Generated by JEB on 2019/08/01

PE: C:\Windows\System32\drivers\winnat.sys Base=0x1C0000000 SHA-256=D2159764247133924B75F86226D01DFC4CE6E4CB5B18F49D3ED8CA50094D30C4
PDB: winnat.pdb GUID={3AD31C2E-B4C6-100D-847DE7D637C85DDE} Age=1

822 located named symbols:
0x1C00279B0: SlbNatNsiGetGlobalHandler
0x1C001C948: WINNAT_MEMORY_ALLOCATION_FAILURE
0x1C0023508: "__cdecl _imp_KeGetProcessorNumberFromIndex" __imp_KeGetProcessorNumberFromIndex
0x1C00230B0: "__cdecl _imp_FsbAllocate" __imp_FsbAllocate
0x1C00234D8: "__cdecl _imp_IoAllocateIrp" __imp_IoAllocateIrp
0x1C000B8E8: SlbNatIpsRefreshExternalNexthop
0x1C001B3B0: tcpxsum
0x1C00231F8: "__cdecl _imp_GetIpInterfaceTable" __imp_GetIpInterfaceTable
0x1C00083E4: SlbNatCheckUnusedAddressEntryInstance
0x1C001D9D0: "Delete static mapping" ??_C@_1CM@IOKECBHF@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?$AA@
0x1C001D7E0: "NAT static mapping creation duri" ??_C@_1FG@PBIFJNPN@?$AAN?$AAA?$AAT?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AAu?$AAr?$AAi@
0x1C000E8C0: WppClassicProviderCallback
0x1C001E280: IPXLAT_WFP_FORWARD_IPV4_SUBLAYER
0x1C000E324: IPxlatRemoveFiltersForInstance
0x1C00171C4: WinNatParseNb
0x1C0004A74: WinNatUpdateWFPFilters
0x1C001D940: "Delete external address" ??_C@_1DA@JGGMOIJH@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1C00194E4: McTemplateK0qbr0br0qbr3br3qqqqqt
0x1C001E090: "Filters forwarded IPv4 packets i" ??_C@_1HG@OEGLIOAA@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA4?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AAs?$AA?5?$AAi@
0x1C0023568: "__cdecl _imp_ExReleaseRundownProtectionCacheAwareEx" __imp_ExReleaseRundownProtectionCacheAwareEx
0x1C0020130: SlbNatIpsClientCharacteristics
0x1C001422C: WinNatFixupChecksum
0x1C00209EC: Microsoft_Windows_WinNatEnableBits
0x1C0018BF8: WinNatTranslateIcmpError
0x1C0023270: "__cdecl _imp_FwpmSubLayerDeleteByKey0" __imp_FwpmSubLayerDeleteByKey0
0x1C0004BF0: WinNatGetStaticBindingHandler
0x1C0020168: "__cdecl _security_cookie_complement" __security_cookie_complement
0x1C002D1C0: WppTraceCallback
0x1C0023010: "__cdecl _imp_NdisGetDataBuffer" __imp_NdisGetDataBuffer
0x1C0020000: MICROSOFT_WINNAT_ETW_PROVIDER_Context
0x1C001D710: "Persistent NAT static mapping en" ??_C@_1FE@HIEPLJPJ@?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?5?$AAe?$AAn@
0x1C0002CF0: WinNatEnumeratePacketFilterHandler
0x1C0008CA4: SlbNatCreateExternalAddressForFamily
0x1C00094A4: SlbNatIpsAddInterfaceMapping
0x1C001CB18: WINNAT_BINDING_DELETE
0x1C00140E0: WinNatFindSessionEntry
0x1C0023600: "__cdecl _imp_RtlFindClearBits" __imp_RtlFindClearBits
0x1C00028C0: WinNatSetPacketFilter
0x1C0008F84: SlbNatCreateExternalAddressBothFamilies
0x1C001D9A0: "Create static mapping" ??_C@_1CM@BEIDJNMO@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?$AA@
0x1C0027D70: SlbNatNsiEnumerateSessionHandler
0x1C0002844: WinNatDeletePacketFilter
0x1C001796C: WinNatTranslateIcmpCodeAndType
0x1C001C8C0: WINNAT_INSTANCE_EVENT
0x1C002C428: SlbNatInsertErrorEntry
0x1C00124B0: WinNatLibReserveBinding
0x1C0020220: SlbNatGlobalState
0x1C0023338: "__cdecl _imp_RtlInitUnicodeString" __imp_RtlInitUnicodeString
0x1C0023048: "__cdecl _imp_NmrWaitForClientDeregisterComplete" __imp_NmrWaitForClientDeregisterComplete
0x1C001ACC4: WinNatStatelessLogTranslation
0x1C001B500: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1C002C8B4: IPxlatCreateInstance
0x1C0010860: WinNatComputeBindingKey
0x1C0023538: "__cdecl _imp_MmUnlockPagableImageSection" __imp_MmUnlockPagableImageSection
0x1C0005B70: WinNatTranslationDpc
0x1C001C550: SlbNatIpsClientNotify
0x1C0023108: "__cdecl _imp_PtGetExactMatch" __imp_PtGetExactMatch
0x1C00235C8: "__cdecl _imp_RtlGetNextEntryHashTable" __imp_RtlGetNextEntryHashTable
0x1C0023608: "__cdecl _imp_RtlInsertEntryHashTable" __imp_RtlInsertEntryHashTable
0x1C0023268: "__cdecl _imp_FwpmFilterAdd0" __imp_FwpmFilterAdd0
0x1C0003820: WinNatEnumerateAndDeleteAddressPoolEntries
0x1C001CAF8: WINNATM_GENERAL_ERROR
0x1C0002170: WinNatSetInstanceHandler
0x1C001D878: "Delete instance" ??_C@_1CA@BDIICGPK@?$AAD?$AAe?$AAl?$AAe?$AAt?$AAe?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x1C0023548: "__cdecl _imp_MmLockPagableDataSection" __imp_MmLockPagableDataSection
0x1C00235A8: "__cdecl _imp_RtlSetBits" __imp_RtlSetBits
0x1C0023380: "__cdecl _imp_ExpInterlockedPushEntrySList" __imp_ExpInterlockedPushEntrySList
0x1C0023428: "__cdecl _imp_IoCreateDevice" __imp_IoCreateDevice
0x1C001D770: "Orphaned NAT static mappings in " ??_C@_1GI@PEBIDPJC@?$AAO?$AAr?$AAp?$AAh?$AAa?$AAn?$AAe?$AAd?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AAs?$AA?5?$AAi?$AAn?$AA?5@
0x1C001D030: "NBL clone failed" ??_C@_1CC@EBNADBNO@?$AAN?$AAB?$AAL?$AA?5?$AAc?$AAl?$AAo?$AAn?$AAe?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C00024D0: WinNatFindPacketFilter
0x1C0023130: "__cdecl _imp_OpenCompartment" __imp_OpenCompartment
0x1C0018158: WinNatTranslateIpHeader44
0x1C00069E0: WinNatConfigureFiltersForAddressPool
0x1C0023290: "__cdecl _imp_FwpsCalloutUnregisterByKey0" __imp_FwpsCalloutUnregisterByKey0
0x1C0020218: SlbNatIpsNmrInitialized
0x1C0023640: "__cdecl _imp_IoWriteErrorLogEntry" __imp_IoWriteErrorLogEntry
0x1C0023638: "__cdecl _imp_IoAllocateErrorLogEntry" __imp_IoAllocateErrorLogEntry
0x1C001CD30: "Address pool entry allocation fa" ??_C@_1EK@BCDHJNKA@?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAp?$AAo?$AAo?$AAl?$AA?5?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa@
0x1C0004218: WinNatDeleteAddressFromPool
0x1C001E300: "WmiTraceMessage" ??_C@_1CA@OFIBBPKJ@?$AAW?$AAm?$AAi?$AAT?$AAr?$AAa?$AAc?$AAe?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x1C0023128: "__cdecl _imp_ConvertCompartmentGuidToId" __imp_ConvertCompartmentGuidToId
0x1C002AE74: SlbNatClassifyInterfaces
0x1C001D3E0: "WinNAT UDP" ??_C@_1BG@JIIABAOG@?$AAW?$AAi?$AAn?$AAN?$AAA?$AAT?$AA?5?$AAU?$AAD?$AAP?$AA?$AA@
0x1C001D6B0: "NAT external address creation du" ??_C@_1FK@MDMIJLP@?$AAN?$AAA?$AAT?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AAu@
0x1C00234C0: "__cdecl _imp_ExEnterCriticalRegionAndAcquireResourceExclusive" __imp_ExEnterCriticalRegionAndAcquireResourceExclusive
0x1C0023488: "__cdecl _imp_KeQueryMaximumProcessorCountEx" __imp_KeQueryMaximumProcessorCountEx
0x1C00233D8: "__cdecl _imp_RtlCreateSecurityDescriptor" __imp_RtlCreateSecurityDescriptor
0x1C00087D0: SlbNatAsyncAllocPort
0x1C0027B50: SlbNatNsiGetExternalAddressHandler
0x1C00234D0: "__cdecl _imp_ExReleaseResourceAndLeaveCriticalRegion" __imp_ExReleaseResourceAndLeaveCriticalRegion
0x1C001CA48: WINNATM_EXTERNAL_ADDRESS_REMOVAL
0x1C002AD7C: SlbNatUpdateExternalPrefixInstanceInterfaces
