ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 34 34 35 35 35 31 33 | !<arch>./...............14455513 |
0020 | 34 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 33 36 36 20 20 20 20 20 | 46..0.....0.....0.......366..... |
0040 | 20 20 60 0a 00 00 00 0c 00 00 01 b2 00 00 04 34 00 00 07 00 00 00 07 00 00 00 09 c6 00 00 09 c6 | ..`............4................ |
0060 | 00 00 0c 88 00 00 0c 88 00 00 0f 42 00 00 0f 42 00 00 11 fe 00 00 11 fe 5f 5f 6c 69 62 33 32 5f | ...........B...B........__lib32_ |
0080 | 6c 69 62 77 65 76 74 66 77 64 5f 61 5f 69 6e 61 6d 65 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f | libwevtfwd_a_iname.__head_lib32_ |
00a0 | 6c 69 62 77 65 76 74 66 77 64 5f 61 00 5f 57 53 4d 61 6e 50 72 6f 76 55 6e 73 75 62 73 63 72 69 | libwevtfwd_a._WSManProvUnsubscri |
00c0 | 62 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 55 6e 73 75 62 73 63 72 69 62 | be@12.__imp__WSManProvUnsubscrib |
00e0 | 65 40 31 32 00 5f 57 53 4d 61 6e 50 72 6f 76 53 75 62 73 63 72 69 62 65 40 34 30 00 5f 5f 69 6d | e@12._WSManProvSubscribe@40.__im |
0100 | 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 53 75 62 73 63 72 69 62 65 40 34 30 00 5f 57 53 4d 61 6e 50 | p__WSManProvSubscribe@40._WSManP |
0120 | 72 6f 76 53 74 61 72 74 75 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 53 74 | rovStartup@16.__imp__WSManProvSt |
0140 | 61 72 74 75 70 40 31 36 00 5f 57 53 4d 61 6e 50 72 6f 76 53 68 75 74 64 6f 77 6e 40 31 32 00 5f | artup@16._WSManProvShutdown@12._ |
0160 | 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 53 68 75 74 64 6f 77 6e 40 31 32 00 5f 57 53 4d 61 | _imp__WSManProvShutdown@12._WSMa |
0180 | 6e 50 72 6f 76 50 75 6c 6c 45 76 65 6e 74 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 | nProvPullEvents@16.__imp__WSManP |
01a0 | 72 6f 76 50 75 6c 6c 45 76 65 6e 74 73 40 31 36 00 00 64 6f 79 70 67 74 2e 6f 2f 20 20 20 20 20 | rovPullEvents@16..doypgt.o/..... |
01c0 | 20 20 31 34 34 35 35 35 31 33 34 36 20 20 32 36 31 39 35 35 35 30 30 30 20 20 31 30 30 36 34 30 | ..1445551346..2619555000..100640 |
01e0 | 20 20 35 38 31 20 20 20 20 20 20 20 60 0a 4c 01 06 00 00 00 00 00 18 01 00 00 0f 00 00 00 00 00 | ..581.......`.L................. |
0200 | 05 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...text......................... |
0220 | 00 00 00 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
0240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
0260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
0280 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | $4............................@. |
02a0 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 08 01 00 00 00 00 00 00 00 00 | 0..idata$5...................... |
02c0 | 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 0c 00 00 00 0c 01 | ......@.0..idata$7.............. |
02e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 57 45 56 54 46 57 | ..............@.0.........WEVTFW |
0300 | 44 2e 44 4c 4c 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 | D.DLL..file...........g.fake.... |
0320 | 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 | ...........text................. |
0340 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 | ...............data............. |
0360 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | ...................bss.......... |
0380 | 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 | .......................idata$4.. |
03a0 | 00 00 04 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 | ...........................idata |
03c0 | 24 35 00 00 00 00 05 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 | $5.............................i |
03e0 | 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | data$7.......................... |
0400 | 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 1f 00 00 00 5f 5f 6c 69 62 33 32 5f | ........................__lib32_ |
0420 | 6c 69 62 77 65 76 74 66 77 64 5f 61 5f 69 6e 61 6d 65 00 0a 64 6f 79 70 67 68 2e 6f 2f 20 20 20 | libwevtfwd_a_iname..doypgh.o/... |
0440 | 20 20 20 20 31 34 34 35 35 35 31 33 34 36 20 20 32 36 31 39 35 35 35 30 30 30 20 20 31 30 30 36 | ....1445551346..2619555000..1006 |
0460 | 34 30 20 20 36 35 35 20 20 20 20 20 20 20 60 0a 4c 01 06 00 00 00 00 00 36 01 00 00 10 00 00 00 | 40..655.......`.L.......6....... |
0480 | 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....text....................... |
04a0 | 00 00 00 00 00 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
04c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
04e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
0500 | 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 | ta$2............................ |
0520 | 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..idata$5.................... |
0540 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..idata$4............ |
0560 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 | ................@.0............. |
0580 | 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 07 00 0c 00 00 00 0f 00 00 00 07 00 10 00 00 00 | ................................ |
05a0 | 0d 00 00 00 07 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 | .......file...........g.fake.... |
05c0 | 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 | ..........hname.............fthu |
05e0 | 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 | nk.............text............. |
0600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | ...................data......... |
0620 | 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 | .......................bss...... |
