1 !<arch> 2 / 1486067750 0 0 0 3542 ` 3 ^bb!|!|$H$H'')),,//2x2x5l5l8@8@;$;$==@@CCFfFfI4I4LLNNQQTTWxWxZhZh]2]2``bbeehhkknznzqjqjtPtPw.w.z*z*}}FF||BB__lib32_libauthz_a_iname__head_lib32_libauthz_a_AuthziSourceAudit__imp__AuthziSourceAudit_AuthziQuerySecurityAttributes@24__imp__AuthziQuerySecurityAttributes@24_AuthziModifySecurityAttributes@12__imp__AuthziModifySecurityAttributes@12_AuthziModifyAuditQueue@24__imp__AuthziModifyAuditQueue@24_AuthziModifyAuditEventType@20__imp__AuthziModifyAuditEventType@20_AuthziModifyAuditEvent@28__imp__AuthziModifyAuditEvent@28_AuthziModifyAuditEvent2@32__imp__AuthziModifyAuditEvent2@32_AuthziLogAuditEvent@12__imp__AuthziLogAuditEvent@12_AuthziInitializeContextFromSid@32__imp__AuthziInitializeContextFromSid@32_AuthziInitializeAuditQueue@20__imp__AuthziInitializeAuditQueue@20_AuthziInitializeAuditParamsWithRM__imp__AuthziInitializeAuditParamsWithRM_AuthziInitializeAuditParamsFromArray@20__imp__AuthziInitializeAuditParamsFromArray@20_AuthziInitializeAuditParams__imp__AuthziInitializeAuditParams_AuthziInitializeAuditEventType@20__imp__AuthziInitializeAuditEventType@20_AuthziInitializeAuditEvent@44__imp__AuthziInitializeAuditEvent@44_AuthziGenerateAdminAlertAuditW@16__imp__AuthziGenerateAdminAlertAuditW@16_AuthziFreeAuditQueue@4__imp__AuthziFreeAuditQueue@4_AuthziFreeAuditParams@4__imp__AuthziFreeAuditParams@4_AuthziFreeAuditEventType@4__imp__AuthziFreeAuditEventType@4_AuthziCheckContextMembership@16__imp__AuthziCheckContextMembership@16_AuthziAllocateAuditParams@8__imp__AuthziAllocateAuditParams@8_AuthziAccessCheckEx@40__imp__AuthziAccessCheckEx@40_AuthzUnregisterSecurityEventSource@8__imp__AuthzUnregisterSecurityEventSource@8_AuthzUninstallSecurityEventSource@8__imp__AuthzUninstallSecurityEventSource@8_AuthzReportSecurityEventFromParams@20__imp__AuthzReportSecurityEventFromParams@20_AuthzReportSecurityEvent__imp__AuthzReportSecurityEvent_AuthzRegisterSecurityEventSource@12__imp__AuthzRegisterSecurityEventSource@12_AuthzOpenObjectAudit@32__imp__AuthzOpenObjectAudit@32_AuthzModifySecurityAttributes@12__imp__AuthzModifySecurityAttributes@12_AuthzInstallSecurityEventSource@8__imp__AuthzInstallSecurityEventSource@8_AuthzInitializeResourceManager@24__imp__AuthzInitializeResourceManager@24_AuthzInitializeObjectAccessAuditEvent2__imp__AuthzInitializeObjectAccessAuditEvent2_AuthzInitializeObjectAccessAuditEvent__imp__AuthzInitializeObjectAccessAuditEvent_AuthzInitializeContextFromToken@32__imp__AuthzInitializeContextFromToken@32_AuthzInitializeContextFromSid@32__imp__AuthzInitializeContextFromSid@32_AuthzInitializeContextFromAuthzContext@28__imp__AuthzInitializeContextFromAuthzContext@28_AuthzGetInformationFromContext@20__imp__AuthzGetInformationFromContext@20_AuthzFreeResourceManager@4__imp__AuthzFreeResourceManager@4_AuthzFreeHandle@4__imp__AuthzFreeHandle@4_AuthzFreeContext@4__imp__AuthzFreeContext@4_AuthzFreeAuditEvent@4__imp__AuthzFreeAuditEvent@4_AuthzEvaluateSacl@24__imp__AuthzEvaluateSacl@24_AuthzEnumerateSecurityEventSources@16__imp__AuthzEnumerateSecurityEventSources@16_AuthzCachedAccessCheck@20__imp__AuthzCachedAccessCheck@20_AuthzAddSidsToContext@24__imp__AuthzAddSidsToContext@24_AuthzAccessCheck@36__imp__AuthzAccessCheck@36dzbut.o/ 1486067750 18779 5000 100644 579 ` 4 L.text 0`.data@0.bss0.idata$4@0.idata$5@0.idata$7@0AUTHZ.