| ofs | hex dump | ascii |
|---|
| 0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 | !<arch>./...............15161610 |
| 0020 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 31 33 31 34 38 20 20 20 | 72..0.....0.....0.......13148... |
| 0040 | 20 20 60 0a 00 00 01 4e 00 00 33 a0 00 00 36 48 00 00 39 62 00 00 39 62 00 00 3c 5c 00 00 3c 5c | ..`....N..3...6H..9b..9b..<\..<\ |
| 0060 | 00 00 3f 5e 00 00 3f 5e 00 00 42 5a 00 00 42 5a 00 00 45 84 00 00 45 84 00 00 48 88 00 00 48 88 | ..?^..?^..BZ..BZ..E...E...H...H. |
| 0080 | 00 00 4b 80 00 00 4b 80 00 00 4e 7a 00 00 4e 7a 00 00 51 80 00 00 51 80 00 00 54 76 00 00 54 76 | ..K...K...Nz..Nz..Q...Q...Tv..Tv |
| 00a0 | 00 00 57 84 00 00 57 84 00 00 5a 92 00 00 5a 92 00 00 5d 94 00 00 5d 94 00 00 60 8a 00 00 60 8a | ..W...W...Z...Z...]...]...`...`. |
| 00c0 | 00 00 63 80 00 00 63 80 00 00 66 8e 00 00 66 8e 00 00 69 96 00 00 69 96 00 00 6c b6 00 00 6c b6 | ..c...c...f...f...i...i...l...l. |
| 00e0 | 00 00 6f d0 00 00 6f d0 00 00 72 bc 00 00 72 bc 00 00 75 ac 00 00 75 ac 00 00 78 98 00 00 78 98 | ..o...o...r...r...u...u...x...x. |
| 0100 | 00 00 7b 92 00 00 7b 92 00 00 7e 74 00 00 7e 74 00 00 81 5e 00 00 81 5e 00 00 84 5a 00 00 84 5a | ..{...{...~t..~t...^...^...Z...Z |
| 0120 | 00 00 87 52 00 00 87 52 00 00 8a 42 00 00 8a 42 00 00 8d 24 00 00 8d 24 00 00 90 32 00 00 90 32 | ...R...R...B...B...$...$...2...2 |
| 0140 | 00 00 93 50 00 00 93 50 00 00 96 76 00 00 96 76 00 00 99 78 00 00 99 78 00 00 9c a8 00 00 9c a8 | ...P...P...v...v...x...x........ |
| 0160 | 00 00 9f ac 00 00 9f ac 00 00 a2 ba 00 00 a2 ba 00 00 a5 cc 00 00 a5 cc 00 00 a8 c4 00 00 a8 c4 | ................................ |
| 0180 | 00 00 ab b2 00 00 ab b2 00 00 ae a0 00 00 ae a0 00 00 b1 a2 00 00 b1 a2 00 00 b4 84 00 00 b4 84 | ................................ |
| 01a0 | 00 00 b7 7c 00 00 b7 7c 00 00 ba 72 00 00 ba 72 00 00 bd 6e 00 00 bd 6e 00 00 c0 6a 00 00 c0 6a | ...|...|...r...r...n...n...j...j |
| 01c0 | 00 00 c3 76 00 00 c3 76 00 00 c6 62 00 00 c6 62 00 00 c9 66 00 00 c9 66 00 00 cc 5c 00 00 cc 5c | ...v...v...b...b...f...f...\...\ |
| 01e0 | 00 00 cf 52 00 00 cf 52 00 00 d2 6c 00 00 d2 6c 00 00 d5 4c 00 00 d5 4c 00 00 d8 46 00 00 d8 46 | ...R...R...l...l...L...L...F...F |
| 0200 | 00 00 db 2a 00 00 db 2a 00 00 de 0e 00 00 de 0e 00 00 e1 06 00 00 e1 06 00 00 e4 22 00 00 e4 22 | ...*...*..................."..." |
| 0220 | 00 00 e7 66 00 00 e7 66 00 00 ea 8e 00 00 ea 8e 00 00 ed ae 00 00 ed ae 00 00 f0 b4 00 00 f0 b4 | ...f...f........................ |
| 0240 | 00 00 f3 c2 00 00 f3 c2 00 00 f6 c8 00 00 f6 c8 00 00 f9 e4 00 00 f9 e4 00 00 fc f0 00 00 fc f0 | ................................ |
| 0260 | 00 00 ff de 00 00 ff de 00 01 02 e4 00 01 02 e4 00 01 05 f4 00 01 05 f4 00 01 09 04 00 01 09 04 | ................................ |
| 0280 | 00 01 0b fa 00 01 0b fa 00 01 0e fe 00 01 0e fe 00 01 12 02 00 01 12 02 00 01 15 10 00 01 15 10 | ................................ |
| 02a0 | 00 01 18 3a 00 01 18 3a 00 01 1b 64 00 01 1b 64 00 01 1e 9a 00 01 1e 9a 00 01 21 cc 00 01 21 cc | ...:...:...d...d..........!...!. |
| 02c0 | 00 01 24 ba 00 01 24 ba 00 01 27 b0 00 01 27 b0 00 01 2a a6 00 01 2a a6 00 01 2d 94 00 01 2d 94 | ..$...$...'...'...*...*...-...-. |
| 02e0 | 00 01 30 80 00 01 30 80 00 01 33 82 00 01 33 82 00 01 36 84 00 01 36 84 00 01 39 86 00 01 39 86 | ..0...0...3...3...6...6...9...9. |
| 0300 | 00 01 3c 8e 00 01 3c 8e 00 01 3f 92 00 01 3f 92 00 01 42 a2 00 01 42 a2 00 01 45 be 00 01 45 be | ..<...<...?...?...B...B...E...E. |
| 0320 | 00 01 48 ce 00 01 48 ce 00 01 4b c8 00 01 4b c8 00 01 4e c2 00 01 4e c2 00 01 51 c6 00 01 51 c6 | ..H...H...K...K...N...N...Q...Q. |
| 0340 | 00 01 54 cc 00 01 54 cc 00 01 57 e0 00 01 57 e0 00 01 5a d8 00 01 5a d8 00 01 5d e8 00 01 5d e8 | ..T...T...W...W...Z...Z...]...]. |
| 0360 | 00 01 60 f0 00 01 60 f0 00 01 63 e8 00 01 63 e8 00 01 66 ec 00 01 66 ec 00 01 69 ec 00 01 69 ec | ..`...`...c...c...f...f...i...i. |
| 0380 | 00 01 6c ec 00 01 6c ec 00 01 6f f2 00 01 6f f2 00 01 72 f8 00 01 72 f8 00 01 76 08 00 01 76 08 | ..l...l...o...o...r...r...v...v. |
| 03a0 | 00 01 78 f8 00 01 78 f8 00 01 7c 1e 00 01 7c 1e 00 01 7f 54 00 01 7f 54 00 01 82 7a 00 01 82 7a | ..x...x...|...|....T...T...z...z |
| 03c0 | 00 01 85 8a 00 01 85 8a 00 01 88 8c 00 01 88 8c 00 01 8b 92 00 01 8b 92 00 01 8e 8e 00 01 8e 8e | ................................ |
| 03e0 | 00 01 91 90 00 01 91 90 00 01 94 8c 00 01 94 8c 00 01 97 88 00 01 97 88 00 01 9a 8e 00 01 9a 8e | ................................ |
| 0400 | 00 01 9d 94 00 01 9d 94 00 01 a0 a0 00 01 a0 a0 00 01 a3 a2 00 01 a3 a2 00 01 a6 8e 00 01 a6 8e | ................................ |
| 0420 | 00 01 a9 86 00 01 a9 86 00 01 ac 88 00 01 ac 88 00 01 af 9a 00 01 af 9a 00 01 b2 a0 00 01 b2 a0 | ................................ |
| 0440 | 00 01 b5 a6 00 01 b5 a6 00 01 b8 94 00 01 b8 94 00 01 bb 98 00 01 bb 98 00 01 be 9c 00 01 be 9c | ................................ |
| 0460 | 00 01 c1 92 00 01 c1 92 00 01 c4 80 00 01 c4 80 00 01 c7 86 00 01 c7 86 00 01 ca 74 00 01 ca 74 | ...........................t...t |
| 0480 | 00 01 cd 92 00 01 cd 92 00 01 d0 7c 00 01 d0 7c 00 01 d3 66 00 01 d3 66 00 01 d6 62 00 01 d6 62 | ...........|...|...f...f...b...b |
| 04a0 | 00 01 d9 70 00 01 d9 70 00 01 dc 5a 00 01 dc 5a 00 01 df 48 00 01 df 48 00 01 e2 40 00 01 e2 40 | ...p...p...Z...Z...H...H...@...@ |
| 04c0 | 00 01 e5 30 00 01 e5 30 00 01 e8 42 00 01 e8 42 00 01 eb 38 00 01 eb 38 00 01 ee 34 00 01 ee 34 | ...0...0...B...B...8...8...4...4 |
| 04e0 | 00 01 f1 4c 00 01 f1 4c 00 01 f4 5e 00 01 f4 5e 00 01 f7 70 00 01 f7 70 00 01 fa 8e 00 01 fa 8e | ...L...L...^...^...p...p........ |
| 0500 | 00 01 fd ac 00 01 fd ac 00 02 00 ae 00 02 00 ae 00 02 03 a8 00 02 03 a8 00 02 06 94 00 02 06 94 | ................................ |
| 0520 | 00 02 09 80 00 02 09 80 00 02 0c 7a 00 02 0c 7a 00 02 0f 98 00 02 0f 98 00 02 12 b6 00 02 12 b6 | ...........z...z................ |
| 0540 | 00 02 15 ae 00 02 15 ae 00 02 18 cc 00 02 18 cc 00 02 1b e8 00 02 1b e8 00 02 1f 0c 00 02 1f 0c | ................................ |
| 0560 | 00 02 21 f8 00 02 21 f8 00 02 25 0a 00 02 25 0a 00 02 28 26 00 02 28 26 00 02 2b 28 00 02 2b 28 | ..!...!...%...%...(&..(&..+(..+( |
| 0580 | 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | __C__Users_Peter_Code_winapi_rs_ |
| 05a0 | 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 5f 69 6e 61 6d | i686_lib_libwinapi_winsta_a_inam |
| 05c0 | 65 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | e.__head_C__Users_Peter_Code_win |
| 05e0 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 0600 | 5f 61 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 57 61 69 74 46 6f 72 43 6f 6e 6e 65 63 74 40 30 00 | _a.__WinStationWaitForConnect@0. |
| 0620 | 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 57 61 69 74 46 6f 72 43 6f 6e 6e 65 63 74 | __imp___WinStationWaitForConnect |
| 0640 | 40 30 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 55 73 65 72 43 6f 6e 66 69 67 40 | @0.__WinStationUpdateUserConfig@ |
| 0660 | 34 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 55 73 65 72 43 6f | 4.__imp___WinStationUpdateUserCo |
| 0680 | 6e 66 69 67 40 34 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 53 65 74 74 69 6e 67 | nfig@4.__WinStationUpdateSetting |
| 06a0 | 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 53 65 74 | s@12.__imp___WinStationUpdateSet |
| 06c0 | 74 69 6e 67 73 40 31 32 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 43 6c 69 65 6e | tings@12.__WinStationUpdateClien |
| 06e0 | 74 43 61 63 68 65 64 43 72 65 64 65 6e 74 69 61 6c 73 40 32 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 | tCachedCredentials@28.__imp___Wi |
| 0700 | 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 43 6c 69 65 6e 74 43 61 63 68 65 64 43 72 65 64 65 6e | nStationUpdateClientCachedCreden |
| 0720 | 74 69 61 6c 73 40 32 38 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 | tials@28.__WinStationShadowTarge |
| 0740 | 74 53 65 74 75 70 40 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f | tSetup@8.__imp___WinStationShado |
| 0760 | 77 54 61 72 67 65 74 53 65 74 75 70 40 38 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f | wTargetSetup@8.__WinStationShado |
| 0780 | 77 54 61 72 67 65 74 40 34 30 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 | wTarget@40.__imp___WinStationSha |
| 07a0 | 64 6f 77 54 61 72 67 65 74 40 34 30 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 | dowTarget@40.__WinStationShadowT |
| 07c0 | 61 72 67 65 74 32 40 34 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 | arget2@48.__imp___WinStationShad |
| 07e0 | 6f 77 54 61 72 67 65 74 32 40 34 38 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 73 73 69 6f 6e | owTarget2@48.__WinStationSession |
| 0800 | 49 6e 69 74 69 61 6c 69 7a 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | Initialized@0.__imp___WinStation |
| 0820 | 53 65 73 73 69 6f 6e 49 6e 69 74 69 61 6c 69 7a 65 64 40 30 00 5f 5f 57 69 6e 53 74 61 74 69 6f | SessionInitialized@0.__WinStatio |
| 0840 | 6e 52 65 61 64 52 65 67 69 73 74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 | nReadRegistry@4.__imp___WinStati |
| 0860 | 6f 6e 52 65 61 64 52 65 67 69 73 74 72 79 40 34 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 49 | onReadRegistry@4.__WinStationReI |
| 0880 | 6e 69 74 69 61 6c 69 7a 65 53 65 63 75 72 69 74 79 40 34 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 | nitializeSecurity@4.__imp___WinS |
| 08a0 | 74 61 74 69 6f 6e 52 65 49 6e 69 74 69 61 6c 69 7a 65 53 65 63 75 72 69 74 79 40 34 00 5f 5f 57 | tationReInitializeSecurity@4.__W |
| 08c0 | 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 73 73 69 6f 6e 44 69 72 65 63 74 6f 72 79 40 38 00 | inStationOpenSessionDirectory@8. |
| 08e0 | 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 73 73 69 6f 6e 44 69 72 | __imp___WinStationOpenSessionDir |
| 0900 | 65 63 74 6f 72 79 40 38 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4e 65 77 53 65 | ectory@8.__WinStationNotifyNewSe |
| 0920 | 73 73 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 | ssion@8.__imp___WinStationNotify |
| 0940 | 4e 65 77 53 65 73 73 69 6f 6e 40 38 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c | NewSession@8.__WinStationNotifyL |
| 0960 | 6f 67 6f 6e 40 33 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 | ogon@32.__imp___WinStationNotify |
| 0980 | 4c 6f 67 6f 6e 40 33 32 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c 6f 67 6f 66 | Logon@32.__WinStationNotifyLogof |
| 09a0 | 66 40 30 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c 6f 67 6f | f@0.__imp___WinStationNotifyLogo |
| 09c0 | 66 66 40 30 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 44 69 73 63 6f 6e 6e 65 63 | ff@0.__WinStationNotifyDisconnec |
| 09e0 | 74 50 69 70 65 40 30 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 | tPipe@0.__imp___WinStationNotify |
| 0a00 | 44 69 73 63 6f 6e 6e 65 63 74 50 69 70 65 40 30 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 | DisconnectPipe@0.__WinStationGet |
| 0a20 | 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 66 6f 40 31 36 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 | ApplicationInfo@16.__imp___WinSt |
| 0a40 | 61 74 69 6f 6e 47 65 74 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 66 6f 40 31 36 00 5f 5f 57 69 6e | ationGetApplicationInfo@16.__Win |
| 0a60 | 53 74 61 74 69 6f 6e 46 55 53 43 61 6e 52 65 6d 6f 74 65 55 73 65 72 44 69 73 63 6f 6e 6e 65 63 | StationFUSCanRemoteUserDisconnec |
| 0a80 | 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 55 53 43 61 6e 52 65 6d | t@12.__imp___WinStationFUSCanRem |
| 0aa0 | 6f 74 65 55 73 65 72 44 69 73 63 6f 6e 6e 65 63 74 40 31 32 00 5f 5f 57 69 6e 53 74 61 74 69 6f | oteUserDisconnect@12.__WinStatio |
| 0ac0 | 6e 43 68 65 63 6b 46 6f 72 41 70 70 6c 69 63 61 74 69 6f 6e 4e 61 6d 65 40 34 38 00 5f 5f 69 6d | nCheckForApplicationName@48.__im |
| 0ae0 | 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 46 6f 72 41 70 70 6c 69 63 61 74 69 6f | p___WinStationCheckForApplicatio |
| 0b00 | 6e 4e 61 6d 65 40 34 38 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32 | nName@48.__WinStationCallback@12 |
| 0b20 | 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32 00 5f | .__imp___WinStationCallback@12._ |
| 0b40 | 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 65 61 6b 50 6f 69 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f | _WinStationBreakPoint@12.__imp__ |
| 0b60 | 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 65 61 6b 50 6f 69 6e 74 40 31 32 00 5f 5f 57 69 6e 53 74 | _WinStationBreakPoint@12.__WinSt |
| 0b80 | 61 74 69 6f 6e 42 65 65 70 4f 70 65 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 | ationBeepOpen@12.__imp___WinStat |
| 0ba0 | 69 6f 6e 42 65 65 70 4f 70 65 6e 40 31 32 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 41 6e 6e 6f 79 | ionBeepOpen@12.__WinStationAnnoy |
| 0bc0 | 61 6e 63 65 50 6f 70 75 70 40 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 41 6e | ancePopup@8.__imp___WinStationAn |
| 0be0 | 6e 6f 79 61 6e 63 65 50 6f 70 75 70 40 38 00 5f 5f 4e 57 4c 6f 67 6f 6e 53 65 74 41 64 6d 69 6e | noyancePopup@8.__NWLogonSetAdmin |
| 0c00 | 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 4e 57 4c 6f 67 6f 6e 53 65 74 41 64 6d 69 6e 40 31 32 00 5f | @12.__imp___NWLogonSetAdmin@12._ |
| 0c20 | 5f 4e 57 4c 6f 67 6f 6e 51 75 65 72 79 41 64 6d 69 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 4e 57 | _NWLogonQueryAdmin@12.__imp___NW |
| 0c40 | 4c 6f 67 6f 6e 51 75 65 72 79 41 64 6d 69 6e 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 57 61 | LogonQueryAdmin@12._WinStationWa |
| 0c60 | 69 74 53 79 73 74 65 6d 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 | itSystemEvent@12.__imp__WinStati |
| 0c80 | 6f 6e 57 61 69 74 53 79 73 74 65 6d 45 76 65 6e 74 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e | onWaitSystemEvent@12._WinStation |
| 0ca0 | 56 69 72 74 75 61 6c 4f 70 65 6e 45 78 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 | VirtualOpenEx@16.__imp__WinStati |
| 0cc0 | 6f 6e 56 69 72 74 75 61 6c 4f 70 65 6e 45 78 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 56 69 | onVirtualOpenEx@16._WinStationVi |
| 0ce0 | 72 74 75 61 6c 4f 70 65 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 56 69 | rtualOpen@12.__imp__WinStationVi |
| 0d00 | 72 74 75 61 6c 4f 70 65 6e 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 56 65 72 69 66 79 40 32 | rtualOpen@12._WinStationVerify@2 |
| 0d20 | 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 56 65 72 69 66 79 40 32 34 00 5f 57 69 | 4.__imp__WinStationVerify@24._Wi |
| 0d40 | 6e 53 74 61 74 69 6f 6e 55 73 65 72 4c 6f 67 69 6e 41 63 63 65 73 73 43 68 65 63 6b 40 31 36 00 | nStationUserLoginAccessCheck@16. |
| 0d60 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 73 65 72 4c 6f 67 69 6e 41 63 63 65 73 73 | __imp__WinStationUserLoginAccess |
| 0d80 | 43 68 65 63 6b 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 65 67 69 73 74 65 72 4e 6f | Check@16._WinStationUnRegisterNo |
| 0da0 | 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | tificationEvent@4.__imp__WinStat |
| 0dc0 | 69 6f 6e 55 6e 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 34 | ionUnRegisterNotificationEvent@4 |
| 0de0 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 | ._WinStationUnRegisterConsoleNot |
| 0e00 | 69 66 69 63 61 74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 | ification@8.__imp__WinStationUnR |
| 0e20 | 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 40 38 00 5f 57 69 | egisterConsoleNotification@8._Wi |
| 0e40 | 6e 53 74 61 74 69 6f 6e 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 40 31 32 00 5f 5f 69 6d | nStationTerminateProcess@12.__im |
| 0e60 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 40 31 32 | p__WinStationTerminateProcess@12 |
| 0e80 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 54 65 72 6d 69 6e 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 | ._WinStationTerminateGlassReplac |
| 0ea0 | 65 6d 65 6e 74 53 65 73 73 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | ementSession@4.__imp__WinStation |
| 0ec0 | 54 65 72 6d 69 6e 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e | TerminateGlassReplacementSession |
| 0ee0 | 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 6f 77 6e 57 61 69 74 | @4._WinStationSystemShutdownWait |
| 0f00 | 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 6f | @8.__imp__WinStationSystemShutdo |
| 0f20 | 77 6e 57 61 69 74 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 6f | wnWait@8._WinStationSystemShutdo |
| 0f40 | 77 6e 53 74 61 72 74 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 | wnStarted@0.__imp__WinStationSys |
| 0f60 | 74 65 6d 53 68 75 74 64 6f 77 6e 53 74 61 72 74 65 64 40 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e | temShutdownStarted@0._WinStation |
| 0f80 | 53 77 69 74 63 68 54 6f 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 40 30 00 5f 5f 69 6d 70 5f | SwitchToServicesSession@0.__imp_ |
| 0fa0 | 5f 57 69 6e 53 74 61 74 69 6f 6e 53 77 69 74 63 68 54 6f 53 65 72 76 69 63 65 73 53 65 73 73 69 | _WinStationSwitchToServicesSessi |
| 0fc0 | 6f 6e 40 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 40 38 | on@0._WinStationShutdownSystem@8 |
| 0fe0 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d | .__imp__WinStationShutdownSystem |
| 1000 | 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 40 31 32 00 5f 5f 69 6d | @8._WinStationShadowStop@12.__im |
| 1020 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 40 31 32 00 5f 57 69 6e 53 | p__WinStationShadowStop@12._WinS |
| 1040 | 74 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 32 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | tationShadowStop2@0.__imp__WinSt |
| 1060 | 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 32 40 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 | ationShadowStop2@0._WinStationSh |
| 1080 | 61 64 6f 77 41 63 63 65 73 73 43 68 65 63 6b 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | adowAccessCheck@8.__imp__WinStat |
| 10a0 | 69 6f 6e 53 68 61 64 6f 77 41 63 63 65 73 73 43 68 65 63 6b 40 38 00 5f 57 69 6e 53 74 61 74 69 | ionShadowAccessCheck@8._WinStati |
| 10c0 | 6f 6e 53 68 61 64 6f 77 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 | onShadow@20.__imp__WinStationSha |
| 10e0 | 64 6f 77 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 52 65 6e 64 65 72 48 69 6e 74 40 | dow@20._WinStationSetRenderHint@ |
| 1100 | 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 52 65 6e 64 65 72 48 69 6e | 20.__imp__WinStationSetRenderHin |
| 1120 | 74 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 50 6f 6f 6c 43 6f 75 6e 74 40 31 32 00 | t@20._WinStationSetPoolCount@12. |
| 1140 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 50 6f 6f 6c 43 6f 75 6e 74 40 31 32 | __imp__WinStationSetPoolCount@12 |
| 1160 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 32 30 00 5f | ._WinStationSetInformationW@20._ |
| 1180 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 | _imp__WinStationSetInformationW@ |
| 11a0 | 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 32 30 | 20._WinStationSetInformationA@20 |
| 11c0 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e | .__imp__WinStationSetInformation |
| 11e0 | 41 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 41 75 74 6f 6c 6f 67 6f 6e 50 61 73 73 | A@20._WinStationSetAutologonPass |
| 1200 | 77 6f 72 64 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 41 75 74 6f 6c | word@8.__imp__WinStationSetAutol |
| 1220 | 6f 67 6f 6e 50 61 73 73 77 6f 72 64 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 72 76 65 72 | ogonPassword@8._WinStationServer |
| 1240 | 50 69 6e 67 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 72 76 65 72 50 69 | Ping@4.__imp__WinStationServerPi |
| 1260 | 6e 67 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 57 69 6e 64 6f 77 4d 65 73 73 61 67 | ng@4._WinStationSendWindowMessag |
| 1280 | 65 40 33 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 57 69 6e 64 6f 77 | e@32.__imp__WinStationSendWindow |
| 12a0 | 4d 65 73 73 61 67 65 40 33 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 | Message@32._WinStationSendMessag |
| 12c0 | 65 57 40 34 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 | eW@40.__imp__WinStationSendMessa |
| 12e0 | 67 65 57 40 34 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 65 41 40 34 | geW@40._WinStationSendMessageA@4 |
| 1300 | 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 65 41 40 | 0.__imp__WinStationSendMessageA@ |
| 1320 | 34 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 76 65 72 74 46 72 6f 6d 53 65 72 76 69 63 65 73 | 40._WinStationRevertFromServices |
| 1340 | 53 65 73 73 69 6f 6e 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 76 65 72 | Session@0.__imp__WinStationRever |
| 1360 | 74 46 72 6f 6d 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 40 30 00 5f 57 69 6e 53 74 61 74 69 | tFromServicesSession@0._WinStati |
| 1380 | 6f 6e 52 65 73 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 73 65 | onReset@12.__imp__WinStationRese |
| 13a0 | 74 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 70 6f 72 74 55 49 52 65 73 75 6c 74 40 31 | t@12._WinStationReportUIResult@1 |
| 13c0 | 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 70 6f 72 74 55 49 52 65 73 75 6c | 2.__imp__WinStationReportUIResul |
| 13e0 | 74 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6e 61 6d 65 57 40 31 32 00 5f 5f 69 6d 70 | t@12._WinStationRenameW@12.__imp |
| 1400 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6e 61 6d 65 57 40 31 32 00 5f 57 69 6e 53 74 61 74 69 | __WinStationRenameW@12._WinStati |
| 1420 | 6f 6e 52 65 6e 61 6d 65 41 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 | onRenameA@12.__imp__WinStationRe |
| 1440 | 6e 61 6d 65 41 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6d 6f 76 65 4c 69 63 65 6e 73 | nameA@12._WinStationRemoveLicens |
| 1460 | 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6d 6f 76 65 4c 69 63 65 | e@12.__imp__WinStationRemoveLice |
| 1480 | 6e 73 65 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 | nse@12._WinStationRegisterNotifi |
| 14a0 | 63 61 74 69 6f 6e 45 76 65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | cationEvent@16.__imp__WinStation |
| 14c0 | 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 31 36 00 5f 57 69 | RegisterNotificationEvent@16._Wi |
| 14e0 | 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 4e 6f | nStationRegisterCurrentSessionNo |
| 1500 | 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 | tificationEvent@12.__imp__WinSta |
| 1520 | 74 69 6f 6e 52 65 67 69 73 74 65 72 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 | tionRegisterCurrentSessionNotifi |
| 1540 | 63 61 74 69 6f 6e 45 76 65 6e 74 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 | cationEvent@12._WinStationRegist |
| 1560 | 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 31 36 00 5f 5f 69 6d 70 | erConsoleNotificationEx@16.__imp |
| 1580 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 | __WinStationRegisterConsoleNotif |
| 15a0 | 69 63 61 74 69 6f 6e 45 78 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 | icationEx@16._WinStationRegister |
| 15c0 | 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 | ConsoleNotification@12.__imp__Wi |
| 15e0 | 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 | nStationRegisterConsoleNotificat |
| 1600 | 69 6f 6e 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 53 | ion@12._WinStationRedirectLogonS |
| 1620 | 74 61 74 75 73 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 | tatus@8.__imp__WinStationRedirec |
| 1640 | 74 4c 6f 67 6f 6e 53 74 61 74 75 73 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 | tLogonStatus@8._WinStationRedire |
| 1660 | 63 74 4c 6f 67 6f 6e 4d 65 73 73 61 67 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | ctLogonMessage@16.__imp__WinStat |
| 1680 | 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 4d 65 73 73 61 67 65 40 31 36 00 5f 57 69 6e 53 | ionRedirectLogonMessage@16._WinS |
| 16a0 | 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 45 72 72 6f 72 40 32 34 00 5f 5f 69 6d | tationRedirectLogonError@24.__im |
| 16c0 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 45 72 72 6f 72 40 | p__WinStationRedirectLogonError@ |
| 16e0 | 32 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 42 65 67 69 6e | 24._WinStationRedirectLogonBegin |
| 1700 | 50 61 69 6e 74 69 6e 67 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 | Painting@0.__imp__WinStationRedi |
| 1720 | 72 65 63 74 4c 6f 67 6f 6e 42 65 67 69 6e 50 61 69 6e 74 69 6e 67 40 30 00 5f 57 69 6e 53 74 61 | rectLogonBeginPainting@0._WinSta |
| 1740 | 74 69 6f 6e 52 65 64 69 72 65 63 74 45 72 72 6f 72 4d 65 73 73 61 67 65 40 38 00 5f 5f 69 6d 70 | tionRedirectErrorMessage@8.__imp |
| 1760 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 45 72 72 6f 72 4d 65 73 73 61 67 65 | __WinStationRedirectErrorMessage |
| 1780 | 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 63 6d 53 68 61 64 6f 77 32 40 32 34 00 5f 5f 69 6d | @8._WinStationRcmShadow2@24.__im |
| 17a0 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 63 6d 53 68 61 64 6f 77 32 40 32 34 00 5f 57 69 6e 53 | p__WinStationRcmShadow2@24._WinS |
| 17c0 | 74 61 74 69 6f 6e 51 75 65 72 79 55 70 64 61 74 65 52 65 71 75 69 72 65 64 40 38 00 5f 5f 69 6d | tationQueryUpdateRequired@8.__im |
| 17e0 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 55 70 64 61 74 65 52 65 71 75 69 72 65 64 | p__WinStationQueryUpdateRequired |
| 1800 | 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 53 65 73 73 69 6f 6e 56 69 72 74 75 61 | @8._WinStationQuerySessionVirtua |
| 1820 | 6c 49 50 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 53 65 73 | lIP@16.__imp__WinStationQuerySes |
| 1840 | 73 69 6f 6e 56 69 72 74 75 61 6c 49 50 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 | sionVirtualIP@16._WinStationQuer |
| 1860 | 79 4c 6f 67 6f 6e 43 72 65 64 65 6e 74 69 61 6c 73 57 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 | yLogonCredentialsW@4.__imp__WinS |
| 1880 | 74 61 74 69 6f 6e 51 75 65 72 79 4c 6f 67 6f 6e 43 72 65 64 65 6e 74 69 61 6c 73 57 40 34 00 5f | tationQueryLogonCredentialsW@4._ |
| 18a0 | 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 4c 69 63 65 6e 73 65 40 31 32 00 5f 5f 69 6d 70 5f | WinStationQueryLicense@12.__imp_ |
| 18c0 | 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 4c 69 63 65 6e 73 65 40 31 32 00 5f 57 69 6e 53 | _WinStationQueryLicense@12._WinS |
| 18e0 | 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 32 34 00 5f 5f 69 6d 70 | tationQueryInformationW@24.__imp |
| 1900 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 32 34 | __WinStationQueryInformationW@24 |
| 1920 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 32 34 | ._WinStationQueryInformationA@24 |
| 1940 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 | .__imp__WinStationQueryInformati |
| 1960 | 6f 6e 41 40 32 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 45 6e 66 6f 72 63 65 6d 65 | onA@24._WinStationQueryEnforceme |
| 1980 | 6e 74 43 6f 72 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 | ntCore@24.__imp__WinStationQuery |
| 19a0 | 45 6e 66 6f 72 63 65 6d 65 6e 74 43 6f 72 65 40 32 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 | EnforcementCore@24._WinStationQu |
| 19c0 | 65 72 79 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 | eryCurrentSessionInformation@16. |
| 19e0 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 43 75 72 72 65 6e 74 53 65 73 | __imp__WinStationQueryCurrentSes |
| 1a00 | 73 69 6f 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 | sionInformation@16._WinStationQu |
| 1a20 | 65 72 79 41 6c 6c 6f 77 43 6f 6e 63 75 72 72 65 6e 74 43 6f 6e 6e 65 63 74 69 6f 6e 73 40 30 00 | eryAllowConcurrentConnections@0. |
| 1a40 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 41 6c 6c 6f 77 43 6f 6e 63 75 | __imp__WinStationQueryAllowConcu |
| 1a60 | 72 72 65 6e 74 43 6f 6e 6e 65 63 74 69 6f 6e 73 40 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 50 72 | rrentConnections@0._WinStationPr |
| 1a80 | 65 43 72 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 45 78 | eCreateGlassReplacementSessionEx |
| 1aa0 | 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 50 72 65 43 72 65 61 74 65 47 6c | @16.__imp__WinStationPreCreateGl |
| 1ac0 | 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 45 78 40 31 36 00 5f 57 69 6e 53 | assReplacementSessionEx@16._WinS |
| 1ae0 | 74 61 74 69 6f 6e 50 72 65 43 72 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 | tationPreCreateGlassReplacementS |
| 1b00 | 65 73 73 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 50 72 65 43 72 | ession@12.__imp__WinStationPreCr |
| 1b20 | 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 40 31 32 00 5f | eateGlassReplacementSession@12._ |
| 1b40 | 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 57 40 34 00 5f 5f 69 6d 70 5f 5f 57 | WinStationOpenServerW@4.__imp__W |
| 1b60 | 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 57 40 34 00 5f 57 69 6e 53 74 61 74 69 | inStationOpenServerW@4._WinStati |
| 1b80 | 6f 6e 4f 70 65 6e 53 65 72 76 65 72 45 78 57 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | onOpenServerExW@4.__imp__WinStat |
| 1ba0 | 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 45 78 57 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 | ionOpenServerExW@4._WinStationOp |
| 1bc0 | 65 6e 53 65 72 76 65 72 45 78 41 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f | enServerExA@4.__imp__WinStationO |
| 1be0 | 70 65 6e 53 65 72 76 65 72 45 78 41 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 | penServerExA@4._WinStationOpenSe |
| 1c00 | 72 76 65 72 41 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 | rverA@4.__imp__WinStationOpenSer |
| 1c20 | 76 65 72 41 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 74 73 64 44 65 62 75 67 40 32 30 00 5f | verA@4._WinStationNtsdDebug@20._ |
| 1c40 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 74 73 64 44 65 62 75 67 40 32 30 00 5f 57 69 | _imp__WinStationNtsdDebug@20._Wi |
| 1c60 | 6e 53 74 61 74 69 6f 6e 4e 65 67 6f 74 69 61 74 65 53 65 73 73 69 6f 6e 40 32 34 00 5f 5f 69 6d | nStationNegotiateSession@24.__im |
| 1c80 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 65 67 6f 74 69 61 74 65 53 65 73 73 69 6f 6e 40 32 34 | p__WinStationNegotiateSession@24 |
| 1ca0 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 57 40 31 32 00 | ._WinStationNameFromLogonIdW@12. |
| 1cc0 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 | __imp__WinStationNameFromLogonId |
| 1ce0 | 57 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 41 | W@12._WinStationNameFromLogonIdA |
| 1d00 | 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 | @12.__imp__WinStationNameFromLog |
| 1d20 | 6f 6e 49 64 41 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 52 65 6d | onIdA@12._WinStationIsSessionRem |
| 1d40 | 6f 74 65 61 62 6c 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 | oteable@12.__imp__WinStationIsSe |
| 1d60 | 73 73 69 6f 6e 52 65 6d 6f 74 65 61 62 6c 65 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 | ssionRemoteable@12._WinStationIs |
| 1d80 | 53 65 73 73 69 6f 6e 50 65 72 6d 69 74 74 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 | SessionPermitted@0.__imp__WinSta |
| 1da0 | 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 50 65 72 6d 69 74 74 65 64 40 30 00 5f 57 69 6e 53 74 61 | tionIsSessionPermitted@0._WinSta |
| 1dc0 | 74 69 6f 6e 49 73 48 65 6c 70 41 73 73 69 73 74 61 6e 74 53 65 73 73 69 6f 6e 40 38 00 5f 5f 69 | tionIsHelpAssistantSession@8.__i |
| 1de0 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 48 65 6c 70 41 73 73 69 73 74 61 6e 74 53 65 73 | mp__WinStationIsHelpAssistantSes |
| 1e00 | 73 69 6f 6e 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 43 75 72 72 65 6e 74 53 65 73 73 69 | sion@8._WinStationIsCurrentSessi |
| 1e20 | 6f 6e 52 65 6d 6f 74 65 61 62 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | onRemoteable@4.__imp__WinStation |
| 1e40 | 49 73 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 52 65 6d 6f 74 65 61 62 6c 65 40 34 00 5f 57 69 | IsCurrentSessionRemoteable@4._Wi |
| 1e60 | 6e 53 74 61 74 69 6f 6e 49 73 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 45 6e 61 62 6c 65 64 40 34 | nStationIsChildSessionsEnabled@4 |
| 1e80 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 43 68 69 6c 64 53 65 73 73 69 6f 6e | .__imp__WinStationIsChildSession |
| 1ea0 | 73 45 6e 61 62 6c 65 64 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 6e 73 74 61 6c 6c 4c 69 63 | sEnabled@4._WinStationInstallLic |
| 1ec0 | 65 6e 73 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 6e 73 74 61 6c 6c | ense@12.__imp__WinStationInstall |
| 1ee0 | 4c 69 63 65 6e 73 65 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 50 72 6f | License@12._WinStationGetUserPro |
| 1f00 | 66 69 6c 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 | file@16.__imp__WinStationGetUser |
| 1f20 | 50 72 6f 66 69 6c 65 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 72 65 | Profile@16._WinStationGetUserCre |
| 1f40 | 64 65 6e 74 69 61 6c 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 | dentials@4.__imp__WinStationGetU |
| 1f60 | 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 | serCredentials@4._WinStationGetU |
| 1f80 | 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | serCertificates@4.__imp__WinStat |
| 1fa0 | 69 6f 6e 47 65 74 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 40 34 00 5f 57 69 6e 53 74 61 | ionGetUserCertificates@4._WinSta |
| 1fc0 | 74 69 6f 6e 47 65 74 54 65 72 6d 53 72 76 43 6f 75 6e 74 65 72 73 56 61 6c 75 65 40 31 32 00 5f | tionGetTermSrvCountersValue@12._ |
| 1fe0 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 54 65 72 6d 53 72 76 43 6f 75 6e 74 65 | _imp__WinStationGetTermSrvCounte |
| 2000 | 72 73 56 61 6c 75 65 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 53 65 73 73 69 6f 6e | rsValue@12._WinStationGetSession |
| 2020 | 49 64 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 53 65 73 73 69 | Ids@12.__imp__WinStationGetSessi |
| 2040 | 6f 6e 49 64 73 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 52 65 73 74 72 69 63 74 65 | onIds@12._WinStationGetRestricte |
| 2060 | 64 4c 6f 67 6f 6e 49 6e 66 6f 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 | dLogonInfo@8.__imp__WinStationGe |
| 2080 | 74 52 65 73 74 72 69 63 74 65 64 4c 6f 67 6f 6e 49 6e 66 6f 40 38 00 5f 57 69 6e 53 74 61 74 69 | tRestrictedLogonInfo@8._WinStati |
| 20a0 | 6f 6e 47 65 74 52 65 64 69 72 65 63 74 41 75 74 68 49 6e 66 6f 40 32 34 00 5f 5f 69 6d 70 5f 5f | onGetRedirectAuthInfo@24.__imp__ |
| 20c0 | 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 52 65 64 69 72 65 63 74 41 75 74 68 49 6e 66 6f 40 32 34 | WinStationGetRedirectAuthInfo@24 |
| 20e0 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 72 6f 63 65 73 73 53 69 64 40 32 34 00 5f 5f 69 | ._WinStationGetProcessSid@24.__i |
| 2100 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 72 6f 63 65 73 73 53 69 64 40 32 34 00 5f | mp__WinStationGetProcessSid@24._ |
| 2120 | 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 61 72 65 6e 74 53 65 73 73 69 6f 6e 49 64 40 38 00 5f | WinStationGetParentSessionId@8._ |
| 2140 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 61 72 65 6e 74 53 65 73 73 69 6f 6e | _imp__WinStationGetParentSession |
| 2160 | 49 64 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4d 61 63 68 69 6e 65 50 6f 6c 69 63 79 | Id@8._WinStationGetMachinePolicy |
| 2180 | 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4d 61 63 68 69 6e 65 50 6f | @8.__imp__WinStationGetMachinePo |
| 21a0 | 6c 69 63 79 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 6f 67 67 65 64 4f 6e 43 6f 75 | licy@8._WinStationGetLoggedOnCou |
| 21c0 | 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 6f 67 67 65 64 4f | nt@8.__imp__WinStationGetLoggedO |
| 21e0 | 6e 43 6f 75 6e 74 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 6e 41 64 61 70 74 65 | nCount@8._WinStationGetLanAdapte |
| 2200 | 72 4e 61 6d 65 57 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 | rNameW@24.__imp__WinStationGetLa |
| 2220 | 6e 41 64 61 70 74 65 72 4e 61 6d 65 57 40 32 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c | nAdapterNameW@24._WinStationGetL |
| 2240 | 61 6e 41 64 61 70 74 65 72 4e 61 6d 65 41 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | anAdapterNameA@24.__imp__WinStat |
| 2260 | 69 6f 6e 47 65 74 4c 61 6e 41 64 61 70 74 65 72 4e 61 6d 65 41 40 32 34 00 5f 57 69 6e 53 74 61 | ionGetLanAdapterNameA@24._WinSta |
| 2280 | 74 69 6f 6e 47 65 74 49 6e 69 74 69 61 6c 41 70 70 6c 69 63 61 74 69 6f 6e 40 32 30 00 5f 5f 69 | tionGetInitialApplication@20.__i |
| 22a0 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 49 6e 69 74 69 61 6c 41 70 70 6c 69 63 61 74 | mp__WinStationGetInitialApplicat |
| 22c0 | 69 6f 6e 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 44 65 76 69 63 65 49 64 40 31 36 | ion@20._WinStationGetDeviceId@16 |
| 22e0 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 44 65 76 69 63 65 49 64 40 31 36 | .__imp__WinStationGetDeviceId@16 |
| 2300 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 54 65 72 | ._WinStationGetCurrentSessionTer |
| 2320 | 6d 69 6e 61 6c 4e 61 6d 65 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 | minalName@4.__imp__WinStationGet |
| 2340 | 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 54 65 72 6d 69 6e 61 6c 4e 61 6d 65 40 34 00 5f 57 69 | CurrentSessionTerminalName@4._Wi |
| 2360 | 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 6f 6e 6e 65 63 74 | nStationGetCurrentSessionConnect |
| 2380 | 69 6f 6e 50 72 6f 70 65 72 74 79 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 | ionProperty@8.__imp__WinStationG |
| 23a0 | 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 6f 6e 6e 65 63 74 69 6f 6e 50 72 6f 70 65 72 | etCurrentSessionConnectionProper |
| 23c0 | 74 79 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f | ty@8._WinStationGetCurrentSessio |
| 23e0 | 6e 43 61 70 61 62 69 6c 69 74 69 65 73 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f | nCapabilities@8.__imp__WinStatio |
| 2400 | 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 61 70 61 62 69 6c 69 74 69 65 73 40 38 | nGetCurrentSessionCapabilities@8 |
| 2420 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 50 72 6f 70 65 72 74 | ._WinStationGetConnectionPropert |
| 2440 | 79 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 6f 6e 6e 65 63 74 | y@12.__imp__WinStationGetConnect |
| 2460 | 69 6f 6e 50 72 6f 70 65 72 74 79 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 68 69 | ionProperty@12._WinStationGetChi |
| 2480 | 6c 64 53 65 73 73 69 6f 6e 49 64 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 | ldSessionId@4.__imp__WinStationG |
| 24a0 | 65 74 43 68 69 6c 64 53 65 73 73 69 6f 6e 49 64 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 | etChildSessionId@4._WinStationGe |
| 24c0 | 74 41 6c 6c 55 73 65 72 53 65 73 73 69 6f 6e 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | tAllUserSessions@16.__imp__WinSt |
| 24e0 | 61 74 69 6f 6e 47 65 74 41 6c 6c 55 73 65 72 53 65 73 73 69 6f 6e 73 40 31 36 00 5f 57 69 6e 53 | ationGetAllUserSessions@16._WinS |
| 2500 | 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 69 6f 6e 73 57 40 31 36 00 5f 5f 69 6d 70 5f 5f | tationGetAllSessionsW@16.__imp__ |
| 2520 | 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 69 6f 6e 73 57 40 31 36 00 5f 57 69 | WinStationGetAllSessionsW@16._Wi |
| 2540 | 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 69 6f 6e 73 45 78 40 31 36 00 5f 5f 69 6d | nStationGetAllSessionsEx@16.__im |
| 2560 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 69 6f 6e 73 45 78 40 31 36 | p__WinStationGetAllSessionsEx@16 |
| 2580 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 50 72 6f 63 65 73 73 65 73 40 31 36 00 5f | ._WinStationGetAllProcesses@16._ |
| 25a0 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 50 72 6f 63 65 73 73 65 73 40 | _imp__WinStationGetAllProcesses@ |
| 25c0 | 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 6e 65 72 61 74 65 4c 69 63 65 6e 73 65 40 31 36 | 16._WinStationGenerateLicense@16 |
| 25e0 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 6e 65 72 61 74 65 4c 69 63 65 6e 73 | .__imp__WinStationGenerateLicens |
| 2600 | 65 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 53 65 73 73 69 6f 6e 49 | e@16._WinStationFreeUserSessionI |
| 2620 | 6e 66 6f 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 53 | nfo@8.__imp__WinStationFreeUserS |
| 2640 | 65 73 73 69 6f 6e 49 6e 66 6f 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 | essionInfo@8._WinStationFreeUser |
| 2660 | 43 72 65 64 65 6e 74 69 61 6c 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 | Credentials@4.__imp__WinStationF |
| 2680 | 72 65 65 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e | reeUserCredentials@4._WinStation |
| 26a0 | 46 72 65 65 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 | FreeUserCertificates@4.__imp__Wi |
| 26c0 | 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 40 34 00 5f | nStationFreeUserCertificates@4._ |
| 26e0 | 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 50 72 6f 70 65 72 74 79 56 61 6c 75 65 40 34 00 5f 5f | WinStationFreePropertyValue@4.__ |
| 2700 | 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 50 72 6f 70 65 72 74 79 56 61 6c 75 65 | imp__WinStationFreePropertyValue |
| 2720 | 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 4d 65 6d 6f 72 79 40 34 00 5f 5f 69 6d 70 | @4._WinStationFreeMemory@4.__imp |
| 2740 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 4d 65 6d 6f 72 79 40 34 00 5f 57 69 6e 53 74 61 | __WinStationFreeMemory@4._WinSta |
| 2760 | 74 69 6f 6e 46 72 65 65 47 41 50 4d 65 6d 6f 72 79 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 | tionFreeGAPMemory@12.__imp__WinS |
| 2780 | 74 61 74 69 6f 6e 46 72 65 65 47 41 50 4d 65 6d 6f 72 79 40 31 32 00 5f 57 69 6e 53 74 61 74 69 | tationFreeGAPMemory@12._WinStati |
| 27a0 | 6f 6e 46 72 65 65 45 58 45 43 45 4e 56 44 41 54 41 45 58 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e | onFreeEXECENVDATAEX@8.__imp__Win |
| 27c0 | 53 74 61 74 69 6f 6e 46 72 65 65 45 58 45 43 45 4e 56 44 41 54 41 45 58 40 38 00 5f 57 69 6e 53 | StationFreeEXECENVDATAEX@8._WinS |
| 27e0 | 74 61 74 69 6f 6e 46 72 65 65 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 40 38 00 | tationFreeConsoleNotification@8. |
| 2800 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 43 6f 6e 73 6f 6c 65 4e 6f 74 69 | __imp__WinStationFreeConsoleNoti |
| 2820 | 66 69 63 61 74 69 6f 6e 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 5f | fication@8._WinStationEnumerate_ |
| 2840 | 49 6e 64 65 78 65 64 57 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 | IndexedW@20.__imp__WinStationEnu |
| 2860 | 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 57 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e | merate_IndexedW@20._WinStationEn |
| 2880 | 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 41 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | umerate_IndexedA@20.__imp__WinSt |
| 28a0 | 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 41 40 32 30 00 5f 57 69 6e 53 | ationEnumerate_IndexedA@20._WinS |
| 28c0 | 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 57 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | tationEnumerateW@12.__imp__WinSt |
| 28e0 | 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 57 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e | ationEnumerateW@12._WinStationEn |
| 2900 | 75 6d 65 72 61 74 65 50 72 6f 63 65 73 73 65 73 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 | umerateProcesses@8.__imp__WinSta |
| 2920 | 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 50 72 6f 63 65 73 73 65 73 40 38 00 5f 57 69 6e 53 74 61 | tionEnumerateProcesses@8._WinSta |
| 2940 | 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 4c 69 63 65 6e 73 65 73 40 31 32 00 5f 5f 69 6d 70 5f 5f | tionEnumerateLicenses@12.__imp__ |
| 2960 | 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 4c 69 63 65 6e 73 65 73 40 31 32 00 5f | WinStationEnumerateLicenses@12._ |
| 2980 | 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 45 78 57 40 31 32 00 5f 5f 69 6d 70 5f | WinStationEnumerateExW@12.__imp_ |
| 29a0 | 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 45 78 57 40 31 32 00 5f 57 69 6e 53 | _WinStationEnumerateExW@12._WinS |
| 29c0 | 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 41 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | tationEnumerateA@12.__imp__WinSt |
| 29e0 | 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 41 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e | ationEnumerateA@12._WinStationEn |
| 2a00 | 61 62 6c 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | ableChildSessions@4.__imp__WinSt |
| 2a20 | 61 74 69 6f 6e 45 6e 61 62 6c 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 40 34 00 5f 57 69 6e 53 | ationEnableChildSessions@4._WinS |
| 2a40 | 74 61 74 69 6f 6e 44 69 73 63 6f 6e 6e 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | tationDisconnect@12.__imp__WinSt |
| 2a60 | 61 74 69 6f 6e 44 69 73 63 6f 6e 6e 65 63 74 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 72 | ationDisconnect@12._WinStationCr |
| 2a80 | 65 61 74 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 54 72 61 6e 73 70 6f 72 74 40 38 00 5f 5f 69 6d | eateChildSessionTransport@8.__im |
| 2aa0 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 72 65 61 74 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 54 | p__WinStationCreateChildSessionT |
| 2ac0 | 72 61 6e 73 70 6f 72 74 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 57 40 32 | ransport@8._WinStationConnectW@2 |
| 2ae0 | 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 57 40 32 30 00 5f | 0.__imp__WinStationConnectW@20._ |
| 2b00 | 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 45 78 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e | WinStationConnectEx@8.__imp__Win |
| 2b20 | 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 45 78 40 38 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f | StationConnectEx@8._WinStationCo |
| 2b40 | 6e 6e 65 63 74 43 61 6c 6c 62 61 63 6b 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 | nnectCallback@20.__imp__WinStati |
| 2b60 | 6f 6e 43 6f 6e 6e 65 63 74 43 61 6c 6c 62 61 63 6b 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e | onConnectCallback@20._WinStation |
| 2b80 | 43 6f 6e 6e 65 63 74 41 6e 64 4c 6f 63 6b 44 65 73 6b 74 6f 70 40 38 00 5f 5f 69 6d 70 5f 5f 57 | ConnectAndLockDesktop@8.__imp__W |
| 2ba0 | 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 6e 64 4c 6f 63 6b 44 65 73 6b 74 6f 70 40 38 | inStationConnectAndLockDesktop@8 |
| 2bc0 | 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 | ._WinStationConnectA@20.__imp__W |
| 2be0 | 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 40 32 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e | inStationConnectA@20._WinStation |
| 2c00 | 43 6c 6f 73 65 53 65 72 76 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 | CloseServer@4.__imp__WinStationC |
| 2c20 | 6c 6f 73 65 53 65 72 76 65 72 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 4c 6f 6f | loseServer@4._WinStationCheckLoo |
| 2c40 | 70 42 61 63 6b 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 4c | pBack@16.__imp__WinStationCheckL |
| 2c60 | 6f 6f 70 42 61 63 6b 40 31 36 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 41 63 63 65 73 | oopBack@16._WinStationCheckAcces |
| 2c80 | 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 41 63 63 65 73 | s@12.__imp__WinStationCheckAcces |
| 2ca0 | 73 40 31 32 00 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 6f 61 64 63 61 73 74 53 79 73 74 65 6d 4d | s@12._WinStationBroadcastSystemM |
| 2cc0 | 65 73 73 61 67 65 40 34 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 6f 61 64 | essage@40.__imp__WinStationBroad |
| 2ce0 | 63 61 73 74 53 79 73 74 65 6d 4d 65 73 73 61 67 65 40 34 30 00 5f 57 69 6e 53 74 61 74 69 6f 6e | castSystemMessage@40._WinStation |
| 2d00 | 41 75 74 6f 52 65 63 6f 6e 6e 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f | AutoReconnect@4.__imp__WinStatio |
| 2d20 | 6e 41 75 74 6f 52 65 63 6f 6e 6e 65 63 74 40 34 00 5f 57 69 6e 53 74 61 74 69 6f 6e 41 63 74 69 | nAutoReconnect@4._WinStationActi |
| 2d40 | 76 61 74 65 4c 69 63 65 6e 73 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | vateLicense@16.__imp__WinStation |
| 2d60 | 41 63 74 69 76 61 74 65 4c 69 63 65 6e 73 65 40 31 36 00 5f 57 54 53 55 6e 52 65 67 69 73 74 65 | ActivateLicense@16._WTSUnRegiste |
| 2d80 | 72 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 38 00 5f 5f 69 6d 70 5f 5f | rSessionNotificationEx@8.__imp__ |
| 2da0 | 57 54 53 55 6e 52 65 67 69 73 74 65 72 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e | WTSUnRegisterSessionNotification |
| 2dc0 | 45 78 40 38 00 5f 57 54 53 52 65 67 69 73 74 65 72 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 | Ex@8._WTSRegisterSessionNotifica |
| 2de0 | 74 69 6f 6e 45 78 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 54 53 52 65 67 69 73 74 65 72 53 65 73 73 | tionEx@12.__imp__WTSRegisterSess |
| 2e00 | 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 31 32 00 5f 53 65 72 76 65 72 53 65 74 49 | ionNotificationEx@12._ServerSetI |
| 2e20 | 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 40 31 32 00 5f 5f 69 6d 70 5f | nternetConnectorStatus@12.__imp_ |
| 2e40 | 5f 53 65 72 76 65 72 53 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 | _ServerSetInternetConnectorStatu |
| 2e60 | 73 40 31 32 00 5f 53 65 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e | s@12._ServerQueryInetConnectorIn |
| 2e80 | 66 6f 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 51 75 65 72 79 | formationW@16.__imp__ServerQuery |
| 2ea0 | 49 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 53 65 | InetConnectorInformationW@16._Se |
| 2ec0 | 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f | rverQueryInetConnectorInformatio |
| 2ee0 | 6e 41 40 31 36 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e 6e | nA@16.__imp__ServerQueryInetConn |
| 2f00 | 65 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 31 36 00 5f 53 65 72 76 65 72 4c 69 63 65 | ectorInformationA@16._ServerLice |
| 2f20 | 6e 73 69 6e 67 55 6e 6c 6f 61 64 50 6f 6c 69 63 79 40 38 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 | nsingUnloadPolicy@8.__imp__Serve |
| 2f40 | 72 4c 69 63 65 6e 73 69 6e 67 55 6e 6c 6f 61 64 50 6f 6c 69 63 79 40 38 00 5f 53 65 72 76 65 72 | rLicensingUnloadPolicy@8._Server |
| 2f60 | 4c 69 63 65 6e 73 69 6e 67 53 65 74 50 6f 6c 69 63 79 40 31 32 00 5f 5f 69 6d 70 5f 5f 53 65 72 | LicensingSetPolicy@12.__imp__Ser |
| 2f80 | 76 65 72 4c 69 63 65 6e 73 69 6e 67 53 65 74 50 6f 6c 69 63 79 40 31 32 00 5f 53 65 72 76 65 72 | verLicensingSetPolicy@12._Server |
