Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\ipnat.sys Base=0x1C0000000 SHA-256=CA2EDA41764FEC2B243E3B6E2C0A228A252D49F7271E5EFE328EDF7AB2E2D36F
PDB: ipnat.pdb GUID={75E05D33-6F4A-3A47-3C43A6B35B95A567} Age=1

687 located named symbols:
0x1C001E414: NatDeleteTicket
0x1C001CEB4: ShellSort
0x1C002E640: "RC" ??_C@_15IGNKAAHD@?$AAR?$AAC?$AA?$AA@
0x1C0016D1C: NatShutdownPptpManagement
0x1C002D480: tcpxsum
0x1C0013A14: NatDeleteAddressPool
0x1C00069C0: WppClassicProviderCallback
0x1C003F060: "__cdecl _imp_WmiCompleteRequest" __imp_WmiCompleteRequest
0x1C00208D8: NatInitializePacketManagement
0x1C00422D8: SepSddlGetAclForString
0x1C002E578: WPP_1c171ea7b5d4360db7fca6f1118d921b_Traceguids
0x1C0030000: IPNAT_Context
0x1C002E9A0: "NatDiscardFilterIPv6" ??_C@_1CK@GHBEBCBK@?$AAN?$AAa?$AAt?$AAD?$AAi?$AAs?$AAc?$AAa?$AAr?$AAd?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAI?$AAP?$AAv?$AA6?$AA?$AA@
0x1C00414B4: NatCreateExternalNaming
0x1C003F2C0: "__cdecl _imp_RtlFreeUnicodeString" __imp_RtlFreeUnicodeString
0x1C0020420: WPP_SF_ddddd
0x1C000DA94: WPP_SF_dDdDd
0x1C0030208: DisableBootTimeSecurityName
0x1C000DBD0: NatCleanupMapping
0x1C002E4A0: WPP_62b89b18919132aed44600576115c451_Traceguids
0x1C00303B8: ConnectionCreationEventGuid
0x1C0030F00: RedirectActiveRhizome
0x1C0030398: PacketDroppedEventGuid
0x1C0002420: NatDispatch
0x1C00301F8: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C0041150: WppTraceCallback
0x1C0015090: NatBuildPseudoHeaderPptp
0x1C0006260: NatEditorDeregister
0x1C003F1A0: "__cdecl _imp_ObfDereferenceObject" __imp_ObfDereferenceObject
0x1C0008D3C: WPP_SF_Lc
0x1C0017550: NatLookupOutboundIpMapping
0x1C0030880: PfnIoCreateDeviceSecure
0x1C0005AB8: NatMappingAttachEditor
0x1C003F150: "__cdecl _imp_RtlFindClearBits" __imp_RtlFindClearBits
0x1C000CEB4: NatDeleteAnyAssociatedInterface
0x1C0011160: NatpWmiFunctionControl
0x1C003F210: "__cdecl _imp_ExInitializeNPagedLookasideList" __imp_ExInitializeNPagedLookasideList
0x1C0001034: WPP_SF_L
0x1C003F3A0: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C003F190: "__cdecl _imp_ExEventObjectType" __imp_ExEventObjectType
0x1C003F028: "__cdecl _imp_NmrWaitForClientDeregisterComplete" __imp_NmrWaitForClientDeregisterComplete
0x1C002D5D0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C0010098: NatSourceLookupForwardMapping
0x1C0030780: IpLookasideList
0x1C003F0E8: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x1C002E558: WPP_6fa0538be8ec35ea70a8dd4b7425133f_Traceguids
0x1C003D4E0: StateCounterLock
0x1C0005BF0: NatMappingDetachEditor
0x1C0006080: NatEditorDeleteTicket
0x1C0030370: IPNATMofResource
0x1C000EBB0: NatDestinationLookupForwardMapping
0x1C002E2A0: WPP_f508cb4a09d931e1355930b4b7208aec_Traceguids
0x1C003F158: "__cdecl _imp_RtlSetBits" __imp_RtlSetBits
0x1C003F310: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C003F228: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C0002D0C: NatpExecuteIoDeviceControl
0x1C0010190: NatSourceLookupReverseMapping
0x1C003F230: "__cdecl _imp_IoDeviceObjectType" __imp_IoDeviceObjectType
0x1C0006CE8: NatInitializeDriver
0x1C0023864: NatpSendPacket
0x1C0031180: NotificationList
0x1C0020A00: NatpDirectPacket
0x1C000CC64: NatDeleteInterface
0x1C0030680: MappingLookasideList
0x1C002E300: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C002E648: "WD" ??_C@_15ELMAKJHJ@?$AAW?$AAD?$AA?$AA@
0x1C003F3C0: "__cdecl _imp_IofCompleteRequest" __imp_IofCompleteRequest
0x1C003DD70: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUmvgUiizhUrkUmzgUlyquivUznwGEUkivxlnkOlyq@ipnat" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUmvgUiizhUrkUmzgUlyquivUznwGEUkivxlnkOlyq@ipnat
0x1C00069F4: NatDbgInitalize
0x1C003F2E0: "__cdecl _imp_KeQueryMaximumProcessorCountEx" __imp_KeQueryMaximumProcessorCountEx
0x1C003F278: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C00172F0: WPP_SF_dii
0x1C001D59C: WPP_SF_iid
0x1C0041C60: IoDevObjCreateDeviceSecure
0x1C0030238: DisableTcpFlagChecksName
0x1C003F268: "__cdecl _imp_wcschr" __imp_wcschr
0x1C0041970: NatpSetWmiDataBlock
0x1C003D540: DirectorLock
0x1C00029A0: NatFastIoDeviceControl
