1 !<arch> 2 / 1450287912 0 0 0 2864 ` 3 \t ||**zz!>!>##&&):):,,..1z1z4J4J7 8 7 9 99<<?V?VBBDDGGJhJhM,M,PPS 10 S 11 UUXX[[^l^la$a$ddffiilVlVooqqttwwzFzF||||jj__lib32_libwevtapi_a_iname__head_lib32_libwevtapi_a_EvtUpdateBookmark@8__imp__EvtUpdateBookmark@8_EvtSubscribe@32__imp__EvtSubscribe@32_EvtSetObjectArrayProperty@20__imp__EvtSetObjectArrayProperty@20_EvtSetChannelConfigProperty@16__imp__EvtSetChannelConfigProperty@16_EvtSeek@24__imp__EvtSeek@24_EvtSaveChannelConfig@8__imp__EvtSaveChannelConfig@8_EvtRender@28__imp__EvtRender@28_EvtQuery@16__imp__EvtQuery@16_EvtOpenSession@16__imp__EvtOpenSession@16_EvtOpenPublisherMetadata@20__imp__EvtOpenPublisherMetadata@20_EvtOpenPublisherEnum@8__imp__EvtOpenPublisherEnum@8_EvtOpenLog@12__imp__EvtOpenLog@12_EvtOpenEventMetadataEnum@8__imp__EvtOpenEventMetadataEnum@8_EvtOpenChannelEnum@8__imp__EvtOpenChannelEnum@8_EvtOpenChannelConfig@12__imp__EvtOpenChannelConfig@12_EvtNextPublisherId@16__imp__EvtNextPublisherId@16_EvtNextEventMetadata@8__imp__EvtNextEventMetadata@8_EvtNextChannelPath@16__imp__EvtNextChannelPath@16_EvtNext@24__imp__EvtNext@24_EvtIntWriteXmlEventToLocalLogfile@12__imp__EvtIntWriteXmlEventToLocalLogfile@12_EvtIntSysprepCleanup@0__imp__EvtIntSysprepCleanup@0_EvtIntRetractConfig@12__imp__EvtIntRetractConfig@12_EvtIntReportEventAndSourceAsync@44__imp__EvtIntReportEventAndSourceAsync@44_EvtIntReportAuthzEventAndSourceAsync@44__imp__EvtIntReportAuthzEventAndSourceAsync@44_EvtIntRenderResourceEventTemplate@0__imp__EvtIntRenderResourceEventTemplate@0_EvtIntGetClassicLogDisplayName@28__imp__EvtIntGetClassicLogDisplayName@28_EvtIntCreateLocalLogfile@8__imp__EvtIntCreateLocalLogfile@8_EvtIntAssertConfig@12__imp__EvtIntAssertConfig@12_EvtGetQueryInfo@20__imp__EvtGetQueryInfo@20_EvtGetPublisherMetadataProperty@24__imp__EvtGetPublisherMetadataProperty@24_EvtGetObjectArraySize@8__imp__EvtGetObjectArraySize@8_EvtGetObjectArrayProperty@28__imp__EvtGetObjectArrayProperty@28_EvtGetLogInfo@20__imp__EvtGetLogInfo@20_EvtGetExtendedStatus@12__imp__EvtGetExtendedStatus@12_EvtGetEventMetadataProperty@24__imp__EvtGetEventMetadataProperty@24_EvtGetEventInfo@20__imp__EvtGetEventInfo@20_EvtGetChannelConfigProperty@24__imp__EvtGetChannelConfigProperty@24_EvtFormatMessage@36__imp__EvtFormatMessage@36_EvtExportLog@20__imp__EvtExportLog@20_EvtCreateRenderContext@12__imp__EvtCreateRenderContext@12_EvtCreateBookmark@4__imp__EvtCreateBookmark@4_EvtClose@4__imp__EvtClose@4_EvtClearLog@16__imp__EvtClearLog@16_EvtCancel@4__imp__EvtCancel@4_EvtArchiveExportedLog@16__imp__EvtArchiveExportedLog@16ddgait.o/ 1450287912 2619555000 100640 581 ` 14 L.text 0`.data@0.bss0.idata$4@0.idata$5@0.idata$7@0wevtapi.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7__lib32_libwevtapi_a_iname 18 ddgaih.o/ 1450287912 2619555000 100640 655 ` 19 L6.text 0`.data@0.bss0.idata$2@0.idata$5@0.idata$4@0 .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$59__head_lib32_libwevtapi_a__lib32_libwevtapi_a_iname 23 ddgais00044.o/ 1450287912 2619555000 100640 638 ` 24 L| 25 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %,EvtUpdateBookmark .text.data.bss.idata$7.idata$5.idata$4.idata$64N_EvtUpdateBookmark@8__imp__EvtUpdateBookmark@8__head_lib32_libwevtapi_addgais00043.o/ 1450287912 2619555000 100640 626 ` 26 Lx 27 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %+EvtSubscribe .text.data.bss.idata$7.idata$5.idata$4.idata$6,F_EvtSubscribe@32__imp__EvtSubscribe@32__head_lib32_libwevtapi_addgais00042.o/ 1450287912 2619555000 100640 664 ` 28 L 29 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %*EvtSetObjectArrayProperty .