1 !<arch> 2 / 1450287912 0 0 0 2942 ` 3 XDjj"H"H%%''**-`-`00225588;8;8==@@CCFlFlI2I2KKNNQQThThWWYY\\__bNbNeeggjjmtmtp p rruuxx{{~T~T 5 6 pp__lib32_libuserenv_a_iname__head_lib32_libuserenv_a_WaitForUserPolicyForegroundProcessing@0__imp__WaitForUserPolicyForegroundProcessing@0_WaitForMachinePolicyForegroundProcessing@0__imp__WaitForMachinePolicyForegroundProcessing@0_UnregisterGPNotification@4__imp__UnregisterGPNotification@4_UnloadUserProfile@8__imp__UnloadUserProfile@8_RsopSetPolicySettingStatus@20__imp__RsopSetPolicySettingStatus@20_RsopResetPolicySettingStatus@12__imp__RsopResetPolicySettingStatus@12_RsopLoggingEnabled@0__imp__RsopLoggingEnabled@0_RsopFileAccessCheck@20__imp__RsopFileAccessCheck@20_RsopAccessCheckByType@44__imp__RsopAccessCheckByType@44_RegisterGPNotification@8__imp__RegisterGPNotification@8_RefreshPolicyEx@8__imp__RefreshPolicyEx@8_RefreshPolicy@4__imp__RefreshPolicy@4_ProcessGroupPolicyCompletedEx@16__imp__ProcessGroupPolicyCompletedEx@16_ProcessGroupPolicyCompleted@12__imp__ProcessGroupPolicyCompleted@12_LoadUserProfileW@8__imp__LoadUserProfileW@8_LoadUserProfileA@8__imp__LoadUserProfileA@8_LeaveCriticalPolicySection@4__imp__LeaveCriticalPolicySection@4_GetUserProfileDirectoryW@12__imp__GetUserProfileDirectoryW@12_GetUserProfileDirectoryA@12__imp__GetUserProfileDirectoryA@12_GetProfilesDirectoryW@8__imp__GetProfilesDirectoryW@8_GetProfilesDirectoryA@8__imp__GetProfilesDirectoryA@8_GetProfileType@4__imp__GetProfileType@4_GetPreviousFgPolicyRefreshInfo@8__imp__GetPreviousFgPolicyRefreshInfo@8_GetNextFgPolicyRefreshInfo@8__imp__GetNextFgPolicyRefreshInfo@8_GetGPOListW@24__imp__GetGPOListW@24_GetGPOListA@24__imp__GetGPOListA@24_GetDefaultUserProfileDirectoryW@8__imp__GetDefaultUserProfileDirectoryW@8_GetDefaultUserProfileDirectoryA@8__imp__GetDefaultUserProfileDirectoryA@8_GetAppliedGPOListW@20__imp__GetAppliedGPOListW@20_GetAppliedGPOListA@20__imp__GetAppliedGPOListA@20_GetAllUsersProfileDirectoryW@8__imp__GetAllUsersProfileDirectoryW@8_GetAllUsersProfileDirectoryA@8__imp__GetAllUsersProfileDirectoryA@8_FreeGPOListW@4__imp__FreeGPOListW@4_FreeGPOListA@4__imp__FreeGPOListA@4_ForceSyncFgPolicy@4__imp__ForceSyncFgPolicy@4_ExpandEnvironmentStringsForUserW@16__imp__ExpandEnvironmentStringsForUserW@16_ExpandEnvironmentStringsForUserA@16__imp__ExpandEnvironmentStringsForUserA@16_EnterCriticalPolicySection@4__imp__EnterCriticalPolicySection@4_DestroyEnvironmentBlock@4__imp__DestroyEnvironmentBlock@4_DeleteProfileW@12__imp__DeleteProfileW@12_DeleteProfileA@12__imp__DeleteProfileA@12_CreateProfile@16__imp__CreateProfile@16_CreateEnvironmentBlock@12__imp__CreateEnvironmentBlock@12dtyzht.o/ 1450287912 2619555000 100640 581 ` 7 L.text 0`.data@0.bss0.idata$4@0.idata$5@0.idata$7@0USERENV.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7__lib32_libuserenv_a_iname 11 dtyzhh.o/ 1450287912 2619555000 100640 655 ` 12 L6.text 0`.data@0.bss0.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$59__head_lib32_libuserenv_a__lib32_libuserenv_a_iname 16 dtyzhs00042.o/ 1450287912 2619555000 100640 698 ` 17 L 18 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6(@ %*WaitForUserPolicyForegroundProcessing .text.data.bss.idata$7.idata$5.idata$4.idata$6-\v_WaitForUserPolicyForegroundProcessing@0__imp__WaitForUserPolicyForegroundProcessing@0__head_lib32_libuserenv_adtyzhs00041.o/ 1450287912 2619555000 100640 708 ` 19 L 20 .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4<0.idata$6,@ %)WaitForMachinePolicyForegroundProcessing .text.data.bss.idata$7.idata$5.idata$4.idata$60b|_WaitForMachinePolicyForegroundProcessing@0__imp__WaitForMachinePolicyForegroundProcessing@0__head_lib32_libuserenv_adtyzhs00040.o/ 1450287912 2619555000 100640 660 ` 21 L 22 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %(UnregisterGPNotification .