ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 39 | !<arch>./...............15161609 |
0020 | 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 31 30 35 32 20 20 20 20 | 66..0.....0.....0.......1052.... |
0040 | 20 20 60 0a 00 00 00 1a 00 00 04 60 00 00 07 40 00 00 0a 9a 00 00 0a 9a 00 00 0d 9c 00 00 0d 9c | ..`........`...@................ |
0060 | 00 00 10 ce 00 00 10 ce 00 00 13 cc 00 00 13 cc 00 00 16 d6 00 00 16 d6 00 00 19 d4 00 00 19 d4 | ................................ |
0080 | 00 00 1d 02 00 00 1d 02 00 00 20 1e 00 00 20 1e 00 00 23 34 00 00 23 34 00 00 26 38 00 00 26 38 | ..................#4..#4..&8..&8 |
00a0 | 00 00 29 46 00 00 29 46 00 00 2c 84 00 00 2c 84 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ..)F..)F..,...,.__C__Users_Peter |
00c0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | _Code_winapi_rs_i686_lib_libwina |
00e0 | 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 | pi_onecore_api_ms_win_eventing_t |
0100 | 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | dh_l1_1_0_a_iname.__head_C__User |
0120 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
0140 | 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 | libwinapi_onecore_api_ms_win_eve |
0160 | 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e | nting_tdh_l1_1_0_a._TdhUnloadMan |
0180 | 69 66 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 | ifest@4.__imp__TdhUnloadManifest |
01a0 | 40 34 00 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 | @4._TdhQueryProviderFieldInforma |
01c0 | 74 69 6f 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 | tion@24.__imp__TdhQueryProviderF |
01e0 | 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 34 00 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 | ieldInformation@24._TdhLoadManif |
0200 | 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f | est@4.__imp__TdhLoadManifest@4._ |
0220 | 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 | TdhGetPropertySize@24.__imp__Tdh |
0240 | 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 54 64 68 47 65 74 50 72 6f 70 65 72 | GetPropertySize@24._TdhGetProper |
0260 | 74 79 40 32 38 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 40 32 38 00 5f | ty@28.__imp__TdhGetProperty@28._ |
0280 | 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 | TdhGetManifestEventInformation@1 |
02a0 | 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f | 6.__imp__TdhGetManifestEventInfo |
02c0 | 72 6d 61 74 69 6f 6e 40 31 36 00 5f 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d | rmation@16._TdhGetEventMapInform |
02e0 | 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e | ation@16.__imp__TdhGetEventMapIn |
0300 | 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 54 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 | formation@16._TdhGetEventInforma |
0320 | 74 69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d | tion@20.__imp__TdhGetEventInform |
0340 | 61 74 69 6f 6e 40 32 30 00 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 00 5f | ation@20._TdhFormatProperty@44._ |
0360 | 5f 69 6d 70 5f 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 00 5f 54 64 68 45 | _imp__TdhFormatProperty@44._TdhE |
0380 | 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 40 38 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e | numerateProviders@8.__imp__TdhEn |
03a0 | 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 40 38 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 | umerateProviders@8._TdhEnumerate |
03c0 | 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d | ProviderFieldInformation@16.__im |
03e0 | 70 5f 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f | p__TdhEnumerateProviderFieldInfo |
0400 | 72 6d 61 74 69 6f 6e 40 31 36 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 | rmation@16._TdhEnumerateManifest |
0420 | 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e 75 6d | ProviderEvents@12.__imp__TdhEnum |
0440 | 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 40 31 32 00 00 | erateManifestProviderEvents@12.. |
0460 | 64 65 6d 63 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 | demcbt.o/.......1516160966..0... |
0480 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 36 20 20 20 20 20 20 20 60 0a 4c 01 06 00 | ..0.....100666..676.......`.L... |
04a0 | 00 00 00 00 30 01 00 00 0f 00 00 00 00 00 05 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | ....0............text........... |
04c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ......................0`.data... |
04e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
0500 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
0520 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 04 01 00 00 | ......0..idata$4................ |
0540 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | ............@.0..idata$5........ |
0560 | 04 00 00 00 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 37 | ....................@.0..idata$7 |
0580 | 00 00 00 00 00 00 00 00 24 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ........$...................@.0. |
05a0 | 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 69 6e 2d 65 76 65 6e 74 69 6e 67 2d 74 64 68 2d | ........api-ms-win-eventing-tdh- |
05c0 | 6c 31 2d 31 2d 30 2e 64 6c 6c 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 | l1-1-0.dll...file...........g.fa |
05e0 | 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | ke...............text........... |
0600 | 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 | .....................data....... |
0620 | 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 | .........................bss.... |
0640 | 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 | .............................ida |
0660 | 74 61 24 34 00 00 00 00 04 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$4............................ |
0680 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 00 00 00 00 | .idata$5........................ |
06a0 | 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 23 00 00 00 00 00 00 00 00 00 | .....idata$7..........#......... |
06c0 | 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 66 00 00 00 5f 5f | ..........................f...__ |
06e0 | 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 | C__Users_Peter_Code_winapi_rs_i6 |
0700 | 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f | 86_lib_libwinapi_onecore_api_ms_ |
0720 | 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 | win_eventing_tdh_l1_1_0_a_iname. |
0740 | 64 65 6d 63 62 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 | demcbh.o/.......1516160966..0... |
0760 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 39 37 20 20 20 20 20 20 20 60 0a 4c 01 06 00 | ..0.....100666..797.......`.L... |
0780 | 00 00 00 00 36 01 00 00 10 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | ....6............text........... |
07a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ......................0`.data... |
