Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\Ndu.sys Base=0x1C0000000 SHA-256=3F7789FD0B00E95FB98F7952317E7993FA66CACF4FFD847068F0447ECEA1B811
PDB: ndu.pdb GUID={0634649C-C1D2-9CED-97E60DD2D60F3BD1} Age=1

845 located named symbols:
0x1C001D2C0: "__cdecl _imp_KeGetProcessorNumberFromIndex" __imp_KeGetProcessorNumberFromIndex
0x1C0013728: "==> NduWfpObjectCountWait" ??_C@_1DE@MINDLAJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AAW?$AAa?$AAi?$AAt?$AA?$AA@
0x1C00065E0: NduCreateNblContext
0x1C0014A38: "<== NduHandleNblContextRemoved" ??_C@_1DO@KFENANDA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?$AA@
0x1C0015F00: NduAleFlowEstablishedV6SubLayerFilterName
0x1C0011578: "==> NduHandleNblCloned" ??_C@_1CO@PCOHOJOK@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAl?$AAo?$AAn?$AAe?$AAd?$AA?$AA@
0x1C0013060: "NduDispatchDpcOnCore(QueryStats)" ??_C@_1EC@KAEILMMI@?$AAN?$AAd?$AAu?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAD?$AAp?$AAc?$AAO?$AAn?$AAC?$AAo?$AAr?$AAe?$AA?$CI?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$CJ@
0x1C001B190: Microsoft_Windows_NduEnableBits
0x1C0001CA8: NduDereferenceAppStats
0x1C00152F8: "FwpmBfeStateSubscribeChanges" ??_C@_1DK@IEOHNKPP@?$AAF?$AAw?$AAp?$AAm?$AAB?$AAf?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AAS?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAb?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAs?$AA?$AA@
0x1C0005180: NduNblNotifyCallback
0x1C00069F0: NduInboundTransportClassify
0x1C0013028: "==> NduSnapshotStatistics" ??_C@_1DE@NPCIHK@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAn?$AAa?$AAp?$AAs?$AAh?$AAo?$AAt?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0002190: NduFlowEstablishedClassify
0x1C0014B50: "NduHandleNblReceiveComplete" ??_C@_1DI@DFFLENEH@?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAR?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x1C0011F18: "NduCreateStatsContext" ??_C@_1CM@DPJCBMGG@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0014670: "NduHandleNblContextRemoved(OldNb" ??_C@_1FE@FNIIBCBI@?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?$CI?$AAO?$AAl?$AAd?$AAN?$AAb@
0x1C0016020: NduAleFlowEstablishedV4SubLayerFilterName
0x1C00067A0: NduDeleteFlowContext
0x1C00167C0: "==> NduPerProcByteCountLimitNoti" ??_C@_1FI@BJMBEJDH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAL?$AAi?$AAm?$AAi?$AAt?$AAN?$AAo?$AAt?$AAi@
0x1C0011A40: "<== NduTokenProcessNetioEnergyCo" ??_C@_1EG@NIFFJMPF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAN?$AAe?$AAt?$AAi?$AAo?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAC?$AAo@
0x1C0016900: "==> NduRegisterInterfaceByteCoun" ??_C@_1FO@KJEMMCHM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn@
0x1C0015378: "FwmpBfeStateUnsubscribeChanges" ??_C@_1DO@DNIIMEDE@?$AAF?$AAw?$AAm?$AAp?$AAB?$AAf?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AAU?$AAn?$AAs?$AAu?$AAb?$AAs?$AAc?$AAr?$AAi?$AAb?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAs?$AA?$AA@
0x1C0017040: "<== NduCleanupAppStats" ??_C@_1CO@HPJIMLPM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C00142F0: "==> NduFlowEstablishedClassify" ??_C@_1DO@LNINBOAM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAl?$AAo?$AAw?$AAE?$AAs?$AAt?$AAa?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAd?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C0003420: RtlStringCchCopyW
0x1C0017B18: "<== NduTokenSetTrackTokenUsage" ??_C@_1DO@DFMJLEKG@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAe?$AAt?$AAT?$AAr?$AAa?$AAc?$AAk?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0012E50: "Ran out of memory at: NduCreateD" ??_C@_1FK@GHFIEBMA@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD@
0x1C001B058: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0018360: "Ran out of memory at: NduCreateI" ??_C@_1GK@KIMNIIEM@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI@
0x1C001D188: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0017890: "==> NduTokenFindAppContextByCook" ??_C@_1EG@LCEOBBEO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAF?$AAi?$AAn?$AAd?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAB?$AAy?$AAC?$AAo?$AAo?$AAk@
0x1C00131C8: "NduCalculateTotalBufferSize" ??_C@_1DI@DLJMNJFM@?$AAN?$AAd?$AAu?$AAC?$AAa?$AAl?$AAc?$AAu?$AAl?$AAa?$AAt?$AAe?$AAT?$AAo?$AAt?$AAa?$AAl?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1C0014918: "==> NduHandleNblContextRemoved" ??_C@_1DO@MMBPPNPF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?$AA@
0x1C0018920: "==> NduCleanupUpdateProcessEnerg" ??_C@_1FA@GKJKEOIH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg@
0x1C0012FB0: "NduSerializeAppStatistics" ??_C@_1DE@EIHEJEDD@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0016BD0: "Ran out of memory at: NduUnregis" ??_C@_1IG@EDJLPIDJ@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs@
0x1C000B1C0: NduProcessQueryEnergy
0x1C0013BA0: "RtlStringCbLengthW" ??_C@_1CG@IFKMNEJL@?$AAR?$AAt?$AAl?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAb?$AAL?$AAe?$AAn?$AAg?$AAt?$AAh?$AAW?$AA?$AA@
0x1C00136E0: "<== NduUninitializeWfpObjectCoun" ??_C@_1EE@IJOBIJDC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn@
0x1C0014CA0: "==> NduInitializeWfpCalloutLayer" ??_C@_1EC@OHLPKLFH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy?$AAe?$AAr@
0x1C00163B0: "<== NduTogglePerProcActiveInterf" ??_C@_1FK@FNFJIDAG@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAg?$AAg?$AAl?$AAe?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf@
0x1C0014C00: "Ran out of memory at: NduCreateW" ??_C@_1FM@JINCCNCG@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW@
0x1C0016650: "NduConvertInterfaceStatsListToUs" ??_C@_1GM@NLNCFIIB@?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAL?$AAi?$AAs?$AAt?$AAT?$AAo?$AAU?$AAs@
0x1C001D298: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C001D328: "__cdecl _imp_ExEventObjectType" __imp_ExEventObjectType
0x1C00189C0: WNF_CNET_WIFI_ACTIVITY
0x1C0006F80: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0015420: NduInboundTransportCallout
0x1C0017480: "==> NduConvertProcessStatsEntryT" ??_C@_1FE@ODBAGHLJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAn?$AAt?$AAr?$AAy?$AAT@
0x1C00118B0: "==> NduTokenProcessWorkItemsQueu" ??_C@_1EE@FIAOBLAN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AAs?$AAQ?$AAu?$AAe?$AAu@
0x1C0004EF0: NduOutboundMacClassifyProcessSingleNbl
0x1C0011158: NduWfpCalloutProviderGuid
0x1C001D068: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x1C0005EB0: NduOutboundTransportClassify
0x1C001D1F0: "__cdecl _imp_PsLookupProcessByProcessId" __imp_PsLookupProcessByProcessId
0x1C0014570: "<== NduInboundMacClassify" ??_C@_1DE@BCNAOILF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C001F030: NduSetDeviceDacl
0x1C0013AF0: "FwpsProxiedEndpointClassifiableF" ??_C@_1KO@JIDCCKFA@?$AAF?$AAw?$AAp?$AAs?$AAP?$AAr?$AAo?$AAx?$AAi?$AAe?$AAd?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAi?$AAa?$AAb?$AAl?$AAe?$AAF@
0x1C000469C: NduIsAppMetaDataListEqual
0x1C00162D0: "==> NduCleanupPerInterfaceStats" ??_C@_1EA@DHFFFPCJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAP?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C001D128: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C001D0F0: "__cdecl _imp_FwpsProxiedEndpointClassifiableFieldGet" __imp_FwpsProxiedEndpointClassifiableFieldGet
0x1C001D238: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0018150: "Ran out of memory at: NduTokenCr" ??_C@_1HA@FPJBOJNJ@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAr@
0x1C001D1A0: "__cdecl _imp_ZwUpdateWnfStateData" __imp_ZwUpdateWnfStateData
0x1C0017710: "<== NduConvertProcessStatsListTo" ??_C@_1FM@EHFPLEPH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AAL?$AAi?$AAs?$AAt?$AAT?$AAo@
0x1C00174E0: "NduConvertAppMetaDataListToUserA" ??_C@_1FE@OKFBCOCB@?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAT?$AAo?$AAU?$AAs?$AAe?$AAr?$AAA@
0x1C0016188: NduInboundMacFrameNativeFilter
0x1C001D098: "__cdecl _imp_FwpsCalloutUnregisterByKey0" __imp_FwpsCalloutUnregisterByKey0
0x1C0015808: "<== NduCreateWfpFiltersList" ??_C@_1DI@HBGMGLBH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C000DBBC: NduUninitializeWfpFilter
0x1C00114C0: "==> NduInboundMacClassifyProcess" ??_C@_1FE@JDPJAKCD@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
0x1C0015D90: NduInboundTransportSubLayerFilterDesc
0x1C001D2F8: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C0011258: NduTraceProvider
0x1C0004534: NduFindOrCreateAppStatsEx
0x1C0017FE8: "<== NduTokenProcessWorkItem" ??_C@_1DI@KOPBDGDN@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AA?$AA@
0x1C001D318: "__cdecl _imp_KeQueryMaximumProcessorCountEx" __imp_KeQueryMaximumProcessorCountEx
0x1C001D250: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C0018760: "==> NduUpdateProcessEnergyWorker" ??_C@_1FA@PDCADFEM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr@
0x1C000B098: NduInitializeDpcContext
0x1C00034A4: NduCreateProcessStats
0x1C001D220: "__cdecl _imp_IoQueueWorkItemEx" __imp_IoQueueWorkItemEx
0x1C0013F10: "<== NduSetAppMetaDataListWorkerR" ??_C@_1EO@IJHOJKHJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAR@
0x1C0013238: "==> NduSerializeStatistics" ??_C@_1DG@BBCBFNGG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C00180B0: "<== NduTokenComputeTokensWorkerR" ??_C@_1EO@EGGPLCMP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAR@
0x1C00173A0: "<== NduTogglePerProcActiveProces" ??_C@_1FI@DGFEMCLB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAg?$AAg?$AAl?$AAe?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs@
0x1C0003A68: NduCleanupProcessStats
0x1C00175A0: "==> NduConvertProcessStatsListTo" ??_C@_1FM@KPAKEPON@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AAL?$AAi?$AAs?$AAt?$AAT?$AAo@
0x1C0006BE0: PplGenericFreeFunction
0x1C0011248: NduTraceDebugStringVerbose
0x1C0017F70: "ULongdd" ??_C@_1BA@KCOPIEAE@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAd?$AAd?$AA?$AA@
0x1C001D018: "__cdecl _imp_FwpmProviderDeleteByKey0" __imp_FwpmProviderDeleteByKey0