0x1C003F160: "__cdecl _imp_RtlClearBits" __imp_RtlClearBits
0x1C0028E40: PplGenericFreeFunction
0x1C003F418: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C003088C: PiRegStateDiscriptor
0x1C001E728: NatLookupAndApplyDynamicTicket
0x1C001AC50: NatpRedirectIoCompletionWorkerRoutine
0x1C0030EE8: RedirectCount
0x1C002E1C0: NPI_MS_NDIS_MODULEID
0x1C003F2A8: "__cdecl _imp_RtlGetOwnerSecurityDescriptor" __imp_RtlGetOwnerSecurityDescriptor
0x1C003F270: "__cdecl _imp__wcsnicmp" __imp__wcsnicmp
0x1C0029304: GetParameter
0x1C0041E0C: IopDevObjApplyPostCreationSettings
0x1C0001FA0: NatDirectorDeregister
0x1C003F120: "__cdecl _imp_RtlSplay" __imp_RtlSplay
0x1C002BF64: NatRegisterCallout
0x1C002E8D0: WPP_a29b5913bf9c331f47f21af7c3d729bd_Traceguids
0x1C003D244: MappingCount
0x1C003F398: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C00251E0: NatTranslateForwardTcp
0x1C0027D50: NatTranslateReverseUdpEdit
0x1C003F3D8: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C00113EC: NatCleanupAnyAssociatedNotification
0x1C0001B60: NatMappingAttachDirector
0x1C002E668: "GR" ??_C@_15DNGEKDKB@?$AAG?$AAR?$AA?$AA@
0x1C0017358: NatInitializeRawIpManagement
0x1C0026D60: NatTranslateForwardTcpNull
0x1C003F328: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C00294B4: ConvertInterfaceLuidToIndex
0x1C003F3F0: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C0011C8C: ReleaseComponentReference
0x1C002E598: WPP_540176afce123f33dc2f96d85399c46c_Traceguids
0x1C002E1D8: NPI_MS_IPV4_MODULEID
0x1C000BFD8: NatCleanupInterface
0x1C00017A0: NatLookupAndReferenceDirector
0x1C00305C4: ReservePort
0x1C000152C: NatDeleteDirector
0x1C002E4C0: WPP_5250a8ad35bc3870a03626e098f93b23_Traceguids
0x1C003F138: "__cdecl _imp_IoReleaseCancelSpinLock" __imp_IoReleaseCancelSpinLock
0x1C003D500: EditorLock
0x1C002E4E0: "Enabled" ??_C@_07DOAOMMKG@Enabled?$AA@
0x1C002E1A8: "__cdecl _guard_iat_table" __guard_iat_table
0x1C00182CC: NatCreateRedirect
0x1C003D240: ExpiredMappingCount
0x1C0013B84: NatInsertAddressPoolEntry
0x1C002D600: memcpy
0x1C003D3E0: InterfaceCount
0x1C0030F50: RedirectCompletionList
0x1C003F088: "__cdecl _imp_FwpsQueryPacketInjectionState0" __imp_FwpsQueryPacketInjectionState0
0x1C002A120: WPP_SF_d_guid_
0x1C0020614: NatForwardTcpStateCheck
0x1C001E204: NatDeleteDynamicTicket
0x1C003DD68: TicketCount
0x1C0030DB8: NatShimPool
0x1C003F1B0: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C002E8C8: NatNsiClientDispatch
0x1C003F128: "__cdecl _imp_IoWMIWriteEvent" __imp_IoWMIWriteEvent
0x1C00255E0: NatTranslateForwardUdp
0x1C0031080: PptpRegisterEditorClient
0x1C0030308: DefaultStartPort
0x1C002415C: NatReverseTcpStateCheck
0x1C00276B0: NatTranslateReverseTcpEdit
0x1C0042120: SepSddlDaclFromSDDLString
0x1C0030DC4: LoopbackIndex
0x1C003F2D0: "__cdecl _imp_ZwSetValueKey" __imp_ZwSetValueKey
0x1C003F320: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C0030588: pfnWppGetVersion
0x1C003F260: "__cdecl _imp_RtlAbsoluteToSelfRelativeSD" __imp_RtlAbsoluteToSelfRelativeSD
0x1C003F040: "__cdecl _imp_NetioRetreatNetBufferList" __imp_NetioRetreatNetBufferList
0x1C002A600: NatLocalInCallout
0x1C002E260: FWPM_CONDITION_FLAGS
0x1C00303A8: ConnectionDeletionEventGuid
0x1C002D3AD: "__cdecl _C_specific_handler" __C_specific_handler
0x1C0026EC0: NatTranslateForwardUdpNull
0x1C00067B0: NatEditorQueryInfoSession
0x1C001FCE0: NatTimerRoutine
0x1C002E900: "NatLocalInFilter" ??_C@_1CC@GOHNNKLL@?$AAN?$AAa?$AAt?$AAL?$AAo?$AAc?$AAa?$AAl?$AAI?$AAn?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000F93C: NatQueryInterfaceMappingTable
0x1C001A5B0: NatpRedirectCancelRoutine
0x1C0008D94: WPP_SF_Lcc
0x1C002D600: memmove
0x1C000767C: NatInitiateTranslation
0x1C0041FA4: SepSddlSecurityDescriptorFromSDDLString
0x1C0019EB0: NatInitializeRedirectManagement
0x1C0028290: NatTranslateReverseTcpResize
0x1C003F370: "__cdecl _imp_RtlCopyUnicodeString" __imp_RtlCopyUnicodeString
0x1C0001C4C: NatMappingDetachDirector
0x1C002E4B0: WPP_2431ee6841ae3a02fac9ff097ceb269e_Traceguids
0x1C002E5A8: "IoCreateDeviceSecure" ??_C@_1CK@LEEDIGFP@?$AAI?$AAo?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AA?$AA@