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\_UnregisterGPNotification@4__imp__UnregisterGPNotification@4__head_lib32_libuserenv_adtyzhs00039.o/ 1450287912 2619555000 100640 638 ` 23 L| 24 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %'UnloadUserProfile .text.data.bss.idata$7.idata$5.idata$4.idata$64N_UnloadUserProfile@8__imp__UnloadUserProfile@8__head_lib32_libuserenv_adtyzhs00038.o/ 1450287912 2619555000 100640 670 ` 25 L 26 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %&RsopSetPolicySettingStatus .text.data.bss.idata$7.idata$5.idata$4.idata$6#Hb_RsopSetPolicySettingStatus@20__imp__RsopSetPolicySettingStatus@20__head_lib32_libuserenv_adtyzhs00037.o/ 1450287912 2619555000 100640 674 ` 27 L 28 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %%RsopResetPolicySettingStatus .text.data.bss.idata$7.idata$5.idata$4.idata$6%Lf_RsopResetPolicySettingStatus@12__imp__RsopResetPolicySettingStatus@12__head_lib32_libuserenv_adtyzhs00036.o/ 1450287912 2619555000 100640 644 ` 29 L 30 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %$RsopLoggingEnabled .text.data.bss.idata$7.idata$5.idata$4.idata$66P_RsopLoggingEnabled@0__imp__RsopLoggingEnabled@0__head_lib32_libuserenv_adtyzhs00035.o/ 1450287912 2619555000 100640 648 ` 31 L 32 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %#RsopFileAccessCheck .text.data.bss.idata$7.idata$5.idata$4.idata$6:T_RsopFileAccessCheck@20__imp__RsopFileAccessCheck@20__head_lib32_libuserenv_adtyzhs00034.o/ 1450287912 2619555000 100640 652 ` 33 L 34 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %"RsopAccessCheckByType .text.data.bss.idata$7.idata$5.idata$4.idata$6>X_RsopAccessCheckByType@44__imp__RsopAccessCheckByType@44__head_lib32_libuserenv_adtyzhs00033.o/ 1450287912 2619555000 100640 656 ` 35 L 36 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %!RegisterGPNotification .text.data.bss.idata$7.idata$5.idata$4.idata$6>X_RegisterGPNotification@8__imp__RegisterGPNotification@8__head_lib32_libuserenv_adtyzhs00032.o/ 1450287912 2619555000 100640 634 ` 37 L| 38 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ % RefreshPolicyEx .text.data.bss.idata$7.idata$5.idata$4.idata$60J_RefreshPolicyEx@8__imp__RefreshPolicyEx@8__head_lib32_libuserenv_adtyzhs00031.o/ 1450287912 2619555000 100640 626 ` 39 Lx 40 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %RefreshPolicy .text.data.bss.idata$7.idata$5.idata$4.idata$6,F_RefreshPolicy@4__imp__RefreshPolicy@4__head_lib32_libuserenv_adtyzhs00030.o/ 1450287912 2619555000 100640 676 ` 41 L 42 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %ProcessGroupPolicyCompletedEx .text.data.bss.idata$7.idata$5.idata$4.idata$6&Nh_ProcessGroupPolicyCompletedEx@16__imp__ProcessGroupPolicyCompletedEx@16__head_lib32_libuserenv_adtyzhs00029.o/ 1450287912 2619555000 100640 672 ` 43 L 44 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %ProcessGroupPolicyCompleted .text.data.bss.idata$7.idata$5.idata$4.idata$6$Jd_ProcessGroupPolicyCompleted@12__imp__ProcessGroupPolicyCompleted@12__head_lib32_libuserenv_adtyzhs00028.o/ 1450287912 2619555000 100640 636 ` 45 L| 46 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %LoadUserProfileW .text.data.bss.idata$7.idata$5.idata$4.idata$62L_LoadUserProfileW@8__imp__LoadUserProfileW@8__head_lib32_libuserenv_adtyzhs00027.o/ 1450287912 2619555000 100640 636 ` 47 L| 48 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %LoadUserProfileA .text.data.bss.idata$7.idata$5.idata$4.idata$62L_LoadUserProfileA@8__imp__LoadUserProfileA@8__head_lib32_libuserenv_adtyzhs00026.o/ 1450287912 2619555000 100640 668 ` 49 L 50 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %LeaveCriticalPolicySection .