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7 7 __lib32_libauthz_a_iname 8 dzbuh.o/ 1486067750 18779 5000 100644 651 ` 9 L6.text 0`.data@0.bss0.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$55__head_lib32_libauthz_a__lib32_libauthz_a_iname 13 dzbus00045.o/ 1486067750 18779 5000 100644 632 ` 14 L| 15 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %-AuthziSourceAudit .text.data.bss.idata$7.idata$5.idata$4.idata$60H_AuthziSourceAudit__imp__AuthziSourceAudit__head_lib32_libauthz_adzbus00044.o/ 1486067750 18779 5000 100644 674 ` 16 L 17 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %,AuthziQuerySecurityAttributes .text.data.bss.idata$7.idata$5.idata$4.idata$6&Nf_AuthziQuerySecurityAttributes@24__imp__AuthziQuerySecurityAttributes@24__head_lib32_libauthz_adzbus00043.o/ 1486067750 18779 5000 100644 680 ` 18 L 19 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %+AuthziModifySecurityAttributes .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthziModifySecurityAttributes@12__imp__AuthziModifySecurityAttributes@12__head_lib32_libauthz_adzbus00042.o/ 1486067750 18779 5000 100644 656 ` 20 L 21 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %*AuthziModifyAuditQueue .text.data.bss.idata$7.idata$5.idata$4.idata$6@X_AuthziModifyAuditQueue@24__imp__AuthziModifyAuditQueue@24__head_lib32_libauthz_adzbus00041.o/ 1486067750 18779 5000 100644 668 ` 22 L 23 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %)AuthziModifyAuditEventType .text.data.bss.idata$7.idata$5.idata$4.idata$6#H`_AuthziModifyAuditEventType@20__imp__AuthziModifyAuditEventType@20__head_lib32_libauthz_adzbus00040.o/ 1486067750 18779 5000 100644 656 ` 24 L 25 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %(AuthziModifyAuditEvent .text.data.bss.idata$7.idata$5.idata$4.idata$6@X_AuthziModifyAuditEvent@28__imp__AuthziModifyAuditEvent@28__head_lib32_libauthz_adzbus00039.o/ 1486067750 18779 5000 100644 658 ` 26 L 27 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %'AuthziModifyAuditEvent2 .text.data.bss.idata$7.idata$5.idata$4.idata$6 BZ_AuthziModifyAuditEvent2@32__imp__AuthziModifyAuditEvent2@32__head_lib32_libauthz_adzbus00038.o/ 1486067750 18779 5000 100644 646 ` 28 L 29 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %&AuthziLogAuditEvent .text.data.bss.idata$7.idata$5.idata$4.idata$6:R_AuthziLogAuditEvent@12__imp__AuthziLogAuditEvent@12__head_lib32_libauthz_adzbus00037.o/ 1486067750 18779 5000 100644 680 ` 30 L 31 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %%AuthziInitializeContextFromSid .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthziInitializeContextFromSid@32__imp__AuthziInitializeContextFromSid@32__head_lib32_libauthz_adzbus00036.o/ 1486067750 18779 5000 100644 668 ` 32 L 33 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %$AuthziInitializeAuditQueue .text.data.bss.idata$7.idata$5.idata$4.idata$6#H`_AuthziInitializeAuditQueue@20__imp__AuthziInitializeAuditQueue@20__head_lib32_libauthz_adzbus00035.o/ 1486067750 18779 5000 100644 680 ` 34 L 35 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %#AuthziInitializeAuditParamsWithRM .