ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 38 | !<arch>./...............15161608 |
0020 | 31 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 39 37 30 20 20 20 20 20 | 19..0.....0.....0.......970..... |
0040 | 20 20 60 0a 00 00 00 1a 00 00 04 0e 00 00 06 fc 00 00 0a 5e 00 00 0a 5e 00 00 0d 66 00 00 0d 66 | ..`................^...^...f...f |
0060 | 00 00 10 9c 00 00 10 9c 00 00 13 a0 00 00 13 a0 00 00 16 ae 00 00 16 ae 00 00 19 b0 00 00 19 b0 | ................................ |
0080 | 00 00 1c e2 00 00 1c e2 00 00 20 02 00 00 20 02 00 00 23 1c 00 00 23 1c 00 00 26 24 00 00 26 24 | ..................#...#...&$..&$ |
00a0 | 00 00 29 38 00 00 29 38 00 00 2c 7a 00 00 2c 7a 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ..)8..)8..,z..,z__C__Users_Peter |
00c0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
00e0 | 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 | napi_onecoreuap_api_ms_win_event |
0100 | 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 5f 68 65 61 64 5f 43 5f 5f | ing_tdh_l1_1_0_a_iname._head_C__ |
0120 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 | Users_Peter_Code_winapi_rs_x86_6 |
0140 | 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d | 4_lib_libwinapi_onecoreuap_api_m |
0160 | 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 54 64 68 55 | s_win_eventing_tdh_l1_1_0_a.TdhU |
0180 | 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e | nloadManifest.__imp_TdhUnloadMan |
01a0 | 69 66 65 73 74 00 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 | ifest.TdhQueryProviderFieldInfor |
01c0 | 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 | mation.__imp_TdhQueryProviderFie |
01e0 | 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 5f | ldInformation.TdhLoadManifest.__ |
0200 | 69 6d 70 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 54 64 68 47 65 74 50 72 6f 70 65 72 | imp_TdhLoadManifest.TdhGetProper |
0220 | 74 79 53 69 7a 65 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 | tySize.__imp_TdhGetPropertySize. |
0240 | 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 50 72 6f 70 65 | TdhGetProperty.__imp_TdhGetPrope |
0260 | 72 74 79 00 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 | rty.TdhGetManifestEventInformati |
0280 | 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f | on.__imp_TdhGetManifestEventInfo |
02a0 | 72 6d 61 74 69 6f 6e 00 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f | rmation.TdhGetEventMapInformatio |
02c0 | 6e 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f | n.__imp_TdhGetEventMapInformatio |
02e0 | 6e 00 54 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 | n.TdhGetEventInformation.__imp_T |
0300 | 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 64 68 46 6f 72 6d 61 74 50 | dhGetEventInformation.TdhFormatP |
0320 | 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 00 | roperty.__imp_TdhFormatProperty. |
0340 | 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 5f 5f 69 6d 70 5f 54 64 68 45 | TdhEnumerateProviders.__imp_TdhE |
0360 | 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 | numerateProviders.TdhEnumeratePr |
0380 | 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 | oviderFieldInformation.__imp_Tdh |
03a0 | 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f | EnumerateProviderFieldInformatio |
03c0 | 6e 00 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 | n.TdhEnumerateManifestProviderEv |
03e0 | 65 6e 74 73 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 | ents.__imp_TdhEnumerateManifestP |
0400 | 72 6f 76 69 64 65 72 45 76 65 6e 74 73 00 64 65 75 65 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 | roviderEvents.deuebt.o/.......15 |
0420 | 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 | 16160819..0.....0.....100666..68 |
0440 | 39 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 38 01 00 00 0f 00 00 00 00 00 05 00 2e 74 | 9.......`.d.......8............t |
0460 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ext............................. |
0480 | 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....P`.data..................... |
04a0 | 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.P..bss.............. |
04c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 24 34 00 00 | ....................P..idata$4.. |
04e0 | 00 00 00 00 00 00 08 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 | ..........................@.0..i |
0500 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$5.......................... |
0520 | 00 00 40 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 24 00 00 00 14 01 00 00 00 00 | ..@.0..idata$7........$......... |
0540 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 70 | ..........@.0.................ap |
0560 | 69 2d 6d 73 2d 77 69 6e 2d 65 76 65 6e 74 69 6e 67 2d 74 64 68 2d 6c 31 2d 31 2d 30 2e 64 6c 6c | i-ms-win-eventing-tdh-l1-1-0.dll |
0580 | 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 | ...file...........g.fake........ |
05a0 | 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 | .......text..................... |
05c0 | 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 | ...........data................. |
05e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 | ...............bss.............. |
0600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 | ...................idata$4...... |
0620 | 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 | .......................idata$5.. |
0640 | 00 00 05 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 | ...........................idata |
0660 | 24 37 00 00 00 00 06 00 00 00 03 01 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $7..........#................... |
0680 | 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 6b 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 | ................k...__C__Users_P |
06a0 | 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c | eter_Code_winapi_rs_x86_64_lib_l |
