| ofs | hex dump | ascii |
|---|---|---|
| 0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 34 33 34 32 37 36 | !<arch>./...............15434276 |
| 0020 | 38 31 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 32 36 30 36 20 20 20 20 | 81..0.....0.....0.......2606.... |
| 0040 | 20 20 60 0a 00 00 00 5e 00 00 0a 72 00 00 0c fc 00 00 0f c6 00 00 0f c6 00 00 12 82 00 00 12 82 | ..`....^...r.................... |
| 0060 | 00 00 15 30 00 00 15 30 00 00 18 04 00 00 18 04 00 00 1a e0 00 00 1a e0 00 00 1d 78 00 00 1d 78 | ...0...0...................x...x |
| 0080 | 00 00 20 3e 00 00 20 3e 00 00 22 e2 00 00 22 e2 00 00 25 7a 00 00 25 7a 00 00 28 30 00 00 28 30 | ...>...>.."..."...%z..%z..(0..(0 |
| 00a0 | 00 00 2b 02 00 00 2b 02 00 00 2d c8 00 00 2d c8 00 00 30 72 00 00 30 72 00 00 33 44 00 00 33 44 | ..+...+...-...-...0r..0r..3D..3D |
| 00c0 | 00 00 36 06 00 00 36 06 00 00 38 cc 00 00 38 cc 00 00 3b 8e 00 00 3b 8e 00 00 3e 54 00 00 3e 54 | ..6...6...8...8...;...;...>T..>T |
| 00e0 | 00 00 41 16 00 00 41 16 00 00 43 ae 00 00 43 ae 00 00 46 9a 00 00 46 9a 00 00 49 60 00 00 49 60 | ..A...A...C...C...F...F...I`..I` |
| 0100 | 00 00 4c 24 00 00 4c 24 00 00 4f 0c 00 00 4f 0c 00 00 52 02 00 00 52 02 00 00 54 ee 00 00 54 ee | ..L$..L$..O...O...R...R...T...T. |
| 0120 | 00 00 57 d4 00 00 57 d4 00 00 5a a6 00 00 5a a6 00 00 5d 8e 00 00 5d 8e 00 00 60 50 00 00 60 50 | ..W...W...Z...Z...]...]...`P..`P |
| 0140 | 00 00 63 08 00 00 63 08 00 00 65 f0 00 00 65 f0 00 00 68 b8 00 00 68 b8 00 00 6b 8c 00 00 6b 8c | ..c...c...e...e...h...h...k...k. |
| 0160 | 00 00 6e 3c 00 00 6e 3c 00 00 71 02 00 00 71 02 00 00 73 de 00 00 73 de 00 00 76 96 00 00 76 96 | ..n<..n<..q...q...s...s...v...v. |
| 0180 | 00 00 79 72 00 00 79 72 00 00 7c 2c 00 00 7c 2c 00 00 7e da 00 00 7e da 00 00 81 a8 00 00 81 a8 | ..yr..yr..|,..|,..~...~......... |
| 01a0 | 00 00 84 64 00 00 84 64 00 00 86 fc 00 00 86 fc 00 00 89 a8 00 00 89 a8 00 00 8c 4c 00 00 8c 4c | ...d...d...................L...L |
| 01c0 | 5f 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 5f 69 6e 61 6d 65 00 5f 68 65 61 64 | __lib64_libwevtapi_a_iname._head |
| 01e0 | 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 45 76 74 55 70 64 61 74 65 42 6f 6f | _lib64_libwevtapi_a.EvtUpdateBoo |
| 0200 | 6b 6d 61 72 6b 00 5f 5f 69 6d 70 5f 45 76 74 55 70 64 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 45 76 | kmark.__imp_EvtUpdateBookmark.Ev |
| 0220 | 74 53 75 62 73 63 72 69 62 65 00 5f 5f 69 6d 70 5f 45 76 74 53 75 62 73 63 72 69 62 65 00 45 76 | tSubscribe.__imp_EvtSubscribe.Ev |
| 0240 | 74 53 65 74 4f 62 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 | tSetObjectArrayProperty.__imp_Ev |
| 0260 | 74 53 65 74 4f 62 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 45 76 74 53 65 74 43 68 | tSetObjectArrayProperty.EvtSetCh |
| 0280 | 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 53 65 74 | annelConfigProperty.__imp_EvtSet |
| 02a0 | 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f 70 65 72 74 79 00 45 76 74 53 65 65 6b 00 5f 5f | ChannelConfigProperty.EvtSeek.__ |
| 02c0 | 69 6d 70 5f 45 76 74 53 65 65 6b 00 45 76 74 53 61 76 65 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 | imp_EvtSeek.EvtSaveChannelConfig |
| 02e0 | 00 5f 5f 69 6d 70 5f 45 76 74 53 61 76 65 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 00 45 76 74 52 | .__imp_EvtSaveChannelConfig.EvtR |
| 0300 | 65 6e 64 65 72 00 5f 5f 69 6d 70 5f 45 76 74 52 65 6e 64 65 72 00 45 76 74 51 75 65 72 79 00 5f | ender.__imp_EvtRender.EvtQuery._ |
| 0320 | 5f 69 6d 70 5f 45 76 74 51 75 65 72 79 00 45 76 74 4f 70 65 6e 53 65 73 73 69 6f 6e 00 5f 5f 69 | _imp_EvtQuery.EvtOpenSession.__i |
| 0340 | 6d 70 5f 45 76 74 4f 70 65 6e 53 65 73 73 69 6f 6e 00 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 | mp_EvtOpenSession.EvtOpenPublish |
| 0360 | 65 72 4d 65 74 61 64 61 74 61 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 | erMetadata.__imp_EvtOpenPublishe |
| 0380 | 72 4d 65 74 61 64 61 74 61 00 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 72 45 6e 75 6d 00 5f | rMetadata.EvtOpenPublisherEnum._ |
| 03a0 | 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 72 45 6e 75 6d 00 45 76 74 4f 70 65 | _imp_EvtOpenPublisherEnum.EvtOpe |
| 03c0 | 6e 4c 6f 67 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 4c 6f 67 00 45 76 74 4f 70 65 6e 45 76 65 | nLog.__imp_EvtOpenLog.EvtOpenEve |
| 03e0 | 6e 74 4d 65 74 61 64 61 74 61 45 6e 75 6d 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 45 76 65 6e | ntMetadataEnum.__imp_EvtOpenEven |
| 0400 | 74 4d 65 74 61 64 61 74 61 45 6e 75 6d 00 45 76 74 4f 70 65 6e 43 68 61 6e 6e 65 6c 45 6e 75 6d | tMetadataEnum.EvtOpenChannelEnum |
| 0420 | 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 43 68 61 6e 6e 65 6c 45 6e 75 6d 00 45 76 74 4f 70 65 | .__imp_EvtOpenChannelEnum.EvtOpe |
| 0440 | 6e 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 43 68 61 6e | nChannelConfig.__imp_EvtOpenChan |
| 0460 | 6e 65 6c 43 6f 6e 66 69 67 00 45 76 74 4e 65 78 74 50 75 62 6c 69 73 68 65 72 49 64 00 5f 5f 69 | nelConfig.EvtNextPublisherId.__i |
| 0480 | 6d 70 5f 45 76 74 4e 65 78 74 50 75 62 6c 69 73 68 65 72 49 64 00 45 76 74 4e 65 78 74 45 76 65 | mp_EvtNextPublisherId.EvtNextEve |
| 04a0 | 6e 74 4d 65 74 61 64 61 74 61 00 5f 5f 69 6d 70 5f 45 76 74 4e 65 78 74 45 76 65 6e 74 4d 65 74 | ntMetadata.__imp_EvtNextEventMet |
| 04c0 | 61 64 61 74 61 00 45 76 74 4e 65 78 74 43 68 61 6e 6e 65 6c 50 61 74 68 00 5f 5f 69 6d 70 5f 45 | adata.EvtNextChannelPath.__imp_E |
| 04e0 | 76 74 4e 65 78 74 43 68 61 6e 6e 65 6c 50 61 74 68 00 45 76 74 4e 65 78 74 00 5f 5f 69 6d 70 5f | vtNextChannelPath.EvtNext.__imp_ |
| 0500 | 45 76 74 4e 65 78 74 00 45 76 74 49 6e 74 57 72 69 74 65 58 6d 6c 45 76 65 6e 74 54 6f 4c 6f 63 | EvtNext.EvtIntWriteXmlEventToLoc |
| 0520 | 61 6c 4c 6f 67 66 69 6c 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 57 72 69 74 65 58 6d 6c 45 76 | alLogfile.__imp_EvtIntWriteXmlEv |
| 0540 | 65 6e 74 54 6f 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 45 76 74 49 6e 74 53 79 73 70 72 65 70 43 | entToLocalLogfile.EvtIntSysprepC |
| 0560 | 6c 65 61 6e 75 70 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 53 79 73 70 72 65 70 43 6c 65 61 6e 75 | leanup.__imp_EvtIntSysprepCleanu |
| 0580 | 70 00 45 76 74 49 6e 74 52 65 74 72 61 63 74 43 6f 6e 66 69 67 00 5f 5f 69 6d 70 5f 45 76 74 49 | p.EvtIntRetractConfig.__imp_EvtI |
| 05a0 | 6e 74 52 65 74 72 61 63 74 43 6f 6e 66 69 67 00 45 76 74 49 6e 74 52 65 70 6f 72 74 45 76 65 6e | ntRetractConfig.EvtIntReportEven |
| 05c0 | 74 41 6e 64 53 6f 75 72 63 65 41 73 79 6e 63 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 52 65 70 6f | tAndSourceAsync.__imp_EvtIntRepo |
| 05e0 | 72 74 45 76 65 6e 74 41 6e 64 53 6f 75 72 63 65 41 73 79 6e 63 00 45 76 74 49 6e 74 52 65 70 6f | rtEventAndSourceAsync.EvtIntRepo |
| 0600 | 72 74 41 75 74 68 7a 45 76 65 6e 74 41 6e 64 53 6f 75 72 63 65 41 73 79 6e 63 00 5f 5f 69 6d 70 | rtAuthzEventAndSourceAsync.__imp |
| 0620 | 5f 45 76 74 49 6e 74 52 65 70 6f 72 74 41 75 74 68 7a 45 76 65 6e 74 41 6e 64 53 6f 75 72 63 65 | _EvtIntReportAuthzEventAndSource |
| 0640 | 41 73 79 6e 63 00 45 76 74 49 6e 74 52 65 6e 64 65 72 52 65 73 6f 75 72 63 65 45 76 65 6e 74 54 | Async.EvtIntRenderResourceEventT |
| 0660 | 65 6d 70 6c 61 74 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 52 65 6e 64 65 72 52 65 73 6f 75 72 | emplate.__imp_EvtIntRenderResour |
| 0680 | 63 65 45 76 65 6e 74 54 65 6d 70 6c 61 74 65 00 45 76 74 49 6e 74 47 65 74 43 6c 61 73 73 69 63 | ceEventTemplate.EvtIntGetClassic |
| 06a0 | 4c 6f 67 44 69 73 70 6c 61 79 4e 61 6d 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 47 65 74 43 6c | LogDisplayName.__imp_EvtIntGetCl |
| 06c0 | 61 73 73 69 63 4c 6f 67 44 69 73 70 6c 61 79 4e 61 6d 65 00 45 76 74 49 6e 74 43 72 65 61 74 65 | assicLogDisplayName.EvtIntCreate |
| 06e0 | 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 43 72 65 61 74 65 4c | LocalLogfile.__imp_EvtIntCreateL |
| 0700 | 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 45 76 74 49 6e 74 43 72 65 61 74 65 42 69 6e 58 4d 4c 46 72 | ocalLogfile.EvtIntCreateBinXMLFr |
| 0720 | 6f 6d 43 75 73 74 6f 6d 58 4d 4c 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 43 72 65 61 74 65 42 69 | omCustomXML.__imp_EvtIntCreateBi |
| 0740 | 6e 58 4d 4c 46 72 6f 6d 43 75 73 74 6f 6d 58 4d 4c 00 45 76 74 49 6e 74 41 73 73 65 72 74 43 6f | nXMLFromCustomXML.EvtIntAssertCo |
| 0760 | 6e 66 69 67 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 41 73 73 65 72 74 43 6f 6e 66 69 67 00 45 76 | nfig.__imp_EvtIntAssertConfig.Ev |
| 0780 | 74 47 65 74 51 75 65 72 79 49 6e 66 6f 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 51 75 65 72 79 49 | tGetQueryInfo.__imp_EvtGetQueryI |
| 07a0 | 6e 66 6f 00 45 76 74 47 65 74 50 75 62 6c 69 73 68 65 72 4d 65 74 61 64 61 74 61 50 72 6f 70 65 | nfo.EvtGetPublisherMetadataPrope |
| 07c0 | 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 50 75 62 6c 69 73 68 65 72 4d 65 74 61 64 61 74 | rty.__imp_EvtGetPublisherMetadat |
| 07e0 | 61 50 72 6f 70 65 72 74 79 00 45 76 74 47 65 74 4f 62 6a 65 63 74 41 72 72 61 79 53 69 7a 65 00 | aProperty.EvtGetObjectArraySize. |
| 0800 | 5f 5f 69 6d 70 5f 45 76 74 47 65 74 4f 62 6a 65 63 74 41 72 72 61 79 53 69 7a 65 00 45 76 74 47 | __imp_EvtGetObjectArraySize.EvtG |
| 0820 | 65 74 4f 62 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 | etObjectArrayProperty.__imp_EvtG |
| 0840 | 65 74 4f 62 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 45 76 74 47 65 74 4c 6f 67 49 | etObjectArrayProperty.EvtGetLogI |
| 0860 | 6e 66 6f 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 4c 6f 67 49 6e 66 6f 00 45 76 74 47 65 74 45 78 | nfo.__imp_EvtGetLogInfo.EvtGetEx |
| 0880 | 74 65 6e 64 65 64 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 45 78 74 65 6e 64 65 | tendedStatus.__imp_EvtGetExtende |
| 08a0 | 64 53 74 61 74 75 73 00 45 76 74 47 65 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 50 72 6f 70 65 | dStatus.EvtGetEventMetadataPrope |
| 08c0 | 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 50 72 6f | rty.__imp_EvtGetEventMetadataPro |
| 08e0 | 70 65 72 74 79 00 45 76 74 47 65 74 45 76 65 6e 74 49 6e 66 6f 00 5f 5f 69 6d 70 5f 45 76 74 47 | perty.EvtGetEventInfo.__imp_EvtG |
| 0900 | 65 74 45 76 65 6e 74 49 6e 66 6f 00 45 76 74 47 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 | etEventInfo.EvtGetChannelConfigP |
| 0920 | 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 | roperty.__imp_EvtGetChannelConfi |
| 0940 | 67 50 72 6f 70 65 72 74 79 00 45 76 74 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 00 5f 5f 69 6d 70 | gProperty.EvtFormatMessage.__imp |
| 0960 | 5f 45 76 74 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 00 45 76 74 45 78 70 6f 72 74 4c 6f 67 00 5f | _EvtFormatMessage.EvtExportLog._ |
| 0980 | 5f 69 6d 70 5f 45 76 74 45 78 70 6f 72 74 4c 6f 67 00 45 76 74 43 72 65 61 74 65 52 65 6e 64 65 | _imp_EvtExportLog.EvtCreateRende |
| 09a0 | 72 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 45 76 74 43 72 65 61 74 65 52 65 6e 64 65 72 43 6f | rContext.__imp_EvtCreateRenderCo |
| 09c0 | 6e 74 65 78 74 00 45 76 74 43 72 65 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 5f 5f 69 6d 70 5f 45 76 | ntext.EvtCreateBookmark.__imp_Ev |
| 09e0 | 74 43 72 65 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 45 76 74 43 6c 6f 73 65 00 5f 5f 69 6d 70 5f 45 | tCreateBookmark.EvtClose.__imp_E |
| 0a00 | 76 74 43 6c 6f 73 65 00 45 76 74 43 6c 65 61 72 4c 6f 67 00 5f 5f 69 6d 70 5f 45 76 74 43 6c 65 | vtClose.EvtClearLog.__imp_EvtCle |
| 0a20 | 61 72 4c 6f 67 00 45 76 74 43 61 6e 63 65 6c 00 5f 5f 69 6d 70 5f 45 76 74 43 61 6e 63 65 6c 00 | arLog.EvtCancel.__imp_EvtCancel. |
| 0a40 | 45 76 74 41 72 63 68 69 76 65 45 78 70 6f 72 74 65 64 4c 6f 67 00 5f 5f 69 6d 70 5f 45 76 74 41 | EvtArchiveExportedLog.__imp_EvtA |
| 0a60 | 72 63 68 69 76 65 45 78 70 6f 72 74 65 64 4c 6f 67 00 64 62 75 71 6a 74 2e 6f 2f 20 20 20 20 20 | rchiveExportedLog.dbuqjt.o/..... |
| 0a80 | 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 | ..1543427681..18779.5000..100644 |
| 0aa0 | 20 20 35 38 39 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 20 01 00 00 0f 00 00 00 00 00 | ..589.......`.d................. |
| 0ac0 | 05 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...text......................... |
| 0ae0 | 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........P`.data................. |
| 0b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.P..bss.......... |
| 0b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 | ........................P..idata |
| 0b40 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | $4............................@. |
| 0b60 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 0c 01 00 00 00 00 00 00 00 00 | 0..idata$5...................... |
| 0b80 | 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 0c 00 00 00 14 01 | ......@.0..idata$7.............. |
| 0ba0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..............@.0............... |
| 0bc0 | 00 00 77 65 76 74 61 70 69 2e 64 6c 6c 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 | ..wevtapi.dll..file...........g. |
| 0be0 | 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | fake...............text......... |
| 0c00 | 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 | .......................data..... |
| 0c20 | 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 | ...........................bss.. |
| 0c40 | 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 | ...............................i |
| 0c60 | 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | data$4.......................... |
| 0c80 | 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 | ...idata$5...................... |
| 0ca0 | 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 0c 00 00 00 00 00 00 00 | .......idata$7.................. |