0640 | 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 | ...........................idata |
0660 | 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 | $2.............................i |
0680 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$4...........idata$5........ |
06a0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 | ................................ |
06c0 | 00 00 00 00 02 00 39 00 00 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f 6c 69 62 77 65 76 74 66 77 | ......9...__head_lib32_libwevtfw |
06e0 | 64 5f 61 00 5f 5f 6c 69 62 33 32 5f 6c 69 62 77 65 76 74 66 77 64 5f 61 5f 69 6e 61 6d 65 00 0a | d_a.__lib32_libwevtfwd_a_iname.. |
0700 | 64 6f 79 70 67 73 30 30 30 30 34 2e 6f 2f 20 20 31 34 34 35 35 35 31 33 34 36 20 20 32 36 31 39 | doypgs00004.o/..1445551346..2619 |
0720 | 35 35 35 30 30 30 20 20 31 30 30 36 34 30 20 20 36 35 30 20 20 20 20 20 20 20 60 0a 4c 01 07 00 | 555000..100640..650.......`.L... |
0740 | 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
0760 | 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...X.............0`.data... |
0780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
07a0 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
07c0 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
07e0 | 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | b.............0..idata$5........ |
0800 | 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...l.............0..idata$4 |
0820 | 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............<...v.............0. |
0840 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............@........... |
0860 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 04 00 57 53 | .........%....................WS |
0880 | 4d 61 6e 50 72 6f 76 55 6e 73 75 62 73 63 72 69 62 65 00 00 02 00 00 00 04 00 00 00 06 00 00 00 | ManProvUnsubscribe.............. |
08a0 | 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 | .............................tex |
08c0 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
08e0 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
0900 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
0920 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
0940 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
0960 | 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 56 00 00 00 5f 57 53 4d 61 6e 50 72 6f 76 55 6e | ..<.............V..._WSManProvUn |
0980 | 73 75 62 73 63 72 69 62 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 55 6e 73 | subscribe@12.__imp__WSManProvUns |
09a0 | 75 62 73 63 72 69 62 65 40 31 32 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f 6c 69 62 77 65 76 74 | ubscribe@12.__head_lib32_libwevt |
09c0 | 66 77 64 5f 61 00 64 6f 79 70 67 73 30 30 30 30 33 2e 6f 2f 20 20 31 34 34 35 35 35 31 33 34 36 | fwd_a.doypgs00003.o/..1445551346 |
09e0 | 20 20 32 36 31 39 35 35 35 30 30 30 20 20 31 30 30 36 34 30 20 20 36 34 36 20 20 20 20 20 20 20 | ..2619555000..100640..646....... |
0a00 | 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 | `.L....................text..... |
0a20 | 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 | ..........,...X.............0`.d |
0a40 | 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ata............................. |
0a60 | 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..@.0..bss...................... |
0a80 | 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 | ............0..idata$7.......... |
0aa0 | 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 | ..4...b.............0..idata$5.. |
0ac0 | 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........8...l.............0..i |
0ae0 | 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 | data$4............<...v......... |
0b00 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 40 01 00 00 00 00 | ....0..idata$6............@..... |
0b20 | 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 | ...............%................ |
0b40 | 00 00 03 00 57 53 4d 61 6e 50 72 6f 76 53 75 62 73 63 72 69 62 65 00 00 00 00 02 00 00 00 04 00 | ....WSManProvSubscribe.......... |
0b60 | 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
0b80 | 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
0ba0 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
0bc0 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
0be0 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
0c00 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 | ................................ |
0c20 | 00 00 02 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 02 00 52 00 00 00 5f 57 53 4d 61 6e | ........8.............R..._WSMan |
0c40 | 50 72 6f 76 53 75 62 73 63 72 69 62 65 40 34 30 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f | ProvSubscribe@40.__imp__WSManPro |
0c60 | 76 53 75 62 73 63 72 69 62 65 40 34 30 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f 6c 69 62 77 65 | vSubscribe@40.__head_lib32_libwe |
0c80 | 76 74 66 77 64 5f 61 00 64 6f 79 70 67 73 30 30 30 30 32 2e 6f 2f 20 20 31 34 34 35 35 35 31 33 | vtfwd_a.doypgs00002.o/..14455513 |
0ca0 | 34 36 20 20 32 36 31 39 35 35 35 30 30 30 20 20 31 30 30 36 34 30 20 20 36 33 38 20 20 20 20 20 | 46..2619555000..100640..638..... |
0cc0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L.......|............text... |
0ce0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...T.............0` |
0d00 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
0d20 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
0d40 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
0d60 | 04 00 00 00 34 01 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...^.............0..idata$5 |