| 2fa0 | 4c 69 63 65 6e 73 69 6e 67 4f 70 65 6e 57 40 34 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 | LicensingOpenW@4.__imp__ServerLi |
| 2fc0 | 63 65 6e 73 69 6e 67 4f 70 65 6e 57 40 34 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4f | censingOpenW@4._ServerLicensingO |
| 2fe0 | 70 65 6e 41 40 34 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4f 70 65 | penA@4.__imp__ServerLicensingOpe |
| 3000 | 6e 41 40 34 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4c 6f 61 64 50 6f 6c 69 63 79 40 | nA@4._ServerLicensingLoadPolicy@ |
| 3020 | 38 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4c 6f 61 64 50 6f 6c 69 | 8.__imp__ServerLicensingLoadPoli |
| 3040 | 63 79 40 38 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e | cy@8._ServerLicensingGetPolicyIn |
| 3060 | 66 6f 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e | formationW@16.__imp__ServerLicen |
| 3080 | 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 53 65 | singGetPolicyInformationW@16._Se |
| 30a0 | 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f | rverLicensingGetPolicyInformatio |
| 30c0 | 6e 41 40 31 36 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 50 | nA@16.__imp__ServerLicensingGetP |
| 30e0 | 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 31 36 00 5f 53 65 72 76 65 72 4c 69 63 65 | olicyInformationA@16._ServerLice |
| 3100 | 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 40 38 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 | nsingGetPolicy@8.__imp__ServerLi |
| 3120 | 63 65 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 40 38 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 | censingGetPolicy@8._ServerLicens |
| 3140 | 69 6e 67 47 65 74 41 76 61 69 6c 61 62 6c 65 50 6f 6c 69 63 79 49 64 73 40 31 32 00 5f 5f 69 6d | ingGetAvailablePolicyIds@12.__im |
| 3160 | 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 41 76 61 69 6c 61 62 6c 65 50 6f | p__ServerLicensingGetAvailablePo |
| 3180 | 6c 69 63 79 49 64 73 40 31 32 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 46 72 65 65 50 | licyIds@12._ServerLicensingFreeP |
| 31a0 | 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 | olicyInformation@4.__imp__Server |
| 31c0 | 4c 69 63 65 6e 73 69 6e 67 46 72 65 65 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 | LicensingFreePolicyInformation@4 |
| 31e0 | 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 44 65 61 63 74 69 76 61 74 65 43 75 72 72 65 | ._ServerLicensingDeactivateCurre |
| 3200 | 6e 74 50 6f 6c 69 63 79 40 34 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e | ntPolicy@4.__imp__ServerLicensin |
| 3220 | 67 44 65 61 63 74 69 76 61 74 65 43 75 72 72 65 6e 74 50 6f 6c 69 63 79 40 34 00 5f 53 65 72 76 | gDeactivateCurrentPolicy@4._Serv |
| 3240 | 65 72 4c 69 63 65 6e 73 69 6e 67 43 6c 6f 73 65 40 34 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 | erLicensingClose@4.__imp__Server |
| 3260 | 4c 69 63 65 6e 73 69 6e 67 43 6c 6f 73 65 40 34 00 5f 53 65 72 76 65 72 47 65 74 49 6e 74 65 72 | LicensingClose@4._ServerGetInter |
| 3280 | 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 53 65 72 | netConnectorStatus@12.__imp__Ser |
| 32a0 | 76 65 72 47 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 40 31 32 | verGetInternetConnectorStatus@12 |
| 32c0 | 00 5f 52 65 6d 6f 74 65 41 73 73 69 73 74 61 6e 63 65 50 72 65 70 61 72 65 53 79 73 74 65 6d 52 | ._RemoteAssistancePrepareSystemR |
| 32e0 | 65 73 74 6f 72 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 65 6d 6f 74 65 41 73 73 69 73 74 61 6e 63 65 | estore@4.__imp__RemoteAssistance |
| 3300 | 50 72 65 70 61 72 65 53 79 73 74 65 6d 52 65 73 74 6f 72 65 40 34 00 5f 4c 6f 67 6f 6e 49 64 46 | PrepareSystemRestore@4._LogonIdF |
| 3320 | 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 57 40 31 32 00 5f 5f 69 6d 70 5f 5f 4c 6f 67 | romWinStationNameW@12.__imp__Log |
| 3340 | 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 57 40 31 32 00 5f 4c 6f 67 6f | onIdFromWinStationNameW@12._Logo |
| 3360 | 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 41 40 31 32 00 5f 5f 69 6d 70 5f | nIdFromWinStationNameA@12.__imp_ |
| 3380 | 5f 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 41 40 31 32 00 00 | _LogonIdFromWinStationNameA@12.. |
| 33a0 | 64 75 65 65 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebt.o/.......1516161072..0... |
| 33c0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 32 30 20 20 20 20 20 20 20 60 0a 4c 01 06 00 | ..0.....100666..620.......`.L... |
| 33e0 | 00 00 00 00 18 01 00 00 0f 00 00 00 00 00 05 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 3400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ......................0`.data... |
| 3420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 3440 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 3460 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 04 01 00 00 | ......0..idata$4................ |
| 3480 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | ............@.0..idata$5........ |
| 34a0 | 04 00 00 00 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 37 | ....................@.0..idata$7 |
| 34c0 | 00 00 00 00 00 00 00 00 0c 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 34e0 | 00 00 00 00 00 00 00 00 57 49 4e 53 54 41 2e 64 6c 6c 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 | ........WINSTA.dll...file....... |
| 3500 | fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 | ....g.fake...............text... |
| 3520 | 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 | .............................dat |
| 3540 | 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 3560 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 3580 | 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 | .....idata$4.................... |
| 35a0 | 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 04 00 00 00 00 00 | .........idata$5................ |
| 35c0 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 0b 00 | .............idata$7............ |
| 35e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 | ................................ |
| 3600 | 02 00 46 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 | ..F...__C__Users_Peter_Code_wina |
| 3620 | 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f | pi_rs_i686_lib_libwinapi_winsta_ |
| 3640 | 61 5f 69 6e 61 6d 65 00 64 75 65 65 62 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 | a_iname.dueebh.o/.......15161610 |
| 3660 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 33 20 20 20 20 20 | 72..0.....0.....100666..733..... |
| 3680 | 20 20 60 0a 4c 01 06 00 00 00 00 00 36 01 00 00 10 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L.......6............text... |
| 36a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 30 60 | ..............................0` |
| 36c0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 36e0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 3700 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 | ..............0..idata$2........ |
| 3720 | 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 | ....................@.0..idata$5 |
| 3740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 3760 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .idata$4........................ |
| 3780 | 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0......................... |
| 37a0 | 0c 00 00 00 07 00 0c 00 00 00 0f 00 00 00 07 00 10 00 00 00 0d 00 00 00 07 00 2e 66 69 6c 65 00 | ...........................file. |
| 37c0 | 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e | ..........g.fake..............hn |
| 37e0 | 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 | ame.............fthunk.......... |
| 3800 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 | ...text......................... |
| 3820 | 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 | .......data..................... |
| 3840 | 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 | ...........bss.................. |
| 3860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 | ...............idata$2.......... |
| 3880 | 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | ...................idata$4...... |
| 38a0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$5.................... |
| 38c0 | 00 00 04 00 00 00 02 00 00 00 00 00 45 00 00 00 00 00 00 00 00 00 00 00 02 00 87 00 00 00 5f 5f | ............E.................__ |
| 38e0 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 3900 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 5f | rs_i686_lib_libwinapi_winsta_a._ |
| 3920 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| 3940 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 5f 69 6e 61 6d 65 | 686_lib_libwinapi_winsta_a_iname |
| 3960 | 00 0a 64 75 65 65 62 73 30 30 31 36 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00165.o/..1516161072..0. |
| 3980 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 31 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..701.......`.L. |
| 39a0 | 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 39c0 | 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...\.............0`.data. |
| 39e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 3a00 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 3a20 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 3a40 | 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..f.............0..idata$5...... |
| 3a60 | 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...p.............0..idata |
| 3a80 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...z............. |
| 3aa0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| 3ac0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 a5 00 | ...........%.................... |
| 3ae0 | 5f 57 69 6e 53 74 61 74 69 6f 6e 57 61 69 74 46 6f 72 43 6f 6e 6e 65 63 74 00 02 00 00 00 04 00 | _WinStationWaitForConnect....... |
| 3b00 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 3b20 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 3b40 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 3b60 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 3b80 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 3ba0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 21 00 00 00 00 00 00 00 05 00 | ......................!......... |
| 3bc0 | 00 00 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 02 00 85 00 00 00 5f 5f 57 69 6e 53 | ........D.................__WinS |
| 3be0 | 74 61 74 69 6f 6e 57 61 69 74 46 6f 72 43 6f 6e 6e 65 63 74 40 30 00 5f 5f 69 6d 70 5f 5f 5f 57 | tationWaitForConnect@0.__imp___W |
| 3c00 | 69 6e 53 74 61 74 69 6f 6e 57 61 69 74 46 6f 72 43 6f 6e 6e 65 63 74 40 30 00 5f 5f 68 65 61 64 | inStationWaitForConnect@0.__head |
| 3c20 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| 3c40 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 | 686_lib_libwinapi_winsta_a..duee |
| 3c60 | 62 73 30 30 31 36 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 | bs00164.o/..1516161072..0.....0. |
| 3c80 | 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..709.......`.L....... |
| 3ca0 | 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 3cc0 | 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...`.............0`.data....... |
| 3ce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 3d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 3d20 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 | ..0..idata$7............4...j... |
| 3d40 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
| 3d60 | 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...t.............0..idata$4.... |
| 3d80 | 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...~.............0..ida |
| 3da0 | 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
| 3dc0 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 a4 00 5f 57 69 6e 53 74 | .....%...................._WinSt |
| 3de0 | 61 74 69 6f 6e 55 70 64 61 74 65 55 73 65 72 43 6f 6e 66 69 67 00 00 00 02 00 00 00 04 00 00 00 | ationUpdateUserConfig........... |
| 3e00 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 3e20 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 3e40 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 3e60 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 3e80 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 3ea0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 | ....................#........... |
| 3ec0 | 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 5f 57 69 6e 53 74 61 | ......H.................__WinSta |
| 3ee0 | 74 69 6f 6e 55 70 64 61 74 65 55 73 65 72 43 6f 6e 66 69 67 40 34 00 5f 5f 69 6d 70 5f 5f 5f 57 | tionUpdateUserConfig@4.__imp___W |
| 3f00 | 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 55 73 65 72 43 6f 6e 66 69 67 40 34 00 5f 5f 68 65 | inStationUpdateUserConfig@4.__he |
| 3f20 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| 3f40 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| 3f60 | 65 65 62 73 30 30 31 36 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00163.o/..1516161072..0..... |
| 3f80 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..703.......`.L..... |
| 3fa0 | 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 3fc0 | 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...\.............0`.data..... |
| 3fe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 4000 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 4020 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 | ....0..idata$7............4...f. |
| 4040 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 4060 | 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...p.............0..idata$4.. |
| 4080 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...z.............0..i |
| 40a0 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
| 40c0 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 a3 00 5f 57 69 6e | .......%...................._Win |
| 40e0 | 53 74 61 74 69 6f 6e 55 70 64 61 74 65 53 65 74 74 69 6e 67 73 00 02 00 00 00 04 00 00 00 06 00 | StationUpdateSettings........... |
| 4100 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 4120 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 4140 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 4160 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 4180 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 41a0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 | .................."............. |
| 41c0 | 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 02 00 87 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 | ....F.................__WinStati |
| 41e0 | 6f 6e 55 70 64 61 74 65 53 65 74 74 69 6e 67 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 | onUpdateSettings@12.__imp___WinS |
| 4200 | 74 61 74 69 6f 6e 55 70 64 61 74 65 53 65 74 74 69 6e 67 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 | tationUpdateSettings@12.__head_C |
| 4220 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 4240 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 4260 | 30 30 31 36 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00162.o/..1516161072..0.....0... |
| 4280 | 20 20 31 30 30 36 36 36 20 20 37 34 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 | ..100666..749.......`.L......... |
| 42a0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 42c0 | 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..l.............0`.data......... |
| 42e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 4300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 4320 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 | 0..idata$7............4...v..... |
| 4340 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 4360 | 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ................0..idata$4...... |
| 4380 | 00 00 04 00 00 00 3c 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<.................0..idata |
| 43a0 | 24 36 00 00 00 00 00 00 00 00 2c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6........,...@................. |
| 43c0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 a2 00 5f 57 69 6e 53 74 61 74 | ...%...................._WinStat |
| 43e0 | 69 6f 6e 55 70 64 61 74 65 43 6c 69 65 6e 74 43 61 63 68 65 64 43 72 65 64 65 6e 74 69 61 6c 73 | ionUpdateClientCachedCredentials |
| 4400 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 4420 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 4440 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 4460 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 4480 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 44a0 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 31 00 | ..............................1. |
| 44c0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 02 00 a5 00 | ................d............... |
| 44e0 | 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 70 64 61 74 65 43 6c 69 65 6e 74 43 61 63 68 65 64 | ..__WinStationUpdateClientCached |
| 4500 | 43 72 65 64 65 6e 74 69 61 6c 73 40 32 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f | Credentials@28.__imp___WinStatio |
| 4520 | 6e 55 70 64 61 74 65 43 6c 69 65 6e 74 43 61 63 68 65 64 43 72 65 64 65 6e 74 69 61 6c 73 40 32 | nUpdateClientCachedCredentials@2 |
| 4540 | 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 8.__head_C__Users_Peter_Code_win |
| 4560 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 4580 | 5f 61 00 0a 64 75 65 65 62 73 30 30 31 36 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00161.o/..1516161072.. |
| 45a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..711.......`. |
| 45c0 | 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 45e0 | 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...`.............0`.dat |
| 4600 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 4620 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 4640 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 4660 | 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...j.............0..idata$5.... |
| 4680 | 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...t.............0..ida |
| 46a0 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<...~........... |
| 46c0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6............@....... |
| 46e0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 4700 | a1 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 53 65 74 75 70 00 00 | .._WinStationShadowTargetSetup.. |
| 4720 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 4740 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 4760 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 4780 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 47a0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 47c0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 | ............................$... |
| 47e0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 | ..............J................. |
| 4800 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 53 65 74 75 70 40 38 00 | __WinStationShadowTargetSetup@8. |
| 4820 | 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 53 65 | __imp___WinStationShadowTargetSe |
| 4840 | 74 75 70 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | tup@8.__head_C__Users_Peter_Code |
| 4860 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 4880 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 36 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00160.o/..15161610 |
| 48a0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 39 20 20 20 20 20 | 72..0.....0.....100666..699..... |
| 48c0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 48e0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...\.............0` |
| 4900 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 4920 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 4940 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 4960 | 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...f.............0..idata$5 |
| 4980 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...p.............0. |
| 49a0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 | .idata$4............<...z....... |
| 49c0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 49e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 4a00 | 00 00 00 00 a0 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 00 00 00 | ......_WinStationShadowTarget... |
| 4a20 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 4a40 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 4a60 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 4a80 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 4aa0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 4ac0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 | ................................ |
| 4ae0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 83 00 00 00 | ..............B................. |
| 4b00 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 40 34 30 00 5f 5f 69 6d | __WinStationShadowTarget@40.__im |
| 4b20 | 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 40 34 30 00 5f 5f | p___WinStationShadowTarget@40.__ |
| 4b40 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 4b60 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 4b80 | 64 75 65 65 62 73 30 30 31 35 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00159.o/..1516161072..0... |
| 4ba0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..701.......`.L... |
| 4bc0 | 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 4be0 | 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...\.............0`.data... |
| 4c00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 4c20 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 4c40 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 4c60 | 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | f.............0..idata$5........ |
| 4c80 | 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...p.............0..idata$4 |
| 4ca0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...z.............0. |
| 4cc0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 4ce0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 9f 00 5f 57 | .........%...................._W |
| 4d00 | 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 32 00 00 02 00 00 00 04 00 00 00 | inStationShadowTarget2.......... |
| 4d20 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 4d40 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 4d60 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 4d80 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 4da0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 4dc0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 21 00 00 00 00 00 00 00 05 00 00 00 | ....................!........... |
| 4de0 | 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 02 00 85 00 00 00 5f 5f 57 69 6e 53 74 61 | ......D.................__WinSta |
| 4e00 | 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 32 40 34 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e | tionShadowTarget2@48.__imp___Win |
| 4e20 | 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 54 61 72 67 65 74 32 40 34 38 00 5f 5f 68 65 61 64 5f 43 | StationShadowTarget2@48.__head_C |
| 4e40 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 4e60 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 4e80 | 30 30 31 35 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00158.o/..1516161072..0.....0... |
| 4ea0 | 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 | ..100666..713.......`.L......... |
| 4ec0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 4ee0 | 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..`.............0`.data......... |
| 4f00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 4f20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 4f40 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 | 0..idata$7............4...j..... |
| 4f60 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 4f80 | 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..t.............0..idata$4...... |
| 4fa0 | 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...~.............0..idata |
| 4fc0 | 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 4fe0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 9e 00 5f 57 69 6e 53 74 61 74 | ...%...................._WinStat |
| 5000 | 69 6f 6e 53 65 73 73 69 6f 6e 49 6e 69 74 69 61 6c 69 7a 65 64 00 02 00 00 00 04 00 00 00 06 00 | ionSessionInitialized........... |
| 5020 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 5040 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 5060 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 5080 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 50a0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 50c0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................%............. |
| 50e0 | 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 | ....L.................__WinStati |
| 5100 | 6f 6e 53 65 73 73 69 6f 6e 49 6e 69 74 69 61 6c 69 7a 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 5f 57 | onSessionInitialized@0.__imp___W |
| 5120 | 69 6e 53 74 61 74 69 6f 6e 53 65 73 73 69 6f 6e 49 6e 69 74 69 61 6c 69 7a 65 64 40 30 00 5f 5f | inStationSessionInitialized@0.__ |
| 5140 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 5160 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 5180 | 64 75 65 65 62 73 30 30 31 35 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00157.o/..1516161072..0... |
| 51a0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..697.......`.L... |
| 51c0 | 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 51e0 | 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...\.............0`.data... |
| 5200 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 5220 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 5240 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 5260 | 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | f.............0..idata$5........ |
| 5280 | 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...p.............0..idata$4 |
| 52a0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...z.............0. |
| 52c0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 52e0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 9d 00 5f 57 | .........%...................._W |
| 5300 | 69 6e 53 74 61 74 69 6f 6e 52 65 61 64 52 65 67 69 73 74 72 79 00 00 00 02 00 00 00 04 00 00 00 | inStationReadRegistry........... |
| 5320 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 5340 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 5360 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 5380 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 53a0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 53c0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 53e0 | 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 5f 57 69 6e 53 74 61 | ......@.................__WinSta |
| 5400 | 74 69 6f 6e 52 65 61 64 52 65 67 69 73 74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 | tionReadRegistry@4.__imp___WinSt |
| 5420 | 61 74 69 6f 6e 52 65 61 64 52 65 67 69 73 74 72 79 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | ationReadRegistry@4.__head_C__Us |
| 5440 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
| 5460 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 35 | b_libwinapi_winsta_a..dueebs0015 |
| 5480 | 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 6.o/..1516161072..0.....0.....10 |
| 54a0 | 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 | 0666..721.......`.L............. |
| 54c0 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 | .......text...............,...d. |
| 54e0 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 5500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 5520 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 5540 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 | data$7............4...n......... |
| 5560 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 | ....0..idata$5............8...x. |
| 5580 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
| 55a0 | 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<.................0..idata$6.. |
| 55c0 | 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ......"...@....................% |
| 55e0 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 9c 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 | ...................._WinStationR |
| 5600 | 65 49 6e 69 74 69 61 6c 69 7a 65 53 65 63 75 72 69 74 79 00 00 00 02 00 00 00 04 00 00 00 06 00 | eInitializeSecurity............. |
| 5620 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 5640 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 5660 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 5680 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 56a0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 56c0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................'............. |
| 56e0 | 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 91 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 | ....P.................__WinStati |
| 5700 | 6f 6e 52 65 49 6e 69 74 69 61 6c 69 7a 65 53 65 63 75 72 69 74 79 40 34 00 5f 5f 69 6d 70 5f 5f | onReInitializeSecurity@4.__imp__ |
| 5720 | 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 49 6e 69 74 69 61 6c 69 7a 65 53 65 63 75 72 69 74 79 40 | _WinStationReInitializeSecurity@ |
| 5740 | 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 4.__head_C__Users_Peter_Code_win |
| 5760 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 5780 | 5f 61 00 0a 64 75 65 65 62 73 30 30 31 35 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00155.o/..1516161072.. |
| 57a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..721.......`. |
| 57c0 | 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 57e0 | 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...d.............0`.dat |
| 5800 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 5820 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 5840 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 5860 | 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...n.............0..idata$5.... |
| 5880 | 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...x.............0..ida |
| 58a0 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<............... |
| 58c0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6........"...@....... |
| 58e0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 5900 | 9b 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 73 73 69 6f 6e 44 69 72 65 63 74 6f 72 | .._WinStationOpenSessionDirector |
| 5920 | 79 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | y............................... |
| 5940 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 5960 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 5980 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 59a0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 59c0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 59e0 | 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 | '.................P............. |
| 5a00 | 91 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 73 73 69 6f 6e 44 69 72 65 63 | ....__WinStationOpenSessionDirec |
| 5a20 | 74 6f 72 79 40 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 73 | tory@8.__imp___WinStationOpenSes |
| 5a40 | 73 69 6f 6e 44 69 72 65 63 74 6f 72 79 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | sionDirectory@8.__head_C__Users_ |
| 5a60 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 5a80 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 35 34 2e 6f 2f | bwinapi_winsta_a..dueebs00154.o/ |
| 5aa0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 5ac0 | 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 | ..709.......`.L................. |
| 5ae0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 | ...text...............,...`..... |
| 5b00 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 5b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 5b40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 5b60 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...j............. |
| 5b80 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 | 0..idata$5............8...t..... |
| 5ba0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 5bc0 | 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..~.............0..idata$6...... |
| 5be0 | 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 5c00 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 9a 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 | ................_WinStationNotif |
| 5c20 | 79 4e 65 77 53 65 73 73 69 6f 6e 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | yNewSession..................... |
| 5c40 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 5c60 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 5c80 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 5ca0 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 5cc0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 5ce0 | 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 | ..........#.................H... |
| 5d00 | 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 | ..............__WinStationNotify |
| 5d20 | 4e 65 77 53 65 73 73 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e | NewSession@8.__imp___WinStationN |
| 5d40 | 6f 74 69 66 79 4e 65 77 53 65 73 73 69 6f 6e 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | otifyNewSession@8.__head_C__User |
| 5d60 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 5d80 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 35 33 2e | libwinapi_winsta_a..dueebs00153. |
| 5da0 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 5dc0 | 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 | 66..697.......`.L............... |
| 5de0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 | .....text...............,...\... |
| 5e00 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 5e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 5e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 5e60 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...f........... |
| 5e80 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 | ..0..idata$5............8...p... |
| 5ea0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 5ec0 | 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...z.............0..idata$6.... |
| 5ee0 | 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
| 5f00 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 99 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 | .................._WinStationNot |
| 5f20 | 69 66 79 4c 6f 67 6f 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 | ifyLogon........................ |
| 5f40 | 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 5f60 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 5f80 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 5fa0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 5fc0 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 5fe0 | 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 | ..........................@..... |
| 6000 | 00 00 00 00 00 00 02 00 81 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c 6f | ............__WinStationNotifyLo |
| 6020 | 67 6f 6e 40 33 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c | gon@32.__imp___WinStationNotifyL |
| 6040 | 6f 67 6f 6e 40 33 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | ogon@32.__head_C__Users_Peter_Co |
| 6060 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
| 6080 | 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 35 32 2e 6f 2f 20 20 31 35 31 36 31 36 | winsta_a..dueebs00152.o/..151616 |
| 60a0 | 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 | 1072..0.....0.....100666..697... |
| 60c0 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L....................text. |
| 60e0 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...\............. |
| 6100 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 6120 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 6140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 6160 | 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...f.............0..idata |
| 6180 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...p............. |
| 61a0 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 | 0..idata$4............<...z..... |
| 61c0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 | ........0..idata$6............@. |
| 61e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 6200 | 00 00 00 00 00 00 98 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c 6f 67 6f 66 66 00 | ........_WinStationNotifyLogoff. |
| 6220 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 6240 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 6260 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 6280 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 62a0 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 62c0 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 | ................................ |
| 62e0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 | ................@............... |
| 6300 | 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c 6f 67 6f 66 66 40 30 00 5f 5f 69 | ..__WinStationNotifyLogoff@0.__i |
| 6320 | 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 4c 6f 67 6f 66 66 40 30 00 5f 5f | mp___WinStationNotifyLogoff@0.__ |
| 6340 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 6360 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 6380 | 64 75 65 65 62 73 30 30 31 35 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00151.o/..1516161072..0... |
| 63a0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..721.......`.L... |
| 63c0 | 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 63e0 | 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...d.............0`.data... |
| 6400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 6420 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 6440 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 6460 | 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | n.............0..idata$5........ |
| 6480 | 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...x.............0..idata$4 |
| 64a0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<.................0. |
| 64c0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6........"...@........... |
| 64e0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 97 00 5f 57 | .........%...................._W |
| 6500 | 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 44 69 73 63 6f 6e 6e 65 63 74 50 69 70 65 00 00 00 | inStationNotifyDisconnectPipe... |
| 6520 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 6540 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 6560 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 6580 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 65a0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 65c0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 27 00 00 00 | ............................'... |
| 65e0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 91 00 00 00 | ..............P................. |
| 6600 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 44 69 73 63 6f 6e 6e 65 63 74 50 69 70 65 | __WinStationNotifyDisconnectPipe |
| 6620 | 40 30 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 6f 74 69 66 79 44 69 73 63 6f | @0.__imp___WinStationNotifyDisco |
| 6640 | 6e 6e 65 63 74 50 69 70 65 40 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | nnectPipe@0.__head_C__Users_Pete |
| 6660 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 6680 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 35 30 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00150.o/..15 |
| 66a0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 | 16161072..0.....0.....100666..71 |
| 66c0 | 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 5.......`.L....................t |
| 66e0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| 6700 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 6720 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 6740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 6760 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| 6780 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| 67a0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 | ....0..idata$4............<...~. |
| 67c0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 | ............0..idata$6.......... |
| 67e0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 6800 | 00 00 00 00 00 00 00 00 00 00 96 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 70 70 6c 69 63 | ............_WinStationGetApplic |
| 6820 | 61 74 69 6f 6e 49 6e 66 6f 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | ationInfo....................... |
| 6840 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 6860 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 6880 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 68a0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 68c0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 68e0 | 02 00 00 00 00 00 26 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4e 00 00 00 00 00 00 00 | ......&.................N....... |
| 6900 | 00 00 00 00 02 00 8f 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 70 70 6c 69 63 61 | ..........__WinStationGetApplica |
| 6920 | 74 69 6f 6e 49 6e 66 6f 40 31 36 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 | tionInfo@16.__imp___WinStationGe |
| 6940 | 74 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 66 6f 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | tApplicationInfo@16.__head_C__Us |
| 6960 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
| 6980 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 34 | b_libwinapi_winsta_a..dueebs0014 |
| 69a0 | 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 9.o/..1516161072..0.....0.....10 |
| 69c0 | 30 36 36 36 20 20 37 33 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 | 0666..739.......`.L............. |
| 69e0 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 | .......text...............,...h. |
| 6a00 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 6a20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 6a40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 6a60 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 | data$7............4...r......... |
| 6a80 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 | ....0..idata$5............8...|. |
| 6aa0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
| 6ac0 | 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<.................0..idata$6.. |
| 6ae0 | 00 00 00 00 00 00 28 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ......(...@....................% |
| 6b00 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 95 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 | ...................._WinStationF |
| 6b20 | 55 53 43 61 6e 52 65 6d 6f 74 65 55 73 65 72 44 69 73 63 6f 6e 6e 65 63 74 00 02 00 00 00 04 00 | USCanRemoteUserDisconnect....... |
| 6b40 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 6b60 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 6b80 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 6ba0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 6bc0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 6be0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 05 00 | ................................ |
| 6c00 | 00 00 02 00 00 00 00 00 5e 00 00 00 00 00 00 00 00 00 00 00 02 00 9f 00 00 00 5f 5f 57 69 6e 53 | ........^.................__WinS |
| 6c20 | 74 61 74 69 6f 6e 46 55 53 43 61 6e 52 65 6d 6f 74 65 55 73 65 72 44 69 73 63 6f 6e 6e 65 63 74 | tationFUSCanRemoteUserDisconnect |
| 6c40 | 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 55 53 43 61 6e 52 65 6d 6f | @12.__imp___WinStationFUSCanRemo |
| 6c60 | 74 65 55 73 65 72 44 69 73 63 6f 6e 6e 65 63 74 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | teUserDisconnect@12.__head_C__Us |
| 6c80 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
| 6ca0 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 34 | b_libwinapi_winsta_a..dueebs0014 |
| 6cc0 | 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 8.o/..1516161072..0.....0.....10 |
| 6ce0 | 30 36 36 36 20 20 37 33 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 | 0666..733.......`.L............. |
| 6d00 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 | .......text...............,...h. |
| 6d20 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 6d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 6d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 6d80 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 | data$7............4...r......... |
| 6da0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 | ....0..idata$5............8...|. |
| 6dc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
| 6de0 | 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<.................0..idata$6.. |
| 6e00 | 00 00 00 00 00 00 26 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ......&...@....................% |
| 6e20 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 94 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 | ...................._WinStationC |
| 6e40 | 68 65 63 6b 46 6f 72 41 70 70 6c 69 63 61 74 69 6f 6e 4e 61 6d 65 00 00 00 00 02 00 00 00 04 00 | heckForApplicationName.......... |
| 6e60 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 6e80 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 6ea0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 6ec0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 6ee0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 6f00 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2b 00 00 00 00 00 00 00 05 00 | ......................+......... |
| 6f20 | 00 00 02 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 02 00 99 00 00 00 5f 5f 57 69 6e 53 | ........X.................__WinS |
| 6f40 | 74 61 74 69 6f 6e 43 68 65 63 6b 46 6f 72 41 70 70 6c 69 63 61 74 69 6f 6e 4e 61 6d 65 40 34 38 | tationCheckForApplicationName@48 |
| 6f60 | 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 46 6f 72 41 70 70 6c 69 | .__imp___WinStationCheckForAppli |
| 6f80 | 63 61 74 69 6f 6e 4e 61 6d 65 40 34 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | cationName@48.__head_C__Users_Pe |
| 6fa0 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 6fc0 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 34 37 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00147.o/.. |
| 6fe0 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 7000 | 36 38 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 | 687.......`.L................... |
| 7020 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 | .text...............,...X....... |
| 7040 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 7060 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 7080 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 70a0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...b.............0. |
| 70c0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 | .idata$5............8...l....... |
| 70e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 7100 | 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | v.............0..idata$6........ |
| 7120 | 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....@....................%...... |
| 7140 | 00 00 00 00 00 00 00 00 00 00 00 00 93 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 | .............._WinStationCallbac |
| 7160 | 6b 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | k............................... |
| 7180 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 71a0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 71c0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 71e0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 7200 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 7220 | 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................:............. |
| 7240 | 7b 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32 00 5f 5f 69 6d | {...__WinStationCallback@12.__im |
| 7260 | 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32 00 5f 5f 68 65 61 64 | p___WinStationCallback@12.__head |
| 7280 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| 72a0 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 | 686_lib_libwinapi_winsta_a..duee |
| 72c0 | 62 73 30 30 31 34 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 | bs00146.o/..1516161072..0.....0. |
| 72e0 | 20 20 20 20 31 30 30 36 36 36 20 20 36 39 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..691.......`.L....... |
| 7300 | 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 7320 | 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...X.............0`.data....... |
| 7340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 7360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 7380 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 | ..0..idata$7............4...b... |
| 73a0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
| 73c0 | 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...l.............0..idata$4.... |
| 73e0 | 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...v.............0..ida |
| 7400 | 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
| 7420 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 92 00 5f 57 69 6e 53 74 | .....%...................._WinSt |
| 7440 | 61 74 69 6f 6e 42 72 65 61 6b 50 6f 69 6e 74 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | ationBreakPoint................. |
| 7460 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 7480 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 74a0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 74c0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 74e0 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 7500 | 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3e 00 | ..............................>. |
| 7520 | 00 00 00 00 00 00 00 00 00 00 02 00 7f 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 65 61 | ................__WinStationBrea |
| 7540 | 6b 50 6f 69 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 65 61 | kPoint@12.__imp___WinStationBrea |
| 7560 | 6b 50 6f 69 6e 74 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | kPoint@12.__head_C__Users_Peter_ |
| 7580 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 75a0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 34 35 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00145.o/..1516 |
| 75c0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 37 20 | 161072..0.....0.....100666..687. |
| 75e0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 7600 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 | t...............,...X........... |