| 0cc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 1f 00 00 00 | ................................ |
| 0ce0 | 5f 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 5f 69 6e 61 6d 65 00 0a 64 62 75 71 | __lib64_libwevtapi_a_iname..dbuq |
| 0d00 | 6a 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 | jh.o/.......1543427681..18779.50 |
| 0d20 | 30 30 20 20 31 30 30 36 34 34 20 20 36 35 34 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 | 00..100644..654.......`.d....... |
| 0d40 | 36 01 00 00 10 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 6............text............... |
| 0d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ..................P`.data....... |
| 0d80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 | ........................@.P..bss |
| 0da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 0dc0 | 80 00 50 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 18 01 00 00 | ..P..idata$2.................... |
| 0de0 | 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..idata$5............ |
| 0e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | ................@.0..idata$4.... |
| 0e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 | ........................@.0..... |
| 0e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 03 00 0c 00 00 00 0f 00 | ................................ |
| 0e60 | 00 00 03 00 10 00 00 00 0d 00 00 00 03 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 | ...............file...........g. |
| 0e80 | 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 | fake..............hname......... |
| 0ea0 | 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | ....fthunk.............text..... |
| 0ec0 | 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 | ...........................data. |
| 0ee0 | 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 | ...............................b |
| 0f00 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 0f20 | 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 00 00 00 00 | ...idata$2...................... |
| 0f40 | 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$4...........idata$5 |
| 0f60 | 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 00 00 | ................................ |
| 0f80 | 1d 00 00 00 00 00 00 00 00 00 00 00 02 00 38 00 00 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 | ..............8..._head_lib64_li |
| 0fa0 | 62 77 65 76 74 61 70 69 5f 61 00 5f 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 5f | bwevtapi_a.__lib64_libwevtapi_a_ |
| 0fc0 | 69 6e 61 6d 65 00 64 62 75 71 6a 73 30 30 30 34 35 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 | iname.dbuqjs00045.o/..1543427681 |
| 0fe0 | 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 33 39 20 20 20 20 20 20 20 | ..18779.5000..100644..639....... |
| 1000 | 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 | `.d....................text..... |
| 1020 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...\.............0`.d |
| 1040 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 1060 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 1080 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 10a0 | 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...f.............0..idata$5.. |
| 10c0 | 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...p.............0..i |
| 10e0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 | data$4............@...z......... |
| 1100 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 00 00 | ....0..idata$6............H..... |
| 1120 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 1140 | 00 00 00 00 00 00 00 00 00 00 2d 00 45 76 74 55 70 64 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 02 00 | ..........-.EvtUpdateBookmark... |
| 1160 | 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 | ................................ |
| 1180 | 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 11a0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 11c0 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 11e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 1200 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 16 00 00 00 00 00 | ................................ |
| 1220 | 00 00 05 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 47 00 00 00 45 76 | ..........................G...Ev |
| 1240 | 74 55 70 64 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 5f 5f 69 6d 70 5f 45 76 74 55 70 64 61 74 65 42 | tUpdateBookmark.__imp_EvtUpdateB |
| 1260 | 6f 6f 6b 6d 61 72 6b 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 | ookmark._head_lib64_libwevtapi_a |
| 1280 | 00 0a 64 62 75 71 6a 73 30 30 30 34 34 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 | ..dbuqjs00044.o/..1543427681..18 |
| 12a0 | 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 32 35 20 20 20 20 20 20 20 60 0a 64 86 | 779.5000..100644..625.......`.d. |
| 12c0 | 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 12e0 | 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...X.............0`.data. |
| 1300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 1320 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 1340 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 1360 | 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..b.............0..idata$5...... |
| 1380 | 00 00 08 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...l.............0..idata |
| 13a0 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@...v............. |
| 13c0 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 10 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
| 13e0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 1400 | 00 00 00 00 00 00 2c 00 45 76 74 53 75 62 73 63 72 69 62 65 00 00 02 00 00 00 08 00 00 00 04 00 | ......,.EvtSubscribe............ |
| 1420 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
| 1440 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 1460 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 1480 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 14a0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 14c0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 11 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
| 14e0 | 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 02 00 3d 00 00 00 45 76 74 53 75 62 73 63 72 69 | ....$.............=...EvtSubscri |
| 1500 | 62 65 00 5f 5f 69 6d 70 5f 45 76 74 53 75 62 73 63 72 69 62 65 00 5f 68 65 61 64 5f 6c 69 62 36 | be.__imp_EvtSubscribe._head_lib6 |
| 1520 | 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 34 33 2e 6f 2f 20 20 | 4_libwevtapi_a..dbuqjs00043.o/.. |
| 1540 | 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 | 1543427681..18779.5000..100644.. |
| 1560 | 36 36 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 | 663.......`.d................... |
| 1580 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 | .text...............,...d....... |
| 15a0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 15c0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 15e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 1600 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...n.............0. |
| 1620 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 | .idata$5............8...x....... |
| 1640 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 1660 | 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 1680 | 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 16a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2b 00 45 76 74 53 65 74 4f 62 6a 65 | ....................+.EvtSetObje |
| 16c0 | 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | ctArrayProperty................. |
| 16e0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 1700 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 1720 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 1740 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 1760 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 1780 | 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3e 00 | ..............................>. |
| 17a0 | 00 00 00 00 00 00 00 00 00 00 02 00 57 00 00 00 45 76 74 53 65 74 4f 62 6a 65 63 74 41 72 72 61 | ............W...EvtSetObjectArra |
| 17c0 | 79 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 53 65 74 4f 62 6a 65 63 74 41 72 72 61 | yProperty.__imp_EvtSetObjectArra |
| 17e0 | 79 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 | yProperty._head_lib64_libwevtapi |
| 1800 | 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 34 32 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 | _a..dbuqjs00042.o/..1543427681.. |
| 1820 | 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 37 31 20 20 20 20 20 20 20 60 0a | 18779.5000..100644..671.......`. |
| 1840 | 64 86 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
| 1860 | 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...h.............0`.dat |
| 1880 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 18a0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 18c0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 18e0 | 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...r.............0..idata$5.... |
| 1900 | 00 00 00 00 08 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...|.............0..ida |
| 1920 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@............... |
| 1940 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
| 1960 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 1980 | 00 00 00 00 00 00 00 00 2a 00 45 76 74 53 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f | ........*.EvtSetChannelConfigPro |
| 19a0 | 70 65 72 74 79 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | perty........................... |
| 19c0 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 19e0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 1a00 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 1a20 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 1a40 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 1a60 | 00 00 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 | ......................B......... |
| 1a80 | 00 00 02 00 5b 00 00 00 45 76 74 53 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f 70 65 | ....[...EvtSetChannelConfigPrope |
| 1aa0 | 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 53 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f | rty.__imp_EvtSetChannelConfigPro |
| 1ac0 | 70 65 72 74 79 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a | perty._head_lib64_libwevtapi_a.. |
| 1ae0 | 64 62 75 71 6a 73 30 30 30 34 31 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 | dbuqjs00041.o/..1543427681..1877 |
| 1b00 | 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 30 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 | 9.5000..100644..603.......`.d... |
| 1b20 | 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | ....|............text........... |
| 1b40 | 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...T.............0`.data... |
| 1b60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 1b80 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 1ba0 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 1bc0 | 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | ^.............0..idata$5........ |
| 1be0 | 08 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...h.............0..idata$4 |
| 1c00 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@...r.............0. |
| 1c20 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............H........... |
| 1c40 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
| 1c60 | 00 00 00 00 29 00 45 76 74 53 65 65 6b 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | ....).EvtSeek................... |
| 1c80 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 1ca0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 1cc0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 1ce0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 1d00 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 45 76 74 53 65 65 6b 00 00 00 | .....idata$6..........EvtSeek... |
| 1d20 | 00 00 01 00 00 00 02 00 00 00 00 00 04 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 12 00 | ................................ |
| 1d40 | 00 00 00 00 00 00 00 00 00 00 02 00 2b 00 00 00 5f 5f 69 6d 70 5f 45 76 74 53 65 65 6b 00 5f 68 | ............+...__imp_EvtSeek._h |
| 1d60 | 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 | ead_lib64_libwevtapi_a..dbuqjs00 |
| 1d80 | 30 34 30 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 | 040.o/..1543427681..18779.5000.. |
| 1da0 | 31 30 30 36 34 34 20 20 36 34 39 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 | 100644..649.......`.d........... |
| 1dc0 | 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 1de0 | 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | `.............0`.data........... |
| 1e00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 1e20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 1e40 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 | .idata$7............4...j....... |
| 1e60 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 1e80 | 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | t.............0..idata$4........ |
| 1ea0 | 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....@...~.............0..idata$6 |
| 1ec0 | 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............H................... |
| 1ee0 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 45 76 | .%..........................(.Ev |
| 1f00 | 74 53 61 76 65 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 00 00 02 00 00 00 08 00 00 00 04 00 00 00 | tSaveChannelConfig.............. |
