ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 | !<arch>./...............15161610 |
0020 | 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 31 30 35 38 20 20 20 20 | 07..0.....0.....0.......1058.... |
0040 | 20 20 60 0a 00 00 00 1a 00 00 04 66 00 00 07 4a 00 00 0a aa 00 00 0a aa 00 00 0d ae 00 00 0d ae | ..`........f...J................ |
0060 | 00 00 10 e2 00 00 10 e2 00 00 13 e2 00 00 13 e2 00 00 16 ee 00 00 16 ee 00 00 19 ee 00 00 19 ee | ................................ |
0080 | 00 00 1d 1e 00 00 1d 1e 00 00 20 3c 00 00 20 3c 00 00 23 54 00 00 23 54 00 00 26 5a 00 00 26 5a | ...........<...<..#T..#T..&Z..&Z |
00a0 | 00 00 29 6a 00 00 29 6a 00 00 2c aa 00 00 2c aa 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ..)j..)j..,...,.__C__Users_Peter |
00c0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | _Code_winapi_rs_i686_lib_libwina |
00e0 | 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e | pi_onecoreuap_api_ms_win_eventin |
0100 | 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 | g_tdh_l1_1_0_a_iname.__head_C__U |
0120 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c | sers_Peter_Code_winapi_rs_i686_l |
0140 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 | ib_libwinapi_onecoreuap_api_ms_w |
0160 | 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 5f 54 64 68 55 6e 6c | in_eventing_tdh_l1_1_0_a._TdhUnl |
0180 | 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 | oadManifest@4.__imp__TdhUnloadMa |
01a0 | 6e 69 66 65 73 74 40 34 00 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 | nifest@4._TdhQueryProviderFieldI |
01c0 | 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 51 75 65 72 79 50 72 6f | nformation@24.__imp__TdhQueryPro |
01e0 | 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 34 00 5f 54 64 68 4c 6f 61 | viderFieldInformation@24._TdhLoa |
0200 | 64 4d 61 6e 69 66 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 | dManifest@4.__imp__TdhLoadManife |
0220 | 73 74 40 34 00 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 5f 69 6d | st@4._TdhGetPropertySize@24.__im |
0240 | 70 5f 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 54 64 68 47 65 74 | p__TdhGetPropertySize@24._TdhGet |
0260 | 50 72 6f 70 65 72 74 79 40 32 38 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 | Property@28.__imp__TdhGetPropert |
0280 | 79 40 32 38 00 5f 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 | y@28._TdhGetManifestEventInforma |
02a0 | 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 | tion@16.__imp__TdhGetManifestEve |
02c0 | 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 | ntInformation@16._TdhGetEventMap |
02e0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 45 76 65 6e | Information@16.__imp__TdhGetEven |
0300 | 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 54 64 68 47 65 74 45 76 65 6e 74 49 | tMapInformation@16._TdhGetEventI |
0320 | 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 45 76 65 6e 74 | nformation@20.__imp__TdhGetEvent |
0340 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 | Information@20._TdhFormatPropert |
0360 | 79 40 34 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 | y@44.__imp__TdhFormatProperty@44 |
0380 | 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 40 38 00 5f 5f 69 6d 70 5f | ._TdhEnumerateProviders@8.__imp_ |
03a0 | 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 40 38 00 5f 54 64 68 45 6e 75 | _TdhEnumerateProviders@8._TdhEnu |
03c0 | 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 | merateProviderFieldInformation@1 |
03e0 | 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 | 6.__imp__TdhEnumerateProviderFie |
0400 | 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 | ldInformation@16._TdhEnumerateMa |
0420 | 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 54 | nifestProviderEvents@12.__imp__T |
0440 | 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 | dhEnumerateManifestProviderEvent |
0460 | 73 40 31 32 00 00 64 65 69 7a 74 2e 6f 2f 20 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 30 37 | s@12..deizt.o/........1516161007 |
0480 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 39 20 20 20 20 20 20 20 | ..0.....0.....100666..679....... |
04a0 | 60 0a 4c 01 06 00 00 00 00 00 30 01 00 00 0f 00 00 00 00 00 05 01 2e 74 65 78 74 00 00 00 00 00 | `.L.......0............text..... |
04c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 30 60 2e 64 | ............................0`.d |
04e0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
0500 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
0520 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 | ............0..idata$4.......... |
0540 | 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..................@.0..idata$5.. |
0560 | 00 00 00 00 00 00 04 00 00 00 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 | ..........................@.0..i |
0580 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 24 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$7........$................. |
05a0 | 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 69 6e 2d 65 76 65 6e 74 69 6e | ..@.0.........api-ms-win-eventin |
05c0 | 67 2d 74 64 68 2d 6c 31 2d 31 2d 30 2e 64 6c 6c 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff | g-tdh-l1-1-0.dll...file......... |
05e0 | 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 | ..g.fake...............text..... |
0600 | 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 | ...........................data. |
0620 | 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 | ...............................b |
0640 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
0660 | 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 00 00 | ...idata$4...................... |
0680 | 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 04 00 00 00 00 00 00 00 | .......idata$5.................. |
