1 !<arch> 2 / 1402958956 0 0 0 2612 ` 3 X 4 x bb** ##&J&J)), 6 , 7 ..11447t7t:T:T==??BBE\E\H0H0JJMMPPSpSpV,V,XX[[^^alald"d"ffiilBlBo 8 o 9 qqttw^w^z,z,||DD__lib64_libwtsapi32_a_iname_head_lib64_libwtsapi32_aWTSWaitSystemEvent__imp_WTSWaitSystemEventWTSVirtualChannelWrite__imp_WTSVirtualChannelWriteWTSVirtualChannelRead__imp_WTSVirtualChannelReadWTSVirtualChannelQuery__imp_WTSVirtualChannelQueryWTSVirtualChannelPurgeOutput__imp_WTSVirtualChannelPurgeOutputWTSVirtualChannelPurgeInput__imp_WTSVirtualChannelPurgeInputWTSVirtualChannelOpenEx__imp_WTSVirtualChannelOpenExWTSVirtualChannelOpen__imp_WTSVirtualChannelOpenWTSVirtualChannelClose__imp_WTSVirtualChannelCloseWTSUnRegisterSessionNotificationEx__imp_WTSUnRegisterSessionNotificationExWTSUnRegisterSessionNotification__imp_WTSUnRegisterSessionNotificationWTSTerminateProcess__imp_WTSTerminateProcessWTSStopRemoteControlSession__imp_WTSStopRemoteControlSessionWTSStartRemoteControlSessionW__imp_WTSStartRemoteControlSessionWWTSStartRemoteControlSessionA__imp_WTSStartRemoteControlSessionAWTSShutdownSystem__imp_WTSShutdownSystemWTSSetUserConfigW__imp_WTSSetUserConfigWWTSSetUserConfigA__imp_WTSSetUserConfigAWTSSetSessionInformationW__imp_WTSSetSessionInformationWWTSSetSessionInformationA__imp_WTSSetSessionInformationAWTSSendMessageW__imp_WTSSendMessageWWTSSendMessageA__imp_WTSSendMessageAWTSRegisterSessionNotificationEx__imp_WTSRegisterSessionNotificationExWTSRegisterSessionNotification__imp_WTSRegisterSessionNotificationWTSQueryUserToken__imp_WTSQueryUserTokenWTSQueryUserConfigW__imp_WTSQueryUserConfigWWTSQueryUserConfigA__imp_WTSQueryUserConfigAWTSQuerySessionInformationW__imp_WTSQuerySessionInformationWWTSQuerySessionInformationA__imp_WTSQuerySessionInformationAWTSOpenServerW__imp_WTSOpenServerWWTSOpenServerA__imp_WTSOpenServerAWTSLogoffSession__imp_WTSLogoffSessionWTSFreeMemory__imp_WTSFreeMemoryWTSEnumerateSessionsW__imp_WTSEnumerateSessionsWWTSEnumerateSessionsA__imp_WTSEnumerateSessionsAWTSEnumerateServersW__imp_WTSEnumerateServersWWTSEnumerateServersA__imp_WTSEnumerateServersAWTSEnumerateProcessesW__imp_WTSEnumerateProcessesWWTSEnumerateProcessesA__imp_WTSEnumerateProcessesAWTSDisconnectSession__imp_WTSDisconnectSessionWTSConnectSessionW__imp_WTSConnectSessionWWTSConnectSessionA__imp_WTSConnectSessionAWTSCloseServer__imp_WTSCloseServerdsvht.o/ 1402958956 28587 5000 100640 594 ` 10 d$.text P`.data@P.bssP.idata$4@0.idata$5 @0.idata$7@0WTSAPI32.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7 __lib64_libwtsapi32_a_inamedsvhh.o/ 1402958956 28587 5000 100640 656 ` 13 d6.text P`.data@P.bssP.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$5:_head_lib64_libwtsapi32_a__lib64_libwtsapi32_a_inamedsvhs00042.o/ 1402958956 28587 5000 100640 646 ` 17 d 18 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %*WTSWaitSystemEvent .text.data.bss.idata$7.idata$5.idata$4.idata$60JWTSWaitSystemEvent__imp_WTSWaitSystemEvent_head_lib64_libwtsapi32_adsvhs00041.o/ 1402958956 28587 5000 100640 658 ` 19 d 20 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %)WTSVirtualChannelWrite .text.data.bss.idata$7.idata$5.idata$4.idata$68RWTSVirtualChannelWrite__imp_WTSVirtualChannelWrite_head_lib64_libwtsapi32_adsvhs00040.o/ 1402958956 28587 5000 100640 652 ` 21 d 22 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %(WTSVirtualChannelRead .text.data.bss.idata$7.idata$5.idata$4.idata$66PWTSVirtualChannelRead__imp_WTSVirtualChannelRead_head_lib64_libwtsapi32_adsvhs00039.o/ 