| 7620 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 7640 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 7660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 7680 | 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...b.............0..ida |
| 76a0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...l........... |
| 76c0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 | ..0..idata$4............<...v... |
| 76e0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 | ..........0..idata$6............ |
| 7700 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 7720 | 00 00 00 00 00 00 00 00 91 00 5f 57 69 6e 53 74 61 74 69 6f 6e 42 65 65 70 4f 70 65 6e 00 00 00 | .........._WinStationBeepOpen... |
| 7740 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 7760 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 7780 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 77a0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 77c0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 77e0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 | ................................ |
| 7800 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 7b 00 00 00 | ..............:.............{... |
| 7820 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 42 65 65 70 4f 70 65 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f | __WinStationBeepOpen@12.__imp___ |
| 7840 | 57 69 6e 53 74 61 74 69 6f 6e 42 65 65 70 4f 70 65 6e 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f | WinStationBeepOpen@12.__head_C__ |
| 7860 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 7880 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 78a0 | 31 34 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 144.o/..1516161072..0.....0..... |
| 78c0 | 31 30 30 36 36 36 20 20 37 30 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 | 100666..701.......`.L........... |
| 78e0 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 7900 | 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | \.............0`.data........... |
| 7920 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 7940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 7960 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 | .idata$7............4...f....... |
| 7980 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 79a0 | 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | p.............0..idata$4........ |
| 79c0 | 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<...z.............0..idata$6 |
| 79e0 | 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............@................... |
| 7a00 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 90 00 5f 57 69 6e 53 74 61 74 69 6f | .%...................._WinStatio |
| 7a20 | 6e 41 6e 6e 6f 79 61 6e 63 65 50 6f 70 75 70 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | nAnnoyancePopup................. |
| 7a40 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 7a60 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 7a80 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 7aa0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 7ac0 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 7ae0 | 00 00 01 00 00 00 02 00 00 00 00 00 21 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 | ............!.................D. |
| 7b00 | 00 00 00 00 00 00 00 00 00 00 02 00 85 00 00 00 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 41 6e 6e 6f | ................__WinStationAnno |
| 7b20 | 79 61 6e 63 65 50 6f 70 75 70 40 38 00 5f 5f 69 6d 70 5f 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 41 | yancePopup@8.__imp___WinStationA |
| 7b40 | 6e 6e 6f 79 61 6e 63 65 50 6f 70 75 70 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | nnoyancePopup@8.__head_C__Users_ |
| 7b60 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 7b80 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 34 33 2e 6f 2f | bwinapi_winsta_a..dueebs00143.o/ |
| 7ba0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 7bc0 | 20 20 36 37 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 | ..677.......`.L.......|......... |
| 7be0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 | ...text...............,...T..... |
| 7c00 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 7c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 7c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 7c60 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...^............. |
| 7c80 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 | 0..idata$5............8...h..... |
| 7ca0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 7cc0 | 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..r.............0..idata$6...... |
| 7ce0 | 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 7d00 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 8f 00 5f 4e 57 4c 6f 67 6f 6e 53 65 74 41 64 6d 69 6e | ................_NWLogonSetAdmin |
| 7d20 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 7d40 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 7d60 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 7d80 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 7da0 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 7dc0 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 | ................................ |
| 7de0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 75 00 | ................4.............u. |
| 7e00 | 00 00 5f 5f 4e 57 4c 6f 67 6f 6e 53 65 74 41 64 6d 69 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 5f 4e | ..__NWLogonSetAdmin@12.__imp___N |
| 7e20 | 57 4c 6f 67 6f 6e 53 65 74 41 64 6d 69 6e 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | WLogonSetAdmin@12.__head_C__User |
| 7e40 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 7e60 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 34 32 2e | libwinapi_winsta_a..dueebs00142. |
| 7e80 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 7ea0 | 36 36 20 20 36 38 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 | 66..685.......`.L............... |
| 7ec0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 | .....text...............,...X... |
| 7ee0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 7f00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 7f20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 7f40 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...b........... |
| 7f60 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 | ..0..idata$5............8...l... |
| 7f80 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 7fa0 | 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...v.............0..idata$6.... |
| 7fc0 | 00 00 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
| 7fe0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 8e 00 5f 4e 57 4c 6f 67 6f 6e 51 75 65 72 79 41 | .................._NWLogonQueryA |
| 8000 | 64 6d 69 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | dmin............................ |
| 8020 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 8040 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 8060 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 8080 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 80a0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 80c0 | 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 | ......................8......... |
| 80e0 | 00 00 02 00 79 00 00 00 5f 5f 4e 57 4c 6f 67 6f 6e 51 75 65 72 79 41 64 6d 69 6e 40 31 32 00 5f | ....y...__NWLogonQueryAdmin@12._ |
| 8100 | 5f 69 6d 70 5f 5f 5f 4e 57 4c 6f 67 6f 6e 51 75 65 72 79 41 64 6d 69 6e 40 31 32 00 5f 5f 68 65 | _imp___NWLogonQueryAdmin@12.__he |
| 8120 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| 8140 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| 8160 | 65 65 62 73 30 30 31 34 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00141.o/..1516161072..0..... |
| 8180 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..703.......`.L..... |
| 81a0 | 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 81c0 | 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...\.............0`.data..... |
| 81e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 8200 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 8220 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 | ....0..idata$7............4...f. |
| 8240 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 8260 | 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...p.............0..idata$4.. |
| 8280 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...z.............0..i |
| 82a0 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
| 82c0 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 8d 00 57 69 6e 53 | .......%....................WinS |
| 82e0 | 74 61 74 69 6f 6e 57 61 69 74 53 79 73 74 65 6d 45 76 65 6e 74 00 02 00 00 00 04 00 00 00 06 00 | tationWaitSystemEvent........... |
| 8300 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 8320 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 8340 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 8360 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 8380 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 83a0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 | .................."............. |
| 83c0 | 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....F................._WinStatio |
| 83e0 | 6e 57 61 69 74 53 79 73 74 65 6d 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | nWaitSystemEvent@12.__imp__WinSt |
| 8400 | 61 74 69 6f 6e 57 61 69 74 53 79 73 74 65 6d 45 76 65 6e 74 40 31 32 00 5f 5f 68 65 61 64 5f 43 | ationWaitSystemEvent@12.__head_C |
| 8420 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 8440 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 8460 | 30 30 31 34 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00140.o/..1516161072..0.....0... |
| 8480 | 20 20 31 30 30 36 36 36 20 20 36 39 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 | ..100666..699.......`.L......... |
| 84a0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 84c0 | 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..\.............0`.data......... |
| 84e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 8500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 8520 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 | 0..idata$7............4...f..... |
| 8540 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 8560 | 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..p.............0..idata$4...... |
| 8580 | 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...z.............0..idata |
| 85a0 | 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 85c0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 8c 00 57 69 6e 53 74 61 74 69 | ...%....................WinStati |
| 85e0 | 6f 6e 56 69 72 74 75 61 6c 4f 70 65 6e 45 78 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | onVirtualOpenEx................. |
| 8600 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 8620 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 8640 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 8660 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 8680 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 86a0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 86c0 | 42 00 00 00 00 00 00 00 00 00 00 00 02 00 83 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 56 69 72 | B................._WinStationVir |
| 86e0 | 74 75 61 6c 4f 70 65 6e 45 78 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 56 | tualOpenEx@16.__imp__WinStationV |
| 8700 | 69 72 74 75 61 6c 4f 70 65 6e 45 78 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | irtualOpenEx@16.__head_C__Users_ |
| 8720 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 8740 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 39 2e 6f 2f | bwinapi_winsta_a..dueebs00139.o/ |
| 8760 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 8780 | 20 20 36 39 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 | ..691.......`.L................. |
| 87a0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 | ...text...............,...X..... |
| 87c0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 87e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 8800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 8820 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...b............. |
| 8840 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 | 0..idata$5............8...l..... |
| 8860 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 8880 | 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..v.............0..idata$6...... |
| 88a0 | 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 88c0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 8b 00 57 69 6e 53 74 61 74 69 6f 6e 56 69 72 74 75 61 | ................WinStationVirtua |
| 88e0 | 6c 4f 70 65 6e 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | lOpen........................... |
| 8900 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 8920 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 8940 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 8960 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 8980 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 89a0 | 00 00 1e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 | ....................>........... |
| 89c0 | 02 00 7f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 56 69 72 74 75 61 6c 4f 70 65 6e 40 31 32 00 | ......_WinStationVirtualOpen@12. |
| 89e0 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 56 69 72 74 75 61 6c 4f 70 65 6e 40 31 32 00 | __imp__WinStationVirtualOpen@12. |
| 8a00 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 8a20 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 8a40 | 00 0a 64 75 65 65 62 73 30 30 31 33 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00138.o/..1516161072..0. |
| 8a60 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 37 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..677.......`.L. |
| 8a80 | 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ......|............text......... |
| 8aa0 | 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...T.............0`.data. |
| 8ac0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 8ae0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 8b00 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 8b20 | 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..^.............0..idata$5...... |
| 8b40 | 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...h.............0..idata |
| 8b60 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...r............. |
| 8b80 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| 8ba0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 8a 00 | ...........%.................... |
| 8bc0 | 57 69 6e 53 74 61 74 69 6f 6e 56 65 72 69 66 79 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | WinStationVerify................ |
| 8be0 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 8c00 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 8c20 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 8c40 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 8c60 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 8c80 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 8ca0 | 34 00 00 00 00 00 00 00 00 00 00 00 02 00 75 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 56 65 72 | 4.............u..._WinStationVer |
| 8cc0 | 69 66 79 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 56 65 72 69 66 79 40 32 | ify@24.__imp__WinStationVerify@2 |
| 8ce0 | 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 4.__head_C__Users_Peter_Code_win |
| 8d00 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 8d20 | 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00137.o/..1516161072.. |
| 8d40 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..721.......`. |
| 8d60 | 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 8d80 | 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...d.............0`.dat |
| 8da0 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 8dc0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 8de0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 8e00 | 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...n.............0..idata$5.... |
| 8e20 | 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...x.............0..ida |
| 8e40 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<............... |
| 8e60 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6........"...@....... |
| 8e80 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 8ea0 | 89 00 57 69 6e 53 74 61 74 69 6f 6e 55 73 65 72 4c 6f 67 69 6e 41 63 63 65 73 73 43 68 65 63 6b | ..WinStationUserLoginAccessCheck |
| 8ec0 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 8ee0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 8f00 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 8f20 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 8f40 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 8f60 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 8f80 | 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 | '.................P............. |
| 8fa0 | 91 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 55 73 65 72 4c 6f 67 69 6e 41 63 63 65 73 73 43 68 | ...._WinStationUserLoginAccessCh |
| 8fc0 | 65 63 6b 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 73 65 72 4c 6f 67 69 | eck@16.__imp__WinStationUserLogi |
| 8fe0 | 6e 41 63 63 65 73 73 43 68 65 63 6b 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | nAccessCheck@16.__head_C__Users_ |
| 9000 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 9020 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 36 2e 6f 2f | bwinapi_winsta_a..dueebs00136.o/ |
| 9040 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 9060 | 20 20 37 33 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 | ..737.......`.L................. |
| 9080 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 | ...text...............,...h..... |
| 90a0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 90c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 90e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 9100 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...r............. |
| 9120 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 | 0..idata$5............8...|..... |
| 9140 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 9160 | 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ................0..idata$6...... |
| 9180 | 00 00 28 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ..(...@....................%.... |
| 91a0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 88 00 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 65 67 69 | ................WinStationUnRegi |
| 91c0 | 73 74 65 72 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 00 02 00 00 00 04 00 00 00 06 00 | sterNotificationEvent........... |
| 91e0 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 9200 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 9220 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 9240 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 9260 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 9280 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................-............. |
| 92a0 | 00 00 00 00 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....\................._WinStatio |
| 92c0 | 6e 55 6e 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 34 00 5f | nUnRegisterNotificationEvent@4._ |
| 92e0 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 | _imp__WinStationUnRegisterNotifi |
| 9300 | 63 61 74 69 6f 6e 45 76 65 6e 74 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | cationEvent@4.__head_C__Users_Pe |
| 9320 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 9340 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 35 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00135.o/.. |
| 9360 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 9380 | 37 34 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 01 | 745.......`.L................... |
| 93a0 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 | .text...............,...l....... |
| 93c0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 93e0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 9400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 9420 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...v.............0. |
| 9440 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 | .idata$5............8........... |
| 9460 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 9480 | 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 94a0 | 2a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | *...@....................%...... |
| 94c0 | 00 00 00 00 00 00 00 00 00 00 00 00 87 00 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 65 67 69 73 74 | ..............WinStationUnRegist |
| 94e0 | 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 00 00 00 02 00 00 00 04 00 00 00 | erConsoleNotification........... |
| 9500 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 9520 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 9540 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 9560 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 9580 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 95a0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2f 00 00 00 00 00 00 00 05 00 00 00 | ..................../........... |
| 95c0 | 02 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 02 00 a1 00 00 00 5f 57 69 6e 53 74 61 74 | ......`................._WinStat |
| 95e0 | 69 6f 6e 55 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e | ionUnRegisterConsoleNotification |
| 9600 | 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 55 6e 52 65 67 69 73 74 65 72 43 6f | @8.__imp__WinStationUnRegisterCo |
| 9620 | 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | nsoleNotification@8.__head_C__Us |
| 9640 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
| 9660 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 | b_libwinapi_winsta_a..dueebs0013 |
| 9680 | 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 4.o/..1516161072..0.....0.....10 |
| 96a0 | 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 | 0666..709.......`.L............. |
| 96c0 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 | .......text...............,...`. |
| 96e0 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 9700 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 9720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 9740 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 | data$7............4...j......... |
| 9760 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 | ....0..idata$5............8...t. |
| 9780 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
| 97a0 | 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<...~.............0..idata$6.. |
| 97c0 | 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........@....................% |
| 97e0 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 86 00 57 69 6e 53 74 61 74 69 6f 6e 54 65 | ....................WinStationTe |
| 9800 | 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | rminateProcess.................. |
| 9820 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 9840 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 9860 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 9880 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 98a0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 98c0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ..............#................. |
| 98e0 | 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 54 65 72 | H................._WinStationTer |
| 9900 | 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 | minateProcess@12.__imp__WinStati |
| 9920 | 6f 6e 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f | onTerminateProcess@12.__head_C__ |
| 9940 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 9960 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 9980 | 31 33 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 133.o/..1516161072..0.....0..... |
| 99a0 | 31 30 30 36 36 36 20 20 37 35 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 98 01 00 00 | 100666..755.......`.L........... |
| 99c0 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 99e0 | 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | p.............0`.data........... |
| 9a00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 9a20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 9a40 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 00 00 00 00 00 00 | .idata$7............4...z....... |
| 9a60 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 9a80 | 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | ..............0..idata$4........ |
| 9aa0 | 04 00 00 00 3c 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<.................0..idata$6 |
| 9ac0 | 00 00 00 00 00 00 00 00 2e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............@................... |
| 9ae0 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 85 00 57 69 6e 53 74 61 74 69 6f 6e | .%....................WinStation |
| 9b00 | 54 65 72 6d 69 6e 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e | TerminateGlassReplacementSession |
| 9b20 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 9b40 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 9b60 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 9b80 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 9ba0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 9bc0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 9be0 | 32 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 02 00 | 2.................f............. |
| 9c00 | a7 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 54 65 72 6d 69 6e 61 74 65 47 6c 61 73 73 52 65 70 | ...._WinStationTerminateGlassRep |
| 9c20 | 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | lacementSession@4.__imp__WinStat |
| 9c40 | 69 6f 6e 54 65 72 6d 69 6e 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 | ionTerminateGlassReplacementSess |
| 9c60 | 69 6f 6e 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | ion@4.__head_C__Users_Peter_Code |
| 9c80 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 9ca0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00132.o/..15161610 |
| 9cc0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 | 72..0.....0.....100666..711..... |
| 9ce0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 9d00 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...`.............0` |
| 9d20 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 9d40 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 9d60 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 9d80 | 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...j.............0..idata$5 |
| 9da0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...t.............0. |
| 9dc0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 | .idata$4............<...~....... |
| 9de0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 9e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 9e20 | 00 00 00 00 84 00 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 6f 77 6e 57 61 | ......WinStationSystemShutdownWa |
| 9e40 | 69 74 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | it.............................. |
| 9e60 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 9e80 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 9ea0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 9ec0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 9ee0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 9f00 | 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 | $.................J............. |
| 9f20 | 8b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 6f 77 6e 57 61 69 | ...._WinStationSystemShutdownWai |
| 9f40 | 74 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 | t@8.__imp__WinStationSystemShutd |
| 9f60 | 6f 77 6e 57 61 69 74 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ownWait@8.__head_C__Users_Peter_ |
| 9f80 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 9fa0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 33 31 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00131.o/..1516 |
| 9fc0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 | 161072..0.....0.....100666..721. |
| 9fe0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| a000 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 | t...............,...d........... |
| a020 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| a040 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| a060 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| a080 | 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...n.............0..ida |
| a0a0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...x........... |
| a0c0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 | ..0..idata$4............<....... |
| a0e0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 | ..........0..idata$6........"... |
| a100 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| a120 | 00 00 00 00 00 00 00 00 83 00 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 74 64 6f | ..........WinStationSystemShutdo |
| a140 | 77 6e 53 74 61 72 74 65 64 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 | wnStarted....................... |
| a160 | 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| a180 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| a1a0 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| a1c0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| a1e0 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| a200 | 00 00 02 00 00 00 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 | ........'.................P..... |
| a220 | 00 00 00 00 00 00 02 00 91 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 79 73 74 65 6d 53 68 75 | ............_WinStationSystemShu |
| a240 | 74 64 6f 77 6e 53 74 61 72 74 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | tdownStarted@0.__imp__WinStation |
| a260 | 53 79 73 74 65 6d 53 68 75 74 64 6f 77 6e 53 74 61 72 74 65 64 40 30 00 5f 5f 68 65 61 64 5f 43 | SystemShutdownStarted@0.__head_C |
| a280 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| a2a0 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| a2c0 | 30 30 31 33 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00130.o/..1516161072..0.....0... |
| a2e0 | 20 20 31 30 30 36 36 36 20 20 37 32 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 | ..100666..725.......`.L......... |
| a300 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| a320 | 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..d.............0`.data......... |
| a340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| a360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| a380 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 | 0..idata$7............4...n..... |
| a3a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| a3c0 | 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..x.............0..idata$4...... |
| a3e0 | 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<.................0..idata |
| a400 | 24 36 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6........$...@................. |
| a420 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 82 00 57 69 6e 53 74 61 74 69 | ...%....................WinStati |
| a440 | 6f 6e 53 77 69 74 63 68 54 6f 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 00 02 00 00 00 04 00 | onSwitchToServicesSession....... |
| a460 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| a480 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| a4a0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| a4c0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| a4e0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| a500 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 | ......................)......... |
| a520 | 00 00 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 02 00 95 00 00 00 5f 57 69 6e 53 74 | ........T................._WinSt |
| a540 | 61 74 69 6f 6e 53 77 69 74 63 68 54 6f 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 40 30 00 5f | ationSwitchToServicesSession@0._ |
| a560 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 77 69 74 63 68 54 6f 53 65 72 76 69 63 65 73 | _imp__WinStationSwitchToServices |
| a580 | 53 65 73 73 69 6f 6e 40 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | Session@0.__head_C__Users_Peter_ |
| a5a0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| a5c0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 39 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00129.o/..1516 |
| a5e0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 39 20 | 161072..0.....0.....100666..699. |
| a600 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| a620 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 | t...............,...\........... |
| a640 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| a660 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| a680 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| a6a0 | 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...f.............0..ida |
| a6c0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...p........... |
| a6e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 | ..0..idata$4............<...z... |
| a700 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 | ..........0..idata$6............ |
| a720 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| a740 | 00 00 00 00 00 00 00 00 81 00 57 69 6e 53 74 61 74 69 6f 6e 53 68 75 74 64 6f 77 6e 53 79 73 74 | ..........WinStationShutdownSyst |
| a760 | 65 6d 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | em.............................. |
| a780 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| a7a0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| a7c0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| a7e0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| a800 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| a820 | 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................B............. |
| a840 | 83 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 40 38 00 | ...._WinStationShutdownSystem@8. |
| a860 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 40 | __imp__WinStationShutdownSystem@ |
| a880 | 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 8.__head_C__Users_Peter_Code_win |
| a8a0 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| a8c0 | 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00128.o/..1516161072.. |
| a8e0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 39 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..689.......`. |
| a900 | 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| a920 | 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...X.............0`.dat |
| a940 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| a960 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| a980 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| a9a0 | 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...b.............0..idata$5.... |
| a9c0 | 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...l.............0..ida |
| a9e0 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<...v........... |
| aa00 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6............@....... |
| aa20 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| aa40 | 80 00 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 00 00 02 00 00 00 04 00 00 00 | ..WinStationShadowStop.......... |
| aa60 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| aa80 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| aaa0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| aac0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| aae0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| ab00 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| ab20 | 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 7d 00 00 00 5f 57 69 6e 53 74 61 74 | ......<.............}..._WinStat |
| ab40 | 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 | ionShadowStop@12.__imp__WinStati |
| ab60 | 6f 6e 53 68 61 64 6f 77 53 74 6f 70 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | onShadowStop@12.__head_C__Users_ |
| ab80 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| aba0 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 37 2e 6f 2f | bwinapi_winsta_a..dueebs00127.o/ |
| abc0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| abe0 | 20 20 36 38 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 | ..689.......`.L................. |
| ac00 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 | ...text...............,...X..... |
| ac20 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| ac40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| ac60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| ac80 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...b............. |
| aca0 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 | 0..idata$5............8...l..... |
| acc0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| ace0 | 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..v.............0..idata$6...... |
| ad00 | 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| ad20 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 7f 00 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 | ................WinStationShadow |
| ad40 | 53 74 6f 70 32 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | Stop2........................... |
| ad60 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| ad80 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| ada0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| adc0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| ade0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| ae00 | 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 | ....................<........... |
| ae20 | 02 00 7d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 32 40 30 00 5f | ..}..._WinStationShadowStop2@0._ |
| ae40 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 53 74 6f 70 32 40 30 00 5f 5f | _imp__WinStationShadowStop2@0.__ |
| ae60 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| ae80 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| aea0 | 64 75 65 65 62 73 30 30 31 32 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00126.o/..1516161072..0... |
| aec0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..709.......`.L... |
| aee0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| af00 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| af20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| af40 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| af60 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| af80 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| afa0 | 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| afc0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...~.............0. |
| afe0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| b000 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 7e 00 57 69 | .........%..................~.Wi |
| b020 | 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 41 63 63 65 73 73 43 68 65 63 6b 00 00 00 02 00 00 00 | nStationShadowAccessCheck....... |
| b040 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| b060 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| b080 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| b0a0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| b0c0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| b0e0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 | ........................#....... |
| b100 | 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 57 69 6e | ..........H................._Win |
| b120 | 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 41 63 63 65 73 73 43 68 65 63 6b 40 38 00 5f 5f 69 6d 70 | StationShadowAccessCheck@8.__imp |
| b140 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 41 63 63 65 73 73 43 68 65 63 6b 40 38 00 | __WinStationShadowAccessCheck@8. |
| b160 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| b180 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| b1a0 | 00 0a 64 75 65 65 62 73 30 30 31 32 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00125.o/..1516161072..0. |
| b1c0 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 37 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..677.......`.L. |
| b1e0 | 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ......|............text......... |
| b200 | 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...T.............0`.data. |
| b220 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| b240 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| b260 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| b280 | 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..^.............0..idata$5...... |
| b2a0 | 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...h.............0..idata |
| b2c0 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...r............. |
| b2e0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| b300 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 7d 00 | ...........%..................}. |
| b320 | 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | WinStationShadow................ |
| b340 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| b360 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| b380 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| b3a0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| b3c0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| b3e0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| b400 | 34 00 00 00 00 00 00 00 00 00 00 00 02 00 75 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 | 4.............u..._WinStationSha |
| b420 | 64 6f 77 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 68 61 64 6f 77 40 32 | dow@20.__imp__WinStationShadow@2 |
| b440 | 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 0.__head_C__Users_Peter_Code_win |
| b460 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| b480 | 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00124.o/..1516161072.. |
| b4a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 39 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..699.......`. |
| b4c0 | 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| b4e0 | 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...\.............0`.dat |
| b500 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| b520 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| b540 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| b560 | 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...f.............0..idata$5.... |
| b580 | 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...p.............0..ida |
| b5a0 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<...z........... |
| b5c0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6............@....... |
| b5e0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| b600 | 7c 00 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 52 65 6e 64 65 72 48 69 6e 74 00 00 00 02 00 00 00 | |.WinStationSetRenderHint....... |
| b620 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| b640 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| b660 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| b680 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| b6a0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| b6c0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 | ................................ |
| b6e0 | 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 83 00 00 00 5f 57 69 6e | ..........B................._Win |
| b700 | 53 74 61 74 69 6f 6e 53 65 74 52 65 6e 64 65 72 48 69 6e 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 | StationSetRenderHint@20.__imp__W |
| b720 | 69 6e 53 74 61 74 69 6f 6e 53 65 74 52 65 6e 64 65 72 48 69 6e 74 40 32 30 00 5f 5f 68 65 61 64 | inStationSetRenderHint@20.__head |
| b740 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| b760 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 | 686_lib_libwinapi_winsta_a..duee |
| b780 | 62 73 30 30 31 32 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 | bs00123.o/..1516161072..0.....0. |
| b7a0 | 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..697.......`.L....... |
| b7c0 | 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| b7e0 | 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...\.............0`.data....... |
| b800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| b820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| b840 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 | ..0..idata$7............4...f... |
| b860 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
| b880 | 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...p.............0..idata$4.... |
| b8a0 | 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...z.............0..ida |
| b8c0 | 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
| b8e0 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 7b 00 57 69 6e 53 74 61 | .....%..................{.WinSta |
| b900 | 74 69 6f 6e 53 65 74 50 6f 6f 6c 43 6f 75 6e 74 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | tionSetPoolCount................ |
| b920 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| b940 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| b960 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| b980 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| b9a0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| b9c0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| b9e0 | 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 | ..@................._WinStationS |
| ba00 | 65 74 50 6f 6f 6c 43 6f 75 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | etPoolCount@12.__imp__WinStation |
| ba20 | 53 65 74 50 6f 6f 6c 43 6f 75 6e 74 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | SetPoolCount@12.__head_C__Users_ |
| ba40 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| ba60 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 32 2e 6f 2f | bwinapi_winsta_a..dueebs00122.o/ |
| ba80 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| baa0 | 20 20 37 30 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 | ..703.......`.L................. |
| bac0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 | ...text...............,...\..... |
| bae0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| bb00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| bb20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| bb40 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...f............. |
| bb60 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 | 0..idata$5............8...p..... |
| bb80 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| bba0 | 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..z.............0..idata$6...... |
| bbc0 | 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| bbe0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 7a 00 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 | ..............z.WinStationSetInf |
| bc00 | 6f 72 6d 61 74 69 6f 6e 57 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | ormationW....................... |
| bc20 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| bc40 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| bc60 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| bc80 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| bca0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| bcc0 | 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 | ......".................F....... |
| bce0 | 00 00 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 | .........._WinStationSetInformat |
| bd00 | 69 6f 6e 57 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f | ionW@20.__imp__WinStationSetInfo |
| bd20 | 72 6d 61 74 69 6f 6e 57 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | rmationW@20.__head_C__Users_Pete |
| bd40 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| bd60 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 31 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00121.o/..15 |
| bd80 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16161072..0.....0.....100666..70 |
| bda0 | 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 3.......`.L....................t |
| bdc0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
| bde0 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| be00 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| be20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| be40 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
| be60 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
| be80 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 | ....0..idata$4............<...z. |
| bea0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 | ............0..idata$6.......... |
| bec0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| bee0 | 00 00 00 00 00 00 00 00 00 00 79 00 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 | ..........y.WinStationSetInforma |
| bf00 | 74 69 6f 6e 41 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | tionA........................... |
| bf20 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| bf40 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| bf60 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| bf80 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| bfa0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| bfc0 | 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 | ..".................F........... |
| bfe0 | 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 | ......_WinStationSetInformationA |
| c000 | 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 49 6e 66 6f 72 6d 61 74 | @20.__imp__WinStationSetInformat |
| c020 | 69 6f 6e 41 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | ionA@20.__head_C__Users_Peter_Co |
| c040 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
| c060 | 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 32 30 2e 6f 2f 20 20 31 35 31 36 31 36 | winsta_a..dueebs00120.o/..151616 |
| c080 | 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 39 20 20 20 | 1072..0.....0.....100666..719... |
| c0a0 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L....................text. |
| c0c0 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...d............. |
| c0e0 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| c100 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| c120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| c140 | 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...n.............0..idata |