06a0 | 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 23 00 00 00 | ...........idata$7..........#... |
06c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 | ................................ |
06e0 | 69 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 | i...__C__Users_Peter_Code_winapi |
0700 | 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 | _rs_i686_lib_libwinapi_onecoreua |
0720 | 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 | p_api_ms_win_eventing_tdh_l1_1_0 |
0740 | 5f 61 5f 69 6e 61 6d 65 00 0a 64 65 69 7a 68 2e 6f 2f 20 20 20 20 20 20 20 20 31 35 31 36 31 36 | _a_iname..deizh.o/........151616 |
0760 | 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 38 30 33 20 20 20 | 1007..0.....0.....100666..803... |
0780 | 20 20 20 20 60 0a 4c 01 06 00 00 00 00 00 36 01 00 00 10 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L.......6............text. |
07a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 | ................................ |
07c0 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
07e0 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
0800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 | ................0..idata$2...... |
0820 | 00 00 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 | ......................@.0..idata |
0840 | 24 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | $5............................@. |
0860 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..idata$4...................... |
0880 | 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0....................... |
08a0 | 00 00 0c 00 00 00 07 00 0c 00 00 00 0f 00 00 00 07 00 10 00 00 00 0d 00 00 00 07 00 2e 66 69 6c | .............................fil |
08c0 | 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | e...........g.fake.............. |
08e0 | 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 | hname.............fthunk........ |
0900 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 | .....text....................... |
0920 | 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 | .........data................... |
0940 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 | .............bss................ |
0960 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 | .................idata$2........ |
0980 | 03 01 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 | .....................idata$4.... |
09a0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$5.................. |
09c0 | 00 00 00 00 04 00 00 00 02 00 00 00 00 00 68 00 00 00 00 00 00 00 00 00 00 00 02 00 cd 00 00 00 | ..............h................. |
09e0 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
0a00 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 | i_rs_i686_lib_libwinapi_onecoreu |
0a20 | 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f | ap_api_ms_win_eventing_tdh_l1_1_ |
0a40 | 30 5f 61 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 | 0_a.__C__Users_Peter_Code_winapi |
0a60 | 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 | _rs_i686_lib_libwinapi_onecoreua |
0a80 | 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 | p_api_ms_win_eventing_tdh_l1_1_0 |
0aa0 | 5f 61 5f 69 6e 61 6d 65 00 0a 64 65 69 7a 73 30 30 30 31 31 2e 6f 2f 20 20 20 31 35 31 36 31 36 | _a_iname..deizs00011.o/...151616 |
0ac0 | 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 32 20 20 20 | 1007..0.....0.....100666..712... |
0ae0 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L.......|............text. |
0b00 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...T............. |
0b20 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
0b40 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
0b60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
0b80 | 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...^.............0..idata |
0ba0 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...h............. |
0bc0 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 | 0..idata$4............<...r..... |
0be0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 | ........0..idata$6............@. |
0c00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
0c20 | 00 00 00 00 00 00 0b 00 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 02 00 00 00 04 00 | ........TdhUnloadManifest....... |
0c40 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
0c60 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
0c80 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
0ca0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
0cc0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
0ce0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 | ................................ |
0d00 | 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 98 00 00 00 5f 54 64 68 55 6e | ........4................._TdhUn |
0d20 | 6c 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 55 6e 6c 6f 61 64 4d | loadManifest@4.__imp__TdhUnloadM |
0d40 | 61 6e 69 66 65 73 74 40 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | anifest@4.__head_C__Users_Peter_ |
0d60 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
0d80 | 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 | i_onecoreuap_api_ms_win_eventing |
0da0 | 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 30 30 31 30 2e 6f 2f 20 20 20 31 35 | _tdh_l1_1_0_a.deizs00010.o/...15 |
0dc0 | 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 | 16161007..0.....0.....100666..76 |
0de0 | 30 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 0.......`.L....................t |
0e00 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 | ext...............,...d......... |
0e20 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
0e40 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
0e60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
0e80 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...n.............0..i |