1402958956 28587 5000 100640 658 ` 23 d 24 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %'WTSVirtualChannelQuery .text.data.bss.idata$7.idata$5.idata$4.idata$68RWTSVirtualChannelQuery__imp_WTSVirtualChannelQuery_head_lib64_libwtsapi32_adsvhs00038.o/ 1402958956 28587 5000 100640 674 ` 25 d 26 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %&WTSVirtualChannelPurgeOutput .text.data.bss.idata$7.idata$5.idata$4.idata$6!D^WTSVirtualChannelPurgeOutput__imp_WTSVirtualChannelPurgeOutput_head_lib64_libwtsapi32_adsvhs00037.o/ 1402958956 28587 5000 100640 672 ` 27 d 28 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %%WTSVirtualChannelPurgeInput .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\WTSVirtualChannelPurgeInput__imp_WTSVirtualChannelPurgeInput_head_lib64_libwtsapi32_adsvhs00036.o/ 1402958956 28587 5000 100640 660 ` 29 d 30 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %$WTSVirtualChannelOpenEx .text.data.bss.idata$7.idata$5.idata$4.idata$6:TWTSVirtualChannelOpenEx__imp_WTSVirtualChannelOpenEx_head_lib64_libwtsapi32_adsvhs00035.o/ 1402958956 28587 5000 100640 652 ` 31 d 32 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %#WTSVirtualChannelOpen .text.data.bss.idata$7.idata$5.idata$4.idata$66PWTSVirtualChannelOpen__imp_WTSVirtualChannelOpen_head_lib64_libwtsapi32_adsvhs00034.o/ 1402958956 28587 5000 100640 658 ` 33 d 34 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %"WTSVirtualChannelClose .text.data.bss.idata$7.idata$5.idata$4.idata$68RWTSVirtualChannelClose__imp_WTSVirtualChannelClose_head_lib64_libwtsapi32_adsvhs00033.o/ 1402958956 28587 5000 100640 694 ` 35 d 36 .text,p 0`.data@0.bss0.idata$74z0.idata$580.idata$4@0.idata$6&H %!WTSUnRegisterSessionNotificationEx .text.data.bss.idata$7.idata$5.idata$4.idata$6'PjWTSUnRegisterSessionNotificationEx__imp_WTSUnRegisterSessionNotificationEx_head_lib64_libwtsapi32_adsvhs00032.o/ 1402958956 28587 5000 100640 686 ` 37 d 38 .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H % WTSUnRegisterSessionNotification .text.data.bss.idata$7.idata$5.idata$4.idata$6%LfWTSUnRegisterSessionNotification__imp_WTSUnRegisterSessionNotification_head_lib64_libwtsapi32_adsvhs00031.o/ 1402958956 28587 5000 100640 648 ` 39 d 40 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSTerminateProcess .text.data.bss.idata$7.idata$5.idata$4.idata$62LWTSTerminateProcess__imp_WTSTerminateProcess_head_lib64_libwtsapi32_adsvhs00030.o/ 1402958956 28587 5000 100640 672 ` 41 d 42 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %WTSStopRemoteControlSession .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\WTSStopRemoteControlSession__imp_WTSStopRemoteControlSession_head_lib64_libwtsapi32_adsvhs00029.o/ 1402958956 28587 5000 100640 676 ` 43 d 44 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %WTSStartRemoteControlSessionW .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`WTSStartRemoteControlSessionW__imp_WTSStartRemoteControlSessionW_head_lib64_libwtsapi32_adsvhs00028.o/ 1402958956 28587 5000 100640 676 ` 45 d 46 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %WTSStartRemoteControlSessionA .