m_dwAbsoluteValue: %ld MB
g_llTempFileSize:             %lld
g_llSessionDiskUsage:         %lld
m_fs.m_llDAlloc:              %lld
RegisterTestMessages failed
InitConfig failed
CStateMgr::InitFIFOStats
SetFileAttributes failed; hr=%ld
FIFO out %s
m_bDesc: %s
m_szCab: %s
m_llSeqNum: %lld
lpszArchiveDir is NULL
lpszCABName is NULL
CStateMgr::DeleteRestorePts
szArchiveLck: %s
CStateMgr::CheckArchiveLck
DeviceIoControl failed for VXDCTL_INITIALIZE_VXDDAT
CStateMgr::InitializeVxDDat
dwEventType: %ld is Invalid
dwRestorePtType: %ld is Invalid
dwEventType: %ld and dwRestorePtType: %ld are valid
CStateMgr::ValidateRPTInfo
Wininit.ini exists, do not take registry snapshot
OOBE in progress hence not creating restore point.
We are in SafeMode. Hence not creating the first snapshot.
CStateMgr::IsSafeToMakeRestorePt
Registry has not changed
fChanged=%d, nSeqNum=%ld, dwVxDStatus=%x
Registry is dirty
Handling Shell Event
FIRSTRUN restore point already set
END_SYSTEM_CHANGE
ModifyRestorePtLogEntry failed
RestorePoint is NOT FIRSTRUN! Hence ignoring restore point API.
OOBE Still in progress. Hence ignoring restore point API.
Not implemented
We are in SafeMode. Hence ignoring restore point API.
Invalid Restore Pt specifications
pSMgrStatus is NULL
pRestorePtSpec is NULL
CStateMgr::SRSetRestorePoint
Failed to backup: %s; hr=%ld
szBkupLog: %s
%s%s.%ld
szSearch: %s
VxDLast.log does not exist
szVxDLastLog: %s
CStateMgr::BkupVxDLast
Failed to Alloc memory for backedup Logname: %s
CloseHandle failed; hr=%ld
First Sequence Number: %lld
DeviceIoControl failed for VXDCTL_FIRST_SEQ_NUMBER
szSeqNum: %s
%s%s%ld
szWininitLog: %s
szWinDir=%s
GetWindowsDirectory failed; hr=%ld
CStateMgr::BkupWininitLog
Exception handling Wininit.log
SFPNotifyWininitLogEntries-Operation=OPR_RENAME
Path invalid during wininit processing
GetParsedPath failed for: %s
LoadVxdDat failed during wininit processing
SFPNotifyWininitLogEntries-Operation=OPR_FILE_DELETE
Ignore: %s
%s was not on a fixed disk
lpszAttr=%s
lpszDestn=%s
lpszSrc=%s
lpszOpn=%s
lpszAttr is NULL
lpszDestn is NULL
lpszOpn is NULL
Invalid quoted string
fopen failed for: %s
CStateMgr::SFPNotifyWininitLogEntries
Failed to release m_hCommitFSChgsMutex; hr: %ld
Backedup VxDLog: %s
m_hCommitFSChgsMutex is NULL
CStateMgr::SwitchVxdLog
Unable to write to %s; ec=%ld
Unable to create %s; ec=%ld
MoveFile failed for %s => %s, ec=%ld
BkupLastSfpDat
DeleteFile failed for %s, ec=%ld
DeleteLastSfpDat
szVxDLog: %s
%s%s.%d
CStateMgr::BkupVxDLogs
Compression=%ld
RegSetValue failed on %s; hr=%ld
TotalFileSizePerCab=%ld
CheckInterval=%ld
InitialWait=%ld
Status=%ld
Max=%ld
DiskUsage=%ld
AbsoluteValue=%ld
Percent=%ld
Min=%ld
RegCloseKey failed;  hr=%ld
Next=%ld
First=%ld
pData is NULL
CStateMgr::ConfigureSmgr
PC is idle
PC is active
Idle time limit is: %ld minutes
Idle time is %d minutes
CStateMgr::IsPCIdle
We are working on AC
We are on Battery
GetSystemPowerStatus failed; hr=%ld
CStateMgr::IsRunningOnBattery
Failed to make FIRSTRUN restore point
DeviceIoControl failed for VXDCTL_ENABLE_VXD
Failed to Enable SR
CleanDS failed
DisableVxD fails
CStateMgr::ResetSR
Decreased periodic thread priority after freeze
SetThreadPriority failed on periodic thread: ec=%ld
ConfigureSmgr fails
g_fRestoreInitiated is set; Aborting Freeze
CStateMgr::FreezeSR
VxD Enabled for SR
Issuing VXDCTL_ENABLE_VXD
CStateMgr::ThawSR
vxdsfp.log
File to Delete: %s
FindFirstFile failed: hr=%ld
%s\*.*
Failed to delete contents of: %s
CStateMgr::CleanDS
Unable to Freeze SR
We have to Freeze SR now
g_smConfig.m_dwMin set to: %ld
CStateMgr::CheckFreezingPt
GetSubDirDiskUsage failed
We have to update temp file size from Disk
VxD has not made any RENAMES yet
CStateMgr::UpdateTempSize
GetDiskUsage failed; hr=0x%x
g_pszDsRoot is NULL
CStateMgr::UpdateSessionUsage
%s deleted
No %s file left.
%s\%s*
CStateMgr::ClearLeftTmps
DelayFirstRstpt = %d
OOBE still in progress
OOBE has completed.
