ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 | !<arch>./...............15161607 |
0020 | 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 39 36 34 20 20 20 20 20 | 86..0.....0.....0.......964..... |
0040 | 20 20 60 0a 00 00 00 1a 00 00 04 08 00 00 06 f2 00 00 0a 4e 00 00 0a 4e 00 00 0d 52 00 00 0d 52 | ..`................N...N...R...R |
0060 | 00 00 10 84 00 00 10 84 00 00 13 84 00 00 13 84 00 00 16 8e 00 00 16 8e 00 00 19 8c 00 00 19 8c | ................................ |
0080 | 00 00 1c ba 00 00 1c ba 00 00 1f d6 00 00 1f d6 00 00 22 ec 00 00 22 ec 00 00 25 f0 00 00 25 f0 | .................."..."...%...%. |
00a0 | 00 00 29 00 00 00 29 00 00 00 2c 3e 00 00 2c 3e 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ..)...)...,>..,>__C__Users_Peter |
00c0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
00e0 | 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 | napi_onecore_api_ms_win_eventing |
0100 | 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 | _tdh_l1_1_0_a_iname._head_C__Use |
0120 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c | rs_Peter_Code_winapi_rs_x86_64_l |
0140 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f | ib_libwinapi_onecore_api_ms_win_ |
0160 | 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 54 64 68 55 6e 6c 6f 61 64 4d | eventing_tdh_l1_1_0_a.TdhUnloadM |
0180 | 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 | anifest.__imp_TdhUnloadManifest. |
01a0 | 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e | TdhQueryProviderFieldInformation |
01c0 | 00 5f 5f 69 6d 70 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f | .__imp_TdhQueryProviderFieldInfo |
01e0 | 72 6d 61 74 69 6f 6e 00 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 54 64 | rmation.TdhLoadManifest.__imp_Td |
0200 | 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 | hLoadManifest.TdhGetPropertySize |
0220 | 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 54 64 68 47 65 74 | .__imp_TdhGetPropertySize.TdhGet |
0240 | 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 00 54 64 | Property.__imp_TdhGetProperty.Td |
0260 | 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 | hGetManifestEventInformation.__i |
0280 | 6d 70 5f 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f | mp_TdhGetManifestEventInformatio |
02a0 | 6e 00 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d | n.TdhGetEventMapInformation.__im |
02c0 | 70 5f 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 64 68 47 | p_TdhGetEventMapInformation.TdhG |
02e0 | 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 45 | etEventInformation.__imp_TdhGetE |
0300 | 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 | ventInformation.TdhFormatPropert |
0320 | 79 00 5f 5f 69 6d 70 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 00 54 64 68 45 6e 75 | y.__imp_TdhFormatProperty.TdhEnu |
0340 | 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 | merateProviders.__imp_TdhEnumera |
0360 | 74 65 50 72 6f 76 69 64 65 72 73 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 | teProviders.TdhEnumerateProvider |
0380 | 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 | FieldInformation.__imp_TdhEnumer |
03a0 | 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 64 68 45 | ateProviderFieldInformation.TdhE |
03c0 | 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 00 5f | numerateManifestProviderEvents._ |
03e0 | 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 | _imp_TdhEnumerateManifestProvide |
0400 | 72 45 76 65 6e 74 73 00 64 6f 6e 63 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 | rEvents.doncbt.o/.......15161607 |
0420 | 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 36 20 20 20 20 20 | 86..0.....0.....100666..686..... |
0440 | 20 20 60 0a 64 86 06 00 00 00 00 00 38 01 00 00 0f 00 00 00 00 00 05 00 2e 74 65 78 74 00 00 00 | ..`.d.......8............text... |
0460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 | ..............................P` |
0480 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
04a0 | 00 00 00 00 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.P..bss.................... |
04c0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | ..............P..idata$4........ |
04e0 | 08 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 | ....................@.0..idata$5 |
0500 | 00 00 00 00 00 00 00 00 08 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
0520 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 24 00 00 00 14 01 00 00 00 00 00 00 00 00 00 00 | .idata$7........$............... |
0540 | 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 | ....@.0.................api-ms-w |
0560 | 69 6e 2d 65 76 65 6e 74 69 6e 67 2d 74 64 68 2d 6c 31 2d 31 2d 30 2e 64 6c 6c 00 00 2e 66 69 6c | in-eventing-tdh-l1-1-0.dll...fil |
0580 | 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | e...........g.fake.............. |
05a0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .text........................... |
05c0 | 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 | .....data....................... |
05e0 | 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 | .........bss.................... |
0600 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 08 00 | .............idata$4............ |
0620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | .................idata$5........ |
0640 | 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 | .....................idata$7.... |
0660 | 06 00 00 00 03 01 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 | ......#......................... |
0680 | 00 00 00 00 06 00 00 00 02 00 68 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 | ..........h...__C__Users_Peter_C |
06a0 | 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | ode_winapi_rs_x86_64_lib_libwina |
06c0 | 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 | pi_onecore_api_ms_win_eventing_t |
06e0 | 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 64 6f 6e 63 62 68 2e 6f 2f 20 20 20 20 20 | dh_l1_1_0_a_iname.doncbh.o/..... |
0700 | 20 20 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516160786..0.....0.....100666 |
0720 | 20 20 38 30 30 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 36 01 00 00 10 00 00 00 00 00 | ..800.......`.d.......6......... |
0740 | 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...text......................... |
0760 | 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........P`.data................. |
0780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.P..bss.......... |
07a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 | ........................P..idata |
07c0 | 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 40 00 | $2............................@. |
07e0 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..idata$5...................... |
0800 | 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..idata$4.............. |
