Generated by JEB on 2019/08/01

PE: C:\Windows\System32\clfsw32.dll Base=0x180000000 SHA-256=303B38CA799930D86F9AA5CD6455562CC50881C74F3DED8E2C753288A222F8A3
PDB: clfsw32.pdb GUID={D230AF4E-E9AA-953F-B7FD28221C2894D2} Age=1

402 located named symbols:
0x18000D96C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x18000F378: "__cdecl _imp_EtwUnregisterTraceGuids" __imp_EtwUnregisterTraceGuids
0x18000D790: "__cdecl FindPESection" _FindPESection
0x18000D070: "public: virtual __cdecl std::bad_alloc::~bad_alloc(void) __ptr64" ??1bad_alloc@std@@UEAA@XZ
0x18000F6C0: "CreateLogFile" ??_C@_0O@NPCOECLO@CreateLogFile?$AA@
0x18000F2E8: "__cdecl _imp_??1exception@@UEAA@XZ" __imp_??1exception@@UEAA@XZ
0x18000B68C: "private: unsigned long __cdecl CClfsMarshallingContext::AppendRecord(struct _CLS_WRITE_ENTRY * __ptr64,unsigned long,unsigned long,unsigned long,__int64 * __ptr64 const,unsigned long,struct _CLFS_RECORD_HEADER * __ptr64 & __ptr64,unsigned long & __ptr64,unsigned long & __ptr64,unsigned long & __ptr64) __ptr64" ?AppendRecord@CClfsMarshallingContext@@AEAAKPEAU_CLS_WRITE_ENTRY@@KKKQEA_JKAEAPEAU_CLFS_RECORD_HEADER@@AEAK33@Z
0x1800113EC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x18000F7E0: "***Reached end of file for log f" ??_C@_1FG@HJBOEDOO@?$AA?$CK?$AA?$CK?$AA?$CK?$AAR?$AAe?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?5?$AAe?$AAn?$AAd?$AA?5?$AAo?$AAf?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAf@
0x18000DC7C: "__cdecl local_unwind" _local_unwind
0x180004A20: ReadLogRecord
0x180006FA4: "public: void * __ptr64 __cdecl CLogIocb::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCLogIocb@@QEAAPEAXI@Z
0x180007294: WPP_SF_slqqdd
0x180012070: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000A7F8: "private: unsigned long __cdecl CClfsMarshallingContext::ValidateLogBase(union _CLS_LSN const & __ptr64) __ptr64" ?ValidateLogBase@CClfsMarshallingContext@@AEAAKAEBT_CLS_LSN@@@Z
0x18000F1C8: "__cdecl _imp_DeviceIoControl" __imp_DeviceIoControl
0x18000F190: "__cdecl _imp_HeapDestroy" __imp_HeapDestroy
0x180003180: AlignReservedLog
0x18000D0E0: "protected: virtual void __cdecl std::bad_alloc::_Doraise(void)const __ptr64" ?_Doraise@bad_alloc@std@@MEBAXXZ
0x18000D19C: "__cdecl CRT_INIT" _CRT_INIT
0x18000F1F8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x18000DB27: "__cdecl _CxxFrameHandler3" __CxxFrameHandler3
0x180012A48: "void * __ptr64 __ptr64 g_hHeap" ?g_hHeap@@3PEAXEA
0x18000D03C: "public: __cdecl std::bad_alloc::bad_alloc(void) __ptr64" ??0bad_alloc@std@@QEAA@XZ
0x18000F3A0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x18000D0D0: "void __cdecl operator delete[](void * __ptr64)" ??_V@YAXPEAX@Z
0x180001700: WppControlCallback
0x18000DCB0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800011A0: "unsigned char __cdecl ClfsTokenizeStreamNames(struct _UNICODE_STRING const & __ptr64,struct _UNICODE_STRING & __ptr64,struct _UNICODE_STRING & __ptr64)" ?ClfsTokenizeStreamNames@@YAEAEBU_UNICODE_STRING@@AEAU1@1@Z
0x18000FEA0: WPP_2101da009c8933a325b76570b738ac0b_Traceguids
0x180006480: LsnRecordSequence
0x18000CB18: "public: unsigned long __cdecl CClfsArchiveContext::Initialize(void * __ptr64,union _CLS_LSN const & __ptr64,union _CLS_LSN const & __ptr64,unsigned short * __ptr64,unsigned long,unsigned long & __ptr64) __ptr64" ?Initialize@CClfsArchiveContext@@QEAAKPEAXAEBT_CLS_LSN@@1PEAGKAEAK@Z
0x180006340: RegisterForLogWriteNotification
0x18000CF54: "public: unsigned long __cdecl CLogIocb::Initialize(class CClfsMarshallingContext * __ptr64 const,unsigned long,void * __ptr64,void * __ptr64 (__cdecl*)(unsigned long,void * __ptr64),void (__cdecl*)(void * __ptr64,void * __ptr64),void * __ptr64) __ptr64" ?Initialize@CLogIocb@@QEAAKQEAVCClfsMarshallingContext@@KPEAXP6APEAXK1@ZP6AX11@Z1@Z
0x1800068E8: "public: unsigned long __cdecl CLogIocb::NextRecord(void) __ptr64" ?NextRecord@CLogIocb@@QEAAKXZ
0x18000F3C0: "__cdecl _imp_EtwGetTraceLoggerHandle" __imp_EtwGetTraceLoggerHandle
0x18000FAF0: "Previous LSN: %x.%x.%x " ??_C@_1DA@MEOKLJDP@?$AAP?$AAr?$AAe?$AAv?$AAi?$AAo?$AAu?$AAs?$AA?5?$AAL?$AAS?$AAN?$AA?3?$AA?5?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x18000F1D8: "__cdecl _imp_GetModuleFileNameA" __imp_GetModuleFileNameA
0x18000FC90: "+===============================" ??_C@_1IK@NEOLNICI@?$AA?$CL?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN@