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`_LeaveCriticalPolicySection@4__imp__LeaveCriticalPolicySection@4__head_lib32_libuserenv_adtyzhs00025.o/ 1450287912 2619555000 100640 662 ` 51 L 52 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %GetUserProfileDirectoryW .text.data.bss.idata$7.idata$5.idata$4.idata$6!D^_GetUserProfileDirectoryW@12__imp__GetUserProfileDirectoryW@12__head_lib32_libuserenv_adtyzhs00024.o/ 1450287912 2619555000 100640 662 ` 53 L 54 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %GetUserProfileDirectoryA .text.data.bss.idata$7.idata$5.idata$4.idata$6!D^_GetUserProfileDirectoryA@12__imp__GetUserProfileDirectoryA@12__head_lib32_libuserenv_adtyzhs00023.o/ 1450287912 2619555000 100640 650 ` 55 L 56 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetProfilesDirectoryW .text.data.bss.idata$7.idata$5.idata$4.idata$6<V_GetProfilesDirectoryW@8__imp__GetProfilesDirectoryW@8__head_lib32_libuserenv_adtyzhs00022.o/ 1450287912 2619555000 100640 650 ` 57 L 58 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetProfilesDirectoryA .text.data.bss.idata$7.idata$5.idata$4.idata$6<V_GetProfilesDirectoryA@8__imp__GetProfilesDirectoryA@8__head_lib32_libuserenv_adtyzhs00021.o/ 1450287912 2619555000 100640 632 ` 59 L| 60 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %GetProfileType .text.data.bss.idata$7.idata$5.idata$4.idata$6.H_GetProfileType@4__imp__GetProfileType@4__head_lib32_libuserenv_adtyzhs00020.o/ 1450287912 2619555000 100640 680 ` 61 L 62 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %GetPreviousFgPolicyRefreshInfo .text.data.bss.idata$7.idata$5.idata$4.idata$6&Nh_GetPreviousFgPolicyRefreshInfo@8__imp__GetPreviousFgPolicyRefreshInfo@8__head_lib32_libuserenv_adtyzhs00019.o/ 1450287912 2619555000 100640 668 ` 63 L 64 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %GetNextFgPolicyRefreshInfo .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`_GetNextFgPolicyRefreshInfo@8__imp__GetNextFgPolicyRefreshInfo@8__head_lib32_libuserenv_adtyzhs00018.o/ 1450287912 2619555000 100640 624 ` 65 Lx 66 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %GetGPOListW .text.data.bss.idata$7.idata$5.idata$4.idata$6*D_GetGPOListW@24__imp__GetGPOListW@24__head_lib32_libuserenv_adtyzhs00017.o/ 1450287912 2619555000 100640 624 ` 67 Lx 68 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %GetGPOListA .text.data.bss.idata$7.idata$5.idata$4.idata$6*D_GetGPOListA@24__imp__GetGPOListA@24__head_lib32_libuserenv_adtyzhs00016.o/ 1450287912 2619555000 100640 682 ` 69 L 70 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %GetDefaultUserProfileDirectoryW .text.data.bss.idata$7.idata$5.idata$4.idata$6'Pj_GetDefaultUserProfileDirectoryW@8__imp__GetDefaultUserProfileDirectoryW@8__head_lib32_libuserenv_adtyzhs00015.o/ 1450287912 2619555000 100640 682 ` 71 L 72 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %GetDefaultUserProfileDirectoryA .text.data.bss.idata$7.idata$5.idata$4.idata$6'Pj_GetDefaultUserProfileDirectoryA@8__imp__GetDefaultUserProfileDirectoryA@8__head_lib32_libuserenv_adtyzhs00014.o/ 1450287912 2619555000 100640 646 ` 73 L 74 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %GetAppliedGPOListW .text.data.bss.idata$7.idata$5.idata$4.idata$68R_GetAppliedGPOListW@20__imp__GetAppliedGPOListW@20__head_lib32_libuserenv_adtyzhs00013.o/ 1450287912 2619555000 100640 646 ` 75 L 76 