0820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..............@.0............... |
0840 | 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 03 00 0c 00 00 00 0f 00 00 00 03 00 10 00 00 00 0d 00 | ................................ |
0860 | 00 00 03 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 | .....file...........g.fake...... |
0880 | 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b | ........hname.............fthunk |
08a0 | 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 | .............text............... |
08c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | .................data........... |
08e0 | 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 | .....................bss........ |
0900 | 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 | .........................idata$2 |
0920 | 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 | .............................ida |
0940 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$4...........idata$5.......... |
0960 | 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 00 00 66 00 00 00 00 00 00 00 00 00 | ......................f......... |
0980 | 00 00 02 00 ca 00 00 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 | ........_head_C__Users_Peter_Cod |
09a0 | 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 | e_winapi_rs_x86_64_lib_libwinapi |
09c0 | 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 | _onecore_api_ms_win_eventing_tdh |
09e0 | 5f 6c 31 5f 31 5f 30 5f 61 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f | _l1_1_0_a.__C__Users_Peter_Code_ |
0a00 | 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f | winapi_rs_x86_64_lib_libwinapi_o |
0a20 | 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c | necore_api_ms_win_eventing_tdh_l |
0a40 | 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 64 6f 6e 63 62 73 30 30 30 31 31 2e 6f 2f 20 20 31 35 | 1_1_0_a_iname.doncbs00011.o/..15 |
0a60 | 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 | 16160786..0.....0.....100666..71 |
0a80 | 32 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 2.......`.d....................t |
0aa0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
0ac0 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
0ae0 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
0b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
0b20 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
0b40 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
0b60 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 | ....0..idata$4............@...z. |
0b80 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 | ............0..idata$6.......... |
0ba0 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
0bc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 54 64 68 55 6e 6c 6f 61 64 4d 61 6e | ....................TdhUnloadMan |
0be0 | 69 66 65 73 74 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | ifest........................... |
0c00 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
0c20 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
0c40 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
0c60 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
0c80 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
0ca0 | 00 00 16 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
0cc0 | 02 00 90 00 00 00 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 54 64 | ......TdhUnloadManifest.__imp_Td |
0ce0 | 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 | hUnloadManifest._head_C__Users_P |
0d00 | 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c | eter_Code_winapi_rs_x86_64_lib_l |
0d20 | 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e | ibwinapi_onecore_api_ms_win_even |
0d40 | 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 31 30 2e 6f 2f | ting_tdh_l1_1_0_a.doncbs00010.o/ |
0d60 | 20 20 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516160786..0.....0.....100666 |
0d80 | 20 20 37 35 38 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 | ..758.......`.d................. |
0da0 | 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 | ...text...............,...l..... |
0dc0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
0de0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
0e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
0e20 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...v............. |
0e40 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 | 0..idata$5............8......... |
0e60 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 | ........0..idata$4............@. |
0e80 | 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ................0..idata$6...... |
0ea0 | 00 00 24 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ..$...H....................%.... |
0ec0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 54 64 68 51 75 65 72 79 | ........................TdhQuery |
0ee0 | 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 08 00 | ProviderFieldInformation........ |
0f00 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
0f20 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
0f40 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
0f60 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
0f80 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
0fa0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 | ......................%......... |
0fc0 | 00 00 02 00 00 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00 02 00 ae 00 00 00 54 64 68 51 75 65 | ........L.................TdhQue |
0fe0 | 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 | ryProviderFieldInformation.__imp |
1000 | 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f | _TdhQueryProviderFieldInformatio |
1020 | 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 | n._head_C__Users_Peter_Code_wina |
1040 | 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f | pi_rs_x86_64_lib_libwinapi_oneco |
1060 | 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f | re_api_ms_win_eventing_tdh_l1_1_ |
1080 | 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 39 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 38 36 20 20 | 0_a.doncbs00009.o/..1516160786.. |
10a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 38 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..708.......`. |
10c0 | 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
10e0 | 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...\.............0`.dat |
1100 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
1120 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
1140 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
1160 | 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...f.............0..idata$5.... |
1180 | 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...p.............0..ida |