06c0 | 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 | ibwinapi_onecoreuap_api_ms_win_e |
06e0 | 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 0a 64 65 75 65 | venting_tdh_l1_1_0_a_iname..deue |
0700 | 62 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 | bh.o/.......1516160819..0.....0. |
0720 | 20 20 20 20 31 30 30 36 36 36 20 20 38 30 36 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 | ....100666..806.......`.d....... |
0740 | 36 01 00 00 10 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 6............text............... |
0760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ..................P`.data....... |
0780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 | ........................@.P..bss |
07a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
07c0 | 80 00 50 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 18 01 00 00 | ..P..idata$2.................... |
07e0 | 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..idata$5............ |
0800 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | ................@.0..idata$4.... |
0820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 | ........................@.0..... |
0840 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 03 00 0c 00 00 00 0f 00 | ................................ |
0860 | 00 00 03 00 10 00 00 00 0d 00 00 00 03 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 | ...............file...........g. |
0880 | 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 | fake..............hname......... |
08a0 | 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | ....fthunk.............text..... |
08c0 | 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 | ...........................data. |
08e0 | 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 | ...............................b |
0900 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
0920 | 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 00 00 00 00 | ...idata$2...................... |
0940 | 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$4...........idata$5 |
0960 | 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 00 00 | ................................ |
0980 | 69 00 00 00 00 00 00 00 00 00 00 00 02 00 d0 00 00 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 | i................._head_C__Users |
09a0 | 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 | _Peter_Code_winapi_rs_x86_64_lib |
09c0 | 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e | _libwinapi_onecoreuap_api_ms_win |
09e0 | 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 5f 5f 43 5f 5f 55 73 65 72 | _eventing_tdh_l1_1_0_a.__C__User |
0a00 | 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 | s_Peter_Code_winapi_rs_x86_64_li |
0a20 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 | b_libwinapi_onecoreuap_api_ms_wi |
0a40 | 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 64 65 | n_eventing_tdh_l1_1_0_a_iname.de |
0a60 | 75 65 62 73 30 30 30 31 31 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 | uebs00011.o/..1516160819..0..... |
0a80 | 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 | 0.....100666..715.......`.d..... |
0aa0 | 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
0ac0 | 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...\.............0`.data..... |
0ae0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
0b00 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
0b20 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 | ....0..idata$7............4...f. |
0b40 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 | ............0..idata$5.......... |
0b60 | 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...p.............0..idata$4.. |
0b80 | 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........@...z.............0..i |
0ba0 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............H............. |
0bc0 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .......%........................ |
0be0 | 00 00 0b 00 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 02 00 00 00 08 00 00 00 04 00 | ....TdhUnloadManifest........... |
0c00 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
0c20 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
0c40 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
0c60 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
0c80 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
0ca0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 16 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
0cc0 | 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 54 64 68 55 6e 6c 6f 61 64 4d | ......................TdhUnloadM |
0ce0 | 61 6e 69 66 65 73 74 00 5f 5f 69 6d 70 5f 54 64 68 55 6e 6c 6f 61 64 4d 61 6e 69 66 65 73 74 00 | anifest.__imp_TdhUnloadManifest. |
0d00 | 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 | _head_C__Users_Peter_Code_winapi |
0d20 | 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 | _rs_x86_64_lib_libwinapi_onecore |
0d40 | 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 | uap_api_ms_win_eventing_tdh_l1_1 |
0d60 | 5f 30 5f 61 00 0a 64 65 75 65 62 73 30 30 30 31 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 | _0_a..deuebs00010.o/..1516160819 |
0d80 | 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 36 31 20 20 20 20 20 20 20 | ..0.....0.....100666..761....... |
0da0 | 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 | `.d....................text..... |
0dc0 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...l.............0`.d |
0de0 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
0e00 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
0e20 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
0e40 | 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...v.............0..idata$5.. |
0e60 | 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8.................0..i |