07c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
07e0 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
0800 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 | ......0..idata$2................ |
0820 | 18 01 00 00 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | ............@.0..idata$5........ |
0840 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 | ....................@.0..idata$4 |
0860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
0880 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 07 00 0c 00 | ................................ |
08a0 | 00 00 0f 00 00 00 07 00 10 00 00 00 0d 00 00 00 07 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff | ...................file......... |
08c0 | 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 | ..g.fake..............hname..... |
08e0 | 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 | ........fthunk.............text. |
0900 | 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 | ...............................d |
0920 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
0940 | 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 | ...bss.......................... |
0960 | 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 | .......idata$2.................. |
0980 | 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
09a0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 | ta$5............................ |
09c0 | 00 00 00 00 65 00 00 00 00 00 00 00 00 00 00 00 02 00 c7 00 00 00 5f 5f 68 65 61 64 5f 43 5f 5f | ....e.................__head_C__ |
09e0 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
0a00 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e | lib_libwinapi_onecore_api_ms_win |
0a20 | 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 5f 5f 43 5f 5f 55 73 65 72 | _eventing_tdh_l1_1_0_a.__C__User |
0a40 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
0a60 | 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 | libwinapi_onecore_api_ms_win_eve |
0a80 | 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 0a 64 65 6d 63 62 73 | nting_tdh_l1_1_0_a_iname..demcbs |
0aa0 | 30 30 30 31 31 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 | 00011.o/..1516160966..0.....0... |
0ac0 | 20 20 31 30 30 36 36 36 20 20 37 30 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 | ..100666..709.......`.L.......|. |
0ae0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
0b00 | 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..T.............0`.data......... |
0b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
0b40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
0b60 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 | 0..idata$7............4...^..... |
0b80 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
0ba0 | 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..h.............0..idata$4...... |
0bc0 | 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...r.............0..idata |
0be0 | 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
0c00 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 54 64 68 55 6e 6c 6f 61 | ...%....................TdhUnloa |
0c20 | 64 4d 61 6e 69 66 65 73 74 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | dManifest....................... |
0c40 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
0c60 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
0c80 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
0ca0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
0cc0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
0ce0 | 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 | ........................4....... |
0d00 | 00 00 00 00 02 00 95 00 00 00 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f | .........._TdhUnloadManifest@4._ |
0d20 | 5f 69 6d 70 5f 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f 5f 68 65 61 64 | _imp__TdhUnloadManifest@4.__head |
0d40 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
0d60 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 | 686_lib_libwinapi_onecore_api_ms |
0d80 | 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 | _win_eventing_tdh_l1_1_0_a..demc |
0da0 | 62 73 30 30 30 31 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 | bs00010.o/..1516160966..0.....0. |
0dc0 | 20 20 20 20 31 30 30 36 36 36 20 20 37 35 37 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..757.......`.L....... |
0de0 | 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
0e00 | 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...d.............0`.data....... |
0e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
0e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0e60 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 | ..0..idata$7............4...n... |
0e80 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
0ea0 | 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...x.............0..idata$4.... |
0ec0 | 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<.................0..ida |
0ee0 | 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6........$...@............... |
0f00 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 54 64 68 51 75 65 | .....%....................TdhQue |
0f20 | 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 | ryProviderFieldInformation...... |
0f40 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
0f60 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
0f80 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
0fa0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
0fc0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
0fe0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 | ........................)....... |
1000 | 05 00 00 00 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 02 00 b5 00 00 00 5f 54 64 68 | ..........T................._Tdh |
1020 | 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 34 | QueryProviderFieldInformation@24 |
1040 | 00 5f 5f 69 6d 70 5f 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 | .__imp__TdhQueryProviderFieldInf |
1060 | 6f 72 6d 61 74 69 6f 6e 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 | ormation@24.__head_C__Users_Pete |
1080 | 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e | r_Code_winapi_rs_i686_lib_libwin |
10a0 | 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f | api_onecore_api_ms_win_eventing_ |
10c0 | 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 39 2e 6f 2f 20 20 31 35 | tdh_l1_1_0_a..demcbs00009.o/..15 |
10e0 | 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16160966..0.....0.....100666..70 |
1100 | 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 5.......`.L.......|............t |
1120 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 | ext...............,...T......... |
1140 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
1160 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
1180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