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthziInitializeAuditParamsWithRM__imp__AuthziInitializeAuditParamsWithRM__head_lib32_libauthz_adzbus00034.o/ 1486067750 18779 5000 100644 696 ` 36 L 37 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6(@ %"AuthziInitializeAuditParamsFromArray .text.data.bss.idata$7.idata$5.idata$4.idata$6-\t_AuthziInitializeAuditParamsFromArray@20__imp__AuthziInitializeAuditParamsFromArray@20__head_lib32_libauthz_adzbus00033.o/ 1486067750 18779 5000 100644 664 ` 38 L 39 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %!AuthziInitializeAuditParams .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_AuthziInitializeAuditParams__imp__AuthziInitializeAuditParams__head_lib32_libauthz_adzbus00032.o/ 1486067750 18779 5000 100644 680 ` 40 L 41 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ % AuthziInitializeAuditEventType .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthziInitializeAuditEventType@20__imp__AuthziInitializeAuditEventType@20__head_lib32_libauthz_adzbus00031.o/ 1486067750 18779 5000 100644 668 ` 42 L 43 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %AuthziInitializeAuditEvent .text.data.bss.idata$7.idata$5.idata$4.idata$6#H`_AuthziInitializeAuditEvent@44__imp__AuthziInitializeAuditEvent@44__head_lib32_libauthz_adzbus00030.o/ 1486067750 18779 5000 100644 680 ` 44 L 45 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %AuthziGenerateAdminAlertAuditW .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthziGenerateAdminAlertAuditW@16__imp__AuthziGenerateAdminAlertAuditW@16__head_lib32_libauthz_adzbus00029.o/ 1486067750 18779 5000 100644 646 ` 46 L 47 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %AuthziFreeAuditQueue .text.data.bss.idata$7.idata$5.idata$4.idata$6:R_AuthziFreeAuditQueue@4__imp__AuthziFreeAuditQueue@4__head_lib32_libauthz_adzbus00028.o/ 1486067750 18779 5000 100644 648 ` 48 L 49 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %AuthziFreeAuditParams .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_AuthziFreeAuditParams@4__imp__AuthziFreeAuditParams@4__head_lib32_libauthz_adzbus00027.o/ 1486067750 18779 5000 100644 658 ` 50 L 51 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %AuthziFreeAuditEventType .text.data.bss.idata$7.idata$5.idata$4.idata$6 BZ_AuthziFreeAuditEventType@4__imp__AuthziFreeAuditEventType@4__head_lib32_libauthz_adzbus00026.o/ 1486067750 18779 5000 100644 672 ` 52 L 53 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %AuthziCheckContextMembership .text.data.bss.idata$7.idata$5.idata$4.idata$6%Ld_AuthziCheckContextMembership@16__imp__AuthziCheckContextMembership@16__head_lib32_libauthz_adzbus00025.o/ 1486067750 18779 5000 100644 660 ` 54 L 55 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %AuthziAllocateAuditParams .text.data.bss.idata$7.idata$5.idata$4.idata$6!D\_AuthziAllocateAuditParams@8__imp__AuthziAllocateAuditParams@8__head_lib32_libauthz_adzbus00024.o/ 1486067750 18779 5000 100644 646 ` 56 L 57 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %AuthziAccessCheckEx .text.data.bss.idata$7.idata$5.idata$4.idata$6:R_AuthziAccessCheckEx@40__imp__AuthziAccessCheckEx@40__head_lib32_libauthz_adzbus00023.o/ 1486067750 18779 5000 100644 690 ` 58 L 59 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6&@ %AuthzUnregisterSecurityEventSource .text.data.bss.idata$7.idata$5.idata$4.idata$6*Vn_AuthzUnregisterSecurityEventSource@8__imp__AuthzUnregisterSecurityEventSource@8__head_lib32_libauthz_adzbus00022.o/ 1486067750 18779 5000 100644 684 ` 60 L 61 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %AuthzUninstallSecurityEventSource .text.data.bss.idata$7.idata$5.idata$4.idata$6)Tl_AuthzUninstallSecurityEventSource@8__imp__AuthzUninstallSecurityEventSource@8__head_lib32_libauthz_adzbus00021.o/ 1486067750 18779 5000 100644 692 ` 62 L 63 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6&@ %AuthzReportSecurityEventFromParams .text.data.bss.idata$7.idata$5.idata$4.idata$6+Xp_AuthzReportSecurityEventFromParams@20__imp__AuthzReportSecurityEventFromParams@20__head_lib32_libauthz_adzbus00020.o/ 1486067750 18779 5000 100644 654 ` 64 L 65 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %AuthzReportSecurityEvent .text.data.bss.idata$7.idata$5.idata$4.idata$6>V_AuthzReportSecurityEvent__imp__AuthzReportSecurityEvent__head_lib32_libauthz_adzbus00019.o/ 1486067750 18779 5000 100644 684 ` 66 L 67 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %AuthzRegisterSecurityEventSource .text.data.bss.idata$7.idata$5.idata$4.idata$6)Tl_AuthzRegisterSecurityEventSource@12__imp__AuthzRegisterSecurityEventSource@12__head_lib32_libauthz_adzbus00018.o/ 1486067750 18779 5000 100644 648 ` 68 L 69 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %AuthzOpenObjectAudit .text.data.bss.idata$7.idata$5.idata$4.idata$6<T_AuthzOpenObjectAudit@32__imp__AuthzOpenObjectAudit@32__head_lib32_libauthz_adzbus00017.o/ 1486067750 18779 5000 100644 674 ` 70 L 71 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %AuthzModifySecurityAttributes .text.data.bss.idata$7.idata$5.idata$4.idata$6&Nf_AuthzModifySecurityAttributes@12__imp__AuthzModifySecurityAttributes@12__head_lib32_libauthz_adzbus00016.o/ 1486067750 18779 5000 100644 680 ` 72 L 73 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %AuthzInstallSecurityEventSource .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthzInstallSecurityEventSource@8__imp__AuthzInstallSecurityEventSource@8__head_lib32_libauthz_adzbus00015.o/ 1486067750 18779 5000 100644 680 ` 74 L 75 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %AuthzInitializeResourceManager .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthzInitializeResourceManager@24__imp__AuthzInitializeResourceManager@24__head_lib32_libauthz_adzbus00014.o/ 1486067750 18779 5000 100644 698 ` 76 L 77 .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4<0.idata$6*@ %AuthzInitializeObjectAccessAuditEvent2 .text.data.bss.idata$7.idata$5.idata$4.idata$6,Zr_AuthzInitializeObjectAccessAuditEvent2__imp__AuthzInitializeObjectAccessAuditEvent2__head_lib32_libauthz_adzbus00013.o/ 1486067750 18779 5000 100644 692 ` 78 L 79 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6(@ % AuthzInitializeObjectAccessAuditEvent .text.data.bss.idata$7.idata$5.idata$4.idata$6+Xp_AuthzInitializeObjectAccessAuditEvent__imp__AuthzInitializeObjectAccessAuditEvent__head_lib32_libauthz_adzbus00012.o/ 1486067750 18779 5000 100644 682 ` 81 L 82 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %AuthzInitializeContextFromToken .text.data.bss.idata$7.idata$5.idata$4.idata$6(Rj_AuthzInitializeContextFromToken@32__imp__AuthzInitializeContextFromToken@32__head_lib32_libauthz_adzbus00011.o/ 1486067750 18779 5000 100644 674 ` 84 L 85 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6 @ %AuthzInitializeContextFromSid .text.data.bss.idata$7.idata$5.idata$4.idata$6&Nf_AuthzInitializeContextFromSid@32__imp__AuthzInitializeContextFromSid@32__head_lib32_libauthz_adzbus00010.o/ 1486067750 18779 5000 100644 704 ` 87 L 88 .