0ea0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 | data$5............8...x......... |
0ec0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 | ....0..idata$4............<..... |
0ee0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 | ............0..idata$6........$. |
0f00 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
0f20 | 00 00 00 00 00 00 00 00 00 00 0a 00 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c | ............TdhQueryProviderFiel |
0f40 | 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | dInformation.................... |
0f60 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
0f80 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
0fa0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
0fc0 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
0fe0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
1000 | 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 54 00 00 00 | ..........).................T... |
1020 | 00 00 00 00 00 00 00 00 02 00 b8 00 00 00 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 | .............._TdhQueryProviderF |
1040 | 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 51 75 65 | ieldInformation@24.__imp__TdhQue |
1060 | 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 34 00 5f 5f | ryProviderFieldInformation@24.__ |
1080 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
10a0 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 | rs_i686_lib_libwinapi_onecoreuap |
10c0 | 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f | _api_ms_win_eventing_tdh_l1_1_0_ |
10e0 | 61 00 64 65 69 7a 73 30 30 30 30 39 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 30 37 20 20 30 20 | a.deizs00009.o/...1516161007..0. |
1100 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 38 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..708.......`.L. |
1120 | 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ......|............text......... |
1140 | 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...T.............0`.data. |
1160 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
1180 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
11a0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
11c0 | 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..^.............0..idata$5...... |
11e0 | 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...h.............0..idata |
1200 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...r............. |
1220 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
1240 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 09 00 | ...........%.................... |
1260 | 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | TdhLoadManifest................. |
1280 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
12a0 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
12c0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
12e0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
1300 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
1320 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
1340 | 30 00 00 00 00 00 00 00 00 00 00 00 02 00 94 00 00 00 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 | 0................._TdhLoadManife |
1360 | 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 40 34 00 5f 5f | st@4.__imp__TdhLoadManifest@4.__ |
1380 | 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | head_C__Users_Peter_Code_winapi_ |
13a0 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 | rs_i686_lib_libwinapi_onecoreuap |
13c0 | 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f | _api_ms_win_eventing_tdh_l1_1_0_ |
13e0 | 61 00 64 65 69 7a 73 30 30 30 30 38 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 30 37 20 20 30 20 | a.deizs00008.o/...1516161007..0. |
1400 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 30 20 20 20 20 20 20 20 60 0a 4c 01 | ....0.....100666..720.......`.L. |
1420 | 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
1440 | 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...X.............0`.data. |
1460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
1480 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
14a0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
14c0 | 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..b.............0..idata$5...... |
14e0 | 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...l.............0..idata |
1500 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...v............. |
1520 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
1540 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...........%.................... |
1560 | 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 00 00 00 02 00 00 00 04 00 00 00 06 00 | TdhGetPropertySize.............. |
1580 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
15a0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
15c0 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
15e0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
1600 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
1620 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
1640 | 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 9c 00 00 00 5f 54 64 68 47 65 74 50 72 6f | ....8................._TdhGetPro |
1660 | 70 65 72 74 79 53 69 7a 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 50 72 6f 70 65 72 | pertySize@24.__imp__TdhGetProper |
1680 | 74 79 53 69 7a 65 40 32 34 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | tySize@24.__head_C__Users_Peter_ |
16a0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
16c0 | 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 | i_onecoreuap_api_ms_win_eventing |
16e0 | 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 30 30 30 37 2e 6f 2f 20 20 20 31 35 | _tdh_l1_1_0_a.deizs00007.o/...15 |
1700 | 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16161007..0.....0.....100666..70 |