| c160 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...x............. |
| c180 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 | 0..idata$4............<......... |
| c1a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 | ........0..idata$6........"...@. |
| c1c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| c1e0 | 00 00 00 00 00 00 78 00 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 41 75 74 6f 6c 6f 67 6f 6e 50 61 | ......x.WinStationSetAutologonPa |
| c200 | 73 73 77 6f 72 64 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | ssword.......................... |
| c220 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| c240 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| c260 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| c280 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| c2a0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| c2c0 | 02 00 00 00 00 00 26 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4e 00 00 00 00 00 00 00 | ......&.................N....... |
| c2e0 | 00 00 00 00 02 00 8f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 41 75 74 6f 6c 6f 67 6f | .........._WinStationSetAutologo |
| c300 | 6e 50 61 73 73 77 6f 72 64 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 74 | nPassword@8.__imp__WinStationSet |
| c320 | 41 75 74 6f 6c 6f 67 6f 6e 50 61 73 73 77 6f 72 64 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | AutologonPassword@8.__head_C__Us |
| c340 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
| c360 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 | b_libwinapi_winsta_a..dueebs0011 |
| c380 | 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 9.o/..1516161072..0.....0.....10 |
| c3a0 | 30 36 36 36 20 20 36 38 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 | 0666..687.......`.L............. |
| c3c0 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 | .......text...............,...X. |
| c3e0 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| c400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| c420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| c440 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 | data$7............4...b......... |
| c460 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 | ....0..idata$5............8...l. |
| c480 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
| c4a0 | 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<...v.............0..idata$6.. |
| c4c0 | 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........@....................% |
| c4e0 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 77 00 57 69 6e 53 74 61 74 69 6f 6e 53 65 | ..................w.WinStationSe |
| c500 | 72 76 65 72 50 69 6e 67 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | rverPing........................ |
| c520 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| c540 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| c560 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| c580 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| c5a0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| c5c0 | 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 | ........................:....... |
| c5e0 | 00 00 00 00 02 00 7b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 72 76 65 72 50 69 6e 67 40 | ......{..._WinStationServerPing@ |
| c600 | 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 72 76 65 72 50 69 6e 67 40 34 00 | 4.__imp__WinStationServerPing@4. |
| c620 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| c640 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| c660 | 00 0a 64 75 65 65 62 73 30 30 31 31 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00118.o/..1516161072..0. |
| c680 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..711.......`.L. |
| c6a0 | 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| c6c0 | 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...`.............0`.data. |
| c6e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| c700 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| c720 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| c740 | 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..j.............0..idata$5...... |
| c760 | 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...t.............0..idata |
| c780 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...~............. |
| c7a0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| c7c0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 76 00 | ...........%..................v. |
| c7e0 | 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 57 69 6e 64 6f 77 4d 65 73 73 61 67 65 00 00 00 02 00 | WinStationSendWindowMessage..... |
| c800 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| c820 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| c840 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| c860 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| c880 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| c8a0 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 | ..........................$..... |
| c8c0 | 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 5f 57 | ............J................._W |
| c8e0 | 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 57 69 6e 64 6f 77 4d 65 73 73 61 67 65 40 33 32 00 5f 5f | inStationSendWindowMessage@32.__ |
| c900 | 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 57 69 6e 64 6f 77 4d 65 73 73 61 67 65 | imp__WinStationSendWindowMessage |
| c920 | 40 33 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @32.__head_C__Users_Peter_Code_w |
| c940 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| c960 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00117.o/..1516161072 |
| c980 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 | ..0.....0.....100666..697....... |
| c9a0 | 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| c9c0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...\.............0`.d |
| c9e0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| ca00 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| ca20 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| ca40 | 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...f.............0..idata$5.. |
| ca60 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...p.............0..i |
| ca80 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 | data$4............<...z......... |
| caa0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| cac0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| cae0 | 00 00 75 00 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 65 57 00 00 00 00 02 00 | ..u.WinStationSendMessageW...... |
| cb00 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| cb20 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| cb40 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| cb60 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| cb80 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| cba0 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 | ................................ |
| cbc0 | 00 00 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 | ............@................._W |
| cbe0 | 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 65 57 40 34 30 00 5f 5f 69 6d 70 5f 5f | inStationSendMessageW@40.__imp__ |
| cc00 | 57 69 6e 53 74 61 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 65 57 40 34 30 00 5f 5f 68 65 61 64 | WinStationSendMessageW@40.__head |
| cc20 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| cc40 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 | 686_lib_libwinapi_winsta_a..duee |
| cc60 | 62 73 30 30 31 31 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 | bs00116.o/..1516161072..0.....0. |
| cc80 | 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..697.......`.L....... |
| cca0 | 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| ccc0 | 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...\.............0`.data....... |
| cce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| cd00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| cd20 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 | ..0..idata$7............4...f... |
| cd40 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
| cd60 | 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...p.............0..idata$4.... |
| cd80 | 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...z.............0..ida |
| cda0 | 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
| cdc0 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 74 00 57 69 6e 53 74 61 | .....%..................t.WinSta |
| cde0 | 74 69 6f 6e 53 65 6e 64 4d 65 73 73 61 67 65 41 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | tionSendMessageA................ |
| ce00 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| ce20 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| ce40 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| ce60 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| ce80 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| cea0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| cec0 | 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 53 | ..@................._WinStationS |
| cee0 | 65 6e 64 4d 65 73 73 61 67 65 41 40 34 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | endMessageA@40.__imp__WinStation |
| cf00 | 53 65 6e 64 4d 65 73 73 61 67 65 41 40 34 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | SendMessageA@40.__head_C__Users_ |
| cf20 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| cf40 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 35 2e 6f 2f | bwinapi_winsta_a..dueebs00115.o/ |
| cf60 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| cf80 | 20 20 37 33 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 | ..733.......`.L................. |
| cfa0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 | ...text...............,...h..... |
| cfc0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| cfe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| d000 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| d020 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...r............. |
| d040 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 | 0..idata$5............8...|..... |
| d060 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| d080 | 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ................0..idata$6...... |
| d0a0 | 00 00 26 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ..&...@....................%.... |
| d0c0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 73 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 76 65 72 74 | ..............s.WinStationRevert |
| d0e0 | 46 72 6f 6d 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 00 00 00 02 00 00 00 04 00 00 00 06 00 | FromServicesSession............. |
| d100 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| d120 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| d140 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| d160 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| d180 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| d1a0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2b 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................+............. |
| d1c0 | 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 02 00 99 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....X................._WinStatio |
| d1e0 | 6e 52 65 76 65 72 74 46 72 6f 6d 53 65 72 76 69 63 65 73 53 65 73 73 69 6f 6e 40 30 00 5f 5f 69 | nRevertFromServicesSession@0.__i |
| d200 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 76 65 72 74 46 72 6f 6d 53 65 72 76 69 63 65 73 | mp__WinStationRevertFromServices |
| d220 | 53 65 73 73 69 6f 6e 40 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | Session@0.__head_C__Users_Peter_ |
| d240 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| d260 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 34 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00114.o/..1516 |
| d280 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 35 20 | 161072..0.....0.....100666..675. |
| d2a0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L.......|............tex |
| d2c0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 | t...............,...T........... |
| d2e0 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| d300 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| d320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| d340 | 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...^.............0..ida |
| d360 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...h........... |
| d380 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 | ..0..idata$4............<...r... |
| d3a0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 00 00 | ..........0..idata$6............ |
| d3c0 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| d3e0 | 00 00 00 00 00 00 00 00 72 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 73 65 74 00 00 00 02 00 00 00 | ........r.WinStationReset....... |
| d400 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| d420 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| d440 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| d460 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| d480 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| d4a0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 18 00 00 00 00 00 00 00 | ................................ |
| d4c0 | 05 00 00 00 02 00 00 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 02 00 73 00 00 00 5f 57 69 6e | ..........2.............s..._Win |
| d4e0 | 53 74 61 74 69 6f 6e 52 65 73 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f | StationReset@12.__imp__WinStatio |
| d500 | 6e 52 65 73 65 74 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | nReset@12.__head_C__Users_Peter_ |
| d520 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| d540 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 33 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00113.o/..1516 |
| d560 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 31 20 | 161072..0.....0.....100666..701. |
| d580 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| d5a0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 | t...............,...\........... |
| d5c0 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| d5e0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| d600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| d620 | 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...f.............0..ida |
| d640 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...p........... |
| d660 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 | ..0..idata$4............<...z... |
| d680 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 | ..........0..idata$6............ |
| d6a0 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| d6c0 | 00 00 00 00 00 00 00 00 71 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 70 6f 72 74 55 49 52 65 73 75 | ........q.WinStationReportUIResu |
| d6e0 | 6c 74 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | lt.............................. |
| d700 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| d720 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| d740 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| d760 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| d780 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| d7a0 | 21 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 02 00 | !.................D............. |
| d7c0 | 85 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 70 6f 72 74 55 49 52 65 73 75 6c 74 40 31 32 | ...._WinStationReportUIResult@12 |
| d7e0 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 70 6f 72 74 55 49 52 65 73 75 6c 74 | .__imp__WinStationReportUIResult |
| d800 | 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @12.__head_C__Users_Peter_Code_w |
| d820 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| d840 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00112.o/..1516161072 |
| d860 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 39 20 20 20 20 20 20 20 | ..0.....0.....100666..679....... |
| d880 | 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L.......|............text..... |
| d8a0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...T.............0`.d |
| d8c0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| d8e0 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| d900 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| d920 | 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...^.............0..idata$5.. |
| d940 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...h.............0..i |
| d960 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 | data$4............<...r......... |
| d980 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| d9a0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| d9c0 | 00 00 70 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 6e 61 6d 65 57 00 02 00 00 00 04 00 00 00 06 00 | ..p.WinStationRenameW........... |
| d9e0 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| da00 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| da20 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| da40 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| da60 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| da80 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
| daa0 | 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 02 00 77 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....6.............w..._WinStatio |
| dac0 | 6e 52 65 6e 61 6d 65 57 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6e | nRenameW@12.__imp__WinStationRen |
| dae0 | 61 6d 65 57 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | ameW@12.__head_C__Users_Peter_Co |
| db00 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
| db20 | 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 31 2e 6f 2f 20 20 31 35 31 36 31 36 | winsta_a..dueebs00111.o/..151616 |
| db40 | 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 39 20 20 20 | 1072..0.....0.....100666..679... |
| db60 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L.......|............text. |
| db80 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...T............. |
| dba0 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| dbc0 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| dbe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| dc00 | 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...^.............0..idata |
| dc20 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...h............. |
| dc40 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 | 0..idata$4............<...r..... |
| dc60 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 | ........0..idata$6............@. |
| dc80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| dca0 | 00 00 00 00 00 00 6f 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 6e 61 6d 65 41 00 02 00 00 00 04 00 | ......o.WinStationRenameA....... |
| dcc0 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| dce0 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| dd00 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| dd20 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| dd40 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| dd60 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 | ................................ |
| dd80 | 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 02 00 77 00 00 00 5f 57 69 6e 53 74 | ........6.............w..._WinSt |
| dda0 | 61 74 69 6f 6e 52 65 6e 61 6d 65 41 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f | ationRenameA@12.__imp__WinStatio |
| ddc0 | 6e 52 65 6e 61 6d 65 41 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | nRenameA@12.__head_C__Users_Pete |
| dde0 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| de00 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 31 30 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00110.o/..15 |
| de20 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 | 16161072..0.....0.....100666..69 |
| de40 | 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 9.......`.L....................t |
| de60 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
| de80 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| dea0 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| dec0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| dee0 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
| df00 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
| df20 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 | ....0..idata$4............<...z. |
| df40 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 | ............0..idata$6.......... |
| df60 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| df80 | 00 00 00 00 00 00 00 00 00 00 6e 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 6d 6f 76 65 4c 69 63 65 | ..........n.WinStationRemoveLice |
| dfa0 | 6e 73 65 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | nse............................. |
| dfc0 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| dfe0 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| e000 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| e020 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| e040 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| e060 | 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 | ....................B........... |
| e080 | 02 00 83 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6d 6f 76 65 4c 69 63 65 6e 73 65 40 31 | ......_WinStationRemoveLicense@1 |
| e0a0 | 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 6d 6f 76 65 4c 69 63 65 6e 73 65 | 2.__imp__WinStationRemoveLicense |
| e0c0 | 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @12.__head_C__Users_Peter_Code_w |
| e0e0 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| e100 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00109.o/..1516161072 |
| e120 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 35 20 20 20 20 20 20 20 | ..0.....0.....100666..735....... |
| e140 | 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| e160 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...h.............0`.d |
| e180 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| e1a0 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| e1c0 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| e1e0 | 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...r.............0..idata$5.. |
| e200 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...|.............0..i |
| e220 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 | data$4............<............. |
| e240 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 26 00 00 00 40 01 00 00 00 00 | ....0..idata$6........&...@..... |
| e260 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| e280 | 00 00 6d 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 63 61 74 69 | ..m.WinStationRegisterNotificati |
| e2a0 | 6f 6e 45 76 65 6e 74 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | onEvent......................... |
| e2c0 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| e2e0 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| e300 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| e320 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| e340 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| e360 | 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5a 00 00 00 00 00 00 00 | ......,.................Z....... |
| e380 | 00 00 00 00 02 00 9b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 4e 6f 74 | .........._WinStationRegisterNot |
| e3a0 | 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | ificationEvent@16.__imp__WinStat |
| e3c0 | 69 6f 6e 52 65 67 69 73 74 65 72 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 40 31 36 00 | ionRegisterNotificationEvent@16. |
| e3e0 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| e400 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| e420 | 00 0a 64 75 65 65 62 73 30 30 31 30 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00108.o/..1516161072..0. |
| e440 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 37 35 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..775.......`.L. |
| e460 | 07 00 00 00 00 00 9c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| e480 | 00 00 08 00 00 00 2c 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...t.............0`.data. |
| e4a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| e4c0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| e4e0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| e500 | 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..~.............0..idata$5...... |
| e520 | 00 00 04 00 00 00 38 01 00 00 88 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8.................0..idata |
| e540 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 92 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<................. |
| e560 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 34 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6........4...@......... |
| e580 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 6c 00 | ...........%..................l. |
| e5a0 | 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e | WinStationRegisterCurrentSession |
| e5c0 | 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | NotificationEvent............... |
| e5e0 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| e600 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| e620 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| e640 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| e660 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| e680 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ..............:................. |
| e6a0 | 76 00 00 00 00 00 00 00 00 00 00 00 02 00 b7 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 | v................._WinStationReg |
| e6c0 | 69 73 74 65 72 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 | isterCurrentSessionNotificationE |
| e6e0 | 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 | vent@12.__imp__WinStationRegiste |
| e700 | 72 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 76 65 6e 74 | rCurrentSessionNotificationEvent |
| e720 | 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @12.__head_C__Users_Peter_Code_w |
| e740 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| e760 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00107.o/..1516161072 |
| e780 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 34 37 20 20 20 20 20 20 20 | ..0.....0.....100666..747....... |
| e7a0 | 60 0a 4c 01 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| e7c0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...l.............0`.d |
| e7e0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| e800 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| e820 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| e840 | 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...v.............0..idata$5.. |
| e860 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8.................0..i |
| e880 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 8a 01 00 00 00 00 00 00 01 00 | data$4............<............. |
| e8a0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 2a 00 00 00 40 01 00 00 00 00 | ....0..idata$6........*...@..... |
| e8c0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| e8e0 | 00 00 6b 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 | ..k.WinStationRegisterConsoleNot |
| e900 | 69 66 69 63 61 74 69 6f 6e 45 78 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | ificationEx..................... |
| e920 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| e940 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| e960 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| e980 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| e9a0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| e9c0 | 01 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 62 00 00 00 | ..........0.................b... |
| e9e0 | 00 00 00 00 00 00 00 00 02 00 a3 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 | .............._WinStationRegiste |
| ea00 | 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 31 36 00 5f 5f 69 6d 70 5f | rConsoleNotificationEx@16.__imp_ |
| ea20 | 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 | _WinStationRegisterConsoleNotifi |
| ea40 | 63 61 74 69 6f 6e 45 78 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | cationEx@16.__head_C__Users_Pete |
| ea60 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| ea80 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 36 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00106.o/..15 |
| eaa0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 | 16161072..0.....0.....100666..73 |
| eac0 | 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 9.......`.L....................t |
| eae0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 | ext...............,...h......... |
| eb00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| eb20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| eb40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| eb60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...r.............0..i |
| eb80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 | data$5............8...|......... |
| eba0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 | ....0..idata$4............<..... |
| ebc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 | ............0..idata$6........(. |
| ebe0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| ec00 | 00 00 00 00 00 00 00 00 00 00 6a 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 6f | ..........j.WinStationRegisterCo |
| ec20 | 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | nsoleNotification............... |
| ec40 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| ec60 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| ec80 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| eca0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| ecc0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| ece0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| ed00 | 5e 00 00 00 00 00 00 00 00 00 00 00 02 00 9f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 | ^................._WinStationReg |
| ed20 | 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 40 31 32 00 5f 5f 69 6d | isterConsoleNotification@12.__im |
| ed40 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 67 69 73 74 65 72 43 6f 6e 73 6f 6c 65 4e 6f 74 69 | p__WinStationRegisterConsoleNoti |
| ed60 | 66 69 63 61 74 69 6f 6e 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | fication@12.__head_C__Users_Pete |
| ed80 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| eda0 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 35 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00105.o/..15 |
| edc0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 | 16161072..0.....0.....100666..71 |
| ede0 | 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 3.......`.L....................t |
| ee00 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| ee20 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| ee40 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| ee60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| ee80 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| eea0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| eec0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 | ....0..idata$4............<...~. |
| eee0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 | ............0..idata$6.......... |
| ef00 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| ef20 | 00 00 00 00 00 00 00 00 00 00 69 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f | ..........i.WinStationRedirectLo |
| ef40 | 67 6f 6e 53 74 61 74 75 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | gonStatus....................... |
| ef60 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| ef80 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| efa0 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| efc0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| efe0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| f000 | 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 | ......%.................L....... |
| f020 | 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 | .........._WinStationRedirectLog |
| f040 | 6f 6e 53 74 61 74 75 73 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 | onStatus@8.__imp__WinStationRedi |
| f060 | 72 65 63 74 4c 6f 67 6f 6e 53 74 61 74 75 73 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | rectLogonStatus@8.__head_C__User |
| f080 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| f0a0 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 34 2e | libwinapi_winsta_a..dueebs00104. |
| f0c0 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| f0e0 | 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 | 66..721.......`.L............... |
| f100 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 | .....text...............,...d... |
| f120 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| f140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| f160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| f180 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...n........... |
| f1a0 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 | ..0..idata$5............8...x... |
| f1c0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| f1e0 | 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
| f200 | 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ...."...@....................%.. |
| f220 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 68 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 | ................h.WinStationRedi |
| f240 | 72 65 63 74 4c 6f 67 6f 6e 4d 65 73 73 61 67 65 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | rectLogonMessage................ |
| f260 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| f280 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| f2a0 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| f2c0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| f2e0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| f300 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................'............... |
| f320 | 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 91 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 | ..P................._WinStationR |
| f340 | 65 64 69 72 65 63 74 4c 6f 67 6f 6e 4d 65 73 73 61 67 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 | edirectLogonMessage@16.__imp__Wi |
| f360 | 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 4d 65 73 73 61 67 65 40 31 36 00 | nStationRedirectLogonMessage@16. |
| f380 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| f3a0 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| f3c0 | 00 0a 64 75 65 65 62 73 30 30 31 30 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00103.o/..1516161072..0. |
| f3e0 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..713.......`.L. |
| f400 | 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| f420 | 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...`.............0`.data. |
| f440 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| f460 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| f480 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| f4a0 | 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..j.............0..idata$5...... |
| f4c0 | 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...t.............0..idata |
| f4e0 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...~............. |
| f500 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| f520 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 67 00 | ...........%..................g. |
| f540 | 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 45 72 72 6f 72 00 00 02 00 | WinStationRedirectLogonError.... |
| f560 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| f580 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| f5a0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| f5c0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| f5e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| f600 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 | ..........................%..... |
| f620 | 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 57 | ............L................._W |
| f640 | 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 45 72 72 6f 72 40 32 34 00 5f | inStationRedirectLogonError@24._ |
| f660 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 45 72 72 | _imp__WinStationRedirectLogonErr |
| f680 | 6f 72 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | or@24.__head_C__Users_Peter_Code |
| f6a0 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| f6c0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00102.o/..15161610 |
| f6e0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 35 20 20 20 20 20 | 72..0.....0.....100666..735..... |
| f700 | 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| f720 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...h.............0` |
| f740 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| f760 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| f780 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| f7a0 | 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...r.............0..idata$5 |
| f7c0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...|.............0. |
| f7e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 | .idata$4............<........... |
| f800 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 40 01 00 00 | ......0..idata$6........(...@... |
| f820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| f840 | 00 00 00 00 66 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 42 65 67 | ....f.WinStationRedirectLogonBeg |
| f860 | 69 6e 50 61 69 6e 74 69 6e 67 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 | inPainting...................... |
| f880 | 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| f8a0 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| f8c0 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| f8e0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| f900 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| f920 | 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5a 00 00 00 00 00 | ........,.................Z..... |
| f940 | 00 00 00 00 00 00 02 00 9b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c | ............_WinStationRedirectL |
| f960 | 6f 67 6f 6e 42 65 67 69 6e 50 61 69 6e 74 69 6e 67 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | ogonBeginPainting@0.__imp__WinSt |
| f980 | 61 74 69 6f 6e 52 65 64 69 72 65 63 74 4c 6f 67 6f 6e 42 65 67 69 6e 50 61 69 6e 74 69 6e 67 40 | ationRedirectLogonBeginPainting@ |
| f9a0 | 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 0.__head_C__Users_Peter_Code_win |
| f9c0 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| f9e0 | 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00101.o/..1516161072.. |
| fa00 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 39 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..719.......`. |
| fa20 | 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| fa40 | 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...d.............0`.dat |
| fa60 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| fa80 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| faa0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| fac0 | 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...n.............0..idata$5.... |
| fae0 | 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...x.............0..ida |
| fb00 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<............... |
| fb20 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6........"...@....... |
| fb40 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| fb60 | 65 00 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 45 72 72 6f 72 4d 65 73 73 61 67 65 | e.WinStationRedirectErrorMessage |
| fb80 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| fba0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| fbc0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| fbe0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| fc00 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| fc20 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| fc40 | 26 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 02 00 | &.................N............. |
| fc60 | 8f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 45 72 72 6f 72 4d 65 73 73 | ...._WinStationRedirectErrorMess |
| fc80 | 61 67 65 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 65 64 69 72 65 63 74 45 | age@8.__imp__WinStationRedirectE |
| fca0 | 72 72 6f 72 4d 65 73 73 61 67 65 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | rrorMessage@8.__head_C__Users_Pe |
| fcc0 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| fce0 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 31 30 30 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00100.o/.. |
| fd00 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| fd20 | 36 38 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 | 689.......`.L................... |
| fd40 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 | .text...............,...X....... |
| fd60 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| fd80 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| fda0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| fdc0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...b.............0. |
| fde0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 | .idata$5............8...l....... |
| fe00 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| fe20 | 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | v.............0..idata$6........ |
| fe40 | 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....@....................%...... |
| fe60 | 00 00 00 00 00 00 00 00 00 00 00 00 64 00 57 69 6e 53 74 61 74 69 6f 6e 52 63 6d 53 68 61 64 6f | ............d.WinStationRcmShado |
| fe80 | 77 32 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | w2.............................. |
| fea0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| fec0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| fee0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| ff00 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| ff20 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| ff40 | 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................<............. |
| ff60 | 7d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 52 63 6d 53 68 61 64 6f 77 32 40 32 34 00 5f 5f 69 | }..._WinStationRcmShadow2@24.__i |
| ff80 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 52 63 6d 53 68 61 64 6f 77 32 40 32 34 00 5f 5f 68 65 | mp__WinStationRcmShadow2@24.__he |
| ffa0 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| ffc0 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| ffe0 | 65 65 62 73 30 30 30 39 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00099.o/..1516161072..0..... |
| 10000 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..713.......`.L..... |
| 10020 | 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 10040 | 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...`.............0`.data..... |
| 10060 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 10080 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 100a0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 | ....0..idata$7............4...j. |
| 100c0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 100e0 | 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...t.............0..idata$4.. |
| 10100 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...~.............0..i |
| 10120 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
| 10140 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 63 00 57 69 6e 53 | .......%..................c.WinS |
| 10160 | 74 61 74 69 6f 6e 51 75 65 72 79 55 70 64 61 74 65 52 65 71 75 69 72 65 64 00 02 00 00 00 04 00 | tationQueryUpdateRequired....... |
| 10180 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 101a0 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 101c0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 101e0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 10200 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 10220 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 | ......................%......... |
| 10240 | 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 | ........L................._WinSt |
| 10260 | 61 74 69 6f 6e 51 75 65 72 79 55 70 64 61 74 65 52 65 71 75 69 72 65 64 40 38 00 5f 5f 69 6d 70 | ationQueryUpdateRequired@8.__imp |
| 10280 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 55 70 64 61 74 65 52 65 71 75 69 72 65 64 40 | __WinStationQueryUpdateRequired@ |
| 102a0 | 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 8.__head_C__Users_Peter_Code_win |
| 102c0 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 102e0 | 5f 61 00 0a 64 75 65 65 62 73 30 30 30 39 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00098.o/..1516161072.. |
| 10300 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 33 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..723.......`. |
| 10320 | 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 10340 | 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...d.............0`.dat |
| 10360 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 10380 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 103a0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 103c0 | 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...n.............0..idata$5.... |
| 103e0 | 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...x.............0..ida |
| 10400 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<............... |
| 10420 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6........"...@....... |
| 10440 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 10460 | 62 00 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 53 65 73 73 69 6f 6e 56 69 72 74 75 61 6c 49 | b.WinStationQuerySessionVirtualI |
| 10480 | 50 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | P............................... |
| 104a0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 104c0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 104e0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 10500 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 10520 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 10540 | 28 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 52 00 00 00 00 00 00 00 00 00 00 00 02 00 | (.................R............. |
| 10560 | 93 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 53 65 73 73 69 6f 6e 56 69 72 74 75 | ...._WinStationQuerySessionVirtu |
| 10580 | 61 6c 49 50 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 53 65 | alIP@16.__imp__WinStationQuerySe |
| 105a0 | 73 73 69 6f 6e 56 69 72 74 75 61 6c 49 50 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | ssionVirtualIP@16.__head_C__User |
| 105c0 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 105e0 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 39 37 2e | libwinapi_winsta_a..dueebs00097. |
| 10600 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 10620 | 36 36 20 20 37 32 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 | 66..723.......`.L............... |
| 10640 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 | .....text...............,...d... |
| 10660 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 10680 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 106a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 106c0 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...n........... |
| 106e0 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 | ..0..idata$5............8...x... |
| 10700 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 10720 | 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
| 10740 | 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ....$...@....................%.. |
| 10760 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 61 00 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 | ................a.WinStationQuer |
| 10780 | 79 4c 6f 67 6f 6e 43 72 65 64 65 6e 74 69 61 6c 73 57 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | yLogonCredentialsW.............. |
| 107a0 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| 107c0 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 107e0 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 10800 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 10820 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 10840 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................(............... |
| 10860 | 00 00 52 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 | ..R................._WinStationQ |
| 10880 | 75 65 72 79 4c 6f 67 6f 6e 43 72 65 64 65 6e 74 69 61 6c 73 57 40 34 00 5f 5f 69 6d 70 5f 5f 57 | ueryLogonCredentialsW@4.__imp__W |
| 108a0 | 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 4c 6f 67 6f 6e 43 72 65 64 65 6e 74 69 61 6c 73 57 40 | inStationQueryLogonCredentialsW@ |
| 108c0 | 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 4.__head_C__Users_Peter_Code_win |
| 108e0 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 10900 | 5f 61 00 0a 64 75 65 65 62 73 30 30 30 39 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00096.o/..1516161072.. |
| 10920 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..697.......`. |
| 10940 | 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 10960 | 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...\.............0`.dat |
| 10980 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 109a0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 109c0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 109e0 | 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...f.............0..idata$5.... |
| 10a00 | 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...p.............0..ida |
| 10a20 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<...z........... |
| 10a40 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6............@....... |