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`WTSStartRemoteControlSessionA__imp_WTSStartRemoteControlSessionA_head_lib64_libwtsapi32_adsvhs00027.o/ 1402958956 28587 5000 100640 640 ` 47 d 48 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSShutdownSystem .text.data.bss.idata$7.idata$5.idata$4.idata$6.HWTSShutdownSystem__imp_WTSShutdownSystem_head_lib64_libwtsapi32_adsvhs00026.o/ 1402958956 28587 5000 100640 640 ` 49 d 50 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSSetUserConfigW .text.data.bss.idata$7.idata$5.idata$4.idata$6.HWTSSetUserConfigW__imp_WTSSetUserConfigW_head_lib64_libwtsapi32_adsvhs00025.o/ 1402958956 28587 5000 100640 640 ` 51 d 52 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSSetUserConfigA .text.data.bss.idata$7.idata$5.idata$4.idata$6.HWTSSetUserConfigA__imp_WTSSetUserConfigA_head_lib64_libwtsapi32_adsvhs00024.o/ 1402958956 28587 5000 100640 664 ` 53 d 54 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %WTSSetSessionInformationW .text.data.bss.idata$7.idata$5.idata$4.idata$6>XWTSSetSessionInformationW__imp_WTSSetSessionInformationW_head_lib64_libwtsapi32_adsvhs00023.o/ 1402958956 28587 5000 100640 664 ` 55 d 56 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %WTSSetSessionInformationA .text.data.bss.idata$7.idata$5.idata$4.idata$6>XWTSSetSessionInformationA__imp_WTSSetSessionInformationA_head_lib64_libwtsapi32_adsvhs00022.o/ 1402958956 28587 5000 100640 636 ` 57 d 58 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSSendMessageW .text.data.bss.idata$7.idata$5.idata$4.idata$6*DWTSSendMessageW__imp_WTSSendMessageW_head_lib64_libwtsapi32_adsvhs00021.o/ 1402958956 28587 5000 100640 636 ` 59 d 60 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSSendMessageA .text.data.bss.idata$7.idata$5.idata$4.idata$6*DWTSSendMessageA__imp_WTSSendMessageA_head_lib64_libwtsapi32_adsvhs00020.o/ 1402958956 28587 5000 100640 686 ` 61 d 62 .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H %WTSRegisterSessionNotificationEx .text.data.bss.idata$7.idata$5.idata$4.idata$6%LfWTSRegisterSessionNotificationEx__imp_WTSRegisterSessionNotificationEx_head_lib64_libwtsapi32_adsvhs00019.o/ 1402958956 28587 5000 100640 682 ` 63 d 64 .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H %WTSRegisterSessionNotification .text.data.bss.idata$7.idata$5.idata$4.idata$6#HbWTSRegisterSessionNotification__imp_WTSRegisterSessionNotification_head_lib64_libwtsapi32_adsvhs00018.o/ 1402958956 28587 5000 100640 640 ` 65 d 66 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSQueryUserToken .text.data.bss.idata$7.idata$5.idata$4.idata$6.HWTSQueryUserToken__imp_WTSQueryUserToken_head_lib64_libwtsapi32_adsvhs00017.o/ 1402958956 28587 5000 100640 648 ` 67 d 68 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSQueryUserConfigW .text.data.bss.idata$7.idata$5.idata$4.idata$62LWTSQueryUserConfigW__imp_WTSQueryUserConfigW_head_lib64_libwtsapi32_adsvhs00016.o/ 1402958956 28587 5000 100640 648 ` 69 d 70 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSQueryUserConfigA .text.data.bss.idata$7.idata$5.idata$4.idata$62LWTSQueryUserConfigA__imp_WTSQueryUserConfigA_head_lib64_libwtsapi32_adsvhs00015.o/ 1402958956 28587 5000 100640 672 ` 71 d 72 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %WTSQuerySessionInformationW .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\WTSQuerySessionInformationW__imp_WTSQuerySessionInformationW_head_lib64_libwtsapi32_adsvhs00014.o/ 1402958956 28587 5000 100640 672 ` 73 d 74 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %WTSQuerySessionInformationA .