| 1f20 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
| 1f40 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 1f60 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 1f80 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 1fa0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 1fc0 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| 1fe0 | 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 4d 00 00 00 45 76 74 53 61 76 65 43 68 61 6e 6e | ..4.............M...EvtSaveChann |
| 2000 | 65 6c 43 6f 6e 66 69 67 00 5f 5f 69 6d 70 5f 45 76 74 53 61 76 65 43 68 61 6e 6e 65 6c 43 6f 6e | elConfig.__imp_EvtSaveChannelCon |
| 2020 | 66 69 67 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 | fig._head_lib64_libwevtapi_a..db |
| 2040 | 75 71 6a 73 30 30 30 33 39 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 | uqjs00039.o/..1543427681..18779. |
| 2060 | 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 31 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 | 5000..100644..615.......`.d..... |
| 2080 | 00 00 7c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ..|............text............. |
| 20a0 | 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...T.............0`.data..... |
| 20c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 20e0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 2100 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 | ....0..idata$7............4...^. |
| 2120 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 | ............0..idata$5.......... |
| 2140 | 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...h.............0..idata$4.. |
| 2160 | 00 00 00 00 00 00 08 00 00 00 40 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........@...r.............0..i |
| 2180 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............H............. |
| 21a0 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .......%........................ |
| 21c0 | 00 00 27 00 45 76 74 52 65 6e 64 65 72 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 | ..'.EvtRender................... |
| 21e0 | 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 2200 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 2220 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 2240 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 2260 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 2280 | 01 00 00 00 02 00 00 00 00 00 0e 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 1e 00 00 00 | ................................ |
| 22a0 | 00 00 00 00 00 00 00 00 02 00 37 00 00 00 45 76 74 52 65 6e 64 65 72 00 5f 5f 69 6d 70 5f 45 76 | ..........7...EvtRender.__imp_Ev |
| 22c0 | 74 52 65 6e 64 65 72 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 | tRender._head_lib64_libwevtapi_a |
| 22e0 | 00 0a 64 62 75 71 6a 73 30 30 30 33 38 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 | ..dbuqjs00038.o/..1543427681..18 |
| 2300 | 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 30 34 20 20 20 20 20 20 20 60 0a 64 86 | 779.5000..100644..604.......`.d. |
| 2320 | 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ......|............text......... |
| 2340 | 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...T.............0`.data. |
| 2360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 2380 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 23a0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 23c0 | 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..^.............0..idata$5...... |
| 23e0 | 00 00 08 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...h.............0..idata |
| 2400 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@...r............. |
| 2420 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0c 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
| 2440 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 2460 | 00 00 00 00 00 00 26 00 45 76 74 51 75 65 72 79 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 | ......&.EvtQuery................ |
| 2480 | 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 | ...........................text. |
| 24a0 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 24c0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 24e0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 2500 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 45 76 74 51 75 65 72 79 | .......idata$6..........EvtQuery |
| 2520 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 04 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 2540 | 13 00 00 00 00 00 00 00 00 00 00 00 02 00 2c 00 00 00 5f 5f 69 6d 70 5f 45 76 74 51 75 65 72 79 | ..............,...__imp_EvtQuery |
| 2560 | 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 64 62 75 71 6a 73 | ._head_lib64_libwevtapi_a.dbuqjs |
| 2580 | 30 30 30 33 37 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 | 00037.o/..1543427681..18779.5000 |
| 25a0 | 20 20 31 30 30 36 34 34 20 20 36 33 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 | ..100644..633.......`.d......... |
| 25c0 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 25e0 | 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..\.............0`.data......... |
| 2600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 2620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 2640 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 | 0..idata$7............4...f..... |
| 2660 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
| 2680 | 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..p.............0..idata$4...... |
| 26a0 | 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@...z.............0..idata |
| 26c0 | 24 36 00 00 00 00 00 00 00 00 12 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............H................. |
| 26e0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 00 | ...%..........................%. |
| 2700 | 45 76 74 4f 70 65 6e 53 65 73 73 69 6f 6e 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 | EvtOpenSession.................. |
| 2720 | 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 | ...........................text. |
| 2740 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 2760 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 2780 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 27a0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 27c0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 13 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 27e0 | 28 00 00 00 00 00 00 00 00 00 00 00 02 00 41 00 00 00 45 76 74 4f 70 65 6e 53 65 73 73 69 6f 6e | (.............A...EvtOpenSession |
| 2800 | 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 53 65 73 73 69 6f 6e 00 5f 68 65 61 64 5f 6c 69 62 36 | .__imp_EvtOpenSession._head_lib6 |
| 2820 | 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 33 36 2e 6f 2f 20 20 | 4_libwevtapi_a..dbuqjs00036.o/.. |
| 2840 | 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 | 1543427681..18779.5000..100644.. |
| 2860 | 36 36 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 | 661.......`.d................... |
| 2880 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 | .text...............,...d....... |
| 28a0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 28c0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 28e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 2900 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...n.............0. |
| 2920 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 | .idata$5............8...x....... |
| 2940 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 2960 | 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 2980 | 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 29a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 00 45 76 74 4f 70 65 6e 50 75 62 | ....................$.EvtOpenPub |
| 29c0 | 6c 69 73 68 65 72 4d 65 74 61 64 61 74 61 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | lisherMetadata.................. |
| 29e0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 2a00 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 2a20 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 2a40 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 2a60 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 2a80 | 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 | ..............................<. |
| 2aa0 | 00 00 00 00 00 00 00 00 00 00 02 00 55 00 00 00 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 72 | ............U...EvtOpenPublisher |
| 2ac0 | 4d 65 74 61 64 61 74 61 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 72 4d | Metadata.__imp_EvtOpenPublisherM |
| 2ae0 | 65 74 61 64 61 74 61 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 | etadata._head_lib64_libwevtapi_a |
| 2b00 | 00 0a 64 62 75 71 6a 73 30 30 30 33 35 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 | ..dbuqjs00035.o/..1543427681..18 |
| 2b20 | 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 39 20 20 20 20 20 20 20 60 0a 64 86 | 779.5000..100644..649.......`.d. |
| 2b40 | 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 2b60 | 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...`.............0`.data. |
| 2b80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 2ba0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 2bc0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 2be0 | 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..j.............0..idata$5...... |
| 2c00 | 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...t.............0..idata |
| 2c20 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@...~............. |
| 2c40 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
| 2c60 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 2c80 | 00 00 00 00 00 00 23 00 45 76 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 72 45 6e 75 6d 00 00 02 00 | ......#.EvtOpenPublisherEnum.... |
| 2ca0 | 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 | ................................ |
| 2cc0 | 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 2ce0 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 2d00 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 2d20 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 2d40 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 | ................................ |
| 2d60 | 00 00 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 4d 00 00 00 45 76 | ............4.............M...Ev |
| 2d80 | 74 4f 70 65 6e 50 75 62 6c 69 73 68 65 72 45 6e 75 6d 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e | tOpenPublisherEnum.__imp_EvtOpen |
| 2da0 | 50 75 62 6c 69 73 68 65 72 45 6e 75 6d 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 | PublisherEnum._head_lib64_libwev |
| 2dc0 | 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 33 34 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 | tapi_a..dbuqjs00034.o/..15434276 |
| 2de0 | 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 32 31 20 20 20 20 20 | 81..18779.5000..100644..621..... |
| 2e00 | 20 20 60 0a 64 86 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d....................text... |
| 2e20 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...X.............0` |
| 2e40 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 2e60 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 2e80 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 2ea0 | 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...b.............0..idata$5 |
| 2ec0 | 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...l.............0. |
| 2ee0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 76 01 00 00 00 00 00 00 | .idata$4............@...v....... |
| 2f00 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0e 00 00 00 48 01 00 00 | ......0..idata$6............H... |
| 2f20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 2f40 | 00 00 00 00 00 00 00 00 00 00 00 00 22 00 45 76 74 4f 70 65 6e 4c 6f 67 00 00 00 00 02 00 00 00 | ............".EvtOpenLog........ |
| 2f60 | 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 | ................................ |
| 2f80 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 2fa0 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 2fc0 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 2fe0 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 3000 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 0f 00 00 00 00 00 00 00 | ................................ |
| 3020 | 05 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 02 00 39 00 00 00 45 76 74 4f | ........................9...EvtO |
| 3040 | 70 65 6e 4c 6f 67 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 4c 6f 67 00 5f 68 65 61 64 5f 6c 69 | penLog.__imp_EvtOpenLog._head_li |
| 3060 | 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 33 33 2e 6f 2f | b64_libwevtapi_a..dbuqjs00033.o/ |
| 3080 | 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 | ..1543427681..18779.5000..100644 |
| 30a0 | 20 20 36 36 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 | ..661.......`.d................. |
| 30c0 | 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 | ...text...............,...d..... |
| 30e0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 3100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 3120 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 3140 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...n............. |
| 3160 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 | 0..idata$5............8...x..... |
| 3180 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 | ........0..idata$4............@. |
| 31a0 | 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ................0..idata$6...... |
| 31c0 | 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......H....................%.... |