0x1C0023120: "__cdecl _imp_NsiGetParameter" __imp_NsiGetParameter
0x1C0001010: WinNatGlobalWorkQueueRoutine
0x1C0003D40: WinNatGetAddressPoolHandler
0x1C0023110: "__cdecl _imp_PtGetLongestMatch" __imp_PtGetLongestMatch
0x1C00235F0: "__cdecl _imp_RtlClearBits" __imp_RtlClearBits
0x1C0023540: "__cdecl _imp_MmLockPagableSectionByHandle" __imp_MmLockPagableSectionByHandle
0x1C001AEA0: PplGenericFreeFunction
0x1C00231D8: "__cdecl _imp_NmrDeregisterProvider" __imp_NmrDeregisterProvider
0x1C0023678: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1C001CB88: WINNATM_DROPPED_IPV4_PACKET
0x1C0027A30: SlbNatNsiGetInstanceHandler
0x1C0007D10: SlbNatCreateExternalAddressWithLock
0x1C001DBD0: "SlbNatUpdateInternalPrefixInstan" ??_C@_1FK@NCBLLBAA@?$AAS?$AAl?$AAb?$AAN?$AAa?$AAt?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAP?$AAr?$AAe?$AAf?$AAi?$AAx?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn@
0x1C0004D70: WinNatSetStaticBindingHandler
0x1C001C6C0: NPI_MS_NDIS_MODULEID
0x1C001E2D0: IPXLAT_WFP_OUTBOUND_IPV4_LAYER_CALLOUT
0x1C0027780: SlbNatIpsNotifyAttachProvider
0x1C00208C8: WinNatNsiRegistrationHandle
0x1C0023528: "__cdecl _imp_MmGetSystemRoutineAddress" __imp_MmGetSystemRoutineAddress
0x1C001CA18: WINNATM_INSTANCE_EXTERNAL_INTERFACE_ASSOCIATION
0x1C001C720: NPI_NSI_MODULE_ID
0x1C001CC50: "\Device\WinNat" ??_C@_1BO@IHPNCAIJ@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAW?$AAi?$AAn?$AAN?$AAa?$AAt?$AA?$AA@
0x1C000F208: WinNatLibDeleteAddressPool
0x1C0023480: "__cdecl _imp_KeInitializeSpinLock" __imp_KeInitializeSpinLock
0x1C001D4E0: "`WinNatRegisterTcpGlobalCounterSet'::`2'::Descriptors" ?Descriptors@?1??WinNatRegisterTcpGlobalCounterSet@@9@9
0x1C0023148: "__cdecl _imp_WskReleaseProviderNPI" __imp_WskReleaseProviderNPI
0x1C002B0B4: SlbNatInitiateLowResourceHandling
0x1C0023218: "__cdecl _imp_MdpCreatePool" __imp_MdpCreatePool
0x1C0020878: SlbNatIpsNmrClientHandle
0x1C001C7C0: FWPM_CONDITION_IP_SOURCE_ADDRESS
0x1C000E868: FastWppTraceMessage
0x1C00100D0: WinNatIsIPv4AddressInPool
0x1C0018734: WinNatLogTranslation
0x1C0027008: WinNatRegGetUint32Value
0x1C002C674: SlbNatIpsCreateInterfaceContext
0x1C0004C48: WinNatSetStaticBinding
0x1C0023448: "__cdecl _imp_KeWaitForSingleObject" __imp_KeWaitForSingleObject
0x1C001E108: "IPxlat Forward IPv4 sub layer" ??_C@_1DM@EDJPGPJE@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA4?$AA?5?$AAs?$AAu?$AAb?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1C002C7A8: SlbNatIsInterfaceInternal
0x1C0023450: "__cdecl _imp_KeReleaseSpinLock" __imp_KeReleaseSpinLock
0x1C0007C74: InstanceToAddressFamily
0x1C00196EC: SlbNatLibDoesBindingExist
0x1C001C6F0: NPI_MS_IPV4_MODULEID
0x1C0023570: "__cdecl _imp_ObSetSecurityObjectByPointer" __imp_ObSetSecurityObjectByPointer
0x1C0027AE0: SlbNatNsiEnumerateInstanceHandler
0x1C001456C: WinNatCreateSessionEntry
0x1C000FEA0: WinNatDoesExtTransAddrNeedTranslation
0x1C0027BF0: SlbNatNsiEnumerateExternalAddressHandler
0x1C0007AF8: CleanupWsk
0x1C000A5D0: SlbNatIpsLogIPv4Datagram
0x1C0023060: "__cdecl _imp_RtlIndicateTimerWheelEntryTimerStart" __imp_RtlIndicateTimerWheelEntryTimerStart
0x1C00230A8: "__cdecl _imp_FsbFree" __imp_FsbFree
0x1C0003504: WinNatEnumerateAndCreateAddressPoolEntries
0x1C001B540: memcpy
0x1C00209E0: WinNatDriverObject
0x1C001C6D8: NPI_MS_IPV6_MODULEID
0x1C000B0F4: SlbNatIpsCreateSessionForInternalDatagram
0x1C00232B0: "__cdecl _imp_FwpsQueryPacketInjectionState0" __imp_FwpsQueryPacketInjectionState0
0x1C001DAA0: "Blocks TCP/UDP port numbers rese" ??_C@_1JA@BKOJJAME@?$AAB?$AAl?$AAo?$AAc?$AAk?$AAs?$AA?5?$AAT?$AAC?$AAP?$AA?1?$AAU?$AAD?$AAP?$AA?5?$AAp?$AAo?$AAr?$AAt?$AA?5?$AAn?$AAu?$AAm?$AAb?$AAe?$AAr?$AAs?$AA?5?$AAr?$AAe?$AAs?$AAe@
0x1C002CB40: IPxlatDeleteInstance
0x1C002CF0C: IPxlatFindAndReturnInstance
0x1C0027CA0: SlbNatNsiSetStaticMappingHandler
0x1C0008FD0: SlbNatAsyncHandlePortExhaust
0x1C001C7E0: FWPM_CONDITION_IP_PROTOCOL
0x1C00077FC: SlbNatDrainOutstandingWorkItems
0x1C001C598: WinNatNsiProviderDispatch
0x1C00207D0: SessionSizeLimit
0x1C00025E4: WinNatCreatePacketFilter
0x1C0023468: "__cdecl _imp_KeInitializeDpc" __imp_KeInitializeDpc
0x1C001D368: WINNAT_WFP_INBOUND_IP_SUBLAYER_IPV4
0x1C0023138: "__cdecl _imp_ConvertInterfaceIndexToLuid" __imp_ConvertInterfaceIndexToLuid
0x1C00235E8: "__cdecl _imp_RtlRemoveEntryHashTable" __imp_RtlRemoveEntryHashTable
0x1C001A0D0: WinNatStatelessCloneNblWithMultipleNbs
0x1C00230A0: "__cdecl _imp_RtlCleanupTimerWheelEntry" __imp_RtlCleanupTimerWheelEntry
0x1C00233F8: "__cdecl _imp_RtlSubAuthoritySid" __imp_RtlSubAuthoritySid
0x1C001D4E0: "`WinNatRegisterUdpGlobalCounterSet'::`2'::Descriptors" ?Descriptors@?1??WinNatRegisterUdpGlobalCounterSet@@9@9
0x1C000D820: McTemplateK0xqqb16b16qb16q
0x1C001C9C8: WINNATM_FORWARDED_IPV4_PACKET
0x1C001A4E4: WinNatStatelessTranslateTransportHeader
0x1C0023440: "__cdecl _imp_IoDeleteDevice" __imp_IoDeleteDevice
0x1C00201C8: pfnWppGetVersion
0x1C00182B4: WinNatTranslateIpHeader64
0x1C001C800: FWPM_CONDITION_FLAGS
0x1C0029E50: SlbNatFindStaticMappingInInstance
0x1C001E2B0: IPXLAT_WFP_INBOUND_IPV6_LAYER_CALLOUT
0x1C0003D20: WinNatSetAddressPoolHandler
0x1C000A000: SlbNatIpsLookupTCAP
0x1C0023098: "__cdecl _imp_RtlUpdateCurrentTimerWheelTick" __imp_RtlUpdateCurrentTimerWheelTick
0x1C000E30C: IPxlatAddFiltersForInstance
0x1C001D858: "Modify instance" ??_C@_1CA@NJKGNAOM@?$AAM?$AAo?$AAd?$AAi?$AAf?$AAy?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x1C001B540: memmove
0x1C0013D0C: WinNatComputeSessionKeyFromSockaddr
0x1C0027F1C: SlbNatCleanup
0x1C0023408: "__cdecl _imp_RtlLengthRequiredSid" __imp_RtlLengthRequiredSid
0x1C00021B0: WinNatGetInstanceHandler
0x1C00231F0: "__cdecl _imp_GetIpInterfaceEntry" __imp_GetIpInterfaceEntry
0x1C00233E8: "__cdecl _imp_RtlCreateAcl" __imp_RtlCreateAcl
0x1C0005D60: WinNatForwardClassify
0x1C000EC7C: WinNatLibCleanupAddressPoolManagement
0x1C0009410: SlbNatLowResourceTimerDpc
0x1C001B25C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1C001C9A8: WINNAT_IPXLAT_INSTANCE_DELETION
0x1C00043F0: WinNatEnumerateAddressPoolHandler
0x1C001CBA0: "\Registry\Machine\SYSTEM\Current" ??_C@_1HG@DGOOCDM@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY?$AAS?$AAT?$AAE?$AAM?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt@
0x1C001C8E0: WINNAT_WFP_FILTER_EVENT
0x1C000571C: WinNatCloneNblForTranslation
0x1C0010518: RtlAcquireScalableReadLock
0x1C001CA70: Microsoft_Windows_WinNatKeywords
0x1C00232F0: fwpkclnt_NULL_THUNK_DATA
0x1C00279F0: SlbNatNsiSetGlobalHandler
0x1C0020050: WinNatCallouts
0x1C001DFC0: "Sub layer for filtering incoming" ??_C@_1JE@MGONLFGG@?$AAS?$AAu?$AAb?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAi?$AAn?$AAc?$AAo?$AAm?$AAi?$AAn?$AAg@