11a0 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...^.............0..i |
11c0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 | data$5............8...h......... |
11e0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 | ....0..idata$4............<...r. |
1200 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 | ............0..idata$6.......... |
1220 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
1240 | 00 00 00 00 00 00 00 00 00 00 09 00 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 00 00 02 00 | ............TdhLoadManifest..... |
1260 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
1280 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
12a0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
12c0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
12e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
1300 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 00 00 | ................................ |
1320 | 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02 00 91 00 00 00 5f 54 | ............0................._T |
1340 | 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 4c 6f 61 64 4d | dhLoadManifest@4.__imp__TdhLoadM |
1360 | 61 6e 69 66 65 73 74 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | anifest@4.__head_C__Users_Peter_ |
1380 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
13a0 | 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 | i_onecore_api_ms_win_eventing_td |
13c0 | 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 38 2e 6f 2f 20 20 31 35 31 36 | h_l1_1_0_a..demcbs00008.o/..1516 |
13e0 | 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 37 20 | 160966..0.....0.....100666..717. |
1400 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
1420 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 | t...............,...X........... |
1440 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
1460 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
1480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
14a0 | 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...b.............0..ida |
14c0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...l........... |
14e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 | ..0..idata$4............<...v... |
1500 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 | ..........0..idata$6............ |
1520 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
1540 | 00 00 00 00 00 00 00 00 08 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 00 00 00 | ..........TdhGetPropertySize.... |
1560 | 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 | ................................ |
1580 | 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
15a0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
15c0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
15e0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
1600 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 | ................................ |
1620 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 99 00 00 00 | ..............8................. |
1640 | 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 54 64 | _TdhGetPropertySize@24.__imp__Td |
1660 | 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | hGetPropertySize@24.__head_C__Us |
1680 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
16a0 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 | b_libwinapi_onecore_api_ms_win_e |
16c0 | 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 | venting_tdh_l1_1_0_a..demcbs0000 |
16e0 | 37 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 7.o/..1516160966..0.....0.....10 |
1700 | 30 36 36 36 20 20 37 30 35 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 | 0666..705.......`.L.......|..... |
1720 | 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 | .......text...............,...T. |
1740 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
1760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
1780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
17a0 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 | data$7............4...^......... |
17c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 | ....0..idata$5............8...h. |
17e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
1800 | 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..<...r.............0..idata$6.. |
1820 | 00 00 00 00 00 00 12 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........@....................% |
1840 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 07 00 54 64 68 47 65 74 50 72 6f 70 65 72 | ....................TdhGetProper |
1860 | 74 79 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 | ty.............................. |
1880 | 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
18a0 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
18c0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
18e0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
1900 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
1920 | 00 00 17 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 | ....................0........... |
1940 | 02 00 91 00 00 00 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 40 32 38 00 5f 5f 69 6d 70 5f 5f | ......_TdhGetProperty@28.__imp__ |
1960 | 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 40 32 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | TdhGetProperty@28.__head_C__User |
1980 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
19a0 | 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 | libwinapi_onecore_api_ms_win_eve |
19c0 | 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 36 2e | nting_tdh_l1_1_0_a..demcbs00006. |
19e0 | 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516160966..0.....0.....1006 |
1a00 | 36 36 20 20 37 35 33 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 | 66..753.......`.L............... |
1a20 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 | .....text...............,...d... |
1a40 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
1a60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
1a80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
1aa0 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...n........... |
1ac0 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 | ..0..idata$5............8...x... |
1ae0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
1b00 | 3c 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <.................0..idata$6.... |
1b20 | 00 00 00 00 22 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ...."...@....................%.. |
1b40 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 06 00 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 | ..................TdhGetManifest |
1b60 | 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | EventInformation................ |
1b80 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