0x1C000BDA4: NduHandleFragmentReceived
0x1C001D360: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C0017F10: "ULongLongMult" ??_C@_1BM@NHFKAIFF@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAL?$AAo?$AAn?$AAg?$AAM?$AAu?$AAl?$AAt?$AA?$AA@
0x1C0012490: "NduTokenGetAppContext" ??_C@_1CM@MGHPBBDB@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAG?$AAe?$AAt?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0016820: "Ran out of memory at: NduPerProc" ??_C@_1HM@EDDEAODM@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc@
0x1C0011E30: Microsoft_Windows_NduLevels
0x1C000C1D0: NduInitializeWfpCalloutLayerFast
0x1C00148A8: "==> NduHandleNblDuplicated" ??_C@_1DG@DLGNCBND@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAD?$AAu?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x1C001D088: "__cdecl _imp_FwpmBfeStateSubscribeChanges0" __imp_FwpmBfeStateSubscribeChanges0
0x1C0018800: "==> NduCreateUpdateProcessEnergy" ??_C@_1EO@JJEKDGEM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy@
0x1C0016178: NduOutboundMacFrameNativeFilter
0x1C0016220: "Ran out of memory at: NduCreateP" ??_C@_1GC@PLCKFCJG@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP@
0x1C000D830: NduDeleteWfpFiltersList
0x1C0018520: "Ran out of memory at: NduQueueWo" ??_C@_1HG@LMAOHKKF@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAW?$AAo@
0x1C0013940: "==> NduSetAppMetaDataListForRedi" ??_C@_1FG@EEADBNIF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAF?$AAo?$AAr?$AAR?$AAe?$AAd?$AAi@
0x1C0001E58: NduProcessQueryStatistics
0x1C0014760: "<== NduOutboundMacClassify" ??_C@_1DG@OMBLADKK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C001D180: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C0011120: "System\IPv6 Control Message" ??_C@_1DI@BHIEKPEG@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAI?$AAP?$AAv?$AA6?$AA?5?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?5?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C000EE48: NduMergeProcessStats
0x1C0017340: "==> NduTogglePerProcActiveProces" ??_C@_1FI@IPJFGLPJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAg?$AAg?$AAl?$AAe?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs@
0x1C0014AF8: "NduHandleNblDuplicated" ??_C@_1CO@EHKCPLFP@?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAD?$AAu?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x1C00171E8: "NduFindOrCreateAppStats" ??_C@_1DA@IIPMPGON@?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0013170: "Ran out of memory at: NduSnapsho" ??_C@_1FI@DGNNNFBL@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAn?$AAa?$AAp?$AAs?$AAh?$AAo@
0x1C0017C40: "<== NduTokenReleaseAppContext" ??_C@_1DM@FBJAEGBC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0011820: "==> NduUpdateProcessStats" ??_C@_1DE@GMECIOPD@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0003D1C: NduInsertInterfaceStatsToList
0x1C0012A08: "RtlCreateAcl" ??_C@_1BK@EMIHHJAK@?$AAR?$AAt?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAc?$AAl?$AA?$AA@
0x1C0015900: "FwpmTransactionCommit0" ??_C@_1CO@MALGAGBF@?$AAF?$AAw?$AAp?$AAm?$AAT?$AAr?$AAa?$AAn?$AAs?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAC?$AAo?$AAm?$AAm?$AAi?$AAt?$AA0?$AA?$AA@
0x1C001D2A8: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C0003CAC: NduProcessInterfaceByteCountLimit
0x1C001D168: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C0001DA0: NduTokenFindAppContextByCookie
0x1C00153F0: NduOutboundMacFrameNativeCallout
0x1C0013580: "System\SMB" ??_C@_1BG@FGAJBNOE@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAS?$AAM?$AAB?$AA?$AA@
0x1C00119D0: "Ran out of memory at: NduTokenPr" ??_C@_1GK@PGOLNLMH@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr@
0x1C000E868: NduUnregisterInterfaceByteCountLimitExceeded
0x1C001D240: "__cdecl _imp_ObSetSecurityObjectByPointer" __imp_ObSetSecurityObjectByPointer
0x1C000F310: NduTokenComputeTokensWorkerRoutine
0x1C0012350: "<== NduDriverDispatchClose" ??_C@_1DG@IHAGKOHP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x1C00155D8: "NduAddWfpCallout" ??_C@_1CC@OIJPACGO@?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AA?$AA@
0x1C0012228: "DeviceSecurity" ??_C@_1BO@KKOENFII@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C000CF94: NduWfpObjectCountWait
0x1C00012D0: NduTokenProcessWorkItem
0x1C0014C60: "<== NduCreateWfpCalloutList" ??_C@_1DI@PMBILNBI@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C0011280: "Ran out of memory at: NduCreateN" ??_C@_1FE@BEGOCKKA@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAN@
0x1C0015D10: NduOutboundTransportCalloutDesc
0x1C00122A8: "==> NduDriverDispatchCreate" ??_C@_1DI@DGOODFGC@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?$AA@
0x1C0011EC0: "==> DriverEntry" ??_C@_1CA@KBONEPBC@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAE?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x1C0006FC0: memcpy
0x1C001D0E8: "__cdecl _imp_FwpsProxiedEndpointDereferenceEndpoint" __imp_FwpsProxiedEndpointDereferenceEndpoint
0x1C00118F8: "NduTokenProcessWorkItem" ??_C@_1DA@PIABLBLP@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AA?$AA@
0x1C0013110: "NduRetreiveUserAppStatsFromPassi" ??_C@_1FC@DENEBHNG@?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAU?$AAs?$AAe?$AAr?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAF?$AAr?$AAo?$AAm?$AAP?$AAa?$AAs?$AAs?$AAi@
0x1C00130B0: "NduRetreiveInterfaceStatsFromPas" ??_C@_1FC@ONLDHGNO@?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAF?$AAr?$AAo?$AAm?$AAP?$AAa?$AAs@
0x1C000C2BC: NduInitializeWfpContext
0x1C0004D80: NduOutboundMacClassify
0x1C001D0F8: "__cdecl _imp_FwpsProxiedEndpointMetadataValueGet" __imp_FwpsProxiedEndpointMetadataValueGet
0x1C0014398: "<== NduFlowEstablishedClassify" ??_C@_1DO@NENPOOMJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAl?$AAo?$AAw?$AAE?$AAs?$AAt?$AAa?$AAb?$AAl?$AAi?$AAs?$AAh?$AAe?$AAd?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C0014EA0: "<== NduUninitializeWfpCalloutLay" ??_C@_1EG@JGFIOMEE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy@
0x1C0014538: "==> NduInboundMacClassify" ??_C@_1DE@DNMOCBNM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C001D2C8: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C0017070: "==> NduFindOrCreateAppStatsEx" ??_C@_1DM@OGNKPMLH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAx?$AA?$AA@
0x1C00153B8: "==> NduDeleteWfpContext" ??_C@_1DA@NLICGEOD@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAW?$AAf?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C000BBAC: NduDeleteAppMetaDataListWorkItemContext
0x1C0012318: "==> NduDriverDispatchClose" ??_C@_1DG@NBIBCLJL@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAC?$AAl?$AAo?$AAs?$AAe?$AA?$AA@
0x1C0018290: "ZwWaitForSingleObject" ??_C@_1CM@DLJHNFN@?$AAZ?$AAw?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x1C00172C0: "==> NduFindOrCreateProcessStats" ??_C@_1EA@MFJAANBP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C001D268: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C001D0B8: "__cdecl _imp_FwpsNetBufferListAssociateContext1" __imp_FwpsNetBufferListAssociateContext1
0x1C001D108: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C00111D8: FWPM_CONDITION_FLAGS
0x1C0014728: "==> NduOutboundMacClassify" ??_C@_1DG@LKJMIGEO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C00170B0: "NduCreateProcessStats" ??_C@_1CM@MOJBBLBF@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0014D60: "==> NduInitializeWfpCalloutLayer" ??_C@_1EK@INCJFIEC@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy?$AAe?$AAr@
0x1C00122E0: "<== NduDriverDispatchCreate" ??_C@_1DI@JBCOCCKC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?$AA@
0x1C0017770: "==> NduRetreiveUserAppStatsFromP" ??_C@_1FK@JLPIFBIM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAU?$AAs?$AAe?$AAr?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAF?$AAr?$AAo?$AAm?$AAP@
0x1C0013470: "==> NduProcessQueryEnergy" ??_C@_1DE@OACDPKOD@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AA?$AA@
0x1C001D078: "__cdecl _imp_FwpiReleaseFlowLocation" __imp_FwpiReleaseFlowLocation
0x1C0006FC0: memmove
0x1C0001008: NduTokenReleaseAppContext
0x1C0012278: "<== NduDriverDispatch" ??_C@_1CM@NILIBDN@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AA?$AA@
0x1C0017190: "Ran out of memory at: NduCreateP" ??_C@_1FI@KBDAHOGM@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP@
0x1C0011CC0: "<== NduUpdateProcessEnergyContex" ??_C@_1EE@BKFGKFFM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx@
0x1C0013BD0: "FwpsProxiedEndpointClassifiableF" ??_C@_1LA@MJJIHIPN@?$AAF?$AAw?$AAp?$AAs?$AAP?$AAr?$AAo?$AAx?$AAi?$AAe?$AAd?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAi?$AAa?$AAb?$AAl?$AAe?$AAF@
0x1C001D278: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1C0017C80: "==> NduTokenRegisterQuotaExceede" ??_C@_1FM@JMGKLFLP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAE?$AAx?$AAc?$AAe?$AAe?$AAd?$AAe@
0x1C0017118: "<== NduFindOrCreateAppStatsEx" ??_C@_1DM@KLGEGEB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAx?$AA?$AA@
0x1C001D260: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C0015080: "Ran out of memory at: NduCreateW" ??_C@_1FE@GPEFOMGK@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW@
0x1C0014858: "==> NduFlowDelete" ??_C@_1CE@OAENBKPN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAl?$AAo?$AAw?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x1C0006F0C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C00127C8: "==> NduDispatchDpcOnCore" ??_C@_1DC@JAEIBEG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAD?$AAp?$AAc?$AAO?$AAn?$AAC?$AAo?$AAr?$AAe?$AA?$AA@
0x1C0004C20: NduDereferenceFlowContext
0x1C00125E8: "NduAddVpnInnerInterface" ??_C@_1DA@LAHCOMIE@?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAV?$AAp?$AAn?$AAI?$AAn?$AAn?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?$AA@
0x1C0006E18: NduInterfaceStatsAllocateForPerInterfaceStats
0x1C000D034: RtlStringCbCatW
0x1C0004744: NduCreateAppStats
0x1C001D100: fwpkclnt_NULL_THUNK_DATA