CStateMgr::CheckIfOOBEStillInProgress
Failed to Load Resource %u; hr=%ld
Failed to load: %s; hr=%ld
CStateMgr::LoadRestorePointDescription
Z:\mpcfre\restore\src\statemgr\statemgrdll\statemgrdll.cpp
SFPHandler
Garbage sent by SMgr
Unable to send Restore Point Specification to SMgr
Sending Restore Point Specification to SMgr
Unable to initialize communication with SMgr
Initializing Communication with State Mgr process
SetRestorePt
SR Enabled
Enable SR
SR disabled
Setting: %s\%s
lpData: %s cb: %ld
Disable SR
DisableSRS
SFP Disabled
DisableVxD failed
Disabling SFP
SRDisableSfp
lpszLogsDir: %s
Failed to initialize Data Store
pllSeqNum is NULL
FindFirstFIFOInfo
lpszCABName: %s
llSeqNum: %lld
%lld %s
szBuf: %s
g_fpFIFO is NULL
FindNextFIFOInfo
Failed to create: %s; hr: %ld
DisableArchiving
llSeqNum: %ld
DisableFIFOS
CPU & Mem are sufficient
CPU Frequency (%d MHz) is less than %d MHz
Physical memory (%u MB) is less than %d MB
IsFastMachine
SetupDefaultConfig
GetStateMgrDiskMaxS
SetEvent (Archive)failed; hr=%ld
dwNewMax: %ld
SetStateMgrDiskMaxS
DisableSRS failed
CheckSREnableDiskCriterion
`out of memory
We have a memory leak here...
lpszRes is NULL
lpszS2 is NULL
lpszS1 is NULL
_StrCat
dwRetVal=%ld
_StrLen
_StrCpy
`Failed to Set Attributes on %s; hr=0x%x
Setting Attributes for %s
Failed to create %s; hr=0x%x
Creating subdirectory: %s
lpszSubDir is NULL
m_lpszDSRoot is NULL
Z:\mpcfre\restore\src\statemgr\dsmgmt\datastor.cpp
CreateSubDir
Failed to Close DSInfo file
WriteFileToDS failed
DS Information is not Set
Unable to create %s; hr=0x%x
Creating %s
CDataStor::CommitDSInfo
Default value=%s set of IDS_INIFILEPATH
Default value=%s set of IDS_DSROOT
Default value=%s set of IDS_DSINFO
Default value=%s set of IDS_SFP
Default value=%s set of IDS_LOGS
Default value=%s set of IDS_ARCHIVE
Default value=%s set of IDS_TEMP
Default value=%s set of IDS_RESTORE
CDataStor::LoadRestorRc
Finished creating Data Store
CreateIniFile failed; hr=0x%x
Creating Ini File
Failed to create m_rgszSubDirs[%d]: %s; hr=0x%x
CommitDSInfo failed; hr=0x%x
Committing DS Specifications to disk
Failed to Set Attributes on m_lpszDSRoot: %s; hr=0x%x
Setting Attributes for m_lpszDSRoot: %s
Failed to create m_lpszDSRoot: %s; hr=0x%x
Creating m_lpszDSRoot: %s
m_lpszDSRoot: %s
lpszVersion is NULL
lpszDrive is NULL
CDataStor::CreateDS
Failed to Close Ini file; hr=0x%x
Ini File Created
Writing lpszBuffer to DataStor.ini
_StrCat failed; hr=0x%x
Creating lpszBuffer
Unable to Open %s; hr=0x%x
Creating ini file
Ini file not overwritten
Ini file is present
m_lpszIniFile is NULL
CDataStor::CreateIniFile
Next Cab: %ld
%ld %ld %s
No encroaching into Data Store space
User is encroaching into Data Store space
GetDSStats failed hr=0x%x
nFree: %lld
GetDiskFreeSpaceEx failed for %s; hr=0x%x
llD_MaxReserve: %lld
CloseHandle failed
ReadFile failed; hr=0x%x
Read %d bytes
Unable to open %s for reading; hr = 0x%x
m_lpszDSInfo is NULL
ppdsiData is NULL
CDataStor::GetDSInfo
Out of Memory; hr=0x%x
%d bytes read from ini file
Existing DS is consistent and valid
Data Store could not be validated
Init failed
CDataStor::InitDS
Failed to create subdirectory: %s
CheckDSInfo failed
Calling CheckDSInfo
m_rgszSubDirs[%d]: %s; does not exist
DS Inconsistent: m_lpszDSRoot='%s' does not exist
DS Inconsistent: m_lpszDSRoot is NULL
CDataStor::CheckDS
CDataStor::CheckDSInfo
Stats for %s: %ld %ld
ppdssData is NULL
CDataStor::GetDSStats
CDataStor::GetDSRoot
CloseHandle failed for m_lpszDSRoot=%s; hr=0x%x
File: %s
pdwHigh is NULL
pdwLow is NULL
CDataStor::GetDiskUsage
nRetVal = %I64d
z:\mpcfre\restore\src\utils\int64utils.h
Int64Add
GetDiskUsage failed for %s
lpdwHigh is NULL
lpdwLow is NULL
CDataStor::GetSubDirDiskUsage
*ppDSLogDir=%s
ppDSLogDir is NULL
CDataStor::GetDSLogDir
*ppDSTempDir=%s
ppDSTempDir is NULL
CDataStor::GetDSTemp
CreateIniFile failed
CDataStor::HandleError
hFile is invalid
WriteFile failed; hr=0x%x
lpBuf is NULL
CDataStor::WriteFileToDS
ReadFileFmDS
Unable to change directory to %s
%s is NULL
Unable to delete %s
RemoveDirectory failed for %s; hr=0x%x
Removing %s
Changing directory to %s
CDataStor::DestroyDS
*ppszArchiveDir=%s
ppszArchiveDir is NULL
CDataStor::GetArchiveDir
%s:\%s
m_lpszIniFile=%s
GetWindowsDirectory failed. Using Default
LoadRestorRc failed
Calling LoadRestorRc
