Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\tm.sys Base=0x1C0000000 SHA-256=D1635A77F3C75DCF942D238FFCA23468292FA8B47DDAD219524E0BFE0FB3B921
PDB: tm.pdb GUID={30681AC4-2F76-66E4-3C5D1C87E85CCC75} Age=1

666 located named symbols:
0x1C001FE40: TmpNamespaceEnumerate
0x1C00026F0: TmpShutdownTransactionManager
0x1C00203AC: TmpNamespaceInitialize
0x1C0001D90: WppClassicProviderCallback
0x1C0009418: "__cdecl _imp_RtlEnumerateGenericTableLikeADirectory" __imp_RtlEnumerateGenericTableLikeADirectory
0x1C000E61C: TmpRecoverUnicodeString
0x1C0013D3C: TmpPromoteTransaction
0x1C000B0B0: DllUnload
0x1C0003440: WPP_7f993161483b3f16ab60910bd36f6497_Traceguids
0x1C0009388: "__cdecl _imp_SeCaptureSubjectContext" __imp_SeCaptureSubjectContext
0x1C0009238: "__cdecl _imp_ExAcquireFastMutex" __imp_ExAcquireFastMutex
0x1C0006050: TmpPromotingProtocolId
0x1C0009010: "__cdecl _imp_ClfsReserveAndAppendLog" __imp_ClfsReserveAndAppendLog
0x1C0009288: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C00091F8: "__cdecl _imp_KeSetTimer" __imp_KeSetTimer
0x1C000118F: "__cdecl local_unwind" _local_unwind
0x1C00060E0: TmResourceManagerObjectType
0x1C00124C0: TmCommitTransactionExt
0x1C0009218: "__cdecl _imp_ObReleaseObjectSecurity" __imp_ObReleaseObjectSecurity
0x1C0006028: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C000EBF0: WppTraceCallback
0x1C0009120: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C001A850: TmpInternalCrmLinkEnlistment
0x1C0001E80: TmpStartKtmRm
0x1C0002508: TmpNotifyAllCRM
0x1C0012FE0: TmThawTransactionsExt
0x1C0014318: TmpSetTransactionProperties
0x1C00032E8: "KtmRmTmIdentifier" ??_C@_1CE@MAPLNMOL@?$AAK?$AAt?$AAm?$AAR?$AAm?$AAT?$AAm?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
0x1C0014880: TmpTxActionDoCommitComplete
0x1C0006190: TmpAllProtocolsListCount
0x1C00092E8: "__cdecl _imp_KeRemoveQueue" __imp_KeRemoveQueue
0x1C0022080: TmInitSystemExt
0x1C0009148: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C001A8B0: TmpInternalCrmNotification
0x1C0001290: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0009040: "__cdecl _imp_ClfsMgmtTailAdvanceFailure" __imp_ClfsMgmtTailAdvanceFailure
0x1C0012D10: TmIsKTMCommitCoordinatorExt
0x1C00196AC: TmpCreateInternalCrmEnlistment
0x1C0020624: TmpNamespaceRemove
0x1C0009058: "__cdecl _imp_ClfsReadLogRecord" __imp_ClfsReadLogRecord
0x1C00093E0: "__cdecl _imp_SeAccessCheck" __imp_SeAccessCheck
0x1C000B010: TmCurrentTransactionExt
0x1C001E600: TmPropagationCompleteExt
0x1C0009220: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C0006480: TmpTransactionThawTimer
0x1C00093C8: "__cdecl _imp_SeAssignSecurity" __imp_SeAssignSecurity
0x1C0014F10: TmpTxActionDoRollbackComplete
0x1C00092E0: "__cdecl _imp_ObDereferenceObjectDeferDelete" __imp_ObDereferenceObjectDeferDelete
0x1C0006320: TmpTmNamespace
0x1C00031B0: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0006180: TmpAllProtocolsList
0x1C00195E0: TmpCloseTransactionManager
0x1C0013140: TmpAcquireTransactionMutex
0x1C00065F0: TmpEtwHandle
0x1C00035C8: "TmRm" ??_C@_19GPGOICPD@?$AAT?$AAm?$AAR?$AAm?$AA?$AA@
0x1C00093B8: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C00107D0: TmDereferenceEnlistmentKeyExt
0x1C00017F0: WPP_SF_qLL
0x1C000B100: TmpAdvanceBaseLsnRequiredNotification
0x1C00092A8: "__cdecl _imp_KeInitializeQueue" __imp_KeInitializeQueue
0x1C001DBF0: NtRecoverTransactionManagerExt