0d80 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...h.............0. |
0da0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 | .idata$4............<...r....... |
0dc0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 00 00 | ......0..idata$6............@... |
0de0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
0e00 | 00 00 00 00 02 00 57 53 4d 61 6e 50 72 6f 76 53 74 61 72 74 75 70 00 00 02 00 00 00 04 00 00 00 | ......WSManProvStartup.......... |
0e20 | 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 | ................................ |
0e40 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
0e60 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
0e80 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
0ea0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
0ec0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
0ee0 | 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 4e 00 00 00 5f 57 53 4d 61 6e 50 72 | ......4.............N..._WSManPr |
0f00 | 6f 76 53 74 61 72 74 75 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 53 74 61 | ovStartup@16.__imp__WSManProvSta |
0f20 | 72 74 75 70 40 31 36 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f 6c 69 62 77 65 76 74 66 77 64 5f | rtup@16.__head_lib32_libwevtfwd_ |
0f40 | 61 00 64 6f 79 70 67 73 30 30 30 30 31 2e 6f 2f 20 20 31 34 34 35 35 35 31 33 34 36 20 20 32 36 | a.doypgs00001.o/..1445551346..26 |
0f60 | 31 39 35 35 35 30 30 30 20 20 31 30 30 36 34 30 20 20 36 34 30 20 20 20 20 20 20 20 60 0a 4c 01 | 19555000..100640..640.......`.L. |
0f80 | 07 00 00 00 00 00 7c 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ......|............text......... |
0fa0 | 00 00 08 00 00 00 2c 01 00 00 54 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...T.............0`.data. |
0fc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
0fe0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
1000 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
1020 | 00 00 5e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..^.............0..idata$5...... |
1040 | 00 00 04 00 00 00 38 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...h.............0..idata |
1060 | 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............<...r............. |
1080 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 40 01 00 00 00 00 00 00 00 00 | 0..idata$6............@......... |
10a0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 01 00 | ...........%.................... |
10c0 | 57 53 4d 61 6e 50 72 6f 76 53 68 75 74 64 6f 77 6e 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | WSManProvShutdown............... |
10e0 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
1100 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
1120 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
1140 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
1160 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
1180 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
11a0 | 36 00 00 00 00 00 00 00 00 00 00 00 02 00 50 00 00 00 5f 57 53 4d 61 6e 50 72 6f 76 53 68 75 74 | 6.............P..._WSManProvShut |
11c0 | 64 6f 77 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 53 68 75 74 64 6f 77 6e | down@12.__imp__WSManProvShutdown |
11e0 | 40 31 32 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f 6c 69 62 77 65 76 74 66 77 64 5f 61 00 64 6f | @12.__head_lib32_libwevtfwd_a.do |
1200 | 79 70 67 73 30 30 30 30 30 2e 6f 2f 20 20 31 34 34 35 35 35 31 33 34 36 20 20 32 36 31 39 35 35 | ypgs00000.o/..1445551346..261955 |
1220 | 35 30 30 30 20 20 31 30 30 36 34 30 20 20 36 34 38 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 | 5000..100640..648.......`.L..... |
1240 | 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 | ...............text............. |
1260 | 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 | ..,...X.............0`.data..... |
1280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 | ..........................@.0..b |
12a0 | 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
12c0 | 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 | ....0..idata$7............4...b. |
12e0 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 | ............0..idata$5.......... |
1300 | 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 | ..8...l.............0..idata$4.. |
1320 | 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 | ..........<...v.............0..i |
1340 | 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 | data$6............@............. |
1360 | 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 57 53 4d 61 | .......%....................WSMa |
1380 | 6e 50 72 6f 76 50 75 6c 6c 45 76 65 6e 74 73 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 | nProvPullEvents................. |
13a0 | 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 | ...........................text. |
13c0 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
13e0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
1400 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
1420 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
1440 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
1460 | 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 54 00 00 00 5f 57 53 4d 61 6e 50 72 6f 76 50 75 6c 6c | :.............T..._WSManProvPull |
1480 | 45 76 65 6e 74 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 57 53 4d 61 6e 50 72 6f 76 50 75 6c 6c 45 76 | Events@16.__imp__WSManProvPullEv |
14a0 | 65 6e 74 73 40 31 36 00 5f 5f 68 65 61 64 5f 6c 69 62 33 32 5f 6c 69 62 77 65 76 74 66 77 64 5f | ents@16.__head_lib32_libwevtfwd_ |
14c0 | 61 00 | a. |