0x1C001D060: "__cdecl _imp_FwpmFilterDeleteById0" __imp_FwpmFilterDeleteById0
0x1C001D348: "__cdecl _imp_KeQueryActiveProcessorCountEx" __imp_KeQueryActiveProcessorCountEx
0x1C0015738: "==> NduCreateWfpFiltersList" ??_C@_1DI@NGKMHMNH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C0018020: "==> NduTokenComputeTokensWorkerR" ??_C@_1EO@EJGNIBEG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAR@
0x1C0015C70: NduOutboundTransportSubLayerFilterDesc
0x1C0012B70: "RtlAddAccessAllowedAce(SSTPServi" ??_C@_1EO@PPIFPAND@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAS?$AAS?$AAT?$AAP?$AAS?$AAe?$AAr?$AAv?$AAi@
0x1C0012A80: "RtlAddAccessAllowedAce(BIService" ??_C@_1EK@BIGPKAEK@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAB?$AAI?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe@
0x1C0017600: "No process stats to convert" ??_C@_1DI@IIMAHNLH@?$AAN?$AAo?$AA?5?$AAp?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAs?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AA?$AA@
0x1C0011F78: "NduCreateWfpContext" ??_C@_1CI@HCKCIELD@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0011E60: NduUpdateInterfaceStatsCounters
0x1C00144F0: "<== NduOutboundTransportClassify" ??_C@_1EC@MPKLHJPA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAo?$AAr?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy@
0x1C00152B0: "NduInitializeWfpCalloutLayerFast" ??_C@_1EC@JPJFKFCI@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy?$AAe?$AAr?$AAF?$AAa?$AAs?$AAt@
0x1C0011EA0: NduTokenRegisterQuotaExceeded
0x1C001D158: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C0014BC0: "==> NduCreateWfpCalloutList" ??_C@_1DI@FLNIKKNI@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C00123C8: "<== NduDriverDispatchCleanup" ??_C@_1DK@GBOKOIKJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AA?$AA@
0x1C00144A0: "==> NduOutboundTransportClassify" ??_C@_1EC@IHBPPCDO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAo?$AAr?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy@
0x1C0015EB0: NduAleFlowEstablishedV6SubLayerFilterDesc
0x1C0014F40: "<== NduUninitializeWfpCalloutLay" ??_C@_1EO@DBECMHDI@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy@
0x1C0013E70: "==> NduSetAppMetaDataListWorkerR" ??_C@_1EO@IGHMKJPA@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr?$AAR@
0x1C0002DA4: NduSerializeNetStatistics
0x1C0012790: "<== NduInitializeDpcContext" ??_C@_1DI@MHFPKCJO@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAD?$AAp?$AAc?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C000F86C: NduAddVpnInnerInterface
0x1C001F01C: NduStopTrace
0x1C0011FD0: "NduInitializeWfpContext" ??_C@_1DA@KBOAHFJH@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0010510: ActivityLingeringTimeoutDpcRoutine
0x1C00179F0: "<== NduTokenInitializeTokenStats" ??_C@_1EC@BIGJFMEP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAt?$AAa?$AAt?$AAs@
0x1C0001D0C: NduDereferenceAppStatsUnderLock
0x1C0014828: "<== NduCalloutNotify2" ??_C@_1CM@JDHNEBKD@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA2?$AA?$AA@
0x1C0015FD0: NduAleFlowEstablishedV4SubLayerFilterDesc
0x1C001D230: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C0011DE0: Microsoft_Windows_NduKeywords
0x1C001D090: "__cdecl _imp_FwpiReserveFlowLocation" __imp_FwpiReserveFlowLocation
0x1C001D2D8: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0014220: "FwpiFlowRemoveContextFast" ??_C@_1DE@PGBAMONG@?$AAF?$AAw?$AAp?$AAi?$AAF?$AAl?$AAo?$AAw?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAF?$AAa?$AAs?$AAt?$AA?$AA@
0x1C0014CE8: "FwpsCalloutRegister" ??_C@_1CI@PFJHNJMI@?$AAF?$AAw?$AAp?$AAs?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0015140: "==> NduInitializeWfpContext" ??_C@_1DI@FANAOFNF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0006690: NduQueueWorkItemForProcessEnergyData
0x1C0015DE0: NduInboundTransportSubLayerFilterName
0x1C0006C9C: NduInterfaceStatsAllocateForProcessStats
0x1C001B1A0: NduGlobalContext
0x1C001D1B0: "__cdecl _imp_ExpInterlockedFlushSList" __imp_ExpInterlockedFlushSList
0x1C0012CE0: "RtlSetDaclSecurityDescriptor" ??_C@_1DK@HLFCDAHC@?$AAR?$AAt?$AAl?$AAS?$AAe?$AAt?$AAD?$AAa?$AAc?$AAl?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x1C0013650: "<== NduInitializeWfpObjectCount" ??_C@_1EA@PDIPFGEC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1C000B4A0: McTemplateK0zxzqzkq
0x1C00149F8: "NduTokenProcessNetioEnergyCost" ??_C@_1DO@LDNHGNIG@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAN?$AAe?$AAt?$AAi?$AAo?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAC?$AAo?$AAs?$AAt?$AA?$AA@
0x1C00145B0: "==> NduOutboundMacClassifyProces" ??_C@_1FG@GCENJBAN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs@
0x1C0004CB0: NduWfpObjectCountDecrease
0x1C001D1C8: "__cdecl _imp_PsGetCurrentProcessId" __imp_PsGetCurrentProcessId
0x1C0012148: "\Device\NduIoDevice" ??_C@_1CI@NBODCFFP@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAN?$AAd?$AAu?$AAI?$AAo?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1C001D080: "__cdecl _imp_FwpmBfeStateUnsubscribeChanges0" __imp_FwpmBfeStateUnsubscribeChanges0
0x1C0012A30: "RtlAddAccessAllowedAce(DpsServic" ??_C@_1EM@ONPPKJGL@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAD?$AAp?$AAs?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc@
0x1C0014988: "NduUpdateInterfacePowerContext" ??_C@_1DO@MICIMCKP@?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C001D138: "__cdecl _imp_KeGetRecommendedSharedDataAlignment" __imp_KeGetRecommendedSharedDataAlignment
0x1C0017FA0: "Quota exhausted. Notifying clien" ??_C@_1EE@IHNDNBMH@?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?5?$AAe?$AAx?$AAh?$AAa?$AAu?$AAs?$AAt?$AAe?$AAd?$AA?4?$AA?5?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAl?$AAi?$AAe?$AAn@
0x1C0017250: "==> NduCleanupProcessStats" ??_C@_1DG@HGJNHBDB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0016DA8: "<== NduCreateStatsContext" ??_C@_1DE@EJCPENBH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C001D0B0: "__cdecl _imp_FwpiGetValueFromClassifyContext" __imp_FwpiGetValueFromClassifyContext
0x1C001D330: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C000D204: NduAddWfpFilter
0x1C0011B90: "Ran out of memory at: NduUpdateI" ??_C@_1HG@HCILDKGL@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI@
0x1C0015440: NduAleFlowEstablishedV4Callout
0x1C0016960: "ObReferenceObjectByHandle" ??_C@_1DE@PNIECNLO@?$AAO?$AAb?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAB?$AAy?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$AA@
0x1C000BA24: NduCreateWfpContext
0x1C00176C0: "NduConvertProcessStatsEntryToApp" ??_C@_1EM@DDHEJJMC@?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAn?$AAt?$AAr?$AAy?$AAT?$AAo?$AAA?$AAp?$AAp@
0x1C0011218: NduPowerQueueWorkItem
0x1C0015840: "==> NduInitializeWfpFiltersList" ??_C@_1EA@OBDCNCFG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C00022B0: NduCreateAndAssociateFlowContextToTransportLayer
0x1C0018240: "==> NduTokenCleanupComputeTokens" ??_C@_1EO@FDNPPBOD@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs@
0x1C000D0F8: NduAddWfpCallout
0x1C000CCC0: NduUninitializeWfpCalloutLayerFast
0x1C0015430: NduAleFlowEstablishedV6Callout
0x1C0014420: "NduGetFlowContextFromClassify" ??_C@_1DM@LMCHBJIM@?$AAN?$AAd?$AAu?$AAG?$AAe?$AAt?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAF?$AAr?$AAo?$AAm?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C0013DF8: "NduInitializeProcessStats" ??_C@_1DE@IIFCJEHC@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0011228: NduTraceError
0x1C00181F0: "<== NduTokenCreateComputeTokensW" ??_C@_1EM@DDIOJJGF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs?$AAW@
0x1C000E064: NduCleanupPerProcByteCountLimitDpcParamsList
0x1C0017F80: "ULongAdd" ??_C@_1BC@ILGLCMLE@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAA?$AAd?$AAd?$AA?$AA@
0x1C000DF0C: NduCleanupPerInterfaceStats
0x1C000AF40: NduDriverDispatchCleanup
0x1C0016DE0: "==> NduCleanupStatsContext" ??_C@_1DG@IHJOHGEC@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0012EB0: "NduInitializeDpcContext" ??_C@_1DA@JBKPCFBM@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAD?$AAp?$AAc?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C001D1D8: "__cdecl _imp_KeReleaseSpinLockFromDpcLevel" __imp_KeReleaseSpinLockFromDpcLevel
0x1C0017158: "==> NduCreateProcessStats" ??_C@_1DE@JHDCIDAN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0006EE8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0012110: "<== NduDrvUnload" ??_C@_1CC@PIGIODJP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAv?$AAU?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x1C000F950: NduCleanupVpnCxns
0x1C00121A0: "\Registry\Machine\SYSTEM\Current" ??_C@_1IG@INGLLILF@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C0006240: NduInboundMacClassify
0x1C000FF20: NduCreateInterfacePowerContext
0x1C00140E0: "Ran out of memory at: NduCreateA" ??_C@_1IO@LJGDBNIJ@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA@
0x1C0017BC8: "<== NduTokenGetAppContext" ??_C@_1DE@LAMCEAEA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAG?$AAe?$AAt?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0012550: "NduRegisterInterfaceByteCountLim" ??_C@_1FG@GLDAJBP@?$AAN?$AAd?$AAu?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAL?$AAi?$AAm@
0x1C0012F70: "==> NduSerializeNetStatistics" ??_C@_1DM@JGPNKGNJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAN?$AAe?$AAt?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C001D258: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C0015400: NduInboundMacFrameNativeCallout
0x1C000B3F8: McTemplateK0xz
0x1C001D120: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C001D148: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C00068B4: NduFindOrAssociateNblContext
0x1C0018310: "==> NduCreateInterfacePowerConte" ??_C@_1EG@FCPAADE@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe@
0x1C000B2C8: McTemplateK0xqqq
0x1C001D2A0: "__cdecl _imp_SeExports" __imp_SeExports
0x1C001D1C0: "__cdecl _imp_PsCreateSystemThread" __imp_PsCreateSystemThread