0x1C002E280: Microsoft_Windows_IPNATKeywords
0x1C002D40C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C003F118: fwpkclnt_NULL_THUNK_DATA
0x1C0030338: ExternalName
0x1C000EFC4: NatLookupAndQueryInformationMapping
0x1C003F010: NDIS_NULL_THUNK_DATA
0x1C003F2F0: "__cdecl _imp_KeQueryActiveProcessorCountEx" __imp_KeQueryActiveProcessorCountEx
0x1C000F5DC: NatLookupReverseMapping
0x1C001EEB4: NatProcessCreateTicket
0x1C003D460: WPP_MAIN_CB
0x1C0016340: NatOutboundDataHandlerPptpServer
0x1C002CE20: NatInjectDatagramComplete
0x1C00295C0: GetInterfaceMTU
0x1C0016EF0: NatTranslatePptp
0x1C001D47C: WPP_SF_dDdDdDdd
0x1C0005CE0: NatQueryEditorTable
0x1C00097FC: NatLookupOutboundIcmpMapping
0x1C00305B8: MaxStateAllocationInBytes
0x1C0001D6C: NatQueryDirectorTable
0x1C0009E70: NatTranslateIcmp
0x1C003DD6C: DynamicTicketCount
0x1C0013FE4: NatDereferenceAddressPoolEntry
0x1C001079C: NatInitializeWMI
0x1C003F170: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C00427BC: SepSddlParseWideStringUlong
0x1C0021E30: NatAdjustMSSOption
0x1C003030C: ReservedPortsUpperRange
0x1C0030360: BaseInstanceName
0x1C003F038: "__cdecl _imp_NmrDeregisterClient" __imp_NmrDeregisterClient
0x1C00064E0: NatEditorEditSession
0x1C002E678: "GX" ??_C@_15FCNJEDMF@?$AAG?$AAX?$AA?$AA@
0x1C003F0B0: "__cdecl _imp_FwpiCalloutUnregisterAndDeleteByKey0" __imp_FwpiCalloutUnregisterAndDeleteByKey0
0x1C002E650: "WO" ??_C@_15JMMBCOHI@?$AAW?$AAO?$AA?$AA@
0x1C00068D0: NatEditorTimeoutSession
0x1C003F360: "__cdecl _imp_IoCreateSymbolicLink" __imp_IoCreateSymbolicLink
0x1C003F3E0: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C001E5D4: NatIsPortUsedByTicket
0x1C002E620: SDDL_DEVOBJ_SYS_ALL_buffer
0x1C00305C1: DisablePPTPEditor
0x1C00010C8: NatCleanupDirector
0x1C003D510: NatFileObjectLock
0x1C003F3B0: "__cdecl _imp_MmUserProbeAddress" __imp_MmUserProbeAddress
0x1C0030EEC: RedirectIoCompletionPending
0x1C00058D4: NatInitializeEditorManagement
0x1C0017448: NatLookupInboundIpMapping
0x1C0030CC8: gNatLocalInFilterCondition
0x1C00305A8: pfnWppQueryTraceInformation
0x1C0030990: gNatLocalInFilter
0x1C003F3C8: "__cdecl _imp_PsGetCurrentProcessId" __imp_PsGetCurrentProcessId
0x1C001AEC0: NatpRedirectQueryHandler
0x1C003F290: "__cdecl _imp__snwprintf" __imp__snwprintf
0x1C00096D4: NatLookupInboundIcmpMapping
0x1C00417E0: NatpQueryWmiRegInfo
0x1C003F380: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C00305C0: StateAllocationBoundIsActive
0x1C0014E54: NatLookupInboundPptpMapping
0x1C0030F80: RedirectLock
0x1C003F008: "__cdecl _imp_NdisRetreatNetBufferDataStart" __imp_NdisRetreatNetBufferDataStart
0x1C003F070: WMILIB_NULL_THUNK_DATA
0x1C000DB58: WPP_SF_ii
0x1C000CFD4: NatInitializeInterfaceManagement
0x1C0008E80: WPP_SF_id
0x1C003F3D0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1C003D260: InterfaceCache
0x1C002E6EC: "A" ??_C@_13PNBDBPLL@?$AAA?$AA?$AA@
0x1C001EC90: NatLookupFirewallTicket
0x1C0030E20: CleanupDpcPending
0x1C003F298: "__cdecl _imp_SeCaptureSecurityDescriptor" __imp_SeCaptureSecurityDescriptor
0x1C003F108: "__cdecl _imp_FwpsAllocateCloneNetBufferList0" __imp_FwpsAllocateCloneNetBufferList0
0x1C000DB14: WPP_SF_i
0x1C000C264: NatConfigureInterface
0x1C001167C: NatRequestNotification
0x1C0031220: MappingCache
0x1C003F3F8: "__cdecl _imp_KeReleaseSpinLockFromDpcLevel" __imp_KeReleaseSpinLockFromDpcLevel
0x1C000EEA0: NatInitializeMappingManagement
0x1C003F0A0: "__cdecl _imp_FwpsInjectNetworkSendAsync0" __imp_FwpsInjectNetworkSendAsync0
0x1C002D3E8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C003F0C0: "__cdecl _imp_FwpsInjectionHandleCreate0" __imp_FwpsInjectionHandleCreate0
0x1C0011C38: AcquireComponentReference
0x1C0014F70: NatLookupOutboundPptpMapping
0x1C003D508: EditorMappingLock
0x1C003F050: "__cdecl _imp_NetioAllocateMdl" __imp_NetioAllocateMdl
0x1C002E2E0: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C003F258: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C003D408: InterfaceMappingLock
0x1C003F318: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C003F178: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C003F140: "__cdecl _imp_IoAcquireCancelSpinLock" __imp_IoAcquireCancelSpinLock