11a0 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@...z........... |
11c0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
11e0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
1200 | 00 00 00 00 00 00 00 00 09 00 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 00 00 02 00 00 00 | ..........TdhLoadManifest....... |
1220 | 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 | ................................ |
1240 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
1260 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
1280 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
12a0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
12c0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 14 00 00 00 00 00 00 00 | ................................ |
12e0 | 05 00 00 00 02 00 00 00 00 00 2a 00 00 00 00 00 00 00 00 00 00 00 02 00 8c 00 00 00 54 64 68 4c | ..........*.................TdhL |
1300 | 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 | oadManifest.__imp_TdhLoadManifes |
1320 | 74 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 | t._head_C__Users_Peter_Code_wina |
1340 | 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f | pi_rs_x86_64_lib_libwinapi_oneco |
1360 | 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f | re_api_ms_win_eventing_tdh_l1_1_ |
1380 | 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 38 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 38 36 20 20 | 0_a.doncbs00008.o/..1516160786.. |
13a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 38 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..718.......`. |
13c0 | 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
13e0 | 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...`.............0`.dat |
1400 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
1420 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
1440 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
1460 | 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...j.............0..idata$5.... |
1480 | 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...t.............0..ida |
14a0 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@...~........... |
14c0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
14e0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
1500 | 00 00 00 00 00 00 00 00 08 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 00 00 00 | ..........TdhGetPropertySize.... |
1520 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
1540 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
1560 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
1580 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
15a0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
15c0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 | ................................ |
15e0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02 00 92 00 00 00 | ..............0................. |
1600 | 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 50 | TdhGetPropertySize.__imp_TdhGetP |
1620 | 72 6f 70 65 72 74 79 53 69 7a 65 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ropertySize._head_C__Users_Peter |
1640 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
1660 | 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 | napi_onecore_api_ms_win_eventing |
1680 | 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 37 2e 6f 2f 20 20 31 35 | _tdh_l1_1_0_a.doncbs00007.o/..15 |
16a0 | 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16160786..0.....0.....100666..70 |
16c0 | 36 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 6.......`.d....................t |
16e0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
1700 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
1720 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
1740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
1760 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
1780 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
17a0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 | ....0..idata$4............@...z. |
17c0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 | ............0..idata$6.......... |
17e0 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
1800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 54 64 68 47 65 74 50 72 6f 70 65 72 | ....................TdhGetProper |
1820 | 74 79 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | ty.............................. |
1840 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
1860 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
1880 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
18a0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
18c0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
18e0 | 00 00 13 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 | ....................(........... |
1900 | 02 00 8a 00 00 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 47 65 | ......TdhGetProperty.__imp_TdhGe |
1920 | 74 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 | tProperty._head_C__Users_Peter_C |
1940 | 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | ode_winapi_rs_x86_64_lib_libwina |
1960 | 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 | pi_onecore_api_ms_win_eventing_t |
1980 | 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 36 2e 6f 2f 20 20 31 35 31 36 | dh_l1_1_0_a.doncbs00006.o/..1516 |
19a0 | 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 35 34 20 | 160786..0.....0.....100666..754. |
19c0 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
19e0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | t...............,...l........... |
1a00 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
1a20 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
1a40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
1a60 | 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...v.............0..ida |
1a80 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8............... |
1aa0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 | ..0..idata$4............@....... |
1ac0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 | ..........0..idata$6........"... |
1ae0 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
1b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 00 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 | ..................TdhGetManifest |
1b20 | 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 | EventInformation................ |
1b40 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
1b60 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
1b80 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
1ba0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
1bc0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
1be0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................#............... |