0x1C00139A0: "FwpsProxiedEndpointMetadataValue" ??_C@_1KE@PAKJGLOJ@?$AAF?$AAw?$AAp?$AAs?$AAP?$AAr?$AAo?$AAx?$AAi?$AAe?$AAd?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AAV?$AAa?$AAl?$AAu?$AAe@
0x1C0014B88: "<== NduNblNotifyCallback" ??_C@_1DC@CCCDJKID@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAN?$AAb?$AAl?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1C00183D0: "<== NduCreateInterfacePowerConte" ??_C@_1EG@IGHDMPHO@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe@
0x1C0016720: "==> NduProcessInterfaceByteCount" ??_C@_1EM@DPAIAPGF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt@
0x1C0016FB0: "NduCloneAppMetaDataList" ??_C@_1DA@OOMDLHCH@?$AAN?$AAd?$AAu?$AAC?$AAl?$AAo?$AAn?$AAe?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C0012138: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C001D170: "__cdecl _imp_KfRaiseIrql" __imp_KfRaiseIrql
0x1C00129E0: "RtlInitializeSid" ??_C@_1CC@PBFICBEK@?$AAR?$AAt?$AAl?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAS?$AAi?$AAd?$AA?$AA@
0x1C001D390: "__cdecl _IMPORT_DESCRIPTOR_NETIO" __IMPORT_DESCRIPTOR_NETIO
0x1C0004800: NduCloneAppMetaDataList
0x1C00044A0: NduDeleteAppMetaDataList
0x1C0004920: NduTokenInitializeTokenStats
0x1C0005360: NduHandleNblContextRemoved
0x1C0016A30: "ObReferenceObjectByHandle(PerPro" ??_C@_1GI@GPIOPAOL@?$AAO?$AAb?$AAR?$AAe?$AAf?$AAe?$AAr?$AAe?$AAn?$AAc?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAB?$AAy?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AA?$CI?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo@
0x1C0014AB8: "<== NduHandleFragmentReceived" ??_C@_1DM@GOGKDAKL@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAR?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AAd?$AA?$AA@
0x1C000B030: NduDriverDispatchCreate
0x1C0012D60: "==> NduCreateDeviceIoObject" ??_C@_1DI@EENLCIEM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x1C001B060: g_netactMonitorContexts
0x1C0003F18: NduConvertInterfaceStatsListToUserInterfaceStatsArray
0x1C00141E0: "==> NduRemoveAllFlowContexts" ??_C@_1DK@CMEKNDCE@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAA?$AAl?$AAl?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAs?$AA?$AA@
0x1C0011980: "==> NduTokenProcessNetioEnergyCo" ??_C@_1EG@FLAJFDLP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAN?$AAe?$AAt?$AAi?$AAo?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAC?$AAo@
0x1C00158A0: "NDU" ??_C@_17MONAEHKD@?$AAN?$AAD?$AAU?$AA?$AA@
0x1C0004D10: CarDisableCacheAwareReference
0x1C001D198: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C00116A0: "Ran out of memory at: NduUpdateI" ??_C@_1GO@JDOCDHAK@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI@
0x1C00184C0: "==> NduQueueWorkItemForProcessEn" ??_C@_1FC@HFJGOBIC@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AAF?$AAo?$AAr?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn@
0x1C0011A90: "==> NduUpdateInterfacePowerConte" ??_C@_1EG@CAPGPMJG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe@
0x1C0013FD0: "NduSetSecondaryAppMetaDataList" ??_C@_1DO@HMAHEMO@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C000ACDC: NduCreateDeviceIoObject
0x1C0011930: "<== NduTokenProcessWorkItemsQueu" ??_C@_1EE@HHBNPDNB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AAs?$AAQ?$AAu?$AAe?$AAu@
0x1C001D338: "__cdecl _imp_ExDeleteLookasideListEx" __imp_ExDeleteLookasideListEx
0x1C0012F18: "SizeTMult" ??_C@_1BE@JNDMJADK@?$AAS?$AAi?$AAz?$AAe?$AAT?$AAM?$AAu?$AAl?$AAt?$AA?$AA@
0x1C0012C20: "RtlAddAccessAllowedAce(LocalSyst" ??_C@_1EI@KMKKLGAP@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAL?$AAo?$AAc?$AAa?$AAl?$AAS?$AAy?$AAs?$AAt@
0x1C000FB88: NduSetVpnDefaultOuterProcess
0x1C0015620: "<== NduInitializeWfpFilter" ??_C@_1DG@OJKKFGOA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0012BC0: "RtlAddAccessAllowedAce(RASMANSer" ??_C@_1FC@NOANAII@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAR?$AAA?$AAS?$AAM?$AAA?$AAN?$AAS?$AAe?$AAr@
0x1C001D070: "__cdecl _imp_FwpmCalloutAdd0" __imp_FwpmCalloutAdd0
0x1C0012F30: "SizeTAdd" ??_C@_1BC@PIDGPJGO@?$AAS?$AAi?$AAz?$AAe?$AAT?$AAA?$AAd?$AAd?$AA?$AA@
0x1C0015D50: NduOutboundTransportCalloutName
0x1C00185A0: "<== NduQueueWorkItemForProcessEn" ??_C@_1FC@GBGDDMOJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAQ?$AAu?$AAe?$AAu?$AAe?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AAF?$AAo?$AAr?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn@
0x1C000177C: NduTokenUnregisterQuotaExceededNotification
0x1C0012FE8: "<== NduSerializeNetStatistics" ??_C@_1DM@HKJBBMCP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAN?$AAe?$AAt?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C001D0A8: "__cdecl _imp_FwpsCalloutRegister3" __imp_FwpsCalloutRegister3
0x1C0015CC0: NduOutboundTransportSubLayerFilterName
0x1C0013DA0: "Ran out of memory at: NduCreateF" ??_C@_1FG@MMJHCKEJ@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF@
0x1C0014E00: "<== NduInitializeWfpCalloutLayer" ??_C@_1EK@IBMMPBKE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy?$AAe?$AAr@
0x1C0017830: "<== NduRetreiveUserAppStatsFromP" ??_C@_1FK@MFCDGAM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAU?$AAs?$AAe?$AAr?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAF?$AAr?$AAo?$AAm?$AAP@
0x1C001D048: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x1C0012C68: "RtlAddAccessAllowedAce(Admins)" ??_C@_1DO@DKLGKAEF@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAA?$AAd?$AAm?$AAi?$AAn?$AAs?$AA?$CJ?$AA?$AA@
0x1C001D020: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1C001D110: "__cdecl _imp_KeGetCurrentProcessorNumberEx" __imp_KeGetCurrentProcessorNumberEx
0x1C0002FC4: NduSerializeInterfaceStatsList
0x1C00154B0: "==> NduAddWfpCallout" ??_C@_1CK@MKAGCNFM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AA?$AA@
0x1C0012B20: "RtlAddAccessAllowedAce(DusmServi" ??_C@_1EO@LNECBIFE@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAD?$AAu?$AAs?$AAm?$AAS?$AAe?$AAr?$AAv?$AAi@
0x1C000AB34: NduCreateDeviceContext
0x1C0017288: "<== NduCleanupProcessStats" ??_C@_1DG@CABKPENF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C00036F8: NduRetreiveInterfaceStatsFromPassiveList
0x1C001D37C: "__cdecl _IMPORT_DESCRIPTOR_fwpkclnt" __IMPORT_DESCRIPTOR_fwpkclnt
0x1C00166C0: "<== NduRetreiveInterfaceStatsFro" ??_C@_1FK@NFDFFHAE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAF?$AAr?$AAo@
0x1C0016288: "<== NduCreatePerInterfaceStats" ??_C@_1DO@ECHCHOMF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C000CF1C: NduUninitializeWfpObjectCount
0x1C0013E30: "<== NduCreateFlowContext" ??_C@_1DC@KEBKDDEM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0015770: "Ran out of memory at: NduCreateW" ??_C@_1FM@BFKGPLCJ@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW@
0x1C0013790: "<== NduWfpObjectCountWait" ??_C@_1DE@CDJDPCGA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AAW?$AAa?$AAi?$AAt?$AA?$AA@
0x1C0015238: "FwpiReserveFlowLocation" ??_C@_1DA@JJBJGPCJ@?$AAF?$AAw?$AAp?$AAi?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AAF?$AAl?$AAo?$AAw?$AAL?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00147F8: "==> NduCalloutNotify2" ??_C@_1CM@JDOJMJEJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA2?$AA?$AA@
0x1C0015530: "==> NduAddWfpFilter" ??_C@_1CI@NDLLHOJB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C001FD20: SignalActivityWorkRoutine
0x1C001D0E0: "__cdecl _imp_FwpiFlowAssociateContextFast" __imp_FwpiFlowAssociateContextFast
0x1C00125A8: "NduSetVpnDefaultOuterProcess" ??_C@_1DK@ECAAFDNL@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAV?$AAp?$AAn?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AAO?$AAu?$AAt?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0016D60: "NduTokenCreateComputeTokensWorke" ??_C@_1EE@MILOMFJG@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs?$AAW?$AAo?$AAr?$AAk?$AAe@
0x1C0020010: GsDriverEntry
0x1C001D358: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C000DC78: NduUninitializeWfpFiltersList
0x1C0016CC8: "==> NduCreateStatsContext" ??_C@_1DE@GGDBIEHO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0018420: "==> NduCleanupInterfacePowerCont" ??_C@_1EI@BAFNJHEJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt@
0x1C00188D0: "<== NduCreateUpdateProcessEnergy" ??_C@_1EO@JGEIAFMF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy@
0x1C001D328: ExEventObjectType
0x1C0018850: "Ran out of memory at: NduCreateU" ??_C@_1HC@IODNPJFC@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAU@
0x1C0012E18: "==> NduCreateDeviceContext" ??_C@_1DG@NILCKDIF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0014F90: "==> NduBfeStateChangeCallback" ??_C@_1DM@MGDFGOGJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAB?$AAf?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1C0015F90: NduAleFlowEstablishedV6CalloutName
0x1C0012958: "<== NduWaitForDpcCompletion" ??_C@_1DI@ICLCLKFI@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAD?$AAp?$AAc?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C0011274: "--" ??_C@_15KHFHDPFH@?$AA?9?$AA?9?$AA?$AA@
0x1C0003070: NduSerializeAppContext
0x1C0011FA0: "NduCreateDeviceIoObject" ??_C@_1DA@LFOLLIAO@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x1C0016E50: "==> NduCloneAppMetaDataList" ??_C@_1DI@BPPDCHGF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAo?$AAn?$AAe?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C0016198: NduOutboundTransportFilter
0x1C001D190: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C001D218: "__cdecl _imp_KeSetTimerEx" __imp_KeSetTimerEx
0x1C0017B58: "==> NduTokenGetAppContext" ??_C@_1DE@JPNMIJCJ@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAG?$AAe?$AAt?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C000FD10: NduCleanupInterfacePowerContext
0x1C0006E44: CarAcquireCacheAwareReference
0x1C00111B8: FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE_FAST
0x1C000AE64: NduDeleteDeviceIoObject
0x1C00181C0: "PsCreateSystemThread" ??_C@_1CK@PFAJHNDF@?$AAP?$AAs?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