0x1C003F280: "__cdecl _imp_SeExports" __imp_SeExports
0x1C003D4E8: EditorCount
0x1C002E270: DebugTrace
0x1C003D524: DirectorCount
0x1C00242CC: NatIsPacketDHCPRequestOnAutonetAddress
0x1C0014848: NatAllocatePublicPptpCallId
0x1C0030590: pfnEtwRegisterClassicProvider
0x1C003F1E8: "__cdecl _imp_KfRaiseIrql" __imp_KfRaiseIrql
0x1C003F45C: "__cdecl _IMPORT_DESCRIPTOR_NETIO" __IMPORT_DESCRIPTOR_NETIO
0x1C0002070: NatDirectorDissociateSession
0x1C0022900: NatpReceivePacket
0x1C003F000: "__cdecl _imp_NdisAdvanceNetBufferDataStart" __imp_NdisAdvanceNetBufferDataStart
0x1C003F368: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x1C002E000: NatNsiNotify
0x1C000D2A4: NatMappingDetachInterface
0x1C0014270: NatAcquireFromPortPool
0x1C0010554: WPP_SF_slI
0x1C0030E40: TimerDpcObject
0x1C001E0DC: NatDeleteAnyAssociatedDynamicTicket
0x1C003F358: "__cdecl _imp_IoDeleteSymbolicLink" __imp_IoDeleteSymbolicLink
0x1C00433DC: CmRegUtilWstrValueGetDword
0x1C002E5E0: "IoValidateDeviceIoControlAccess" ??_C@_1EA@BAHCLPHE@?$AAI?$AAo?$AAV?$AAa?$AAl?$AAi?$AAd?$AAa?$AAt?$AAe?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAA?$AAc?$AAc?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0015CA0: NatDeleteHandlerWorkItemPptp
0x1C003F2D8: "__cdecl _imp_ExDeleteLookasideListEx" __imp_ExDeleteLookasideListEx
0x1C0015EB0: NatInboundDataHandlerPptpServer
0x1C003D220: MappingList
0x1C0041A70: NatpSetWmiDataItem
0x1C002E9D0: "NatAlePortFilter" ??_C@_1CC@CDJFGGOO@?$AAN?$AAa?$AAt?$AAA?$AAl?$AAe?$AAP?$AAo?$AAr?$AAt?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C003F0B8: "__cdecl _imp_FwpiCalloutRegisterAndAddWithoutDevice0" __imp_FwpiCalloutRegisterAndAddWithoutDevice0
0x1C002E3E0: "\Device\IPNAT" ??_C@_1BM@HJNGDFKF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAI?$AAP?$AAN?$AAA?$AAT?$AA?$AA@
0x1C003F288: "__cdecl _imp_RtlLengthSecurityDescriptor" __imp_RtlLengthSecurityDescriptor
0x1C003D248: MappingLock
0x1C002A310: NatLocalOutCallout
0x1C0001008: WPP_SF_
0x1C002E658: "SD" ??_C@_15NAFBOLGP@?$AAS?$AAD?$AA?$AA@
0x1C0043164: CmRegUtilUcValueSetUcString
0x1C0041EE0: SeSddlSecurityDescriptorFromSDDL
0x1C00302C8: AllowInboundNonUnicastTrafficName
0x1C003F2B0: "__cdecl _imp_RtlGetGroupSecurityDescriptor" __imp_RtlGetGroupSecurityDescriptor
0x1C002E7D0: "\Registry\Machine\System\Current" ??_C@_1HC@DKINPPAJ@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C000ACF4: NatTranslateIcmpEncapsulatedRequest
0x1C003F0A8: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x1C00432A8: CmRegUtilOpenExistingWstrKey
0x1C003F0F0: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1C0030B30: gNatLocalOutFilter
0x1C000D1A8: NatMappingAttachInterface
0x1C003F308: "__cdecl _imp_KeGetCurrentProcessorNumberEx" __imp_KeGetCurrentProcessorNumberEx
0x1C0030598: pfnEtwUnregister
0x1C002978C: GetLoopbackIndex
0x1C000DE14: NatCreateMapping
0x1C003D4A0: ComponentReference
0x1C000F3DC: NatLookupForwardMapping
0x1C0042A6C: PiRegStateReadStackCreationSettingsFromKey
0x1C0029958: WPP_SF_ddddc
0x1C003F198: "__cdecl _imp_KeClearEvent" __imp_KeClearEvent
0x1C0042C3C: PiRegStateOpenClassKey
0x1C00311A0: NatWmiEnabledEvents
0x1C003F484: "__cdecl _IMPORT_DESCRIPTOR_fwpkclnt" __IMPORT_DESCRIPTOR_fwpkclnt
0x1C003DD60: NatDbgBufPool
0x1C0028D9C: WdmlibRtlInitUnicodeStringEx
0x1C002D024: FsbpFreeList
0x1C0018414: NatCreateRedirectEx
0x1C001A00C: NatLookupRedirect
0x1C002E750: "Security" ??_C@_1BC@FCJNIDNL@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AA?$AA@
0x1C00305BC: CurrentStateAllocationInBytes
0x1C0014D80: NatDeletePptpMapping
0x1C001E4F0: NatInitializeDynamicTicketManagement
0x1C0041610: NatpExecuteWmiMethod
0x1C0006390: NatEditorDissociateSession
0x1C0004CFC: NatpSetGlobalInfo
0x1C001F1C4: NatProcessDeleteTicket
0x1C0044350: GsDriverEntry
0x1C003F410: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C0015DC0: NatInboundDataHandlerPptpClient
0x1C0009928: NatpFirewallIcmp
0x1C001F568: NatProcessLookupTicket
0x1C003F190: ExEventObjectType
0x1C002E3FC: "NULL" ??_C@_04HIBGFPH@NULL?$AA@