0x1C0003280: "\Registry\Machine\Software\Micro" ??_C@_1GC@GEKADAMO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo@
0x1C0009438: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C00092B0: "__cdecl _imp_KeRundownQueue" __imp_KeRundownQueue
0x1C0009310: "__cdecl _imp_ObCreateObjectType" __imp_ObCreateObjectType
0x1C00026C0: TmpCheckForProgressWorkRoutine
0x1C0009410: "__cdecl _imp_RtlEnumerateGenericTableAvl" __imp_RtlEnumerateGenericTableAvl
0x1C00034D8: "KTM: TmRollbackCompleteExt for " ??_C@_0CI@MNGPJDPO@KTM?3?5?5TmRollbackCompleteExt?5for?5@
0x1C00115B0: TmpCloseEnlistment
0x1C0009128: "__cdecl _imp_ExQueueWorkItem" __imp_ExQueueWorkItem
0x1C00093F8: "__cdecl _imp_RtlIsGenericTableEmptyAvl" __imp_RtlIsGenericTableEmptyAvl
0x1C0006240: TmpAllCRMList
0x1C00065B4: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUgnUslhgPxorvmgxlivUlyquivUznwGEUgnkOlyq@tm" __@@_PchSym_@00@KxulyqvxgPillgKxunrmpvimvoUgnUslhgPxorvmgxlivUlyquivUznwGEUgnkOlyq@tm
0x1C0009150: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C001C200: NtOpenTransactionExt
0x1C00090C0: "__cdecl _imp_ClfsMgmtHandleLogFileFull" __imp_ClfsMgmtHandleLogFileFull
0x1C0003500: "KTM: TmpDelegateDisconnect for " ??_C@_0CI@KHKBBPHO@KTM?3?5?5TmpDelegateDisconnect?5for?5@
0x1C0016660: TmpRundownResourceManagerNotificationRequests
0x1C0009180: "__cdecl _imp_KeInitializeMutex" __imp_KeInitializeMutex
0x1C00092D0: "__cdecl _imp_ExSystemExceptionFilter" __imp_ExSystemExceptionFilter
0x1C0009330: "__cdecl _imp_ExRaiseDatatypeMisalignment" __imp_ExRaiseDatatypeMisalignment
0x1C00091A0: "__cdecl _imp_RtlValidRelativeSecurityDescriptor" __imp_RtlValidRelativeSecurityDescriptor
0x1C0001DC4: ExAllocateFromPagedLookasideList
0x1C00194AC: TmpAddTransactionEnlistmentCounts
0x1C00091D0: "__cdecl _imp_ZwSetInformationEnlistment" __imp_ZwSetInformationEnlistment
0x1C00090F0: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C00091E8: "__cdecl _imp_RtlAppendUnicodeStringToString" __imp_RtlAppendUnicodeStringToString
0x1C0009098: "__cdecl _imp_ClfsMgmtDeregisterManagedClient" __imp_ClfsMgmtDeregisterManagedClient
0x1C0009300: IoCompletionObjectType
0x1C00090B0: "__cdecl _imp_ClfsMgmtSetLogFileSize" __imp_ClfsMgmtSetLogFileSize
0x1C0006140: TmpAllProtocolsListMutex
0x1C00035A8: WPP_20561a249cd532406c6237145b9d7800_Traceguids
0x1C00108D0: TmPrePrepareEnlistmentExt
0x1C001FC80: TmpExpireNamespaceResourceManager
0x1C0020418: TmpNamespaceInsert
0x1C00035F8: "TmTx" ??_C@_19NOPAMGED@?$AAT?$AAm?$AAT?$AAx?$AA?$AA@
0x1C00012C0: memcpy
0x1C0019CC0: TmpDeleteTransactionManager
0x1C0012A84: TmInitializeTransaction
0x1C0011210: TmRollbackEnlistmentExt
0x1C001B6BC: TmpTmOffline
0x1C001A620: TmpHeuristicAbortTransaction
0x1C00092B8: "__cdecl _imp_KeInsertQueue" __imp_KeInsertQueue
0x1C00090B8: "__cdecl _imp_ClfsReserveAndAppendLogAligned" __imp_ClfsReserveAndAppendLogAligned
0x1C00026D4: TmpIsOnlineTransactionManager
0x1C001B620: TmpReleaseTxTableTransactionManager
0x1C001CC70: NtSetInformationTransactionExt
0x1C0009198: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C0003608: "TmTm" ??_C@_19LJDHGBOO@?$AAT?$AAm?$AAT?$AAm?$AA?$AA@
0x1C0006060: NextRmCookie
0x1C00093A0: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C00033F0: KTM_ETW_EVENT_TRANSACTIONMANAGER_NOT_ADVANCING_TAIL
0x1C00065C8: pfnWppGetVersion
0x1C0016AA0: NtCommitCompleteExt
0x1C00093F0: "__cdecl _imp_RtlInsertElementGenericTableAvl" __imp_RtlInsertElementGenericTableAvl