Already initialized
CDataStor::Init
CloseHandle failed for lpszPathName = %s; err=0x%x
DeleteFile failed for %s; err=0x%x
RemovingDirectory failed for %s; err=0x%x
SetFileAttributes failed for %s; err=0x%x
Unable to get current directory
FindFirstFile failed for %s
Specified path is not a directory %s
lpszPathName = %s
lpszPathName
Z:\mpcfre\restore\src\statemgr\dsmgmt\diskutils.cpp
SrUtilsRecursiveDirectoryDelete
GUID length is INCORRECT
GUID Length is correct:
Z:\mpcfre\restore\src\statemgr\dsmgmt\chglogapi.cpp
GetGuidForDrive
Out of Memory. hr: %ld
p1 is NULL
CreateElem
szBuffer: %s
wSize: %d
wPrev: %d wLast: %d
MultiByteToWideChar failed; hr=%ld
SysAllocStringLen failed; hr=%ld
nLen: %d
lpszPath is NULL
lpszDrv is NULL
GetParsedPath
lpszRetVal: %s
sz: %s
GetLongPathName failed; hr=%ld
szPrefix: %s
LFN: %s
szTmp=%s
%s%s\%s
ConvertToLFN
RequestDirAccess failed
lpszDSRoot: %s
RequestDSAccess
Unable to grant access to Data Store
DeviceIoControl failed for VXDCTL_REQUEST_ACCESS
cSize: %d
Failed to construct Parsed Path
Drive=%ld
lpszPath: %s
lpszDrv: %s
NULL lpszDir
lpszDir: %s
Failed to open: %s; hr=%ld
DataStor Init failed
ppszDSRoot is NULL
GetDSRoot
GetVxDDatPath
GetVxDCfgPath
Dir_Delete
Dir_Create
SetAttrib
Rename
Modify
Delete
Create
Unknown
`Failed to ArchiveTempFilesEx
ProcessBkupWininitLogEx failed
Out of Memory; hr=%ld
nID: %d
lpszTmp1: %s
Deal with Wininit
szLogFile: %s
BkupLog: %s
_FindFirstFile failed; hr=%ld
Z:\mpcfre\restore\src\statemgr\dsmgmt\periodictasks.cpp
CPeriodicTasks::ArchiveBkupLog
Failed to close the ChgLog
Deleting %s
CloseDelLog failed
Failed to close the VxDLog
Unable to Delete CHANGE.log
FCIDestroy() failed: code %d [%s]
UpdateChgLogHdrData failed
Failed to delete %s
FCIFlushCabinet() failed: code %d [%s]
Failed to Update the ChgLog Header
Failed to make change log entry
FCIAddFile() failed: code %d [%s]
Done with a burst of CABBing
Freeze has been signalled
FCICreate() failed: code %d [%s]
g_llSessionDiskUsage: %ld
Calling FCIAddFile to Add: %s
g_CABContext.dwMaxSize=%ld
Calling FCIAddFile for %s
dwInterval: %ld seconds
dwBurstSize: %ld
g_CABContext.dwNumFiles: %ld
Failed to delete VxD copied Tmp files
CABDONE in ChglogHdr - need to read one more entry
We are totally broken !!
m_dwCurrentRec: %ld
Skipping past seqnum: %lld
Unable to Delete: %s
Deleting: %s
szCab: %s
ReadFile failed for: %s; hr=%d
Unable to Open: %s; hr=%d
dwSize: %ld
g_szChgLogHdrPath: %s
%s\%s.%d
Failed to read past the VxDlog header
Unable to open: %s
OpenDelLog failed
g_smConfig.m_dwCompression: %ld
lpszArchiveDir=%s
lpszVxDLogPath=%s 
g_fRestoreInitiated: %ld
dwCheckInterval: %ld seconds
dwMaxCabSize: %ld
lpszTempDir is NULL
lpszVxDLogPath is NULL
CPeriodicTasks::ArchiveTempFilesEx
ppszFilePath is NULL
*ppszFilePath=%s
szTempFilePath="%s"
Unable to read TempFile Name
cbSize: %ld
Completed reading the VxDLog
nRead: %ld
ReadFile failed for: %s
m_hVxDLog is not set
CPeriodicTasks::GetNextVxDLogEntry
WriteFile failed for: %s; hr=%d
Seq No: %lld
UpdateChgLogHdrData
WriteFile failed to write all the bits to change log
WriteFile failed for: %s
g_ChgLogHdr.m_dwSize: %lld g_ChgLogHdr.m_llLastSeq: %lld
Failed to Write to %s
CPeriodicTasks::MakeChangeLogEntry
Seq#: %lld does not belong to fragment
Unable to SetAttribute for: %s; hr=%ld
Unable to Delete: %s; hr=%ld
Deleted: %s
FindFirstFile failed on %s; hr=%ld
SetAttribute FILE_ATTRIBUTE_NORMAL for: %s
Temp file does not exist
m_dwDelRec: %ld
m_llSeq: %lld
g_ChgLogHdr.m_llLastSeq: %lld
g_ChgLogHdr.m_llFirstSeq: %lld
m_lpszVxDLogPath is NULL
CPeriodicTasks::DelTmpFiles
ReadFile failed for: %s; hr=0x%x
%ld bytes read and %ld bytes written
Unable to SetFilePointer on: %s; hr=0x%x
lpszVxDCopy=%s lpszStrippedFile=%s
lpszStrippedFile is NULL
lpszVxDCopy is NULL
CPeriodicTasks::StripVxDLogHdr
Change Log Header updated
Failed to move to the begining of change log                                 hr=0x%x
Size: %ld
Last: %lld
First: %lld 
m_hChgLog is NULL
CPeriodicTasks::UpdateChgLogHdr
Failed to write to: %s
CreateFile failed for: %s; hr=0x%ld
m_lpszRegSnapShotLogPath=%s
%s or %s is still missing
%s and %s exist
szSearch1: %s
WIN.INI
SYSTEM.INI
szWinDir: %s
CPeriodicTasks::CreateRegSnapShot
m_szTmpName: %s
m_szCabName: %s
WriteFile failed for RegSnapshotLogEntry; hr=0x%ld
%s does not exist!