0x1800064A0: LsnInvalid
0x180001030: LsnLess
0x18000F358: "__cdecl _imp_RtlEnterCriticalSection" __imp_RtlEnterCriticalSection
0x18000F698: "%BLF%\" ??_C@_1O@GBFLBDJ@?$AA?$CF?$AAB?$AAL?$AAF?$AA?$CF?$AA?2?$AA?$AA@
0x18000F400: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180006AAC: "public: int __cdecl CFlushQ::IsEmpty(void) __ptr64" ?IsEmpty@CFlushQ@@QEAAHXZ
0x180003960: GetLogReservationInfo
0x180007364: "unsigned long __cdecl NtPrintLogRecordHeader(struct _iobuf * __ptr64 const,struct _CLFS_RECORD_HEADER const & __ptr64)" ?NtPrintLogRecordHeader@@YAKQEAU_iobuf@@AEBU_CLFS_RECORD_HEADER@@@Z
0x18000FC50: "-CONTINUATION-" ??_C@_1BO@HMOEHKDN@?$AA?9?$AAC?$AAO?$AAN?$AAT?$AAI?$AAN?$AAU?$AAA?$AAT?$AAI?$AAO?$AAN?$AA?9?$AA?$AA@
0x18000D776: "__cdecl XcptFilter" _XcptFilter
0x180003D50: PrepareLogArchive
0x18000F408: "__cdecl _xc_a" __xc_a
0x1800082C4: "private: unsigned long __cdecl CClfsMarshallingContext::AppendWriteBlockToFlushQueue(unsigned char,unsigned long,struct _OVERLAPPED * __ptr64) __ptr64" ?AppendWriteBlockToFlushQueue@CClfsMarshallingContext@@AEAAKEKPEAU_OVERLAPPED@@@Z
0x18000FC70: "-LAST-" ??_C@_1O@OCFNBHD@?$AA?9?$AAL?$AAA?$AAS?$AAT?$AA?9?$AA?$AA@
0x18000F3C8: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x18000FB20: "Length of Next Undo Record: %#0." ??_C@_1EI@GGEBLEEK@?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?5?$AAo?$AAf?$AA?5?$AAN?$AAe?$AAx?$AAt?$AA?5?$AAU?$AAn?$AAd?$AAo?$AA?5?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?3?$AA?5?$AA?$CF?$AA?$CD?$AA0?$AA?4@
0x18000F198: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x180001060: LsnGreater
0x180005EC0: RemoveLogPolicy
0x18000D71C: "__cdecl callnewh" _callnewh
0x180004210: TerminateLogArchive
0x18000F318: "__cdecl _imp_wcsncmp" __imp_wcsncmp
0x18000DC88: memcpy
0x18000F2A0: "__cdecl _imp_memset" __imp_memset
0x18000D94F: "__cdecl initterm" _initterm
0x18000FD20: "User Record Data: Empty user buf" ??_C@_1EM@KGDCJGII@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?5?$AAE?$AAm?$AAp?$AAt?$AAy?$AA?5?$AAu?$AAs?$AAe?$AAr?$AA?5?$AAb?$AAu?$AAf@
0x1800052B0: CloseAndResetLogFile
0x18000D014: "public: __cdecl std::bad_alloc::bad_alloc(class std::bad_alloc const & __ptr64) __ptr64" ??0bad_alloc@std@@QEAA@AEBV01@@Z
0x180002CE0: TruncateLog
0x1800114C8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x180012A78: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x18000F248: "__cdecl _imp_Sleep" __imp_Sleep
0x18000F958: CLFS_LSN_NULL
0x18000F428: "__cdecl _xi_z" __xi_z
0x18000F288: "__cdecl _imp___iob_func" __imp___iob_func
0x180007690: LsnIncrement
0x18000F148: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x18000F3E0: "__cdecl _imp_EtwRegisterTraceGuidsW" __imp_EtwRegisterTraceGuidsW
0x18000D676: "__cdecl _C_specific_handler" __C_specific_handler
0x18000FA90: "Record Flags: %#0.4x " ??_C@_1CM@GBJJBLAD@?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAF?$AAl?$AAa?$AAg?$AAs?$AA?3?$AA?5?$AA?$CF?$AA?$CD?$AA0?$AA?4?$AA4?$AAx?$AA?6?$AA?$AA@
0x18000FC80: " " ??_C@_13LBAGMAIH@?$AA?6?$AA?$AA@
0x18000F1A8: "__cdecl _imp_InterlockedPopEntrySList" __imp_InterlockedPopEntrySList
0x18000F188: "__cdecl _imp_HeapFree" __imp_HeapFree
0x180012610: WPP_REGISTRATION_GUIDS
0x18000F948: WPP_ThisDir_CTLGUID_ClfsLog
0x18000FA30: "Record Length: %#0.8x " ??_C@_1CO@MENMAIBL@?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AA?3?$AA?5?$AA?$CF?$AA?$CD?$AA0?$AA?4?$AA8?$AAx?$AA?6?$AA?$AA@
0x18000F170: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x18000DB8C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x18000CA98: "public: unsigned long __cdecl CClfsArchiveContext::Release(void) __ptr64" ?Release@CClfsArchiveContext@@QEAAKXZ
0x1800042E0: ValidateLog
0x180004F40: "unsigned long __cdecl NtReadLogRestartAreaInternal(void * __ptr64,union _CLS_LSN * __ptr64,void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64,unsigned char,struct _OVERLAPPED * __ptr64)" ?NtReadLogRestartAreaInternal@@YAKPEAXPEAT_CLS_LSN@@0KPEAK0EPEAU_OVERLAPPED@@@Z
0x180012618: WPP_MAIN_CB
0x18000FE10: "CClfsMarshallingContext::Allocat" ??_C@_0CG@JCPICMEN@CClfsMarshallingContext?3?3Allocat@
0x1800114DC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-base-l1-1-0
0x18000D782: "__cdecl amsg_exit" _amsg_exit
0x18000F2D8: "__cdecl _imp__callnewh" __imp__callnewh