0x1C000D208: McTemplateK0qqqqqqqqqqqqqqbr9br10br12br13
0x1C00232A0: "__cdecl _imp_FwpsCalloutRegister0" __imp_FwpsCalloutRegister0
0x1C0023040: NDIS_NULL_THUNK_DATA
0x1C0023260: "__cdecl _imp_FwpmFilterDeleteById0" __imp_FwpmFilterDeleteById0
0x1C0023660: "__cdecl _imp_KeQueryActiveProcessorCountEx" __imp_KeQueryActiveProcessorCountEx
0x1C00230B8: "__cdecl _imp_RtlCompute37Hash" __imp_RtlCompute37Hash
0x1C00052E8: McTemplateK0zqbr1qbr1qqqtxxqq
0x1C0012BCC: WinNatDeleteSessionEntryUnderLock
0x1C001D510: "Global parameters" ??_C@_1CE@GGJAOJOD@?$AAG?$AAl?$AAo?$AAb?$AAa?$AAl?$AA?5?$AAp?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
0x1C00230D0: "__cdecl _imp_FsbCreatePool" __imp_FsbCreatePool
0x1C001DC68: WskClientDispatch
0x1C00231E8: "__cdecl _imp_FreeMibTable" __imp_FreeMibTable
0x1C00078AC: InitWsk
0x1C0020820: WPP_MAIN_CB
0x1C0023458: "__cdecl _imp_ExDeleteResourceLite" __imp_ExDeleteResourceLite
0x1C00231E0: "__cdecl _imp_NmrRegisterProvider" __imp_NmrRegisterProvider
0x1C0016C74: McTemplateK0qbr0br0qbr3br3q
0x1C00056C0: WinNatAllocateMdl
0x1C0001D84: WinNatSetInstanceState
0x1C0027DB8: SlbNatStop
0x1C00117D0: WinNatLibCreateBinding
0x1C0010E20: WinNatFreeBindingUnderLock
0x1C00090A4: SlbNatCreateExternalAddressForPortFail
0x1C0023318: "__cdecl _imp_IoQueueWorkItem" __imp_IoQueueWorkItem
0x1C001C730: NPI_IP_SWITCHING_ID
0x1C0006BBC: WinNatInitializeWFP
0x1C0019EDC: WinNatLibStatelessTranslateIncomingIpv6ToIpv4
0x1C001D440: "default" ??_C@_1BA@HANLFFFG@?$AAd?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x1C0023190: "__cdecl _imp_MdpFree" __imp_MdpFree
0x1C002B548: SlbNatEtwRundownExternalAddresses
0x1C001DC30: "SlbNatCreateInternalAddress" ??_C@_1DI@FBEHINLI@?$AAS?$AAl?$AAb?$AAN?$AAa?$AAt?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAI?$AAn?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1C0027860: SlbNatIpsDetachProviderCompleteWorkerRoutine
0x1C002C738: SlbNatIpsRemoveInterfaceMapping
0x1C001C8A0: WINNAT_PACKET_FILTER_EVENT
0x1C00122A8: WinNatDeleteBindingsForAddress
0x1C0023000: "__cdecl _imp_NdisFreeGenericObject" __imp_NdisFreeGenericObject
0x1C0023168: "__cdecl _imp_NmrDeregisterClient" __imp_NmrDeregisterClient
0x1C00297D0: SlbNatEnumerateStaticMappings
0x1C000E964: WinNatHashTableRestructureRequired
0x1C001D058: "MDL pool allocation failed" ??_C@_1DG@POBAEBOC@?$AAM?$AAD?$AAL?$AA?5?$AAp?$AAo?$AAo?$AAl?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C0023240: "__cdecl _imp_FwpiCalloutUnregisterAndDeleteByKey0" __imp_FwpiCalloutUnregisterAndDeleteByKey0
0x1C0023648: "__cdecl _imp_KeQuerySystemTimePrecise" __imp_KeQuerySystemTimePrecise
0x1C0012AF8: McTemplateK0qbr0qbr2qqtq
0x1C0001940: WinNatDetachNsiClient
0x1C001CD80: "Unspecified address tracker allo" ??_C@_1FM@CKKIHELI@?$AAU?$AAn?$AAs?$AAp?$AAe?$AAc?$AAi?$AAf?$AAi?$AAe?$AAd?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAt?$AAr?$AAa?$AAc?$AAk?$AAe?$AAr?$AA?5?$AAa?$AAl?$AAl?$AAo@
0x1C0023470: "__cdecl _imp_ExAllocatePoolWithTag" __imp_ExAllocatePoolWithTag
0x1C0023578: "__cdecl _imp_ExAcquireRundownProtectionCacheAwareEx" __imp_ExAcquireRundownProtectionCacheAwareEx
0x1C0015AC0: WinNatUpdateTcpSessionState
0x1C001C7B0: FWPM_CONDITION_IP_LOCAL_ADDRESS
0x1C0004860: WinNARemoveWFPFiltersAtPassive
0x1C001DDE8: "IPxlat Outbound IPv4 sub layer" ??_C@_1DO@KOPBANJD@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA4?$AA?5?$AAs?$AAu?$AAb?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1C0005454: WinNatDereferencePacketFilter
0x1C00061D0: WinNatIpv4IPClassify
0x1C00201E0: pfnWppQueryTraceInformation
0x1C0003EB8: WinNatDeleteUnspecifiedIf
0x1C001C8F0: WINNATM_INSTANCE_CREATION
0x1C0023610: "__cdecl _imp_RtlAreBitsClear" __imp_RtlAreBitsClear
0x1C001D3C8: "WinNAT TCP" ??_C@_1BG@EJCPCAMA@?$AAW?$AAi?$AAn?$AAN?$AAA?$AAT?$AA?5?$AAT?$AAC?$AAP?$AA?$AA@
0x1C002BF9C: SlbNatCreateWildcardExternalAddress
0x1C0001920: WinNatAttachNsiClient
0x1C0004058: WinNatAddAddressToPool
0x1C001D838: "Create instance" ??_C@_1CA@EIFNCCHO@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x1C00261D0: WPP_SF_ddddq
0x1C001DD38: "IPxlat Outbound IPv4 filter" ??_C@_1DI@CLEOBKCF@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA4?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0023418: "__cdecl _imp_EtwWriteTransfer" __imp_EtwWriteTransfer
0x1C000114C: WinNatRegisterChangeNotification
0x1C0012428: WinNatCleanupBinding
0x1C000EB5C: WinNatLibInitializeState
0x1C0020200: WinNatIcmpGlobalCounterSet
0x1C0023028: "__cdecl _imp_NdisRetreatNetBufferDataStart" __imp_NdisRetreatNetBufferDataStart
0x1C001E4E0: in6addr_6to4prefix
0x1C001A888: WinNatStatelessTranslateIcmpError
0x1C0013A3C: WinNatInitializeSessionState
0x1C0027B90: SlbNatNsiSetExternalAddressHandler
0x1C000AFB4: SlbNatIpsSendICMPError
0x1C00233B8: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x1C001D128: "Windows NAT IP layer filter" ??_C@_1DI@DBDMOKEH@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAI?$AAP?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0008620: SlbNatAsyncCheckUnusedAddressEntry
0x1C000A17C: SlbNatIpsAddTCAP
0x1C001DCC8: WPP_3bbddc4767e33eda02a99567d181aec2_Traceguids
0x1C001C928: WINNATM_INSTANCE_MODIFICATION
0x1C001D398: WINNAT_WFP_INBOUND_IP_LAYER_CALLOUT_IPV4
0x1C00163B4: WinNatLibEnumerateSessions
0x1C0027F6C: SlbNatSetGlobalParameters
0x1C00232D0: "__cdecl _imp_FwpsAllocateCloneNetBufferList0" __imp_FwpsAllocateCloneNetBufferList0
0x1C000E340: IPxlatOutboundIPv4Callout
0x1C000F124: WinNatLibGetAddressPoolPortUsage
0x1C001DC88: "SlbNatIpsSetInterfaceContext" ??_C@_1DK@JICANEJD@?$AAS?$AAl?$AAb?$AAN?$AAa?$AAt?$AAI?$AAp?$AAs?$AAS?$AAe?$AAt?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AAC?$AAo?$AAn?$AAt?$AAe?$AAx?$AAt?$AA?$AA@
0x1C001D3B8: WINNAT_WFP_FORWARD_LAYER_CALLOUT_IPV6
0x1C001D3A8: WINNAT_WFP_FORWARD_LAYER_CALLOUT_IPV4
0x1C0027A70: SlbNatNsiSetInstanceHandler
0x1C0023628: "__cdecl _imp_KeReleaseSpinLockFromDpcLevel" __imp_KeReleaseSpinLockFromDpcLevel
0x1C0017804: WinNatChecksumDatagram
0x1C00232B8: "__cdecl _imp_FwpsInjectNetworkSendAsync0" __imp_FwpsInjectNetworkSendAsync0
0x1C000BC7C: SlbNatIpsRefreshInternalNexthop
0x1C00230F8: "__cdecl _imp_PtDeleteEntry" __imp_PtDeleteEntry
0x1C0023140: "__cdecl _imp_CloseCompartment" __imp_CloseCompartment
0x1C00235B8: "__cdecl _imp_RtlCreateHashTable" __imp_RtlCreateHashTable
0x1C001B238: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1C0023250: "__cdecl _imp_FwpsInjectionHandleCreate0" __imp_FwpsInjectionHandleCreate0
0x1C00235D0: "__cdecl _imp_RtlInitWeakEnumerationHashTable" __imp_RtlInitWeakEnumerationHashTable
0x1C002E978: SlbNatInitialize
0x1C000A97C: SlbNatIpsDropDatagram