0x1C00428C0: PpRegStateReadCreateClassCreationSettings
0x1C0042200: SepSddlGetSidForString
0x1C002E768: "DeviceType" ??_C@_1BG@KCOOGCNN@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
0x1C003F188: "__cdecl _imp_ObReferenceObjectByHandle" __imp_ObReferenceObjectByHandle
0x1C003F1C0: "__cdecl _imp_KeSetTimerEx" __imp_KeSetTimerEx
0x1C0030550: gNatReservedPortRange
0x1C003D520: NatFileObjectCount
0x1C003F030: "__cdecl _imp_NmrRegisterClient" __imp_NmrRegisterClient
0x1C002E850: "{%08X-%04X-%04X-%02X%02X-%02X%02" ??_C@_1GG@FCALANDO@?$AA?$HL?$AA?$CF?$AA0?$AA8?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA4?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2?$AAX?$AA?9?$AA?$CF?$AA0?$AA2?$AAX?$AA?$CF?$AA0?$AA2@
0x1C003F338: "__cdecl _imp_RtlUnicodeStringToInteger" __imp_RtlUnicodeStringToInteger
0x1C00147C8: WPP_SF_DDdDL
0x1C0030EF0: RedirectIoWorkItem
0x1C00216A0: NatpForwardPacket
0x1C00132D0: NatCreateAddressPoolEntry
0x1C002E8E0: "RRAS NAT Driver" ??_C@_1CA@DPFPIJBD@?$AAR?$AAR?$AAA?$AAS?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
0x1C000ED10: NatDestinationLookupReverseMapping
0x1C003F148: "__cdecl _imp_RtlClearAllBits" __imp_RtlClearAllBits
0x1C0001078: WPP_SF_dL
0x1C0017B34: NatCancelRedirect
0x1C00203C0: WPP_SF_dc
0x1C0011D04: WPP_SF_Dc
0x1C001D41C: WPP_SF_Dd
0x1C0001078: WPP_SF_DD
0x1C0001078: WPP_SF_dd
0x1C0017934: WPP_SF_DDDDDDDDDD
0x1C002D5BC: tcpxsum_end
0x1C0030F60: RedirectActiveList
0x1C00095E4: NatInitializeIcmpManagement
0x1C001EB94: NatLookupDynamicTicket
0x1C002E1B0: NPI_NSI_ACCESS_ID
0x1C0008B2C: McGenEventWrite
0x1C0030130: WPP_GLOBAL_Control
0x1C003F180: "__cdecl _imp_IoSetIoCompletion" __imp_IoSetIoCompletion
0x1C001B4F0: NatQueryInformationRedirect
0x1C003F340: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C002D52A: tcpxsum_start
0x1C00243A0: NatTranslatePacket
0x1C002E660: "GA" ??_C@_15HPMIFLNA@?$AAG?$AAA?$AA?$AA@
0x1C0001034: WPP_SF_D
0x1C0001034: WPP_SF_d
0x1C00105F0: NatExecuteSystemControl
0x1C003D230: MappingTree
0x1C0001A34: NatLookupDirector
0x1C003F3B0: MmUserProbeAddress
0x1C0030CF0: gNatDiscardFilter
0x1C0015A80: NatDeleteHandlerPptp
0x1C0030310: ReservedPortsLowerRange
0x1C002D370: "__cdecl _security_check_cookie" __security_check_cookie
0x1C003F090: "__cdecl _imp_FwpmTransactionCommit0" __imp_FwpmTransactionCommit0
0x1C00149EC: NatCreatePptpMapping
0x1C0030890: gNatNsiProviderContext
0x1C0011980: NatSendRoutingFailureNotification
0x1C0018148: NatCleanupAnyAssociatedRedirect
0x1C002B5D0: NatDiscardCalloutIPv6
0x1C0030EE0: DynamicTicketLock
0x1C0028DF0: PplGenericAllocateFunction
0x1C00305B0: IcsEnabled
0x1C003F420: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C003F068: "__cdecl _imp_WmiSystemControl" __imp_WmiSystemControl
0x1C0006C70: NatCleanupDriver
0x1C002E528: WPP_795f333af2913509a7470a99cab316c5_Traceguids
0x1C0030570: NatManualWeight
0x1C003F0F8: "__cdecl _imp_FwpsInjectNetworkReceiveAsync0" __imp_FwpsInjectNetworkReceiveAsync0
0x1C0030ED0: DynamicTicketList
0x1C001F9B8: NatCheckIsCustomLifetimeTicketValid
0x1C001A9A0: NatpRedirectDelayedCleanupWorkerRoutine
0x1C000E990: NatDeleteMapping
0x1C002E250: FWPM_CONDITION_IP_LOCAL_PORT
0x1C00202EC: NatTriggerTimer
0x1C00305C8: NatDeviceObject
0x1C002E680: "SeConvertStringSecurityDescripto" ??_C@_1GM@JINLDKKK@?$AAS?$AAe?$AAC?$AAo?$AAn?$AAv?$AAe?$AAr?$AAt?$AAS?$AAt?$AAr?$AAi?$AAn?$AAg?$AAS?$AAe?$AAc?$AAu?$AAr?$AAi?$AAt?$AAy?$AAD?$AAe?$AAs?$AAc?$AAr?$AAi?$AAp?$AAt?$AAo@
0x1C002E588: WPP_6aadb4e48249324052402c1a7d0ef234_Traceguids
0x1C003F1F0: "__cdecl _imp_KeAcquireSpinLockAtDpcLevel" __imp_KeAcquireSpinLockAtDpcLevel
0x1C0030F90: RedirectInitializationLock
0x1C002E090: SDDL_DEVOBJ_SYS_ALL
0x1C002EA68: WPP_90599cb78d3531ecb42f893bf53794d3_Traceguids
0x1C001B988: NatStartRedirectManagement
0x1C00264B0: NatTranslateForwardTcpResize
0x1C0030F88: RedirectCompletionLock
0x1C003F048: "__cdecl _imp_NetioAdvanceNetBufferList" __imp_NetioAdvanceNetBufferList
0x1C0030FA0: RedirectRegisterDirector
0x1C0028CA0: NatTranslateReverseUdpNull
0x1C00154D8: NatClientToServerDataHandlerPptp
0x1C0016434: NatServerToClientDataHandlerPptp