0x1800032D0: FreeReservedLog
0x18000F5A0: "struct std::nothrow_t const std::nothrow" ?nothrow@std@@3Unothrow_t@1@B
0x180006420: LsnCreate
0x180005F80: SetLogFileSizeWithPolicy
0x180002FA0: ScanLogContainers
0x1800026F0: RemoveLogContainer
0x180002260: AddLogContainer
0x18000F388: "__cdecl _imp_RtlPrefixUnicodeString" __imp_RtlPrefixUnicodeString
0x18000F5D0: "bad allocation" ??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
0x180004100: GetNextLogArchiveExtent
0x18000F290: "__cdecl _imp__local_unwind" __imp__local_unwind
0x18000F228: "__cdecl _imp_CreateEventA" __imp_CreateEventA
0x18000F158: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180003750: ReadPreviousLogRestartArea
0x18000FC30: "-START-" ??_C@_1BA@MKBKKHJM@?$AA?9?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?9?$AA?$AA@
0x180009454: "public: unsigned long __cdecl CClfsMarshallingContext::ReadLogRecord(union _CLS_LSN const & __ptr64,enum _CLFS_CONTEXT_MODE,struct _CLFS_RECORD_HEADER * __ptr64 & __ptr64,void * __ptr64 & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadLogRecord@CClfsMarshallingContext@@QEAAKAEBT_CLS_LSN@@W4_CLFS_CONTEXT_MODE@@AEAPEAU_CLFS_RECORD_HEADER@@AEAPEAXPEAU_OVERLAPPED@@@Z
0x18000934C: "public: unsigned long __cdecl CClfsMarshallingContext::ReserveLogSpace(__int64 const & __ptr64) __ptr64" ?ReserveLogSpace@CClfsMarshallingContext@@QEAAKAEB_J@Z
0x18000F350: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x18000F208: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x18000F760: "***Log record dump completed suc" ??_C@_1HM@DMHPGGDP@?$AA?$CK?$AA?$CK?$AA?$CK?$AAL?$AAo?$AAg?$AA?5?$AAr?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?5?$AAc?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AAd?$AA?5?$AAs?$AAu?$AAc@
0x180012A68: "__cdecl _native_startup_lock" __native_startup_lock
0x180001788: DllMain
0x18000DBF0: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x18000F328: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x18000F340: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x18000F1E8: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800086CC: "public: unsigned long __cdecl CClfsMarshallingContext::WriteRestartArea(void * __ptr64,unsigned long,union _CLS_LSN const & __ptr64,unsigned long,unsigned long & __ptr64,union _CLS_LSN & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?WriteRestartArea@CClfsMarshallingContext@@QEAAKPEAXKAEBT_CLS_LSN@@KAEAKAEAT2@PEAU_OVERLAPPED@@@Z
0x1800021F0: DeleteLogByHandle
0x18000F140: "__cdecl _imp_GetLastError" __imp_GetLastError
0x18000D10C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x18000F168: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180012060: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000DB68: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000F3A8: "__cdecl _imp_EtwTraceMessage" __imp_EtwTraceMessage
0x180006818: "public: __cdecl CLogIocb::CLogIocb(void) __ptr64" ??0CLogIocb@@QEAA@XZ
0x180008F14: "public: unsigned long __cdecl CClfsMarshallingContext::ReserveAndAppendLog(struct _CLS_WRITE_ENTRY * __ptr64,unsigned long,unsigned long,unsigned long,__int64 * __ptr64 const,union _CLS_LSN const & __ptr64,union _CLS_LSN const & __ptr64,unsigned long,union _CLS_LSN & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReserveAndAppendLog@CClfsMarshallingContext@@QEAAKPEAU_CLS_WRITE_ENTRY@@KKKQEA_JAEBT_CLS_LSN@@2KAEAT3@PEAU_OVERLAPPED@@@Z
0x18000F1A0: "__cdecl _imp_InterlockedPushEntrySList" __imp_InterlockedPushEntrySList
0x180006618: "void __cdecl ClfsStampLogBlock(struct _CLFS_LOG_BLOCK_HEADER * __ptr64,unsigned long,unsigned long,struct _CLFS_RECORD_HEADER * __ptr64)" ?ClfsStampLogBlock@@YAXPEAU_CLFS_LOG_BLOCK_HEADER@@KKPEAU_CLFS_RECORD_HEADER@@@Z
0x18000F6A8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1800075C0: "unsigned long __cdecl NtPrintUserRecordBuffer(struct _iobuf * __ptr64,unsigned char,void * __ptr64,unsigned long)" ?NtPrintUserRecordBuffer@@YAKPEAU_iobuf@@EPEAXK@Z
0x18000F1F0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x18000F238: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x180006EE0: "private: unsigned long __cdecl CClfsMarshallingContext::AllocateIocbNaked(class CLogIocb * __ptr64 * __ptr64) __ptr64" ?AllocateIocbNaked@CClfsMarshallingContext@@AEAAKPEAPEAVCLogIocb@@@Z
0x180005190: FlushLogToLsn