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4<0.idata$6*@ % 89 AuthzInitializeContextFromAuthzContext .text.data.bss.idata$7.idata$5.idata$4.idata$6/`x_AuthzInitializeContextFromAuthzContext@28__imp__AuthzInitializeContextFromAuthzContext@28__head_lib32_libauthz_adzbus00009.o/ 1486067750 18779 5000 100644 680 ` 90 L 91 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ % AuthzGetInformationFromContext .text.data.bss.idata$7.idata$5.idata$4.idata$6'Ph_AuthzGetInformationFromContext@20__imp__AuthzGetInformationFromContext@20__head_lib32_libauthz_adzbus00008.o/ 1486067750 18779 5000 100644 658 ` 92 L 93 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %AuthzFreeResourceManager .text.data.bss.idata$7.idata$5.idata$4.idata$6 BZ_AuthzFreeResourceManager@4__imp__AuthzFreeResourceManager@4__head_lib32_libauthz_adzbus00007.o/ 1486067750 18779 5000 100644 632 ` 94 L| 95 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %AuthzFreeHandle .text.data.bss.idata$7.idata$5.idata$4.idata$60H_AuthzFreeHandle@4__imp__AuthzFreeHandle@4__head_lib32_libauthz_adzbus00006.o/ 1486067750 18779 5000 100644 634 ` 96 L| 97 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %AuthzFreeContext .text.data.bss.idata$7.idata$5.idata$4.idata$62J_AuthzFreeContext@4__imp__AuthzFreeContext@4__head_lib32_libauthz_adzbus00005.o/ 1486067750 18779 5000 100644 644 ` 98 L 99 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %AuthzFreeAuditEvent .text.data.bss.idata$7.idata$5.idata$4.idata$68P_AuthzFreeAuditEvent@4__imp__AuthzFreeAuditEvent@4__head_lib32_libauthz_adzbus00004.o/ 1486067750 18779 5000 100644 638 ` 100 L| 101 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %AuthzEvaluateSacl .text.data.bss.idata$7.idata$5.idata$4.idata$66N_AuthzEvaluateSacl@24__imp__AuthzEvaluateSacl@24__head_lib32_libauthz_adzbus00003.o/ 1486067750 18779 5000 100644 692 ` 102 L 103 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6&@ %AuthzEnumerateSecurityEventSources .text.data.bss.idata$7.idata$5.idata$4.idata$6+Xp_AuthzEnumerateSecurityEventSources@16__imp__AuthzEnumerateSecurityEventSources@16__head_lib32_libauthz_adzbus00002.o/ 1486067750 18779 5000 100644 656 ` 104 L 105 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %AuthzCachedAccessCheck .text.data.bss.idata$7.idata$5.idata$4.idata$6@X_AuthzCachedAccessCheck@20__imp__AuthzCachedAccessCheck@20__head_lib32_libauthz_adzbus00001.o/ 1486067750 18779 5000 100644 650 ` 106 L 107 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %AuthzAddSidsToContext .text.data.bss.idata$7.idata$5.idata$4.idata$6>V_AuthzAddSidsToContext@24__imp__AuthzAddSidsToContext@24__head_lib32_libauthz_adzbus00000.o/ 1486067750 18779 5000 100644 636 ` 108 L| 109 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %AuthzAccessCheck .text.data.bss.idata$7.idata$5.idata$4.idata$64L_AuthzAccessCheck@36__imp__AuthzAccessCheck@36__head_lib32_libauthz_a