1 !<arch> 2 / 1402958954 0 0 0 2932 ` 3 X> jj::!!$$''*^*^-P-P0:0:335588;;>\>\AACCFFIIL>L>NNQQTTWWZLZL]]__bbeeh:h:jjmmpppps:s:vvxx{{~j~j22__lib32_libwtsapi32_a_iname__head_lib32_libwtsapi32_a_WTSWaitSystemEvent@12__imp__WTSWaitSystemEvent@12_WTSVirtualChannelWrite@16__imp__WTSVirtualChannelWrite@16_WTSVirtualChannelRead@20__imp__WTSVirtualChannelRead@20_WTSVirtualChannelQuery@16__imp__WTSVirtualChannelQuery@16_WTSVirtualChannelPurgeOutput@4__imp__WTSVirtualChannelPurgeOutput@4_WTSVirtualChannelPurgeInput@4__imp__WTSVirtualChannelPurgeInput@4_WTSVirtualChannelOpenEx@12__imp__WTSVirtualChannelOpenEx@12_WTSVirtualChannelOpen@12__imp__WTSVirtualChannelOpen@12_WTSVirtualChannelClose@4__imp__WTSVirtualChannelClose@4_WTSUnRegisterSessionNotificationEx@8__imp__WTSUnRegisterSessionNotificationEx@8_WTSUnRegisterSessionNotification@4__imp__WTSUnRegisterSessionNotification@4_WTSTerminateProcess@12__imp__WTSTerminateProcess@12_WTSStopRemoteControlSession@4__imp__WTSStopRemoteControlSession@4_WTSStartRemoteControlSessionW@16__imp__WTSStartRemoteControlSessionW@16_WTSStartRemoteControlSessionA@16__imp__WTSStartRemoteControlSessionA@16_WTSShutdownSystem@8__imp__WTSShutdownSystem@8_WTSSetUserConfigW@20__imp__WTSSetUserConfigW@20_WTSSetUserConfigA@20__imp__WTSSetUserConfigA@20_WTSSetSessionInformationW@20__imp__WTSSetSessionInformationW@20_WTSSetSessionInformationA@20__imp__WTSSetSessionInformationA@20_WTSSendMessageW@40__imp__WTSSendMessageW@40_WTSSendMessageA@40__imp__WTSSendMessageA@40_WTSRegisterSessionNotificationEx@12__imp__WTSRegisterSessionNotificationEx@12_WTSRegisterSessionNotification@8__imp__WTSRegisterSessionNotification@8_WTSQueryUserToken@8__imp__WTSQueryUserToken@8_WTSQueryUserConfigW@20__imp__WTSQueryUserConfigW@20_WTSQueryUserConfigA@20__imp__WTSQueryUserConfigA@20_WTSQuerySessionInformationW@20__imp__WTSQuerySessionInformationW@20_WTSQuerySessionInformationA@20__imp__WTSQuerySessionInformationA@20_WTSOpenServerW@4__imp__WTSOpenServerW@4_WTSOpenServerA@4__imp__WTSOpenServerA@4_WTSLogoffSession@12__imp__WTSLogoffSession@12_WTSFreeMemory@4__imp__WTSFreeMemory@4_WTSEnumerateSessionsW@20__imp__WTSEnumerateSessionsW@20_WTSEnumerateSessionsA@20__imp__WTSEnumerateSessionsA@20_WTSEnumerateServersW@20__imp__WTSEnumerateServersW@20_WTSEnumerateServersA@20__imp__WTSEnumerateServersA@20_WTSEnumerateProcessesW@20__imp__WTSEnumerateProcessesW@20_WTSEnumerateProcessesA@20__imp__WTSEnumerateProcessesA@20_WTSDisconnectSession@12__imp__WTSDisconnectSession@12_WTSConnectSessionW@16__imp__WTSConnectSessionW@16_WTSConnectSessionA@16__imp__WTSConnectSessionA@16_WTSCloseServer@4__imp__WTSCloseServer@4dptbt.o/ 1402958954 28587 5000 100640 586 ` 7 L.text 0`.data@0.bss0.idata$4@0.idata$5@0.idata$7 @0WTSAPI32.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7 __lib32_libwtsapi32_a_inamedptbh.o/ 1402958954 28587 5000 100640 657 ` 10 L6.text 0`.data@0.bss0.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$5;__head_lib32_libwtsapi32_a__lib32_libwtsapi32_a_iname 14 dptbs00042.o/ 1402958954 28587 5000 100640 647 ` 15 L 16 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %*WTSWaitSystemEvent .text.data.bss.idata$7.idata$5.idata$4.idata$68S_WTSWaitSystemEvent@12__imp__WTSWaitSystemEvent@12__head_lib32_libwtsapi32_a 17 dptbs00041.o/ 1402958954 28587 5000 100640 659 ` 18 L 19 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %)WTSVirtualChannelWrite .text.data.bss.idata$7.idata$5.idata$4.idata$6@[_WTSVirtualChannelWrite@16__imp__WTSVirtualChannelWrite@16__head_lib32_libwtsapi32_a 20 dptbs00040.o/ 1402958954 28587 5000 100640 653 ` 21 L 22 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %(WTSVirtualChannelRead .text.data.bss.idata$7.idata$5.idata$4.idata$6>Y_WTSVirtualChannelRead@20__imp__WTSVirtualChannelRead@20__head_lib32_libwtsapi32_a 23 dptbs00039.o/ 1402958954 28587 5000 100640 659 ` 24 L 25 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %'WTSVirtualChannelQuery .text.data.bss.idata$7.idata$5.idata$4.idata$6@[_WTSVirtualChannelQuery@16__imp__WTSVirtualChannelQuery@16__head_lib32_libwtsapi32_a 26 dptbs00038.o/ 1402958954 28587 5000 100640 673 ` 27 L 28 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %&WTSVirtualChannelPurgeOutput .text.data.bss.idata$7.idata$5.idata$4.idata$6$Je_WTSVirtualChannelPurgeOutput@4__imp__WTSVirtualChannelPurgeOutput@4__head_lib32_libwtsapi32_a 29 dptbs00037.o/ 1402958954 28587 5000 100640 671 ` 30 L 31 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %%WTSVirtualChannelPurgeInput .text.data.bss.idata$7.idata$5.idata$4.idata$6#Hc_WTSVirtualChannelPurgeInput@4__imp__WTSVirtualChannelPurgeInput@4__head_lib32_libwtsapi32_a 32 dptbs00036.o/ 1402958954 28587 5000 100640 661 ` 33 L 34 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %$WTSVirtualChannelOpenEx .text.data.bss.idata$7.idata$5.idata$4.idata$6 B]_WTSVirtualChannelOpenEx@12__imp__WTSVirtualChannelOpenEx@12__head_lib32_libwtsapi32_a 35 dptbs00035.o/ 1402958954 28587 5000 100640 653 ` 36 L 37 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %#WTSVirtualChannelOpen .text.data.bss.idata$7.idata$5.idata$4.idata$6>Y_WTSVirtualChannelOpen@12__imp__WTSVirtualChannelOpen@12__head_lib32_libwtsapi32_a 38 dptbs00034.o/ 1402958954 28587 5000 100640 657 ` 39 L 40 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %"WTSVirtualChannelClose .text.data.bss.idata$7.idata$5.idata$4.idata$6>Y_WTSVirtualChannelClose@4__imp__WTSVirtualChannelClose@4__head_lib32_libwtsapi32_a 41 dptbs00033.o/ 1402958954 28587 5000 100640 693 ` 42 L 43 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6&@ %!WTSUnRegisterSessionNotificationEx .text.data.bss.idata$7.idata$5.idata$4.idata$6*Vq_WTSUnRegisterSessionNotificationEx@8__imp__WTSUnRegisterSessionNotificationEx@8__head_lib32_libwtsapi32_a 44 dptbs00032.o/ 1402958954 28587 5000 100640 685 ` 45 L 46 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ % WTSUnRegisterSessionNotification .text.data.bss.idata$7.idata$5.idata$4.idata$6(Rm_WTSUnRegisterSessionNotification@4__imp__WTSUnRegisterSessionNotification@4__head_lib32_libwtsapi32_a 47 dptbs00031.o/ 1402958954 28587 5000 100640 649 ` 48 L 49 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSTerminateProcess .text.data.bss.idata$7.idata$5.idata$4.idata$6:U_WTSTerminateProcess@12__imp__WTSTerminateProcess@12__head_lib32_libwtsapi32_a 50 dptbs00030.o/ 1402958954 28587 5000 100640 671 ` 51 L 52 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %WTSStopRemoteControlSession .text.data.bss.idata$7.idata$5.idata$4.idata$6#Hc_WTSStopRemoteControlSession@4__imp__WTSStopRemoteControlSession@4__head_lib32_libwtsapi32_a 53 dptbs00029.o/ 1402958954 28587 5000 100640 677 ` 54 L 55 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %WTSStartRemoteControlSessionW .text.data.bss.idata$7.idata$5.idata$4.idata$6&Ni_WTSStartRemoteControlSessionW@16__imp__WTSStartRemoteControlSessionW@16__head_lib32_libwtsapi32_a 56 dptbs00028.o/ 1402958954 28587 5000 100640 677 ` 57 L 58 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %WTSStartRemoteControlSessionA .text.data.bss.idata$7.idata$5.idata$4.idata$6&Ni_WTSStartRemoteControlSessionA@16__imp__WTSStartRemoteControlSessionA@16__head_lib32_libwtsapi32_a 59 dptbs00027.o/ 1402958954 28587 5000 100640 639 ` 60 L| 61 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSShutdownSystem .text.data.bss.idata$7.idata$5.idata$4.idata$64O_WTSShutdownSystem@8__imp__WTSShutdownSystem@8__head_lib32_libwtsapi32_a 62 dptbs00026.o/ 1402958954 28587 5000 100640 641 ` 63 L| 64 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSSetUserConfigW .text.data.bss.idata$7.idata$5.idata$4.idata$66Q_WTSSetUserConfigW@20__imp__WTSSetUserConfigW@20__head_lib32_libwtsapi32_a 65 dptbs00025.o/ 1402958954 28587 5000 100640 641 ` 66 L| 67 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSSetUserConfigA .text.data.bss.idata$7.idata$5.idata$4.idata$66Q_WTSSetUserConfigA@20__imp__WTSSetUserConfigA@20__head_lib32_libwtsapi32_a 68 dptbs00024.o/ 1402958954 28587 5000 100640 665 ` 69 L 70 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %WTSSetSessionInformationW .text.data.bss.idata$7.idata$5.idata$4.idata$6"Fa_WTSSetSessionInformationW@20__imp__WTSSetSessionInformationW@20__head_lib32_libwtsapi32_a 71 dptbs00023.o/ 1402958954 28587 5000 100640 665 ` 72 L 73 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %WTSSetSessionInformationA .text.data.bss.idata$7.idata$5.idata$4.idata$6"Fa_WTSSetSessionInformationA@20__imp__WTSSetSessionInformationA@20__head_lib32_libwtsapi32_a 74 dptbs00022.o/ 1402958954 28587 5000 100640 637 ` 75 L| 76 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSSendMessageW .text.data.bss.idata$7.idata$5.idata$4.idata$62M_WTSSendMessageW@40__imp__WTSSendMessageW@40__head_lib32_libwtsapi32_a 77 dptbs00021.o/ 1402958954 28587 5000 100640 637 ` 78 L| 79 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSSendMessageA .text.data.bss.idata$7.idata$5.idata$4.idata$62M_WTSSendMessageA@40__imp__WTSSendMessageA@40__head_lib32_libwtsapi32_a 80 dptbs00020.o/ 1402958954 28587 5000 100640 687 ` 81 L 82 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %WTSRegisterSessionNotificationEx .text.data.bss.idata$7.idata$5.idata$4.idata$6)To_WTSRegisterSessionNotificationEx@12__imp__WTSRegisterSessionNotificationEx@12__head_lib32_libwtsapi32_a 83 dptbs00019.o/ 1402958954 28587 5000 100640 681 ` 84 L 85 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %WTSRegisterSessionNotification .text.data.bss.idata$7.idata$5.idata$4.idata$6&Ni_WTSRegisterSessionNotification@8__imp__WTSRegisterSessionNotification@8__head_lib32_libwtsapi32_a 86 dptbs00018.o/ 1402958954 28587 5000 100640 639 ` 87 L| 88 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSQueryUserToken .text.data.bss.idata$7.idata$5.idata$4.idata$64O_WTSQueryUserToken@8__imp__WTSQueryUserToken@8__head_lib32_libwtsapi32_a 89 dptbs00017.o/ 1402958954 28587 5000 100640 649 ` 90 L 91 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSQueryUserConfigW .text.data.bss.idata$7.idata$5.idata$4.idata$6:U_WTSQueryUserConfigW@20__imp__WTSQueryUserConfigW@20__head_lib32_libwtsapi32_a 92 dptbs00016.o/ 1402958954 28587 5000 100640 649 ` 93 L 94 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSQueryUserConfigA .text.data.bss.idata$7.idata$5.idata$4.idata$6:U_WTSQueryUserConfigA@20__imp__WTSQueryUserConfigA@20__head_lib32_libwtsapi32_a 95 dptbs00015.o/ 1402958954 28587 5000 100640 673 ` 96 L 97 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %WTSQuerySessionInformationW .text.data.bss.idata$7.idata$5.idata$4.idata$6$Je_WTSQuerySessionInformationW@20__imp__WTSQuerySessionInformationW@20__head_lib32_libwtsapi32_a 98 dptbs00014.o/ 1402958954 28587 5000 100640 673 ` 99 L 100 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %WTSQuerySessionInformationA .text.data.bss.idata$7.idata$5.idata$4.idata$6$Je_WTSQuerySessionInformationA@20__imp__WTSQuerySessionInformationA@20__head_lib32_libwtsapi32_a 101 