0x1C000104D: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0009080: "__cdecl _imp_ClfsReadRestartArea" __imp_ClfsReadRestartArea
0x1C00222D4: TmpQueryValueKey
0x1C0009368: "__cdecl _imp_IofCallDriver" __imp_IofCallDriver
0x1C001A424: TmpForgetTransaction
0x1C00065E8: TmpTriggerHandle
0x1C00092C0: "__cdecl _imp_KeInitializeApc" __imp_KeInitializeApc
0x1C00012C0: memmove
0x1C001DC70: NtRenameTransactionManagerExt
0x1C0017330: NtPrepareEnlistmentExt
0x1C0017CD0: NtSinglePhaseRejectExt
0x1C0015A90: TmpCloseResourceManager
0x1C0009390: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1C001FA18: TmpSchedulePropagateRequest
0x1C00091E0: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C001B88C: TmpTmOnline
0x1C00093A8: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C000109C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C0001E18: ExFreeToPagedLookasideList
0x1C001593C: TmpCaptureOrRequeueNotification
0x1C001321C: TmpAreAllSubordinatesAvailableTransaction
0x1C0003430: KTM_ETW_PROVIDER
0x1C0009360: "__cdecl _imp_IoBuildDeviceIoControlRequest" __imp_IoBuildDeviceIoControlRequest
0x1C0018D60: TmInitializeTransactionManagerExt
0x1C00021DC: WPP_SF_q_guid__guid_
0x1C0009400: "__cdecl _imp_RtlDeleteElementGenericTableAvl" __imp_RtlDeleteElementGenericTableAvl
0x1C0003590: "TmpTxActionDoRollback" ??_C@_0BG@FAPHFNP@TmpTxActionDoRollback?$AA@
0x1C0006100: WPP_MAIN_CB
0x1C0009348: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C0010860: TmPrePrepareCompleteExt
0x1C0003620: "__cdecl _xmm@000000010000000b0000000200000008" __xmm@000000010000000b0000000200000008
0x1C0009130: "__cdecl _imp_ObfReferenceObject" __imp_ObfReferenceObject
0x1C0003170: WPP_679cd54243f43bd46e812fb9fea7a0c7_Traceguids
0x1C0018530: NtOpenResourceManagerExt
0x1C00022F0: TmpTransactionThawDpcRoutine
0x1C0001858: WPP_SF_qLLLL
0x1C00202B0: TmpNamespaceForEach
0x1C0009240: "__cdecl _imp_ExReleaseFastMutex" __imp_ExReleaseFastMutex
0x1C00019C0: WPP_SF_qii
0x1C000BDF0: TmpLogUnpinnedNotification
0x1C00035D8: TmpResourceManagerMapping
0x1C0006420: TmpTransactionFreezeCancelEvent
0x1C0002844: WPP_SF_qqi
0x1C00176E0: NtReadOnlyEnlistmentExt
0x1C0006030: TmpKtmRmServiceStartGuid
0x1C0003420: KTM_ETW_EVENT_TRANSACTION_ROLLBACK_LOG_ERROR
0x1C0015E50: TmpDeleteResourceManager
0x1C0006600: TmpLogWriteLookasideList
0x1C002261C: TmpTransactionInitialization
0x1C0022B80: TmpTransactionManagerMapping
0x1C00027C8: WPP_SF_qq_guid_D
0x1C00065B0: TmpShutdownOccurred
0x1C00028A8: WPP_SF_qqii
0x1C0018A50: NtRecoverResourceManagerExt
0x1C0009140: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0019DEC: TmpEnlistMultiTm
0x1C000B0C0: TmpNamespaceAllocateEntry
0x1C0003568: "KTM: Notifying RM of %d for tx " ??_C@_0CF@NGGLAODD@KTM?3?5?5Notifying?5RM?5of?5?$CFd?5for?5tx?5@
0x1C001C110: NtFreezeTransactionsExt
0x1C0017830: NtRollbackCompleteExt
0x1C0019998: TmpCreateInternalCrmTransaction
0x1C0009420: "__cdecl _imp__local_unwind" __imp__local_unwind
0x1C0009318: "__cdecl _imp_MmUserProbeAddress" __imp_MmUserProbeAddress
0x1C001F6A4: TmpPropagationComplete
0x1C0018AD0: NtSetInformationResourceManagerExt
0x1C00034A8: "KTM: TmRollbackEnlistmentExt fo" ??_C@_0CK@PGBNMHKJ@KTM?3?5?5TmRollbackEnlistmentExt?5fo@
0x1C000DF4C: TmpRecoverEnlistmentRecoveryInformation
0x1C0003380: "TmAdvanceTailWarningInterval" ??_C@_1DK@NEMIHBNJ@?$AAT?$AAm?$AAA?$AAd?$AAv?$AAa?$AAn?$AAc?$AAe?$AAT?$AAa?$AAi?$AAl?$AAW?$AAa?$AAr?$AAn?$AAi?$AAn?$AAg?$AAI?$AAn?$AAt?$AAe?$AAr?$AAv?$AAa?$AAl?$AA?$AA@