0x18000D840: "__cdecl ValidateImageBase" _ValidateImageBase
0x180005DA0: RegisterManageableLogClient
0x18000D6B4: "void * __ptr64 __cdecl operator new(unsigned __int64,struct std::nothrow_t const & __ptr64)" ??2@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000D6F3: "public: __cdecl exception::exception(class exception const & __ptr64) __ptr64" ??0exception@@QEAA@AEBV0@@Z
0x18000F370: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x180004914: "unsigned long __cdecl NtAdvanceLogBaseInternal(void * __ptr64,union _CLS_LSN * __ptr64,void * __ptr64,unsigned char,struct _OVERLAPPED * __ptr64)" ?NtAdvanceLogBaseInternal@@YAKPEAXPEAT_CLS_LSN@@0EPEAU_OVERLAPPED@@@Z
0x180011464: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800053C0: DumpLogRecords
0x18000F180: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x18000D3E0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x18000DB38: "__cdecl _acrt_iob_func" __acrt_iob_func
0x18000F2B8: "__cdecl _imp__initterm" __imp__initterm
0x18000FD70: "________________ " ??_C@_1CE@HDJDGJKP@?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA_?$AA?6?$AA?$AA@
0x18000F960: "+===============================" ??_C@_1II@BHFELHPK@?$AA?$CL?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN?$AA?$DN@
0x18000A1E4: "private: unsigned long __cdecl CClfsMarshallingContext::ReadMarshalledLogRecord(class CLogIocb & __ptr64,unsigned long & __ptr64,unsigned char & __ptr64) __ptr64" ?ReadMarshalledLogRecord@CClfsMarshallingContext@@AEAAKAEAVCLogIocb@@AEAKAEAE@Z
0x18000F150: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1800039D0: AdvanceLogBase
0x180010C60: "__cdecl TI2?AVbad_alloc@std@@" _TI2?AVbad_alloc@std@@
0x1800014D8: "public: __cdecl CClfsMarshallingContext::CClfsMarshallingContext(unsigned long,unsigned long) __ptr64" ??0CClfsMarshallingContext@@QEAA@KK@Z
0x180005E50: InstallLogPolicy
0x18000D6FF: "public: virtual __cdecl exception::~exception(void) __ptr64" ??1exception@@UEAA@XZ
0x18000F8A0: "***Log record dump for log file " ??_C@_1JA@BKEODHDB@?$AA?$CK?$AA?$CK?$AA?$CK?$AAL?$AAo?$AAg?$AA?5?$AAr?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAd?$AAu?$AAm?$AAp?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAl?$AAo?$AAg?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5@
0x18000F270: "__cdecl _imp_IsValidSecurityDescriptor" __imp_IsValidSecurityDescriptor
0x18000F688: "%BLF%:" ??_C@_1O@BIFIBJOG@?$AA?$CF?$AAB?$AAL?$AAF?$AA?$CF?$AA?3?$AA?$AA@
0x180010C38: "__cdecl CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24" _CT??_R0?AVexception@@@8??0exception@@QEAA@AEBV0@@Z24
0x18000F278: "__cdecl _imp_InitializeSecurityDescriptor" __imp_InitializeSecurityDescriptor
0x180012A58: "__cdecl _onexitend" __onexitend
0x18000F360: "__cdecl _imp_NtCreateFile" __imp_NtCreateFile
0x18000F3F8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x18000F2D0: "__cdecl _imp__CxxThrowException" __imp__CxxThrowException
0x180007FB0: "public: unsigned long __cdecl CClfsMarshallingContext::PrepareForDelete(void) __ptr64" ?PrepareForDelete@CClfsMarshallingContext@@QEAAKXZ
0x18000D740: "public: virtual void * __ptr64 __cdecl type_info::`vector deleting destructor'(unsigned int) __ptr64" ??_Etype_info@@UEAAPEAXI@Z
0x180002D50: CreateLogContainerScanContext
0x18000F6B4: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1800076E0: "union _CLS_LSN __cdecl LsnDecrement(union _CLS_LSN * __ptr64)" ?LsnDecrement@@YA?AT_CLS_LSN@@PEAT1@@Z
0x18000F200: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003260: AllocReservedLog
0x18000FE90: ".blf" ??_C@_19LOFEGENC@?$AA?4?$AAb?$AAl?$AAf?$AA?$AA@
0x18000F368: "__cdecl _imp_RtlNtStatusToDosError" __imp_RtlNtStatusToDosError
0x18000F268: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x18000F418: "__cdecl _xi_a" __xi_a
0x18000F258: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003BD0: ReserveAndAppendLogAligned
0x18000CE94: "public: unsigned long __cdecl CClfsArchiveContext::GetNextExtent(struct _CLS_ARCHIVE_DESCRIPTOR * __ptr64 const,unsigned long,unsigned long & __ptr64) __ptr64" ?GetNextExtent@CClfsArchiveContext@@QEAAKQEAU_CLS_ARCHIVE_DESCRIPTOR@@KAEAK@Z
0x1800066B4: "unsigned long __cdecl ClfsFindLsnInBlock(union _CLS_LSN const & __ptr64,unsigned char * __ptr64,struct _CLFS_RECORD_HEADER * __ptr64 & __ptr64,union _CLS_LSN & __ptr64)" ?ClfsFindLsnInBlock@@YAKAEBT_CLS_LSN@@PEAEAEAPEAU_CLFS_RECORD_HEADER@@AEAT1@@Z