1c00 | 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 aa 00 00 00 54 64 68 47 65 74 4d 61 6e 69 66 65 | ..H.................TdhGetManife |
1c20 | 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 4d | stEventInformation.__imp_TdhGetM |
1c40 | 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f | anifestEventInformation._head_C_ |
1c60 | 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f | _Users_Peter_Code_winapi_rs_x86_ |
1c80 | 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f | 64_lib_libwinapi_onecore_api_ms_ |
1ca0 | 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 | win_eventing_tdh_l1_1_0_a.doncbs |
1cc0 | 30 30 30 30 35 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 | 00005.o/..1516160786..0.....0... |
1ce0 | 20 20 31 30 30 36 36 36 20 20 37 33 36 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 | ..100666..736.......`.d......... |
1d00 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
1d20 | 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..d.............0`.data......... |
1d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
1d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
1d80 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 | 0..idata$7............4...n..... |
1da0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
1dc0 | 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..x.............0..idata$4...... |
1de0 | 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@.................0..idata |
1e00 | 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............H................. |
1e20 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 | ...%............................ |
1e40 | 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 02 00 00 00 08 00 | TdhGetEventMapInformation....... |
1e60 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
1e80 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
1ea0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
1ec0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
1ee0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
1f00 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 05 00 | ................................ |
1f20 | 00 00 02 00 00 00 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 02 00 a0 00 00 00 54 64 68 47 65 74 | ........>.................TdhGet |
1f40 | 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 | EventMapInformation.__imp_TdhGet |
1f60 | 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 | EventMapInformation._head_C__Use |
1f80 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c | rs_Peter_Code_winapi_rs_x86_64_l |
1fa0 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f | ib_libwinapi_onecore_api_ms_win_ |
1fc0 | 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 | eventing_tdh_l1_1_0_a.doncbs0000 |
1fe0 | 34 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 4.o/..1516160786..0.....0.....10 |
2000 | 30 36 36 36 20 20 37 33 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 | 0666..730.......`.d............. |
2020 | 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 | .......text...............,...d. |
2040 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
2060 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
2080 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
20a0 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 | data$7............4...n......... |
20c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 | ....0..idata$5............8...x. |
20e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 | ............0..idata$4.......... |
2100 | 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..@.................0..idata$6.. |
2120 | 00 00 00 00 00 00 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........H....................% |
2140 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 54 64 68 47 | ............................TdhG |
2160 | 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 08 00 00 00 04 00 | etEventInformation.............. |
2180 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
21a0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
21c0 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
21e0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
2200 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
2220 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
2240 | 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 9a 00 00 00 54 64 68 47 65 74 45 76 65 6e | ....8.................TdhGetEven |
2260 | 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 45 76 65 6e 74 49 6e | tInformation.__imp_TdhGetEventIn |
2280 | 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 | formation._head_C__Users_Peter_C |
22a0 | 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | ode_winapi_rs_x86_64_lib_libwina |
22c0 | 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 | pi_onecore_api_ms_win_eventing_t |
22e0 | 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 33 2e 6f 2f 20 20 31 35 31 36 | dh_l1_1_0_a.doncbs00003.o/..1516 |
2300 | 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 32 20 | 160786..0.....0.....100666..712. |
2320 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
2340 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 | t...............,...\........... |
2360 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
2380 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
23a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
23c0 | 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...f.............0..ida |
23e0 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...p........... |
2400 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 | ..0..idata$4............@...z... |
2420 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 | ..........0..idata$6............ |
2440 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
2460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 | ..................TdhFormatPrope |
2480 | 72 74 79 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 | rty............................. |
24a0 | 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
24c0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
24e0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
2500 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
2520 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
2540 | 16 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 | ................................ |
2560 | 90 00 00 00 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 46 | ....TdhFormatProperty.__imp_TdhF |
2580 | 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 | ormatProperty._head_C__Users_Pet |
25a0 | 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 | er_Code_winapi_rs_x86_64_lib_lib |
25c0 | 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 | winapi_onecore_api_ms_win_eventi |