0x1C00065E0: pfnWppQueryTraceInformation
0x1C00117B8: TmpFinalizeEnlistment
0x1C0001D04: WPP_SF_qdddd
0x1C000BE30: TmpWriteRestartArea
0x1C0016B70: NtCommitEnlistmentExt
0x1C001B2C4: TmpPromptRecoveryAllTransactionManagers
0x1C000B0B0: TmpOpenTransactionManager
0x1C0014C40: TmpTxActionDoPrepareComplete
0x1C001A6D0: TmpHeuristicAbortTransactionAfterCheckpoint
0x1C001D000: NtCreateTransactionManagerExt
0x1C0001104: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x1C000DFB4: TmpRecoverOneEnlistmentRecordFromLogRecord
0x1C00090E0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C000FF40: TmpTraceTransactionRollbackLogError
0x1C0009090: "__cdecl _imp_ClfsCloseLogFileObject" __imp_ClfsCloseLogFileObject
0x1C0009118: "__cdecl _imp_KeLeaveCriticalRegion" __imp_KeLeaveCriticalRegion
0x1C00119DC: TmpInitializeEnlistment
0x1C0001078: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0002338: WPP_SF_q_guid_
0x1C00060A0: TmTransactionObjectType
0x1C001FBD4: TmpValidatePropagationBlob
0x1C0003528: WPP_8c3341684ff939d27bb3a60177818200_Traceguids
0x1C0003190: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00093D8: "__cdecl _imp_ExRaiseStatus" __imp_ExRaiseStatus
0x1C0013330: TmpCloseTransaction
0x1C00093B0: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0016C40: NtCreateEnlistmentExt
0x1C0009178: "__cdecl _imp_ExAllocatePoolWithQuotaTag" __imp_ExAllocatePoolWithQuotaTag
0x1C0014D38: TmpTxActionDoRollback
0x1C0009208: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C0019FF0: TmpEnlistSuperiorSubordinateTm
0x1C0009270: "__cdecl _imp_ExUuidCreate" __imp_ExUuidCreate
0x1C0009378: "__cdecl _imp_SeExports" __imp_SeExports
0x1C0002394: WPP_SF_q_guid_D
0x1C0002400: WPP_SF_q_guid_d
0x1C00145B4: TmpTxActionDoCommit
0x1C0022460: TmpEnlistmentInitialization
0x1C00109F0: TmPrepareCompleteExt
0x1C001BE70: NtEnumerateTransactionObjectExt
0x1C00065D0: pfnEtwRegisterClassicProvider
0x1C001AD68: TmpIsClusteredTransactionManager
0x1C000E694: TmpRegisterForLogManagement
0x1C0015270: TmInitializeResourceManager
0x1C000BCF0: TmpLogFullCompletedWorker
0x1C00132AC: TmpBindTransaction
0x1C00141EC: TmpScheduleRollback
0x1C00092F8: "__cdecl _imp_KeReadStateQueue" __imp_KeReadStateQueue
0x1C001F188: TmpDispatchPropagateRequest
0x1C001D300: NtOpenTransactionManagerExt
0x1C0006040: TmpOleTxProtocolId
0x1C00149B0: TmpTxActionDoDelegateDisconnect
0x1C0016DF0: NtOpenEnlistmentExt
0x1C000BD80: TmpLogGrowthCompletedNotification
0x1C00060F0: TmpKtmRmTmGuid
0x1C0009048: "__cdecl _imp_ClfsWriteRestartArea" __imp_ClfsWriteRestartArea
0x1C00091A8: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1C0009290: "__cdecl _imp_KeIsAttachedProcess" __imp_KeIsAttachedProcess
0x1C0001BD4: WPP_SF_
0x1C00090D8: CLFS_NULL_THUNK_DATA
0x1C0010C80: TmRecoverEnlistmentExt
0x1C00090D0: "__cdecl _imp_ClfsPrivGetBaseLogFileFromFileObjectPointer" __imp_ClfsPrivGetBaseLogFileFromFileObjectPointer
0x1C0013850: TmpFreezeThawTransaction
0x1C001A400: TmpForgetAllEnlistmentsTransaction
0x1C0006008: TmpLogPrefix
0x1C0019458: TmpAcquireTxTableTransactionManager
0x1C0009008: "__cdecl _imp_CLFS_LSN_NULL" __imp_CLFS_LSN_NULL
0x1C00061A0: TmpAllPropReqsListMutex
0x1C0009440: "__cdecl _IMPORT_DESCRIPTOR_CLFS" __IMPORT_DESCRIPTOR_CLFS
0x1C0006690: TmpAllProtocolsStaticInfoLength
0x1C00063E0: TmpTransactionThawEvent