0x1800046C0: "unsigned long __cdecl NtWriteLogRestartAreaInternal(void * __ptr64,union _CLS_LSN * __ptr64,void * __ptr64,unsigned long,__int64 * __ptr64 const,__int64 * __ptr64,__int64 * __ptr64 const,union _CLS_LSN * __ptr64,union _CLS_LSN * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned long,struct _OVERLAPPED * __ptr64)" ?NtWriteLogRestartAreaInternal@@YAKPEAXPEAT_CLS_LSN@@0KQEA_JPEA_J211PEAK0KPEAU_OVERLAPPED@@@Z
0x18000AAC4: "private: unsigned long __cdecl CClfsMarshallingContext::AllocateIocb(enum CClfsMarshallingContext::_LOGIOCB_TYPE,class CLogIocb * __ptr64 & __ptr64) __ptr64" ?AllocateIocb@CClfsMarshallingContext@@AEAAKW4_LOGIOCB_TYPE@1@AEAPEAVCLogIocb@@@Z
0x18000F280: api-ms-win-security-base-l1-1-0_NULL_THUNK_DATA
0x180006CD4: "private: void __cdecl CClfsMarshallingContext::ReleaseFlushElements(union _CLS_LSN & __ptr64) __ptr64" ?ReleaseFlushElements@CClfsMarshallingContext@@AEAAXAEAT_CLS_LSN@@@Z
0x18000D090: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gbad_alloc@std@@UEAAPEAXI@Z
0x180010C98: "__cdecl CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24" _CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@QEAA@AEBV01@@Z24
0x180004170: ReadLogArchiveMetadata
0x180008094: "public: unsigned long __cdecl CClfsMarshallingContext::ReadRestartArea(void * __ptr64 & __ptr64,unsigned long & __ptr64,union _CLS_LSN & __ptr64,void * __ptr64 & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadRestartArea@CClfsMarshallingContext@@QEAAKAEAPEAXAEAKAEAT_CLS_LSN@@0PEAU_OVERLAPPED@@@Z
0x180012008: WPP_GLOBAL_Control
0x180011478: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x18000F178: "__cdecl _imp_HeapCreate" __imp_HeapCreate
0x18000F5F0: "\??\LOG:" ??_C@_1BC@FCACLFKI@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAL?$AAO?$AAG?$AA?3?$AA?$AA@
0x180002B60: SetLogArchiveTail
0x180012A80: "__cdecl pRawDllMain" _pRawDllMain
0x18000F2A8: "__cdecl _imp_??1type_info@@UEAA@XZ" __imp_??1type_info@@UEAA@XZ
0x18000D0D0: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x18000FC40: "-END-" ??_C@_1M@IAKBMACE@?$AA?9?$AAE?$AAN?$AAD?$AA?9?$AA?$AA@
0x18000F3B0: "__cdecl _imp_RtlInitializeCriticalSectionAndSpinCount" __imp_RtlInitializeCriticalSectionAndSpinCount
0x180006460: LsnBlockOffset
0x18000F018: "const type_info::`vftable'" ??_7type_info@@6B@
0x180011428: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x18000FE60: "CClfsMarshallingContext::AllocRe" ??_C@_0CK@HOLCAINB@CClfsMarshallingContext?3?3AllocRe@
0x18000D690: "__cdecl _security_check_cookie" __security_check_cookie
0x180003330: GetLogFileInformation
0x18000F410: "__cdecl _xc_z" __xc_z
0x18000FB68: "Record Type:" ??_C@_1BK@IBLMMLLI@?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?$AA@
0x18000F210: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003640: DeleteLogMarshallingArea
0x18000F650: "\??\LOGAPI:" ??_C@_1BI@EBHOIHK@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAL?$AAO?$AAG?$AAA?$AAP?$AAI?$AA?3?$AA?$AA@
0x18000F5E0: "\CLFS" ??_C@_1M@LGFNAMCB@?$AA?2?$AAC?$AAL?$AAF?$AAS?$AA?$AA@
0x18000FC18: "-RESTART-" ??_C@_1BE@FOHBHENB@?$AA?9?$AAR?$AAE?$AAS?$AAT?$AAA?$AAR?$AAT?$AA?9?$AA?$AA@
0x18000D728: "__cdecl CxxThrowException" _CxxThrowException
0x18000F320: "__cdecl _imp_fflush" __imp_fflush
0x18000F1D0: api-ms-win-core-io-l1-1-0_NULL_THUNK_DATA
0x18000F260: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x180004404: "unsigned long __cdecl NtReserveAndAppendLogInternal(void * __ptr64,void * __ptr64,unsigned long,__int64 * __ptr64,__int64 * __ptr64,__int64 * __ptr64 const,unsigned long,union _CLS_LSN * __ptr64,unsigned long * __ptr64,union _CLS_LSN * __ptr64,union _CLS_LSN * __ptr64,struct _CLS_INFORMATION * __ptr64,unsigned long * __ptr64,void * __ptr64,unsigned char,struct _OVERLAPPED * __ptr64)" ?NtReserveAndAppendLogInternal@@YAKPEAX0KPEA_J1QEA_JKPEAT_CLS_LSN@@PEAK33PEAU_CLS_INFORMATION@@40EPEAU_OVERLAPPED@@@Z
0x1800077A0: "public: unsigned long __cdecl CLogIocb::GetLastRecord(struct _CLFS_RECORD_HEADER * __ptr64 & __ptr64) __ptr64" ?GetLastRecord@CLogIocb@@QEAAKAEAPEAU_CLFS_RECORD_HEADER@@@Z
0x180012030: "__vectorcall ??_R0?AVbad_alloc@std@" ??_R0?AVbad_alloc@std@@@8
0x18000F638: "\CLFSAPI" ??_C@_1BC@POBBLDHM@?$AA?2?$AAC?$AAL?$AAF?$AAS?$AAA?$AAP?$AAI?$AA?$AA@