0e80 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 00 00 00 00 01 00 | data$4............@............. |
0ea0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 48 01 00 00 00 00 | ....0..idata$6........$...H..... |
0ec0 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
0ee0 | 00 00 00 00 00 00 00 00 00 00 0a 00 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 65 6c | ............TdhQueryProviderFiel |
0f00 | 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 | dInformation.................... |
0f20 | 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
0f40 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
0f60 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
0f80 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
0fa0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
0fc0 | 01 00 00 00 02 00 00 00 00 00 25 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4c 00 00 00 | ..........%.................L... |
0fe0 | 00 00 00 00 00 00 00 00 02 00 b1 00 00 00 54 64 68 51 75 65 72 79 50 72 6f 76 69 64 65 72 46 69 | ..............TdhQueryProviderFi |
1000 | 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 51 75 65 72 79 50 72 6f | eldInformation.__imp_TdhQueryPro |
1020 | 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 | viderFieldInformation._head_C__U |
1040 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
1060 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 | _lib_libwinapi_onecoreuap_api_ms |
1080 | 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 75 65 | _win_eventing_tdh_l1_1_0_a..deue |
10a0 | 62 73 30 30 30 30 39 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 | bs00009.o/..1516160819..0.....0. |
10c0 | 20 20 20 20 31 30 30 36 36 36 20 20 37 31 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 | ....100666..711.......`.d....... |
10e0 | 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
1100 | 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...\.............0`.data....... |
1120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
1140 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1160 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 | ..0..idata$7............4...f... |
1180 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$5............ |
11a0 | 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...p.............0..idata$4.... |
11c0 | 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........@...z.............0..ida |
11e0 | 74 61 24 36 00 00 00 00 00 00 00 00 12 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............H............... |
1200 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....%.......................... |
1220 | 09 00 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 | ..TdhLoadManifest............... |
1240 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
1260 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
1280 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
12a0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
12c0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
12e0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 14 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
1300 | 00 00 2a 00 00 00 00 00 00 00 00 00 00 00 02 00 8f 00 00 00 54 64 68 4c 6f 61 64 4d 61 6e 69 66 | ..*.................TdhLoadManif |
1320 | 65 73 74 00 5f 5f 69 6d 70 5f 54 64 68 4c 6f 61 64 4d 61 6e 69 66 65 73 74 00 5f 68 65 61 64 5f | est.__imp_TdhLoadManifest._head_ |
1340 | 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 | C__Users_Peter_Code_winapi_rs_x8 |
1360 | 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 | 6_64_lib_libwinapi_onecoreuap_ap |
1380 | 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a | i_ms_win_eventing_tdh_l1_1_0_a.. |
13a0 | 64 65 75 65 62 73 30 30 30 30 38 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 | deuebs00008.o/..1516160819..0... |
13c0 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 | ..0.....100666..721.......`.d... |
13e0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
1400 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
1420 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
1440 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
1460 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
1480 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
14a0 | 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
14c0 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@...~.............0. |
14e0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............H........... |
1500 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
1520 | 00 00 00 00 08 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 00 00 00 02 00 00 00 | ......TdhGetPropertySize........ |
1540 | 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 | ................................ |
1560 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
1580 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
15a0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
15c0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
15e0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 00 00 00 00 | ................................ |
1600 | 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02 00 95 00 00 00 54 64 68 47 | ..........0.................TdhG |
1620 | 65 74 50 72 6f 70 65 72 74 79 53 69 7a 65 00 5f 5f 69 6d 70 5f 54 64 68 47 65 74 50 72 6f 70 65 | etPropertySize.__imp_TdhGetPrope |
1640 | 72 74 79 53 69 7a 65 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 | rtySize._head_C__Users_Peter_Cod |
1660 | 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 | e_winapi_rs_x86_64_lib_libwinapi |
1680 | 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f | _onecoreuap_api_ms_win_eventing_ |
16a0 | 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 75 65 62 73 30 30 30 30 37 2e 6f 2f 20 20 31 35 | tdh_l1_1_0_a..deuebs00007.o/..15 |
16c0 | 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 | 16160819..0.....0.....100666..70 |
