| ofs | hex dump | ascii |
|---|
| 0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 | !<arch>./...............15161607 |
| 0020 | 34 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37 36 20 20 20 20 20 | 49..0.....0.....0.......576..... |
| 0040 | 20 20 60 0a 00 00 00 0e 00 00 02 84 00 00 05 7c 00 00 08 e4 00 00 08 e4 00 00 0c 0c 00 00 0c 0c | ..`............|................ |
| 0060 | 00 00 0f 22 00 00 0f 22 00 00 12 36 00 00 12 36 00 00 15 60 00 00 15 60 00 00 18 6a 00 00 18 6a | ..."..."...6...6...`...`...j...j |
| 0080 | 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | __C__Users_Peter_Code_winapi_rs_ |
| 00a0 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 | x86_64_lib_libwinapi_mincore_api |
| 00c0 | 5f 6d 73 5f 77 69 6e 5f 73 65 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f | _ms_win_security_lsalookup_l2_1_ |
| 00e0 | 30 5f 61 5f 69 6e 61 6d 65 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 | 0_a_iname._head_C__Users_Peter_C |
| 0100 | 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | ode_winapi_rs_x86_64_lib_libwina |
| 0120 | 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 63 75 72 69 74 79 5f 6c | pi_mincore_api_ms_win_security_l |
| 0140 | 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 00 4c 73 61 45 6e 75 6d 65 72 61 74 65 54 72 | salookup_l2_1_0_a.LsaEnumerateTr |
| 0160 | 75 73 74 65 64 44 6f 6d 61 69 6e 73 00 5f 5f 69 6d 70 5f 4c 73 61 45 6e 75 6d 65 72 61 74 65 54 | ustedDomains.__imp_LsaEnumerateT |
| 0180 | 72 75 73 74 65 64 44 6f 6d 61 69 6e 73 00 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 56 61 6c | rustedDomains.LookupPrivilegeVal |
| 01a0 | 75 65 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 56 61 6c 75 65 57 00 | ueW.__imp_LookupPrivilegeValueW. |
| 01c0 | 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 | LookupPrivilegeNameW.__imp_Looku |
| 01e0 | 70 50 72 69 76 69 6c 65 67 65 4e 61 6d 65 57 00 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 44 | pPrivilegeNameW.LookupPrivilegeD |
| 0200 | 69 73 70 6c 61 79 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 | isplayNameW.__imp_LookupPrivileg |
| 0220 | 65 44 69 73 70 6c 61 79 4e 61 6d 65 57 00 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 53 69 64 57 00 | eDisplayNameW.LookupAccountSidW. |
| 0240 | 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 53 69 64 57 00 4c 6f 6f 6b 75 70 41 63 | __imp_LookupAccountSidW.LookupAc |
| 0260 | 63 6f 75 6e 74 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 4e 61 | countNameW.__imp_LookupAccountNa |
| 0280 | 6d 65 57 00 64 6b 6a 65 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 34 39 20 20 | meW.dkjebt.o/.......1516160749.. |
| 02a0 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 30 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..700.......`. |
| 02c0 | 64 86 06 00 00 00 00 00 40 01 00 00 0f 00 00 00 00 00 05 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d.......@............text....... |
| 02e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 | ..........................P`.dat |
| 0300 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 0320 | 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.P..bss........................ |
| 0340 | 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 | ..........P..idata$4............ |
| 0360 | 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | ................@.0..idata$5.... |
| 0380 | 00 00 00 00 08 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 | ........................@.0..ida |
| 03a0 | 74 61 24 37 00 00 00 00 00 00 00 00 2c 00 00 00 14 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$7........,................... |
| 03c0 | 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 69 6e 2d 73 | @.0.................api-ms-win-s |
| 03e0 | 65 63 75 72 69 74 79 2d 6c 73 61 6c 6f 6f 6b 75 70 2d 6c 32 2d 31 2d 30 2e 64 6c 6c 00 00 00 00 | ecurity-lsalookup-l2-1-0.dll.... |
| 0400 | 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 | .file...........g.fake.......... |
| 0420 | 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 | .....text....................... |
| 0440 | 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 | .........data................... |
| 0460 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 | .............bss................ |
| 0480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 | .................idata$4........ |
| 04a0 | 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 | .....................idata$5.... |
| 04c0 | 05 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 | .........................idata$7 |
| 04e0 | 00 00 00 00 06 00 00 00 03 01 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........)..................... |
| 0500 | 04 00 00 00 00 00 00 00 06 00 00 00 02 00 6e 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 | ..............n...__C__Users_Pet |
| 0520 | 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 | er_Code_winapi_rs_x86_64_lib_lib |
| 0540 | 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 63 75 72 69 | winapi_mincore_api_ms_win_securi |
| 0560 | 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 5f 69 6e 61 6d 65 00 64 6b 6a 65 | ty_lsalookup_l2_1_0_a_iname.dkje |
| 0580 | 62 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 34 39 20 20 30 20 20 20 20 20 30 20 | bh.o/.......1516160749..0.....0. |
| 05a0 | 20 20 20 20 31 30 30 36 36 36 20 20 38 31 32 20 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 | ....100666..812.......`.d....... |
| 05c0 | 36 01 00 00 10 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 6............text............... |
| 05e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ..................P`.data....... |
| 0600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 | ........................@.P..bss |
| 0620 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 0640 | 80 00 50 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 04 01 00 00 18 01 00 00 | ..P..idata$2.................... |
| 0660 | 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..idata$5............ |
| 0680 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | ................@.0..idata$4.... |
| 06a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 | ........................@.0..... |