lpszRegDatFile=%s lpszFileName=%s lpszExtractFile=%s
g_reghfci is NULL
lpszRegDatFile is NULL
CPeriodicTasks::AddFileToRegSnapShot
DeleteFile failed for: %s
AddFileToRegSnapShot failed for: %s
CloseHandle failed to close registry snapshot log
CPeriodicTasks::CommitRegSnapShot
ReleaseMutex failed; hr=0x%x
Releasing CommitFSChgsMutex
Failed to delete %s; hr=%ld
szCABName: %s
Restore in progress. Can't FIFO now
Size: %lld
End: %lld
Begin: %lld
CreateFile failed; hr=0x%x
lpszFileName=%s
Failed to Extract: %s - assuming partial cab
Extracting %s from %s
lpszTmp=%s
This is a partial cab. Dont Throw this
m_lpszTempDir: %s
_FindFirstFile failed; hr=0x%x
lpszTmpDir is NULL
hCommitFSChgsMutex is NULL
CPeriodicTasks::FIFOOldestCAB
lpszBkupLog: %s
nCnt: %ld
Unable to backup %s; hr=%ld
lpszVxDLog: %s
lpszBkupLog is NULL
lpszVxDLog is NULL
CPeriodicTasks::BkupLog
BkupLog failed for %s
SetFilePointer failed; hr=%ld
WriteFile failed; %ld
Operation=OPR_RENAME
Destn written
Operation=OPR_FILE_ADD
Cannot copy %s to %s
nDestnDrv=%d
ConvertToLFN failed
lpszDestnPath: %s
lpszDestnDrv: %s
Destination is not well formed
%s is a directory
szSrc=%s
Begin of RENAME block
Src written
Operation=OPR_DIR_DELETE
First part of entry written
Cannot move %s to %s
SetFileAttributes failed: %ld
szTmpFileFinal: %s
szTmpFileOrg: %s
Hdr.m_dwSize: %ld
%s is excluded
m_szTemp: %s
W%07ld.CPY
Operation=OPR_FILE_DELETE
m_dwSfp: %ld
m_szProc: %s
m_dwAttrib: %x
nDrv=%d
lpszSrcPath: %s
lpszSrcDrv: %s
lpszSrcPath is NULL
lpszSrcDrv is NULL
szDestn: %s
szSrc: %s
llNextID: %lld
pszFile: %s
Issuing VXDCTL_FIRST_SEQ_NUMBER command to VxD
Header written
CreateFile failed for: %s; hr=%ld
lpszLog=%s
Unable to backup wininit.log
wininit.log does not exist
lpszWininitLogBk=%s
LoadVxdDat failed
lpszTempDir=%s
lpszWininitLog=%s
lpszWininitLog is NULL
CPeriodicTasks::ProcessBkupWininitLogEx
%s loaded
Unable to load: %s
szDatFile: %s read from registry
VxdMon.dat alread loaded
CPeriodicTasks::LoadVxdDat
pPath is excluded
Setting iType to default
Invoking MatchExtension
MatchPrefix-False
iDriveNode: %d
nDrv: %d
pPath is NULL
CPeriodicTasks::LookupInclExclInfo
vxdLogHdr.m_dwSize: %ld
Failed to read the VxDlog header
Failed to GetFileSize of: %s; hr=0x%x
CPeriodicTasks::OpenDelLog
CloseHandle failed; hr: %ld
CPeriodicTasks::CloseDelLog
ARCHIVE\%s
CPeriodicTasks::CleanupForFreeze
fci_delete: Error - err=%u
      (Above file is a later segment of a continued file)
   placed file '%s' (size %d) on cabinet '%s'
Z:\mpcfre\restore\src\statemgr\dsmgmt\restore_fci.cpp
file_placed
Copying folder to cabinet: %d%%      
Compressing: %9ld -> %9ld             
progress
current cabname: %s iCab: %d
%s%X.CAB
%s%ld.CAB
store_cab_name
Out of Memory; Error: %ld
Enough space for %s to be cabbed
Space Unavailable for %s to be CABed
GetDiskFreeSpaceEx failed for %s; hr=%ld
Obtaining Free space in %s
Temp File Size: %lld
GetFileInformationByHandle failed; hr=%ld
CreateFile failed; hr=%ld
get_open_info
`Z:\mpcfre\restore\src\statemgr\dsmgmt\cabmgmt.cpp
GetID: uID=%d for %s
CCABMgmt::GetID
FS%u.CAB
%s*.%ld
Cannot get ID from filename %s
m_uCurID: %ld
m_lpszSearch: %s
_tcsdup failed; Error: %ld
lpszSearch is NULL
CCABMgmt::_FindFirstFile
CurID=%u, hdl=0x%x
CCABMgmt::_FindNextFile
Returning %d
GetNextFileID
fdintCABINET_INFO
  next cabinet     = %s
  next disk        = %s
  cabinet path     = %s
  cabinet set ID   = %d
  cabinet # in set = %d (zero based)
fdintPARTIAL_FILE
   name of continued file            = %s
   name of cabinet where file starts = %s
   name of disk where file starts    = %s
%s NOT EXTRACTED
%s EXTRACTED
  file name in cabinet = %s 					uncompressed file size = %d
fdintCOPY_FILE
fdintCLOSE_FILE_INFO
   file name in cabinet = %s
fdintNEXT_CABINET
   name of next cabinet where file continued = %s
   name of next disk where file continued    = %s
   cabinet path name                         = %s
notification_function
FDIDestroy() failed: code %d [%s]
FDICopy() failed: code %d [%s]
Information on cabinet file '%s'
   Total length of cabinet file : %d
   Number of folders in cabinet : %d
   Number of files in cabinet   : %d
   Cabinet set ID               : %d
   Cabinet number in set        : %d
   RESERVE area in cabinet?     : %s
   Chained to prev cabinet?     : %s
   Chained to next cabinet?     : %s
FDIIsCabinet() failed: '%s' is not a cabinet
Unable to open '%s' for input
FDICreate() failed: code %d [%s]
TmpDir is NULL
cabinet_fullpath is NULL
ExtractFile
_FCITEMP
Temp name buffer is too small - %d bytes
Z:\mpcfre\restore\src\statemgr\dsmgmt\nobuffile.cpp
CNoBufFile::GetTempName
Do not support _O_APPEND...