1ba0 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
1bc0 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
1be0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
1c00 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
1c20 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................'............... |
1c40 | 00 00 50 00 00 00 00 00 00 00 00 00 00 00 02 00 b1 00 00 00 5f 54 64 68 47 65 74 4d 61 6e 69 66 | ..P................._TdhGetManif |
1c60 | 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 | estEventInformation@16.__imp__Td |
1c80 | 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 | hGetManifestEventInformation@16. |
1ca0 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
1cc0 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f | i_rs_i686_lib_libwinapi_onecore_ |
1ce0 | 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 | api_ms_win_eventing_tdh_l1_1_0_a |
1d00 | 00 0a 64 65 6d 63 62 73 30 30 30 30 35 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 | ..demcbs00005.o/..1516160966..0. |
1d20 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 35 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..735.......`.L. |
1d40 | 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
1d60 | 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...\.............0`.data. |
1d80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
1da0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
1dc0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
1de0 | 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..f.............0..idata$5...... |
1e00 | 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...p.............0..idata |
1e20 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...z............. |
1e40 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
1e60 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 05 00 | ...........%.................... |
1e80 | 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 02 00 00 00 04 00 | TdhGetEventMapInformation....... |
1ea0 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
1ec0 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
1ee0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
1f00 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
1f20 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
1f40 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 | ......................"......... |
1f60 | 00 00 02 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 02 00 a7 00 00 00 5f 54 64 68 47 65 | ........F................._TdhGe |
1f80 | 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 | tEventMapInformation@16.__imp__T |
1fa0 | 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 68 65 | dhGetEventMapInformation@16.__he |
1fc0 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
1fe0 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f | _i686_lib_libwinapi_onecore_api_ |
2000 | 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 | ms_win_eventing_tdh_l1_1_0_a..de |
2020 | 6d 63 62 73 30 30 30 30 34 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 | mcbs00004.o/..1516160966..0..... |
2040 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 39 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..729.......`.L..... |
2060 | 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
2080 | 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...\.............0`.data..... |
20a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
20c0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
20e0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 | ....0..idata$7............4...f. |
2100 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
2120 | 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...p.............0..idata$4.. |
2140 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...z.............0..i |
2160 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
2180 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 04 00 54 64 68 47 | .......%....................TdhG |
21a0 | 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 | etEventInformation.............. |
21c0 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
21e0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
2200 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
2220 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
2240 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
2260 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
2280 | 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 a1 00 00 00 5f 54 64 68 47 65 74 45 76 65 | ....@................._TdhGetEve |
22a0 | 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 45 76 | ntInformation@20.__imp__TdhGetEv |
22c0 | 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 | entInformation@20.__head_C__User |
22e0 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f | s_Peter_Code_winapi_rs_i686_lib_ |
2300 | 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 | libwinapi_onecore_api_ms_win_eve |
2320 | 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 33 2e | nting_tdh_l1_1_0_a..demcbs00003. |
2340 | 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516160966..0.....0.....1006 |
2360 | 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 | 66..711.......`.L.......|....... |
2380 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 | .....text...............,...T... |
23a0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
23c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
23e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
2400 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...^........... |
2420 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 | ..0..idata$5............8...h... |
2440 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
2460 | 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...r.............0..idata$6.... |
2480 | 00 00 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
24a0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 03 00 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 | ..................TdhFormatPrope |
24c0 | 72 74 79 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | rty............................. |
24e0 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
2500 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
2520 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
2540 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
2560 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
2580 | 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................6............. |
25a0 | 97 00 00 00 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 00 5f 5f 69 6d 70 5f | ...._TdhFormatProperty@44.__imp_ |
25c0 | 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 00 5f 5f 68 65 61 64 5f 43 5f 5f | _TdhFormatProperty@44.__head_C__ |
25e0 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