0x1C000EF5C: TmpLogBufferInitialization
0x1C000EFA0: TmpLogTransaction
0x1C001F978: TmpPullTransaction
0x1C00093D0: "__cdecl _imp_SeReleaseSubjectContext" __imp_SeReleaseSubjectContext
0x1C000E458: TmpRecoverTransactionFromLogRecord
0x1C000BC90: TmpCheckpointWorker
0x1C0009100: "__cdecl _imp_KeReleaseMutex" __imp_KeReleaseMutex
0x1C0012DA0: TmRollbackTransactionExt
0x1C00207E0: TmpNamespaceReplace
0x1C0022010: GsDriverEntry
0x1C0009430: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C001E660: TmPropagationFailedExt
0x1C0009320: "__cdecl _imp_ObCreateObject" __imp_ObCreateObject
0x1C00091C0: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C0010F50: TmRequestOutcomeEnlistmentExt
0x1C001DFE0: NtPropagationCompleteExt
0x1C0006439: TmpTransactionsFreezeCancelled
0x1C00033E0: KTM_ETW_TRIGGER_PROVIDER
0x1C001B394: TmpQueueCheckpointTm
0x1C000DB28: TmpRecoverAllEnlistmentRecordsInLogRecord
0x1C0014084: TmpPromotionsIncomplete
0x1C001B408: TmpQueueOfflineTm
0x1C001AEE4: TmpIsLogWritableTransactionManager
0x1C0009250: "__cdecl _imp_KeResetEvent" __imp_KeResetEvent
0x1C001B65C: TmpRemoveTransactionEnlistmentCounts
0x1C0002770: WPP_SF_Dq
0x1C001EE90: TmpDelayedPropWorkItem
0x1C001B480: TmpReacquireReservationTransaction
0x1C000C2D0: TmRecoverTransactionManagerExt
0x1C0006000: WPP_GLOBAL_Control
0x1C00092D8: "__cdecl _imp_IoSetIoCompletion" __imp_IoSetIoCompletion
0x1C0009170: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0003260: "\??\LOG:" ??_C@_1BC@FCACLFKI@?$AA?2?$AA?$DP?$AA?$DP?$AA?2?$AAL?$AAO?$AAG?$AA?3?$AA?$AA@
0x1C0006560: TmpCheckForProgressDpc
0x1C0001C00: WPP_SF_D
0x1C0001C00: WPP_SF_d
0x1C0016510: TmpOpenResourceManager
0x1C0003400: KTM_ETW_EVENT_TRANSACTION_HEURISTIC_CORRUPTION
0x1C001FAD0: TmpSendPromotionRequest
0x1C0009318: MmUserProbeAddress
0x1C0009200: "__cdecl _imp_ExInitializePagedLookasideList" __imp_ExInitializePagedLookasideList
0x1C00123F8: TmpRequestOutcomeTransaction
0x1C000C040: TmInitSystemPhase2Ext
0x1C0001010: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0006440: TmpFreezeMutex
0x1C0006090: TmpTransactionTypeName
0x1C0006500: TmpTransactionThawWorkItem
0x1C001F0B8: TmpDereferencePropagateRequest
0x1C0022BA0: TmpEnlistmentMapping
0x1C0009454: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C001E550: TmCancelPropagationRequestExt
0x1C001B900: NtCommitTransactionExt
0x1C0012A70: TmGetTransactionIdExt
0x1C0020258: TmpNamespaceExpire
0x1C0002154: WPP_SF_qq_guid_ii
0x1C0006200: TmpAllCRMListMutex
0x1C0002708: WPP_SF_DDq
0x1C0001788: WPP_SF_qDD
0x1C0014B94: TmpTxActionDoPrepare
0x1C001CF90: NtThawTransactionsExt
0x1C001FD48: TmpNamespaceActivate
0x1C00136F8: TmpForwardCommitTransaction
0x1C00020DC: WPP_SF_qq_guid_i
0x1C0009060: "__cdecl _imp_ClfsReadNextLogRecord" __imp_ClfsReadNextLogRecord
0x1C00092C8: "__cdecl _imp_KeInsertQueueApc" __imp_KeInsertQueueApc
0x1C001A7EC: TmpInsertTxTransactionManager
0x1C0006250: TmpAllCRMListCount
0x1C0001AC4: TmpReadKtmRmTmId
0x1C0017900: NtRollbackEnlistmentExt
0x1C0016170: TmpGetNotificationResourceManagerAsync
0x1C0009020: "__cdecl _imp_ClfsLsnInvalid" __imp_ClfsLsnInvalid
0x1C0009018: "__cdecl _imp_ClfsGetLogFileInformation" __imp_ClfsGetLogFileInformation
0x1C001B9A0: NtCreateTransactionExt
0x1C0014FD8: TmpTxActionTrySinglePhase
0x1C0013620: TmpFinalizeTransactionForcefully
0x1C0009038: "__cdecl _imp_ClfsLsnLess" __imp_ClfsLsnLess