0x1C0015338: "==> NduUninitializeWfpContext" ??_C@_1DM@ONPLPBNA@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0012990: "Ran out of memory at: NduSetDevi" ??_C@_1EO@OJGBBMIL@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAD?$AAe?$AAv?$AAi@
0x1C000FA04: NduCreateVpnContext
0x1C00160B0: NduAleFlowEstablishedV4CalloutName
0x1C0011198: FWPM_LAYER_OUTBOUND_TRANSPORT_FAST
0x1C000CA90: NduSetAppMetaDataListWorkerRoutine
0x1C0017E00: "==> NduTokenQueryTokenUsage" ??_C@_1DI@PNJCEOMM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0014610: "FwpsNetBufferListRetrieveContext" ??_C@_1GA@EFNHGGCG@?$AAF?$AAw?$AAp?$AAs?$AAN?$AAe?$AAt?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAL?$AAi?$AAs?$AAt?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt@
0x1C0004310: NduFreeUserAppStatsArray
0x1C0013D10: "<== NduSetAppMetaDataListForRedi" ??_C@_1FG@FOGEAKGB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAF?$AAo?$AAr?$AAR?$AAe?$AAd?$AAi@
0x1C0002920: CarAllocateCacheAwareReference
0x1C0013EC0: "NduSetAppMetaDataListForRedirect" ??_C@_1EO@NCMNLCMH@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAF?$AAo?$AAr?$AAR?$AAe?$AAd?$AAi?$AAr?$AAe?$AAc?$AAt@
0x1C000B290: CarFreeCacheAwareReference
0x1C00140C8: "Inbound" ??_C@_1BA@CBIIKKMH@?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?$AA@
0x1C000EC44: NduCreateStatsContext
0x1C0012620: "<== NduDriverDispatchDevControl" ??_C@_1EA@JAPGKLIE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAD?$AAe?$AAv?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C001D000: "__cdecl _imp_ConvertInterfaceLuidToAlias" __imp_ConvertInterfaceLuidToAlias
0x1C0013850: "RtlStringCbCatW" ??_C@_1CA@LCPOEEOH@?$AAR?$AAt?$AAl?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAb?$AAC?$AAa?$AAt?$AAW?$AA?$AA@
0x1C0015008: "<== NduBfeStateChangeCallback" ??_C@_1DM@CKFJNEJP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAB?$AAf?$AAe?$AAS?$AAt?$AAa?$AAt?$AAe?$AAC?$AAh?$AAa?$AAn?$AAg?$AAe?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
0x1C0017300: "<== NduFindOrCreateProcessStats" ??_C@_1EA@MOKALFFK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0010594: NotifyWnfState
0x1C001D300: "__cdecl _imp_KeResetEvent" __imp_KeResetEvent
0x1C00132F0: "User buffer is too small to fit " ??_C@_1GK@JHPHECKA@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAb?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?5?$AAi?$AAs?$AA?5?$AAt?$AAo?$AAo?$AA?5?$AAs?$AAm?$AAa?$AAl?$AAl?$AA?5?$AAt?$AAo?$AA?5?$AAf?$AAi?$AAt?$AA?5@
0x1C0016F60: "Ran out of memory at: NduCreateA" ??_C@_1FA@DACNCNL@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA@
0x1C0014258: "<== NduRemoveAllFlowContexts" ??_C@_1DK@GEGDCGGN@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAA?$AAl?$AAl?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAs?$AA?$AA@
0x1C00126B0: "<== NduDeserializeAppContextData" ??_C@_1EC@KJBPKFFE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAe?$AAs?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAD?$AAa?$AAt?$AAa@
0x1C000A65C: McGenEventWrite
0x1C001D288: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0003B60: NduDereferenceProcessStats
0x1C0001130: NduProcessUpdateProcessEnergyQueue
0x1C0015880: "FwpmEngineOpen0" ??_C@_1CA@BMPBKHLG@?$AAF?$AAw?$AAp?$AAm?$AAE?$AAn?$AAg?$AAi?$AAn?$AAe?$AAO?$AAp?$AAe?$AAn?$AA0?$AA?$AA@
0x1C00161A8: NduInboundTransportFilter
0x1C0010350: NduUpdateProcessEnergyWorkerRoutine
0x1C0016570: "<== NduConvertInterfaceStatsList" ??_C@_1HE@EMPDHKBE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAL?$AAi?$AAs?$AAt@
0x1C0013690: "==> NduUninitializeWfpObjectCoun" ??_C@_1EE@KGPCGBOO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn@
0x1C0011B30: "==> NduUpdateInterfaceTimeStatsE" ??_C@_1FC@LLBDKBEM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE@
0x1C0018470: "<== NduCleanupInterfacePowerCont" ??_C@_1EI@BBBAGMLL@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt@
0x1C0014880: "<== NduFlowDelete" ??_C@_1CE@LMCCMGNH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAl?$AAo?$AAw?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x1C0018600: "==> NduRetreiveInterfaceEnergyFr" ??_C@_1FM@KJJDFOKP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAF?$AAr@
0x1C00126F8: "==> NduInitializeDpcContext" ??_C@_1DI@GAJPLFFO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAD?$AAp?$AAc?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C000B6E0: NduCalloutNotify2
0x1C0011EB0: NduUpdateFlowStatsCounters
0x1C000B690: NduCalloutNotify
0x1C0006E90: "__cdecl _security_check_cookie" __security_check_cookie
0x1C001D030: "__cdecl _imp_FwpmTransactionCommit0" __imp_FwpmTransactionCommit0
0x1C0015558: "FwpmFilterAdd0" ??_C@_1BO@DAGNFHME@?$AAF?$AAw?$AAp?$AAm?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAA?$AAd?$AAd?$AA0?$AA?$AA@
0x1C0016EF0: "<== NduCloneAppMetaDataList" ??_C@_1DI@LIDDDAKF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAo?$AAn?$AAe?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C001FCD8: NetactUninitializeMonitorContext
0x1C0014170: "<== NduCreateAndAssociateFlowCon" ??_C@_1GK@FJMIACLO@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAn?$AAd?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn@
0x1C00156C8: "FwpmCalloutDeleteByKey0" ??_C@_1DA@OJPJLNMC@?$AAF?$AAw?$AAp?$AAm?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAB?$AAy?$AAK?$AAe?$AAy?$AA0?$AA?$AA@
0x1C0015268: "NduInitializeWfpCalloutLayer" ??_C@_1DK@PAKBFMOE@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1C0014DB0: "FwpiCalloutRegisterWithoutDevice" ??_C@_1EM@IDECHECF@?$AAF?$AAw?$AAp?$AAi?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAW?$AAi?$AAt?$AAh?$AAo?$AAu?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe@
0x1C0011F48: "NduCreateDeviceContext" ??_C@_1CO@KEHNHJAJ@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0006C50: PplGenericAllocateFunction
0x1C001D0C0: "__cdecl _imp_FwpsNetBufferListRetrieveContext0" __imp_FwpsNetBufferListRetrieveContext0
0x1C000440C: NduCleanupAppStats
0x1C001D368: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0011710: "<== NduUpdateInterfaceStatsEntry" ??_C@_1EK@BKIFBCJM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAn?$AAt?$AAr?$AAy@
0x1C0016C60: "<== NduUnregisterInterfaceByteCo" ??_C@_1GC@PHCNPPOO@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo@
0x1C0012840: "KeSetTargetProcessorDpcEx" ??_C@_1DE@FPCIHACJ@?$AAK?$AAe?$AAS?$AAe?$AAt?$AAT?$AAa?$AAr?$AAg?$AAe?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AAD?$AAp?$AAc?$AAE?$AAx?$AA?$AA@
0x1C000184C: NduTokenRegisterQuotaExceededNotification
0x1C0015930: "==> NduUninitializeWfpFiltersLis" ??_C@_1EE@LPHPFNLP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AAL?$AAi?$AAs@
0x1C0012800: "KeGetProcessorNumberFromIndex" ??_C@_1DM@MOIJIHC@?$AAK?$AAe?$AAG?$AAe?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AAN?$AAu?$AAm?$AAb?$AAe?$AAr?$AAF?$AAr?$AAo?$AAm?$AAI?$AAn?$AAd?$AAe?$AAx?$AA?$AA@
0x1C000AAD0: NduCleanupDeviceContext
0x1C00143E0: "==> NduInboundTransportClassify" ??_C@_1EA@GAGIHKIF@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAo?$AAr?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C0015978: "FwpmProviderDeleteByKey0" ??_C@_1DC@ECJAAHPP@?$AAF?$AAw?$AAp?$AAm?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAB?$AAy?$AAK?$AAe?$AAy?$AA0?$AA?$AA@
0x1C0011760: "==> NduUpdateInterfaceStats" ??_C@_1DI@CJPKDECN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0001990: NduDriverDispatchDevControl
0x1C0017DA0: "<== NduTokenUnregisterQuotaExcee" ??_C@_1GA@NCJOLNLH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAE?$AAx?$AAc?$AAe?$AAe@
0x1C0011178: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6
0x1C0012248: "==> NduDriverDispatch" ??_C@_1CM@NBPAJNH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AA?$AA@
0x1C00111F8: NduNewInterfaceAddedForPic
0x1C0004394: NduFreeUserAppContext
0x1C00151E0: "NduInitializeWfpObjectCount(WfpN" ??_C@_1FC@BFNHHONK@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$CI?$AAW?$AAf?$AAp?$AAN@
0x1C0004288: NduFreeNetStatsHandle
0x1C0012DB8: "NduSetDeviceDacl" ??_C@_1CC@MPOOBGON@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAD?$AAa?$AAc?$AAl?$AA?$AA@
0x1C000CBE8: NduSetSecondaryAppMetaDataList
0x1C00156F8: "<== NduUninitializeWfpFilter" ??_C@_1DK@BILFFIAH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0011378: "NduCreateNblContext" ??_C@_1CI@JIJECHJ@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0016410: "==> NduConvertInterfaceStatsList" ??_C@_1HE@BPGDEMLN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAL?$AAi?$AAs?$AAt@
0x1C0012AD0: "RtlAddAccessAllowedAce(WCMServic" ??_C@_1EM@LJPMNOOC@?$AAR?$AAt?$AAl?$AAA?$AAd?$AAd?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AAA?$AAl?$AAl?$AAo?$AAw?$AAe?$AAd?$AAA?$AAc?$AAe?$AA?$CI?$AAW?$AAC?$AAM?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc@
0x1C0014330: "NduCreateAndAssociateFlowContext" ??_C@_1GC@COCKOCGC@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAn?$AAd?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt@
0x1C00128B0: "==> NduWaitForDpcCompletion" ??_C@_1DI@CFHCKNJI@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAD?$AAp?$AAc?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C001D1D0: "__cdecl _imp_KeAcquireSpinLockAtDpcLevel" __imp_KeAcquireSpinLockAtDpcLevel
0x1C0003C04: NduInsertProcessStatsToList
0x1C0012660: "==> NduDeserializeAppContextData" ??_C@_1EC@OBKLCOJK@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAe?$AAs?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAD?$AAa?$AAt?$AAa@
0x1C0011650: "==> NduUpdateInterfaceStatsEntry" ??_C@_1EK@BGGALLHK@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAn?$AAt?$AAr?$AAy@
0x1C000BF04: NduHandleNblDuplicated
0x1C00158A8: "FwpmProviderAdd0" ??_C@_1CC@HAOAMCGG@?$AAF?$AAw?$AAp?$AAm?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AAA?$AAd?$AAd?$AA0?$AA?$AA@
0x1C0015110: "NduCreateWfpFiltersList" ??_C@_1DA@CHJMOMJF@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C0013548: "<== NduProcessQueryEnergy" ??_C@_1DE@MPDNDDIK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AA?$AA@