| 06c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 03 00 0c 00 00 00 0f 00 | ................................ |
| 06e0 | 00 00 03 00 10 00 00 00 0d 00 00 00 03 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 | ...............file...........g. |
| 0700 | 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 | fake..............hname......... |
| 0720 | 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | ....fthunk.............text..... |
| 0740 | 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 | ...........................data. |
| 0760 | 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 | ...............................b |
| 0780 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ss.............................. |
| 07a0 | 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 03 00 00 00 00 00 00 00 | ...idata$2...................... |
| 07c0 | 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$4...........idata$5 |
| 07e0 | 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 00 00 | ................................ |
| 0800 | 6c 00 00 00 00 00 00 00 00 00 00 00 02 00 d6 00 00 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 | l................._head_C__Users |
| 0820 | 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 | _Peter_Code_winapi_rs_x86_64_lib |
| 0840 | 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 | _libwinapi_mincore_api_ms_win_se |
| 0860 | 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 00 5f 5f 43 5f 5f 55 | curity_lsalookup_l2_1_0_a.__C__U |
| 0880 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
| 08a0 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 | _lib_libwinapi_mincore_api_ms_wi |
| 08c0 | 6e 5f 73 65 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 5f 69 6e | n_security_lsalookup_l2_1_0_a_in |
| 08e0 | 61 6d 65 00 64 6b 6a 65 62 73 30 30 30 30 35 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 34 39 20 20 | ame.dkjebs00005.o/..1516160749.. |
| 0900 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 34 38 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..748.......`. |
| 0920 | 64 86 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
| 0940 | 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...h.............0`.dat |
| 0960 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 0980 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 09a0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 09c0 | 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...r.............0..idata$5.... |
| 09e0 | 00 00 00 00 08 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...|.............0..ida |
| 0a00 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@............... |
| 0a20 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
| 0a40 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 0a60 | 00 00 00 00 00 00 00 00 05 00 4c 73 61 45 6e 75 6d 65 72 61 74 65 54 72 75 73 74 65 64 44 6f 6d | ..........LsaEnumerateTrustedDom |
| 0a80 | 61 69 6e 73 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | ains............................ |
| 0aa0 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 0ac0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 0ae0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 0b00 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 0b20 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 0b40 | 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 | ......................@......... |
| 0b60 | 00 00 02 00 a8 00 00 00 4c 73 61 45 6e 75 6d 65 72 61 74 65 54 72 75 73 74 65 64 44 6f 6d 61 69 | ........LsaEnumerateTrustedDomai |
| 0b80 | 6e 73 00 5f 5f 69 6d 70 5f 4c 73 61 45 6e 75 6d 65 72 61 74 65 54 72 75 73 74 65 64 44 6f 6d 61 | ns.__imp_LsaEnumerateTrustedDoma |
| 0ba0 | 69 6e 73 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 | ins._head_C__Users_Peter_Code_wi |
| 0bc0 | 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e | napi_rs_x86_64_lib_libwinapi_min |
| 0be0 | 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b | core_api_ms_win_security_lsalook |
| 0c00 | 75 70 5f 6c 32 5f 31 5f 30 5f 61 00 64 6b 6a 65 62 73 30 30 30 30 34 2e 6f 2f 20 20 31 35 31 36 | up_l2_1_0_a.dkjebs00004.o/..1516 |
| 0c20 | 31 36 30 37 34 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 30 20 | 160749..0.....0.....100666..730. |
| 0c40 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 0c60 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 | t...............,...`........... |
| 0c80 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 0ca0 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 0cc0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 0ce0 | 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...j.............0..ida |
| 0d00 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...t........... |
| 0d20 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 | ..0..idata$4............@...~... |
| 0d40 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 | ..........0..idata$6............ |
| 0d60 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 0d80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 | ..................LookupPrivileg |
| 0da0 | 65 56 61 6c 75 65 57 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | eValueW......................... |
| 0dc0 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 0de0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 0e00 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 0e20 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 0e40 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 0e60 | 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 | ......................6......... |
| 0e80 | 00 00 02 00 9e 00 00 00 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 56 61 6c 75 65 57 00 5f 5f | ........LookupPrivilegeValueW.__ |
| 0ea0 | 69 6d 70 5f 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 56 61 6c 75 65 57 00 5f 68 65 61 64 5f | imp_LookupPrivilegeValueW._head_ |
| 0ec0 | 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 | C__Users_Peter_Code_winapi_rs_x8 |
| 0ee0 | 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d | 6_64_lib_libwinapi_mincore_api_m |
| 0f00 | 73 5f 77 69 6e 5f 73 65 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f | s_win_security_lsalookup_l2_1_0_ |