1720 | 38 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 8.......`.L.......|............t |
1740 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 | ext...............,...T......... |
1760 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
1780 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
17a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
17c0 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...^.............0..i |
17e0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 | data$5............8...h......... |
1800 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 | ....0..idata$4............<...r. |
1820 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 | ............0..idata$6.......... |
1840 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
1860 | 00 00 00 00 00 00 00 00 00 00 07 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 00 00 00 00 02 00 | ............TdhGetProperty...... |
1880 | 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 | ................................ |
18a0 | 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
18c0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
18e0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
1900 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
1920 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 00 00 | ................................ |
1940 | 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02 00 94 00 00 00 5f 54 | ............0................._T |
1960 | 64 68 47 65 74 50 72 6f 70 65 72 74 79 40 32 38 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 50 72 | dhGetProperty@28.__imp__TdhGetPr |
1980 | 6f 70 65 72 74 79 40 32 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f | operty@28.__head_C__Users_Peter_ |
19a0 | 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 | Code_winapi_rs_i686_lib_libwinap |
19c0 | 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 | i_onecoreuap_api_ms_win_eventing |
19e0 | 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 30 30 30 36 2e 6f 2f 20 20 20 31 35 | _tdh_l1_1_0_a.deizs00006.o/...15 |
1a00 | 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 35 | 16161007..0.....0.....100666..75 |
1a20 | 36 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 | 6.......`.L....................t |
1a40 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 | ext...............,...d......... |
1a60 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
1a80 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
1aa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
1ac0 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...n.............0..i |
1ae0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 | data$5............8...x......... |
1b00 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 82 01 | ....0..idata$4............<..... |
1b20 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 | ............0..idata$6........". |
1b40 | 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..@....................%........ |
1b60 | 00 00 00 00 00 00 00 00 00 00 06 00 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 | ............TdhGetManifestEventI |
1b80 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | nformation...................... |
1ba0 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
1bc0 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
1be0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
1c00 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
1c20 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
1c40 | 01 00 00 00 02 00 00 00 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 | ..........'.................P... |
1c60 | 00 00 00 00 00 00 00 00 02 00 b4 00 00 00 5f 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 | .............._TdhGetManifestEve |
1c80 | 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 4d 61 | ntInformation@16.__imp__TdhGetMa |
1ca0 | 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 68 65 61 64 | nifestEventInformation@16.__head |
1cc0 | 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 | _C__Users_Peter_Code_winapi_rs_i |
1ce0 | 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 | 686_lib_libwinapi_onecoreuap_api |
1d00 | 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 | _ms_win_eventing_tdh_l1_1_0_a.de |
1d20 | 69 7a 73 30 30 30 30 35 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 | izs00005.o/...1516161007..0..... |
1d40 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 38 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 0.....100666..738.......`.L..... |
1d60 | 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
1d80 | 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...\.............0`.data..... |
1da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
1dc0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
1de0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 | ....0..idata$7............4...f. |
1e00 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
1e20 | 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...p.............0..idata$4.. |
1e40 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...z.............0..i |
1e60 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
1e80 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 05 00 54 64 68 47 | .......%....................TdhG |
1ea0 | 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 02 00 00 00 04 00 00 00 06 00 | etEventMapInformation........... |
1ec0 | 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 | ...............................t |
1ee0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
1f00 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
1f20 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
1f40 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
1f60 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 22 00 00 00 00 00 00 00 05 00 00 00 02 00 | .................."............. |