0x1C0030204: TcpTimeoutSeconds
0x1C0041434: WppCleanupKm
0x1C0029260: NatCleanupNsiProviderContext
0x1C0011D64: WPP_SF_iiDdc
0x1C0031190: NotificationLock
0x1C003F378: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C002CF74: FsbpAllocateNewPageAndBuildOneBlock
0x1C0045000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C003F238: "__cdecl _imp_ZwSetSecurityObject" __imp_ZwSetSecurityObject
0x1C00291A0: NatDetachNsiProvider
0x1C0002210: NatDirectorQueryInfoSession
0x1C002E0A0: "__cdecl load_config_used" _load_config_used
0x1C0030578: gNetworkInjectionHandle
0x1C002E6F0: "Properties" ??_C@_1BG@COALCEMK@?$AAP?$AAr?$AAo?$AAp?$AAe?$AAr?$AAt?$AAi?$AAe?$AAs?$AA?$AA@
0x1C000D0AC: NatLookupInterface
0x1C0015FA0: NatInitializePptpManagement
0x1C003D530: DirectorList
0x1C0008AF8: McGenEventUnregister
0x1C003F330: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C003F1F8: "__cdecl _imp_RtlDelete" __imp_RtlDelete
0x1C003F434: "__cdecl _IMPORT_DESCRIPTOR_WMILIB" __IMPORT_DESCRIPTOR_WMILIB
0x1C00273B0: NatTranslateReverseUdp
0x1C002E8B8: WPP_a8322010f08a355001945af5182e3e2e_Traceguids
0x1C00258D0: NatTranslateForwardTcpEdit
0x1C003F200: "__cdecl _imp_ExAllocatePoolWithTagPriority" __imp_ExAllocatePoolWithTagPriority
0x1C00426BC: SepSddlAddAceToAcl
0x1C003F3A8: "__cdecl _imp_RtlGetNtProductType" __imp_RtlGetNtProductType
0x1C0030600: IcmpLookasideList
0x1C001A198: NatpCleanupRedirect
0x1C0008ED4: NatCreateIcmpMapping
0x1C002E410: IpNatParametersPath
0x1C002E928: "NatLocalOutFilter" ??_C@_1CE@BIAGOBEE@?$AAN?$AAa?$AAt?$AAL?$AAo?$AAc?$AAa?$AAl?$AAO?$AAu?$AAt?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0028B40: NatTranslateReverseTcpNull
0x1C0030DE0: CleanupDpcObject
0x1C0030700: PptpLookasideList
0x1C0043324: CmRegUtilCreateWstrKey
0x1C0030C00: gNatForwardFilter
0x1C0029C94: NatShimTranslatePacket
0x1C003F350: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C003F220: "__cdecl _imp_ObOpenObjectByPointer" __imp_ObOpenObjectByPointer
0x1C0016240: NatOutboundDataHandlerPptpClient
0x1C002E320: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C000598C: NatLookupEditor
0x1C002D084: FsbpScavengePool
0x1C003F2A0: "__cdecl _imp_RtlGetSaclSecurityDescriptor" __imp_RtlGetSaclSecurityDescriptor
0x1C002E718: "NoDisplayClass" ??_C@_1BO@DAOBINHA@?$AAN?$AAo?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C003F2B8: "__cdecl _imp_RtlGetDaclSecurityDescriptor" __imp_RtlGetDaclSecurityDescriptor
0x1C0042DCC: PpRegStateUpdateStackCreationSettings
0x1C003F248: "__cdecl _imp_IoIsWdmVersionAvailable" __imp_IoIsWdmVersionAvailable
0x1C002510C: NatCheckIsLocalSendTCPResponse
0x1C002E780: "DeviceCharacteristics" ??_C@_1CM@DIJFBEC@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAC?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?$AA@
0x1C002E390: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C003F100: "__cdecl _imp_FwpsFreeNetBufferList0" __imp_FwpsFreeNetBufferList0
0x1C0030520: PiRegStateSysAllInherittedSecurityDescriptor
0x1C002E978: "NatDiscardFilter" ??_C@_1CC@MBOHHCJI@?$AAN?$AAa?$AAt?$AAD?$AAi?$AAs?$AAc?$AAa?$AAr?$AAd?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0030888: WdmlibInitialized
0x1C00416E0: NatpQueryWmiDataBlock
0x1C003F300: "__cdecl _imp_InitializeSListHead" __imp_InitializeSListHead
0x1C003F098: "__cdecl _imp_FwpsInjectionHandleDestroy0" __imp_FwpsInjectionHandleDestroy0
0x1C002E508: WPP_0613f64bff6b3d50687884d9a89a744c_Traceguids
0x1C001BB30: constructRhizome
0x1C003F208: "__cdecl _imp_ExDeleteNPagedLookasideList" __imp_ExDeleteNPagedLookasideList
0x1C0030DC0: gNatNsiReferenceObject
0x1C001ED9C: NatLookupTicket
0x1C0026FB0: NatTranslateReverseTcp
0x1C002D3D0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C0025F70: NatTranslateForwardUdpEdit
0x1C0041B74: WdmlibIoCreateDeviceSecure
0x1C0005160: NatpValidateHeader
0x1C00225B8: NatpReceiveNonUnicastPacket
0x1C003F2F8: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C003D4F0: EditorList
0x1C001FB00: NatCleanupDpcRoutine
0x1C002E708: "Class" ??_C@_1M@OAHBGIFG@?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C001A700: NatpRedirectCreateHandler