| 31e0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 00 45 76 74 4f 70 65 6e 45 | ......................!.EvtOpenE |
| 3200 | 76 65 6e 74 4d 65 74 61 64 61 74 61 45 6e 75 6d 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 | ventMetadataEnum................ |
| 3220 | 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 | ...........................text. |
| 3240 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 3260 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 3280 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 32a0 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 32c0 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 32e0 | 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 55 00 00 00 45 76 74 4f 70 65 6e 45 76 65 6e 74 4d 65 | <.............U...EvtOpenEventMe |
| 3300 | 74 61 64 61 74 61 45 6e 75 6d 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e 45 76 65 6e 74 4d 65 74 | tadataEnum.__imp_EvtOpenEventMet |
| 3320 | 61 64 61 74 61 45 6e 75 6d 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 | adataEnum._head_lib64_libwevtapi |
| 3340 | 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 33 32 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 | _a..dbuqjs00032.o/..1543427681.. |
| 3360 | 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 35 20 20 20 20 20 20 20 60 0a | 18779.5000..100644..645.......`. |
| 3380 | 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
| 33a0 | 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...`.............0`.dat |
| 33c0 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 33e0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 3400 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 3420 | 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...j.............0..idata$5.... |
| 3440 | 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...t.............0..ida |
| 3460 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@...~........... |
| 3480 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
| 34a0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 34c0 | 00 00 00 00 00 00 00 00 20 00 45 76 74 4f 70 65 6e 43 68 61 6e 6e 65 6c 45 6e 75 6d 00 00 00 00 | ..........EvtOpenChannelEnum.... |
| 34e0 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 3500 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 3520 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 3540 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 3560 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 3580 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 | ................................ |
| 35a0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02 00 49 00 00 00 | ..............0.............I... |
| 35c0 | 45 76 74 4f 70 65 6e 43 68 61 6e 6e 65 6c 45 6e 75 6d 00 5f 5f 69 6d 70 5f 45 76 74 4f 70 65 6e | EvtOpenChannelEnum.__imp_EvtOpen |
| 35e0 | 43 68 61 6e 6e 65 6c 45 6e 75 6d 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 | ChannelEnum._head_lib64_libwevta |
| 3600 | 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 33 31 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 | pi_a..dbuqjs00031.o/..1543427681 |
| 3620 | 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 39 20 20 20 20 20 20 20 | ..18779.5000..100644..649....... |
| 3640 | 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 | `.d....................text..... |
| 3660 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...`.............0`.d |
| 3680 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 36a0 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 36c0 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 36e0 | 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...j.............0..idata$5.. |
| 3700 | 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...t.............0..i |
| 3720 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 | data$4............@...~......... |
| 3740 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 | ....0..idata$6............H..... |
| 3760 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 3780 | 00 00 00 00 00 00 00 00 00 00 1f 00 45 76 74 4f 70 65 6e 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 | ............EvtOpenChannelConfig |
| 37a0 | 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 37c0 | 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 | ...........text..............dat |
| 37e0 | 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 | a..............bss.............. |
| 3800 | 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 | .idata$7...........idata$5...... |
| 3820 | 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 | .....idata$4...........idata$6.. |
| 3840 | 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 | ................................ |
| 3860 | 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 4d 00 | ................4.............M. |
| 3880 | 00 00 45 76 74 4f 70 65 6e 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 00 5f 5f 69 6d 70 5f 45 76 74 | ..EvtOpenChannelConfig.__imp_Evt |
| 38a0 | 4f 70 65 6e 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 | OpenChannelConfig._head_lib64_li |
| 38c0 | 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 33 30 2e 6f 2f 20 20 31 35 34 33 | bwevtapi_a..dbuqjs00030.o/..1543 |
| 38e0 | 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 35 20 | 427681..18779.5000..100644..645. |
| 3900 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 3920 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 3940 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 3960 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 3980 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 39a0 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 39c0 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 39e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 | ..0..idata$4............@...~... |
| 3a00 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 | ..........0..idata$6............ |
| 3a20 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 3a40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 00 45 76 74 4e 65 78 74 50 75 62 6c 69 73 68 | ..................EvtNextPublish |
| 3a60 | 65 72 49 64 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | erId............................ |
| 3a80 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 3aa0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 3ac0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 3ae0 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 3b00 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 3b20 | 00 00 00 00 17 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 | ......................0......... |
| 3b40 | 00 00 02 00 49 00 00 00 45 76 74 4e 65 78 74 50 75 62 6c 69 73 68 65 72 49 64 00 5f 5f 69 6d 70 | ....I...EvtNextPublisherId.__imp |
| 3b60 | 5f 45 76 74 4e 65 78 74 50 75 62 6c 69 73 68 65 72 49 64 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f | _EvtNextPublisherId._head_lib64_ |
| 3b80 | 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 39 2e 6f 2f 20 20 31 35 | libwevtapi_a..dbuqjs00029.o/..15 |
| 3ba0 | 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 | 43427681..18779.5000..100644..64 |
| 3bc0 | 39 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 9.......`.d....................t |
| 3be0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| 3c00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 3c20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 3c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 3c60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| 3c80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| 3ca0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 | ....0..idata$4............@...~. |
| 3cc0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 | ............0..idata$6.......... |
| 3ce0 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
| 3d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 00 45 76 74 4e 65 78 74 45 76 65 6e 74 | ....................EvtNextEvent |
| 3d20 | 4d 65 74 61 64 61 74 61 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 | Metadata........................ |
| 3d40 | 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 3d60 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 3d80 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 3da0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 3dc0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 3de0 | 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 | ........................4....... |
| 3e00 | 00 00 00 00 02 00 4d 00 00 00 45 76 74 4e 65 78 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 00 5f | ......M...EvtNextEventMetadata._ |
| 3e20 | 5f 69 6d 70 5f 45 76 74 4e 65 78 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 00 5f 68 65 61 64 5f | _imp_EvtNextEventMetadata._head_ |
| 3e40 | 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 38 2e | lib64_libwevtapi_a..dbuqjs00028. |
| 3e60 | 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 | o/..1543427681..18779.5000..1006 |
| 3e80 | 34 34 20 20 36 34 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 | 44..645.......`.d............... |
| 3ea0 | 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 | .....text...............,...`... |
| 3ec0 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 3ee0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 3f00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 3f20 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...j........... |
| 3f40 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 | ..0..idata$5............8...t... |
| 3f60 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$4............ |
| 3f80 | 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | @...~.............0..idata$6.... |
| 3fa0 | 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........H....................%.. |
| 3fc0 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 45 76 74 4e 65 78 | ..........................EvtNex |
| 3fe0 | 74 43 68 61 6e 6e 65 6c 50 61 74 68 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | tChannelPath.................... |
| 4000 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 4020 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 4040 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 4060 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 4080 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 40a0 | 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 | ..............................0. |
| 40c0 | 00 00 00 00 00 00 00 00 00 00 02 00 49 00 00 00 45 76 74 4e 65 78 74 43 68 61 6e 6e 65 6c 50 61 | ............I...EvtNextChannelPa |
| 40e0 | 74 68 00 5f 5f 69 6d 70 5f 45 76 74 4e 65 78 74 43 68 61 6e 6e 65 6c 50 61 74 68 00 5f 68 65 61 | th.__imp_EvtNextChannelPath._hea |
| 4100 | 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 | d_lib64_libwevtapi_a..dbuqjs0002 |
| 4120 | 37 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 | 7.o/..1543427681..18779.5000..10 |
| 4140 | 30 36 34 34 20 20 36 30 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 7c 01 00 00 0a 00 | 0644..603.......`.d.......|..... |
| 4160 | 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 | .......text...............,...T. |
| 4180 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 41a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 41c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 41e0 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 | data$7............4...^......... |
| 4200 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 68 01 | ....0..idata$5............8...h. |
| 4220 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 | ............0..idata$4.......... |
| 4240 | 00 00 40 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..@...r.............0..idata$6.. |
| 4260 | 00 00 00 00 00 00 0a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........H....................% |
| 4280 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 00 45 76 74 4e | ............................EvtN |
| 42a0 | 65 78 74 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | ext............................. |
| 42c0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 42e0 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 4300 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 4320 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 4340 | 24 36 00 00 00 00 07 00 00 00 03 00 45 76 74 4e 65 78 74 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6..........EvtNext............. |
| 4360 | 00 00 04 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 12 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 4380 | 02 00 2b 00 00 00 5f 5f 69 6d 70 5f 45 76 74 4e 65 78 74 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f | ..+...__imp_EvtNext._head_lib64_ |
| 43a0 | 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 36 2e 6f 2f 20 20 31 35 | libwevtapi_a..dbuqjs00026.o/..15 |
| 43c0 | 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 38 | 43427681..18779.5000..100644..68 |
| 43e0 | 37 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 7.......`.d....................t |
| 4400 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 | ext...............,...l......... |
| 4420 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 4440 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 4460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 4480 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...v.............0..i |
| 44a0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 | data$5............8............. |
| 44c0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 | ....0..idata$4............@..... |
| 44e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 | ............0..idata$6........$. |