0x1C0009000: "__cdecl _imp_CLFS_LSN_INVALID" __imp_CLFS_LSN_INVALID
0x1C0009338: "__cdecl _imp_ProbeForWrite" __imp_ProbeForWrite
0x1C0020540: TmpNamespaceLookup
0x1C0006688: TmpPromotingProtocolRegistered
0x1C0009280: "__cdecl _imp_RtlDuplicateUnicodeString" __imp_RtlDuplicateUnicodeString
0x1C00145A0: TmpThawTransactionsWorkRoutine
0x1C0016440: TmpNotifyResourceManagerTmOnline
0x1C0010500: TmCommitCompleteExt
0x1C0023000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C00090F8: "__cdecl _imp_ExAcquireResourceExclusiveLite" __imp_ExAcquireResourceExclusiveLite
0x1C00033D0: KTM_ETW_EVENT_TRIGGER_SVC_START
0x1C0003000: "__cdecl load_config_used" _load_config_used
0x1C001F484: TmpFindPropagationRequest
0x1C0019130: TmRenameTransactionManagerExt
0x1C0010A60: TmPrepareEnlistmentExt
0x1C0011450: TmSinglePhaseRejectExt
0x1C00065A0: TmpTmAdvanceTailWarningInterval
0x1C001EFF8: TmpDeleteProtocol
0x1C0009350: SeSystemDefaultSd
0x1C0009168: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C0001FFC: TmpTransactionManagerNeededForRecovery
0x1C00093E8: "__cdecl _imp_RtlInitializeGenericTableAvl" __imp_RtlInitializeGenericTableAvl
0x1C0019524: TmpCheckForProgressTransactionManager
0x1C001F5B0: TmpPromotionRequestTail
0x1C000224C: WPP_SF_qq_guid_
0x1C0009308: "__cdecl _imp_KeInsertHeadQueue" __imp_KeInsertHeadQueue
0x1C00131AC: TmpAdjustVirtualClock
0x1C00208D8: TmpRemoveEnlistmentResourceManager
0x1C00091B8: "__cdecl _imp_ZwCreateResourceManager" __imp_ZwCreateResourceManager
0x1C0003538: "KTM: TmRollbackTransactionExt f" ??_C@_0CL@HLBLFHKL@KTM?3?5?5TmRollbackTransactionExt?5f@
0x1C0009030: "__cdecl _imp_ClfsLsnGreater" __imp_ClfsLsnGreater
0x1C001FCA0: TmpInsertEnlistmentResourceManager
0x1C0009188: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C001F510: TmpFindProtocolHeader
0x1C00091B0: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C00031D0: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0016040: TmpGetNotificationResourceManager
0x1C00065A8: TmpKtmRmDescriptor
0x1C00183A0: NtGetNotificationResourceManagerExt
0x1C001E9B8: TmpAllocateAndDispatchPropagateRequest
0x1C0003240: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C00025E4: TmpCheckForProgressAllTransactionManagers
0x1C0015840: TmpBindResourceManagerCompletionPort
0x1C001C4D0: NtQueryInformationTransactionExt
0x1C0015D20: TmpCompleteNotificationRequestApc
0x1C00022B0: TmpRollbackDpc
0x1C0003180: WPP_ThisDir_CTLGUID_NtfsLog
0x1C0009028: "__cdecl _imp_ClfsLsnEqual" __imp_ClfsLsnEqual
0x1C0017190: NtPrePrepareEnlistmentExt
0x1C001B290: TmpOfflineWorker
0x1C0009380: "__cdecl _imp_ObOpenObjectByName" __imp_ObOpenObjectByName
0x1C0022724: TmpTransactionManagerInitialization
0x1C0012FA0: TmSetCurrentTransactionExt
0x1C00091C8: "__cdecl _imp_ZwCreateEnlistment" __imp_ZwCreateEnlistment
0x1C0003310: "\Registry\Machine\System\Current" ??_C@_1GO@OHFCDIFM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0014B00: TmpTxActionDoPrePrepareComplete
0x1C0001060: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C00011B0: memcmp
0x1C001EADC: TmpAllocatePropagateRequest
0x1C000643C: TmpTransactionsCommittedActive
0x1C001394C: TmpNotifyAllEnlistmentsTransaction
0x1C001A580: TmpFreezeThawTransactionManager
0x1C00090A8: "__cdecl _imp_ClfsMgmtInstallPolicy" __imp_ClfsMgmtInstallPolicy
0x1C000CE30: TmpExtractTmIdentityFromExistingLogFile
0x1C00091F0: "__cdecl _imp_RtlGUIDFromString" __imp_RtlGUIDFromString