| 10a60 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 10a80 | 60 00 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 4c 69 63 65 6e 73 65 00 00 00 00 02 00 00 00 | `.WinStationQueryLicense........ |
| 10aa0 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 10ac0 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 10ae0 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 10b00 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 10b20 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 10b40 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 | ................................ |
| 10b60 | 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 69 6e | ..........@................._Win |
| 10b80 | 53 74 61 74 69 6f 6e 51 75 65 72 79 4c 69 63 65 6e 73 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 | StationQueryLicense@12.__imp__Wi |
| 10ba0 | 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 4c 69 63 65 6e 73 65 40 31 32 00 5f 5f 68 65 61 64 5f 43 | nStationQueryLicense@12.__head_C |
| 10bc0 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 10be0 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 10c00 | 30 30 30 39 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00095.o/..1516161072..0.....0... |
| 10c20 | 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 | ..100666..711.......`.L......... |
| 10c40 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 10c60 | 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..`.............0`.data......... |
| 10c80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 10ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 10cc0 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 | 0..idata$7............4...j..... |
| 10ce0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 10d00 | 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..t.............0..idata$4...... |
| 10d20 | 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...~.............0..idata |
| 10d40 | 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 10d60 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 5f 00 57 69 6e 53 74 61 74 69 | ...%.................._.WinStati |
| 10d80 | 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 00 00 00 02 00 00 00 04 00 00 00 06 00 | onQueryInformationW............. |
| 10da0 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 10dc0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 10de0 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 10e00 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 10e20 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 10e40 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................$............. |
| 10e60 | 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....J................._WinStatio |
| 10e80 | 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e | nQueryInformationW@24.__imp__Win |
| 10ea0 | 53 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 32 34 00 5f 5f 68 65 | StationQueryInformationW@24.__he |
| 10ec0 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| 10ee0 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| 10f00 | 65 65 62 73 30 30 30 39 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00094.o/..1516161072..0..... |
| 10f20 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..711.......`.L..... |
| 10f40 | 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 10f60 | 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...`.............0`.data..... |
| 10f80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 10fa0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 10fc0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 | ....0..idata$7............4...j. |
| 10fe0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 11000 | 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...t.............0..idata$4.. |
| 11020 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...~.............0..i |
| 11040 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
| 11060 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 5e 00 57 69 6e 53 | .......%..................^.WinS |
| 11080 | 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 00 00 00 02 00 00 00 04 00 | tationQueryInformationA......... |
| 110a0 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 110c0 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 110e0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 11100 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 11120 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 11140 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 | ......................$......... |
| 11160 | 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 5f 57 69 6e 53 74 | ........J................._WinSt |
| 11180 | 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 32 34 00 5f 5f 69 6d 70 5f | ationQueryInformationA@24.__imp_ |
| 111a0 | 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 32 34 00 | _WinStationQueryInformationA@24. |
| 111c0 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 111e0 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 11200 | 00 0a 64 75 65 65 62 73 30 30 30 39 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00093.o/..1516161072..0. |
| 11220 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..721.......`.L. |
| 11240 | 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 11260 | 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...d.............0`.data. |
| 11280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 112a0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 112c0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 112e0 | 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..n.............0..idata$5...... |
| 11300 | 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...x.............0..idata |
| 11320 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<................. |
| 11340 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6........"...@......... |
| 11360 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 5d 00 | ...........%..................]. |
| 11380 | 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 45 6e 66 6f 72 63 65 6d 65 6e 74 43 6f 72 65 00 00 | WinStationQueryEnforcementCore.. |
| 113a0 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 113c0 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 113e0 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 11400 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 11420 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 11440 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 27 00 | ..............................'. |
| 11460 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 91 00 | ................P............... |
| 11480 | 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 45 6e 66 6f 72 63 65 6d 65 6e 74 43 6f 72 | .._WinStationQueryEnforcementCor |
| 114a0 | 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 45 6e 66 6f 72 | e@24.__imp__WinStationQueryEnfor |
| 114c0 | 63 65 6d 65 6e 74 43 6f 72 65 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | cementCore@24.__head_C__Users_Pe |
| 114e0 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 11500 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 39 32 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00092.o/.. |
| 11520 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 11540 | 37 34 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 01 | 749.......`.L................... |
| 11560 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 | .text...............,...l....... |
| 11580 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 115a0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 115c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 115e0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...v.............0. |
| 11600 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 | .idata$5............8........... |
| 11620 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 11640 | 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 11660 | 2c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ,...@....................%...... |
| 11680 | 00 00 00 00 00 00 00 00 00 00 00 00 5c 00 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 43 75 72 | ............\.WinStationQueryCur |
| 116a0 | 72 65 6e 74 53 65 73 73 69 6f 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 04 00 00 00 | rentSessionInformation.......... |
| 116c0 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 116e0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 11700 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 11720 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 11740 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 11760 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 31 00 00 00 00 00 00 00 05 00 00 00 | ....................1........... |
| 11780 | 02 00 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 02 00 a5 00 00 00 5f 57 69 6e 53 74 61 74 | ......d................._WinStat |
| 117a0 | 69 6f 6e 51 75 65 72 79 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 49 6e 66 6f 72 6d 61 74 69 6f | ionQueryCurrentSessionInformatio |
| 117c0 | 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 43 75 72 72 65 | n@16.__imp__WinStationQueryCurre |
| 117e0 | 6e 74 53 65 73 73 69 6f 6e 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 68 65 61 64 5f 43 | ntSessionInformation@16.__head_C |
| 11800 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 11820 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 11840 | 30 30 30 39 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00091.o/..1516161072..0.....0... |
| 11860 | 20 20 31 30 30 36 36 36 20 20 37 34 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 | ..100666..749.......`.L......... |
| 11880 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 118a0 | 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..l.............0`.data......... |
| 118c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 118e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 11900 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 | 0..idata$7............4...v..... |
| 11920 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 11940 | 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ................0..idata$4...... |
| 11960 | 00 00 04 00 00 00 3c 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<.................0..idata |
| 11980 | 24 36 00 00 00 00 00 00 00 00 2c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6........,...@................. |
| 119a0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 5b 00 57 69 6e 53 74 61 74 69 | ...%..................[.WinStati |
| 119c0 | 6f 6e 51 75 65 72 79 41 6c 6c 6f 77 43 6f 6e 63 75 72 72 65 6e 74 43 6f 6e 6e 65 63 74 69 6f 6e | onQueryAllowConcurrentConnection |
| 119e0 | 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | s............................... |
| 11a00 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 11a20 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 11a40 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 11a60 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 11a80 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 31 00 | ..............................1. |
| 11aa0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 02 00 a5 00 | ................d............... |
| 11ac0 | 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 51 75 65 72 79 41 6c 6c 6f 77 43 6f 6e 63 75 72 72 65 6e | .._WinStationQueryAllowConcurren |
| 11ae0 | 74 43 6f 6e 6e 65 63 74 69 6f 6e 73 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | tConnections@0.__imp__WinStation |
| 11b00 | 51 75 65 72 79 41 6c 6c 6f 77 43 6f 6e 63 75 72 72 65 6e 74 43 6f 6e 6e 65 63 74 69 6f 6e 73 40 | QueryAllowConcurrentConnections@ |
| 11b20 | 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 0.__head_C__Users_Peter_Code_win |
| 11b40 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 11b60 | 5f 61 00 0a 64 75 65 65 62 73 30 30 30 39 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00090.o/..1516161072.. |
| 11b80 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 31 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..761.......`. |
| 11ba0 | 4c 01 07 00 00 00 00 00 98 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 11bc0 | 00 00 00 00 08 00 00 00 2c 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...p.............0`.dat |
| 11be0 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 11c00 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 11c20 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 11c40 | 34 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...z.............0..idata$5.... |
| 11c60 | 00 00 00 00 04 00 00 00 38 01 00 00 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8.................0..ida |
| 11c80 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<............... |
| 11ca0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 30 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6........0...@....... |
| 11cc0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 11ce0 | 5a 00 57 69 6e 53 74 61 74 69 6f 6e 50 72 65 43 72 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 | Z.WinStationPreCreateGlassReplac |
| 11d00 | 65 6d 65 6e 74 53 65 73 73 69 6f 6e 45 78 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | ementSessionEx.................. |
| 11d20 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 11d40 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 11d60 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 11d80 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 11da0 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 11dc0 | 00 00 01 00 00 00 02 00 00 00 00 00 35 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 6c 00 | ............5.................l. |
| 11de0 | 00 00 00 00 00 00 00 00 00 00 02 00 ad 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 50 72 65 43 72 | ................_WinStationPreCr |
| 11e00 | 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 45 78 40 31 36 | eateGlassReplacementSessionEx@16 |
| 11e20 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 50 72 65 43 72 65 61 74 65 47 6c 61 73 73 | .__imp__WinStationPreCreateGlass |
| 11e40 | 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 45 78 40 31 36 00 5f 5f 68 65 61 64 5f 43 | ReplacementSessionEx@16.__head_C |
| 11e60 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 11e80 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 11ea0 | 30 30 30 38 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00089.o/..1516161072..0.....0... |
| 11ec0 | 20 20 31 30 30 36 36 36 20 20 37 35 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 98 01 | ..100666..757.......`.L......... |
| 11ee0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 11f00 | 00 00 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..p.............0`.data......... |
| 11f20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 11f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 11f60 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 00 00 00 00 | 0..idata$7............4...z..... |
| 11f80 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 11fa0 | 00 00 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ................0..idata$4...... |
| 11fc0 | 00 00 04 00 00 00 3c 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<.................0..idata |
| 11fe0 | 24 36 00 00 00 00 00 00 00 00 2e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 12000 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 59 00 57 69 6e 53 74 61 74 69 | ...%..................Y.WinStati |
| 12020 | 6f 6e 50 72 65 43 72 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 | onPreCreateGlassReplacementSessi |
| 12040 | 6f 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | on.............................. |
| 12060 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 12080 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 120a0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 120c0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 120e0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 12100 | 00 00 33 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 68 00 00 00 00 00 00 00 00 00 00 00 | ..3.................h........... |
| 12120 | 02 00 a9 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 50 72 65 43 72 65 61 74 65 47 6c 61 73 73 52 | ......_WinStationPreCreateGlassR |
| 12140 | 65 70 6c 61 63 65 6d 65 6e 74 53 65 73 73 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 | eplacementSession@12.__imp__WinS |
| 12160 | 74 61 74 69 6f 6e 50 72 65 43 72 65 61 74 65 47 6c 61 73 73 52 65 70 6c 61 63 65 6d 65 6e 74 53 | tationPreCreateGlassReplacementS |
| 12180 | 65 73 73 69 6f 6e 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ession@12.__head_C__Users_Peter_ |
| 121a0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 121c0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 38 38 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00088.o/..1516 |
| 121e0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 39 20 | 161072..0.....0.....100666..689. |
| 12200 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 12220 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 | t...............,...X........... |
| 12240 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 12260 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 12280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 122a0 | 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...b.............0..ida |
| 122c0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...l........... |
| 122e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 | ..0..idata$4............<...v... |
| 12300 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 | ..........0..idata$6............ |
| 12320 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 12340 | 00 00 00 00 00 00 00 00 58 00 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 57 00 | ........X.WinStationOpenServerW. |
| 12360 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 12380 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 123a0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 123c0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 123e0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 12400 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 | ................................ |
| 12420 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 7d 00 00 00 | ..............<.............}... |
| 12440 | 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 57 40 34 00 5f 5f 69 6d 70 5f 5f | _WinStationOpenServerW@4.__imp__ |
| 12460 | 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 57 40 34 00 5f 5f 68 65 61 64 5f 43 | WinStationOpenServerW@4.__head_C |
| 12480 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 124a0 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 124c0 | 30 30 30 38 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00087.o/..1516161072..0.....0... |
| 124e0 | 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 | ..100666..697.......`.L......... |
| 12500 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 12520 | 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..\.............0`.data......... |
| 12540 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 12560 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 12580 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 | 0..idata$7............4...f..... |
| 125a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 125c0 | 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..p.............0..idata$4...... |
| 125e0 | 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...z.............0..idata |
| 12600 | 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 12620 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 57 00 57 69 6e 53 74 61 74 69 | ...%..................W.WinStati |
| 12640 | 6f 6e 4f 70 65 6e 53 65 72 76 65 72 45 78 57 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | onOpenServerExW................. |
| 12660 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 12680 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 126a0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 126c0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 126e0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 12700 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 12720 | 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 | @................._WinStationOpe |
| 12740 | 6e 53 65 72 76 65 72 45 78 57 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 | nServerExW@4.__imp__WinStationOp |
| 12760 | 65 6e 53 65 72 76 65 72 45 78 57 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | enServerExW@4.__head_C__Users_Pe |
| 12780 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 127a0 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 38 36 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00086.o/.. |
| 127c0 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 127e0 | 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 | 697.......`.L................... |
| 12800 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 | .text...............,...\....... |
| 12820 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 12840 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 12860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 12880 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...f.............0. |
| 128a0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 | .idata$5............8...p....... |
| 128c0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 128e0 | 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | z.............0..idata$6........ |
| 12900 | 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....@....................%...... |
| 12920 | 00 00 00 00 00 00 00 00 00 00 00 00 56 00 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 | ............V.WinStationOpenServ |
| 12940 | 65 72 45 78 41 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | erExA........................... |
| 12960 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 12980 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 129a0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 129c0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 129e0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 12a00 | 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 | ......................@......... |
| 12a20 | 00 00 02 00 81 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 45 78 41 | ........_WinStationOpenServerExA |
| 12a40 | 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 45 78 | @4.__imp__WinStationOpenServerEx |
| 12a60 | 41 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | A@4.__head_C__Users_Peter_Code_w |
| 12a80 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 12aa0 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 38 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00085.o/..1516161072 |
| 12ac0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 39 20 20 20 20 20 20 20 | ..0.....0.....100666..689....... |
| 12ae0 | 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 12b00 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...X.............0`.d |
| 12b20 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 12b40 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 12b60 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 12b80 | 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...b.............0..idata$5.. |
| 12ba0 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...l.............0..i |
| 12bc0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 | data$4............<...v......... |
| 12be0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 12c00 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 12c20 | 00 00 55 00 57 69 6e 53 74 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 41 00 02 00 00 00 04 00 | ..U.WinStationOpenServerA....... |
| 12c40 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 12c60 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 12c80 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 12ca0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 12cc0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 12ce0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 | ................................ |
| 12d00 | 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 7d 00 00 00 5f 57 69 6e 53 74 | ........<.............}..._WinSt |
| 12d20 | 61 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 41 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 | ationOpenServerA@4.__imp__WinSta |
| 12d40 | 74 69 6f 6e 4f 70 65 6e 53 65 72 76 65 72 41 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | tionOpenServerA@4.__head_C__User |
| 12d60 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 12d80 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 38 34 2e | libwinapi_winsta_a..dueebs00084. |
| 12da0 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 12dc0 | 36 36 20 20 36 38 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 | 66..687.......`.L............... |
| 12de0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 | .....text...............,...X... |
| 12e00 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 12e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 12e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 12e60 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...b........... |
| 12e80 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 | ..0..idata$5............8...l... |
| 12ea0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 12ec0 | 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...v.............0..idata$6.... |
| 12ee0 | 00 00 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
| 12f00 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 54 00 57 69 6e 53 74 61 74 69 6f 6e 4e 74 73 64 | ................T.WinStationNtsd |
| 12f20 | 44 65 62 75 67 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | Debug........................... |
| 12f40 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 12f60 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 12f80 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 12fa0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 12fc0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 12fe0 | 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 | ......................:......... |
| 13000 | 00 00 02 00 7b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 74 73 64 44 65 62 75 67 40 32 30 00 | ....{..._WinStationNtsdDebug@20. |
| 13020 | 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 74 73 64 44 65 62 75 67 40 32 30 00 5f 5f | __imp__WinStationNtsdDebug@20.__ |
| 13040 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 13060 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 13080 | 64 75 65 65 62 73 30 30 30 38 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00083.o/..1516161072..0... |
| 130a0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..709.......`.L... |
| 130c0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 130e0 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| 13100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 13120 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 13140 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 13160 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| 13180 | 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| 131a0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...~.............0. |
| 131c0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 131e0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 53 00 57 69 | .........%..................S.Wi |
| 13200 | 6e 53 74 61 74 69 6f 6e 4e 65 67 6f 74 69 61 74 65 53 65 73 73 69 6f 6e 00 00 00 00 02 00 00 00 | nStationNegotiateSession........ |
| 13220 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 13240 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 13260 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 13280 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 132a0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 132c0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 | ........................#....... |
| 132e0 | 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 57 69 6e | ..........H................._Win |
| 13300 | 53 74 61 74 69 6f 6e 4e 65 67 6f 74 69 61 74 65 53 65 73 73 69 6f 6e 40 32 34 00 5f 5f 69 6d 70 | StationNegotiateSession@24.__imp |
| 13320 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 65 67 6f 74 69 61 74 65 53 65 73 73 69 6f 6e 40 32 34 00 | __WinStationNegotiateSession@24. |
| 13340 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 13360 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 13380 | 00 0a 64 75 65 65 62 73 30 30 30 38 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00082.o/..1516161072..0. |
| 133a0 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..709.......`.L. |
| 133c0 | 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 133e0 | 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...`.............0`.data. |
| 13400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 13420 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 13440 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 13460 | 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..j.............0..idata$5...... |
| 13480 | 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...t.............0..idata |
| 134a0 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...~............. |
| 134c0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| 134e0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 52 00 | ...........%..................R. |
| 13500 | 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 57 00 00 00 00 02 00 | WinStationNameFromLogonIdW...... |
| 13520 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| 13540 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 13560 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 13580 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 135a0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 135c0 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 | ..........................#..... |
| 135e0 | 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 57 | ............H................._W |
| 13600 | 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 57 40 31 32 00 5f 5f 69 | inStationNameFromLogonIdW@12.__i |
| 13620 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 57 40 31 | mp__WinStationNameFromLogonIdW@1 |
| 13640 | 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 2.__head_C__Users_Peter_Code_win |
| 13660 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 | api_rs_i686_lib_libwinapi_winsta |
| 13680 | 5f 61 00 0a 64 75 65 65 62 73 30 30 30 38 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 | _a..dueebs00081.o/..1516161072.. |
| 136a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..709.......`. |
| 136c0 | 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
| 136e0 | 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...`.............0`.dat |
| 13700 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 13720 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 13740 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 13760 | 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...j.............0..idata$5.... |
| 13780 | 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...t.............0..ida |
| 137a0 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<...~........... |
| 137c0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6............@....... |
| 137e0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 13800 | 51 00 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 41 00 00 00 00 | Q.WinStationNameFromLogonIdA.... |
| 13820 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 13840 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 13860 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 13880 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 138a0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 138c0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 | ............................#... |
| 138e0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 | ..............H................. |
| 13900 | 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 41 40 31 32 00 5f | _WinStationNameFromLogonIdA@12._ |
| 13920 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 46 72 6f 6d 4c 6f 67 6f 6e 49 64 41 | _imp__WinStationNameFromLogonIdA |
| 13940 | 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @12.__head_C__Users_Peter_Code_w |
| 13960 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 13980 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 38 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00080.o/..1516161072 |
| 139a0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 35 20 20 20 20 20 20 20 | ..0.....0.....100666..715....... |
| 139c0 | 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 139e0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...`.............0`.d |
| 13a00 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 13a20 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 13a40 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 13a60 | 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...j.............0..idata$5.. |
| 13a80 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...t.............0..i |
| 13aa0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 | data$4............<...~......... |
| 13ac0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 13ae0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 13b00 | 00 00 50 00 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 52 65 6d 6f 74 65 61 62 6c | ..P.WinStationIsSessionRemoteabl |
| 13b20 | 65 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | e............................... |
| 13b40 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 13b60 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 13b80 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 13ba0 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 13bc0 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 26 00 | ..............................&. |
| 13be0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 02 00 8f 00 | ................N............... |
| 13c00 | 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 52 65 6d 6f 74 65 61 62 6c 65 | .._WinStationIsSessionRemoteable |
| 13c20 | 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 52 65 | @12.__imp__WinStationIsSessionRe |
| 13c40 | 6d 6f 74 65 61 62 6c 65 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | moteable@12.__head_C__Users_Pete |
| 13c60 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 13c80 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 37 39 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00079.o/..15 |
| 13ca0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 | 16161072..0.....0.....100666..71 |
| 13cc0 | 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 1.......`.L....................t |
| 13ce0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| 13d00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 13d20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 13d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 13d60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| 13d80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| 13da0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 | ....0..idata$4............<...~. |
| 13dc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 | ............0..idata$6.......... |
| 13de0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 13e00 | 00 00 00 00 00 00 00 00 00 00 4f 00 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 50 | ..........O.WinStationIsSessionP |
| 13e20 | 65 72 6d 69 74 74 65 64 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | ermitted........................ |
| 13e40 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 13e60 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 13e80 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 13ea0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 13ec0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 13ee0 | 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 | ......$.................J....... |
| 13f00 | 00 00 00 00 02 00 8b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 73 69 6f 6e 50 65 | .........._WinStationIsSessionPe |
| 13f20 | 72 6d 69 74 74 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 53 65 73 | rmitted@0.__imp__WinStationIsSes |
| 13f40 | 73 69 6f 6e 50 65 72 6d 69 74 74 65 64 40 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | sionPermitted@0.__head_C__Users_ |
| 13f60 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 13f80 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 37 38 2e 6f 2f | bwinapi_winsta_a..dueebs00078.o/ |
| 13fa0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 13fc0 | 20 20 37 32 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 | ..723.......`.L................. |
| 13fe0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 | ...text...............,...d..... |
| 14000 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 14020 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 14040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 14060 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...n............. |
| 14080 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 | 0..idata$5............8...x..... |
| 140a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 140c0 | 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ................0..idata$6...... |
| 140e0 | 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ..$...@....................%.... |
| 14100 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 4e 00 57 69 6e 53 74 61 74 69 6f 6e 49 73 48 65 6c 70 | ..............N.WinStationIsHelp |
| 14120 | 41 73 73 69 73 74 61 6e 74 53 65 73 73 69 6f 6e 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | AssistantSession................ |
| 14140 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 14160 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 14180 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 141a0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 141c0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 141e0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ..............(................. |
| 14200 | 52 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 48 | R................._WinStationIsH |
| 14220 | 65 6c 70 41 73 73 69 73 74 61 6e 74 53 65 73 73 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e | elpAssistantSession@8.__imp__Win |
| 14240 | 53 74 61 74 69 6f 6e 49 73 48 65 6c 70 41 73 73 69 73 74 61 6e 74 53 65 73 73 69 6f 6e 40 38 00 | StationIsHelpAssistantSession@8. |
| 14260 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 14280 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 142a0 | 00 0a 64 75 65 65 62 73 30 30 30 37 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00077.o/..1516161072..0. |
| 142c0 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 35 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..735.......`.L. |
| 142e0 | 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 14300 | 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...h.............0`.data. |
| 14320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 14340 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 14360 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 14380 | 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..r.............0..idata$5...... |
| 143a0 | 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...|.............0..idata |
| 143c0 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<................. |
| 143e0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6........(...@......... |
| 14400 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 4d 00 | ...........%..................M. |
| 14420 | 57 69 6e 53 74 61 74 69 6f 6e 49 73 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 52 65 6d 6f 74 65 | WinStationIsCurrentSessionRemote |
| 14440 | 61 62 6c 65 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | able............................ |
| 14460 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 14480 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 144a0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 144c0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 144e0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 14500 | 00 00 2c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5a 00 00 00 00 00 00 00 00 00 00 00 | ..,.................Z........... |
| 14520 | 02 00 9b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 43 75 72 72 65 6e 74 53 65 73 73 69 6f | ......_WinStationIsCurrentSessio |
| 14540 | 6e 52 65 6d 6f 74 65 61 62 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 | nRemoteable@4.__imp__WinStationI |
| 14560 | 73 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 52 65 6d 6f 74 65 61 62 6c 65 40 34 00 5f 5f 68 65 | sCurrentSessionRemoteable@4.__he |
| 14580 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| 145a0 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| 145c0 | 65 65 62 73 30 30 30 37 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00076.o/..1516161072..0..... |
| 145e0 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..723.......`.L..... |
| 14600 | 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 14620 | 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...d.............0`.data..... |
| 14640 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 14660 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 14680 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 | ....0..idata$7............4...n. |
| 146a0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 146c0 | 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...x.............0..idata$4.. |
| 146e0 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<.................0..i |
| 14700 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6........$...@............. |
| 14720 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 4c 00 57 69 6e 53 | .......%..................L.WinS |
| 14740 | 74 61 74 69 6f 6e 49 73 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 45 6e 61 62 6c 65 64 00 00 02 00 | tationIsChildSessionsEnabled.... |
| 14760 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| 14780 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 147a0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 147c0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 147e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 14800 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 | ..........................(..... |
| 14820 | 00 00 05 00 00 00 02 00 00 00 00 00 52 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 5f 57 | ............R................._W |
| 14840 | 69 6e 53 74 61 74 69 6f 6e 49 73 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 45 6e 61 62 6c 65 64 40 | inStationIsChildSessionsEnabled@ |
| 14860 | 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 73 43 68 69 6c 64 53 65 73 73 69 6f | 4.__imp__WinStationIsChildSessio |
| 14880 | 6e 73 45 6e 61 62 6c 65 64 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | nsEnabled@4.__head_C__Users_Pete |
| 148a0 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 148c0 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 37 35 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00075.o/..15 |
| 148e0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16161072..0.....0.....100666..70 |
| 14900 | 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 1.......`.L....................t |
| 14920 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
| 14940 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 14960 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 14980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 149a0 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
| 149c0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
| 149e0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 | ....0..idata$4............<...z. |
| 14a00 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 | ............0..idata$6.......... |
| 14a20 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 14a40 | 00 00 00 00 00 00 00 00 00 00 4b 00 57 69 6e 53 74 61 74 69 6f 6e 49 6e 73 74 61 6c 6c 4c 69 63 | ..........K.WinStationInstallLic |
| 14a60 | 65 6e 73 65 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | ense............................ |
| 14a80 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 14aa0 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 14ac0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 14ae0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 14b00 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 14b20 | 00 00 21 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 | ..!.................D........... |
| 14b40 | 02 00 85 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 49 6e 73 74 61 6c 6c 4c 69 63 65 6e 73 65 40 | ......_WinStationInstallLicense@ |
| 14b60 | 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 49 6e 73 74 61 6c 6c 4c 69 63 65 6e | 12.__imp__WinStationInstallLicen |
| 14b80 | 73 65 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | se@12.__head_C__Users_Peter_Code |
| 14ba0 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 14bc0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 37 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00074.o/..15161610 |
| 14be0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 31 20 20 20 20 20 | 72..0.....0.....100666..701..... |
| 14c00 | 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 14c20 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...\.............0` |
| 14c40 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 14c60 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 14c80 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 14ca0 | 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...f.............0..idata$5 |
| 14cc0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...p.............0. |
| 14ce0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 | .idata$4............<...z....... |
| 14d00 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 14d20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 14d40 | 00 00 00 00 4a 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 50 72 6f 66 69 6c 65 00 00 | ....J.WinStationGetUserProfile.. |
| 14d60 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 14d80 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 14da0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 14dc0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 14de0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 14e00 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 21 00 00 00 | ............................!... |
| 14e20 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 02 00 85 00 00 00 | ..............D................. |
| 14e40 | 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 50 72 6f 66 69 6c 65 40 31 36 00 5f 5f 69 | _WinStationGetUserProfile@16.__i |
| 14e60 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 50 72 6f 66 69 6c 65 40 31 36 00 | mp__WinStationGetUserProfile@16. |
| 14e80 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 14ea0 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 14ec0 | 00 0a 64 75 65 65 62 73 30 30 30 37 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00073.o/..1516161072..0. |
| 14ee0 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..711.......`.L. |
| 14f00 | 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 14f20 | 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...`.............0`.data. |
| 14f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 14f60 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 14f80 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 14fa0 | 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..j.............0..idata$5...... |
| 14fc0 | 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...t.............0..idata |
| 14fe0 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...~............. |
| 15000 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| 15020 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 49 00 | ...........%..................I. |
| 15040 | 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 00 00 02 00 | WinStationGetUserCredentials.... |
| 15060 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| 15080 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 150a0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 150c0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 150e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 15100 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 | ..........................$..... |
| 15120 | 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 5f 57 | ............J................._W |
| 15140 | 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 40 34 00 5f 5f | inStationGetUserCredentials@4.__ |
| 15160 | 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c | imp__WinStationGetUserCredential |
| 15180 | 73 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | s@4.__head_C__Users_Peter_Code_w |
| 151a0 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 151c0 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 37 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00072.o/..1516161072 |
| 151e0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 | ..0.....0.....100666..713....... |
| 15200 | 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 15220 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...`.............0`.d |
| 15240 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 15260 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 15280 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 152a0 | 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...j.............0..idata$5.. |
| 152c0 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...t.............0..i |
| 152e0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 | data$4............<...~......... |
| 15300 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 15320 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 15340 | 00 00 48 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 | ..H.WinStationGetUserCertificate |
| 15360 | 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | s............................... |