0x18000F3D8: "__cdecl _imp_EtwGetTraceEnableLevel" __imp_EtwGetTraceEnableLevel
0x1800022B0: AddLogContainerSet
0x180007A38: "public: unsigned long __cdecl CClfsMarshallingContext::Initialize(void * __ptr64,void * __ptr64 (__cdecl*)(unsigned long,void * __ptr64),void (__cdecl*)(void * __ptr64,void * __ptr64),void * __ptr64,unsigned long,unsigned long,unsigned long) __ptr64" ?Initialize@CClfsMarshallingContext@@QEAAKPEAXP6APEAXK0@ZP6AX00@Z0KKK@Z
0x18000D740: "public: virtual void * __ptr64 __cdecl type_info::`scalar deleting destructor'(unsigned int) __ptr64" ??_Gtype_info@@UEAAPEAXI@Z
0x180005D00: "unsigned long __cdecl NtQueryInformationLog(void * __ptr64,void * __ptr64,unsigned long,void * __ptr64,unsigned long * __ptr64,enum _CLS_LOG_INFORMATION_CLASS,struct _OVERLAPPED * __ptr64)" ?NtQueryInformationLog@@YAKPEAX0K0PEAKW4_CLS_LOG_INFORMATION_CLASS@@PEAU_OVERLAPPED@@@Z
0x180003A50: ReserveAndAppendLog
0x18000F618: "\GLOBAL??\LOG:" ??_C@_1BO@BJDPKIBL@?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?$DP?$AA?$DP?$AA?2?$AAL?$AAO?$AAG?$AA?3?$AA?$AA@
0x180001088: "short __cdecl ClfsStrTok(struct _UNICODE_STRING const & __ptr64,unsigned short const * __ptr64 const,struct _UNICODE_STRING & __ptr64)" ?ClfsStrTok@@YAFAEBU_UNICODE_STRING@@QEBGAEAU1@@Z
0x18000AD2C: "private: void __cdecl CClfsMarshallingContext::FreeIocb(class CLogIocb * __ptr64) __ptr64" ?FreeIocb@CClfsMarshallingContext@@AEAAXPEAVCLogIocb@@@Z
0x180004B70: ReadNextLogRecord
0x180002BD0: SetEndOfLog
0x18000F220: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x18000F430: "__cdecl _guard_fids_table" __guard_fids_table
0x18000AEB8: "private: unsigned long __cdecl CClfsMarshallingContext::Flush(void) __ptr64" ?Flush@CClfsMarshallingContext@@AEAAKXZ
0x18000B188: "public: unsigned long __cdecl CClfsMarshallingContext::FlushToLsn(union _CLS_LSN const & __ptr64,union _CLS_LSN & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?FlushToLsn@CClfsMarshallingContext@@QEAAKAEBT_CLS_LSN@@AEAT2@PEAU_OVERLAPPED@@@Z
0x180005100: FlushLogBuffers
0x18000F330: msvcrt_NULL_THUNK_DATA
0x18000F030: "__cdecl load_config_used" _load_config_used
0x18000F2F8: "__cdecl _imp_??0exception@@QEAA@AEBQEBDH@Z" __imp_??0exception@@QEAA@AEBQEBDH@Z
0x18000D090: "public: virtual void * __ptr64 __cdecl std::bad_alloc::`vector deleting destructor'(unsigned int) __ptr64" ??_Ebad_alloc@std@@UEAAPEAXI@Z
0x1800064BC: "unsigned long __cdecl ClfsDecodeBlockPrivate(struct _CLFS_LOG_BLOCK_HEADER * __ptr64,unsigned long,unsigned char,unsigned char,unsigned long & __ptr64)" ?ClfsDecodeBlockPrivate@@YAKPEAU_CLFS_LOG_BLOCK_HEADER@@KEEAEAK@Z
0x18001143C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-io-l1-1-0
0x180001010: LsnEqual
0x180005F20: DeregisterManageableLogClient
0x18000FA60: "Data Offset: %#0.4x " ??_C@_1CK@CDGEBIGD@?$AAD?$AAa?$AAt?$AAa?$AA?5?$AAO?$AAf?$AAf?$AAs?$AAe?$AAt?$AA?3?$AA?5?$AA?$CF?$AA?$CD?$AA0?$AA?4?$AA4?$AAx?$AA?6?$AA?$AA@
0x180008D7C: "public: unsigned long __cdecl CClfsMarshallingContext::AdvanceLogBase(union _CLS_LSN const & __ptr64,unsigned long,struct _OVERLAPPED * __ptr64) __ptr64" ?AdvanceLogBase@CClfsMarshallingContext@@QEAAKAEBT_CLS_LSN@@KPEAU_OVERLAPPED@@@Z
0x18000F2C0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800069DC: "public: unsigned long __cdecl CFlushQ::Enqueue(union _CLS_LSN const & __ptr64,class CLogIocb * __ptr64 const) __ptr64" ?Enqueue@CFlushQ@@QEAAKAEBT_CLS_LSN@@QEAVCLogIocb@@@Z
0x18000D710: "public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64" ?what@exception@@UEBAPEBDXZ
0x18000FBC0: "***Invalid Record Type: %#0.2x**" ??_C@_1EE@PNNKMKBG@?$AA?$CK?$AA?$CK?$AA?$CK?$AAI?$AAn?$AAv?$AAa?$AAl?$AAi?$AAd?$AA?5?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?3?$AA?5?$AA?$CF?$AA?$CD?$AA0?$AA?4?$AA2?$AAx?$AA?$CK?$AA?$CK@
0x18000F1E0: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x18000F380: "__cdecl _imp_NtClose" __imp_NtClose
0x18000F6D0: " Encountered error calling user" ??_C@_1IO@JMFIGNAN@?$AA?6?$AA?6?$AAE?$AAn?$AAc?$AAo?$AAu?$AAn?$AAt?$AAe?$AAr?$AAe?$AAd?$AA?5?$AAe?$AAr?$AAr?$AAo?$AAr?$AA?5?$AAc?$AAa?$AAl?$AAl?$AAi?$AAn?$AAg?$AA?5?$AAu?$AAs?$AAe?$AAr@
0x1800034D0: CreateLogMarshallingArea
0x18000F9F0: "Record Header at LSN: %x.%x.%x " ??_C@_1EA@ILNNIPDK@?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAH?$AAe?$AAa?$AAd?$AAe?$AAr?$AA?5?$AAa?$AAt?$AA?5?$AAL?$AAS?$AAN?$AA?3?$AA?5?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x180012A40: "private: static unsigned long CCrc32::m_ulPolynomial" ?m_ulPolynomial@CCrc32@@0KA