dptbs00013.o/ 1402958954 28587 5000 100640 633 ` 102 L| 103 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ % WTSOpenServerW .text.data.bss.idata$7.idata$5.idata$4.idata$6.I_WTSOpenServerW@4__imp__WTSOpenServerW@4__head_lib32_libwtsapi32_a 105 dptbs00012.o/ 1402958954 28587 5000 100640 633 ` 106 L| 107 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ % WTSOpenServerA .text.data.bss.idata$7.idata$5.idata$4.idata$6.I_WTSOpenServerA@4__imp__WTSOpenServerA@4__head_lib32_libwtsapi32_a 109 dptbs00011.o/ 1402958954 28587 5000 100640 639 ` 110 L| 111 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSLogoffSession .text.data.bss.idata$7.idata$5.idata$4.idata$64O_WTSLogoffSession@12__imp__WTSLogoffSession@12__head_lib32_libwtsapi32_a 113 dptbs00010.o/ 1402958954 28587 5000 100640 627 ` 114 Lx 115 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ % 116 WTSFreeMemory .text.data.bss.idata$7.idata$5.idata$4.idata$6,G_WTSFreeMemory@4__imp__WTSFreeMemory@4__head_lib32_libwtsapi32_a 117 dptbs00009.o/ 1402958954 28587 5000 100640 653 ` 118 L 119 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ % WTSEnumerateSessionsW .text.data.bss.idata$7.idata$5.idata$4.idata$6>Y_WTSEnumerateSessionsW@20__imp__WTSEnumerateSessionsW@20__head_lib32_libwtsapi32_a 120 dptbs00008.o/ 1402958954 28587 5000 100640 653 ` 121 L 122 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSEnumerateSessionsA .text.data.bss.idata$7.idata$5.idata$4.idata$6>Y_WTSEnumerateSessionsA@20__imp__WTSEnumerateSessionsA@20__head_lib32_libwtsapi32_a 123 dptbs00007.o/ 1402958954 28587 5000 100640 651 ` 124 L 125 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSEnumerateServersW .text.data.bss.idata$7.idata$5.idata$4.idata$6<W_WTSEnumerateServersW@20__imp__WTSEnumerateServersW@20__head_lib32_libwtsapi32_a 126 dptbs00006.o/ 1402958954 28587 5000 100640 651 ` 127 L 128 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSEnumerateServersA .text.data.bss.idata$7.idata$5.idata$4.idata$6<W_WTSEnumerateServersA@20__imp__WTSEnumerateServersA@20__head_lib32_libwtsapi32_a 129 dptbs00005.o/ 1402958954 28587 5000 100640 659 ` 130 L 131 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %WTSEnumerateProcessesW .text.data.bss.idata$7.idata$5.idata$4.idata$6@[_WTSEnumerateProcessesW@20__imp__WTSEnumerateProcessesW@20__head_lib32_libwtsapi32_a 132 dptbs00004.o/ 1402958954 28587 5000 100640 659 ` 133 L 134 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %WTSEnumerateProcessesA .text.data.bss.idata$7.idata$5.idata$4.idata$6@[_WTSEnumerateProcessesA@20__imp__WTSEnumerateProcessesA@20__head_lib32_libwtsapi32_a 135 dptbs00003.o/ 1402958954 28587 5000 100640 651 ` 136 L 137 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSDisconnectSession .text.data.bss.idata$7.idata$5.idata$4.idata$6<W_WTSDisconnectSession@12__imp__WTSDisconnectSession@12__head_lib32_libwtsapi32_a 138 dptbs00002.o/ 1402958954 28587 5000 100640 647 ` 139 L 140 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSConnectSessionW .text.data.bss.idata$7.idata$5.idata$4.idata$68S_WTSConnectSessionW@16__imp__WTSConnectSessionW@16__head_lib32_libwtsapi32_a 141 dptbs00001.o/ 1402958954 28587 5000 100640 647 ` 142 L 143 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %WTSConnectSessionA .text.data.bss.idata$7.idata$5.idata$4.idata$68S_WTSConnectSessionA@16__imp__WTSConnectSessionA@16__head_lib32_libwtsapi32_a 144 dptbs00000.o/ 1402958954 28587 5000 100640 633 ` 145 L| 146 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %WTSCloseServer .text.data.bss.idata$7.idata$5.idata$4.idata$6.I_WTSCloseServer@4__imp__WTSCloseServer@4__head_lib32_libwtsapi32_a 147