Cannot read data, m_ibFile=%d, m_cbFile=%d
CNoBufFile::Read
Cannot write data, m_ibFile=%d
CNoBufFile::Write
Inconsistent pointers, ibNew=%d, m_ibFile=%d
Inconsistent file pointer, lRet=%d, lNewPosAlign=%d
lNewPos=%d
CNoBufFile::Seek
pszTempName: %s
CNoBufFile::EnsureFileHandle
%s\%s%ld
Found %3.3S 
`SVWj@3
tCVhl#
tCWhl#
tCVhl#
tCVhl#
t$,h|(
D$$h$(
thVhl1
t$49t$
t$Hh8;
9t$HtP
D$D;D$,
t$4WVh
D$,9D$D
_^][t	
_^][t	
D$LPhxG
t0Wh`H
t0Vh I
9D$Pw2
t$@h|M
t$HhhM
t$Th(L
D$hSUVW
t$4h|M
t$<hhM
D$Hj$P
t$4h|M
t$<hhM
9L$4u 
t$$h|M
t$,hhM
D$ QRP
`t#SUh
t#SUh!
t#SUh1
t#SUhB
t#SUhD
t#SUhU
t#SUhW
t#SUhh
t#SUhj
t#SUh{
t/WhlT
`t"PUh
L$ QRP
t$<h|M
t$DhhM
D$LPhDV
t$<h|M
t$DhhM
D$LPh4I
t(ShtX
D$$SSj
uN@j"P
`t!SUh
_^][YY
|SUVWj
hSUVWj
tgWShF#
D$$hTc
D$ Ph c
D$$Ph$$
`9\$$uQ;
_t-Whde
t$Whde
9\$ u,
YYSSSSS
_^][YY
t)SUhR
`t#SUh
t#SUh.
t/SUh<
t#SUhD
t#SUhG
t/SUhS
t#SUh[
t#SUhg
t#SUhz
t$Ph`j
`jih<k
`jqh<k
t!SUhQ
t!SUhR
t!SUhS
t!SUhT
t!SUhU
t!SUhV
t$ h`l
t!SUhW
t$$h<l
t!SUhX
9t$(u,
D(LPVh
_^][YY
_^][t	
0SUVW3
Pj4X+D$
L$$;L$H
;D$Ds;
`j5h0t
`8D$Hu
D$HSPh
D$HSPh
`j3h(y
`j7h(y
`jMh(y
`jVh(y
t$Ht#j
;D$Ps8
D$PY+D$D
D$ 9D$<
D$ Ph,
_^][YY
D$$Phh
D$$PhL
t$$hhV
vP;D$,|
;L$0w4
uM@j"P
8"u:@j"P
D$tjLP
D$tjLP
D$tjLP
D$tjLP
D$tjLP
\$H9\$8t
`SUVW3
;T$ |S
9BAANu
>.t	JNN
;CREGt&j
9RGDBt"j
SVWh 1
;RGKNt)j
??3@YAXPAX@Z
strncpy
_stricmp
sprintf
strtok
__CxxFrameHandler
_EH_prolog
fclose
fflush
fprintf
_strnicmp
toupper
strstr
strchr
sscanf
__dllonexit
_onexit
??1type_info@@UAE@XZ
MSVCRT.dll
Cabinet.dll
_SetAsyncTraceParams@16
__dwEnabledTraces
_AsyncStringTrace@12
atrace.dll
SFPProcessFileChanges
SfpIsFileProtectedS
SfpRebootIfNecessary
SfpDll.dll
InitializeCriticalSection
CreateEventA
DeleteCriticalSection
CloseHandle
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
SetEvent
GetDiskFreeSpaceExA
GetDriveTypeA
GetLastError
GetLogicalDriveStringsA
DeleteFileA
GetFileAttributesA
GetWindowsDirectoryA
DeviceIoControl
CreateFileA
lstrcpyA
WriteFile
VirtualFree
GetProcAddress
LoadLibraryA
SetFileAttributesA
CreateDirectoryA
ReadFile
ExitThread
ResetEvent
WaitForMultipleObjects
OpenEventA
GetSystemTimeAsFileTime
SetFilePointer
VirtualAlloc
GetSystemInfo
CreateMutexA
FreeLibrary
ReleaseMutex
GetTempPathA
FindNextFileA
FindFirstFileA
ExpandEnvironmentStringsA
CopyFileA
OpenMutexA
lstrcmpiA
FindClose
MoveFileA
GetLongPathNameA
lstrlenA
GetSystemPowerStatus
SetThreadPriority
GetCurrentThread
LoadLibraryExA
DisableThreadLibraryCalls
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatus
HeapAlloc
GetProcessHeap
HeapFree
RemoveDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrlenW
MultiByteToWideChar
GetFileSize
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileInformationByHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GlobalAlloc
GlobalFree
IsDBCSLeadByte
KERNEL32.dll
wsprintfA
GetSystemMetrics
PostMessageA
FindWindowA
LoadStringA
SendMessageA
RegisterWindowMessageA
USER32.dll
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegFlushKey
ADVAPI32.dll
wcstok
_strupr
isupper
_strdup
??2@YAPAXI@Z
printf
strrchr
_write
_close
_lseek
memset
OLEAUT32.dll
SMgr.DLL
??0CReadWriteLock@@QAE@XZ
??0CScopeRWLock@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
??0CScopeRWLock@@QAE@PAVCReadWriteLock@@W4RWLOCK_MODE@@@Z
??1CReadWriteLock@@QAE@XZ