| 15380 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 153a0 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 153c0 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 153e0 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 15400 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 | ..............................%. |
| 15420 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 | ................L............... |
| 15440 | 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 | .._WinStationGetUserCertificates |
| 15460 | 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 55 73 65 72 43 65 72 74 69 | @4.__imp__WinStationGetUserCerti |
| 15480 | 66 69 63 61 74 65 73 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ficates@4.__head_C__Users_Peter_ |
| 154a0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 154c0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 37 31 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00071.o/..1516 |
| 154e0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 37 20 | 161072..0.....0.....100666..727. |
| 15500 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 15520 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 | t...............,...d........... |
| 15540 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 15560 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 15580 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 155a0 | 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...n.............0..ida |
| 155c0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...x........... |
| 155e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 | ..0..idata$4............<....... |
| 15600 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 | ..........0..idata$6........$... |
| 15620 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 15640 | 00 00 00 00 00 00 00 00 47 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 54 65 72 6d 53 72 76 43 6f | ........G.WinStationGetTermSrvCo |
| 15660 | 75 6e 74 65 72 73 56 61 6c 75 65 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 | untersValue..................... |
| 15680 | 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 156a0 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 156c0 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 156e0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 15700 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 15720 | 00 00 02 00 00 00 00 00 2a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 56 00 00 00 00 00 | ........*.................V..... |
| 15740 | 00 00 00 00 00 00 02 00 97 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 54 65 72 6d 53 72 | ............_WinStationGetTermSr |
| 15760 | 76 43 6f 75 6e 74 65 72 73 56 61 6c 75 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 | vCountersValue@12.__imp__WinStat |
| 15780 | 69 6f 6e 47 65 74 54 65 72 6d 53 72 76 43 6f 75 6e 74 65 72 73 56 61 6c 75 65 40 31 32 00 5f 5f | ionGetTermSrvCountersValue@12.__ |
| 157a0 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 157c0 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 157e0 | 64 75 65 65 62 73 30 30 30 37 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00070.o/..1516161072..0... |
| 15800 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..699.......`.L... |
| 15820 | 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 15840 | 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...\.............0`.data... |
| 15860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 15880 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 158a0 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 158c0 | 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | f.............0..idata$5........ |
| 158e0 | 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...p.............0..idata$4 |
| 15900 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...z.............0. |
| 15920 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 15940 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 46 00 57 69 | .........%..................F.Wi |
| 15960 | 6e 53 74 61 74 69 6f 6e 47 65 74 53 65 73 73 69 6f 6e 49 64 73 00 00 00 02 00 00 00 04 00 00 00 | nStationGetSessionIds........... |
| 15980 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 159a0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 159c0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 159e0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 15a00 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 15a20 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 15a40 | 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 83 00 00 00 5f 57 69 6e 53 74 61 74 | ......B................._WinStat |
| 15a60 | 69 6f 6e 47 65 74 53 65 73 73 69 6f 6e 49 64 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | ionGetSessionIds@12.__imp__WinSt |
| 15a80 | 61 74 69 6f 6e 47 65 74 53 65 73 73 69 6f 6e 49 64 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f | ationGetSessionIds@12.__head_C__ |
| 15aa0 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 15ac0 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 15ae0 | 30 36 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 069.o/..1516161072..0.....0..... |
| 15b00 | 31 30 30 36 36 36 20 20 37 32 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 | 100666..723.......`.L........... |
| 15b20 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 15b40 | 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | d.............0`.data........... |
| 15b60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 15b80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 15ba0 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 | .idata$7............4...n....... |
| 15bc0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 15be0 | 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | x.............0..idata$4........ |
| 15c00 | 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<.................0..idata$6 |
| 15c20 | 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ........$...@................... |
| 15c40 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 45 00 57 69 6e 53 74 61 74 69 6f 6e | .%..................E.WinStation |
| 15c60 | 47 65 74 52 65 73 74 72 69 63 74 65 64 4c 6f 67 6f 6e 49 6e 66 6f 00 00 02 00 00 00 04 00 00 00 | GetRestrictedLogonInfo.......... |
| 15c80 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 15ca0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 15cc0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 15ce0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 15d00 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 15d20 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 05 00 00 00 | ....................(........... |
| 15d40 | 02 00 00 00 00 00 52 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 5f 57 69 6e 53 74 61 74 | ......R................._WinStat |
| 15d60 | 69 6f 6e 47 65 74 52 65 73 74 72 69 63 74 65 64 4c 6f 67 6f 6e 49 6e 66 6f 40 38 00 5f 5f 69 6d | ionGetRestrictedLogonInfo@8.__im |
| 15d80 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 52 65 73 74 72 69 63 74 65 64 4c 6f 67 6f 6e 49 | p__WinStationGetRestrictedLogonI |
| 15da0 | 6e 66 6f 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | nfo@8.__head_C__Users_Peter_Code |
| 15dc0 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 15de0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00068.o/..15161610 |
| 15e00 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 35 20 20 20 20 20 | 72..0.....0.....100666..715..... |
| 15e20 | 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 15e40 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...`.............0` |
| 15e60 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 15e80 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 15ea0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 15ec0 | 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...j.............0..idata$5 |
| 15ee0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...t.............0. |
| 15f00 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 | .idata$4............<...~....... |
| 15f20 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 15f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 15f60 | 00 00 00 00 44 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 52 65 64 69 72 65 63 74 41 75 74 68 49 | ....D.WinStationGetRedirectAuthI |
| 15f80 | 6e 66 6f 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | nfo............................. |
| 15fa0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 15fc0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 15fe0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 16000 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 16020 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 16040 | 26 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 02 00 | &.................N............. |
| 16060 | 8f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 52 65 64 69 72 65 63 74 41 75 74 68 49 6e | ...._WinStationGetRedirectAuthIn |
| 16080 | 66 6f 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 52 65 64 69 72 65 | fo@24.__imp__WinStationGetRedire |
| 160a0 | 63 74 41 75 74 68 49 6e 66 6f 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | ctAuthInfo@24.__head_C__Users_Pe |
| 160c0 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 160e0 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 37 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00067.o/.. |
| 16100 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 16120 | 36 39 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 | 699.......`.L................... |
| 16140 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 | .text...............,...\....... |
| 16160 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 16180 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 161a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 161c0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...f.............0. |
| 161e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 | .idata$5............8...p....... |
| 16200 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 16220 | 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | z.............0..idata$6........ |
| 16240 | 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....@....................%...... |
| 16260 | 00 00 00 00 00 00 00 00 00 00 00 00 43 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 72 6f 63 65 | ............C.WinStationGetProce |
| 16280 | 73 73 53 69 64 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | ssSid........................... |
| 162a0 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 162c0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 162e0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 16300 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 16320 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 16340 | 00 00 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 | ......................B......... |
| 16360 | 00 00 02 00 83 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 72 6f 63 65 73 73 53 69 64 | ........_WinStationGetProcessSid |
| 16380 | 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 72 6f 63 65 73 73 53 | @24.__imp__WinStationGetProcessS |
| 163a0 | 69 64 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | id@24.__head_C__Users_Peter_Code |
| 163c0 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 163e0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00066.o/..15161610 |
| 16400 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 | 72..0.....0.....100666..711..... |
| 16420 | 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 16440 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...`.............0` |
| 16460 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 16480 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 164a0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 164c0 | 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...j.............0..idata$5 |
| 164e0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...t.............0. |
| 16500 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 | .idata$4............<...~....... |
| 16520 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 16540 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 16560 | 00 00 00 00 42 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 61 72 65 6e 74 53 65 73 73 69 6f 6e | ....B.WinStationGetParentSession |
| 16580 | 49 64 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | Id.............................. |
| 165a0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 165c0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 165e0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 16600 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 16620 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 16640 | 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 | $.................J............. |
| 16660 | 8b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 61 72 65 6e 74 53 65 73 73 69 6f 6e 49 | ...._WinStationGetParentSessionI |
| 16680 | 64 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 50 61 72 65 6e 74 53 65 | d@8.__imp__WinStationGetParentSe |
| 166a0 | 73 73 69 6f 6e 49 64 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ssionId@8.__head_C__Users_Peter_ |
| 166c0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 166e0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 35 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00065.o/..1516 |
| 16700 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 37 20 | 161072..0.....0.....100666..707. |
| 16720 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 16740 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 16760 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 16780 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 167a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 167c0 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 167e0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 16800 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 | ..0..idata$4............<...~... |
| 16820 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 | ..........0..idata$6............ |
| 16840 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 16860 | 00 00 00 00 00 00 00 00 41 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4d 61 63 68 69 6e 65 50 6f | ........A.WinStationGetMachinePo |
| 16880 | 6c 69 63 79 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | licy............................ |
| 168a0 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 168c0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 168e0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 16900 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 16920 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 16940 | 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 | ....".................F......... |
| 16960 | 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4d 61 63 68 69 6e 65 50 6f 6c | ........_WinStationGetMachinePol |
| 16980 | 69 63 79 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4d 61 63 68 69 6e | icy@8.__imp__WinStationGetMachin |
| 169a0 | 65 50 6f 6c 69 63 79 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ePolicy@8.__head_C__Users_Peter_ |
| 169c0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 169e0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 34 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00064.o/..1516 |
| 16a00 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 37 20 | 161072..0.....0.....100666..707. |
| 16a20 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 16a40 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 16a60 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 16a80 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 16aa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 16ac0 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 16ae0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 16b00 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 | ..0..idata$4............<...~... |
| 16b20 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 | ..........0..idata$6............ |
| 16b40 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 16b60 | 00 00 00 00 00 00 00 00 40 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 6f 67 67 65 64 4f 6e 43 | ........@.WinStationGetLoggedOnC |
| 16b80 | 6f 75 6e 74 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | ount............................ |
| 16ba0 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 16bc0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 16be0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 16c00 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 16c20 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 16c40 | 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 | ....".................F......... |
| 16c60 | 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 6f 67 67 65 64 4f 6e 43 6f | ........_WinStationGetLoggedOnCo |
| 16c80 | 75 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 6f 67 67 65 64 | unt@8.__imp__WinStationGetLogged |
| 16ca0 | 4f 6e 43 6f 75 6e 74 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | OnCount@8.__head_C__Users_Peter_ |
| 16cc0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 16ce0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 33 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00063.o/..1516 |
| 16d00 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 | 161072..0.....0.....100666..713. |
| 16d20 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 16d40 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 16d60 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 16d80 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 16da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 16dc0 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 16de0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 16e00 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 | ..0..idata$4............<...~... |
| 16e20 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 | ..........0..idata$6............ |
| 16e40 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 16e60 | 00 00 00 00 00 00 00 00 3f 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 6e 41 64 61 70 74 65 | ........?.WinStationGetLanAdapte |
| 16e80 | 72 4e 61 6d 65 57 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | rNameW.......................... |
| 16ea0 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 16ec0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 16ee0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 16f00 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 16f20 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 16f40 | 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 | ....%.................L......... |
| 16f60 | 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 6e 41 64 61 70 74 65 72 | ........_WinStationGetLanAdapter |
| 16f80 | 4e 61 6d 65 57 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 6e | NameW@24.__imp__WinStationGetLan |
| 16fa0 | 41 64 61 70 74 65 72 4e 61 6d 65 57 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | AdapterNameW@24.__head_C__Users_ |
| 16fc0 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 16fe0 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 32 2e 6f 2f | bwinapi_winsta_a..dueebs00062.o/ |
| 17000 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 17020 | 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 | ..713.......`.L................. |
| 17040 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 | ...text...............,...`..... |
| 17060 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 17080 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 170a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 170c0 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...j............. |
| 170e0 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 | 0..idata$5............8...t..... |
| 17100 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 17120 | 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..~.............0..idata$6...... |
| 17140 | 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 17160 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 3e 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 6e | ..............>.WinStationGetLan |
| 17180 | 41 64 61 70 74 65 72 4e 61 6d 65 41 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | AdapterNameA.................... |
| 171a0 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 171c0 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 171e0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 17200 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 17220 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 17240 | 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 | ..........%.................L... |
| 17260 | 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 4c 61 6e 41 | .............._WinStationGetLanA |
| 17280 | 64 61 70 74 65 72 4e 61 6d 65 41 40 32 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | dapterNameA@24.__imp__WinStation |
| 172a0 | 47 65 74 4c 61 6e 41 64 61 70 74 65 72 4e 61 6d 65 41 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f | GetLanAdapterNameA@24.__head_C__ |
| 172c0 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 172e0 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 17300 | 30 36 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 061.o/..1516161072..0.....0..... |
| 17320 | 31 30 30 36 36 36 20 20 37 32 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 | 100666..723.......`.L........... |
| 17340 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 17360 | 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | d.............0`.data........... |
| 17380 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 173a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 173c0 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 | .idata$7............4...n....... |
| 173e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 17400 | 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | x.............0..idata$4........ |
| 17420 | 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<.................0..idata$6 |
| 17440 | 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ........"...@................... |
| 17460 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 3d 00 57 69 6e 53 74 61 74 69 6f 6e | .%..................=.WinStation |
| 17480 | 47 65 74 49 6e 69 74 69 61 6c 41 70 70 6c 69 63 61 74 69 6f 6e 00 00 00 02 00 00 00 04 00 00 00 | GetInitialApplication........... |
| 174a0 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 174c0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 174e0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 17500 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 17520 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 17540 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 05 00 00 00 | ....................(........... |
| 17560 | 02 00 00 00 00 00 52 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 5f 57 69 6e 53 74 61 74 | ......R................._WinStat |
| 17580 | 69 6f 6e 47 65 74 49 6e 69 74 69 61 6c 41 70 70 6c 69 63 61 74 69 6f 6e 40 32 30 00 5f 5f 69 6d | ionGetInitialApplication@20.__im |
| 175a0 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 49 6e 69 74 69 61 6c 41 70 70 6c 69 63 61 74 69 | p__WinStationGetInitialApplicati |
| 175c0 | 6f 6e 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | on@20.__head_C__Users_Peter_Code |
| 175e0 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 17600 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 36 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00060.o/..15161610 |
| 17620 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 31 20 20 20 20 20 | 72..0.....0.....100666..691..... |
| 17640 | 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 17660 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...X.............0` |
| 17680 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 176a0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 176c0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 176e0 | 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...b.............0..idata$5 |
| 17700 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...l.............0. |
| 17720 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 | .idata$4............<...v....... |
| 17740 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 17760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 17780 | 00 00 00 00 3c 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 44 65 76 69 63 65 49 64 00 02 00 00 00 | ....<.WinStationGetDeviceId..... |
| 177a0 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 177c0 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 177e0 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 17800 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 17820 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 17840 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 | ................................ |
| 17860 | 05 00 00 00 02 00 00 00 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 02 00 7f 00 00 00 5f 57 69 6e | ..........>................._Win |
| 17880 | 53 74 61 74 69 6f 6e 47 65 74 44 65 76 69 63 65 49 64 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e | StationGetDeviceId@16.__imp__Win |
| 178a0 | 53 74 61 74 69 6f 6e 47 65 74 44 65 76 69 63 65 49 64 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f | StationGetDeviceId@16.__head_C__ |
| 178c0 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 178e0 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 17900 | 30 35 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 059.o/..1516161072..0.....0..... |
| 17920 | 31 30 30 36 36 36 20 20 37 34 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 00 00 | 100666..745.......`.L........... |
| 17940 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 17960 | 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | l.............0`.data........... |
| 17980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 179a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 179c0 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 | .idata$7............4...v....... |
| 179e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 17a00 | 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | ..............0..idata$4........ |
| 17a20 | 04 00 00 00 3c 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<.................0..idata$6 |
| 17a40 | 00 00 00 00 00 00 00 00 2a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ........*...@................... |
| 17a60 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 3b 00 57 69 6e 53 74 61 74 69 6f 6e | .%..................;.WinStation |
| 17a80 | 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 54 65 72 6d 69 6e 61 6c 4e 61 6d 65 00 00 00 | GetCurrentSessionTerminalName... |
| 17aa0 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 17ac0 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 17ae0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 17b00 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 17b20 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 17b40 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2f 00 00 00 | ............................/... |
| 17b60 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 02 00 a1 00 00 00 | ..............`................. |
| 17b80 | 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 54 65 72 6d | _WinStationGetCurrentSessionTerm |
| 17ba0 | 69 6e 61 6c 4e 61 6d 65 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 | inalName@4.__imp__WinStationGetC |
| 17bc0 | 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 54 65 72 6d 69 6e 61 6c 4e 61 6d 65 40 34 00 5f 5f 68 65 | urrentSessionTerminalName@4.__he |
| 17be0 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| 17c00 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| 17c20 | 65 65 62 73 30 30 30 35 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00058.o/..1516161072..0..... |
| 17c40 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..761.......`.L..... |
| 17c60 | 00 00 98 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 17c80 | 00 00 2c 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...p.............0`.data..... |
| 17ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 17cc0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 17ce0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 | ....0..idata$7............4...z. |
| 17d00 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 17d20 | 00 00 38 01 00 00 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8.................0..idata$4.. |
| 17d40 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<.................0..i |
| 17d60 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 30 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6........0...@............. |
| 17d80 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 3a 00 57 69 6e 53 | .......%..................:.WinS |
| 17da0 | 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 6f 6e 6e 65 63 74 69 6f | tationGetCurrentSessionConnectio |
| 17dc0 | 6e 50 72 6f 70 65 72 74 79 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | nProperty....................... |
| 17de0 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 17e00 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 17e20 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 17e40 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 17e60 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 17e80 | 02 00 00 00 00 00 35 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 6c 00 00 00 00 00 00 00 | ......5.................l....... |
| 17ea0 | 00 00 00 00 02 00 ad 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 | .........._WinStationGetCurrentS |
| 17ec0 | 65 73 73 69 6f 6e 43 6f 6e 6e 65 63 74 69 6f 6e 50 72 6f 70 65 72 74 79 40 38 00 5f 5f 69 6d 70 | essionConnectionProperty@8.__imp |
| 17ee0 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 6f 6e | __WinStationGetCurrentSessionCon |
| 17f00 | 6e 65 63 74 69 6f 6e 50 72 6f 70 65 72 74 79 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | nectionProperty@8.__head_C__User |
| 17f20 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 17f40 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 37 2e | libwinapi_winsta_a..dueebs00057. |
| 17f60 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 17f80 | 36 36 20 20 37 34 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 | 66..745.......`.L............... |
| 17fa0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 | .....text...............,...l... |
| 17fc0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 17fe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 18000 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 18020 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...v........... |
| 18040 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 80 01 00 00 | ..0..idata$5............8....... |
| 18060 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 18080 | 3c 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
| 180a0 | 00 00 00 00 2a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ....*...@....................%.. |
| 180c0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 39 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 | ................9.WinStationGetC |
| 180e0 | 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 61 70 61 62 69 6c 69 74 69 65 73 00 00 00 02 00 00 00 | urrentSessionCapabilities....... |
| 18100 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 18120 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 18140 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 18160 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 18180 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 181a0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2f 00 00 00 00 00 00 00 | ......................../....... |
| 181c0 | 05 00 00 00 02 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 02 00 a1 00 00 00 5f 57 69 6e | ..........`................._Win |
| 181e0 | 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 43 61 70 61 62 69 6c 69 | StationGetCurrentSessionCapabili |
| 18200 | 74 69 65 73 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 75 72 72 65 | ties@8.__imp__WinStationGetCurre |
| 18220 | 6e 74 53 65 73 73 69 6f 6e 43 61 70 61 62 69 6c 69 74 69 65 73 40 38 00 5f 5f 68 65 61 64 5f 43 | ntSessionCapabilities@8.__head_C |
| 18240 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 18260 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 18280 | 30 30 30 35 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00056.o/..1516161072..0.....0... |
| 182a0 | 20 20 31 30 30 36 36 36 20 20 37 32 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 | ..100666..723.......`.L......... |
| 182c0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 182e0 | 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..d.............0`.data......... |
| 18300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 18320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 18340 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 | 0..idata$7............4...n..... |
| 18360 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 18380 | 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..x.............0..idata$4...... |
| 183a0 | 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<.................0..idata |
| 183c0 | 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6........"...@................. |
| 183e0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 38 00 57 69 6e 53 74 61 74 69 | ...%..................8.WinStati |
| 18400 | 6f 6e 47 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 50 72 6f 70 65 72 74 79 00 00 00 02 00 00 00 04 00 | onGetConnectionProperty......... |
| 18420 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 18440 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 18460 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 18480 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 184a0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 184c0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 05 00 | ......................(......... |
| 184e0 | 00 00 02 00 00 00 00 00 52 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 5f 57 69 6e 53 74 | ........R................._WinSt |
| 18500 | 61 74 69 6f 6e 47 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 50 72 6f 70 65 72 74 79 40 31 32 00 5f 5f | ationGetConnectionProperty@12.__ |
| 18520 | 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 50 72 6f 70 | imp__WinStationGetConnectionProp |
| 18540 | 65 72 74 79 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | erty@12.__head_C__Users_Peter_Co |
| 18560 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
| 18580 | 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 35 2e 6f 2f 20 20 31 35 31 36 31 36 | winsta_a..dueebs00055.o/..151616 |
| 185a0 | 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 | 1072..0.....0.....100666..709... |
| 185c0 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L....................text. |
| 185e0 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...`............. |
| 18600 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 18620 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 18640 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 18660 | 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...j.............0..idata |
| 18680 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...t............. |
| 186a0 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 | 0..idata$4............<...~..... |
| 186c0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 | ........0..idata$6............@. |
| 186e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 18700 | 00 00 00 00 00 00 37 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 68 69 6c 64 53 65 73 73 69 6f | ......7.WinStationGetChildSessio |
| 18720 | 6e 49 64 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | nId............................. |
| 18740 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 18760 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 18780 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 187a0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 187c0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 187e0 | 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 | ..#.................H........... |
| 18800 | 02 00 89 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 68 69 6c 64 53 65 73 73 69 6f 6e | ......_WinStationGetChildSession |
| 18820 | 49 64 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 43 68 69 6c 64 53 65 | Id@4.__imp__WinStationGetChildSe |
| 18840 | 73 73 69 6f 6e 49 64 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ssionId@4.__head_C__Users_Peter_ |
| 18860 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 18880 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 34 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00054.o/..1516 |
| 188a0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 | 161072..0.....0.....100666..713. |
| 188c0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 188e0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 18900 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 18920 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 18940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 18960 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 18980 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 189a0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 | ..0..idata$4............<...~... |
| 189c0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 | ..........0..idata$6............ |
| 189e0 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 18a00 | 00 00 00 00 00 00 00 00 36 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 55 73 65 72 53 65 | ........6.WinStationGetAllUserSe |
| 18a20 | 73 73 69 6f 6e 73 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | ssions.......................... |
| 18a40 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 18a60 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 18a80 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 18aa0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 18ac0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 18ae0 | 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 | ....%.................L......... |
| 18b00 | 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 55 73 65 72 53 65 73 | ........_WinStationGetAllUserSes |
| 18b20 | 73 69 6f 6e 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c | sions@16.__imp__WinStationGetAll |
| 18b40 | 55 73 65 72 53 65 73 73 69 6f 6e 73 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | UserSessions@16.__head_C__Users_ |
| 18b60 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 18b80 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 33 2e 6f 2f | bwinapi_winsta_a..dueebs00053.o/ |
| 18ba0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 18bc0 | 20 20 37 30 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 | ..703.......`.L................. |
| 18be0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 | ...text...............,...\..... |
| 18c00 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 18c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 18c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 18c60 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...f............. |
| 18c80 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 | 0..idata$5............8...p..... |
| 18ca0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 18cc0 | 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..z.............0..idata$6...... |
| 18ce0 | 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 18d00 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 35 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c | ..............5.WinStationGetAll |
| 18d20 | 53 65 73 73 69 6f 6e 73 57 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | SessionsW....................... |
| 18d40 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 18d60 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 18d80 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 18da0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 18dc0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 18de0 | 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 | ......".................F....... |
| 18e00 | 00 00 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 69 | .........._WinStationGetAllSessi |
| 18e20 | 6f 6e 73 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 | onsW@16.__imp__WinStationGetAllS |
| 18e40 | 65 73 73 69 6f 6e 73 57 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | essionsW@16.__head_C__Users_Pete |
| 18e60 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 18e80 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 32 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00052.o/..15 |
| 18ea0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16161072..0.....0.....100666..70 |
| 18ec0 | 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 9.......`.L....................t |
| 18ee0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| 18f00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 18f20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 18f40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 18f60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| 18f80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| 18fa0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 | ....0..idata$4............<...~. |
| 18fc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 | ............0..idata$6.......... |
| 18fe0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 19000 | 00 00 00 00 00 00 00 00 00 00 34 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 | ..........4.WinStationGetAllSess |
| 19020 | 69 6f 6e 73 45 78 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | ionsEx.......................... |
| 19040 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 19060 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 19080 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 190a0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 190c0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 190e0 | 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 | ......#.................H....... |
| 19100 | 00 00 00 00 02 00 89 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 53 65 73 73 69 | .........._WinStationGetAllSessi |
| 19120 | 6f 6e 73 45 78 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c | onsEx@16.__imp__WinStationGetAll |
| 19140 | 53 65 73 73 69 6f 6e 73 45 78 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | SessionsEx@16.__head_C__Users_Pe |
| 19160 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 19180 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 31 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00051.o/.. |
| 191a0 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 191c0 | 37 30 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 | 703.......`.L................... |
| 191e0 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 | .text...............,...\....... |
| 19200 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 19220 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 19240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 19260 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...f.............0. |
| 19280 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 | .idata$5............8...p....... |
| 192a0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 192c0 | 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | z.............0..idata$6........ |
| 192e0 | 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....@....................%...... |
| 19300 | 00 00 00 00 00 00 00 00 00 00 00 00 33 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 50 72 | ............3.WinStationGetAllPr |
| 19320 | 6f 63 65 73 73 65 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | ocesses......................... |
| 19340 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 19360 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 19380 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 193a0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 193c0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 193e0 | 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 | ....".................F......... |
| 19400 | 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 50 72 6f 63 65 73 73 | ........_WinStationGetAllProcess |
| 19420 | 65 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 74 41 6c 6c 50 72 6f | es@16.__imp__WinStationGetAllPro |
| 19440 | 63 65 73 73 65 73 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | cesses@16.__head_C__Users_Peter_ |
| 19460 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 19480 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 35 30 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00050.o/..1516 |
| 194a0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 33 20 | 161072..0.....0.....100666..703. |
| 194c0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 194e0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 | t...............,...\........... |
| 19500 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 19520 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 19540 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 19560 | 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...f.............0..ida |
| 19580 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...p........... |
| 195a0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 | ..0..idata$4............<...z... |
| 195c0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 | ..........0..idata$6............ |
| 195e0 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 19600 | 00 00 00 00 00 00 00 00 32 00 57 69 6e 53 74 61 74 69 6f 6e 47 65 6e 65 72 61 74 65 4c 69 63 65 | ........2.WinStationGenerateLice |
| 19620 | 6e 73 65 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | nse............................. |
| 19640 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 19660 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 19680 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 196a0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 196c0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 196e0 | 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 02 00 | ".................F............. |
| 19700 | 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 6e 65 72 61 74 65 4c 69 63 65 6e 73 65 40 31 | ...._WinStationGenerateLicense@1 |
| 19720 | 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 47 65 6e 65 72 61 74 65 4c 69 63 65 6e | 6.__imp__WinStationGenerateLicen |
| 19740 | 73 65 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | se@16.__head_C__Users_Peter_Code |
| 19760 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 19780 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 34 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00049.o/..15161610 |
| 197a0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 | 72..0.....0.....100666..713..... |
| 197c0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 197e0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...`.............0` |
| 19800 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 19820 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 19840 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 19860 | 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...j.............0..idata$5 |
| 19880 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...t.............0. |
| 198a0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 | .idata$4............<...~....... |
| 198c0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 198e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 19900 | 00 00 00 00 31 00 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 53 65 73 73 69 6f 6e 49 | ....1.WinStationFreeUserSessionI |
| 19920 | 6e 66 6f 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | nfo............................. |
| 19940 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 19960 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 19980 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 199a0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 199c0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 199e0 | 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 | %.................L............. |
| 19a00 | 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 53 65 73 73 69 6f 6e 49 6e | ...._WinStationFreeUserSessionIn |
| 19a20 | 66 6f 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 53 65 | fo@8.__imp__WinStationFreeUserSe |
| 19a40 | 73 73 69 6f 6e 49 6e 66 6f 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | ssionInfo@8.__head_C__Users_Pete |
| 19a60 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 19a80 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 34 38 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00048.o/..15 |
| 19aa0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 | 16161072..0.....0.....100666..71 |
| 19ac0 | 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 3.......`.L....................t |
| 19ae0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| 19b00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 19b20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 19b40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 19b60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| 19b80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| 19ba0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 | ....0..idata$4............<...~. |
| 19bc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 | ............0..idata$6.......... |
| 19be0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 19c00 | 00 00 00 00 00 00 00 00 00 00 30 00 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 43 72 | ..........0.WinStationFreeUserCr |
| 19c20 | 65 64 65 6e 74 69 61 6c 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | edentials....................... |
| 19c40 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 19c60 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 19c80 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 19ca0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 19cc0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 19ce0 | 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 | ......%.................L....... |