0x1C001CA58: WINNATM_IMPROPER_DEFAULT_ROUTE_OPERATIONAL
0x1C001C8D0: WINNATM_OUT_OF_PORTS_OPERATIONAL
0x1C001E2E0: "PsGetVersion" ??_C@_1BK@DHLDGJM@?$AAP?$AAs?$AAG?$AAe?$AAt?$AAV?$AAe?$AAr?$AAs?$AAi?$AAo?$AAn?$AA?$AA@
0x1C001C938: WINNAT_TRANSLATION
0x1C00097E0: McTemplateK0zqbr1q
0x1C00233E0: "__cdecl _imp_RtlAddAccessAllowedAce" __imp_RtlAddAccessAllowedAce
0x1C001C918: WINNATM_INSTANCE_RUNDOWN
0x1C001D410: "WinNAT" ??_C@_1O@KKCLBENM@?$AAW?$AAi?$AAn?$AAN?$AAA?$AAT?$AA?$AA@
0x1C0028DE4: SlbNatEnumerateExternalAddresses
0x1C0023370: "__cdecl _imp_ExpInterlockedPopEntrySList" __imp_ExpInterlockedPopEntrySList
0x1C00234B0: "__cdecl _imp_IoFreeWorkItem" __imp_IoFreeWorkItem
0x1C0023410: "__cdecl _imp_SeExports" __imp_SeExports
0x1C0018948: WinNatTranslateFragmentGroup
0x1C001CC88: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x1C00201D0: pfnEtwRegisterClassicProvider
0x1C0023590: "__cdecl _imp_KfRaiseIrql" __imp_KfRaiseIrql
0x1C0023694: "__cdecl _IMPORT_DESCRIPTOR_NETIO" __IMPORT_DESCRIPTOR_NETIO
0x1C001C958: WINNAT_STATIC_BINDING_EVENT
0x1C0023320: "__cdecl _imp_ExWaitForRundownProtectionReleaseCacheAware" __imp_ExWaitForRundownProtectionReleaseCacheAware
0x1C001DE30: "Sub layer for filtering outgoing" ??_C@_1JE@DCAPFADJ@?$AAS?$AAu?$AAb?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAo?$AAu?$AAt?$AAg?$AAo?$AAi?$AAn?$AAg@
0x1C00209E8: EnableXlat
0x1C0023198: "__cdecl _imp_MdpAllocate" __imp_MdpAllocate
0x1C0023008: "__cdecl _imp_NdisAdvanceNetBufferDataStart" __imp_NdisAdvanceNetBufferDataStart
0x1C0023030: "__cdecl _imp_NdisFreeNetBufferListPool" __imp_NdisFreeNetBufferListPool
0x1C0023420: "__cdecl _imp_RtlGetVersion" __imp_RtlGetVersion
0x1C002789C: SlbNatIpsStartNmrClient
0x1C00066B4: WinNatConfigureCallouts
0x1C001CB48: WINNAT_SESSION_TCPSTATE_UPDATE
0x1C001C820: FWPM_CONDITION_SOURCE_INTERFACE_INDEX
0x1C00295D4: SlbNatFindAndDeleteStaticMapping
0x1C001E1E8: "IPxlatOutboundIPv4filter" ??_C@_1DC@FAPJKENA@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AAO?$AAu?$AAt?$AAb?$AAo?$AAu?$AAn?$AAd?$AAI?$AAP?$AAv?$AA4?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0023650: "__cdecl _imp_ExDeleteLookasideListEx" __imp_ExDeleteLookasideListEx
0x1C001CB08: WINNAT_SESSION_CREATE_OPERATIONAL
0x1C0019C7C: WinNatLibStatelessTranslateOutgoingIpv4ToIpv6
0x1C000FC34: WinNatLibTryDisableAddress
0x1C0003F58: WinNatDisableEnableAddressesInPool
0x1C000D8F0: IPxlatInstancePropertiesValid
0x1C0020860: FastWppEnabledFlags
0x1C0023298: "__cdecl _imp_FwpmCalloutAdd0" __imp_FwpmCalloutAdd0
0x1C001C860: WINNATM_STATIC_MAPPING_REMOVAL
0x1C001D4E0: "`WinNatRegisterIcmpGlobalCounterSet'::`2'::Descriptors" ?Descriptors@?1??WinNatRegisterIcmpGlobalCounterSet@@9@9
0x1C0028D0C: SlbNatFindAndReturnExternalAddress
0x1C0023248: "__cdecl _imp_FwpiCalloutRegisterAndAddWithoutDevice0" __imp_FwpiCalloutRegisterAndAddWithoutDevice0
0x1C001DCE0: "IPxlat instance buffer allocatio" ??_C@_1FC@IGBBKNIE@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAb?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo@
0x1C001D540: "Persistent NAT instance enumerat" ??_C@_1EI@LCGJEOFH@?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAe?$AAn?$AAu?$AAm?$AAe?$AAr?$AAa?$AAt@
0x1C0028700: SlbNatFindAndModifyInstance
0x1C000E774: FastWppCallback
0x1C002603C: WPP_SF_
0x1C00077B0: SlbNatIpsNotifyDetachProvider
0x1C00101B8: WinNatLibNat64AddIpv4Prefix
0x1C000AAE4: SlbNatIpsCheckHairpinning
0x1C0027C60: SlbNatNsiGetStaticMappingHandler
0x1C0023118: "__cdecl _imp_PtCreateTable" __imp_PtCreateTable
0x1C002888C: SlbNatFindAndDeleteInstance
0x1C001CC30: "PortChunkSize" ??_C@_1BM@OMCDBIFL@?$AAP?$AAo?$AAr?$AAt?$AAC?$AAh?$AAu?$AAn?$AAk?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1C00232A8: "__cdecl _imp_FwpmEngineOpen0" __imp_FwpmEngineOpen0
0x1C001CF70: "Windows NAT filters are grouped " ??_C@_1GI@NABEKAEA@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAa?$AAr?$AAe?$AA?5?$AAg?$AAr?$AAo?$AAu?$AAp?$AAe?$AAd?$AA?5@
0x1C0023280: "__cdecl _imp_FwpmEngineClose0" __imp_FwpmEngineClose0
0x1C00233C8: "__cdecl _imp_ExFreeCacheAwareRundownProtection" __imp_ExFreeCacheAwareRundownProtection
0x1C00233A0: "__cdecl _imp_KeGetCurrentProcessorNumberEx" __imp_KeGetCurrentProcessorNumberEx
0x1C002A424: SlbNatWfpUnblockExternalAddressPortRange
0x1C00201D8: pfnEtwUnregister
0x1C001DD70: "Filters outgoing IPv4 packets in" ??_C@_1HE@BDJPIADO@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAo?$AAu?$AAt?$AAg?$AAo?$AAi?$AAn?$AAg?$AA?5?$AAI?$AAP?$AAv?$AA4?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AAs?$AA?5?$AAi?$AAn@
0x1C001C978: WINNAT_SESSION_DELETE
0x1C0023210: "__cdecl _imp_NsiDeregisterChangeNotification" __imp_NsiDeregisterChangeNotification
0x1C0027F90: SlbNatCheckLastInstance
0x1C001CF28: "Windows NAT forward sublayer" ??_C@_1DK@IFANLHJN@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAs?$AAu?$AAb?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1C0017E6C: WinNatTranslateTransportHeader
0x1C00236D0: "__cdecl _IMPORT_DESCRIPTOR_fwpkclnt" __IMPORT_DESCRIPTOR_fwpkclnt
0x1C00201F0: WinNatInstanceCounterSet
0x1C0009244: SlbNatRemoveExternalInterfaces
0x1C00207D8: SessionSize
0x1C0029B8C: SlbNatFindExternalAddress
0x1C0023220: "__cdecl _imp_NetioInitializeWorkQueue" __imp_NetioInitializeWorkQueue
0x1C0023078: "__cdecl _imp_RtlCleanupTimerWheel" __imp_RtlCleanupTimerWheel
0x1C000F684: WinNatLibCreateAddress
0x1C00273B8: WinNatSetDeviceDacl
0x1C002A850: SlbNatUpdateInternalPrefixInstanceInterfaces
0x1C001CB78: WINNATM_INTERNAL_ADDRESS_REMOVAL
0x1C0020880: SlbNatIpsIpv4Provider
0x1C0023330: "__cdecl _imp_PcwAddInstance" __imp_PcwAddInstance
0x1C001D0E0: "Performs network adress translat" ??_C@_1EI@DGJNDLLL@?$AAP?$AAe?$AAr?$AAf?$AAo?$AAr?$AAm?$AAs?$AA?5?$AAn?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AA?5?$AAa?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAt?$AAr?$AAa?$AAn?$AAs?$AAl?$AAa?$AAt@
0x1C0001940: WinNatWFPNotify
0x1C0023038: "__cdecl _imp_NdisAllocateNetBufferListContext" __imp_NdisAllocateNetBufferListContext
0x1C001DA30: "Windows NAT TCP/UDP port range r" ??_C@_1GE@ONCJCBNP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAT?$AAC?$AAP?$AA?1?$AAU?$AAD?$AAP?$AA?5?$AAp?$AAo?$AAr?$AAt?$AA?5?$AAr?$AAa?$AAn?$AAg?$AAe?$AA?5?$AAr@
0x1C002EAF0: GsDriverEntry
0x1C0023670: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x1C001E498: "Session allocation failed" ??_C@_1DE@BELJGOBK@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C0023500: "__cdecl _imp_KeSetCoalescableTimer" __imp_KeSetCoalescableTimer
0x1C0016AE8: WinNatLibDeleteStaticBindingEntry
0x1C0016BEC: IN6_EXTRACT_V4ADDR_FROM_V4EMBV6
0x1C0002CB0: WinNatSetPacketFilterHandler