0x1C0011330: "FwpsNetBufferListRetrieveContext" ??_C@_1EC@JGLOKCCE@?$AAF?$AAw?$AAp?$AAs?$AAN?$AAe?$AAt?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAL?$AAi?$AAs?$AAt?$AAR?$AAe?$AAt?$AAr?$AAi?$AAe?$AAv?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt@
0x1C0011D08: "==> NduFlushProcessEnergyData" ??_C@_1DM@NIHIPLAN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAl?$AAu?$AAs?$AAh?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1C0017400: "Ran out of memory at: NduConvert" ??_C@_1IA@HFBLGBCA@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt@
0x1C00160F0: NduWfpCalloutProviderDesc
0x1C00187B0: "<== NduUpdateProcessEnergyWorker" ??_C@_1FA@KGLBHIFK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAW?$AAo?$AAr?$AAk?$AAe?$AAr@
0x1C000D960: NduInitializeWfpFiltersList
0x1C0016FE0: "<== NduCreateAppStats" ??_C@_1CM@JGEFBCDA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0003268: NduCalculateTotalBufferSize
0x1C0016310: "<== NduCleanupPerInterfaceStats" ??_C@_1EA@DMGFOHGM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAP?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0014D10: "<== NduInitializeWfpCalloutLayer" ??_C@_1EC@KPALCAJJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy?$AAe?$AAr@
0x1C0017010: "==> NduCleanupAppStats" ??_C@_1CO@DIGKNLBM@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C00153E8: "" ??_C@_07JKNNCAJG@?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA@
0x1C001126C: "++" ??_C@_15FEGFIDJG@?$AA?$CL?$AA?$CL?$AA?$AA@
0x1C0015600: "NduAddWfpFilter" ??_C@_1CA@IOPCHIFB@?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000E280: NduPerProcByteCountLimitNotificationDpc
0x1C001D0C8: "__cdecl _imp_FwpsNetBufferListRemoveContext0" __imp_FwpsNetBufferListRemoveContext0
0x1C0013360: "User buffer is too small to fit " ??_C@_1GK@HHEEHEOI@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAb?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?5?$AAi?$AAs?$AA?5?$AAt?$AAo?$AAo?$AA?5?$AAs?$AAm?$AAa?$AAl?$AAl?$AA?5?$AAt?$AAo?$AA?5?$AAf?$AAi?$AAt?$AA?5@
0x1C00135A0: "==> NduInitializeWfpObjectCount" ??_C@_1EA@PILPOOAH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
0x1C0011520: "<== NduInboundMacClassifyProcess" ??_C@_1FE@ONJCACND@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
0x1C00111A8: FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE_FAST
0x1C00133D0: "NduSerializeStatistics" ??_C@_1CO@GNOOIHOK@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0012D98: "IoCreateDevice" ??_C@_1BO@GFPBMBEP@?$AAI?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1C0017950: "<== NduTokenFindAppContextByCook" ??_C@_1EG@DBBCNOAE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAF?$AAi?$AAn?$AAd?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAB?$AAy?$AAC?$AAo?$AAo?$AAk@
0x1C00149C8: "NduUpdateProcessStats" ??_C@_1CM@DFOBBGOL@?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0002BC0: NduSetAppMetaDataList
0x1C00186C0: "==> NduProcessUpdateProcessEnerg" ??_C@_1EO@BOLILKHI@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg@
0x1C001D308: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C00178E0: "No matching app context found fo" ??_C@_1GG@HDMMLADD@?$AAN?$AAo?$AA?5?$AAm?$AAa?$AAt?$AAc?$AAh?$AAi?$AAn?$AAg?$AA?5?$AAa?$AAp?$AAp?$AA?5?$AAc?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?5?$AAf?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAf?$AAo@
0x1C0021000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C0011E80: NduTokenUnregisterQuotaExceeded
0x1C0013760: "KeWaitForSingleObject" ??_C@_1CM@GMLFKPCP@?$AAK?$AAe?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x1C0011000: "__cdecl load_config_used" _load_config_used
0x1C0017E38: "<== NduTokenQueryTokenUsage" ??_C@_1DI@FKFCFJAM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C00150D8: "NduInitializeWfpCalloutList" ??_C@_1DI@JJBIMJLF@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C000AA9C: McGenEventUnregister
0x1C001D280: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C000C4C4: NduInitializeWfpObjectCount
0x1C0011C70: "==> NduUpdateProcessEnergyContex" ??_C@_1EE@DFEFENIA@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx@
0x1C0001BF0: NduTokenQueryTokenUsage
0x1C001D340: "__cdecl _imp_ExAllocatePoolWithTagPriority" __imp_ExAllocatePoolWithTagPriority
0x1C0004150: NduWaitForDpcCompletion
0x1C0012028: "NduCreateInterfacePowerContext" ??_C@_1DO@ONPBDOAN@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C00146D0: "<== NduOutboundMacClassifyProces" ??_C@_1FG@HICKIGOJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAM?$AAa?$AAc?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs@
0x1C0013430: "<== NduProcessQueryStatistics" ??_C@_1DM@FKHNLJIJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0011E70: NduRegisterBytesLimitExceeded
0x1C00115A8: "<== NduHandleNblCloned" ??_C@_1CO@LFBFPJAK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAl?$AAo?$AAn?$AAe?$AAd?$AA?$AA@
0x1C0011238: NduTraceDebugStringError
0x1C000BCD0: NduDeleteWfpContext
0x1C0016350: "==> NduTogglePerProcActiveInterf" ??_C@_1FK@MKPDOEIG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAg?$AAg?$AAl?$AAe?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAA?$AAc?$AAt?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf@
0x1C0016070: NduAleFlowEstablishedV4CalloutDesc
0x1C0017F50: "ULongLongAdd" ??_C@_1BK@KDMMJEBI@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAL?$AAo?$AAn?$AAg?$AAA?$AAd?$AAd?$AA?$AA@
0x1C0012068: "<== DriverEntry" ??_C@_1CA@FCOJENJP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAE?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x1C0014010: "NduSetAppMetaDataListForRegularF" ??_C@_1EI@BBKNMKNN@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAF?$AAo?$AAr?$AAR?$AAe?$AAg?$AAu?$AAl?$AAa?$AAr?$AAF@
0x1C00177D0: "NduConvertProcessStatsListToAppS" ??_C@_1FE@HAOBLBLK@?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AAL?$AAi?$AAs?$AAt?$AAT?$AAo?$AAA?$AAp?$AAp?$AAS@
0x1C0012D20: "ObSetSecurityObjectByPointer" ??_C@_1DK@OENHBDHL@?$AAO?$AAb?$AAS?$AAe?$AAt?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAB?$AAy?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0016488: "No interface stats to convert" ??_C@_1DM@DJBLPIHE@?$AAN?$AAo?$AA?5?$AAi?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAs?$AA?5?$AAt?$AAo?$AA?5?$AAc?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AA?$AA@
0x1C000FAFC: NduGetOuterProcessIdForVpnCxn
0x1C0011188: FWPM_LAYER_INBOUND_TRANSPORT_FAST
0x1C0015578: "<== NduAddWfpFilter" ??_C@_1CI@BIBPJHCI@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0011208: NduFlowContextRefcount
0x1C00157D0: "NduCreateWfpCalloutFilter" ??_C@_1DE@MGDIKEJE@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0014460: "<== NduInboundTransportClassify" ??_C@_1EA@GLFIMCMA@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAT?$AAr?$AAa?$AAn?$AAs?$AAp?$AAo?$AAr?$AAt?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AA?$AA@
0x1C000B72C: NduCreateWfpCalloutList
0x1C0011110: "System" ??_C@_1O@GINMMDNN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
0x1C001D2D0: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C000FA94: NduGetOuterProcessIdForVpn
0x1C00168A0: "<== NduPerProcByteCountLimitNoti" ??_C@_1FI@KAAAOAHP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAe?$AAr?$AAP?$AAr?$AAo?$AAc?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt?$AAL?$AAi?$AAm?$AAi?$AAt?$AAN?$AAo?$AAt?$AAi@
0x1C0015F50: NduAleFlowEstablishedV6CalloutDesc
0x1C0016B00: "<== NduRegisterInterfaceByteCoun" ??_C@_1FO@DDAOPLGG@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn@
0x1C001D2F0: "__cdecl _imp_RtlValidSid" __imp_RtlValidSid
0x1C0015658: "==> NduUninitializeWfpFilter" ??_C@_1DK@FAJMKNEO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000C568: NduIsL2MediaTypeWan
0x1C001D0A0: "__cdecl _imp_FwpiCalloutRegisterWithoutDeviceFast0" __imp_FwpiCalloutRegisterWithoutDeviceFast0
0x1C00189C8: WNF_CNET_RADIO_ACTIVITY
0x1C0017F30: "ULongLongSub" ??_C@_1BK@HALDCMKM@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAL?$AAo?$AAn?$AAg?$AAS?$AAu?$AAb?$AA?$AA@
0x1C000FE00: NduCleanupUpdateProcessEnergyWorker
0x1C0017EB0: "Ran out of memory at: NduTokenPr" ??_C@_1FM@MKDLKGAD@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr@
0x1C0015BD0: NduInboundMacFrameNativeCalloutDesc
0x1C001D1B8: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1C0011168: FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4
0x1C0015500: "<== NduAddWfpCallout" ??_C@_1CK@CGNHKJNF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AA?$AA@
0x1C00159B0: NduOutboundMacFrameNativeSubLayerFilterDesc
0x1C0014958: "NduUpdateInterfaceStats" ??_C@_1DA@NIMKKEGP@?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0018100: "==> NduTokenCreateComputeTokensW" ??_C@_1EM@JEKANKKG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs?$AAW@
0x1C0014B28: "NduHandleNblCloned" ??_C@_1CG@OODHKIKK@?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAl?$AAo?$AAn?$AAe?$AAd?$AA?$AA@
0x1C0001F68: NduSnapshotStatistics
0x1C0015180: "NduInitializeWfpObjectCount(WfpF" ??_C@_1FE@PNNPJNBB@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$CI?$AAW?$AAf?$AAp?$AAF@
0x1C0012410: "==> NduDriverDispatchDevControl" ??_C@_1EA@JLMGBDMB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAD?$AAe?$AAv?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
0x1C0006ED0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C000A7DC: NduDrvUninitialize
0x1C0017D40: "==> NduTokenUnregisterQuotaExcee" ??_C@_1GA@DNLGFFCG@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAE?$AAx?$AAc?$AAe?$AAe@
0x1C000F0EC: NduTokenCleanupComputeTokensWorker
0x1C0017E70: "==> NduTokenProcessWorkItem" ??_C@_1DI@JDBCBPN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAW?$AAo?$AAr?$AAk?$AAI?$AAt?$AAe?$AAm?$AA?$AA@
0x1C0011440: "FwpiGetValueFromClassifyContext" ??_C@_1EA@BJCIOPDF@?$AAF?$AAw?$AAp?$AAi?$AAG?$AAe?$AAt?$AAV?$AAa?$AAl?$AAu?$AAe?$AAF?$AAr?$AAo?$AAm?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAf?$AAy?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0016D00: "Ran out of memory at: NduCreateS" ??_C@_1FI@FADDHJBP@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS@