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`_EvtSetObjectArrayProperty@20__imp__EvtSetObjectArrayProperty@20__head_lib32_libwevtapi_addgais00041.o/ 1450287912 2619555000 100640 672 ` 30 L 31 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %)EvtSetChannelConfigProperty .text.data.bss.idata$7.idata$5.idata$4.idata$6$Jd_EvtSetChannelConfigProperty@16__imp__EvtSetChannelConfigProperty@16__head_lib32_libwevtapi_addgais00040.o/ 1450287912 2619555000 100640 612 ` 32 Lt 33 .text,L 0`.data@0.bss0.idata$74V0.idata$58`0.idata$4<j0.idata$6 34 @ %(EvtSeek .text.data.bss.idata$7.idata$5.idata$4.idata$6"<_EvtSeek@24__imp__EvtSeek@24__head_lib32_libwevtapi_addgais00039.o/ 1450287912 2619555000 100640 648 ` 35 L 36 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %'EvtSaveChannelConfig .text.data.bss.idata$7.idata$5.idata$4.idata$6:T_EvtSaveChannelConfig@8__imp__EvtSaveChannelConfig@8__head_lib32_libwevtapi_addgais00038.o/ 1450287912 2619555000 100640 616 ` 37 Lt 38 .text,L 0`.data@0.bss0.idata$74V0.idata$58`0.idata$4<j0.idata$6@ %&EvtRender .text.data.bss.idata$7.idata$5.idata$4.idata$6&@_EvtRender@28__imp__EvtRender@28__head_lib32_libwevtapi_addgais00037.o/ 1450287912 2619555000 100640 614 ` 40 Lt 41 .text,L 0`.data@0.bss0.idata$74V0.idata$58`0.idata$4<j0.idata$6@ %%EvtQuery .text.data.bss.idata$7.idata$5.idata$4.idata$6$>_EvtQuery@16__imp__EvtQuery@16__head_lib32_libwevtapi_addgais00036.o/ 1450287912 2619555000 100640 634 ` 43 L| 44 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %$EvtOpenSession .text.data.bss.idata$7.idata$5.idata$4.idata$60J_EvtOpenSession@16__imp__EvtOpenSession@16__head_lib32_libwevtapi_addgais00035.o/ 1450287912 2619555000 100640 662 ` 45 L 46 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %#EvtOpenPublisherMetadata .text.data.bss.idata$7.idata$5.idata$4.idata$6!D^_EvtOpenPublisherMetadata@20__imp__EvtOpenPublisherMetadata@20__head_lib32_libwevtapi_addgais00034.o/ 1450287912 2619555000 100640 648 ` 47 L 48 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %"EvtOpenPublisherEnum .text.data.bss.idata$7.idata$5.idata$4.idata$6:T_EvtOpenPublisherEnum@8__imp__EvtOpenPublisherEnum@8__head_lib32_libwevtapi_addgais00033.o/ 1450287912 2619555000 100640 622 ` 49 Lx 50 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %!EvtOpenLog .text.data.bss.idata$7.idata$5.idata$4.idata$6(B_EvtOpenLog@12__imp__EvtOpenLog@12__head_lib32_libwevtapi_addgais00032.o/ 1450287912 2619555000 100640 660 ` 51 L 52 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ % EvtOpenEventMetadataEnum .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\_EvtOpenEventMetadataEnum@8__imp__EvtOpenEventMetadataEnum@8__head_lib32_libwevtapi_addgais00031.o/ 1450287912 2619555000 100640 644 ` 53 L 54 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtOpenChannelEnum .text.data.bss.idata$7.idata$5.idata$4.idata$66P_EvtOpenChannelEnum@8__imp__EvtOpenChannelEnum@8__head_lib32_libwevtapi_addgais00030.o/ 1450287912 2619555000 100640 650 ` 55 L 56 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtOpenChannelConfig .text.data.bss.idata$7.idata$5.idata$4.idata$6<V_EvtOpenChannelConfig@12__imp__EvtOpenChannelConfig@12__head_lib32_libwevtapi_addgais00029.o/ 1450287912 2619555000 100640 646 ` 57 L 58 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtNextPublisherId .text.data.bss.idata$7.idata$5.idata$4.idata$68R_EvtNextPublisherId@16__imp__EvtNextPublisherId@16__head_lib32_libwevtapi_addgais00028.o/ 1450287912 2619555000 100640 648 ` 59 L 60 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtNextEventMetadata .text.data.bss.idata$7.idata$5.idata$4.idata$6:T_EvtNextEventMetadata@8__imp__EvtNextEventMetadata@8__head_lib32_libwevtapi_addgais00027.o/ 1450287912 2619555000 100640 646 ` 61 L 62 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtNextChannelPath .text.data.bss.idata$7.idata$5.idata$4.idata$68R_EvtNextChannelPath@16__imp__EvtNextChannelPath@16__head_lib32_libwevtapi_addgais00026.o/ 1450287912 2619555000 100640 612 ` 63 Lt 64 .text,L 0`.data@0.bss0.idata$74V0.idata$58`0.idata$4<j0.idata$6 65 @ %EvtNext .text.data.bss.idata$7.idata$5.idata$4.idata$6"<_EvtNext@24__imp__EvtNext@24__head_lib32_libwevtapi_addgais00025.o/ 1450287912 2619555000 100640 688 ` 66 L 67 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %EvtIntWriteXmlEventToLocalLogfile .text.data.bss.idata$7.idata$5.idata$4.idata$6*Vp_EvtIntWriteXmlEventToLocalLogfile@12__imp__EvtIntWriteXmlEventToLocalLogfile@12__head_lib32_libwevtapi_addgais00024.o/ 1450287912 2619555000 100640 648 ` 68 L 69 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtIntSysprepCleanup .text.data.bss.idata$7.idata$5.idata$4.idata$6:T_EvtIntSysprepCleanup@0__imp__EvtIntSysprepCleanup@0__head_lib32_libwevtapi_addgais00023.o/ 1450287912 2619555000 100640 648 ` 70 L 71 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtIntRetractConfig .text.data.bss.idata$7.idata$5.idata$4.idata$6:T_EvtIntRetractConfig@12__imp__EvtIntRetractConfig@12__head_lib32_libwevtapi_addgais00022.o/ 1450287912 2619555000 100640 684 ` 72 L 73 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %EvtIntReportEventAndSourceAsync .text.data.bss.idata$7.idata$5.idata$4.idata$6(Rl_EvtIntReportEventAndSourceAsync@44__imp__EvtIntReportEventAndSourceAsync@44__head_lib32_libwevtapi_addgais00021.o/ 1450287912 2619555000 100640 698 ` 74 L 75 .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4<0.idata$6(@ %EvtIntReportAuthzEventAndSourceAsync .text.data.bss.idata$7.idata$5.idata$4.idata$6-\v_EvtIntReportAuthzEventAndSourceAsync@44__imp__EvtIntReportAuthzEventAndSourceAsync@44__head_lib32_libwevtapi_addgais00020.o/ 1450287912 2619555000 100640 686 ` 76 L 77 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6$@ %EvtIntRenderResourceEventTemplate .text.data.bss.idata$7.idata$5.idata$4.idata$6)Tn_EvtIntRenderResourceEventTemplate@0__imp__EvtIntRenderResourceEventTemplate@0__head_lib32_libwevtapi_addgais00019.o/ 1450287912 2619555000 100640 682 ` 78 L 79 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %EvtIntGetClassicLogDisplayName .text.data.bss.idata$7.idata$5.idata$4.idata$6'Pj_EvtIntGetClassicLogDisplayName@28__imp__EvtIntGetClassicLogDisplayName@28__head_lib32_libwevtapi_addgais00018.o/ 1450287912 2619555000 100640 660 ` 80 L 81 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %EvtIntCreateLocalLogfile .text.data.bss.idata$7.idata$5.idata$4.idata$6 B\_EvtIntCreateLocalLogfile@8__imp__EvtIntCreateLocalLogfile@8__head_lib32_libwevtapi_addgais00017.o/ 1450287912 2619555000 100640 646 ` 82 L 83 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtIntAssertConfig .text.data.bss.idata$7.idata$5.idata$4.idata$68R_EvtIntAssertConfig@12__imp__EvtIntAssertConfig@12__head_lib32_libwevtapi_addgais00016.o/ 1450287912 2619555000 100640 636 ` 84 L| 85 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EvtGetQueryInfo .text.data.bss.idata$7.idata$5.idata$4.idata$62L_EvtGetQueryInfo@20__imp__EvtGetQueryInfo@20__head_lib32_libwevtapi_addgais00015.o/ 1450287912 2619555000 100640 684 ` 86 L 87 .