0x1C00230D8: "__cdecl _imp_RtlCleanupToeplitzHash" __imp_RtlCleanupToeplitzHash
0x1C001DEC8: "IPxlat Inbound IPv6 filter" ??_C@_1DG@BOLHPAEB@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA6?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C001DB80: "Interface luid to index conversi" ??_C@_1EG@JECFAKOF@?$AAI?$AAn?$AAt?$AAe?$AAr?$AAf?$AAa?$AAc?$AAe?$AA?5?$AAl?$AAu?$AAi?$AAd?$AA?5?$AAt?$AAo?$AA?5?$AAi?$AAn?$AAd?$AAe?$AAx?$AA?5?$AAc?$AAo?$AAn?$AAv?$AAe?$AAr?$AAs?$AAi@
0x1C001CB38: WINNATM_SKIPPED_IPV4_PACKET
0x1C0023618: "__cdecl _imp_KeSetTimerEx" __imp_KeSetTimerEx
0x1C00208B0: WinNatWFPInjectionHandleIpv4
0x1C001E220: "IPxlatInboundIPv6filter" ??_C@_1DA@FKFFBNLF@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AAI?$AAP?$AAv?$AA6?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0016E38: WinNatFragmentIpv6Packet
0x1C0023170: "__cdecl _imp_NmrRegisterClient" __imp_NmrRegisterClient
0x1C002E3F8: SlbNatLoadPersistentSettings
0x1C001CB68: WINNAT_SESSION_DELETE_OPERATIONAL
0x1C0023080: "__cdecl _imp_RtlGetNextExpirationTimerWheelTick" __imp_RtlGetNextExpirationTimerWheelTick
0x1C0023348: "__cdecl _imp_PcwRegister" __imp_PcwRegister
0x1C000E470: IPxlatInboundIPv6Callout
0x1C000F480: WinNatLibFindAddressEntry
0x1C001D2C0: "Filters IP packets that require " ??_C@_1KE@EBLDOPIM@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAI?$AAP?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AAs?$AA?5?$AAt?$AAh?$AAa?$AAt?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AA?5@
0x1C0017D6C: WinNatTranslateIcmpHeader
0x1C0001490: WinNatAddressChangeCallback
0x1C00054E8: McTemplateK0zqqqqqqttqq
0x1C000B714: SlbNatIpsRefreshInternalNoRouteState
0x1C001E2A0: IPXLAT_WFP_INBOUND_IPV6_SUBLAYER
0x1C0019614: SlbNatLibParseICMPInnerPacket
0x1C0001940: IPxlatNotifyCallout
0x1C00231A8: "__cdecl _imp_NsiAllocateAndGetTable" __imp_NsiAllocateAndGetTable
0x1C002BD50: SlbNatCreateInternalAddress
0x1C0017BBC: WinNatFixupIcmpInfoChecksum
0x1C00235A0: "__cdecl _imp_RtlClearAllBits" __imp_RtlClearAllBits
0x1C0006B14: WinNatCleanupWFP
0x1C0007880: WskSyncIrpCompletionRoutine
0x1C00260EC: WPP_SF_dd
0x1C001B4EC: tcpxsum_end
0x1C0023158: "__cdecl _imp_WskRegister" __imp_WskRegister
0x1C0008C78: SlbNatQueueWorkItem
0x1C0020210: WinNatTcpGlobalCounterSet
0x1C0013FA4: WinNatIsMatchingSession
0x1C00111E4: WinNatAllocatePort
0x1C000174C: McGenEventWrite
0x1C0020128: WPP_GLOBAL_Control
0x1C00231A0: "__cdecl _imp_NsiFreeTable" __imp_NsiFreeTable
0x1C0019B24: SlbNatLibDereferenceSession
0x1C001C810: FWPM_CONDITION_INTERFACE_INDEX
0x1C00234A0: "__cdecl _imp_ZwQueryValueKey" __imp_ZwQueryValueKey
0x1C0010AC4: WinNatLibGetBindingInfo
0x1C001CE2C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x1C001CA08: WINNATM_INSTANCE_CREATION_WITH_NO_MATCHING_PREFIX
0x1C001B45A: tcpxsum_start
0x1C0023050: "__cdecl _imp_RtlCopyBufferToMdl" __imp_RtlCopyBufferToMdl
0x1C00207F8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUmvgUdrmmzgUoryUlyquivUznwGEUkivxlnkOlyq@winnatstate" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUmvgUdrmmzgUoryUlyquivUznwGEUkivxlnkOlyq@winnatstate
0x1C002605C: WPP_SF_D
0x1C0026008: WPP_SF_d
0x1C001D160: "Filters IP packets that require " ??_C@_1KE@EIMOBLGP@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAI?$AAP?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AAs?$AA?5?$AAt?$AAh?$AAa?$AAt?$AA?5?$AAr?$AAe?$AAq?$AAu?$AAi?$AAr?$AAe?$AA?5@
0x1C0003128: WinNatCreateAddressPoolEntry
0x1C0023398: "__cdecl _imp_KeReleaseInStackQueuedSpinLockFromDpcLevel" __imp_KeReleaseInStackQueuedSpinLockFromDpcLevel
0x1C001A2C8: WinNatStatelessGetTranslatedIpForIncomingIpv6
0x1C000F044: WinNatLibSetAddressPool
0x1C00235F8: "__cdecl _imp_RtlFindClearBitsAndSet" __imp_RtlFindClearBitsAndSet
0x1C0007710: WinNatUninitializePcwCounterSets
0x1C0023160: "__cdecl _imp_NsiSetAllParameters" __imp_NsiSetAllParameters
0x1C001C9F8: WINNAT_BINDING_SESSION_COUNT
0x1C00201F8: WinNatGeneralCounterSet
0x1C0011BF0: WinNatAcquireBinding
0x1C00233A8: "__cdecl _imp_KeReleaseInStackQueuedSpinLock" __imp_KeReleaseInStackQueuedSpinLock
0x1C001D210: "Filter characteristics buffer al" ??_C@_1GA@LAIEFDJC@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAc?$AAh?$AAa?$AAr?$AAa?$AAc?$AAt?$AAe?$AAr?$AAi?$AAs?$AAt?$AAi?$AAc?$AAs?$AA?5?$AAb?$AAu?$AAf?$AAf?$AAe?$AAr?$AA?5?$AAa?$AAl@
0x1C00019BC: WinNatCreateInstance
0x1C002C340: SlbNatIpsCleanupDataPathState
0x1C001CF1C: WinNatIpv6ConvertedIpv4PLs
0x1C00276D0: WinNatUnload
0x1C00208E0: WinNatGlobalDriverState
0x1C001B1F0: "__cdecl _security_check_cookie" __security_check_cookie
0x1C0018ED8: WinNatLibTranslateInternalPacket
0x1C00232E8: "__cdecl _imp_FwpmTransactionCommit0" __imp_FwpmTransactionCommit0
0x1C00138F4: WinNatCleanupSessionState
0x1C001C988: WINNAT_SESSION_TIMEOUT
0x1C00235E0: "__cdecl _imp_RtlEndWeakEnumerationHashTable" __imp_RtlEndWeakEnumerationHashTable
0x1C002CFD0: WinNatGetIPxlatInstanceHandler
0x1C0006D4C: WinNatAddPacketFilterToWFP
0x1C002718C: WinNatInitializeGlobals
0x1C001AE50: PplGenericAllocateFunction
0x1C001C9D8: WINNATM_EXTERNAL_ADDRESS_RUNDOWN
0x1C001D970: "Get external address" ??_C@_1CK@KBOILKED@?$AAG?$AAe?$AAt?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1C001A1F8: WinNatStatelessGetTranslatedIpForOutgoingIpv4
0x1C0001880: WinNatDereferenceAddressPoolEntry
0x1C0023680: "__cdecl _IMPORT_DESCRIPTOR_ntoskrnl" __IMPORT_DESCRIPTOR_ntoskrnl
0x1C0002330: WinNatEnumerateInstanceHandler
0x1C001C9E8: WINNAT_ADDRESS_POOL_CONFIG
0x1C00231C0: "__cdecl _imp_GetUnicastIpAddressTable" __imp_GetUnicastIpAddressTable
0x1C00070E0: WinNatPcwCallback
0x1C00263AC: WPP_SF_qdd
0x1C0029F8C: SlbNatDeleteStaticMapping
0x1C00232C0: "__cdecl _imp_FwpsInjectNetworkReceiveAsync0" __imp_FwpsInjectNetworkReceiveAsync0
0x1C001C968: WINNATM_INSTANCE_DELETION
0x1C0029EA0: SlbNatVerifyStaticMapping
0x1C000A328: SlbNatIpsFreeTmpInterfaceMapping
0x1C0001538: WinNatRefreshReceiveInjectionIntefaceUnderLock
0x1C0008698: SlbNatFreePortReservationWithIrp
0x1C001C998: WINNAT_SESSION_CREATE
0x1C001C7F0: FWPM_CONDITION_IP_LOCAL_PORT
0x1C0004BF0: WinNatEnumerateStaticBindingHandler
0x1C0004BA0: WinNatEnumerateBindingEntriesHandler
0x1C001E440: "Session allocation failed due si" ??_C@_1FC@LGJGOAIE@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?5?$AAd?$AAu?$AAe?$AA?5?$AAs?$AAi@
0x1C001CE30: WinNatNsiProviderCharacteristics
0x1C0001E58: WinNatSetInstance
0x1C0002FBC: WinNatFindAddressPoolEntry
0x1C00234B8: "__cdecl _imp_KeDelayExecutionThread" __imp_KeDelayExecutionThread
0x1C0023620: "__cdecl _imp_KeAcquireSpinLockAtDpcLevel" __imp_KeAcquireSpinLockAtDpcLevel
0x1C00234E0: "__cdecl _imp_IoReuseIrp" __imp_IoReuseIrp