| 19d00 | 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 43 72 65 | .........._WinStationFreeUserCre |
| 19d20 | 64 65 6e 74 69 61 6c 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 | dentials@4.__imp__WinStationFree |
| 19d40 | 55 73 65 72 43 72 65 64 65 6e 74 69 61 6c 73 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | UserCredentials@4.__head_C__User |
| 19d60 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 19d80 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 34 37 2e | libwinapi_winsta_a..dueebs00047. |
| 19da0 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 19dc0 | 36 36 20 20 37 31 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 | 66..719.......`.L............... |
| 19de0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 | .....text...............,...d... |
| 19e00 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 19e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 19e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 19e60 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...n........... |
| 19e80 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 | ..0..idata$5............8...x... |
| 19ea0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 19ec0 | 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
| 19ee0 | 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ...."...@....................%.. |
| 19f00 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 2f 00 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 | ................/.WinStationFree |
| 19f20 | 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | UserCertificates................ |
| 19f40 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| 19f60 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 19f80 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 19fa0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 19fc0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 19fe0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 26 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................&............... |
| 1a000 | 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 02 00 8f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 | ..N................._WinStationF |
| 1a020 | 72 65 65 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e | reeUserCertificates@4.__imp__Win |
| 1a040 | 53 74 61 74 69 6f 6e 46 72 65 65 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 40 34 00 5f 5f | StationFreeUserCertificates@4.__ |
| 1a060 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 1a080 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 1a0a0 | 64 75 65 65 62 73 30 30 30 34 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00046.o/..1516161072..0... |
| 1a0c0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..709.......`.L... |
| 1a0e0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 1a100 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| 1a120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 1a140 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 1a160 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 1a180 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| 1a1a0 | 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| 1a1c0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...~.............0. |
| 1a1e0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 1a200 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 2e 00 57 69 | .........%....................Wi |
| 1a220 | 6e 53 74 61 74 69 6f 6e 46 72 65 65 50 72 6f 70 65 72 74 79 56 61 6c 75 65 00 00 00 02 00 00 00 | nStationFreePropertyValue....... |
| 1a240 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 1a260 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 1a280 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 1a2a0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 1a2c0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 1a2e0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 | ........................#....... |
| 1a300 | 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 00 00 5f 57 69 6e | ..........H................._Win |
| 1a320 | 53 74 61 74 69 6f 6e 46 72 65 65 50 72 6f 70 65 72 74 79 56 61 6c 75 65 40 34 00 5f 5f 69 6d 70 | StationFreePropertyValue@4.__imp |
| 1a340 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 50 72 6f 70 65 72 74 79 56 61 6c 75 65 40 34 00 | __WinStationFreePropertyValue@4. |
| 1a360 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 1a380 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 1a3a0 | 00 0a 64 75 65 65 62 73 30 30 30 34 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00045.o/..1516161072..0. |
| 1a3c0 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 37 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..687.......`.L. |
| 1a3e0 | 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 1a400 | 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...X.............0`.data. |
| 1a420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 1a440 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 1a460 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 1a480 | 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..b.............0..idata$5...... |
| 1a4a0 | 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...l.............0..idata |
| 1a4c0 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...v............. |
| 1a4e0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| 1a500 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 2d 00 | ...........%..................-. |
| 1a520 | 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 4d 65 6d 6f 72 79 00 00 02 00 00 00 04 00 00 00 06 00 | WinStationFreeMemory............ |
| 1a540 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 1a560 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 1a580 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 1a5a0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 1a5c0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 1a5e0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
| 1a600 | 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 7b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....:.............{..._WinStatio |
| 1a620 | 6e 46 72 65 65 4d 65 6d 6f 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 | nFreeMemory@4.__imp__WinStationF |
| 1a640 | 72 65 65 4d 65 6d 6f 72 79 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | reeMemory@4.__head_C__Users_Pete |
| 1a660 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 1a680 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 34 34 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00044.o/..15 |
| 1a6a0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 | 16161072..0.....0.....100666..69 |
| 1a6c0 | 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 9.......`.L....................t |
| 1a6e0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
| 1a700 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 1a720 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 1a740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 1a760 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
| 1a780 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
| 1a7a0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 | ....0..idata$4............<...z. |
| 1a7c0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 | ............0..idata$6.......... |
| 1a7e0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 1a800 | 00 00 00 00 00 00 00 00 00 00 2c 00 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 47 41 50 4d 65 6d | ..........,.WinStationFreeGAPMem |
| 1a820 | 6f 72 79 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | ory............................. |
| 1a840 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 1a860 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 1a880 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 1a8a0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 1a8c0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 1a8e0 | 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 | ....................B........... |
| 1a900 | 02 00 83 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 47 41 50 4d 65 6d 6f 72 79 40 31 | ......_WinStationFreeGAPMemory@1 |
| 1a920 | 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 47 41 50 4d 65 6d 6f 72 79 | 2.__imp__WinStationFreeGAPMemory |
| 1a940 | 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @12.__head_C__Users_Peter_Code_w |
| 1a960 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 1a980 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 34 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00043.o/..1516161072 |
| 1a9a0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 | ..0.....0.....100666..709....... |
| 1a9c0 | 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 1a9e0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...`.............0`.d |
| 1aa00 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 1aa20 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 1aa40 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 1aa60 | 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...j.............0..idata$5.. |
| 1aa80 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...t.............0..i |
| 1aaa0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 | data$4............<...~......... |
| 1aac0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 1aae0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 1ab00 | 00 00 2b 00 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 45 58 45 43 45 4e 56 44 41 54 41 45 58 00 | ..+.WinStationFreeEXECENVDATAEX. |
| 1ab20 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 1ab40 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 1ab60 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 1ab80 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 1aba0 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 1abc0 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 | ..............................#. |
| 1abe0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 | ................H............... |
| 1ac00 | 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 45 58 45 43 45 4e 56 44 41 54 41 45 58 40 38 | .._WinStationFreeEXECENVDATAEX@8 |
| 1ac20 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 45 58 45 43 45 4e 56 44 41 54 | .__imp__WinStationFreeEXECENVDAT |
| 1ac40 | 41 45 58 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | AEX@8.__head_C__Users_Peter_Code |
| 1ac60 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 1ac80 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 34 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00042.o/..15161610 |
| 1aca0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 35 20 20 20 20 20 | 72..0.....0.....100666..725..... |
| 1acc0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 1ace0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...d.............0` |
| 1ad00 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 1ad20 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 1ad40 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 1ad60 | 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...n.............0..idata$5 |
| 1ad80 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...x.............0. |
| 1ada0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 | .idata$4............<........... |
| 1adc0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 | ......0..idata$6........$...@... |
| 1ade0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 1ae00 | 00 00 00 00 2a 00 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 | ....*.WinStationFreeConsoleNotif |
| 1ae20 | 69 63 61 74 69 6f 6e 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | ication......................... |
| 1ae40 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 1ae60 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 1ae80 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 1aea0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 1aec0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 1aee0 | 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 | ....).................T......... |
| 1af00 | 00 00 02 00 95 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 65 65 43 6f 6e 73 6f 6c 65 4e 6f | ........_WinStationFreeConsoleNo |
| 1af20 | 74 69 66 69 63 61 74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 46 72 | tification@8.__imp__WinStationFr |
| 1af40 | 65 65 43 6f 6e 73 6f 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 40 38 00 5f 5f 68 65 61 64 5f 43 | eeConsoleNotification@8.__head_C |
| 1af60 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 1af80 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 1afa0 | 30 30 30 34 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00041.o/..1516161072..0.....0... |
| 1afc0 | 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 | ..100666..713.......`.L......... |
| 1afe0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 1b000 | 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..`.............0`.data......... |
| 1b020 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 1b040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 1b060 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 | 0..idata$7............4...j..... |
| 1b080 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 1b0a0 | 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..t.............0..idata$4...... |
| 1b0c0 | 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...~.............0..idata |
| 1b0e0 | 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 1b100 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 29 00 57 69 6e 53 74 61 74 69 | ...%..................).WinStati |
| 1b120 | 6f 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 57 00 00 02 00 00 00 04 00 00 00 06 00 | onEnumerate_IndexedW............ |
| 1b140 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
| 1b160 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 1b180 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 1b1a0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 1b1c0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 1b1e0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................%............. |
| 1b200 | 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f | ....L................._WinStatio |
| 1b220 | 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 57 40 32 30 00 5f 5f 69 6d 70 5f 5f 57 69 | nEnumerate_IndexedW@20.__imp__Wi |
| 1b240 | 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 57 40 32 30 00 5f 5f | nStationEnumerate_IndexedW@20.__ |
| 1b260 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 1b280 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 1b2a0 | 64 75 65 65 62 73 30 30 30 34 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00040.o/..1516161072..0... |
| 1b2c0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..713.......`.L... |
| 1b2e0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 1b300 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| 1b320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 1b340 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 1b360 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 1b380 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| 1b3a0 | 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| 1b3c0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...~.............0. |
| 1b3e0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 1b400 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 28 00 57 69 | .........%..................(.Wi |
| 1b420 | 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 41 00 00 02 00 00 00 | nStationEnumerate_IndexedA...... |
| 1b440 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 1b460 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 1b480 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 1b4a0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 1b4c0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 1b4e0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 | ........................%....... |
| 1b500 | 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e | ..........L................._Win |
| 1b520 | 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 41 40 32 30 00 5f 5f 69 | StationEnumerate_IndexedA@20.__i |
| 1b540 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 5f 49 6e 64 65 78 65 64 41 | mp__WinStationEnumerate_IndexedA |
| 1b560 | 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @20.__head_C__Users_Peter_Code_w |
| 1b580 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 1b5a0 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 33 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00039.o/..1516161072 |
| 1b5c0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 39 20 20 20 20 20 20 20 | ..0.....0.....100666..689....... |
| 1b5e0 | 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 1b600 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...X.............0`.d |
| 1b620 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 1b640 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 1b660 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 1b680 | 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...b.............0..idata$5.. |
| 1b6a0 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...l.............0..i |
| 1b6c0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 | data$4............<...v......... |
| 1b6e0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 1b700 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 1b720 | 00 00 27 00 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 57 00 00 02 00 00 00 04 00 | ..'.WinStationEnumerateW........ |
| 1b740 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 1b760 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 1b780 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 1b7a0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 1b7c0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 1b7e0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 | ................................ |
| 1b800 | 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 7d 00 00 00 5f 57 69 6e 53 74 | ........<.............}..._WinSt |
| 1b820 | 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 57 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 | ationEnumerateW@12.__imp__WinSta |
| 1b840 | 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 57 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | tionEnumerateW@12.__head_C__User |
| 1b860 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 1b880 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 33 38 2e | libwinapi_winsta_a..dueebs00038. |
| 1b8a0 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 1b8c0 | 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 | 66..711.......`.L............... |
| 1b8e0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 | .....text...............,...`... |
| 1b900 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 1b920 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 1b940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 1b960 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...j........... |
| 1b980 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 | ..0..idata$5............8...t... |
| 1b9a0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 1b9c0 | 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...~.............0..idata$6.... |
| 1b9e0 | 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
| 1ba00 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 26 00 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d | ................&.WinStationEnum |
| 1ba20 | 65 72 61 74 65 50 72 6f 63 65 73 73 65 73 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | erateProcesses.................. |
| 1ba40 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 1ba60 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 1ba80 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 1baa0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 1bac0 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 1bae0 | 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 | ............$.................J. |
| 1bb00 | 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 | ................_WinStationEnume |
| 1bb20 | 72 61 74 65 50 72 6f 63 65 73 73 65 73 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f | rateProcesses@8.__imp__WinStatio |
| 1bb40 | 6e 45 6e 75 6d 65 72 61 74 65 50 72 6f 63 65 73 73 65 73 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f | nEnumerateProcesses@8.__head_C__ |
| 1bb60 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 1bb80 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 1bba0 | 30 33 37 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 037.o/..1516161072..0.....0..... |
| 1bbc0 | 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 | 100666..711.......`.L........... |
| 1bbe0 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 1bc00 | 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | `.............0`.data........... |
| 1bc20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 1bc40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 1bc60 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 | .idata$7............4...j....... |
| 1bc80 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 1bca0 | 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | t.............0..idata$4........ |
| 1bcc0 | 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<...~.............0..idata$6 |
| 1bce0 | 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............@................... |
| 1bd00 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 25 00 57 69 6e 53 74 61 74 69 6f 6e | .%..................%.WinStation |
| 1bd20 | 45 6e 75 6d 65 72 61 74 65 4c 69 63 65 6e 73 65 73 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | EnumerateLicenses............... |
| 1bd40 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| 1bd60 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 1bd80 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 1bda0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 1bdc0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 1bde0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................$............... |
| 1be00 | 00 00 4a 00 00 00 00 00 00 00 00 00 00 00 02 00 8b 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 | ..J................._WinStationE |
| 1be20 | 6e 75 6d 65 72 61 74 65 4c 69 63 65 6e 73 65 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 | numerateLicenses@12.__imp__WinSt |
| 1be40 | 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 4c 69 63 65 6e 73 65 73 40 31 32 00 5f 5f 68 65 61 64 | ationEnumerateLicenses@12.__head |
| 1be60 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| 1be80 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 | 686_lib_libwinapi_winsta_a..duee |
| 1bea0 | 62 73 30 30 30 33 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 | bs00036.o/..1516161072..0.....0. |
| 1bec0 | 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..697.......`.L....... |
| 1bee0 | 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 1bf00 | 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...\.............0`.data....... |
| 1bf20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 1bf40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 1bf60 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 | ..0..idata$7............4...f... |
| 1bf80 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
| 1bfa0 | 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...p.............0..idata$4.... |
| 1bfc0 | 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...z.............0..ida |
| 1bfe0 | 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
| 1c000 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 24 00 57 69 6e 53 74 61 | .....%..................$.WinSta |
| 1c020 | 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 45 78 57 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | tionEnumerateExW................ |
| 1c040 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| 1c060 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 1c080 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 1c0a0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 1c0c0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 1c0e0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| 1c100 | 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 | ..@................._WinStationE |
| 1c120 | 6e 75 6d 65 72 61 74 65 45 78 57 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e | numerateExW@12.__imp__WinStation |
| 1c140 | 45 6e 75 6d 65 72 61 74 65 45 78 57 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | EnumerateExW@12.__head_C__Users_ |
| 1c160 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 1c180 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 33 35 2e 6f 2f | bwinapi_winsta_a..dueebs00035.o/ |
| 1c1a0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 1c1c0 | 20 20 36 38 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 | ..689.......`.L................. |
| 1c1e0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 | ...text...............,...X..... |
| 1c200 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 1c220 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 1c240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 1c260 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...b............. |
| 1c280 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 | 0..idata$5............8...l..... |
| 1c2a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 1c2c0 | 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..v.............0..idata$6...... |
| 1c2e0 | 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 1c300 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 23 00 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 | ..............#.WinStationEnumer |
| 1c320 | 61 74 65 41 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | ateA............................ |
| 1c340 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 1c360 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 1c380 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 1c3a0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 1c3c0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 1c3e0 | 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 | ....................<........... |
| 1c400 | 02 00 7d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 41 40 31 32 00 5f | ..}..._WinStationEnumerateA@12._ |
| 1c420 | 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 75 6d 65 72 61 74 65 41 40 31 32 00 5f 5f | _imp__WinStationEnumerateA@12.__ |
| 1c440 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 1c460 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 1c480 | 64 75 65 65 62 73 30 30 30 33 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00034.o/..1516161072..0... |
| 1c4a0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..713.......`.L... |
| 1c4c0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 1c4e0 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| 1c500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 1c520 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 1c540 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 1c560 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| 1c580 | 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| 1c5a0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...~.............0. |
| 1c5c0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 1c5e0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 22 00 57 69 | .........%..................".Wi |
| 1c600 | 6e 53 74 61 74 69 6f 6e 45 6e 61 62 6c 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 00 02 00 00 00 | nStationEnableChildSessions..... |
| 1c620 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 1c640 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 1c660 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 1c680 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 1c6a0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 1c6c0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 | ........................%....... |
| 1c6e0 | 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 8d 00 00 00 5f 57 69 6e | ..........L................._Win |
| 1c700 | 53 74 61 74 69 6f 6e 45 6e 61 62 6c 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 73 40 34 00 5f 5f 69 | StationEnableChildSessions@4.__i |
| 1c720 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 45 6e 61 62 6c 65 43 68 69 6c 64 53 65 73 73 69 6f 6e | mp__WinStationEnableChildSession |
| 1c740 | 73 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | s@4.__head_C__Users_Peter_Code_w |
| 1c760 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 1c780 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 33 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00033.o/..1516161072 |
| 1c7a0 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 39 20 20 20 20 20 20 20 | ..0.....0.....100666..689....... |
| 1c7c0 | 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 1c7e0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...X.............0`.d |
| 1c800 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 1c820 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 1c840 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 1c860 | 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...b.............0..idata$5.. |
| 1c880 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...l.............0..i |
| 1c8a0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 | data$4............<...v......... |
| 1c8c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 1c8e0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 1c900 | 00 00 21 00 57 69 6e 53 74 61 74 69 6f 6e 44 69 73 63 6f 6e 6e 65 63 74 00 00 02 00 00 00 04 00 | ..!.WinStationDisconnect........ |
| 1c920 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 1c940 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 1c960 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 1c980 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 1c9a0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 1c9c0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 | ................................ |
| 1c9e0 | 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 7d 00 00 00 5f 57 69 6e 53 74 | ........<.............}..._WinSt |
| 1ca00 | 61 74 69 6f 6e 44 69 73 63 6f 6e 6e 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 | ationDisconnect@12.__imp__WinSta |
| 1ca20 | 74 69 6f 6e 44 69 73 63 6f 6e 6e 65 63 74 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | tionDisconnect@12.__head_C__User |
| 1ca40 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 1ca60 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 33 32 2e | libwinapi_winsta_a..dueebs00032. |
| 1ca80 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 1caa0 | 36 36 20 20 37 33 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 | 66..737.......`.L............... |
| 1cac0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 | .....text...............,...h... |
| 1cae0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 1cb00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 1cb20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 1cb40 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...r........... |
| 1cb60 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 | ..0..idata$5............8...|... |
| 1cb80 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 1cba0 | 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
| 1cbc0 | 00 00 00 00 28 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ....(...@....................%.. |
| 1cbe0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 20 00 57 69 6e 53 74 61 74 69 6f 6e 43 72 65 61 | ..................WinStationCrea |
| 1cc00 | 74 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 54 72 61 6e 73 70 6f 72 74 00 02 00 00 00 04 00 00 00 | teChildSessionTransport......... |
| 1cc20 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 1cc40 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 1cc60 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 1cc80 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 1cca0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 1ccc0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 | ....................-........... |
| 1cce0 | 02 00 00 00 00 00 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 57 69 6e 53 74 61 74 | ......\................._WinStat |
| 1cd00 | 69 6f 6e 43 72 65 61 74 65 43 68 69 6c 64 53 65 73 73 69 6f 6e 54 72 61 6e 73 70 6f 72 74 40 38 | ionCreateChildSessionTransport@8 |
| 1cd20 | 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 72 65 61 74 65 43 68 69 6c 64 53 65 73 | .__imp__WinStationCreateChildSes |
| 1cd40 | 73 69 6f 6e 54 72 61 6e 73 70 6f 72 74 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | sionTransport@8.__head_C__Users_ |
| 1cd60 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
| 1cd80 | 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 33 31 2e 6f 2f | bwinapi_winsta_a..dueebs00031.o/ |
| 1cda0 | 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516161072..0.....0.....100666 |
| 1cdc0 | 20 20 36 38 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 | ..685.......`.L................. |
| 1cde0 | 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 | ...text...............,...X..... |
| 1ce00 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 1ce20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 1ce40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 1ce60 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...b............. |
| 1ce80 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 | 0..idata$5............8...l..... |
| 1cea0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 | ........0..idata$4............<. |
| 1cec0 | 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..v.............0..idata$6...... |
| 1cee0 | 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......@....................%.... |
| 1cf00 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 1f 00 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 | ................WinStationConnec |
| 1cf20 | 74 57 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | tW.............................. |
| 1cf40 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 1cf60 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 1cf80 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 1cfa0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 1cfc0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 1cfe0 | 00 00 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 | ....................8........... |
| 1d000 | 02 00 79 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 57 40 32 30 00 5f 5f 69 | ..y..._WinStationConnectW@20.__i |
| 1d020 | 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 57 40 32 30 00 5f 5f 68 65 61 64 | mp__WinStationConnectW@20.__head |
| 1d040 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
| 1d060 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 | 686_lib_libwinapi_winsta_a..duee |
| 1d080 | 62 73 30 30 30 33 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 | bs00030.o/..1516161072..0.....0. |
| 1d0a0 | 20 20 20 20 31 30 30 36 36 36 20 20 36 38 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..685.......`.L....... |
| 1d0c0 | 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 1d0e0 | 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...X.............0`.data....... |
| 1d100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 1d120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 1d140 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 | ..0..idata$7............4...b... |
| 1d160 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
| 1d180 | 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...l.............0..idata$4.... |
| 1d1a0 | 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...v.............0..ida |
| 1d1c0 | 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
| 1d1e0 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 1e 00 57 69 6e 53 74 61 | .....%....................WinSta |
| 1d200 | 74 69 6f 6e 43 6f 6e 6e 65 63 74 45 78 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | tionConnectEx................... |
| 1d220 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 1d240 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 1d260 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 1d280 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 1d2a0 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 1d2c0 | 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 | ..............................8. |
| 1d2e0 | 00 00 00 00 00 00 00 00 00 00 02 00 79 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 | ............y..._WinStationConne |
| 1d300 | 63 74 45 78 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 45 | ctEx@8.__imp__WinStationConnectE |
| 1d320 | 78 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | x@8.__head_C__Users_Peter_Code_w |
| 1d340 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 1d360 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 32 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00029.o/..1516161072 |
| 1d380 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 33 20 20 20 20 20 20 20 | ..0.....0.....100666..703....... |
| 1d3a0 | 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 1d3c0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...\.............0`.d |
| 1d3e0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 1d400 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 1d420 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 1d440 | 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...f.............0..idata$5.. |
| 1d460 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...p.............0..i |
| 1d480 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 | data$4............<...z......... |
| 1d4a0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 1d4c0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 1d4e0 | 00 00 1d 00 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 43 61 6c 6c 62 61 63 6b 00 02 00 | ....WinStationConnectCallback... |
| 1d500 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| 1d520 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 1d540 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 1d560 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 1d580 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 1d5a0 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 | .........................."..... |
| 1d5c0 | 00 00 05 00 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 02 00 87 00 00 00 5f 57 | ............F................._W |
| 1d5e0 | 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 43 61 6c 6c 62 61 63 6b 40 32 30 00 5f 5f 69 6d | inStationConnectCallback@20.__im |
| 1d600 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 43 61 6c 6c 62 61 63 6b 40 32 30 00 | p__WinStationConnectCallback@20. |
| 1d620 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 1d640 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 1d660 | 00 0a 64 75 65 65 62 73 30 30 30 32 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00028.o/..1516161072..0. |
| 1d680 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..721.......`.L. |
| 1d6a0 | 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 1d6c0 | 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...d.............0`.data. |
| 1d6e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 1d700 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 1d720 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 1d740 | 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..n.............0..idata$5...... |
| 1d760 | 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...x.............0..idata |
| 1d780 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<................. |
| 1d7a0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6........"...@......... |
| 1d7c0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 | ...........%.................... |
| 1d7e0 | 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 6e 64 4c 6f 63 6b 44 65 73 6b 74 6f 70 00 | WinStationConnectAndLockDesktop. |
| 1d800 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 1d820 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 1d840 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 1d860 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 1d880 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 1d8a0 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 27 00 | ..............................'. |
| 1d8c0 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 91 00 | ................P............... |
| 1d8e0 | 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 6e 64 4c 6f 63 6b 44 65 73 6b 74 | .._WinStationConnectAndLockDeskt |
| 1d900 | 6f 70 40 38 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 6e 64 | op@8.__imp__WinStationConnectAnd |
| 1d920 | 4c 6f 63 6b 44 65 73 6b 74 6f 70 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | LockDesktop@8.__head_C__Users_Pe |
| 1d940 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 1d960 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 32 37 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00027.o/.. |
| 1d980 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 1d9a0 | 36 38 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 | 685.......`.L................... |
| 1d9c0 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 | .text...............,...X....... |
| 1d9e0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 1da00 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 1da20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 1da40 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...b.............0. |
| 1da60 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 | .idata$5............8...l....... |
| 1da80 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 1daa0 | 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | v.............0..idata$6........ |
| 1dac0 | 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....@....................%...... |
| 1dae0 | 00 00 00 00 00 00 00 00 00 00 00 00 1b 00 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 | ..............WinStationConnectA |
| 1db00 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 1db20 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 1db40 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 1db60 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 1db80 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 1dba0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 1dbc0 | 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................8............. |
| 1dbe0 | 79 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 40 32 30 00 5f 5f 69 6d 70 | y..._WinStationConnectA@20.__imp |
| 1dc00 | 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6f 6e 6e 65 63 74 41 40 32 30 00 5f 5f 68 65 61 64 5f 43 | __WinStationConnectA@20.__head_C |
| 1dc20 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 1dc40 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 1dc60 | 30 30 30 32 36 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00026.o/..1516161072..0.....0... |
| 1dc80 | 20 20 31 30 30 36 36 36 20 20 36 38 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 | ..100666..689.......`.L......... |
| 1dca0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 1dcc0 | 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..X.............0`.data......... |
| 1dce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 1dd00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 1dd20 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 | 0..idata$7............4...b..... |
| 1dd40 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 1dd60 | 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..l.............0..idata$4...... |
| 1dd80 | 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...v.............0..idata |
| 1dda0 | 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
| 1ddc0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 57 69 6e 53 74 61 74 69 | ...%....................WinStati |
| 1dde0 | 6f 6e 43 6c 6f 73 65 53 65 72 76 65 72 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | onCloseServer................... |
| 1de00 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 1de20 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 1de40 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 1de60 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 1de80 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 1dea0 | 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 | ............................<... |
| 1dec0 | 00 00 00 00 00 00 00 00 02 00 7d 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6c 6f 73 65 53 65 | ..........}..._WinStationCloseSe |
| 1dee0 | 72 76 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 6c 6f 73 65 53 65 72 | rver@4.__imp__WinStationCloseSer |
| 1df00 | 76 65 72 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | ver@4.__head_C__Users_Peter_Code |
| 1df20 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 1df40 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 32 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00025.o/..15161610 |
| 1df60 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 39 20 20 20 20 20 | 72..0.....0.....100666..699..... |
| 1df80 | 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 1dfa0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...\.............0` |
| 1dfc0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 1dfe0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 1e000 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 1e020 | 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...f.............0..idata$5 |
| 1e040 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...p.............0. |
| 1e060 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 | .idata$4............<...z....... |
| 1e080 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 1e0a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 1e0c0 | 00 00 00 00 19 00 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 4c 6f 6f 70 42 61 63 6b 00 00 00 | ......WinStationCheckLoopBack... |
| 1e0e0 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 1e100 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 1e120 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 1e140 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 1e160 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 1e180 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 | ................................ |
| 1e1a0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 83 00 00 00 | ..............B................. |
| 1e1c0 | 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 4c 6f 6f 70 42 61 63 6b 40 31 36 00 5f 5f 69 6d | _WinStationCheckLoopBack@16.__im |
| 1e1e0 | 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 4c 6f 6f 70 42 61 63 6b 40 31 36 00 5f 5f | p__WinStationCheckLoopBack@16.__ |
| 1e200 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 1e220 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 1e240 | 64 75 65 65 62 73 30 30 30 32 34 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00024.o/..1516161072..0... |
| 1e260 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..691.......`.L... |
| 1e280 | 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 1e2a0 | 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...X.............0`.data... |
| 1e2c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 1e2e0 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 1e300 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 1e320 | 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | b.............0..idata$5........ |
| 1e340 | 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...l.............0..idata$4 |
| 1e360 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...v.............0. |
| 1e380 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 1e3a0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 18 00 57 69 | .........%....................Wi |
| 1e3c0 | 6e 53 74 61 74 69 6f 6e 43 68 65 63 6b 41 63 63 65 73 73 00 02 00 00 00 04 00 00 00 06 00 00 00 | nStationCheckAccess............. |
| 1e3e0 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| 1e400 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 1e420 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 1e440 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 1e460 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 1e480 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| 1e4a0 | 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 02 00 7f 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 43 | ..>................._WinStationC |
| 1e4c0 | 68 65 63 6b 41 63 63 65 73 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 43 | heckAccess@12.__imp__WinStationC |
| 1e4e0 | 68 65 63 6b 41 63 63 65 73 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | heckAccess@12.__head_C__Users_Pe |
| 1e500 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 1e520 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 32 33 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00023.o/.. |
| 1e540 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 1e560 | 37 32 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 | 725.......`.L................... |
| 1e580 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 | .text...............,...d....... |
| 1e5a0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 1e5c0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 1e5e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 1e600 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...n.............0. |
| 1e620 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 | .idata$5............8...x....... |
| 1e640 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 1e660 | 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 1e680 | 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | $...@....................%...... |
| 1e6a0 | 00 00 00 00 00 00 00 00 00 00 00 00 17 00 57 69 6e 53 74 61 74 69 6f 6e 42 72 6f 61 64 63 61 73 | ..............WinStationBroadcas |
| 1e6c0 | 74 53 79 73 74 65 6d 4d 65 73 73 61 67 65 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | tSystemMessage.................. |