1f80 | 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 02 00 aa 00 00 00 5f 54 64 68 47 65 74 45 76 65 | ....F................._TdhGetEve |
1fa0 | 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 | ntMapInformation@16.__imp__TdhGe |
1fc0 | 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 68 65 61 64 5f 43 | tEventMapInformation@16.__head_C |
1fe0 | 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 | __Users_Peter_Code_winapi_rs_i68 |
2000 | 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d | 6_lib_libwinapi_onecoreuap_api_m |
2020 | 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a | s_win_eventing_tdh_l1_1_0_a.deiz |
2040 | 73 30 30 30 30 34 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 30 20 | s00004.o/...1516161007..0.....0. |
2060 | 20 20 20 20 31 30 30 36 36 36 20 20 37 33 32 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 | ....100666..732.......`.L....... |
2080 | 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
20a0 | 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...\.............0`.data....... |
20c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
20e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
2100 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 | ..0..idata$7............4...f... |
2120 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$5............ |
2140 | 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...p.............0..idata$4.... |
2160 | 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........<...z.............0..ida |
2180 | 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............@............... |
21a0 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 04 00 54 64 68 47 65 74 | .....%....................TdhGet |
21c0 | 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | EventInformation................ |
21e0 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
2200 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
2220 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
2240 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
2260 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
2280 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
22a0 | 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 a4 00 00 00 5f 54 64 68 47 65 74 45 76 65 6e 74 | ..@................._TdhGetEvent |
22c0 | 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 54 64 68 47 65 74 45 76 65 6e | Information@20.__imp__TdhGetEven |
22e0 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f | tInformation@20.__head_C__Users_ |
2300 | 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 | Peter_Code_winapi_rs_i686_lib_li |
2320 | 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 | bwinapi_onecoreuap_api_ms_win_ev |
2340 | 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 30 30 30 33 2e 6f | enting_tdh_l1_1_0_a.deizs00003.o |
2360 | 2f 20 20 20 31 35 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | /...1516161007..0.....0.....1006 |
2380 | 36 36 20 20 37 31 34 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 | 66..714.......`.L.......|....... |
23a0 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 | .....text...............,...T... |
23c0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
23e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
2400 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
2420 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...^........... |
2440 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 | ..0..idata$5............8...h... |
2460 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$4............ |
2480 | 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | <...r.............0..idata$6.... |
24a0 | 00 00 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........@....................%.. |
24c0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 03 00 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 | ..................TdhFormatPrope |
24e0 | 72 74 79 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | rty............................. |
2500 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
2520 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
2540 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
2560 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
2580 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
25a0 | 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................6............. |
25c0 | 9a 00 00 00 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 00 5f 5f 69 6d 70 5f | ...._TdhFormatProperty@44.__imp_ |
25e0 | 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 40 34 34 00 5f 5f 68 65 61 64 5f 43 5f 5f | _TdhFormatProperty@44.__head_C__ |
2600 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
2620 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f | lib_libwinapi_onecoreuap_api_ms_ |
2640 | 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 | win_eventing_tdh_l1_1_0_a.deizs0 |
2660 | 30 30 30 32 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 | 0002.o/...1516161007..0.....0... |
2680 | 20 20 31 30 30 36 36 36 20 20 37 32 34 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 | ..100666..724.......`.L......... |
26a0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
26c0 | 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..X.............0`.data......... |
26e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
2700 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
2720 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 | 0..idata$7............4...b..... |
2740 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
2760 | 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..l.............0..idata$4...... |
2780 | 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...v.............0..idata |