0x18000F338: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x18000F218: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x180004D74: "unsigned long __cdecl NtReadLogRecordInternal(void * __ptr64,union _CLS_LSN * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long * __ptr64,void * __ptr64,unsigned char,struct _OVERLAPPED * __ptr64)" ?NtReadLogRecordInternal@@YAKPEAXPEAT_CLS_LSN@@K0KPEAK0EPEAU_OVERLAPPED@@@Z
0x18000F840: "***Reached start of file for log" ??_C@_1FK@BKHIJCK@?$AA?$CK?$AA?$CK?$AA?$CK?$AAR?$AAe?$AAa?$AAc?$AAh?$AAe?$AAd?$AA?5?$AAs?$AAt?$AAa?$AAr?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAf?$AAi?$AAl?$AAe?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAl?$AAo?$AAg@
0x18000F390: "__cdecl _imp_EtwGetTraceEnableFlags" __imp_EtwGetTraceEnableFlags
0x18000F2F0: "__cdecl _imp_??0exception@@QEAA@AEBV0@@Z" __imp_??0exception@@QEAA@AEBV0@@Z
0x18000F348: "__cdecl _imp_RtlLeaveCriticalSection" __imp_RtlLeaveCriticalSection
0x18000F000: "const std::bad_alloc::`vftable'" ??_7bad_alloc@std@@6B@
0x18000CDD4: "public: unsigned long __cdecl CClfsArchiveContext::ReadMetadata(unsigned long,unsigned long,unsigned char * __ptr64,unsigned long & __ptr64) __ptr64" ?ReadMetadata@CClfsArchiveContext@@QEAAKKKPEAEAEAK@Z
0x18000F1B8: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x180005FF0: HandleLogFull
0x18000F3E8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180002730: RemoveLogContainerSet
0x18000FE38: "CClfsMarshallingContext::FreeIoc" ??_C@_0CC@DKPELAGB@CClfsMarshallingContext?3?3FreeIoc@
0x18000F678: " :" ??_C@_15NGAHEDKP@?$AA?5?$AA?3?$AA?$AA@
0x18000D960: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000FDC0: "%#0.8x " ??_C@_1BC@OGHGIIFJ@?$AA?$CF?$AA?$CD?$AA0?$AA?4?$AA8?$AAx?$AA?5?$AA?5?$AA?$AA@
0x180006AF4: "public: unsigned long __cdecl CFlushQ::UpperBound(union _CLS_LSN const & __ptr64,union _CLS_LSN & __ptr64,union _CLS_LSN & __ptr64) __ptr64" ?UpperBound@CFlushQ@@QEAAKAEBT_CLS_LSN@@AEAT2@1@Z
0x180012A50: "private: static bool CCrc32::m_fInitialized" ?m_fInitialized@CCrc32@@0_NA
0x180011450: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-interlocked-l1-1-0
0x180011414: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x18000F940: CLFS_LSN_INVALID
0x18000D6DC: "void * __ptr64 __cdecl operator new[](unsigned __int64,struct std::nothrow_t const & __ptr64)" ??_U@YAPEAX_KAEBUnothrow_t@std@@@Z
0x18000F2C8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x18000F310: "__cdecl _imp_fwprintf" __imp_fwprintf
0x18000F3F0: ntdll_NULL_THUNK_DATA
0x18000F298: "__cdecl _imp_memcpy" __imp_memcpy
0x180012010: "__vectorcall ??_R0?AVexception@" ??_R0?AVexception@@@8
0x180012000: "char const * __ptr64 const __ptr64 std::_bad_alloc_Message" ?_bad_alloc_Message@std@@3PEBDEB
0x18000DB5C: "__cdecl _iob_func" __iob_func
0x180006BEC: "private: unsigned long __cdecl CClfsMarshallingContext::CalculateReservationForRecord(unsigned __int64,unsigned __int64 & __ptr64)const __ptr64" ?CalculateReservationForRecord@CClfsMarshallingContext@@AEBAK_KAEA_K@Z
0x1800063E0: LsnNull
0x18000F1B0: "__cdecl _imp_InterlockedFlushSList" __imp_InterlockedFlushSList
0x1800114A0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x18000163C: WPP_SF_slSl
0x18000FDD8: "CClfsMarshallingContext::ReadMar" ??_C@_0DB@NHCKODDA@CClfsMarshallingContext?3?3ReadMar@
0x18000F2B0: "__cdecl _imp___CxxFrameHandler3" __imp___CxxFrameHandler3
0x180012068: "__cdecl _security_cookie" __security_cookie
0x180006400: LsnContainer
0x180009830: "public: unsigned long __cdecl CClfsMarshallingContext::ReadNextLogRecord(void * __ptr64 const,unsigned char,union _CLS_LSN * __ptr64 const,struct _CLFS_RECORD_HEADER * __ptr64 & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?ReadNextLogRecord@CClfsMarshallingContext@@QEAAKQEAXEQEAT_CLS_LSN@@AEAPEAU_CLFS_RECORD_HEADER@@PEAU_OVERLAPPED@@@Z
0x180005220: TerminateReadLog
0x18000F160: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1800033B0: SetLogArchiveMode
0x18000F608: "LOG:" ??_C@_19OFIFICPH@?$AAL?$AAO?$AAG?$AA?3?$AA?$AA@
0x180011400: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000F1C0: api-ms-win-core-interlocked-l1-1-0_NULL_THUNK_DATA