??1CScopeRWLock@@QAE@XZ
??4CReadWriteLock@@QAEAAV0@ABV0@@Z
??4CScopeRWLock@@QAEAAV0@ABV0@@Z
?ChkDSnPerformFIFO@@YGHH@Z
?FInit@CReadWriteLock@@QAEHXZ
?LockCSUnderRead@CReadWriteLock@@QAEXXZ
?LockReadMode@CReadWriteLock@@QAEXXZ
?LockReadModeEx@CReadWriteLock@@QAEHH@Z
?LockWriteMode@CReadWriteLock@@QAEXXZ
?LockWriteModeEx@CReadWriteLock@@QAEHH@Z
?PrwLock@CReadWriteLock@@QAEPAV1@XZ
?UnlockCSUnderRead@CReadWriteLock@@QAEXXZ
?UnlockReadMode@CReadWriteLock@@QAEXXZ
?UnlockWriteMode@CReadWriteLock@@QAEXXZ
?g_dwErr@@3KA
?g_fRestoreInitiated@@3HA
?g_llSessionDiskUsage@@3_JA
?g_llTempFileSize@@3_JA
?g_lpszTempDir@@3PADA
?g_smConfig@@3U_SMConfig@@A
?g_vsn@@3VCVxdSizeNotify@@A
_CheckFreezingPt@0
_CheckSFPSREnable@0
_CheckSREnableDiskCriterion@0
_CommitVxDRecFSChgs@0
_ConfigureSMgr@4
_DeleteLastSfpDat@0
_DestroyDS@0
_DisableArchiving@4
_DisableFIFOS@8
_DisableSRS@4
_DisableVxD@4
_EnableFIFOS@0
_FindFirstFIFOInfo@8
_FindFirstRestorePt@4
_FindLastRestorePt@4
_FindNextFIFOInfo@8
_FindNextRestorePt@4
_FindPrevRestorePt@4
_FreePtr@4
_FreezeSR@0
_GetSMgrStatus@0
_GetStateMgrDiskMaxS@0
_InitConfig@0
_InitFIFOStats@0
_InitFirstRun@0
_InitSMgr@4
_InitUninstall@0
_InitializeVxD@0
_InitializeVxDDat@0
_IsPCIdle@0
_IsSFPEnabled@0
_IsSREnabledS@0
_MakeFirstRstpt@0
_PeriodicDSMgmt@0
_ProcessLeftoverSfpEntries@0
_ReadIN@12
_SFPHandler@12
_SMIoControl@24
_SRDisableSfp@4
_SRSetRestorePointS@8
_SetRestorePt@8
_SetStateMgrDiskMaxS@4
_SetupDS@0
_SetupDefaultConfig@0
_SetupShExHook@0
_SetupStateMgr@0
_SetupVxD@0
_ShutRestorePtAPI@4
_StartMonitoringFreeDiskSpace@0
_StopMonitoringFreeDiskSpace@0
_StripVxDLogHdr@8
_SwitchVxdLog@0
_UnInstallVxD@0
_UninstallShExHook@0
_UninstallStateMgr@0
_WriteOUT@12
.?AVCFirstRun@@
.?AVCUninstall@@
Z:\mpcfre\restore\src\statemgr\statemgrdll\regsnap.cpp
.?AVCPeriodicTasks@@
.?AVCStateMgr@@
.?AVtype_info@@
Z:\mpcfre\restore\src\utils\memutils.cpp
Z:\mpcfre\restore\src\utils\strutils.cpp
.?AVCDataStor@@
.?AVCCABMgmt@@
`Z:\mpcfre\restore\src\statemgr\dsmgmt\restore_fdi.cpp
`z:\mpcfre\restore\src\vxd\vxdmon\hlist.c
SOFTWARE\Microsoft\Windows\CurrentVersion\Setup
BootHost
BootDir
> >8><>T>d>h>p>
? ?8?L?\?`?d?|?
0 0<0M0k0~0
1"111D1U1c1
3)3B3N3U3Z3`3o3t3
4"5N5X5`5
6#6>6H6f6w6|6
7	7'7-7?7V7_7h7t7
8$8M8Z8|8
9N9\9h9y9
:,:9:E:O:Z:x:
;.;G;f;
< <*<2<W<\<g<t<~<
=6=?=I=Q=v=
>/>4>q>
? ?'?7?A?G?V?[?f?p?w?
0&0,060<0_0j0t0{0
1!1,161=1I1S1Y1c1s1
2=2G2N2S2b2l2|2
3)33393B3J3O3e3k3p3u3
4/4;4\4p4
5*5B5X5~5
6"6-626Z6h6u6|6
7 7'717;7A7K7[7g7q7w7
8#8*888B8H8W8\8g8q8x8
9&9:9F9P9V9_9s9
:!:&:+:G:f:q:
;.;j;v;};
<1<G<i<
=?=E=g=p=
?I?]?i?
090I0O0_0
1#1/171>1J1T1Z1d1n1w1
2,232I2S2]2c2l2t2{2
3'3R3a3k3q3~3
4'464@4F4S4i4x4
575\5}5
6=6^6w6
717:7@7a7|7
8K8Q8`8u8
9"9I9h9t9
:,:7:A:c:n:
;+;8;Z;f;w;
<(<4<><D<N<T<v<
=%=3=@=r=|=
?2?]?d?
0+050;0E0R0w0
1.1D1P1Z1`1i1
222W2s2
313<3J3P3k3q3z3
414=4G4S4X4
4'5-52575P5n5
6"6'6,6E6_6x6
737:7?7Z7q7
8$838]8
979R9X9g9l9
:B:[:z:
;$;=;K;e;k;p;
</<N<k<
>$>*>H>W>y>
?)?Q?]?v?
0(0C0I0k0~0
1*1C1X1a1
2+2C2d2w2
3 3:3?3N3g3|3
3#4)4Y4c4
5.5G5X5
666J6Z6d6j6x6
6#7H7a7f7l7q7v7
8"8b8n8x8~8
9#9<9M9R9
:0:R:[:
;	<><J<T<g<
=%=;=A=U=e=w=}=
=8>G>W>\>{>
151R1]1i1s1y1
2)23292B2Z2`2e2j2
303>3k3
4(4A4e4q4
545>5D5O5i5t5
6-636B6T6j6p6u6
707Q7`7l7v7
8:8K8[8`8w8|8
9$9)999J9j9
:(:;:I:P:r:
: ;(;-;O;o;
<7<?<I<X<z<
=&=2=A=c=j=u=
>&>H>O>Z>e>t>
>/?>?H?N?[?n?}?