0x1C0028F9C: PplpFreeOneLookasideList
0x1C002E2C0: WPP_8ee64be1d2b53503799216baa1e650ae_Traceguids
0x1C00305C2: DisableTcpFlagChecks
0x1C0031100: PptpRegisterEditorServer
0x1C0007BE0: NatUnloadDriver
0x1C0041008: WppLoadTracingSupport
0x1C002B9D0: NatDeregisterCallout
0x1C003F390: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C002E060: MappingCacheInfo
0x1C002B100: NatDiscardCallout
0x1C00305C3: AllowInboundNonUnicastTraffic
0x1C0008B94: McTemplateK0s
0x1C002B750: NatNotifyCallout
0x1C003D420: IcmpMappingList
0x1C002CD34: NatRegisterFwpsInjectionHandle
0x1C0001214: NatCreateDirector
0x1C003F020: "__cdecl _imp_NmrClientAttachProvider" __imp_NmrClientAttachProvider
0x1C0023664: NatpSendNonUnicastPacket
0x1C00311D8: NatWmiLock
0x1C003D440: IcmpMappingLock
0x1C0030A60: gNatDiscardFilterIPv6
0x1C0031040: PptpMappingList
0x1C0031060: PptpMappingLock
0x1C0011570: NatpNotificationCancelRoutine
0x1C0030B28: IsNatCalloutActive
0x1C002E290: IPNAT
0x1C0007A38: NatTerminateTranslation
0x1C0017AD0: WPP_SF_ddD
0x1C00023B8: WPP_SF_DDD
0x1C00023B8: WPP_SF_ddd
0x1C00179F8: WPP_SF_DDDDDDDDDDD
0x1C002D1F8: FsbAllocate
0x1C0030138: NatWmiGuidList
0x1C000899C: NatFreeBlockAndUpdateStateAllocationUsage
0x1C002E518: WPP_5ff7e40ba6dc302523a7c175f380cd6e_Traceguids
0x1C003D250: FirewalledInterfaceCount
0x1C0008840: NatAllocateBlockWithLimitCheck
0x1C003F400: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C001D52C: WPP_SF_ddDD
0x1C001047C: WPP_SF_DdDd
0x1C00104EC: WPP_SF_dddd
0x1C0008DFC: WPP_SF_iDiD
0x1C0005428: NatCleanupEditor
0x1C00204A0: WPP_SF_dddddddddddddddddddd
0x1C0002344: WPP_SF_dcdd
0x1C003D518: NatOwnerProcessId
0x1C003F1D8: "__cdecl _imp_KeInsertQueueDpc" __imp_KeInsertQueueDpc
0x1C00301F0: "__cdecl _security_cookie" __security_cookie
0x1C002E548: WPP_2c72c8ba91b73195a6485f1a1a7b37cc_Traceguids
0x1C003F1D0: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C00016E8: NatInitializeDirectorManagement
0x1C002E230: FWPM_LAYER_IPFORWARD_V4
0x1C000D3AC: NatQueryInformationInterface
0x1C0031020: IpMappingLock
0x1C0013CF8: NatLookupAddressPoolEntry
0x1C002E240: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4
0x1C000B2A4: NatTranslateIcmpRequest
0x1C0008BF0: McGenControlCallbackV2
0x1C002E358: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C0030200: UdpTimeoutSeconds
0x1C003F110: "__cdecl _imp_FwpsReassembleForwardFragmentGroup0" __imp_FwpsReassembleForwardFragmentGroup0
0x1C002E7B0: "Exclusive" ??_C@_1BE@DJHAJDEM@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAs?$AAi?$AAv?$AAe?$AA?$AA@
0x1C001FA7C: WPP_SF_iiddd
0x1C003F0E0: "__cdecl _imp_FwpsFreeCloneNetBufferList0" __imp_FwpsFreeCloneNetBufferList0
0x1C003F1B8: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C0010288: NatUpdateStatisticsMapping
0x1C001D270: ShellSortIndirect
0x1C00137CC: NatCreateStaticPortMapping
0x1C0028EA4: PplpCreateOneLookasideList
0x1C000BA9C: NatTranslateEncapsulatedRequest
0x1C001FBF8: NatInitializeTimerManagement
0x1C001D608: NatCreateDynamicTicket
0x1C002E950: "NatForwardFilter" ??_C@_1CC@IJCBOJHF@?$AAN?$AAa?$AAt?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0043020: CmRegUtilUcValueGetFullBuffer
0x1C003D4D0: NatRegistryPath
0x1C001BD74: insertRhizome
0x1C002EAB8: NPI_MS_NAT_MODULEID
0x1C002ABD0: NatForwardCallout
0x1C003F058: NETIO_NULL_THUNK_DATA
0x1C00311E0: WmilibContext
0x1C002E538: WPP_aec26f77e9513c75466161e11a08ace0_Traceguids
0x1C002E210: FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD
0x1C002E2D0: WPP_831faef15aad30f8fd807c44dd03add2_Traceguids
0x1C0011DF8: NatAcquireFromAddressPool
0x1C002E738: "NoUseClass" ??_C@_1BG@OPOOGLJC@?$AAN?$AAo?$AAU?$AAs?$AAe?$AAC?$AAl?$AAa?$AAs?$AAs?$AA?$AA@
0x1C0005F10: NatEditorCreateTicket
0x1C003F1C8: "__cdecl _imp_KeFlushQueuedDpcs" __imp_KeFlushQueuedDpcs
0x1C0044384: "__cdecl _security_init_cookie" __security_init_cookie
0x1C002E048: InterfaceCacheInfo
0x1C0031000: IpMappingList
0x1C002E4E8: "Disabled" ??_C@_08JGILNPHN@Disabled?$AA@
0x1C003F2E8: "__cdecl _imp_ExInitializeLookasideListEx" __imp_ExInitializeLookasideListEx
0x1C0013E10: NatLookupStaticAddressPoolEntry