16e0 | 39 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 9.......`.d....................t |
1700 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 | ext...............,...\......... |
1720 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
1740 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
1760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
1780 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...f.............0..i |
17a0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 | data$5............8...p......... |
17c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 | ....0..idata$4............@...z. |
17e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 | ............0..idata$6.......... |
1800 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
1820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 54 64 68 47 65 74 50 72 6f 70 65 72 | ....................TdhGetProper |
1840 | 74 79 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | ty.............................. |
1860 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
1880 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
18a0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
18c0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
18e0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
1900 | 00 00 13 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 | ....................(........... |
1920 | 02 00 8d 00 00 00 54 64 68 47 65 74 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 47 65 | ......TdhGetProperty.__imp_TdhGe |
1940 | 74 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 | tProperty._head_C__Users_Peter_C |
1960 | 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | ode_winapi_rs_x86_64_lib_libwina |
1980 | 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e | pi_onecoreuap_api_ms_win_eventin |
19a0 | 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 75 65 62 73 30 30 30 30 36 2e 6f 2f 20 20 | g_tdh_l1_1_0_a..deuebs00006.o/.. |
19c0 | 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160819..0.....0.....100666.. |
19e0 | 37 35 37 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 | 757.......`.d................... |
1a00 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 | .text...............,...l....... |
1a20 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
1a40 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
1a60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
1a80 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...v.............0. |
1aa0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 | .idata$5............8........... |
1ac0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
1ae0 | 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
1b00 | 22 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | "...H....................%...... |
1b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 00 54 64 68 47 65 74 4d 61 6e 69 | ......................TdhGetMani |
1b40 | 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 00 00 02 00 00 00 08 00 00 00 | festEventInformation............ |
1b60 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
1b80 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
1ba0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
1bc0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
1be0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
1c00 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 | ....................#........... |
1c20 | 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 ad 00 00 00 54 64 68 47 65 74 4d 61 | ......H.................TdhGetMa |
1c40 | 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 | nifestEventInformation.__imp_Tdh |
1c60 | 47 65 74 4d 61 6e 69 66 65 73 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 | GetManifestEventInformation._hea |
1c80 | 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | d_C__Users_Peter_Code_winapi_rs_ |
1ca0 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f | x86_64_lib_libwinapi_onecoreuap_ |
1cc0 | 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 | api_ms_win_eventing_tdh_l1_1_0_a |
1ce0 | 00 0a 64 65 75 65 62 73 30 30 30 30 35 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 | ..deuebs00005.o/..1516160819..0. |
1d00 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 39 20 20 20 20 20 20 20 60 0a 64 86 | ....0.....100666..739.......`.d. |
1d20 | 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
1d40 | 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...d.............0`.data. |
1d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
1d80 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
1da0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
1dc0 | 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..n.............0..idata$5...... |
1de0 | 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...x.............0..idata |
1e00 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@................. |
1e20 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
1e40 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
1e60 | 00 00 00 00 00 00 05 00 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f | ........TdhGetEventMapInformatio |
1e80 | 6e 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | n............................... |
1ea0 | 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
1ec0 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
1ee0 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
1f00 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
1f20 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 | ................................ |
1f40 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 02 00 a3 00 | ................>............... |
1f60 | 00 00 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d | ..TdhGetEventMapInformation.__im |