0,0Z0e0
0+1L1\1
3-3P3n3
4,494Z4j4
5&5?5u5
6 616O6h6
7'7@7Y7a7u7
8'8J8e8
9V9b9q9v9
:6:O:^:e:k:
;,;<;I;V;p;w;|;
;	<<<]<
>.>4>9>I>T>\>e>~>
?'?1?<?J?T?{?
0 090H0O0U0o0u0z0
1!1'1,1w1
242B2c2z2
2/3M3R3Y3e3v3
4/454;4J4U4_4e4o4u4
5%5+5Q5X5]5c5k5s5
6E6N6Y6c6i6s6y6
8&80868@8F8m8t8y8
909a9j9u9
9&:3:[:~:
;$;9;E;O;U;s;
<"<,<2<;<^<n<x<~<
=(=1=A=K=Q=_=e=
>">5>G>k>
>,?>?`?
0;0W0q0
0#181H1l1
5*5K5y5
6 6%6*6B6
828S8d8
8&949V9b9
:0:6:B:h:n:s:
;5;U;x;
<#<H<W<x<
<0=6=@=a=w=
>)>:>T>u>
? ?8?@?E?J?Y?u?
0A0P0q0
1 1?1[1
2	2@2J2d2j2
3)3J3a3o3
4.444C4`4o4
5 6,6;6K6U6[6i6p6u6
7C7d7q7
8(8.8Z8i8
9&90969@9F9u9
:2:=:M:W:]:k:q:
;*;6;@;K;
<'<-<:<J<\<f<l<y<
<2=>=H=X=
>">.>8>C>v>
?:?D?R?i?s?
040>0H0S0\0u0
11161R1]1d1
2#2(272O2T2u2
353@3G3w3|3
4>4H4Q4p4u4
5.535B5Z5_5
6'6,6D6I6]6d6
7'707O7T7l7q7
8!898>8_8i8r8
959;9I9N9f9k9
:!:':k:z:
;-;B;S;d;
<.<X<l<
='=0=<=M=t=
>0>5>O>Z>a>}>
? ?:???^?h?q?
0$0)00070Q0V0o0x0
1-171K1[1j1
2)2G2P2j2u2
3)3/343C3]3c3h3w3
4'434D4T4m4
5!5*5>5N5X5^5k5
6B6a6f6
7)7/7>7C7j7x7
8E8S8u8
9>9M9n9
:*:8:>:D:I:c:i:n:
;!;F;U;v;
<&<L<s<y<
=(=.=X=h=x=
>'>1>7>G>^>
?0?=?W?`?
0%0;0E0K0W0^0h0r0x0
1*161@1F1O1c1s1
2^2l2v2|2
303<3F3L3U3|3
394E4|4
5$505N5Z5
5b6r6|6
6#7)757?7J7l7r7w7|7
8#888G8
8#939H9
9":.:8:>:H:N:j:p:|:
:L;f;v;
<5<J<T<u<
<#=@=M=g=r=
> >&>+>0>Q>a>g>x>
?"?6?C?H?P?t?
0)0J0k0
1?1E1Q1`1
2!2,2T2u2
3.3:3F3W3]3g3n3s3
4"404H4a4
5&5I5V5q5|5
6-6I6X6t6
7"7-7O7T7_7h7s7
8 8N8q8
9#9F9Y9
:.:>:M:^:r:{:
;2;F;g;u;
<<<X<d<
='=0=J=P=
> >8>I>Y>c>i>w>
?%?H?Q?k?t?
000<0F0L0V0^0i0r0~0
1$1*171J1P1]1b1j1p1x1
20262;2C2g2
233N3S3Z3s3
464Q4s4}4
5"5D5J5p5z5
646V6`6i6
7.7J7l7v7
8,8H8j8t8}8
9$9F9P9Y9{9
:):3:<:^:e:j:{:
;3;\;e;
<8<G<_<d<x<
=0=>=H=N=W=q={=
>%>F>W>p>
?0?9?S?Y?
000<0E0N0S0v0
1.1Y1z1
2!2:2D2L2h2{2
5,545>5I5_5w5
6%6/666;6Y6_6i6n6z6
777<7L7\7v7{7
8@8E8L8Q8r8
9<9K9^9r9y9
:*:@:S:q:w:}:
;2;H;a;x;~;
<2<9<I<S<Y<g<
=$=.=4=>=D=I=
>0>P>c>h>t>~>
?"?(?6?<?O?U?\?h?z?
$0;0L0{0
1"1'1E1N1Z1d1j1t1~1
2.23292?2F2N2T2a2r2|2
3"3,363@3J3T3^3n3
4	4%414;4A4J4Q4W4\4a4z4
4%5>5_5x5
6%6.6>6H6N6\6b6}6
7.737M7S7X7t7~7
8$8-8F8u8
9$9*9C9a9w9
:5:Q:~:
;&;B;R;\;b;o;
=(=2=8=E=c=s=y=~=
>$>3>?>W>i>o>v>
?'?/?4?;?S?Y?h?
050`0p0}0
1+121<1F1L1V1\1s1
2'2;2K2U2[2q2
253A3K3Q3\3f3y3
4(4.444K4P4U4[4a4g4m4s4y4
52575X5b5k5
6$6<6B6W6\6t6y6
777=7R7^7z7
83888Y8c8l8
9%9=9C9X9]9u9z9
:8:>:R:n:s:
;';,;M;W;`;x;~;
<+<8<C<S<_<i<o<x<
="=5=B=O=l=s=x=
>$>->A>K>V>a>r>
1 1*11171@1O1Y1`1f1o1
2F2R2Y2_2h2
3 3)3V3
4"4.454;4D4U4\4l4v4
5B5I5i5
6#616;6A6J6d6k6{6
727D7P7Z7`7s7
8!8E8R8b8x8
9$949@9Q9e9
;);D;S;n;};
<%<@<t<
=.=B=H=R=_=l=}=
> >->A>K>T>j>
?5?>?L?T?m?