0x1C00092F0: "__cdecl _imp_PsGetCurrentProcess" __imp_PsGetCurrentProcess
0x1C0011150: TmRollbackCompleteExt
0x1C00127E0: TmFreezeTransactionsExt
0x1C0006520: TmpCheckForProgressTimer
0x1C0009350: "__cdecl _imp_SeSystemDefaultSd" __imp_SeSystemDefaultSd
0x1C000DC5C: TmpRecoverEnlistmentFromEnlistmentRecord
0x1C0009050: "__cdecl _imp_ClfsAdvanceLogBase" __imp_ClfsAdvanceLogBase
0x1C0002920: TmpAbandonRequestDpc
0x1C0009328: "__cdecl _imp_ObInsertObject" __imp_ObInsertObject
0x1C000EAB4: WppLoadTracingSupport
0x1C0017F90: NtCreateResourceManagerExt
0x1C0009158: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0001EF4: TmpTraceTransactionManagerNotAdvancingTail
0x1C0022808: TmpInitializeKtmRmSecurityDescriptor
0x1C0001A30: TmShutdownSystemExt
0x1C0003630: "__cdecl _xmm@0000010000000111000001010000010a" __xmm@0000010000000111000001010000010a
0x1C0013B78: TmpNotifyEnlistment
0x1C0009248: "__cdecl _imp_ExAcquireResourceSharedLite" __imp_ExAcquireResourceSharedLite
0x1C0009370: "__cdecl _imp_SeSinglePrivilegeCheck" __imp_SeSinglePrivilegeCheck
0x1C00018DC: WPP_SF_qdqiid
0x1C00060E8: TmEnlistmentObjectType
0x1C0012D70: TmIsTransactionActiveExt
0x1C0013450: TmpFinalizeTransaction
0x1C00141C0: TmpRollbackWorkItem
0x1C0010590: TmCommitEnlistmentExt
0x1C0001C48: WPP_SF_DDD
0x1C001DF30: NtSetInformationTransactionManagerExt
0x1C0009300: "__cdecl _imp_IoCompletionObjectType" __imp_IoCompletionObjectType
0x1C0002474: WPP_SF_sqq_guid_d
0x1C0006080: TmTransactionManagerObjectType
0x1C0009110: "__cdecl _imp_ExReleaseResourceLite" __imp_ExReleaseResourceLite
0x1C0006260: TmpTransactionsNamespace
0x1C0003450: "KTM: TmPrepareTransaction for e" ??_C@_0CH@BOMGLDBM@KTM?3?5?5TmPrepareTransaction?5for?5e@
0x1C0006020: "__cdecl _security_cookie" __security_cookie
0x1C0009298: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0003478: "KTM: TmCommitTransactionExt for" ??_C@_0CJ@OLNFCKPJ@KTM?3?5?5TmCommitTransactionExt?5for@
0x1C0012170: TmpProcessNotificationResponse
0x1C001A398: TmpFilterTransactionManagerOnlineAndLock
0x1C00170C0: NtPrePrepareCompleteExt
0x1C0009210: "__cdecl _imp_ObGetObjectSecurity" __imp_ObGetObjectSecurity
0x1C0009268: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C0003208: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00091D8: "__cdecl _imp_ZwCreateTransaction" __imp_ZwCreateTransaction
0x1C00090C8: "__cdecl _imp_ClfsLsnContainer" __imp_ClfsLsnContainer
0x1C0009278: "__cdecl _imp_DbgPrintEx" __imp_DbgPrintEx
0x1C0009190: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C0010004: TmpWriteLog
0x1C0010EA0: TmReferenceEnlistmentKeyExt
0x1C0022B90: TmpTransactionMapping
0x1C00115FC: TmpDelegateDisconnect
0x1C0009260: "__cdecl _imp_EtwWrite" __imp_EtwWrite
0x1C0003410: KTM_ETW_EVENT_TRANSACTION_BLOCKED_FREEZE
0x1C0009078: "__cdecl _imp_ClfsCreateMarshallingArea" __imp_ClfsCreateMarshallingArea
0x1C001FD10: TmpInsertResourceManagerTm
0x1C0001970: WPP_SF_qi
0x1C0010BB0: TmReadOnlyEnlistmentExt
0x1C0001CAC: WPP_SF_qd
0x1C0001734: WPP_SF_qD
0x1C0002084: WPP_SF_qq
0x1C00187B0: NtQueryInformationResourceManagerExt
0x1C000C4A8: TmpConstructLogRecordForRecovery
0x1C0009408: "__cdecl _imp_RtlLookupElementGenericTableAvl" __imp_RtlLookupElementGenericTableAvl
0x1C00150F0: TmEnableCallbacksExt
0x1C0022538: TmpResourceManagerInitialization
0x1C001DE60: NtRollforwardTransactionManagerExt
0x1C0022044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0015500: TmRecoverResourceManagerExt