| 4500 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
| 4520 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 45 76 74 49 6e 74 57 72 69 74 65 58 | ....................EvtIntWriteX |
| 4540 | 6d 6c 45 76 65 6e 74 54 6f 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 02 00 00 00 08 00 00 00 04 00 | mlEventToLocalLogfile........... |
| 4560 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
| 4580 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 45a0 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 45c0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 45e0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 4600 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 26 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................&............. |
| 4620 | 00 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 02 00 67 00 00 00 45 76 74 49 6e 74 57 72 69 74 | ....N.............g...EvtIntWrit |
| 4640 | 65 58 6d 6c 45 76 65 6e 74 54 6f 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 5f 5f 69 6d 70 5f 45 76 | eXmlEventToLocalLogfile.__imp_Ev |
| 4660 | 74 49 6e 74 57 72 69 74 65 58 6d 6c 45 76 65 6e 74 54 6f 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 | tIntWriteXmlEventToLocalLogfile. |
| 4680 | 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 | _head_lib64_libwevtapi_a..dbuqjs |
| 46a0 | 30 30 30 32 35 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 | 00025.o/..1543427681..18779.5000 |
| 46c0 | 20 20 31 30 30 36 34 34 20 20 36 34 39 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 | ..100644..649.......`.d......... |
| 46e0 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 4700 | 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..`.............0`.data......... |
| 4720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 4740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 4760 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 | 0..idata$7............4...j..... |
| 4780 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
| 47a0 | 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..t.............0..idata$4...... |
| 47c0 | 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@...~.............0..idata |
| 47e0 | 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............H................. |
| 4800 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 00 | ...%............................ |
| 4820 | 45 76 74 49 6e 74 53 79 73 70 72 65 70 43 6c 65 61 6e 75 70 00 00 02 00 00 00 08 00 00 00 04 00 | EvtIntSysprepCleanup............ |
| 4840 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
| 4860 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 4880 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 48a0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 48c0 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 48e0 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
| 4900 | 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 4d 00 00 00 45 76 74 49 6e 74 53 79 73 70 | ....4.............M...EvtIntSysp |
| 4920 | 72 65 70 43 6c 65 61 6e 75 70 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 53 79 73 70 72 65 70 43 6c | repCleanup.__imp_EvtIntSysprepCl |
| 4940 | 65 61 6e 75 70 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a | eanup._head_lib64_libwevtapi_a.. |
| 4960 | 64 62 75 71 6a 73 30 30 30 32 34 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 | dbuqjs00024.o/..1543427681..1877 |
| 4980 | 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 37 20 20 20 20 20 20 20 60 0a 64 86 07 00 | 9.5000..100644..647.......`.d... |
| 49a0 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 49c0 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| 49e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 4a00 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 4a20 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 4a40 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| 4a60 | 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| 4a80 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@...~.............0. |
| 4aa0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............H........... |
| 4ac0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
| 4ae0 | 00 00 00 00 18 00 45 76 74 49 6e 74 52 65 74 72 61 63 74 43 6f 6e 66 69 67 00 00 00 02 00 00 00 | ......EvtIntRetractConfig....... |
| 4b00 | 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 | ................................ |
| 4b20 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 4b40 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 4b60 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 4b80 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 4ba0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 18 00 00 00 00 00 00 00 | ................................ |
| 4bc0 | 05 00 00 00 02 00 00 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 02 00 4b 00 00 00 45 76 74 49 | ..........2.............K...EvtI |
| 4be0 | 6e 74 52 65 74 72 61 63 74 43 6f 6e 66 69 67 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 52 65 74 72 | ntRetractConfig.__imp_EvtIntRetr |
| 4c00 | 61 63 74 43 6f 6e 66 69 67 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 | actConfig._head_lib64_libwevtapi |
| 4c20 | 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 33 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 | _a..dbuqjs00023.o/..1543427681.. |
| 4c40 | 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 38 33 20 20 20 20 20 20 20 60 0a | 18779.5000..100644..683.......`. |
| 4c60 | 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
| 4c80 | 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...l.............0`.dat |
| 4ca0 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 4cc0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 4ce0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 4d00 | 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...v.............0..idata$5.... |
| 4d20 | 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8.................0..ida |
| 4d40 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@............... |
| 4d60 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6........"...H....... |
| 4d80 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 4da0 | 00 00 00 00 00 00 00 00 17 00 45 76 74 49 6e 74 52 65 70 6f 72 74 45 76 65 6e 74 41 6e 64 53 6f | ..........EvtIntReportEventAndSo |
| 4dc0 | 75 72 63 65 41 73 79 6e 63 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | urceAsync....................... |
| 4de0 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 4e00 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 4e20 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 4e40 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 4e60 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 4e80 | 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 00 00 | ........$.................J..... |
| 4ea0 | 00 00 00 00 00 00 02 00 63 00 00 00 45 76 74 49 6e 74 52 65 70 6f 72 74 45 76 65 6e 74 41 6e 64 | ........c...EvtIntReportEventAnd |
| 4ec0 | 53 6f 75 72 63 65 41 73 79 6e 63 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 52 65 70 6f 72 74 45 76 | SourceAsync.__imp_EvtIntReportEv |
| 4ee0 | 65 6e 74 41 6e 64 53 6f 75 72 63 65 41 73 79 6e 63 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 | entAndSourceAsync._head_lib64_li |
| 4f00 | 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 32 2e 6f 2f 20 20 31 35 34 33 | bwevtapi_a..dbuqjs00022.o/..1543 |
| 4f20 | 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 39 37 20 | 427681..18779.5000..100644..697. |
| 4f40 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 98 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 4f60 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 | t...............,...p........... |
| 4f80 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 4fa0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 4fc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 4fe0 | 00 00 00 00 04 00 00 00 34 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...z.............0..ida |
| 5000 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 84 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8............... |
| 5020 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8e 01 00 00 | ..0..idata$4............@....... |
| 5040 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 28 00 00 00 | ..........0..idata$6........(... |
| 5060 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 5080 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 00 45 76 74 49 6e 74 52 65 70 6f 72 74 41 75 | ..................EvtIntReportAu |
| 50a0 | 74 68 7a 45 76 65 6e 74 41 6e 64 53 6f 75 72 63 65 41 73 79 6e 63 00 00 02 00 00 00 08 00 00 00 | thzEventAndSourceAsync.......... |
| 50c0 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 50e0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 5100 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 5120 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 5140 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 5160 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 29 00 00 00 00 00 00 00 05 00 00 00 | ....................)........... |
| 5180 | 02 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 02 00 6d 00 00 00 45 76 74 49 6e 74 52 65 | ......T.............m...EvtIntRe |
| 51a0 | 70 6f 72 74 41 75 74 68 7a 45 76 65 6e 74 41 6e 64 53 6f 75 72 63 65 41 73 79 6e 63 00 5f 5f 69 | portAuthzEventAndSourceAsync.__i |
| 51c0 | 6d 70 5f 45 76 74 49 6e 74 52 65 70 6f 72 74 41 75 74 68 7a 45 76 65 6e 74 41 6e 64 53 6f 75 72 | mp_EvtIntReportAuthzEventAndSour |
| 51e0 | 63 65 41 73 79 6e 63 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 | ceAsync._head_lib64_libwevtapi_a |
| 5200 | 00 0a 64 62 75 71 6a 73 30 30 30 32 31 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 | ..dbuqjs00021.o/..1543427681..18 |
| 5220 | 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 38 37 20 20 20 20 20 20 20 60 0a 64 86 | 779.5000..100644..687.......`.d. |
| 5240 | 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 5260 | 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...l.............0`.data. |
| 5280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 52a0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 52c0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 52e0 | 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..v.............0..idata$5...... |
| 5300 | 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8.................0..idata |
| 5320 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@................. |
| 5340 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 24 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6........$...H......... |
| 5360 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 5380 | 00 00 00 00 00 00 15 00 45 76 74 49 6e 74 52 65 6e 64 65 72 52 65 73 6f 75 72 63 65 45 76 65 6e | ........EvtIntRenderResourceEven |
| 53a0 | 74 54 65 6d 70 6c 61 74 65 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 | tTemplate....................... |
| 53c0 | 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 53e0 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 5400 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 5420 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 5440 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 5460 | 02 00 00 00 00 00 26 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4e 00 00 00 00 00 00 00 | ......&.................N....... |
| 5480 | 00 00 00 00 02 00 67 00 00 00 45 76 74 49 6e 74 52 65 6e 64 65 72 52 65 73 6f 75 72 63 65 45 76 | ......g...EvtIntRenderResourceEv |
| 54a0 | 65 6e 74 54 65 6d 70 6c 61 74 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 52 65 6e 64 65 72 52 65 | entTemplate.__imp_EvtIntRenderRe |
| 54c0 | 73 6f 75 72 63 65 45 76 65 6e 74 54 65 6d 70 6c 61 74 65 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f | sourceEventTemplate._head_lib64_ |
| 54e0 | 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 32 30 2e 6f 2f 20 20 31 35 | libwevtapi_a..dbuqjs00020.o/..15 |
| 5500 | 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 38 | 43427681..18779.5000..100644..68 |
| 5520 | 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 1.......`.d....................t |
| 5540 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 | ext...............,...l......... |
| 5560 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 5580 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 55a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 55c0 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...v.............0..i |
| 55e0 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 | data$5............8............. |
| 5600 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 | ....0..idata$4............@..... |
| 5620 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 | ............0..idata$6........". |
| 5640 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
| 5660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 00 45 76 74 49 6e 74 47 65 74 43 6c 61 | ....................EvtIntGetCla |
| 5680 | 73 73 69 63 4c 6f 67 44 69 73 70 6c 61 79 4e 61 6d 65 00 00 00 00 02 00 00 00 08 00 00 00 04 00 | ssicLogDisplayName.............. |
| 56a0 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
| 56c0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 56e0 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 5700 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 5720 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 5740 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 | ..................#............. |
| 5760 | 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 61 00 00 00 45 76 74 49 6e 74 47 65 74 43 | ....H.............a...EvtIntGetC |