0(0-0D0I0N0g0
1%1+141L1R1Z1_1f1
2(3/3G3`3
4\4h4r4x4
5'51575K5t5z5
666?6X6g6
717S7x7
868_8n8
9%9,989I9q9}9
:$:5:I:N:b:
;.;S;y;
<1<=<G<M<[<f<p<|<
=(=2=8=A=]=e=u=
>a>m>w>}>
? ?*?0?=?V?f?p?v?
0$0*0?0K0P0\0f0l0|0
1"1P1_1f1l1w1
2"2,222;2G2S2]2c2p2
353A3K3Q3]3
4$434C4M4S4a4i4
4(585B5H5U5n5~5
6(6.6;6U6_6e6p6
7'71777D7j7}7
8!8'808K8Z8i8u8
9$9*939Q9W9\9a9
:(:;:H:d:
;,;<;F;L;Z;b;
;%<7<A<G<T<k<r<z<
=C=H=m=t=
>7>C>Z>b>k>p>
?!?&?+?H?_?i?
0,0:0X0^0
1L1S1~1
2+252<2[2p2~2
4 4)404<4C4I4R4x4
6)6.6C6T6`6m6}6
7(7=7O7]7
8E8Q8g8v8
979G9\9u9
: :/:E:Z:y:
;&;?;O;W;i;u;
;"<.<C<
=8=[=t=
>">:>J>^>l>
? ?&?,?<?M?n?
0&0G0T0u0
1	2&262@2F2S2e2k2p2u2
293E3O3U3^3q3y3
4>5L5S5X5^5f5n5
686?6D6g6~6
7%777S7f7o7t7
7+8E8K8_8l8
9n9t9~9
:":(:-:5:N:Z:i:u:
;=;L;e;m;};
;2<><H<S<h<
='=2=8=C=H=W=\=j=p=|=
>'><>M>`>n>v>
>'?4?N?T?Y?i?
030<0]0q0
0(1A1g1q1z1
2 2'2,222?2L2f2m2r2
2#323B3I3U3Z3`3x3
4*434>4J4a4{4
565E5b5
6#6=6B6G6T6n6y6
6!7B7_7y7~7
8)858:8@8H8N8X8^8p8{8
9	9&949;9a9{9
:%:?:W:p:
;(;G;a;m;r;
<$<0<5<E<P<h<
<*=9=F=K=c=}=
> >)>B>W>q>
?1?6?E?K?T?m?r?
0 0%0*0<0m0y0
1'1-1:1I1V1\1a1k1
222?2d2
3;3e3v3
4*4:4P4j4v4
5 5,5A5
6!6(676<6S6a6g6s6~6
7,7I7X7c7h7
7-8:8Z8p8
83989=9q9|9
:&:@:F:K:Z:t:z:
<A<O<u<
=<=e=p=
>	?"?1?n?z?
070U0u0
1F1P1j1w1
222V2c2s2
4,4F4L4Q4`4z4
5(5>5J5T5v5
63696>6M6g6l6
7%717;7A7J7i7r7x7
898O8_8d8
90969;9B9H9W9c9i9n9s9x9}9
:*:X:o:
;&;;;T;Z;f;t;
<&<0<6<?<Y<`<l<v<|<
<	=#=;=B=G=L=\=o=
?%?C?R?p?
080^0k0
1"1I1]1b1j1{1
2<2T2n2z2
3$3*3/3?3P3`3f3k3w3
4+4;4B4G4M4U4a4w4
4!5-5A5
676>6C6d6s6
7?7i7w7
8)888U8i8w8
949;9@9d9s9
:':8:B:Z:g:s:
;-;A;H;T;h;
<J<V<`<f<o<
= =(=L=n=~=
=.>k>w>
?(?.?7?Y?_?d?p?
010@0`0~0
151B1h1
2)2I2d2q2
2	3#3-3Z3a3
5!5(5-5Q5{5
6 606>6
7'7O7]7~7
878P8i8y8
9#9-9R9t9
9':8:Q:
;';7;L;b;j;
<#<7<A<U<s<
=7=H=M=t=
>2>W>^>c>
?)?F?_?i?
S0Z0_0l0
1,151^1o1
172P2{2
3,3;3X3z3
4-4;4\4k4
5"525B5I5V5f5{5
6+6@6b6r6
6:7S7x7
888H8X8
9@9]9f9v9
:@:G:p:z:
;.;=;Z;
><>C>d>
?2?@?x?~?
262M2V2b2z2
2%353?3E3R3o3z3
4(41474G4Q4W4g4q4w4|4
525n5z5
767O7j7
8'81878A8R8h8x8~8
9)9/9;9i9t9
:%:*:@:E:J:P:X:^:g:
;$;3;P;_;x;};
<%<*</<4<<=S=]=e=s={=
>&>0>6>D>h>t>~>
>!?>?C?L?[?j?o?x?
0%03090G0R0W0g0q0w0
1A1Z1a1
2-2:2W2k2
4#4'4+4/43474J4
535>5Y5l5v5
6&60666?6K6U6_6e6n6
747C7O7f7
8)8@8G8T8g8
9&9;9B9N9f9
;$;3;=;C;O;h;m;t;
<!</<<<H<^<m<
=/=J=^=j=q=w=
>">=>I>S>Y>b>i>q>~>
?)?3?9?I?q?v?
!070m0
131[1j1t1
2 2$2]2@3
7(72787M7
8/898?8N8^8j8t8z8
9!9'919
:/:?:I:O:e:
:I;O;U;[;b;i;n;};
U0`0y0
0]1j1u1
1/2M2I5
?(?@?\?h?
0 0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5
6 6$6(6,606
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>h>l>p>t>x>|>
dll\SMgr.dbg
tore\target\i386\SMgr.dll