25e0 | 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f 6e 63 62 73 30 30 30 30 32 2e 6f 2f 20 20 | ng_tdh_l1_1_0_a.doncbs00002.o/.. |
2600 | 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160786..0.....0.....100666.. |
2620 | 37 32 34 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 | 724.......`.d................... |
2640 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 | .text...............,...`....... |
2660 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
2680 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
26a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
26c0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...j.............0. |
26e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 | .idata$5............8...t....... |
2700 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
2720 | 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ~.............0..idata$6........ |
2740 | 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
2760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 54 64 68 45 6e 75 6d 65 72 61 | ......................TdhEnumera |
2780 | 74 65 50 72 6f 76 69 64 65 72 73 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | teProviders..................... |
27a0 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
27c0 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
27e0 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
2800 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
2820 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
2840 | 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 | ..........................6..... |
2860 | 00 00 00 00 00 00 02 00 98 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 | ............TdhEnumerateProvider |
2880 | 73 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 5f 68 | s.__imp_TdhEnumerateProviders._h |
28a0 | 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 | ead_C__Users_Peter_Code_winapi_r |
28c0 | 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 | s_x86_64_lib_libwinapi_onecore_a |
28e0 | 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 | pi_ms_win_eventing_tdh_l1_1_0_a. |
2900 | 64 6f 6e 63 62 73 30 30 30 30 31 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 | doncbs00001.o/..1516160786..0... |
2920 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 37 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 | ..0.....100666..770.......`.d... |
2940 | 00 00 00 00 98 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
2960 | 08 00 00 00 2c 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...p.............0`.data... |
2980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
29a0 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
29c0 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
29e0 | 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | z.............0..idata$5........ |
2a00 | 08 00 00 00 38 01 00 00 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8.................0..idata$4 |
2a20 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@.................0. |
2a40 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6........(...H........... |
2a60 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
2a80 | 00 00 00 00 01 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 | ......TdhEnumerateProviderFieldI |
2aa0 | 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | nformation...................... |
2ac0 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
2ae0 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
2b00 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
2b20 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
2b40 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
2b60 | 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 54 00 00 00 00 00 | ........).................T..... |
2b80 | 00 00 00 00 00 00 02 00 b6 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 | ............TdhEnumerateProvider |
2ba0 | 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 | FieldInformation.__imp_TdhEnumer |
2bc0 | 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 | ateProviderFieldInformation._hea |
2be0 | 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | d_C__Users_Peter_Code_winapi_rs_ |
2c00 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 | x86_64_lib_libwinapi_onecore_api |
2c20 | 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 64 6f | _ms_win_eventing_tdh_l1_1_0_a.do |
2c40 | 6e 63 62 73 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 38 36 20 20 30 20 20 20 20 20 | ncbs00000.o/..1516160786..0..... |
2c60 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 36 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 | 0.....100666..766.......`.d..... |
2c80 | 00 00 98 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
2ca0 | 00 00 2c 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...p.............0`.data..... |
2cc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
2ce0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
2d00 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 | ....0..idata$7............4...z. |
2d20 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 | ............0..idata$5.......... |
2d40 | 00 00 38 01 00 00 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8.................0..idata$4.. |
2d60 | 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........@.................0..i |
2d80 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 26 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6........&...H............. |
2da0 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .......%........................ |
2dc0 | 00 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 | ....TdhEnumerateManifestProvider |
2de0 | 45 76 65 6e 74 73 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 | Events.......................... |
2e00 | 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
2e20 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
2e40 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
2e60 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
2e80 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
2ea0 | 02 00 00 00 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 | ......'.................P....... |
2ec0 | 00 00 00 00 02 00 b2 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 | ..........TdhEnumerateManifestPr |
2ee0 | 6f 76 69 64 65 72 45 76 65 6e 74 73 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d | oviderEvents.__imp_TdhEnumerateM |
2f00 | 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 00 5f 68 65 61 64 5f 43 5f 5f 55 | anifestProviderEvents._head_C__U |
2f20 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
2f40 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 | _lib_libwinapi_onecore_api_ms_wi |
2f60 | 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 | n_eventing_tdh_l1_1_0_a. |