| 1e6e0 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 1e700 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 1e720 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 1e740 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 1e760 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 1e780 | 00 00 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 54 00 | ............).................T. |
| 1e7a0 | 00 00 00 00 00 00 00 00 00 00 02 00 95 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 42 72 6f 61 64 | ................_WinStationBroad |
| 1e7c0 | 63 61 73 74 53 79 73 74 65 6d 4d 65 73 73 61 67 65 40 34 30 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 | castSystemMessage@40.__imp__WinS |
| 1e7e0 | 74 61 74 69 6f 6e 42 72 6f 61 64 63 61 73 74 53 79 73 74 65 6d 4d 65 73 73 61 67 65 40 34 30 00 | tationBroadcastSystemMessage@40. |
| 1e800 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
| 1e820 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 | i_rs_i686_lib_libwinapi_winsta_a |
| 1e840 | 00 0a 64 75 65 65 62 73 30 30 30 32 32 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 | ..dueebs00022.o/..1516161072..0. |
| 1e860 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 37 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..697.......`.L. |
| 1e880 | 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 1e8a0 | 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...\.............0`.data. |
| 1e8c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 1e8e0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 1e900 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 1e920 | 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..f.............0..idata$5...... |
| 1e940 | 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...p.............0..idata |
| 1e960 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...z............. |
| 1e980 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
| 1e9a0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 16 00 | ...........%.................... |
| 1e9c0 | 57 69 6e 53 74 61 74 69 6f 6e 41 75 74 6f 52 65 63 6f 6e 6e 65 63 74 00 00 00 02 00 00 00 04 00 | WinStationAutoReconnect......... |
| 1e9e0 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 1ea00 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 1ea20 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 1ea40 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 1ea60 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 1ea80 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 | ................................ |
| 1eaa0 | 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 81 00 00 00 5f 57 69 6e 53 74 | ........@................._WinSt |
| 1eac0 | 61 74 69 6f 6e 41 75 74 6f 52 65 63 6f 6e 6e 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 | ationAutoReconnect@4.__imp__WinS |
| 1eae0 | 74 61 74 69 6f 6e 41 75 74 6f 52 65 63 6f 6e 6e 65 63 74 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f | tationAutoReconnect@4.__head_C__ |
| 1eb00 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 1eb20 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 1eb40 | 30 32 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 021.o/..1516161072..0.....0..... |
| 1eb60 | 31 30 30 36 36 36 20 20 37 30 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 | 100666..703.......`.L........... |
| 1eb80 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 1eba0 | 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | \.............0`.data........... |
| 1ebc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 1ebe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 1ec00 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 | .idata$7............4...f....... |
| 1ec20 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 1ec40 | 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | p.............0..idata$4........ |
| 1ec60 | 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<...z.............0..idata$6 |
| 1ec80 | 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............@................... |
| 1eca0 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 15 00 57 69 6e 53 74 61 74 69 6f 6e | .%....................WinStation |
| 1ecc0 | 41 63 74 69 76 61 74 65 4c 69 63 65 6e 73 65 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | ActivateLicense................. |
| 1ece0 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 1ed00 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 1ed20 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 1ed40 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 1ed60 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 1ed80 | 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 46 00 | ............".................F. |
| 1eda0 | 00 00 00 00 00 00 00 00 00 00 02 00 87 00 00 00 5f 57 69 6e 53 74 61 74 69 6f 6e 41 63 74 69 76 | ................_WinStationActiv |
| 1edc0 | 61 74 65 4c 69 63 65 6e 73 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 69 6e 53 74 61 74 69 6f 6e 41 | ateLicense@16.__imp__WinStationA |
| 1ede0 | 63 74 69 76 61 74 65 4c 69 63 65 6e 73 65 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | ctivateLicense@16.__head_C__User |
| 1ee00 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 1ee20 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 32 30 2e | libwinapi_winsta_a..dueebs00020. |
| 1ee40 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 1ee60 | 36 36 20 20 37 33 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 | 66..731.......`.L............... |
| 1ee80 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 | .....text...............,...h... |
| 1eea0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 1eec0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 1eee0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 1ef00 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...r........... |
| 1ef20 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 | ..0..idata$5............8...|... |
| 1ef40 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 1ef60 | 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
| 1ef80 | 00 00 00 00 26 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ....&...@....................%.. |
| 1efa0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 14 00 57 54 53 55 6e 52 65 67 69 73 74 65 72 53 | ..................WTSUnRegisterS |
| 1efc0 | 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 00 00 00 00 02 00 00 00 04 00 00 00 | essionNotificationEx............ |
| 1efe0 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 1f000 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 1f020 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 1f040 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 1f060 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 1f080 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2a 00 00 00 00 00 00 00 05 00 00 00 | ....................*........... |
| 1f0a0 | 02 00 00 00 00 00 56 00 00 00 00 00 00 00 00 00 00 00 02 00 97 00 00 00 5f 57 54 53 55 6e 52 65 | ......V................._WTSUnRe |
| 1f0c0 | 67 69 73 74 65 72 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 38 00 5f 5f | gisterSessionNotificationEx@8.__ |
| 1f0e0 | 69 6d 70 5f 5f 57 54 53 55 6e 52 65 67 69 73 74 65 72 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 | imp__WTSUnRegisterSessionNotific |
| 1f100 | 61 74 69 6f 6e 45 78 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ationEx@8.__head_C__Users_Peter_ |
| 1f120 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 1f140 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 39 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00019.o/..1516 |
| 1f160 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 35 20 | 161072..0.....0.....100666..725. |
| 1f180 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 1f1a0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 | t...............,...d........... |
| 1f1c0 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 1f1e0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 1f200 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 1f220 | 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...n.............0..ida |
| 1f240 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...x........... |
| 1f260 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 | ..0..idata$4............<....... |
| 1f280 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 | ..........0..idata$6........$... |
| 1f2a0 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 1f2c0 | 00 00 00 00 00 00 00 00 13 00 57 54 53 52 65 67 69 73 74 65 72 53 65 73 73 69 6f 6e 4e 6f 74 69 | ..........WTSRegisterSessionNoti |
| 1f2e0 | 66 69 63 61 74 69 6f 6e 45 78 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 | ficationEx...................... |
| 1f300 | 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 1f320 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 1f340 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 1f360 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 1f380 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 1f3a0 | 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 54 00 00 00 00 00 | ........).................T..... |
| 1f3c0 | 00 00 00 00 00 00 02 00 95 00 00 00 5f 57 54 53 52 65 67 69 73 74 65 72 53 65 73 73 69 6f 6e 4e | ............_WTSRegisterSessionN |
| 1f3e0 | 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 54 53 52 65 67 69 73 | otificationEx@12.__imp__WTSRegis |
| 1f400 | 74 65 72 53 65 73 73 69 6f 6e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 45 78 40 31 32 00 5f 5f 68 65 | terSessionNotificationEx@12.__he |
| 1f420 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
| 1f440 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 | _i686_lib_libwinapi_winsta_a..du |
| 1f460 | 65 65 62 73 30 30 30 31 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 | eebs00018.o/..1516161072..0..... |
| 1f480 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..725.......`.L..... |
| 1f4a0 | 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 1f4c0 | 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...d.............0`.data..... |
| 1f4e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 1f500 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 1f520 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 | ....0..idata$7............4...n. |
| 1f540 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
| 1f560 | 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...x.............0..idata$4.. |
| 1f580 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<.................0..i |
| 1f5a0 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6........$...@............. |
| 1f5c0 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 12 00 53 65 72 76 | .......%....................Serv |
| 1f5e0 | 65 72 53 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 00 00 02 00 | erSetInternetConnectorStatus.... |
| 1f600 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| 1f620 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 1f640 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 1f660 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 1f680 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 1f6a0 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 | ..........................)..... |
| 1f6c0 | 00 00 05 00 00 00 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 02 00 95 00 00 00 5f 53 | ............T................._S |
| 1f6e0 | 65 72 76 65 72 53 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 40 | erverSetInternetConnectorStatus@ |
| 1f700 | 31 32 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 53 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 | 12.__imp__ServerSetInternetConne |
| 1f720 | 63 74 6f 72 53 74 61 74 75 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 | ctorStatus@12.__head_C__Users_Pe |
| 1f740 | 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 | ter_Code_winapi_rs_i686_lib_libw |
| 1f760 | 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 37 2e 6f 2f 20 20 | inapi_winsta_a..dueebs00017.o/.. |
| 1f780 | 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516161072..0.....0.....100666.. |
| 1f7a0 | 37 33 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 | 737.......`.L................... |
| 1f7c0 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 | .text...............,...h....... |
| 1f7e0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 1f800 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 1f820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 1f840 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...r.............0. |
| 1f860 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 | .idata$5............8...|....... |
| 1f880 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 | ......0..idata$4............<... |
| 1f8a0 | 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 1f8c0 | 28 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | (...@....................%...... |
| 1f8e0 | 00 00 00 00 00 00 00 00 00 00 00 00 11 00 53 65 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e | ..............ServerQueryInetCon |
| 1f900 | 6e 65 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | nectorInformationW.............. |
| 1f920 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
| 1f940 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 1f960 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 1f980 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 1f9a0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 1f9c0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................-............... |
| 1f9e0 | 00 00 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 53 65 72 76 65 72 51 75 65 72 79 | ..\................._ServerQuery |
| 1fa00 | 49 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 5f 69 | InetConnectorInformationW@16.__i |
| 1fa20 | 6d 70 5f 5f 53 65 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e 66 6f | mp__ServerQueryInetConnectorInfo |
| 1fa40 | 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | rmationW@16.__head_C__Users_Pete |
| 1fa60 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 1fa80 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 36 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00016.o/..15 |
| 1faa0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 | 16161072..0.....0.....100666..73 |
| 1fac0 | 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 7.......`.L....................t |
| 1fae0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 | ext...............,...h......... |
| 1fb00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 1fb20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 1fb40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 1fb60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...r.............0..i |
| 1fb80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 | data$5............8...|......... |
| 1fba0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 | ....0..idata$4............<..... |
| 1fbc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 | ............0..idata$6........(. |
| 1fbe0 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 1fc00 | 00 00 00 00 00 00 00 00 00 00 10 00 53 65 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e 6e 65 | ............ServerQueryInetConne |
| 1fc20 | 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | ctorInformationA................ |
| 1fc40 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 1fc60 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 1fc80 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 1fca0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 1fcc0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 1fce0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ..............-................. |
| 1fd00 | 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 53 65 72 76 65 72 51 75 65 72 79 49 6e | \................._ServerQueryIn |
| 1fd20 | 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 31 36 00 5f 5f 69 6d 70 | etConnectorInformationA@16.__imp |
| 1fd40 | 5f 5f 53 65 72 76 65 72 51 75 65 72 79 49 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 49 6e 66 6f 72 6d | __ServerQueryInetConnectorInform |
| 1fd60 | 61 74 69 6f 6e 41 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | ationA@16.__head_C__Users_Peter_ |
| 1fd80 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 1fda0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 35 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00015.o/..1516 |
| 1fdc0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 | 161072..0.....0.....100666..709. |
| 1fde0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 1fe00 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 1fe20 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 1fe40 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 1fe60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 1fe80 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 1fea0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 1fec0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 | ..0..idata$4............<...~... |
| 1fee0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 | ..........0..idata$6............ |
| 1ff00 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 1ff20 | 00 00 00 00 00 00 00 00 0f 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 55 6e 6c 6f 61 64 50 | ..........ServerLicensingUnloadP |
| 1ff40 | 6f 6c 69 63 79 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | olicy........................... |
| 1ff60 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 1ff80 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 1ffa0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 1ffc0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 1ffe0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 20000 | 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 | ....#.................H......... |
| 20020 | 00 00 02 00 89 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 55 6e 6c 6f 61 64 50 6f | ........_ServerLicensingUnloadPo |
| 20040 | 6c 69 63 79 40 38 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 55 6e 6c | licy@8.__imp__ServerLicensingUnl |
| 20060 | 6f 61 64 50 6f 6c 69 63 79 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | oadPolicy@8.__head_C__Users_Pete |
| 20080 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 200a0 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 34 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00014.o/..15 |
| 200c0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16161072..0.....0.....100666..70 |
| 200e0 | 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 1.......`.L....................t |
| 20100 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
| 20120 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 20140 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 20160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 20180 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
| 201a0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
| 201c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 | ....0..idata$4............<...z. |
| 201e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 | ............0..idata$6.......... |
| 20200 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 20220 | 00 00 00 00 00 00 00 00 00 00 0e 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 53 65 74 50 6f | ............ServerLicensingSetPo |
| 20240 | 6c 69 63 79 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | licy............................ |
| 20260 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 20280 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 202a0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 202c0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 202e0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 20300 | 00 00 21 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 | ..!.................D........... |
| 20320 | 02 00 85 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 53 65 74 50 6f 6c 69 63 79 40 | ......_ServerLicensingSetPolicy@ |
| 20340 | 31 32 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 53 65 74 50 6f 6c 69 | 12.__imp__ServerLicensingSetPoli |
| 20360 | 63 79 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | cy@12.__head_C__Users_Peter_Code |
| 20380 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 203a0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00013.o/..15161610 |
| 203c0 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 37 20 20 20 20 20 | 72..0.....0.....100666..687..... |
| 203e0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 20400 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...X.............0` |
| 20420 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 20440 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 20460 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 20480 | 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...b.............0..idata$5 |
| 204a0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...l.............0. |
| 204c0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 | .idata$4............<...v....... |
| 204e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 20500 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 20520 | 00 00 00 00 0d 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4f 70 65 6e 57 00 00 02 00 00 00 | ......ServerLicensingOpenW...... |
| 20540 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 20560 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 20580 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 205a0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 205c0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 205e0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 | ................................ |
| 20600 | 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 7b 00 00 00 5f 53 65 72 | ..........:.............{..._Ser |
| 20620 | 76 65 72 4c 69 63 65 6e 73 69 6e 67 4f 70 65 6e 57 40 34 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 | verLicensingOpenW@4.__imp__Serve |
| 20640 | 72 4c 69 63 65 6e 73 69 6e 67 4f 70 65 6e 57 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | rLicensingOpenW@4.__head_C__User |
| 20660 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
| 20680 | 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 31 32 2e | libwinapi_winsta_a..dueebs00012. |
| 206a0 | 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516161072..0.....0.....1006 |
| 206c0 | 36 36 20 20 36 38 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 | 66..687.......`.L............... |
| 206e0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 | .....text...............,...X... |
| 20700 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 20720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 20740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 20760 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...b........... |
| 20780 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 | ..0..idata$5............8...l... |
| 207a0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
| 207c0 | 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...v.............0..idata$6.... |
| 207e0 | 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
| 20800 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e | ..................ServerLicensin |
| 20820 | 67 4f 70 65 6e 41 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | gOpenA.......................... |
| 20840 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 20860 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 20880 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 208a0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 208c0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 208e0 | 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 | ......................:......... |
| 20900 | 00 00 02 00 7b 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4f 70 65 6e 41 40 34 00 | ....{..._ServerLicensingOpenA@4. |
| 20920 | 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4f 70 65 6e 41 40 34 00 5f 5f | __imp__ServerLicensingOpenA@4.__ |
| 20940 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
| 20960 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a | rs_i686_lib_libwinapi_winsta_a.. |
| 20980 | 64 75 65 65 62 73 30 30 30 31 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 | dueebs00011.o/..1516161072..0... |
| 209a0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | ..0.....100666..701.......`.L... |
| 209c0 | 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 209e0 | 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...\.............0`.data... |
| 20a00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 20a20 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 20a40 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 20a60 | 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | f.............0..idata$5........ |
| 20a80 | 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...p.............0..idata$4 |
| 20aa0 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...z.............0. |
| 20ac0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
| 20ae0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 53 65 | .........%....................Se |
| 20b00 | 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 4c 6f 61 64 50 6f 6c 69 63 79 00 02 00 00 00 04 00 00 00 | rverLicensingLoadPolicy......... |
| 20b20 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 20b40 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 20b60 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 20b80 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 20ba0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 20bc0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 21 00 00 00 00 00 00 00 05 00 00 00 | ....................!........... |
| 20be0 | 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 02 00 85 00 00 00 5f 53 65 72 76 65 72 4c | ......D................._ServerL |
| 20c00 | 69 63 65 6e 73 69 6e 67 4c 6f 61 64 50 6f 6c 69 63 79 40 38 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 | icensingLoadPolicy@8.__imp__Serv |
| 20c20 | 65 72 4c 69 63 65 6e 73 69 6e 67 4c 6f 61 64 50 6f 6c 69 63 79 40 38 00 5f 5f 68 65 61 64 5f 43 | erLicensingLoadPolicy@8.__head_C |
| 20c40 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
| 20c60 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 | 6_lib_libwinapi_winsta_a..dueebs |
| 20c80 | 30 30 30 31 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 | 00010.o/..1516161072..0.....0... |
| 20ca0 | 20 20 31 30 30 36 36 36 20 20 37 33 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 | ..100666..737.......`.L......... |
| 20cc0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 20ce0 | 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..h.............0`.data......... |
| 20d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 20d20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 20d40 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 | 0..idata$7............4...r..... |
| 20d60 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
| 20d80 | 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..|.............0..idata$4...... |
| 20da0 | 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<.................0..idata |
| 20dc0 | 24 36 00 00 00 00 00 00 00 00 28 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6........(...@................. |
| 20de0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 53 65 72 76 65 72 4c 69 | ...%....................ServerLi |
| 20e00 | 63 65 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 00 00 02 00 | censingGetPolicyInformationW.... |
| 20e20 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
| 20e40 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 20e60 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 20e80 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 20ea0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 20ec0 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 | ..........................-..... |
| 20ee0 | 00 00 05 00 00 00 02 00 00 00 00 00 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 53 | ............\................._S |
| 20f00 | 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 | erverLicensingGetPolicyInformati |
| 20f20 | 6f 6e 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 | onW@16.__imp__ServerLicensingGet |
| 20f40 | 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f | PolicyInformationW@16.__head_C__ |
| 20f60 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 20f80 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 20fa0 | 30 30 39 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 009.o/..1516161072..0.....0..... |
| 20fc0 | 31 30 30 36 36 36 20 20 37 33 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 | 100666..737.......`.L........... |
| 20fe0 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 21000 | 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | h.............0`.data........... |
| 21020 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 21040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 21060 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 | .idata$7............4...r....... |
| 21080 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 210a0 | 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | |.............0..idata$4........ |
| 210c0 | 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<.................0..idata$6 |
| 210e0 | 00 00 00 00 00 00 00 00 28 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ........(...@................... |
| 21100 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 09 00 53 65 72 76 65 72 4c 69 63 65 | .%....................ServerLice |
| 21120 | 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 00 00 02 00 00 00 | nsingGetPolicyInformationA...... |
| 21140 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
| 21160 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 21180 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 211a0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 211c0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 211e0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 | ........................-....... |
| 21200 | 05 00 00 00 02 00 00 00 00 00 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 53 65 72 | ..........\................._Ser |
| 21220 | 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e | verLicensingGetPolicyInformation |
| 21240 | 41 40 31 36 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 50 6f | A@16.__imp__ServerLicensingGetPo |
| 21260 | 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | licyInformationA@16.__head_C__Us |
| 21280 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
| 212a0 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 | b_libwinapi_winsta_a..dueebs0000 |
| 212c0 | 38 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 8.o/..1516161072..0.....0.....10 |
| 212e0 | 30 36 36 36 20 20 36 39 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 | 0666..699.......`.L............. |
| 21300 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 | .......text...............,...\. |
| 21320 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 21340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 21360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 21380 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 | data$7............4...f......... |
| 213a0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 | ....0..idata$5............8...p. |
| 213c0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
| 213e0 | 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<...z.............0..idata$6.. |
| 21400 | 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........@....................% |
| 21420 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 08 00 53 65 72 76 65 72 4c 69 63 65 6e 73 | ....................ServerLicens |
| 21440 | 69 6e 67 47 65 74 50 6f 6c 69 63 79 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | ingGetPolicy.................... |
| 21460 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 21480 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 214a0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 214c0 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 214e0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 21500 | 01 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 | ............................B... |
| 21520 | 00 00 00 00 00 00 00 00 02 00 83 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 | .............._ServerLicensingGe |
| 21540 | 74 50 6f 6c 69 63 79 40 38 00 5f 5f 69 6d 70 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 | tPolicy@8.__imp__ServerLicensing |
| 21560 | 47 65 74 50 6f 6c 69 63 79 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | GetPolicy@8.__head_C__Users_Pete |
| 21580 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
| 215a0 | 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 37 2e 6f 2f 20 20 31 35 | api_winsta_a..dueebs00007.o/..15 |
| 215c0 | 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 | 16161072..0.....0.....100666..73 |
| 215e0 | 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 7.......`.L....................t |
| 21600 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 | ext...............,...h......... |
| 21620 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 21640 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 21660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 21680 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...r.............0..i |
| 216a0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 | data$5............8...|......... |
| 216c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 | ....0..idata$4............<..... |
| 216e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 | ............0..idata$6........(. |
| 21700 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
| 21720 | 00 00 00 00 00 00 00 00 00 00 07 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 41 76 | ............ServerLicensingGetAv |
| 21740 | 61 69 6c 61 62 6c 65 50 6f 6c 69 63 79 49 64 73 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | ailablePolicyIds................ |
| 21760 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
| 21780 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 217a0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 217c0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 217e0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 21800 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ..............-................. |
| 21820 | 5c 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 | \................._ServerLicensi |
| 21840 | 6e 67 47 65 74 41 76 61 69 6c 61 62 6c 65 50 6f 6c 69 63 79 49 64 73 40 31 32 00 5f 5f 69 6d 70 | ngGetAvailablePolicyIds@12.__imp |
| 21860 | 5f 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 47 65 74 41 76 61 69 6c 61 62 6c 65 50 6f 6c | __ServerLicensingGetAvailablePol |
| 21880 | 69 63 79 49 64 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | icyIds@12.__head_C__Users_Peter_ |
| 218a0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 218c0 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 36 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00006.o/..1516 |
| 218e0 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 35 20 | 161072..0.....0.....100666..735. |
| 21900 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 21920 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 | t...............,...h........... |
| 21940 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 21960 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 21980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 219a0 | 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...r.............0..ida |
| 219c0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...|........... |
| 219e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 | ..0..idata$4............<....... |
| 21a00 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 | ..........0..idata$6........(... |
| 21a20 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 21a40 | 00 00 00 00 00 00 00 00 06 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 46 72 65 65 50 6f 6c | ..........ServerLicensingFreePol |
| 21a60 | 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | icyInformation.................. |
| 21a80 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 21aa0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 21ac0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 21ae0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 21b00 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 21b20 | 00 00 01 00 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5a 00 | ............,.................Z. |
| 21b40 | 00 00 00 00 00 00 00 00 00 00 02 00 9b 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 | ................_ServerLicensing |
| 21b60 | 46 72 65 65 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 53 | FreePolicyInformation@4.__imp__S |
| 21b80 | 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 46 72 65 65 50 6f 6c 69 63 79 49 6e 66 6f 72 6d 61 74 | erverLicensingFreePolicyInformat |
| 21ba0 | 69 6f 6e 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | ion@4.__head_C__Users_Peter_Code |
| 21bc0 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 21be0 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 35 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00005.o/..15161610 |
| 21c00 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 34 33 20 20 20 20 20 | 72..0.....0.....100666..743..... |
| 21c20 | 20 20 60 0a 4c 01 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 21c40 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...l.............0` |
| 21c60 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 21c80 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 21ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 21cc0 | 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...v.............0..idata$5 |
| 21ce0 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8.................0. |
| 21d00 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 8a 01 00 00 00 00 00 00 | .idata$4............<........... |
| 21d20 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 2a 00 00 00 40 01 00 00 | ......0..idata$6........*...@... |
| 21d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 21d60 | 00 00 00 00 05 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 44 65 61 63 74 69 76 61 74 65 43 | ......ServerLicensingDeactivateC |
| 21d80 | 75 72 72 65 6e 74 50 6f 6c 69 63 79 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 | urrentPolicy.................... |
| 21da0 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 21dc0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 21de0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 21e00 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 21e20 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 21e40 | 00 00 01 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5e 00 | ..............................^. |
| 21e60 | 00 00 00 00 00 00 00 00 00 00 02 00 9f 00 00 00 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 | ................_ServerLicensing |
| 21e80 | 44 65 61 63 74 69 76 61 74 65 43 75 72 72 65 6e 74 50 6f 6c 69 63 79 40 34 00 5f 5f 69 6d 70 5f | DeactivateCurrentPolicy@4.__imp_ |
| 21ea0 | 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 44 65 61 63 74 69 76 61 74 65 43 75 72 72 65 6e | _ServerLicensingDeactivateCurren |
| 21ec0 | 74 50 6f 6c 69 63 79 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | tPolicy@4.__head_C__Users_Peter_ |
| 21ee0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
| 21f00 | 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 34 2e 6f 2f 20 20 31 35 31 36 | i_winsta_a..dueebs00004.o/..1516 |
| 21f20 | 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 37 20 | 161072..0.....0.....100666..687. |
| 21f40 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
| 21f60 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 | t...............,...X........... |
| 21f80 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 21fa0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 21fc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 21fe0 | 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...b.............0..ida |
| 22000 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...l........... |
| 22020 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 | ..0..idata$4............<...v... |
| 22040 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 | ..........0..idata$6............ |
| 22060 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
| 22080 | 00 00 00 00 00 00 00 00 04 00 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 43 6c 6f 73 65 00 00 | ..........ServerLicensingClose.. |
| 220a0 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
| 220c0 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 220e0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 22100 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 22120 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 22140 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 | ................................ |
| 22160 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 7b 00 00 00 | ..............:.............{... |
| 22180 | 5f 53 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 43 6c 6f 73 65 40 34 00 5f 5f 69 6d 70 5f 5f 53 | _ServerLicensingClose@4.__imp__S |
| 221a0 | 65 72 76 65 72 4c 69 63 65 6e 73 69 6e 67 43 6c 6f 73 65 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f | erverLicensingClose@4.__head_C__ |
| 221c0 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
| 221e0 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 | lib_libwinapi_winsta_a..dueebs00 |
| 22200 | 30 30 33 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 003.o/..1516161072..0.....0..... |
| 22220 | 31 30 30 36 36 36 20 20 37 32 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 | 100666..725.......`.L........... |
| 22240 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 22260 | 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | d.............0`.data........... |
| 22280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 222a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 222c0 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 | .idata$7............4...n....... |
| 222e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 22300 | 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | x.............0..idata$4........ |
| 22320 | 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<.................0..idata$6 |
| 22340 | 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ........$...@................... |
| 22360 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 03 00 53 65 72 76 65 72 47 65 74 49 | .%....................ServerGetI |
| 22380 | 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 00 00 02 00 00 00 04 00 00 00 | nternetConnectorStatus.......... |
| 223a0 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 223c0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 223e0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 22400 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 22420 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 22440 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 | ....................)........... |
| 22460 | 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 02 00 95 00 00 00 5f 53 65 72 76 65 72 47 | ......T................._ServerG |
| 22480 | 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 61 74 75 73 40 31 32 00 5f 5f 69 | etInternetConnectorStatus@12.__i |
| 224a0 | 6d 70 5f 5f 53 65 72 76 65 72 47 65 74 49 6e 74 65 72 6e 65 74 43 6f 6e 6e 65 63 74 6f 72 53 74 | mp__ServerGetInternetConnectorSt |
| 224c0 | 61 74 75 73 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | atus@12.__head_C__Users_Peter_Co |
| 224e0 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
| 22500 | 77 69 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 32 2e 6f 2f 20 20 31 35 31 36 31 36 | winsta_a..dueebs00002.o/..151616 |
| 22520 | 31 30 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 35 20 20 20 | 1072..0.....0.....100666..735... |
| 22540 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L....................text. |
| 22560 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...h............. |
| 22580 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 225a0 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 225c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 225e0 | 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...r.............0..idata |
| 22600 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...|............. |
| 22620 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 | 0..idata$4............<......... |
| 22640 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 40 01 | ........0..idata$6........(...@. |
| 22660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 22680 | 00 00 00 00 00 00 02 00 52 65 6d 6f 74 65 41 73 73 69 73 74 61 6e 63 65 50 72 65 70 61 72 65 53 | ........RemoteAssistancePrepareS |
| 226a0 | 79 73 74 65 6d 52 65 73 74 6f 72 65 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | ystemRestore.................... |
| 226c0 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 226e0 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 22700 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 22720 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 22740 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 22760 | 01 00 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5a 00 00 00 | ..........,.................Z... |
| 22780 | 00 00 00 00 00 00 00 00 02 00 9b 00 00 00 5f 52 65 6d 6f 74 65 41 73 73 69 73 74 61 6e 63 65 50 | .............._RemoteAssistanceP |
| 227a0 | 72 65 70 61 72 65 53 79 73 74 65 6d 52 65 73 74 6f 72 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 65 6d | repareSystemRestore@4.__imp__Rem |
| 227c0 | 6f 74 65 41 73 73 69 73 74 61 6e 63 65 50 72 65 70 61 72 65 53 79 73 74 65 6d 52 65 73 74 6f 72 | oteAssistancePrepareSystemRestor |
| 227e0 | 65 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | e@4.__head_C__Users_Peter_Code_w |
| 22800 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 73 | inapi_rs_i686_lib_libwinapi_wins |
| 22820 | 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 31 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 37 32 | ta_a..dueebs00001.o/..1516161072 |
| 22840 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 | ..0.....0.....100666..709....... |
| 22860 | 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
| 22880 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...`.............0`.d |
| 228a0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 228c0 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 228e0 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 22900 | 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...j.............0..idata$5.. |
| 22920 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...t.............0..i |
| 22940 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 01 00 | data$4............<...~......... |
| 22960 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
| 22980 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 229a0 | 00 00 01 00 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 57 00 00 | ....LogonIdFromWinStationNameW.. |
| 229c0 | 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
| 229e0 | 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 22a00 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 22a20 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 22a40 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 22a60 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 | ..............................#. |
| 22a80 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 89 00 | ................H............... |
| 22aa0 | 00 00 5f 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 57 40 31 32 | .._LogonIdFromWinStationNameW@12 |
| 22ac0 | 00 5f 5f 69 6d 70 5f 5f 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d | .__imp__LogonIdFromWinStationNam |
| 22ae0 | 65 57 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | eW@12.__head_C__Users_Peter_Code |
| 22b00 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 | _winapi_rs_i686_lib_libwinapi_wi |
| 22b20 | 6e 73 74 61 5f 61 00 0a 64 75 65 65 62 73 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 31 30 | nsta_a..dueebs00000.o/..15161610 |
| 22b40 | 37 32 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 | 72..0.....0.....100666..709..... |
| 22b60 | 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
| 22b80 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...`.............0` |
| 22ba0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 22bc0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 22be0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 22c00 | 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...j.............0..idata$5 |
| 22c20 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...t.............0. |
| 22c40 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 | .idata$4............<...~....... |
| 22c60 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 | ......0..idata$6............@... |
| 22c80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 22ca0 | 00 00 00 00 00 00 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 41 | ......LogonIdFromWinStationNameA |
| 22cc0 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
| 22ce0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 22d00 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 22d20 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 22d40 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 22d60 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 22d80 | 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 | #.................H............. |
| 22da0 | 89 00 00 00 5f 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e 61 6d 65 41 40 | ...._LogonIdFromWinStationNameA@ |
| 22dc0 | 31 32 00 5f 5f 69 6d 70 5f 5f 4c 6f 67 6f 6e 49 64 46 72 6f 6d 57 69 6e 53 74 61 74 69 6f 6e 4e | 12.__imp__LogonIdFromWinStationN |
| 22de0 | 61 6d 65 41 40 31 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | ameA@12.__head_C__Users_Peter_Co |
| 22e00 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
| 22e20 | 77 69 6e 73 74 61 5f 61 00 0a | winsta_a.. |