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ % GetAppliedGPOListA .text.data.bss.idata$7.idata$5.idata$4.idata$68R_GetAppliedGPOListA@20__imp__GetAppliedGPOListA@20__head_lib32_libuserenv_adtyzhs00012.o/ 1450287912 2619555000 100640 672 ` 78 L 79 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %GetAllUsersProfileDirectoryW .text.data.bss.idata$7.idata$5.idata$4.idata$6$Jd_GetAllUsersProfileDirectoryW@8__imp__GetAllUsersProfileDirectoryW@8__head_lib32_libuserenv_adtyzhs00011.o/ 1450287912 2619555000 100640 672 ` 81 L 82 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %GetAllUsersProfileDirectoryA .text.data.bss.idata$7.idata$5.idata$4.idata$6$Jd_GetAllUsersProfileDirectoryA@8__imp__GetAllUsersProfileDirectoryA@8__head_lib32_libuserenv_adtyzhs00010.o/ 1450287912 2619555000 100640 624 ` 84 Lx 85 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ % 86 FreeGPOListW .text.data.bss.idata$7.idata$5.idata$4.idata$6*D_FreeGPOListW@4__imp__FreeGPOListW@4__head_lib32_libuserenv_adtyzhs00009.o/ 1450287912 2619555000 100640 624 ` 87 Lx 88 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ % FreeGPOListA .text.data.bss.idata$7.idata$5.idata$4.idata$6*D_FreeGPOListA@4__imp__FreeGPOListA@4__head_lib32_libuserenv_adtyzhs00008.o/ 1450287912 2619555000 100640 638 ` 89 L| 90 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %ForceSyncFgPolicy .text.data.bss.idata$7.idata$5.idata$4.idata$64N_ForceSyncFgPolicy@4__imp__ForceSyncFgPolicy@4__head_lib32_libuserenv_adtyzhs00007.o/ 1450287912 2619555000 100640 686 ` 91 L 92 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %ExpandEnvironmentStringsForUserW .text.data.bss.idata$7.idata$5.idata$4.idata$6)Tn_ExpandEnvironmentStringsForUserW@16__imp__ExpandEnvironmentStringsForUserW@16__head_lib32_libuserenv_adtyzhs00006.o/ 1450287912 2619555000 100640 686 ` 93 L 94 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %ExpandEnvironmentStringsForUserA .text.data.bss.idata$7.idata$5.idata$4.idata$6)Tn_ExpandEnvironmentStringsForUserA@16__imp__ExpandEnvironmentStringsForUserA@16__head_lib32_libuserenv_adtyzhs00005.o/ 1450287912 2619555000 100640 668 ` 95 L 96 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %EnterCriticalPolicySection .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`_EnterCriticalPolicySection@4__imp__EnterCriticalPolicySection@4__head_lib32_libuserenv_adtyzhs00004.o/ 1450287912 2619555000 100640 658 ` 97 L 98 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %DestroyEnvironmentBlock .text.data.bss.idata$7.idata$5.idata$4.idata$6@Z_DestroyEnvironmentBlock@4__imp__DestroyEnvironmentBlock@4__head_lib32_libuserenv_adtyzhs00003.o/ 1450287912 2619555000 100640 634 ` 99 L| 100 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %DeleteProfileW .text.data.bss.idata$7.idata$5.idata$4.idata$60J_DeleteProfileW@12__imp__DeleteProfileW@12__head_lib32_libuserenv_adtyzhs00002.o/ 1450287912 2619555000 100640 634 ` 101 L| 102 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %DeleteProfileA .text.data.bss.idata$7.idata$5.idata$4.idata$60J_DeleteProfileA@12__imp__DeleteProfileA@12__head_lib32_libuserenv_adtyzhs00001.o/ 1450287912 2619555000 100640 628 ` 103 Lx 104 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %CreateProfile .text.data.bss.idata$7.idata$5.idata$4.idata$6.H_CreateProfile@16__imp__CreateProfile@16__head_lib32_libuserenv_adtyzhs00000.o/ 1450287912 2619555000 100640 658 ` 105 L 106 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %CreateEnvironmentBlock .text.data.bss.idata$7.idata$5.idata$4.idata$6@Z_CreateEnvironmentBlock@12__imp__CreateEnvironmentBlock@12__head_lib32_libuserenv_a