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\WTSQuerySessionInformationA__imp_WTSQuerySessionInformationA_head_lib64_libwtsapi32_adsvhs00013.o/ 1402958956 28587 5000 100640 634 ` 75 d 76 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H % WTSOpenServerW .text.data.bss.idata$7.idata$5.idata$4.idata$6(BWTSOpenServerW__imp_WTSOpenServerW_head_lib64_libwtsapi32_adsvhs00012.o/ 1402958956 28587 5000 100640 634 ` 78 d 79 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H % WTSOpenServerA .text.data.bss.idata$7.idata$5.idata$4.idata$6(BWTSOpenServerA__imp_WTSOpenServerA_head_lib64_libwtsapi32_adsvhs00011.o/ 1402958956 28587 5000 100640 638 ` 81 d 82 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSLogoffSession .text.data.bss.idata$7.idata$5.idata$4.idata$6,FWTSLogoffSession__imp_WTSLogoffSession_head_lib64_libwtsapi32_adsvhs00010.o/ 1402958956 28587 5000 100640 628 ` 84 d 85 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4@v0.idata$6H % 86 WTSFreeMemory .text.data.bss.idata$7.idata$5.idata$4.idata$6&@WTSFreeMemory__imp_WTSFreeMemory_head_lib64_libwtsapi32_adsvhs00009.o/ 1402958956 28587 5000 100640 652 ` 87 d 88 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H % WTSEnumerateSessionsW .text.data.bss.idata$7.idata$5.idata$4.idata$66PWTSEnumerateSessionsW__imp_WTSEnumerateSessionsW_head_lib64_libwtsapi32_adsvhs00008.o/ 1402958956 28587 5000 100640 652 ` 89 d 90 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSEnumerateSessionsA .text.data.bss.idata$7.idata$5.idata$4.idata$66PWTSEnumerateSessionsA__imp_WTSEnumerateSessionsA_head_lib64_libwtsapi32_adsvhs00007.o/ 1402958956 28587 5000 100640 650 ` 91 d 92 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSEnumerateServersW .text.data.bss.idata$7.idata$5.idata$4.idata$64NWTSEnumerateServersW__imp_WTSEnumerateServersW_head_lib64_libwtsapi32_adsvhs00006.o/ 1402958956 28587 5000 100640 650 ` 93 d 94 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSEnumerateServersA .text.data.bss.idata$7.idata$5.idata$4.idata$64NWTSEnumerateServersA__imp_WTSEnumerateServersA_head_lib64_libwtsapi32_adsvhs00005.o/ 1402958956 28587 5000 100640 658 ` 95 d 96 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %WTSEnumerateProcessesW .text.data.bss.idata$7.idata$5.idata$4.idata$68RWTSEnumerateProcessesW__imp_WTSEnumerateProcessesW_head_lib64_libwtsapi32_adsvhs00004.o/ 1402958956 28587 5000 100640 658 ` 97 d 98 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %WTSEnumerateProcessesA .text.data.bss.idata$7.idata$5.idata$4.idata$68RWTSEnumerateProcessesA__imp_WTSEnumerateProcessesA_head_lib64_libwtsapi32_adsvhs00003.o/ 1402958956 28587 5000 100640 650 ` 99 d 100 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSDisconnectSession .text.data.bss.idata$7.idata$5.idata$4.idata$64NWTSDisconnectSession__imp_WTSDisconnectSession_head_lib64_libwtsapi32_adsvhs00002.o/ 1402958956 28587 5000 100640 646 ` 101 d 102 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSConnectSessionW .text.data.bss.idata$7.idata$5.idata$4.idata$60JWTSConnectSessionW__imp_WTSConnectSessionW_head_lib64_libwtsapi32_adsvhs00001.o/ 1402958956 28587 5000 100640 646 ` 103 d 104 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WTSConnectSessionA .text.data.bss.idata$7.idata$5.idata$4.idata$60JWTSConnectSessionA__imp_WTSConnectSessionA_head_lib64_libwtsapi32_adsvhs00000.o/ 1402958956 28587 5000 100640 634 ` 105 d 106 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WTSCloseServer .text.data.bss.idata$7.idata$5.idata$4.idata$6(BWTSCloseServer__imp_WTSCloseServer_head_lib64_libwtsapi32_a