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4<0.idata$6"@ %EvtGetPublisherMetadataProperty .text.data.bss.idata$7.idata$5.idata$4.idata$6(Rl_EvtGetPublisherMetadataProperty@24__imp__EvtGetPublisherMetadataProperty@24__head_lib32_libwevtapi_addgais00014.o/ 1450287912 2619555000 100640 650 ` 88 L 89 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtGetObjectArraySize .text.data.bss.idata$7.idata$5.idata$4.idata$6<V_EvtGetObjectArraySize@8__imp__EvtGetObjectArraySize@8__head_lib32_libwevtapi_addgais00013.o/ 1450287912 2619555000 100640 664 ` 90 L 91 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ % EvtGetObjectArrayProperty .text.data.bss.idata$7.idata$5.idata$4.idata$6"F`_EvtGetObjectArrayProperty@28__imp__EvtGetObjectArrayProperty@28__head_lib32_libwevtapi_addgais00012.o/ 1450287912 2619555000 100640 628 ` 93 Lx 94 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %EvtGetLogInfo .text.data.bss.idata$7.idata$5.idata$4.idata$6.H_EvtGetLogInfo@20__imp__EvtGetLogInfo@20__head_lib32_libwevtapi_addgais00011.o/ 1450287912 2619555000 100640 650 ` 96 L 97 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtGetExtendedStatus .text.data.bss.idata$7.idata$5.idata$4.idata$6<V_EvtGetExtendedStatus@12__imp__EvtGetExtendedStatus@12__head_lib32_libwevtapi_addgais00010.o/ 1450287912 2619555000 100640 672 ` 99 L 100 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ % 101 EvtGetEventMetadataProperty .text.data.bss.idata$7.idata$5.idata$4.idata$6$Jd_EvtGetEventMetadataProperty@24__imp__EvtGetEventMetadataProperty@24__head_lib32_libwevtapi_addgais00009.o/ 1450287912 2619555000 100640 636 ` 102 L| 103 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ % EvtGetEventInfo .text.data.bss.idata$7.idata$5.idata$4.idata$62L_EvtGetEventInfo@20__imp__EvtGetEventInfo@20__head_lib32_libwevtapi_addgais00008.o/ 1450287912 2619555000 100640 672 ` 104 L 105 .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4<~0.idata$6@ %EvtGetChannelConfigProperty .text.data.bss.idata$7.idata$5.idata$4.idata$6$Jd_EvtGetChannelConfigProperty@24__imp__EvtGetChannelConfigProperty@24__head_lib32_libwevtapi_addgais00007.o/ 1450287912 2619555000 100640 638 ` 106 L| 107 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EvtFormatMessage .text.data.bss.idata$7.idata$5.idata$4.idata$64N_EvtFormatMessage@36__imp__EvtFormatMessage@36__head_lib32_libwevtapi_addgais00006.o/ 1450287912 2619555000 100640 626 ` 108 Lx 109 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %EvtExportLog .text.data.bss.idata$7.idata$5.idata$4.idata$6,F_EvtExportLog@20__imp__EvtExportLog@20__head_lib32_libwevtapi_addgais00005.o/ 1450287912 2619555000 100640 658 ` 110 L 111 .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4<z0.idata$6@ %EvtCreateRenderContext .text.data.bss.idata$7.idata$5.idata$4.idata$6@Z_EvtCreateRenderContext@12__imp__EvtCreateRenderContext@12__head_lib32_libwevtapi_addgais00004.o/ 1450287912 2619555000 100640 638 ` 112 L| 113 .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4<r0.idata$6@ %EvtCreateBookmark .text.data.bss.idata$7.idata$5.idata$4.idata$64N_EvtCreateBookmark@4__imp__EvtCreateBookmark@4__head_lib32_libwevtapi_addgais00003.o/ 1450287912 2619555000 100640 612 ` 114 Lt 115 .text,L 0`.data@0.bss0.idata$74V0.idata$58`0.idata$4<j0.idata$6@ %EvtClose .text.data.bss.idata$7.idata$5.idata$4.idata$6"<_EvtClose@4__imp__EvtClose@4__head_lib32_libwevtapi_addgais00002.o/ 1450287912 2619555000 100640 624 ` 117 Lx 118 .text,P 0`.data@0.bss0.idata$74Z0.idata$58d0.idata$4<n0.idata$6@ %EvtClearLog .text.data.bss.idata$7.idata$5.idata$4.idata$6*D_EvtClearLog@16__imp__EvtClearLog@16__head_lib32_libwevtapi_addgais00001.o/ 1450287912 2619555000 100640 614 ` 119 Lt 120 .text,L 0`.data@0.bss0.idata$74V0.idata$58`0.idata$4<j0.idata$6@ %EvtCancel .text.data.bss.idata$7.idata$5.idata$4.idata$6$>_EvtCancel@4__imp__EvtCancel@4__head_lib32_libwevtapi_addgais00000.o/ 1450287912 2619555000 100640 652 ` 122 L 123 .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4<v0.idata$6@ %EvtArchiveExportedLog .text.data.bss.idata$7.idata$5.idata$4.idata$6>X_EvtArchiveExportedLog@16__imp__EvtArchiveExportedLog@16__head_lib32_libwevtapi_a