| 5780 | 6c 61 73 73 69 63 4c 6f 67 44 69 73 70 6c 61 79 4e 61 6d 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e | lassicLogDisplayName.__imp_EvtIn |
| 57a0 | 74 47 65 74 43 6c 61 73 73 69 63 4c 6f 67 44 69 73 70 6c 61 79 4e 61 6d 65 00 5f 68 65 61 64 5f | tGetClassicLogDisplayName._head_ |
| 57c0 | 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 39 2e | lib64_libwevtapi_a..dbuqjs00019. |
| 57e0 | 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 | o/..1543427681..18779.5000..1006 |
| 5800 | 34 34 20 20 36 36 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 | 44..661.......`.d............... |
| 5820 | 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 | .....text...............,...d... |
| 5840 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 5860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 5880 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 58a0 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...n........... |
| 58c0 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 | ..0..idata$5............8...x... |
| 58e0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$4............ |
| 5900 | 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | @.................0..idata$6.... |
| 5920 | 00 00 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........H....................%.. |
| 5940 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 00 45 76 74 49 6e 74 | ..........................EvtInt |
| 5960 | 43 72 65 61 74 65 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 00 02 00 00 00 08 00 00 00 04 00 00 00 | CreateLocalLogfile.............. |
| 5980 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
| 59a0 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 59c0 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 59e0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 5a00 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 5a20 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| 5a40 | 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 55 00 00 00 45 76 74 49 6e 74 43 72 65 61 74 65 | ..<.............U...EvtIntCreate |
| 5a60 | 4c 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 43 72 65 61 74 65 4c | LocalLogfile.__imp_EvtIntCreateL |
| 5a80 | 6f 63 61 6c 4c 6f 67 66 69 6c 65 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 | ocalLogfile._head_lib64_libwevta |
| 5aa0 | 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 38 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 | pi_a..dbuqjs00018.o/..1543427681 |
| 5ac0 | 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 38 33 20 20 20 20 20 20 20 | ..18779.5000..100644..683....... |
| 5ae0 | 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 | `.d....................text..... |
| 5b00 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...l.............0`.d |
| 5b20 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
| 5b40 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
| 5b60 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
| 5b80 | 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...v.............0..idata$5.. |
| 5ba0 | 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8.................0..i |
| 5bc0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 00 00 00 00 01 00 | data$4............@............. |
| 5be0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 48 01 00 00 00 00 | ....0..idata$6........"...H..... |
| 5c00 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
| 5c20 | 00 00 00 00 00 00 00 00 00 00 12 00 45 76 74 49 6e 74 43 72 65 61 74 65 42 69 6e 58 4d 4c 46 72 | ............EvtIntCreateBinXMLFr |
| 5c40 | 6f 6d 43 75 73 74 6f 6d 58 4d 4c 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 | omCustomXML..................... |
| 5c60 | 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 5c80 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 5ca0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 5cc0 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 5ce0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 5d00 | 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 00 00 | ..........$.................J... |
| 5d20 | 00 00 00 00 00 00 00 00 02 00 63 00 00 00 45 76 74 49 6e 74 43 72 65 61 74 65 42 69 6e 58 4d 4c | ..........c...EvtIntCreateBinXML |
| 5d40 | 46 72 6f 6d 43 75 73 74 6f 6d 58 4d 4c 00 5f 5f 69 6d 70 5f 45 76 74 49 6e 74 43 72 65 61 74 65 | FromCustomXML.__imp_EvtIntCreate |
| 5d60 | 42 69 6e 58 4d 4c 46 72 6f 6d 43 75 73 74 6f 6d 58 4d 4c 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f | BinXMLFromCustomXML._head_lib64_ |
| 5d80 | 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 37 2e 6f 2f 20 20 31 35 | libwevtapi_a..dbuqjs00017.o/..15 |
| 5da0 | 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 34 | 43427681..18779.5000..100644..64 |
| 5dc0 | 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 | 5.......`.d....................t |
| 5de0 | 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 | ext...............,...`......... |
| 5e00 | 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....0`.data..................... |
| 5e20 | 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........@.0..bss.............. |
| 5e40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 | ....................0..idata$7.. |
| 5e60 | 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........4...j.............0..i |
| 5e80 | 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 | data$5............8...t......... |
| 5ea0 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 | ....0..idata$4............@...~. |
| 5ec0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 | ............0..idata$6.......... |
| 5ee0 | 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 | ..H....................%........ |
| 5f00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 00 45 76 74 49 6e 74 41 73 73 65 72 74 | ....................EvtIntAssert |
| 5f20 | 43 6f 6e 66 69 67 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 | Config.......................... |
| 5f40 | 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 5f60 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 5f80 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 5fa0 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 5fc0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 5fe0 | 02 00 00 00 00 00 17 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 | ........................0....... |
| 6000 | 00 00 00 00 02 00 49 00 00 00 45 76 74 49 6e 74 41 73 73 65 72 74 43 6f 6e 66 69 67 00 5f 5f 69 | ......I...EvtIntAssertConfig.__i |
| 6020 | 6d 70 5f 45 76 74 49 6e 74 41 73 73 65 72 74 43 6f 6e 66 69 67 00 5f 68 65 61 64 5f 6c 69 62 36 | mp_EvtIntAssertConfig._head_lib6 |
| 6040 | 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 36 2e 6f 2f 20 20 | 4_libwevtapi_a..dbuqjs00016.o/.. |
| 6060 | 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 | 1543427681..18779.5000..100644.. |
| 6080 | 36 33 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 | 635.......`.d................... |
| 60a0 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 | .text...............,...\....... |
| 60c0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 60e0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 6100 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 6120 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...f.............0. |
| 6140 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 | .idata$5............8...p....... |
| 6160 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 6180 | 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | z.............0..idata$6........ |
| 61a0 | 12 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 61c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 45 76 74 47 65 74 51 75 65 72 | ......................EvtGetQuer |
| 61e0 | 79 49 6e 66 6f 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | yInfo........................... |
| 6200 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 6220 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 6240 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 6260 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 6280 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 62a0 | 00 00 00 00 14 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2a 00 00 00 00 00 00 00 00 00 | ......................*......... |
| 62c0 | 00 00 02 00 43 00 00 00 45 76 74 47 65 74 51 75 65 72 79 49 6e 66 6f 00 5f 5f 69 6d 70 5f 45 76 | ....C...EvtGetQueryInfo.__imp_Ev |
| 62e0 | 74 47 65 74 51 75 65 72 79 49 6e 66 6f 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 | tGetQueryInfo._head_lib64_libwev |
| 6300 | 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 35 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 | tapi_a..dbuqjs00015.o/..15434276 |
| 6320 | 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 38 33 20 20 20 20 20 | 81..18779.5000..100644..683..... |
| 6340 | 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d....................text... |
| 6360 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...l.............0` |
| 6380 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 63a0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 63c0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 63e0 | 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...v.............0..idata$5 |
| 6400 | 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8.................0. |
| 6420 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 00 00 00 00 | .idata$4............@........... |
| 6440 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 48 01 00 00 | ......0..idata$6........"...H... |
| 6460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 6480 | 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 45 76 74 47 65 74 50 75 62 6c 69 73 68 65 72 4d 65 74 | ..............EvtGetPublisherMet |
| 64a0 | 61 64 61 74 61 50 72 6f 70 65 72 74 79 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | adataProperty................... |
| 64c0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 64e0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 6500 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 6520 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 6540 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 6560 | 00 00 01 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 4a 00 | ............$.................J. |
| 6580 | 00 00 00 00 00 00 00 00 00 00 02 00 63 00 00 00 45 76 74 47 65 74 50 75 62 6c 69 73 68 65 72 4d | ............c...EvtGetPublisherM |
| 65a0 | 65 74 61 64 61 74 61 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 50 75 62 6c | etadataProperty.__imp_EvtGetPubl |
| 65c0 | 69 73 68 65 72 4d 65 74 61 64 61 74 61 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 6c 69 62 36 | isherMetadataProperty._head_lib6 |
| 65e0 | 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 34 2e 6f 2f 20 20 | 4_libwevtapi_a..dbuqjs00014.o/.. |
| 6600 | 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 | 1543427681..18779.5000..100644.. |
| 6620 | 36 35 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 | 651.......`.d................... |
| 6640 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 | .text...............,...`....... |
| 6660 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 6680 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 66a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 66c0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...j.............0. |
| 66e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 | .idata$5............8...t....... |
| 6700 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 6720 | 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ~.............0..idata$6........ |
| 6740 | 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 6760 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 45 76 74 47 65 74 4f 62 6a 65 | ......................EvtGetObje |
| 6780 | 63 74 41 72 72 61 79 53 69 7a 65 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | ctArraySize..................... |
| 67a0 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 67c0 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 67e0 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 6800 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 6820 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 6840 | 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 | ..........................6..... |
| 6860 | 00 00 00 00 00 00 02 00 4f 00 00 00 45 76 74 47 65 74 4f 62 6a 65 63 74 41 72 72 61 79 53 69 7a | ........O...EvtGetObjectArraySiz |
| 6880 | 65 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 4f 62 6a 65 63 74 41 72 72 61 79 53 69 7a 65 00 5f 68 | e.__imp_EvtGetObjectArraySize._h |
| 68a0 | 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 | ead_lib64_libwevtapi_a..dbuqjs00 |
| 68c0 | 30 31 33 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 | 013.o/..1543427681..18779.5000.. |
| 68e0 | 31 30 30 36 34 34 20 20 36 36 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 | 100644..663.......`.d........... |
| 6900 | 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 6920 | 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | d.............0`.data........... |
| 6940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 6960 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 6980 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 | .idata$7............4...n....... |
| 69a0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 69c0 | 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | x.............0..idata$4........ |
| 69e0 | 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....@.................0..idata$6 |