0x1C0029BAC: SlbNatFindExternalAddressByAddressAndPort
0x1C000E740: FastWppUnlockCodeSection
0x1C00208B8: WinNatWFPInjectionHandleIpv6
0x1C001DA00: "Get static mapping" ??_C@_1CG@GNMCMLAI@?$AAG?$AAe?$AAt?$AA?5?$AAs?$AAt?$AAa?$AAt?$AAi?$AAc?$AA?5?$AAm?$AAa?$AAp?$AAp?$AAi?$AAn?$AAg?$AA?$AA@
0x1C0023200: "__cdecl _imp_MdpDestroyPool" __imp_MdpDestroyPool
0x1C001C880: WINNAT_ADDRESS_CHANGE_NOTIFY
0x1C001CC18: "RSCAware" ??_C@_1BC@DMFHLHFF@?$AAR?$AAS?$AAC?$AAA?$AAw?$AAa?$AAr?$AAe?$AA?$AA@
0x1C0028F00: SlbNatCreateStaticMapping
0x1C0005990: WinNatInjectionComplete
0x1C00207C8: SessionLimitEventLoggedTick
0x1C0013184: WinNatIsTimerRestartNeeded
0x1C002CBD0: IPxlatFindAndDeleteInstance
0x1C001D640: "Orphaned NAT external addresses " ??_C@_1GO@MDCKOEEG@?$AAO?$AAr?$AAp?$AAh?$AAa?$AAn?$AAe?$AAd?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AAe?$AAs?$AA?5@
0x1C0023208: "__cdecl _imp_NsiRegisterChangeNotification" __imp_NsiRegisterChangeNotification
0x1C0023550: "__cdecl _imp_EtwUnregister" __imp_EtwUnregister
0x1C002F000: "__cdecl _guard_fids_table" __guard_fids_table
0x1C001CDE0: "WFP filter workitem allocation f" ??_C@_1EM@CKLNBEFP@?$AAW?$AAF?$AAP?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAw?$AAo?$AAr?$AAk?$AAi?$AAt?$AAe?$AAm?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf@
0x1C001C5B0: "__cdecl load_config_used" _load_config_used
0x1C00105B4: WinNatLibDereferenceAddressEntry
0x1C00039D8: WinNatSetAddressPool
0x1C00205C0: SlbNatIpsDataPathState
0x1C000D464: McGenEventUnregister
0x1C0023490: "__cdecl _imp_ZwClose" __imp_ZwClose
0x1C001C900: Microsoft_Windows_WinNatLevels
0x1C0001BBC: WinNatDeleteInstance
0x1C0023350: "__cdecl _imp_ExReleasePushLockExclusiveEx" __imp_ExReleasePushLockExclusiveEx
0x1C001DC78: WPP_adb8eedcb8a3349e45e0ee7f947c43c1_Traceguids
0x1C001DCC4: ScopeIdUnspecified
0x1C00033E0: WinNatDeleteAddressPoolEntry
0x1C0023658: "__cdecl _imp_ExAllocatePoolWithTagPriority" __imp_ExAllocatePoolWithTagPriority
0x1C001D470: "`WinNatRegisterGeneralCounterSet'::`2'::Descriptors" ?Descriptors@?1??WinNatRegisterGeneralCounterSet@@9@9
0x1C00235B0: "__cdecl _imp_RtlDeleteHashTable" __imp_RtlDeleteHashTable
0x1C001E150: "Sub layer for filtering forwarde" ??_C@_1JG@CNPJOLID@?$AAS?$AAu?$AAb?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?5?$AAf?$AAo?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAe@
0x1C0016754: WinNatLibCreateStaticBindingEntry
0x1C00235D8: "__cdecl _imp_RtlWeaklyEnumerateEntryHashTable" __imp_RtlWeaklyEnumerateEntryHashTable
0x1C001DF78: "IPxlat Inbound IPv6 sub layer" ??_C@_1DM@IGDOOBPH@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAI?$AAn?$AAb?$AAo?$AAu?$AAn?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA6?$AA?5?$AAs?$AAu?$AAb?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?$AA@
0x1C0023530: "__cdecl _imp_WmiTraceMessageVa" __imp_WmiTraceMessageVa
0x1C0015368: WinNatApplyAddressDependentFiltering
0x1C002C854: SlbNatIsInterfaceMappingSet
0x1C000BE40: SlbNatDpcWorker
0x1C001C830: FWPM_CONDITION_DESTINATION_INTERFACE_INDEX
0x1C00232E0: "__cdecl _imp_FwpsAllocateNetBufferAndNetBufferList0" __imp_FwpsAllocateNetBufferAndNetBufferList0
0x1C0009AA0: IN6ADDR_SETSOCKADDR
0x1C00270DC: WinNatRegOpenKey
0x1C001E290: IPXLAT_WFP_FORWARD_IPV4_LAYER_CALLOUT
0x1C000D440: WinNatStopTrace
0x1C000D768: IPxlatGetInstancePropertiesFromInterfaceIndex
0x1C00077F0: SlbNatIpsForwardNBLCompletionRoutine
0x1C0023478: "__cdecl _imp_KeInitializeEvent" __imp_KeInitializeEvent
0x1C00198F0: SlbNatLibTranslate
0x1C000FB00: WinNatLibDeleteAddress
0x1C002B020: SlbNatLowResourceWorkerRoutine
0x1C00230C8: "__cdecl _imp_RtlInitializeToeplitzHash" __imp_RtlInitializeToeplitzHash
0x1C001E320: "WmiQueryTraceInformation" ??_C@_1DC@DOCOAJH@?$AAW?$AAm?$AAi?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAT?$AAr?$AAa?$AAc?$AAe?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
0x1C00232F8: "__cdecl _imp_BCryptGenRandom" __imp_BCryptGenRandom
0x1C002A440: SlbNatConvertRdIdtoCompartmentId
0x1C0023188: "__cdecl _imp_ConvertLengthToIpv4Mask" __imp_ConvertLengthToIpv4Mask
0x1C001C530: SlbNatIpsClientDispatch
0x1C0004BF0: WinNatGetSessionEntryHandler
0x1C001D590: "NAT instance creation during sta" ??_C@_1EK@DOIPLBDN@?$AAN?$AAA?$AAT?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAc?$AAr?$AAe?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAd?$AAu?$AAr?$AAi?$AAn?$AAg?$AA?5?$AAs?$AAt?$AAa@
0x1C002BEF0: SlbNatDeleteInternalAddress
0x1C0023300: ksecdd_NULL_THUNK_DATA
0x1C002A4B4: SlbNatChangeInstanceExternalInterface
0x1C001E390: "EtwUnregister" ??_C@_1BM@CJMKDOJH@?$AAE?$AAt?$AAw?$AAU?$AAn?$AAr?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AA?$AA@
0x1C000194C: WinNatFindNatInstance
0x1C001D3F8: "WinNAT ICMP" ??_C@_1BI@FGIBKKBG@?$AAW?$AAi?$AAn?$AAN?$AAA?$AAT?$AA?5?$AAI?$AAC?$AAM?$AAP?$AA?$AA@
0x1C00232D8: "__cdecl _imp_FwpsFreeNetBufferList0" __imp_FwpsFreeNetBufferList0
0x1C0011460: WinNatAllocateBinding
0x1C00231B0: "__cdecl _imp_NetioInsertWorkQueue" __imp_NetioInsertWorkQueue
0x1C0026240: WPP_SF_Sdd
0x1C002B3F4: SlbNatEtwRundown
0x1C002CCB8: IPxlatFindAndModifyInstance
0x1C0023258: "__cdecl _imp_FwpsInjectionHandleDestroy0" __imp_FwpsInjectionHandleDestroy0
0x1C001D450: "`WinNatRegisterInstanceCounterSet'::`2'::Descriptors" ?Descriptors@?1??WinNatRegisterInstanceCounterSet@@9@9
0x1C00234E8: "__cdecl _imp_IoFreeIrp" __imp_IoFreeIrp
0x1C00151D0: WinNatDeleteSessionsOnAddress
0x1C001CCF0: "Packet filter allocation failed" ??_C@_1EA@CAPBFICN@?$AAP?$AAa?$AAc?$AAk?$AAe?$AAt?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C002D010: WinNatSetIPxlatInstanceHandler
0x1C001D008: "NBL retreat failed" ??_C@_1CG@PMHKACDF@?$AAN?$AAB?$AAL?$AA?5?$AAr?$AAe?$AAt?$AAr?$AAe?$AAa?$AAt?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C002C608: SlbNatIpsFindInterfaceContext
0x1C001C840: WINNATM_EXTERNAL_ADDRESS_ADDITION
0x1C002A184: SlbNatWfpBlockExternalAddressPortRange
0x1C0023150: "__cdecl _imp_WskCaptureProviderNPI" __imp_WskCaptureProviderNPI
0x1C00230E8: "__cdecl _imp_PtDestroyTable" __imp_PtDestroyTable
0x1C00077F0: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1C001B2D0: memcmp
0x1C0019B80: SlbNatLibDeleteSession
0x1C000DE8C: IPxlatConfigureFiltersForInstance
0x1C0023560: "__cdecl _imp_MmMapLockedPagesSpecifyCache" __imp_MmMapLockedPagesSpecifyCache
0x1C000103C: WinNatReadRegistryConfig
0x1C0023588: "__cdecl _imp_RtlContractHashTable" __imp_RtlContractHashTable
0x1C001CE38: SlbNatDefaultSdData
0x1C0014344: WinNatFillSessionAddresses
0x1C00080DC: SlbNatAllocatePorts
0x1C001B1A8: PplpFreeOneLookasideList
0x1C0009D60: McTemplateK0zjqqqqqqqqqqtq
0x1C0013238: WinNatRestartSessionTimer