1f80 | 70 5f 54 64 68 47 65 74 45 76 65 6e 74 4d 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 | p_TdhGetEventMapInformation._hea |
1fa0 | 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | d_C__Users_Peter_Code_winapi_rs_ |
1fc0 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f | x86_64_lib_libwinapi_onecoreuap_ |
1fe0 | 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 | api_ms_win_eventing_tdh_l1_1_0_a |
2000 | 00 0a 64 65 75 65 62 73 30 30 30 30 34 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 | ..deuebs00004.o/..1516160819..0. |
2020 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 33 20 20 20 20 20 20 20 60 0a 64 86 | ....0.....100666..733.......`.d. |
2040 | 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
2060 | 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...d.............0`.data. |
2080 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
20a0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
20c0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
20e0 | 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..n.............0..idata$5...... |
2100 | 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...x.............0..idata |
2120 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@................. |
2140 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
2160 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
2180 | 00 00 00 00 00 00 04 00 54 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 00 | ........TdhGetEventInformation.. |
21a0 | 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
21c0 | 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
21e0 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
2200 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
2220 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
2240 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 | ................................ |
2260 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 9d 00 | ................8............... |
2280 | 00 00 54 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 | ..TdhGetEventInformation.__imp_T |
22a0 | 64 68 47 65 74 45 76 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 | dhGetEventInformation._head_C__U |
22c0 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
22e0 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 | _lib_libwinapi_onecoreuap_api_ms |
2300 | 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 75 65 | _win_eventing_tdh_l1_1_0_a..deue |
2320 | 62 73 30 30 30 30 33 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 | bs00003.o/..1516160819..0.....0. |
2340 | 20 20 20 20 31 30 30 36 36 36 20 20 37 31 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 | ....100666..715.......`.d....... |
2360 | 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
2380 | 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...\.............0`.data....... |
23a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
23c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
23e0 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 | ..0..idata$7............4...f... |
2400 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$5............ |
2420 | 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...p.............0..idata$4.... |
2440 | 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........@...z.............0..ida |
2460 | 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............H............... |
2480 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....%.......................... |
24a0 | 03 00 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 00 02 00 00 00 08 00 00 00 04 00 00 00 | ..TdhFormatProperty............. |
24c0 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
24e0 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
2500 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
2520 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
2540 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
2560 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 16 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
2580 | 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 93 00 00 00 54 64 68 46 6f 72 6d 61 74 50 72 6f | ....................TdhFormatPro |
25a0 | 70 65 72 74 79 00 5f 5f 69 6d 70 5f 54 64 68 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 79 00 5f 68 | perty.__imp_TdhFormatProperty._h |
25c0 | 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 | ead_C__Users_Peter_Code_winapi_r |
25e0 | 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 | s_x86_64_lib_libwinapi_onecoreua |
2600 | 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 | p_api_ms_win_eventing_tdh_l1_1_0 |
2620 | 5f 61 00 0a 64 65 75 65 62 73 30 30 30 30 32 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 | _a..deuebs00002.o/..1516160819.. |
2640 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 37 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..727.......`. |
2660 | 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
2680 | 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...`.............0`.dat |
26a0 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
26c0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
26e0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
2700 | 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...j.............0..idata$5.... |
2720 | 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...t.............0..ida |
2740 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@...~........... |
2760 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
2780 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
27a0 | 00 00 00 00 00 00 00 00 02 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 | ..........TdhEnumerateProviders. |
27c0 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
27e0 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
2800 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