| 6a00 | 00 00 00 00 00 00 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............H................... |
| 6a20 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 45 76 | .%............................Ev |
| 6a40 | 74 47 65 74 4f 62 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 02 00 00 00 08 00 00 00 | tGetObjectArrayProperty......... |
| 6a60 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 6a80 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 6aa0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 6ac0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 6ae0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 6b00 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 6b20 | 02 00 00 00 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 02 00 57 00 00 00 45 76 74 47 65 74 4f 62 | ......>.............W...EvtGetOb |
| 6b40 | 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 4f 62 | jectArrayProperty.__imp_EvtGetOb |
| 6b60 | 6a 65 63 74 41 72 72 61 79 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 | jectArrayProperty._head_lib64_li |
| 6b80 | 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 31 32 2e 6f 2f 20 20 31 35 34 33 | bwevtapi_a..dbuqjs00012.o/..1543 |
| 6ba0 | 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 32 37 20 | 427681..18779.5000..100644..627. |
| 6bc0 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 6be0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 | t...............,...X........... |
| 6c00 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 6c20 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 6c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 6c60 | 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...b.............0..ida |
| 6c80 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...l........... |
| 6ca0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 76 01 00 00 | ..0..idata$4............@...v... |
| 6cc0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 10 00 00 00 | ..........0..idata$6............ |
| 6ce0 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 6d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 45 76 74 47 65 74 4c 6f 67 49 6e 66 6f 00 | ..................EvtGetLogInfo. |
| 6d20 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 6d40 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 6d60 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 6d80 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 6da0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 6dc0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 12 00 00 00 | ................................ |
| 6de0 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 02 00 3f 00 00 00 | ..............&.............?... |
| 6e00 | 45 76 74 47 65 74 4c 6f 67 49 6e 66 6f 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 4c 6f 67 49 6e 66 | EvtGetLogInfo.__imp_EvtGetLogInf |
| 6e20 | 6f 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 | o._head_lib64_libwevtapi_a..dbuq |
| 6e40 | 6a 73 30 30 30 31 31 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 | js00011.o/..1543427681..18779.50 |
| 6e60 | 30 30 20 20 31 30 30 36 34 34 20 20 36 34 39 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 | 00..100644..649.......`.d....... |
| 6e80 | 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 6ea0 | 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...`.............0`.data....... |
| 6ec0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 6ee0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 6f00 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 | ..0..idata$7............4...j... |
| 6f20 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$5............ |
| 6f40 | 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...t.............0..idata$4.... |
| 6f60 | 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........@...~.............0..ida |
| 6f80 | 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............H............... |
| 6fa0 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....%.......................... |
| 6fc0 | 0b 00 45 76 74 47 65 74 45 78 74 65 6e 64 65 64 53 74 61 74 75 73 00 00 02 00 00 00 08 00 00 00 | ..EvtGetExtendedStatus.......... |
| 6fe0 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 7000 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 7020 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 7040 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 7060 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 7080 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 70a0 | 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 4d 00 00 00 45 76 74 47 65 74 45 78 | ......4.............M...EvtGetEx |
| 70c0 | 74 65 6e 64 65 64 53 74 61 74 75 73 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 45 78 74 65 6e 64 65 | tendedStatus.__imp_EvtGetExtende |
| 70e0 | 64 53 74 61 74 75 73 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 | dStatus._head_lib64_libwevtapi_a |
| 7100 | 00 0a 64 62 75 71 6a 73 30 30 30 31 30 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 | ..dbuqjs00010.o/..1543427681..18 |
| 7120 | 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 37 31 20 20 20 20 20 20 20 60 0a 64 86 | 779.5000..100644..671.......`.d. |
| 7140 | 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 7160 | 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...h.............0`.data. |
| 7180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 71a0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 71c0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 71e0 | 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..r.............0..idata$5...... |
| 7200 | 00 00 08 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...|.............0..idata |
| 7220 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@................. |
| 7240 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
| 7260 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 7280 | 00 00 00 00 00 00 0a 00 45 76 74 47 65 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 50 72 6f 70 65 | ........EvtGetEventMetadataPrope |
| 72a0 | 72 74 79 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | rty............................. |
| 72c0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 72e0 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 7300 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 7320 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 7340 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 7360 | 00 00 20 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 | ....................B........... |
| 7380 | 02 00 5b 00 00 00 45 76 74 47 65 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 50 72 6f 70 65 72 74 | ..[...EvtGetEventMetadataPropert |
| 73a0 | 79 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 45 76 65 6e 74 4d 65 74 61 64 61 74 61 50 72 6f 70 65 | y.__imp_EvtGetEventMetadataPrope |
| 73c0 | 72 74 79 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 | rty._head_lib64_libwevtapi_a..db |
| 73e0 | 75 71 6a 73 30 30 30 30 39 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 | uqjs00009.o/..1543427681..18779. |
| 7400 | 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 33 35 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 | 5000..100644..635.......`.d..... |
| 7420 | 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
| 7440 | 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...\.............0`.data..... |
| 7460 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
| 7480 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 74a0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 | ....0..idata$7............4...f. |
| 74c0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 | ............0..idata$5.......... |
| 74e0 | 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...p.............0..idata$4.. |
| 7500 | 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........@...z.............0..i |
| 7520 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............H............. |
| 7540 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .......%........................ |
| 7560 | 00 00 09 00 45 76 74 47 65 74 45 76 65 6e 74 49 6e 66 6f 00 00 00 02 00 00 00 08 00 00 00 04 00 | ....EvtGetEventInfo............. |
| 7580 | 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 | ...............................t |
| 75a0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 | ext..............data........... |
| 75c0 | 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 | ...bss...............idata$7.... |
| 75e0 | 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 | .......idata$5...........idata$4 |
| 7600 | 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 | ...........idata$6.............. |
| 7620 | 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 14 00 00 00 00 00 00 00 05 00 00 00 02 00 | ................................ |
| 7640 | 00 00 00 00 2a 00 00 00 00 00 00 00 00 00 00 00 02 00 43 00 00 00 45 76 74 47 65 74 45 76 65 6e | ....*.............C...EvtGetEven |
| 7660 | 74 49 6e 66 6f 00 5f 5f 69 6d 70 5f 45 76 74 47 65 74 45 76 65 6e 74 49 6e 66 6f 00 5f 68 65 61 | tInfo.__imp_EvtGetEventInfo._hea |
| 7680 | 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 | d_lib64_libwevtapi_a..dbuqjs0000 |
| 76a0 | 38 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 | 8.o/..1543427681..18779.5000..10 |
| 76c0 | 30 36 34 34 20 20 36 37 31 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 90 01 00 00 0a 00 | 0644..671.......`.d............. |
| 76e0 | 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 | .......text...............,...h. |
| 7700 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 7720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 7740 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 7760 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 | data$7............4...r......... |
| 7780 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 7c 01 | ....0..idata$5............8...|. |
| 77a0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 | ............0..idata$4.......... |
| 77c0 | 00 00 40 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..@.................0..idata$6.. |
| 77e0 | 00 00 00 00 00 00 1e 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........H....................% |
| 7800 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 45 76 74 47 | ............................EvtG |
| 7820 | 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f 70 65 72 74 79 00 00 00 02 00 00 00 08 00 | etChannelConfigProperty......... |
| 7840 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
| 7860 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 7880 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 78a0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 78c0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 78e0 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 05 00 | ................................ |
| 7900 | 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 5b 00 00 00 45 76 74 47 65 74 | ........B.............[...EvtGet |
| 7920 | 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f 70 65 72 74 79 00 5f 5f 69 6d 70 5f 45 76 74 47 | ChannelConfigProperty.__imp_EvtG |
| 7940 | 65 74 43 68 61 6e 6e 65 6c 43 6f 6e 66 69 67 50 72 6f 70 65 72 74 79 00 5f 68 65 61 64 5f 6c 69 | etChannelConfigProperty._head_li |
| 7960 | 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 37 2e 6f 2f | b64_libwevtapi_a..dbuqjs00007.o/ |
| 7980 | 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 | ..1543427681..18779.5000..100644 |
| 79a0 | 20 20 36 33 37 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 | ..637.......`.d................. |
| 79c0 | 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 | ...text...............,...\..... |
| 79e0 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 7a00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 7a20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 7a40 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...f............. |
| 7a60 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 | 0..idata$5............8...p..... |
| 7a80 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 | ........0..idata$4............@. |
| 7aa0 | 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ..z.............0..idata$6...... |
| 7ac0 | 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......H....................%.... |
| 7ae0 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 45 76 74 46 6f 72 6d 61 | ........................EvtForma |
| 7b00 | 74 4d 65 73 73 61 67 65 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 | tMessage........................ |
| 7b20 | 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 | ...................text......... |
| 7b40 | 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 | .....data..............bss...... |
| 7b60 | 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$7...........idata |
| 7b80 | 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 | $5...........idata$4...........i |
| 7ba0 | 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 | data$6.......................... |
| 7bc0 | 02 00 00 00 00 00 15 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 | ........................,....... |
| 7be0 | 00 00 00 00 02 00 45 00 00 00 45 76 74 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 00 5f 5f 69 6d 70 | ......E...EvtFormatMessage.__imp |
| 7c00 | 5f 45 76 74 46 6f 72 6d 61 74 4d 65 73 73 61 67 65 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 | _EvtFormatMessage._head_lib64_li |
| 7c20 | 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 36 2e 6f 2f 20 20 31 35 34 33 | bwevtapi_a..dbuqjs00006.o/..1543 |