0x1C001D1E0: "__cdecl _imp_PsGetCurrentProcess" __imp_PsGetCurrentProcess
0x1C001D1E8: "__cdecl _imp_PsUpdateComponentPower" __imp_PsUpdateComponentPower
0x1C0017A80: "The target appstats is already b" ??_C@_1JC@LNMPEHID@?$AAT?$AAh?$AAe?$AA?5?$AAt?$AAa?$AAr?$AAg?$AAe?$AAt?$AA?5?$AAa?$AAp?$AAp?$AAs?$AAt?$AAa?$AAt?$AAs?$AA?5?$AAi?$AAs?$AA?5?$AAa?$AAl?$AAr?$AAe?$AAa?$AAd?$AAy?$AA?5?$AAb@
0x1C00041C4: NduDispatchDpcOnCore
0x1C00165F0: "==> NduRetreiveInterfaceStatsFro" ??_C@_1FK@ECJPDAIE@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAF?$AAr?$AAo@
0x1C00109A4: PplpFreeOneLookasideList
0x1C0003620: NduFreeProcessStatsPerInterfaceStats
0x1C0013828: "RtlStringCbCopyW" ??_C@_1CC@JBHBDPEI@?$AAR?$AAt?$AAl?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAb?$AAC?$AAo?$AAp?$AAy?$AAW?$AA?$AA@
0x1C000A6C0: McTemplateK0z
0x1C00124C0: "NduTokenRegisterQuotaExceededNot" ??_C@_1FE@EDIBELOI@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAE?$AAx?$AAc?$AAe?$AAe?$AAd?$AAe?$AAd?$AAN?$AAo?$AAt@
0x1C000EF48: McTemplateK0q
0x1C0013A50: "FwpsProxiedEndpointMetadataValue" ??_C@_1JC@IKOHHEJ@?$AAF?$AAw?$AAp?$AAs?$AAP?$AAr?$AAo?$AAx?$AAi?$AAe?$AAd?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AAV?$AAa?$AAl?$AAu?$AAe@
0x1C000EB04: NduCleanupStatsContext
0x1C001B1D8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUmvgUmwfUhbhUlyquivUznwGEUkivxlnkOlyq@ndu" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUmvgUmwfUhbhUlyquivUznwGEUkivxlnkOlyq@ndu
0x1C00117E8: "<== NduUpdateInterfaceStats" ??_C@_1DI@IODKCDON@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0016770: "<== NduProcessInterfaceByteCount" ??_C@_1EM@JICGEMKG@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo?$AAu?$AAn?$AAt@
0x1C0014058: "NduCreateFlowContext" ??_C@_1CK@NPAEKAJC@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0013D68: "==> NduCreateFlowContext" ??_C@_1DC@KAHBIGAI@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C000496C: PplpLazyInitializeLookasideList
0x1C0013270: "<== NduSerializeStatistics" ??_C@_1DG@EHKGNIIC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C00105E4: QueueSignalActivityWorkItem
0x1C000EFAC: McTemplateK0zqzkqq
0x1C00115D8: "NduHandleNblContextRemoved" ??_C@_1DG@BLKEJAME@?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAd?$AA?$AA@
0x1C001D050: "__cdecl _imp_FwpmBfeStateGet0" __imp_FwpmBfeStateGet0
0x1C000D3F4: NduCreateWfpFiltersList
0x1C0013200: "<== NduSnapshotStatistics" ??_C@_1DE@CPMBOBBD@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAn?$AAa?$AAp?$AAs?$AAh?$AAo?$AAt?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0013518: "NduProcessQueryEnergy" ??_C@_1CM@LJIAGCPL@?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AA?$AA@
0x1C0011C10: "<== NduUpdateInterfaceTimeStatsE" ??_C@_1FC@KPOGHMCH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAT?$AAi?$AAm?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE@
0x1C0012730: "Ran out of memory at: NduInitial" ??_C@_1FM@KDJFDCKA@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl@
0x1C001D160: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C0013C80: "FwpsProxiedEndpointMetadataValue" ??_C@_1II@FEPFCFG@?$AAF?$AAw?$AAp?$AAs?$AAP?$AAr?$AAo?$AAx?$AAi?$AAe?$AAd?$AAE?$AAn?$AAd?$AAp?$AAo?$AAi?$AAn?$AAt?$AAM?$AAe?$AAt?$AAa?$AAd?$AAa?$AAt?$AAa?$AAV?$AAa?$AAl?$AAu?$AAe@
0x1C0011858: "<== NduUpdateProcessStats" ??_C@_1DE@EDFMEHJK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C001D2B0: "__cdecl _imp_KeInsertQueueDpc" __imp_KeInsertQueueDpc
0x1C001B050: "__cdecl _security_cookie" __security_cookie
0x1C0011E40: NduUnregisterBytesLimitExceeded
0x1C0018660: "<== NduRetreiveInterfaceEnergyFr" ??_C@_1FM@EBMGKFLF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAt?$AAr?$AAe?$AAi?$AAv?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAE?$AAn?$AAe?$AAr?$AAg?$AAy?$AAF?$AAr@
0x1C0015048: "==> NduCreateWfpContext" ??_C@_1DA@IDAAKGGA@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAW?$AAf?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C001D208: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C0015B10: NduInboundMacFrameNativeSubLayerFilterDesc
0x1C00169A0: "Ran out of memory at: NduRegiste" ??_C@_1IC@PJMLPLBF@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe@
0x1C000D348: NduAddWfpFilterConditions
0x1C00161D8: "==> NduCreatePerInterfaceStats" ??_C@_1DO@CLCAIOAA@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C001D140: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C000FBE0: McTemplateK0qq
0x1C0015E70: NduInboundTransportCalloutName
0x1C000DD94: McTemplateK0xq
0x1C000A740: McTemplateK0zq
0x1C0011E90: NduFlowEstablished
0x1C000E454: NduRegisterInterfaceByteCountLimitExceeded
0x1C000A950: McGenControlCallbackV2
0x1C000E0E8: NduCreatePerInterfaceStats
0x1C0014FD0: "NduInitializeWfpFiltersList" ??_C@_1DI@BEGMBPLK@?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C001D320: "__cdecl _imp_PoEnergyEstimationEnabled" __imp_PoEnergyEstimationEnabled
0x1C00120B8: "<== NduDrvUninitialize" ??_C@_1CO@KDFIIHCP@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAv?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x1C0002A80: NduSetAppMetaDataListForRegularFlow
0x1C00154E0: "FwpmCalloutAdd0" ??_C@_1CA@OBLPOCDA@?$AAF?$AAw?$AAp?$AAm?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAA?$AAd?$AAd?$AA0?$AA?$AA@
0x1C000DE8C: McTemplateK0xqx
0x1C0016F28: "==> NduCreateAppStats" ??_C@_1CM@JGNBJKNK@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C0018970: "<== NduCleanupUpdateProcessEnerg" ??_C@_1FA@DPALADJB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg@
0x1C001D200: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C000DE0C: McTemplateK0xqh
0x1C0013870: "==> NduSetAppMetaDataListForRegu" ??_C@_1FA@EAGAPEDB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAF?$AAo?$AAr?$AAR?$AAe?$AAg?$AAu@
0x1C000CD28: NduUninitializeWfpContext
0x1C000C0CC: NduInitializeWfpCalloutLayer
0x1C00108A0: PplpCreateOneLookasideList
0x1C00161C8: NduAleFlowEstablishedV4Filter
0x1C0017B90: "NduFindOrCreateAppStatsEx" ??_C@_1DE@DPCICAII@?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAp?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAx?$AA?$AA@
0x1C001D008: NETIO_NULL_THUNK_DATA
0x1C0004B40: NduFlowDelete
0x1C0012EE0: "<== NduCreateDeviceContext" ??_C@_1DG@IODFCGGB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C00134B0: "User buffer is too small to fit " ??_C@_1GI@IHCHFKDL@?$AAU?$AAs?$AAe?$AAr?$AA?5?$AAb?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?5?$AAi?$AAs?$AA?5?$AAt?$AAo?$AAo?$AA?5?$AAs?$AAm?$AAa?$AAl?$AAl?$AA?5?$AAt?$AAo?$AA?5?$AAf?$AAi?$AAt?$AA?5@
0x1C00113F0: "<== NduFindOrAssociateNblContext" ??_C@_1EC@KBJBGHJD@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt@
0x1C001028C: NduRetreiveInterfaceEnergyFromPassiveList
0x1C000C748: NduSetAppMetaDataListForRedirectedFlow
0x1C00161B8: NduAleFlowEstablishedV6Filter
0x1C00164D0: "Ran out of memory at: NduConvert" ??_C@_1JI@EBCCDDDI@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt@
0x1C001D210: "__cdecl _imp_KeFlushQueuedDpcs" __imp_KeFlushQueuedDpcs
0x1C0017C00: "==> NduTokenReleaseAppContext" ??_C@_1DM@LNPMPMOE@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAR?$AAe?$AAl?$AAe?$AAa?$AAs?$AAe?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C00147C8: "<== NduCalloutNotify" ??_C@_1CK@OCJMEDPC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1C0020044: "__cdecl _security_init_cookie" __security_init_cookie
0x1C0014E50: "==> NduUninitializeWfpCalloutLay" ??_C@_1EG@BFAECDAO@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy@
0x1C000B600: NduBfeStateChangeCallback
0x1C001D228: "__cdecl _imp_ExInitializeLookasideListEx" __imp_ExInitializeLookasideListEx
0x1C001D1F8: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C001D310: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C00111C8: FWPM_SUBLAYER_INSPECTION
0x1C001D150: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C0017640: "Ran out of memory at: NduConvert" ??_C@_1IA@OPKLPOLL@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt@
0x1C0001648: NduTokenGetAppContext
0x1C0015450: "Ran out of memory at: NduAddWfpF" ??_C@_1GA@CCELEOKJ@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAA?$AAd?$AAd?$AAW?$AAf?$AAp?$AAF@
0x1C001D118: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0011890: "ULongMult" ??_C@_1BE@BAFCOIKJ@?$AAU?$AAL?$AAo?$AAn?$AAg?$AAM?$AAu?$AAl?$AAt?$AA?$AA@
0x1C00107F8: PplDestroyLookasideList
0x1C000AFC0: NduDriverDispatchClose
0x1C0011EE0: "NduCreatePerInterfaceStats" ??_C@_1DG@PMJLODDB@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C00179A0: "==> NduTokenInitializeTokenStats" ??_C@_1EC@FANNNHIB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAt?$AAa?$AAt?$AAs@
0x1C0014088: "FwpsFlowAssociateContextFast" ??_C@_1DK@JCHKOBEC@?$AAF?$AAw?$AAp?$AAs?$AAF?$AAl?$AAo?$AAw?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAF?$AAa?$AAs?$AAt?$AA?$AA@
0x1C0016E18: "<== NduCleanupStatsContext" ??_C@_1DG@NBBJPDKG@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAS?$AAt?$AAa?$AAt?$AAs?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0014798: "==> NduCalloutNotify" ??_C@_1CK@OENMHHL@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAN?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?$AA@
0x1C0012F48: "RtlStringCchCopyW" ??_C@_1CE@BNFPKPIP@?$AAR?$AAt?$AAl?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAC?$AAc?$AAh?$AAC?$AAo?$AAp?$AAy?$AAW?$AA?$AA@
0x1C000AA5C: McGenEventRegister
0x1C0015B70: NduInboundMacFrameNativeSubLayerFilterName
0x1C0014EF0: "==> NduUninitializeWfpCalloutLay" ??_C@_1EO@DOEAPELB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAC?$AAa?$AAl?$AAl?$AAo?$AAu?$AAt?$AAL?$AAa?$AAy@
0x1C0015698: "FwpmFilterDeleteById0" ??_C@_1CM@KDLNHBIC@?$AAF?$AAw?$AAp?$AAm?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AAB?$AAy?$AAI?$AAd?$AA0?$AA?$AA@
0x1C00117A0: "NduUpdateInterfaceStatsEntryList" ??_C@_1EC@ENMEGBA@?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAn?$AAt?$AAr?$AAy?$AAL?$AAi?$AAs?$AAt@