0x1C000E32C: TmpRecoverSecurityDescriptor
0x1C00016F0: WPP_SF_q
0x1C0011700: TmpDeleteEnlistment
0x1C000CDC8: TmpCreateOrOpenLogTransactionManager
0x1C0009258: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C001CFC0: TmpFreezeThawPrivilegeCheck
0x1C001B0D0: TmpMigrateEnlistments
0x1C000B130: TmpCheckpoint
0x1C001E570: TmEndPropagationRequestExt
0x1C00065C0: WPPTraceSuite
0x1C00177B0: NtRecoverEnlistmentExt
0x1C000FE30: TmpTraceTransactionHeuristicCorruption
0x1C0009138: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C00090A0: "__cdecl _imp_ClfsMgmtRegisterManagedClient" __imp_ClfsMgmtRegisterManagedClient
0x1C00200E4: TmpNamespaceEnumerateObject
0x1C0013360: TmpDeleteTransaction
0x1C0015080: TmpWaitForTransactionOutcome
0x1C001FDA0: TmpNamespaceCompareGuids
0x1C000C608: TmpCreateLogFile
0x1C0009070: "__cdecl _imp_ClfsCreateLogFile" __imp_ClfsCreateLogFile
0x1C0009088: "__cdecl _imp_ClfsDeleteMarshallingArea" __imp_ClfsDeleteMarshallingArea
0x1C00061E0: TmpAllPropReqsList
0x1C0002670: TmpCheckForProgressDpcRoutine
0x1C0009068: "__cdecl _imp_ClfsTerminateReadLog" __imp_ClfsTerminateReadLog
0x1C001EEF0: TmpDeletePropagateRequest
0x1C0001040: "__cdecl _report_gsfailure" __report_gsfailure
0x1C000B0E0: TmpNamespaceFreeEntry
0x1C001CBD0: NtRollbackTransactionExt
0x1C001E6D4: TmRegisterProtocolAddressInformation
0x1C001B0B0: TmpIsTransactionTreeRoot
0x1C0009230: "__cdecl _imp_KeWaitForMultipleObjects" __imp_KeWaitForMultipleObjects
0x1C001E100: NtPropagationFailedExt
0x1C00035E8: WPP_4e5d1bb630513e7b0c5898a9b8a39e21_Traceguids
0x1C00035B8: "TmEn" ??_C@_19GDAIBPDO@?$AAT?$AAm?$AAE?$AAn?$AA?$AA@
0x1C0009228: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C000FCD4: TmpTraceTransactionBlockedFreeze
0x1C00064C0: TmpTransactionThawDpc
0x1C0009340: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C0006400: TmpTransactionFreezeCompleteEvent
0x1C001D670: NtQueryInformationTransactionManagerExt
0x1C00092A0: "__cdecl _imp_KeRemoveQueueDpc" __imp_KeRemoveQueueDpc
0x1C0017DA0: TmCreateEnlistmentExt
0x1C00179D0: NtSetInformationEnlistmentExt
0x1C0006438: TmpTransactionsFrozen
0x1C0009428: ntoskrnl_NULL_THUNK_DATA
0x1C0009358: "__cdecl _imp_IoGetAttachedDeviceReference" __imp_IoGetAttachedDeviceReference
0x1C0009108: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C00206D4: TmpNamespaceRename
0x1C00090E8: "__cdecl _imp_KeEnterCriticalRegion" __imp_KeEnterCriticalRegion
0x1C0014A78: TmpTxActionDoPrePrepare
0x1C0015D74: TmpCompleteNotificationRequestPacket
0x1C00166F0: TmpSetNotificationResourceManager
0x1C0009398: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C00140B0: TmpRmDisconnectTransaction
0x1C0017400: NtQueryInformationEnlistmentExt
0x1C0017260: NtPrepareCompleteExt
0x1C000E12C: TmpRecoverResourceManagerFromEnlistmentRecord
0x1C00093C0: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C0022B74: DriverEntry
0x1C000D0DC: TmpRecover
0x1C001E47C: TmpProbeAndCaptureBuffer
0x1C00065D8: pfnWppTraceMessage
0x1C0009160: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C001E1B0: NtRegisterProtocolAddressInformationExt
0x1C00060C0: TmpCheckForProgressWorkItem
0x1C000EA24: WppInitKm
0x1C000EE44: TmpInsertTransactionLsnList
0x1C0001600: memset
0x1C0009468: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C00033C0: WPP_7dce6d30dd6a31802693a9cc4bc414ea_Traceguids

[JEB Decompiler by PNF Software]