| 7c40 | 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 32 35 20 | 427681..18779.5000..100644..625. |
| 7c60 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 7c80 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 | t...............,...X........... |
| 7ca0 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 7cc0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 7ce0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 7d00 | 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...b.............0..ida |
| 7d20 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...l........... |
| 7d40 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 76 01 00 00 | ..0..idata$4............@...v... |
| 7d60 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 10 00 00 00 | ..........0..idata$6............ |
| 7d80 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 7da0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 00 45 76 74 45 78 70 6f 72 74 4c 6f 67 00 00 | ..................EvtExportLog.. |
| 7dc0 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 7de0 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 7e00 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 7e20 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 7e40 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 7e60 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 11 00 00 00 | ................................ |
| 7e80 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 02 00 3d 00 00 00 | ..............$.............=... |
| 7ea0 | 45 76 74 45 78 70 6f 72 74 4c 6f 67 00 5f 5f 69 6d 70 5f 45 76 74 45 78 70 6f 72 74 4c 6f 67 00 | EvtExportLog.__imp_EvtExportLog. |
| 7ec0 | 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 | _head_lib64_libwevtapi_a..dbuqjs |
| 7ee0 | 30 30 30 30 35 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 | 00005.o/..1543427681..18779.5000 |
| 7f00 | 20 20 31 30 30 36 34 34 20 20 36 35 37 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 | ..100644..657.......`.d......... |
| 7f20 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 7f40 | 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..d.............0`.data......... |
| 7f60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 7f80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 7fa0 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 | 0..idata$7............4...n..... |
| 7fc0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
| 7fe0 | 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..x.............0..idata$4...... |
| 8000 | 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@.................0..idata |
| 8020 | 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............H................. |
| 8040 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 | ...%............................ |
| 8060 | 45 76 74 43 72 65 61 74 65 52 65 6e 64 65 72 43 6f 6e 74 65 78 74 00 00 00 00 02 00 00 00 08 00 | EvtCreateRenderContext.......... |
| 8080 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
| 80a0 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 80c0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 80e0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 8100 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 8120 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 | ................................ |
| 8140 | 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 51 00 00 00 45 76 74 43 72 65 | ........8.............Q...EvtCre |
| 8160 | 61 74 65 52 65 6e 64 65 72 43 6f 6e 74 65 78 74 00 5f 5f 69 6d 70 5f 45 76 74 43 72 65 61 74 65 | ateRenderContext.__imp_EvtCreate |
| 8180 | 52 65 6e 64 65 72 43 6f 6e 74 65 78 74 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 | RenderContext._head_lib64_libwev |
| 81a0 | 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 34 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 | tapi_a..dbuqjs00004.o/..15434276 |
| 81c0 | 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 33 39 20 20 20 20 20 | 81..18779.5000..100644..639..... |
| 81e0 | 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d....................text... |
| 8200 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...\.............0` |
| 8220 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 8240 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 8260 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 8280 | 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...f.............0..idata$5 |
| 82a0 | 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...p.............0. |
| 82c0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 | .idata$4............@...z....... |
| 82e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 | ......0..idata$6............H... |
| 8300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 8320 | 00 00 00 00 00 00 00 00 00 00 00 00 04 00 45 76 74 43 72 65 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 | ..............EvtCreateBookmark. |
| 8340 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 8360 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 8380 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 83a0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 83c0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 83e0 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 16 00 00 00 | ................................ |
| 8400 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 47 00 00 00 | ............................G... |
| 8420 | 45 76 74 43 72 65 61 74 65 42 6f 6f 6b 6d 61 72 6b 00 5f 5f 69 6d 70 5f 45 76 74 43 72 65 61 74 | EvtCreateBookmark.__imp_EvtCreat |
| 8440 | 65 42 6f 6f 6b 6d 61 72 6b 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 | eBookmark._head_lib64_libwevtapi |
| 8460 | 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 33 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 | _a..dbuqjs00003.o/..1543427681.. |
| 8480 | 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 30 34 20 20 20 20 20 20 20 60 0a | 18779.5000..100644..604.......`. |
| 84a0 | 64 86 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d.......|............text....... |
| 84c0 | 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...T.............0`.dat |
| 84e0 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 8500 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 8520 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 8540 | 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...^.............0..idata$5.... |
| 8560 | 00 00 00 00 08 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...h.............0..ida |
| 8580 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@...r........... |
| 85a0 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0c 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
| 85c0 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 85e0 | 00 00 00 00 00 00 00 00 03 00 45 76 74 43 6c 6f 73 65 00 00 02 00 00 00 08 00 00 00 04 00 00 00 | ..........EvtClose.............. |
| 8600 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
| 8620 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 8640 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 8660 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 8680 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 45 76 74 43 6c 6f | .........idata$6..........EvtClo |
| 86a0 | 73 65 00 00 00 00 01 00 00 00 02 00 00 00 00 00 04 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | se.............................. |
| 86c0 | 00 00 13 00 00 00 00 00 00 00 00 00 00 00 02 00 2c 00 00 00 5f 5f 69 6d 70 5f 45 76 74 43 6c 6f | ................,...__imp_EvtClo |
| 86e0 | 73 65 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 64 62 75 71 | se._head_lib64_libwevtapi_a.dbuq |
| 8700 | 6a 73 30 30 30 30 32 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 | js00002.o/..1543427681..18779.50 |
| 8720 | 30 30 20 20 31 30 30 36 34 34 20 20 36 32 33 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 | 00..100644..623.......`.d....... |
| 8740 | 80 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 8760 | 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...X.............0`.data....... |
| 8780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 87a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 87c0 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 | ..0..idata$7............4...b... |
| 87e0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$5............ |
| 8800 | 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...l.............0..idata$4.... |
| 8820 | 00 00 00 00 08 00 00 00 40 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........@...v.............0..ida |
| 8840 | 74 61 24 36 00 00 00 00 00 00 00 00 0e 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............H............... |
| 8860 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....%.......................... |
| 8880 | 02 00 45 76 74 43 6c 65 61 72 4c 6f 67 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | ..EvtClearLog................... |
| 88a0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 88c0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 88e0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 8900 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 8920 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 8940 | 00 00 01 00 00 00 02 00 00 00 00 00 10 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 22 00 | ..............................". |
| 8960 | 00 00 00 00 00 00 00 00 00 00 02 00 3b 00 00 00 45 76 74 43 6c 65 61 72 4c 6f 67 00 5f 5f 69 6d | ............;...EvtClearLog.__im |
| 8980 | 70 5f 45 76 74 43 6c 65 61 72 4c 6f 67 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 62 77 65 76 | p_EvtClearLog._head_lib64_libwev |
| 89a0 | 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 31 2e 6f 2f 20 20 31 35 34 33 34 32 37 36 | tapi_a..dbuqjs00001.o/..15434276 |
| 89c0 | 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 31 35 20 20 20 20 20 | 81..18779.5000..100644..615..... |
| 89e0 | 20 20 60 0a 64 86 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d.......|............text... |
| 8a00 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...T.............0` |
| 8a20 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 8a40 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 8a60 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 8a80 | 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...^.............0..idata$5 |
| 8aa0 | 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...h.............0. |
| 8ac0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 72 01 00 00 00 00 00 00 | .idata$4............@...r....... |
| 8ae0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0c 00 00 00 48 01 00 00 | ......0..idata$6............H... |
| 8b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 8b20 | 00 00 00 00 00 00 00 00 00 00 00 00 01 00 45 76 74 43 61 6e 63 65 6c 00 02 00 00 00 08 00 00 00 | ..............EvtCancel......... |
| 8b40 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 8b60 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 8b80 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 8ba0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 8bc0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 8be0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 0e 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 8c00 | 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 02 00 37 00 00 00 45 76 74 43 61 6e 63 65 | ....................7...EvtCance |
| 8c20 | 6c 00 5f 5f 69 6d 70 5f 45 76 74 43 61 6e 63 65 6c 00 5f 68 65 61 64 5f 6c 69 62 36 34 5f 6c 69 | l.__imp_EvtCancel._head_lib64_li |
| 8c40 | 62 77 65 76 74 61 70 69 5f 61 00 0a 64 62 75 71 6a 73 30 30 30 30 30 2e 6f 2f 20 20 31 35 34 33 | bwevtapi_a..dbuqjs00000.o/..1543 |
| 8c60 | 34 32 37 36 38 31 20 20 31 38 37 37 39 20 35 30 30 30 20 20 31 30 30 36 34 34 20 20 36 35 31 20 | 427681..18779.5000..100644..651. |
| 8c80 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 8ca0 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 8cc0 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 8ce0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 8d00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 8d20 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 8d40 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 8d60 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 | ..0..idata$4............@...~... |
| 8d80 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 | ..........0..idata$6............ |
| 8da0 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 8dc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 45 76 74 41 72 63 68 69 76 65 45 78 70 6f | ..................EvtArchiveExpo |
| 8de0 | 72 74 65 64 4c 6f 67 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | rtedLog......................... |
| 8e00 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 8e20 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 8e40 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 8e60 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 8e80 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 8ea0 | 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 | ......................6......... |
| 8ec0 | 00 00 02 00 4f 00 00 00 45 76 74 41 72 63 68 69 76 65 45 78 70 6f 72 74 65 64 4c 6f 67 00 5f 5f | ....O...EvtArchiveExportedLog.__ |
| 8ee0 | 69 6d 70 5f 45 76 74 41 72 63 68 69 76 65 45 78 70 6f 72 74 65 64 4c 6f 67 00 5f 68 65 61 64 5f | imp_EvtArchiveExportedLog._head_ |
| 8f00 | 6c 69 62 36 34 5f 6c 69 62 77 65 76 74 61 70 69 5f 61 00 0a | lib64_libwevtapi_a.. |
 |
index : prebuilts/gcc/linux-x86/host/x86_64-w64-mingw32-4.8.git | |
| aboutsummaryrefslogtreecommitdiff |
blob: 29859c423659e906d9af09c18e2ac759453cfc5e (plain)