2600 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e | lib_libwinapi_onecore_api_ms_win |
2620 | 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 | _eventing_tdh_l1_1_0_a..demcbs00 |
2640 | 30 30 32 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 002.o/..1516160966..0.....0..... |
2660 | 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 | 100666..721.......`.L........... |
2680 | 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
26a0 | 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | X.............0`.data........... |
26c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
26e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
2700 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 | .idata$7............4...b....... |
2720 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 | ......0..idata$5............8... |
2740 | 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | l.............0..idata$4........ |
2760 | 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....<...v.............0..idata$6 |
2780 | 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............@................... |
27a0 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 02 00 54 64 68 45 6e 75 6d 65 72 61 | .%....................TdhEnumera |
27c0 | 74 65 50 72 6f 76 69 64 65 72 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 | teProviders..................... |
27e0 | 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
2800 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
2820 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
2840 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
2860 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
2880 | 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 | ..........................<..... |
28a0 | 00 00 00 00 00 00 02 00 9d 00 00 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 | ............_TdhEnumerateProvide |
28c0 | 72 73 40 38 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 | rs@8.__imp__TdhEnumerateProvider |
28e0 | 73 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | s@8.__head_C__Users_Peter_Code_w |
2900 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 | inapi_rs_i686_lib_libwinapi_onec |
2920 | 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 | ore_api_ms_win_eventing_tdh_l1_1 |
2940 | 5f 30 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 31 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 | _0_a..demcbs00001.o/..1516160966 |
2960 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 39 20 20 20 20 20 20 20 | ..0.....0.....100666..769....... |
2980 | 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
29a0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...h.............0`.d |
29c0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
29e0 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
2a00 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
2a20 | 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...r.............0..idata$5.. |
2a40 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...|.............0..i |
2a60 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 | data$4............<............. |
2a80 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 40 01 00 00 00 00 | ....0..idata$6........(...@..... |
2aa0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
2ac0 | 00 00 01 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 | ....TdhEnumerateProviderFieldInf |
2ae0 | 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 | ormation........................ |
2b00 | 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
2b20 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
2b40 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
2b60 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
2b80 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
2ba0 | 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5c 00 00 00 00 00 00 00 | ......-.................\....... |
2bc0 | 00 00 00 00 02 00 bd 00 00 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 | .........._TdhEnumerateProviderF |
2be0 | 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e 75 | ieldInformation@16.__imp__TdhEnu |
2c00 | 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 | merateProviderFieldInformation@1 |
2c20 | 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 6.__head_C__Users_Peter_Code_win |
2c40 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 | api_rs_i686_lib_libwinapi_onecor |
2c60 | 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 | e_api_ms_win_eventing_tdh_l1_1_0 |
2c80 | 5f 61 00 0a 64 65 6d 63 62 73 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 39 36 36 20 20 | _a..demcbs00000.o/..1516160966.. |
2ca0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 35 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..765.......`. |
2cc0 | 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 | L....................text....... |
2ce0 | 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...h.............0`.dat |
2d00 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
2d20 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
2d40 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
2d60 | 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...r.............0..idata$5.... |
2d80 | 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...|.............0..ida |
2da0 | 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 | ta$4............<............... |
2dc0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 26 00 00 00 40 01 00 00 00 00 00 00 | ..0..idata$6........&...@....... |
2de0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
2e00 | 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 | ..TdhEnumerateManifestProviderEv |
2e20 | 65 6e 74 73 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 | ents............................ |
2e40 | 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
2e60 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
2e80 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
2ea0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
2ec0 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
2ee0 | 00 00 00 00 2b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 | ....+.................X......... |
2f00 | 00 00 02 00 b9 00 00 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f | ........_TdhEnumerateManifestPro |
2f20 | 76 69 64 65 72 45 76 65 6e 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e 75 6d 65 72 61 | viderEvents@12.__imp__TdhEnumera |
2f40 | 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 40 31 32 00 5f 5f 68 65 | teManifestProviderEvents@12.__he |
2f60 | 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 | ad_C__Users_Peter_Code_winapi_rs |
2f80 | 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f | _i686_lib_libwinapi_onecore_api_ |
2fa0 | 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a | ms_win_eventing_tdh_l1_1_0_a.. |