0x1C0012000: "NduCreateVpnContext" ??_C@_1CI@DGOBJIBC@?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAV?$AAp?$AAn?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C000FA6C: NduFindVpnCxnByLuid
0x1C0015E30: NduInboundTransportCalloutDesc
0x1C00137D0: "Ran out of memory at: NduSetAppM" ??_C@_1FI@IGJHHCKP@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM@
0x1C001D2B8: "__cdecl _imp_KeSetTargetProcessorDpcEx" __imp_KeSetTargetProcessorDpcEx
0x1C0012CA8: "RtlCreateSecurityDescriptor" ??_C@_1DI@HKBHGFOL@?$AAR?$AAt?$AAl?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo?$AAr?$AA?$AA@
0x1C00128F0: "KeWaitForSingleObject(DpcContext" ??_C@_1GG@ODAAANJE@?$AAK?$AAe?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAS?$AAi?$AAn?$AAg?$AAl?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$CI?$AAD?$AAp?$AAc?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt@
0x1C0020078: NetactInitializeMonitorContext
0x1C000AED0: NduDriverDispatch
0x1C000BC1C: NduDeleteNblContext
0x1C001D2E8: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0006D20: NduQueryStatisticsDpc
0x1C0012878: "<== NduDispatchDpcOnCore" ??_C@_1DC@NGPDEAC@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAD?$AAp?$AAc?$AAO?$AAn?$AAC?$AAo?$AAr?$AAe?$AA?$AA@
0x1C0017CE0: "<== NduTokenRegisterQuotaExceede" ??_C@_1FM@HEDPEOKF@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAE?$AAx?$AAc?$AAe?$AAe?$AAd?$AAe@
0x1C0016148: NduWfpCalloutProviderName
0x1C0012518: "NduTokenQueryTokenUsage" ??_C@_1DA@MKCNOIO@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C00120E8: "==> NduDrvUnload" ??_C@_1CC@JIELJHLB@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAv?$AAU?$AAn?$AAl?$AAo?$AAa?$AAd?$AA?$AA@
0x1C0006EC0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C001D178: "__cdecl _imp_KeLowerIrql" __imp_KeLowerIrql
0x1C0014A78: "==> NduHandleFragmentReceived" ??_C@_1DM@ICAGIKFN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAF?$AAr?$AAa?$AAg?$AAm?$AAe?$AAn?$AAt?$AAR?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AAd?$AA?$AA@
0x1C001D038: "__cdecl _imp_FwpmTransactionBegin0" __imp_FwpmTransactionBegin0
0x1C0003D78: NduConvertProcessStatsListToAppStatsArray
0x1C0002780: NduFindOrCreateProcessStats
0x1C0004048: NduConvertAppMetaDataListToUserAppContext
0x1C0015A70: NduOutboundMacFrameNativeCalloutDesc
0x1C0012388: "==> NduDriverDispatchCleanup" ??_C@_1DK@CJMDBNOA@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AA?$AA@
0x1C001D1A8: "__cdecl _imp_KeWaitForMultipleObjects" __imp_KeWaitForMultipleObjects
0x1C0016B60: "==> NduUnregisterInterfaceByteCo" ??_C@_1GC@DBKGMBNH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAB?$AAy?$AAt?$AAe?$AAC?$AAo@
0x1C0010634: PplCreateLookasideList
0x1C00170E0: "NduTokenSetTrackTokenUsage" ??_C@_1DG@ILCACJFC@?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAe?$AAt?$AAT?$AAr?$AAa?$AAc?$AAk?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0002660: NduCreateFlowContext
0x1C001D130: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C0012088: "==> NduDrvUninitialize" ??_C@_1CO@OEKKJHMP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAD?$AAr?$AAv?$AAU?$AAn?$AAi?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AA?$AA@
0x1C0018070: "KeWaitForMultipleObjects" ??_C@_1DC@IOIMPGBO@?$AAK?$AAe?$AAW?$AAa?$AAi?$AAt?$AAF?$AAo?$AAr?$AAM?$AAu?$AAl?$AAt?$AAi?$AAp?$AAl?$AAe?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAs?$AA?$AA@
0x1C0011AE0: "<== NduUpdateInterfacePowerConte" ??_C@_1EG@KDKKDDNM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAP?$AAo?$AAw?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAe@
0x1C0015AC0: NduOutboundMacFrameNativeCalloutName
0x1C000D8AC: NduInitializeWfpFilter
0x1C00111E8: NduPowerDebug
0x1C00100FC: NduCreateUpdateProcessEnergyWorker
0x1C0011E50: NduTraceDebugString
0x1C0017540: "<== NduConvertProcessStatsEntryT" ??_C@_1FE@JNHLGPEJ@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AAE?$AAn?$AAt?$AAr?$AAy?$AAT@
0x1C0002100: NduSerializeStatistics
0x1C001D0D8: "__cdecl _imp_FwpsProxiedEndpointReferenceEndpoint" __imp_FwpsProxiedEndpointReferenceEndpoint
0x1C000A8F0: NduDrvUnload
0x1C00138C0: "NduSetAppMetaDataList" ??_C@_1CM@OJDGBHNG@?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
0x1C00148E0: "<== NduHandleNblDuplicated" ??_C@_1DG@GNOKKEDH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAD?$AAu?$AAp?$AAl?$AAi?$AAc?$AAa?$AAt?$AAe?$AAd?$AA?$AA@
0x1C001D028: "__cdecl _imp_FwpmTransactionAbort0" __imp_FwpmTransactionAbort0
0x1C001D350: ntoskrnl_NULL_THUNK_DATA
0x1C00025F0: NduReferenceFlowContext
0x1C000B360: McTemplateK0xxqq
0x1C001D2E0: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0012170: "\GLOBAL??\NduIoDevice" ??_C@_1CM@PIDKEFPE@?$AA?2?$AAG?$AAL?$AAO?$AAB?$AAA?$AAL?$AA?$DP?$AA?$DP?$AA?2?$AAN?$AAd?$AAu?$AAI?$AAo?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
0x1C00158D0: "FwpmTransactionBegin0" ??_C@_1CM@OOMGBJMO@?$AAF?$AAw?$AAp?$AAm?$AAT?$AAr?$AAa?$AAn?$AAs?$AAa?$AAc?$AAt?$AAi?$AAo?$AAn?$AAB?$AAe?$AAg?$AAi?$AAn?$AA0?$AA?$AA@
0x1C0016E90: "Ran out of memory at: NduCloneAp" ??_C@_1FM@NMPJKAJL@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAl?$AAo?$AAn?$AAe?$AAA?$AAp@
0x1C00182C0: "<== NduTokenCleanupComputeTokens" ??_C@_1EO@FMNNMCGK@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAC?$AAl?$AAe?$AAa?$AAn?$AAu?$AAp?$AAC?$AAo?$AAm?$AAp?$AAu?$AAt?$AAe?$AAT?$AAo?$AAk?$AAe?$AAn?$AAs@
0x1C00138F0: "<== NduSetAppMetaDataListForRegu" ??_C@_1FA@BFPBLJCH@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAS?$AAe?$AAt?$AAA?$AAp?$AAp?$AAM?$AAe?$AAt?$AAa?$AAD?$AAa?$AAt?$AAa?$AAL?$AAi?$AAs?$AAt?$AAF?$AAo?$AAr?$AAR?$AAe?$AAg?$AAu@
0x1C000FC54: McTemplateK0xxxqqqu
0x1C00112E0: "==> NduFindOrAssociateNblContext" ??_C@_1EC@OJCFOMFN@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt@
0x1C001B000: NduTraceProvider_Context
0x1C001D270: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C000C5B0: NduRemoveAllFlowContexts
0x1C001D010: "__cdecl _imp_DPGetProcessIdFromProfileName0" __imp_DPGetProcessIdFromProfileName0
0x1C0012DE0: "<== NduCreateDeviceIoObject" ??_C@_1DI@ODBLDPIM@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AA?$AA@
0x1C0013F60: "==> NduCreateAndAssociateFlowCon" ??_C@_1GK@CJDEGNIH@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAA?$AAn?$AAd?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAF?$AAl?$AAo?$AAw?$AAC?$AAo?$AAn@
0x1C0015410: NduOutboundTransportCallout
0x1C001D248: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C0011480: "NduFindOrAssociateNblContext" ??_C@_1DK@PODLBLOO@?$AAN?$AAd?$AAu?$AAF?$AAi?$AAn?$AAd?$AAO?$AAr?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAN?$AAb?$AAl?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C0016AA0: "NduDispatchDpcOnCore(UnregisterB" ??_C@_1FE@MOPFANCC@?$AAN?$AAd?$AAu?$AAD?$AAi?$AAs?$AAp?$AAa?$AAt?$AAc?$AAh?$AAD?$AAp?$AAc?$AAO?$AAn?$AAC?$AAo?$AAr?$AAe?$AA?$CI?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAB@
0x1C0018710: "<== NduProcessUpdateProcessEnerg" ??_C@_1EO@BBLKIJPB@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAE?$AAn?$AAe?$AAr?$AAg@
0x1C000A460: DriverEntry
0x1C001F008: NduStartTrace
0x1C0011268: "!" ??_C@_13MGDFOILI@?$AA?$CB?$AA?$AA@
0x1C00113A0: "FwpsNetBufferListAssociateContex" ??_C@_1EE@OHALOOLN@?$AAF?$AAw?$AAp?$AAs?$AAN?$AAe?$AAt?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAL?$AAi?$AAs?$AAt?$AAA?$AAs?$AAs?$AAo?$AAc?$AAi?$AAa?$AAt?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx@
0x1C001D040: "__cdecl _imp_FwpmProviderAdd0" __imp_FwpmProviderAdd0
0x1C0017A38: "==> NduTokenSetTrackTokenUsage" ??_C@_1DO@FMJLEEGD@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAT?$AAo?$AAk?$AAe?$AAn?$AAS?$AAe?$AAt?$AAT?$AAr?$AAa?$AAc?$AAk?$AAT?$AAo?$AAk?$AAe?$AAn?$AAU?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C00132A8: "==> NduProcessQueryStatistics" ??_C@_1DM@LGBBADHP@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C0003E84: NduConvertProcessStatsEntryToAppStats
0x1C0015C20: NduInboundMacFrameNativeCalloutName
0x1C0015A10: NduOutboundMacFrameNativeSubLayerFilterName
0x1C00135E0: "Ran out of memory at: NduInitial" ??_C@_1GE@FAMBINGO@?$AAR?$AAa?$AAn?$AA?5?$AAo?$AAu?$AAt?$AA?5?$AAo?$AAf?$AA?5?$AAm?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?3?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl@
0x1C0004A18: NduDeserializeAppContextData
0x1C00155A0: "==> NduInitializeWfpFilter" ??_C@_1DG@LPCNNDAE@?$AA?$DN?$AA?$DN?$AA?$DO?$AA?5?$AAN?$AAd?$AAu?$AAI?$AAn?$AAi?$AAt?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAW?$AAf?$AAp?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C001D290: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C001D058: "__cdecl _imp_FwpmCalloutDeleteByKey0" __imp_FwpmCalloutDeleteByKey0
0x1C000F6E8: NduTokenCreateComputeTokensWorker
0x1C0011610: "<== NduHandleNblReceiveComplete" ??_C@_1EA@MLDFDIOO@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAH?$AAa?$AAn?$AAd?$AAl?$AAe?$AAN?$AAb?$AAl?$AAR?$AAe?$AAc?$AAe?$AAi?$AAv?$AAe?$AAC?$AAo?$AAm?$AAp?$AAl?$AAe?$AAt?$AAe?$AA?$AA@
0x1C0012450: "NduDeserializeAppContextData" ??_C@_1DK@PGLFNJCJ@?$AAN?$AAd?$AAu?$AAD?$AAe?$AAs?$AAe?$AAr?$AAi?$AAa?$AAl?$AAi?$AAz?$AAe?$AAA?$AAp?$AAp?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
0x1C00142A0: "FwpsNetBufferListRemoveContext(N" ??_C@_1EK@EBDCMPNC@?$AAF?$AAw?$AAp?$AAs?$AAN?$AAe?$AAt?$AAB?$AAu?$AAf?$AAf?$AAe?$AAr?$AAL?$AAi?$AAs?$AAt?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$CI?$AAN@
0x1C0007300: memset
0x1C001D3A4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C001D0D0: "__cdecl _imp_FwpiFlowRemoveContextFast" __imp_FwpiFlowRemoveContextFast
0x1C0017218: "<== NduCreateProcessStats" ??_C@_1DE@LICMEKGE@?$AA?$DM?$AA?$DN?$AA?$DN?$AA?5?$AAN?$AAd?$AAu?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAS?$AAt?$AAa?$AAt?$AAs?$AA?$AA@
0x1C00038B0: NduRetreiveUserAppStatsFromPassiveTables
0x1C0013400: "NduSnapshotStatistics" ??_C@_1CM@FJHMLAGC@?$AAN?$AAd?$AAu?$AAS?$AAn?$AAa?$AAp?$AAs?$AAh?$AAo?$AAt?$AAS?$AAt?$AAa?$AAt?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@

[JEB Decompiler by PNF Software]