0x1C0015648: WinNatGetSessionForExternalPacket
0x1C002D07C: WppLoadTracingSupport
0x1C0005A70: WinNatInjectTranslatedPacket
0x1C0023520: "__cdecl _imp_IoWMIRegistrationControl" __imp_IoWMIRegistrationControl
0x1C0005628: McTemplateK0z
0x1C000ACF8: SlbNatIpsUpdateExternalHairpinNexthop
0x1C0009EE4: SlbNatFillPacketChecksum
0x1C001C750: FWPM_LAYER_INBOUND_IPPACKET_V6
0x1C00230E0: "__cdecl _imp_FsbDestroyPool" __imp_FsbDestroyPool
0x1C00236BC: "__cdecl _IMPORT_DESCRIPTOR_ksecdd" __IMPORT_DESCRIPTOR_ksecdd
0x1C001C8B0: MICROSOFT_WINNAT_ETW_PROVIDER
0x1C002B7BC: SlbNatEtwRundownStaticMappings
0x1C0023180: "__cdecl _imp_NmrClientAttachProvider" __imp_NmrClientAttachProvider
0x1C002C7F8: SlbNatIsInterfaceExternal
0x1C0023020: "__cdecl _imp_NdisAllocateGenericObject" __imp_NdisAllocateGenericObject
0x1C0020800: FastWppSectionHandle
0x1C000F9F4: WinNatLibSetAddress
0x1C0023630: "__cdecl _imp_ZwQuerySystemInformation" __imp_ZwQuerySystemInformation
0x1C0013ED0: WinNatComputeAddressFilterKeyFromTransportAddr
0x1C001D270: "Windows NAT forward layer filter" ??_C@_1EC@NOEIJKME@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr@
0x1C0007C90: SlbNatIPPrefixMatch
0x1C0023388: "__cdecl _imp_KeTestSpinLock" __imp_KeTestSpinLock
0x1C0023088: "__cdecl _imp_RtlReturnTimerWheelEntry" __imp_RtlReturnTimerWheelEntry
0x1C001C050: WinNatNsiInformationObject
0x1C0023310: "__cdecl _imp_ExAllocateCacheAwareRundownProtection" __imp_ExAllocateCacheAwareRundownProtection
0x1C0026130: WPP_SF_ddD
0x1C0026180: WPP_SF_ddd
0x1C001E250: "IPxlatForwardIPv4filter" ??_C@_1DA@EIMDHCPD@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AAI?$AAP?$AAv?$AA4?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0023460: "__cdecl _imp_KeAcquireSpinLockRaiseToDpc" __imp_KeAcquireSpinLockRaiseToDpc
0x1C0004D90: WinNatLoadPersistentSettings
0x1C001D388: WINNAT_WFP_FORWARD_SUBLAYER_IPV6
0x1C001DF00: "Filters incoming IPv6 packets in" ??_C@_1HE@OHHNGFGB@?$AAF?$AAi?$AAl?$AAt?$AAe?$AAr?$AAs?$AA?5?$AAi?$AAn?$AAc?$AAo?$AAm?$AAi?$AAn?$AAg?$AA?5?$AAI?$AAP?$AAv?$AA6?$AA?5?$AAp?$AAa?$AAc?$AAk?$AAe?$AAt?$AAs?$AA?5?$AAi?$AAn@
0x1C002C0B8: SlbNatRemoveExternalInterfaceFromInstances
0x1C00262CC: WPP_SF_dddd
0x1C000A514: SlbNatIpsExtractIPv4EventInfo
0x1C002B150: SlbNatAddressChangeCallback
0x1C0023368: "__cdecl _imp_KeInsertQueueDpc" __imp_KeInsertQueueDpc
0x1C0020160: "__cdecl _security_cookie" __security_cookie
0x1C0005700: WinNatFreeMdl
0x1C00234C8: "__cdecl _imp_KeCancelTimer" __imp_KeCancelTimer
0x1C000F148: WinNatLibGetAddressPool
0x1C0009BF4: McTemplateK0zjqqqqqqqqqqt
0x1C000E910: WinNatLibCleanupState
0x1C00231C8: "__cdecl _imp_NsiGetAllParameters" __imp_NsiGetAllParameters
0x1C001E4D0: WPP_90c8a857746232ba3eff52159a9a7c1a_Traceguids
0x1C000CE40: SlbNatIpsClientReceivePackets
0x1C0010730: WinNatInitializeBindingState
0x1C001C770: FWPM_LAYER_IPFORWARD_V4
0x1C001C780: FWPM_LAYER_IPFORWARD_V6
0x1C002B2AC: SlbNatPublishPerInstanceCounters
0x1C00234F0: "__cdecl _imp_RtlCompareMemory" __imp_RtlCompareMemory
0x1C000D3D4: McTemplateK0qq
0x1C0004630: WinNatAddWFPFiltersAtPassive
0x1C0012A54: McTemplateK0zq
0x1C0012058: WinNatReleaseBinding
0x1C001C790: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4
0x1C001C7A0: FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6
0x1C0009394: IsDefaultCompartment
0x1C000D4A0: McGenControlCallbackV2
0x1C001E358: "EtwRegisterClassicProvider" ??_C@_1DG@PFOPAIND@?$AAE?$AAt?$AAw?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAe?$AAr?$AAC?$AAl?$AAa?$AAs?$AAs?$AAi?$AAc?$AAP?$AAr?$AAo?$AAv?$AAi?$AAd?$AAe?$AAr?$AA?$AA@
0x1C00017B0: McTemplateK0qzqq
0x1C001D8B8: "Create external address" ??_C@_1DA@FKEEOOEH@?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?$AA@
0x1C001D8F0: "SlbNatCreateExternalAddressForFa" ??_C@_1EK@JBDAKGEP@?$AAS?$AAl?$AAb?$AAN?$AAa?$AAt?$AAC?$AAr?$AAe?$AAa?$AAt?$AAe?$AAE?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AAA?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AAF?$AAo?$AAr?$AAF?$AAa@
0x1C000D610: IN6_SET_V4ADDR_IN_V4EMBV6
0x1C00011FC: WinNatCleanupGlobals
0x1C00170C0: WinNatIsPacketSourceRouted
0x1C001CCA8: WPP_ThisDir_CTLGUID_UxWppGuid
0x1C00232C8: "__cdecl _imp_FwpsFreeCloneNetBufferList0" __imp_FwpsFreeCloneNetBufferList0
0x1C00234F8: "__cdecl _imp_KeInitializeTimer" __imp_KeInitializeTimer
0x1C001CA38: WINNATM_STATIC_MAPPING_ADDITION
0x1C0029C44: SlbNatDeleteExternalAddress
0x1C0023328: "__cdecl _imp_ExReInitializeRundownProtectionCacheAware" __imp_ExReInitializeRundownProtectionCacheAware
0x1C001CB58: WINNAT_IPXLAT_INSTANCE_CREATION
0x1C00051FC: McTemplateK0zqhhxqq
0x1C001B0A8: PplpCreateOneLookasideList
0x1C00103F0: WinNatLibNat64RemoveIpv4Prefix
0x1C001D5E0: "Persistent NAT external address " ??_C@_1FI@HNIIMLA@?$AAP?$AAe?$AAr?$AAs?$AAi?$AAs?$AAt?$AAe?$AAn?$AAt?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5@
0x1C00233B0: "__cdecl _imp_KeAcquireInStackQueuedSpinLock" __imp_KeAcquireInStackQueuedSpinLock
0x1C001CC70: "DriverEntry" ??_C@_1BI@JBAOFJDI@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AAE?$AAn?$AAt?$AAr?$AAy?$AA?$AA@
0x1C001D898: "Get instance" ??_C@_1BK@BPMNLKLH@?$AAG?$AAe?$AAt?$AA?5?$AAi?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x1C002C1BC: SlbNatIpsInitializeDataPathState
0x1C00185F0: WinNatTranslatePacket
0x1C0023228: NETIO_NULL_THUNK_DATA
0x1C0026364: WPP_SF_qd
0x1C0020740: IPxlatGlobalState
0x1C0001590: WinNatIFChangeCallback
0x1C002801C: SlbNatCreateInstance
0x1C00207FC: FastWppSectionLocked
0x1C0026400: FastWppPlaceholder
0x1C001CA28: WINNATM_INTERNAL_ADDRESS_ADDITION
0x1C00209F0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUmvgUdrmmzgUhbhUlyquivUznwGEUkivxlnkOlyq@winnat" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUmvgUdrmmzgUhbhUlyquivUznwGEUkivxlnkOlyq@winnat
0x1C0023438: "__cdecl _imp_KeFlushQueuedDpcs" __imp_KeFlushQueuedDpcs
0x1C0015F54: WinNatUpdateSessionState
0x1C002EB24: "__cdecl _security_init_cookie" __security_init_cookie
0x1C002C568: SlbNatIpsClearInterfaceContext
0x1C002632C: WPP_SF_q
0x1C00231D0: "__cdecl _imp_NmrWaitForProviderDeregisterComplete" __imp_NmrWaitForProviderDeregisterComplete
0x1C0010648: WinNatCleanupBindingState
0x1C0023518: "__cdecl _imp_ExInitializeLookasideListEx" __imp_ExInitializeLookasideListEx
0x1C0010BCC: WinNatLibEnumerateBindings
0x1C0023360: "__cdecl _imp_ExInitializePushLock" __imp_ExInitializePushLock
0x1C0023558: "__cdecl _imp_EtwRegister" __imp_EtwRegister
0x1C0023308: "__cdecl _imp_IoAllocateWorkItem" __imp_IoAllocateWorkItem
0x1C001A358: WinNatStatelessTranslatePacket
0x1C0023178: "__cdecl _imp_NmrClientDetachProviderComplete" __imp_NmrClientDetachProviderComplete
0x1C00201C0: WPPTraceSuite
