fix bug in RootNode where the length was calculated incorrectly. fully parses both small EVTX test files.