27a0 | 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
27c0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 02 00 54 64 68 45 6e 75 6d 65 | ...%....................TdhEnume |
27e0 | 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | rateProviders................... |
2800 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
2820 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
2840 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
2860 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
2880 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
28a0 | 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 | ............................<... |
28c0 | 00 00 00 00 00 00 00 00 02 00 a0 00 00 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 | .............._TdhEnumerateProvi |
28e0 | 64 65 72 73 40 38 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 | ders@8.__imp__TdhEnumerateProvid |
2900 | 65 72 73 40 38 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | ers@8.__head_C__Users_Peter_Code |
2920 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e | _winapi_rs_i686_lib_libwinapi_on |
2940 | 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 | ecoreuap_api_ms_win_eventing_tdh |
2960 | 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 30 30 30 31 2e 6f 2f 20 20 20 31 35 31 36 31 36 | _l1_1_0_a.deizs00001.o/...151616 |
2980 | 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 37 32 20 20 20 | 1007..0.....0.....100666..772... |
29a0 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L....................text. |
29c0 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...h............. |
29e0 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
2a00 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
2a20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
2a40 | 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...r.............0..idata |
2a60 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...|............. |
2a80 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 | 0..idata$4............<......... |
2aa0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 40 01 | ........0..idata$6........(...@. |
2ac0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
2ae0 | 00 00 00 00 00 00 01 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c | ........TdhEnumerateProviderFiel |
2b00 | 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | dInformation.................... |
2b20 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
2b40 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
2b60 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
2b80 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
2ba0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
2bc0 | 01 00 00 00 02 00 00 00 00 00 2d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 5c 00 00 00 | ..........-.................\... |
2be0 | 00 00 00 00 00 00 00 00 02 00 c0 00 00 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 | .............._TdhEnumerateProvi |
2c00 | 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 54 64 | derFieldInformation@16.__imp__Td |
2c20 | 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 | hEnumerateProviderFieldInformati |
2c40 | 6f 6e 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 | on@16.__head_C__Users_Peter_Code |
2c60 | 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e | _winapi_rs_i686_lib_libwinapi_on |
2c80 | 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 | ecoreuap_api_ms_win_eventing_tdh |
2ca0 | 5f 6c 31 5f 31 5f 30 5f 61 00 64 65 69 7a 73 30 30 30 30 30 2e 6f 2f 20 20 20 31 35 31 36 31 36 | _l1_1_0_a.deizs00000.o/...151616 |
2cc0 | 31 30 30 37 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 38 20 20 20 | 1007..0.....0.....100666..768... |
2ce0 | 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L....................text. |
2d00 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...h............. |
2d20 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
2d40 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
2d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
2d80 | 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...r.............0..idata |
2da0 | 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...|............. |
2dc0 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 86 01 00 00 00 00 | 0..idata$4............<......... |
2de0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 26 00 00 00 40 01 | ........0..idata$6........&...@. |
2e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
2e20 | 00 00 00 00 00 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 | ........TdhEnumerateManifestProv |
2e40 | 69 64 65 72 45 76 65 6e 74 73 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | iderEvents...................... |
2e60 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
2e80 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
2ea0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
2ec0 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
2ee0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
2f00 | 01 00 00 00 02 00 00 00 00 00 2b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 58 00 00 00 | ..........+.................X... |
2f20 | 00 00 00 00 00 00 00 00 02 00 bc 00 00 00 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 | .............._TdhEnumerateManif |
2f40 | 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 54 64 68 45 | estProviderEvents@12.__imp__TdhE |
2f60 | 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 40 31 | numerateManifestProviderEvents@1 |
2f80 | 32 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e | 2.__head_C__Users_Peter_Code_win |
2fa0 | 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 | api_rs_i686_lib_libwinapi_onecor |
2fc0 | 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f | euap_api_ms_win_eventing_tdh_l1_ |
2fe0 | 31 5f 30 5f 61 00 | 1_0_a. |