0x1C00233C0: "__cdecl _imp_KeSetEvent" __imp_KeSetEvent
0x1C0023018: "__cdecl _imp_NdisAllocateNetBufferListPool" __imp_NdisAllocateNetBufferListPool
0x1C00098A4: McTemplateK0zqqqbr3br3jqbr3q
0x1C0004C00: WinNatEnumerateSessionEntriesHandler
0x1C001C890: WINNAT_BINDING_CREATE
0x1C000E9A4: WinNatRestructureHashTable
0x1C0016D38: McTemplateK0qbr0br0qbr3br3qqqq
0x1C001C740: FWPM_LAYER_INBOUND_IPPACKET_V4
0x1C000E600: IPxlatForwardIPv4Callout
0x1C00230F0: "__cdecl _imp_PtEnumOverTable" __imp_PtEnumOverTable
0x1C001CC98: WPP_7849fbcfea8c306002d0f434021e5dca_Traceguids
0x1C00230C0: "__cdecl _imp_RtlComputeToeplitzHash" __imp_RtlComputeToeplitzHash
0x1C001CB28: WINNAT_IPXLAT_INSTANCE_MODIFICATION
0x1C000D5D0: McGenEventRegister
0x1C0029994: SlbNatDeleteInstance
0x1C000AA80: SlbNatIpsSessionCleanupRoutine
0x1C0028954: SlbNatFindAndReturnInstance
0x1C001E3B0: "Binding allocation failed" ??_C@_1DE@BNMPHBO@?$AAB?$AAi?$AAn?$AAd?$AAi?$AAn?$AAg?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C001C870: WINNATM_IMPROPER_DEFAULT_ROUTE
0x1C0023580: "__cdecl _imp_RtlExpandHashTable" __imp_RtlExpandHashTable
0x1C000AE34: SlbNatIpsShuntHairpinnedDatagram
0x1C000EA30: WinNatRestructureHashTables
0x1C0013310: WinNatSessionTimerDpc
0x1C001D420: "WinNAT Instance" ??_C@_1CA@CHGDCGAP@?$AAW?$AAi?$AAn?$AAN?$AAA?$AAT?$AA?5?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
0x1C0023358: "__cdecl _imp_ExAcquirePushLockExclusiveEx" __imp_ExAcquirePushLockExclusiveEx
0x1C00108C8: WinNatFindBindingUnderLock
0x1C0023070: "__cdecl _imp_RtlInitializeTimerWheel" __imp_RtlInitializeTimerWheel
0x1C000A060: SlbNatIpsEnlargeTCAPArray
0x1C000A3C0: SlbNatCheckAndLogImproperDefaultRouteEvent
0x1C0023510: "__cdecl _imp_KeSetTargetProcessorDpcEx" __imp_KeSetTargetProcessorDpcEx
0x1C0009440: SlbNatFindExternalAddressForLoopback
0x1C002C484: SlbNatIpsSetInterfaceContext
0x1C00236A8: "__cdecl _IMPORT_DESCRIPTOR_NDIS" __IMPORT_DESCRIPTOR_NDIS
0x1C001C000: WinNatProviderCharacteristics
0x1C00074A8: WinNatInitializePcwCounterSets
0x1C00233F0: "__cdecl _imp_RtlLengthSid" __imp_RtlLengthSid
0x1C0028BC8: SlbNatCreateExternalAddress
0x1C0008290: SlbNatAsyncFreePort
0x1C000EE6C: WinNatLibCreateAddressPool
0x1C001B220: "__cdecl _report_gsfailure" __report_gsfailure
0x1C0023598: "__cdecl _imp_KeLowerIrql" __imp_KeLowerIrql
0x1C001CFD8: "NBL allocation failed" ??_C@_1CM@GAPGCACN@?$AAN?$AAB?$AAL?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C0023278: "__cdecl _imp_FwpmSubLayerAdd0" __imp_FwpmSubLayerAdd0
0x1C000BF00: SlbNatIpsClientPendPackets
0x1C0023238: "__cdecl _imp_FwpmTransactionBegin0" __imp_FwpmTransactionBegin0
0x1C001920C: WinNatLibTranslateExternalPacket
0x1C0023090: "__cdecl _imp_RtlGetNextExpiredTimerWheelEntry" __imp_RtlGetNextExpiredTimerWheelEntry
0x1C001D378: WINNAT_WFP_FORWARD_SUBLAYER_IPV4
0x1C001E3F0: "Session timerwheel allocation fa" ??_C@_1EK@BBOLLEIJ@?$AAS?$AAe?$AAs?$AAs?$AAi?$AAo?$AAn?$AA?5?$AAt?$AAi?$AAm?$AAe?$AAr?$AAw?$AAh?$AAe?$AAe?$AAl?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa@
0x1C0028A60: SlbNatEnumerateInstances
0x1C000D698: IPxlatCleanup
0x1C001AF04: PplCreateLookasideList
0x1C001DB30: "Reserve external address and por" ??_C@_1FA@IMFPKIKO@?$AAR?$AAe?$AAs?$AAe?$AAr?$AAv?$AAe?$AA?5?$AAe?$AAx?$AAt?$AAe?$AAr?$AAn?$AAa?$AAl?$AA?5?$AAa?$AAd?$AAd?$AAr?$AAe?$AAs?$AAs?$AA?5?$AAa?$AAn?$AAd?$AA?5?$AAp?$AAo?$AAr@
0x1C000FD68: WinNatLibDeterminePortUsage
0x1C0023378: "__cdecl _imp_ExQueryDepthSList" __imp_ExQueryDepthSList
0x1C000592C: WinNatAddBackFillToNetBuffer
0x1C0006890: WinNatConfigureSubLayers
0x1C001C9B8: WINNAT_SESSION_TIMER_UPDATE
0x1C001D090: "Windows NAT forward layer callou" ??_C@_1EE@KKKNKPNP@?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAA?$AAT?$AA?5?$AAf?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAl?$AAa?$AAy?$AAe?$AAr?$AA?5?$AAc?$AAa?$AAl?$AAl?$AAo?$AAu@
0x1C00208C0: WinNatNdisNblPoolHandle
0x1C00234A8: "__cdecl _imp_ExInitializeResourceLite" __imp_ExInitializeResourceLite
0x1C00077F0: SlbNatIpsNotifyCleanupProviderContext
0x1C0018548: WinNatTranslateIpHeader
0x1C00231B8: "__cdecl _imp_ConvertInterfaceLuidToIndex" __imp_ConvertInterfaceLuidToIndex
0x1C0023230: "__cdecl _imp_FwpmTransactionAbort0" __imp_FwpmTransactionAbort0
0x1C0023668: ntoskrnl_NULL_THUNK_DATA
0x1C0020170: SlbNatIpsClientTicket
0x1C0023430: "__cdecl _imp_ExFreePoolWithTag" __imp_ExFreePoolWithTag
0x1C001C708: NPI_MS_WINNAT_MODULEID
0x1C0005134: McTemplateK0qbr0qbr2qqq
0x1C00099D0: McTemplateK0zqbr1hh
0x1C000D998: IPxlatConfigureCallouts
0x1C0023400: "__cdecl _imp_RtlInitializeSid" __imp_RtlInitializeSid
0x1C0027D00: SlbNatNsiEnumerateStaticMappingHandler
0x1C002C5CC: SlbNatIpsFindTCAP
0x1C000A280: SlbNatIpsRemoveTCAP
0x1C00233D0: "__cdecl _imp_RtlSetDaclSecurityDescriptor" __imp_RtlSetDaclSecurityDescriptor
0x1C0007480: WinNatPcwPerInstanceCountersCallback
0x1C002E008: DriverEntry
0x1C0028C2C: SlbNatFindAndDeleteExternalAddress
0x1C001CCB8: "Instance allocation failed" ??_C@_1DG@CDBNENJG@?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?5?$AAa?$AAl?$AAl?$AAo?$AAc?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAf?$AAa?$AAi?$AAl?$AAe?$AAd?$AA?$AA@
0x1C0020208: WinNatUdpGlobalCounterSet
0x1C001C850: WINNATM_STATIC_MAPPING_RUNDOWN
0x1C000C168: SlbNatIpsHandleIncomingUnicastDatagram
0x1C0023068: "__cdecl _imp_RtlInitializeTimerWheelEntry" __imp_RtlInitializeTimerWheelEntry
0x1C00235C0: "__cdecl _imp_RtlLookupEntryHashTable" __imp_RtlLookupEntryHashTable
0x1C00296F4: SlbNatFindAndReturnStaticMapping
0x1C001E058: "IPxlat Forward IPv4 filter" ??_C@_1DG@PIPLDKGG@?$AAI?$AAP?$AAx?$AAl?$AAa?$AAt?$AA?5?$AAF?$AAo?$AAr?$AAw?$AAa?$AAr?$AAd?$AA?5?$AAI?$AAP?$AAv?$AA4?$AA?5?$AAf?$AAi?$AAl?$AAt?$AAe?$AAr?$AA?$AA@
0x1C0004B50: WinNatGetBindingEntryHandler
0x1C0029934: SlbNatFindInstance
0x1C001E2C0: IPXLAT_WFP_OUTBOUND_IPV4_SUBLAYER
0x1C0013DF4: WinNatComputeSessionKeyFromTransportAddr
0x1C0023498: "__cdecl _imp_ZwOpenKey" __imp_ZwOpenKey
0x1C0023288: "__cdecl _imp_FwpmCalloutDeleteByKey0" __imp_FwpmCalloutDeleteByKey0
0x1C0023340: "__cdecl _imp_PcwUnregister" __imp_PcwUnregister
0x1C002D438: WppInitKm
0x1C00077F0: SlbNatIpsClientNotifyEvent
0x1C001C7D0: FWPM_CONDITION_IP_DESTINATION_ADDRESS
0x1C0023390: "__cdecl _imp_KeAcquireInStackQueuedSpinLockAtDpcLevel" __imp_KeAcquireInStackQueuedSpinLockAtDpcLevel
0x1C0026090: WPP_SF_S
0x1C001C760: FWPM_LAYER_OUTBOUND_IPPACKET_V4
0x1C001B880: memset
0x1C00236E4: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1C001192C: WinNatInsertBindingToTable
0x1C0023100: "__cdecl _imp_PtInsertEntry" __imp_PtInsertEntry
0x1C0023058: "__cdecl _imp_RtlCopyMdlToMdl" __imp_RtlCopyMdlToMdl

[JEB Decompiler by PNF Software]