2820 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
2840 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
2860 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1a 00 00 00 | ................................ |
2880 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 02 00 9b 00 00 00 | ..............6................. |
28a0 | 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 5f 5f 69 6d 70 5f 54 64 68 45 | TdhEnumerateProviders.__imp_TdhE |
28c0 | 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 73 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 | numerateProviders._head_C__Users |
28e0 | 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 | _Peter_Code_winapi_rs_x86_64_lib |
2900 | 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e | _libwinapi_onecoreuap_api_ms_win |
2920 | 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 75 65 62 73 30 30 | _eventing_tdh_l1_1_0_a..deuebs00 |
2940 | 30 30 31 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 001.o/..1516160819..0.....0..... |
2960 | 31 30 30 36 36 36 20 20 37 37 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 98 01 00 00 | 100666..773.......`.d........... |
2980 | 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
29a0 | 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | p.............0`.data........... |
29c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
29e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
2a00 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 00 00 00 00 00 00 | .idata$7............4...z....... |
2a20 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 | ......0..idata$5............8... |
2a40 | 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | ..............0..idata$4........ |
2a60 | 08 00 00 00 40 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....@.................0..idata$6 |
2a80 | 00 00 00 00 00 00 00 00 28 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ........(...H................... |
2aa0 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 54 64 | .%............................Td |
2ac0 | 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 | hEnumerateProviderFieldInformati |
2ae0 | 6f 6e 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 | on.............................. |
2b00 | 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
2b20 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
2b40 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
2b60 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
2b80 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
2ba0 | 29 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 02 00 | ).................T............. |
2bc0 | b9 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 64 65 72 46 69 65 6c 64 49 6e 66 | ....TdhEnumerateProviderFieldInf |
2be0 | 6f 72 6d 61 74 69 6f 6e 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 50 72 6f 76 69 | ormation.__imp_TdhEnumerateProvi |
2c00 | 64 65 72 46 69 65 6c 64 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 | derFieldInformation._head_C__Use |
2c20 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c | rs_Peter_Code_winapi_rs_x86_64_l |
2c40 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 | ib_libwinapi_onecoreuap_api_ms_w |
2c60 | 69 6e 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a 64 65 75 65 62 73 | in_eventing_tdh_l1_1_0_a..deuebs |
2c80 | 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 38 31 39 20 20 30 20 20 20 20 20 30 20 20 20 | 00000.o/..1516160819..0.....0... |
2ca0 | 20 20 31 30 30 36 36 36 20 20 37 36 39 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 98 01 | ..100666..769.......`.d......... |
2cc0 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
2ce0 | 00 00 70 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..p.............0`.data......... |
2d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
2d20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
2d40 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 00 00 00 00 | 0..idata$7............4...z..... |
2d60 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
2d80 | 00 00 84 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ................0..idata$4...... |
2da0 | 00 00 08 00 00 00 40 01 00 00 8e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@.................0..idata |
2dc0 | 24 36 00 00 00 00 00 00 00 00 26 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6........&...H................. |
2de0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...%............................ |
2e00 | 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e | TdhEnumerateManifestProviderEven |
2e20 | 74 73 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | ts.............................. |
2e40 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
2e60 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
2e80 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
2ea0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
2ec0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
2ee0 | 00 00 27 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 50 00 00 00 00 00 00 00 00 00 00 00 | ..'.................P........... |
2f00 | 02 00 b5 00 00 00 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 65 73 74 50 72 6f 76 69 64 | ......TdhEnumerateManifestProvid |
2f20 | 65 72 45 76 65 6e 74 73 00 5f 5f 69 6d 70 5f 54 64 68 45 6e 75 6d 65 72 61 74 65 4d 61 6e 69 66 | erEvents.__imp_TdhEnumerateManif |
2f40 | 65 73 74 50 72 6f 76 69 64 65 72 45 76 65 6e 74 73 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 | estProviderEvents._head_C__Users |
2f60 | 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 | _Peter_Code_winapi_rs_x86_64_lib |
2f80 | 5f 6c 69 62 77 69 6e 61 70 69 5f 6f 6e 65 63 6f 72 65 75 61 70 5f 61 70 69 5f 6d 73 5f 77 69 6e | _libwinapi_onecoreuap_api_ms_win |
2fa0 | 5f 65 76 65 6e 74 69 6e 67 5f 74 64 68 5f 6c 31 5f 31 5f 30 5f 61 00 0a | _eventing_tdh_l1_1_0_a.. |