0x18000BD78: "public: unsigned long __cdecl CClfsMarshallingContext::AllocReservation(unsigned long,__int64 const & __ptr64) __ptr64" ?AllocReservation@CClfsMarshallingContext@@QEAAKKAEB_J@Z
0x180005BD0: GetLogIoStatistics
0x180012A60: "__cdecl _onexitbegin" __onexitbegin
0x180002130: DeleteLogFile
0x18000FD98: "User Record Data: " ??_C@_1CG@CBFCOMFE@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAD?$AAa?$AAt?$AAa?$AA?3?$AA?6?$AA?$AA@
0x180007924: "public: void * __ptr64 __cdecl CClfsMarshallingContext::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCClfsMarshallingContext@@QEAAPEAXI@Z
0x18000F2E0: "__cdecl _imp_?what@exception@@UEBAPEBDXZ" __imp_?what@exception@@UEBAPEBDXZ
0x18000F138: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x18000D874: "__cdecl _security_init_cookie" __security_init_cookie
0x180007728: "public: struct _CLFS_RECORD_HEADER * __ptr64 __cdecl CLogIocb::GetFirstRecord(void) __ptr64" ?GetFirstRecord@CLogIocb@@QEAAPEAU_CLFS_RECORD_HEADER@@XZ
0x18000D6E7: "public: __cdecl exception::exception(char const * __ptr64 const & __ptr64,int) __ptr64" ??0exception@@QEAA@AEBQEBDH@Z
0x1800113D8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003840: WriteLogRestartArea
0x18000FB88: "***Null Record Type***" ??_C@_1CO@CIIDBLGG@?$AA?$CK?$AA?$CK?$AA?$CK?$AAN?$AAu?$AAl?$AAl?$AA?5?$AAR?$AAe?$AAc?$AAo?$AAr?$AAd?$AA?5?$AAT?$AAy?$AAp?$AAe?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$AA@
0x18000FAC0: "UndoNext LSN: %x.%x.%x " ??_C@_1DA@POAIGALC@?$AAU?$AAn?$AAd?$AAo?$AAN?$AAe?$AAx?$AAt?$AA?5?$AAL?$AAS?$AAN?$AA?3?$AA?5?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?4?$AA?$CF?$AAx?$AA?6?$AA?$AA@
0x18000F300: "__cdecl _imp_malloc" __imp_malloc
0x18000F668: "LOGAPI:" ??_C@_1BA@FKFBFANJ@?$AAL?$AAO?$AAG?$AAA?$AAP?$AAI?$AA?3?$AA?$AA@
0x180006070: LogTailAdvanceFailure
0x180005A90: GetLogContainerName
0x18000C348: "public: unsigned long __cdecl CClfsMarshallingContext::SetEndOfLog(union _CLS_LSN & __ptr64,struct _OVERLAPPED * __ptr64) __ptr64" ?SetEndOfLog@CClfsMarshallingContext@@QEAAKAEAT_CLS_LSN@@PEAU_OVERLAPPED@@@Z
0x18000F398: "__cdecl _imp_NtSetInformationFile" __imp_NtSetInformationFile
0x18000F3D0: "__cdecl _imp_RtlDeleteCriticalSection" __imp_RtlDeleteCriticalSection
0x18000D9B0: "__cdecl _report_gsfailure" __report_gsfailure
0x180012640: "private: static unsigned long * CCrc32::m_rgCrcTable" ?m_rgCrcTable@CCrc32@@0PAKA
0x18000F230: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x180012600: "void * __ptr64 __ptr64 g_hMarshalHeap" ?g_hMarshalHeap@@3PEAXEA
0x18000C878: "private: unsigned long __cdecl CClfsMarshallingContext::TrimRestartArea(union _CLS_LSN const & __ptr64,union _CLS_LSN & __ptr64) __ptr64" ?TrimRestartArea@CClfsMarshallingContext@@AEAAKAEBT_CLS_LSN@@AEAT2@@Z
0x180007158: WPP_SF_slqD
0x180012A70: "__cdecl _native_startup_state" __native_startup_state
0x18000F930: WPP_de9ad2ab115d3d4f513b563debe545a6_Traceguids
0x1800036B0: ReadLogRestartArea
0x18000F680: "::" ??_C@_15HEEKGCFC@?$AA?3?$AA?3?$AA?$AA@
0x180006250: "void __cdecl NtLogManagementProxyInternal(void * __ptr64,enum _CLFS_MGMT_NOTIFICATION_TYPE)" ?NtLogManagementProxyInternal@@YAXPEAXW4_CLFS_MGMT_NOTIFICATION_TYPE@@@Z
0x180001A20: CreateLogFile
0x1800071F0: WPP_SF_slqdi
0x180010C80: "__cdecl CTA2?AVbad_alloc@std@@" _CTA2?AVbad_alloc@std@@
0x18000FC08: "-DATA-" ??_C@_1O@FBPHDNLM@?$AA?9?$AAD?$AAA?$AAT?$AAA?$AA?9?$AA?$AA@
0x180007058: "public: unsigned long __cdecl CLogIocb::AllocateBuffer(unsigned long) __ptr64" ?AllocateBuffer@CLogIocb@@QEAAKK@Z
0x18001148C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x18000C058: "public: unsigned long __cdecl CClfsMarshallingContext::FreeReservation(unsigned long,__int64 const & __ptr64) __ptr64" ?FreeReservation@CClfsMarshallingContext@@QEAAKKAEB_J@Z
0x180006150: QueryLogPolicy
0x18000F308: "__cdecl _imp_free" __imp_free
0x18000D7E0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x18000F250: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x18000F3B8: "__cdecl _imp_RtlDosPathNameToRelativeNtPathName_U" __imp_RtlDosPathNameToRelativeNtPathName_U
0x18000F240: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x1800060F0: ReadLogNotification
0x1800114B4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x18000DC94: memset
0x1800114F0: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]