0x1C0010904: NatLogConnectionCreation
0x1C003F1A8: "__cdecl _imp_KeQueryTimeIncrement" __imp_KeQueryTimeIncrement
0x1C003F388: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C003F168: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C003F018: "__cdecl _imp_NmrClientDetachProviderComplete" __imp_NmrClientDetachProviderComplete
0x1C0030304: DefaultEndPort
0x1C0030580: WPPTraceSuite
0x1C00299DC: NatShimFreeBuffer
0x1C003F080: cng_NULL_THUNK_DATA
0x1C003D400: InterfaceLock
0x1C003F130: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C000D74C: NatQueryStatisticsInterface
0x1C000C110: NatCompareAddressMappingCallback
0x1C002A184: NatSplitAndHandlePackets
0x1C002CF14: FsbpBuildNextBlock
0x1C0005550: NatCreateEditor
0x1C003D560: TranslateRoutineTable
0x1C0030EC0: TimeIncrement
0x1C002242C: NatpIsUnicastPacket
0x1C0030268: DisablePPTPEditorName
0x1C001AAE0: NatpRedirectDeleteHandler
0x1C002E1F0: FWPM_LAYER_INBOUND_IPPACKET_V4
0x1C003F078: "__cdecl _imp_SystemPrng" __imp_SystemPrng
0x1C002E3B0: "Could not allocate debug trace b" ??_C@_0CL@HEOJNBLN@Could?5not?5allocate?5debug?5trace?5b@
0x1C0008CFC: McGenEventRegister
0x1C001BFD0: removeRhizome
0x1C0029FF4: IsPacketFragment
0x1C002E568: WPP_bac54984dc5131faf9c05943d9adefa4_Traceguids
0x1C0024080: NatpTranslateLocalTraffic
0x1C0042F38: SeUtilSecurityInfoFromSecurityDescriptor
0x1C003F230: IoDeviceObjectType
0x1C003F0D0: "__cdecl _imp_FwpmFilterDeleteByKey0" __imp_FwpmFilterDeleteByKey0
0x1C003F470: "__cdecl _IMPORT_DESCRIPTOR_NDIS" __IMPORT_DESCRIPTOR_NDIS
0x1C002E670: "GW" ??_C@_15KLKFDJD@?$AAG?$AAW?$AA?$AA@
0x1C003F250: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C001DCB0: NatCreateTicket
0x1C0030F70: RedirectList
0x1C0017660: NatTranslateIp
0x1C00311C0: NatWmiLogHandles
0x1C003F448: "__cdecl _IMPORT_DESCRIPTOR_cng" __IMPORT_DESCRIPTOR_cng
0x1C0012B4C: NatCreateAddressPool
0x1C002D3A0: "__cdecl _report_gsfailure" __report_gsfailure
0x1C003F1E0: "__cdecl _imp_KeLowerIrql" __imp_KeLowerIrql
0x1C001E928: NatLookupAndRemoveTicket
0x1C0030898: gNatNsiHandle
0x1C0041564: NatDeleteExternalNaming
0x1C003F0C8: "__cdecl _imp_FwpmTransactionBegin0" __imp_FwpmTransactionBegin0
0x1C000D954: NatResetInterface
0x1C003D3F0: InterfaceList
0x1C002E288: Microsoft_Windows_IPNATLevels
0x1C0030318: ReservedPortsName
0x1C0030F40: RedirectIrpList
0x1C002E2B0: WPP_ThisDir_CTLGUID_NatGuid
0x1C0029B58: NatShimAllocateBuffer
0x1C003F218: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C003F2C8: "__cdecl _imp_ZwCreateKey" __imp_ZwCreateKey
0x1C003D550: Microsoft_Windows_IPNATEnableBits
0x1C003F0D8: "__cdecl _imp_FwpmTransactionAbort0" __imp_FwpmTransactionAbort0
0x1C00305B4: IsIPxlatEnabled
0x1C0010DD4: NatLogDroppedPacket
0x1C003F408: ntoskrnl_NULL_THUNK_DATA
0x1C000C1B0: NatComparePortMappingCallback
0x1C003D548: DirectorMappingLock
0x1C003F3E8: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C0030290: MaxStateAllocationInBytesName
0x1C0030800: TicketLookasideList
0x1C003F240: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C0012380: NatAcquireEndpointFromAddressPool
0x1C0028FE0: NatAttachNsiProvider
0x1C0044008: DriverEntry
0x1C002E4D0: WPP_1ca6bf25bd21396b10d2629011f9e55c_Traceguids
0x1C000FD7C: NatQueryMappingTable
0x1C000DBB0: NatAllocateFunction
0x1C003F3B8: "__cdecl _imp_ExGetPreviousMode" __imp_ExGetPreviousMode
0x1C0030968: gNatAlePortFilterCondition
0x1C000F7DC: NatQueryInformationMapping
0x1C002E200: FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD
0x1C001BBD8: searchRhizome
0x1C00305A0: pfnWppTraceMessage
0x1C003F348: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C00413A4: WppInitKm
0x1C0010B68: NatLogConnectionDeletion
0x1C00308A0: gNatAlePortFilter
0x1C002B85C: RegisterCallout
0x1C0030F30: RedirectRhizome
0x1C0030050: NatFastIoDispatch
0x1C002E220: FWPM_LAYER_OUTBOUND_IPPACKET_V4
0x1C000C84C: NatCreateInterface
0x1C0002300: WPP_SF_c
0x1C002D940: memset
0x1C003F498: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C0030E80: TimerObject
0x1C002E4F8: WPP_4f12c0c46ef03894db38409e398d9c54_Traceguids

[JEB Decompiler by PNF Software]