| 0f20 | 61 00 64 6b 6a 65 62 73 30 30 30 30 33 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 34 39 20 20 30 20 | a.dkjebs00003.o/..1516160749..0. |
| 0f40 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 38 20 20 20 20 20 20 20 60 0a 64 86 | ....0.....100666..728.......`.d. |
| 0f60 | 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 0f80 | 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...`.............0`.data. |
| 0fa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 0fc0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 0fe0 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 1000 | 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..j.............0..idata$5...... |
| 1020 | 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...t.............0..idata |
| 1040 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@...~............. |
| 1060 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
| 1080 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 10a0 | 00 00 00 00 00 00 03 00 4c 6f 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 4e 61 6d 65 57 00 00 02 00 | ........LookupPrivilegeNameW.... |
| 10c0 | 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 | ................................ |
| 10e0 | 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 | .......text..............data... |
| 1100 | 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 | ...........bss...............ida |
| 1120 | 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 | ta$7...........idata$5.......... |
| 1140 | 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 | .idata$4...........idata$6...... |
| 1160 | 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 | ................................ |
| 1180 | 00 00 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 9c 00 00 00 4c 6f | ............4.................Lo |
| 11a0 | 6f 6b 75 70 50 72 69 76 69 6c 65 67 65 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 70 50 | okupPrivilegeNameW.__imp_LookupP |
| 11c0 | 72 69 76 69 6c 65 67 65 4e 61 6d 65 57 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 | rivilegeNameW._head_C__Users_Pet |
| 11e0 | 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 | er_Code_winapi_rs_x86_64_lib_lib |
| 1200 | 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 63 75 72 69 | winapi_mincore_api_ms_win_securi |
| 1220 | 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 00 64 6b 6a 65 62 73 30 30 30 30 | ty_lsalookup_l2_1_0_a.dkjebs0000 |
| 1240 | 32 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 34 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 | 2.o/..1516160749..0.....0.....10 |
| 1260 | 30 36 36 36 20 20 37 35 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 90 01 00 00 0a 00 | 0666..750.......`.d............. |
| 1280 | 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 | .......text...............,...h. |
| 12a0 | 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............0`.data............. |
| 12c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 | ..................@.0..bss...... |
| 12e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 | ............................0..i |
| 1300 | 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 | data$7............4...r......... |
| 1320 | 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 7c 01 | ....0..idata$5............8...|. |
| 1340 | 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 | ............0..idata$4.......... |
| 1360 | 00 00 40 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 | ..@.................0..idata$6.. |
| 1380 | 00 00 00 00 00 00 1e 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 | ..........H....................% |
| 13a0 | 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 4c 6f 6f 6b | ............................Look |
| 13c0 | 75 70 50 72 69 76 69 6c 65 67 65 44 69 73 70 6c 61 79 4e 61 6d 65 57 00 00 00 02 00 00 00 08 00 | upPrivilegeDisplayNameW......... |
| 13e0 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
| 1400 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 1420 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 1440 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 1460 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 1480 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 05 00 | ................................ |
| 14a0 | 00 00 02 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 02 00 aa 00 00 00 4c 6f 6f 6b 75 70 | ........B.................Lookup |
| 14c0 | 50 72 69 76 69 6c 65 67 65 44 69 73 70 6c 61 79 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b | PrivilegeDisplayNameW.__imp_Look |
| 14e0 | 75 70 50 72 69 76 69 6c 65 67 65 44 69 73 70 6c 61 79 4e 61 6d 65 57 00 5f 68 65 61 64 5f 43 5f | upPrivilegeDisplayNameW._head_C_ |
| 1500 | 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f | _Users_Peter_Code_winapi_rs_x86_ |
| 1520 | 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f | 64_lib_libwinapi_mincore_api_ms_ |
| 1540 | 77 69 6e 5f 73 65 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 00 | win_security_lsalookup_l2_1_0_a. |
| 1560 | 64 6b 6a 65 62 73 30 30 30 30 31 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 34 39 20 20 30 20 20 20 | dkjebs00001.o/..1516160749..0... |
| 1580 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 38 20 20 20 20 20 20 20 60 0a 64 86 07 00 | ..0.....100666..718.......`.d... |
| 15a0 | 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 15c0 | 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...\.............0`.data... |
| 15e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 1600 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 1620 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 1640 | 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | f.............0..idata$5........ |
| 1660 | 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...p.............0..idata$4 |
| 1680 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@...z.............0. |
| 16a0 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............H........... |
| 16c0 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
| 16e0 | 00 00 00 00 01 00 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 53 69 64 57 00 02 00 00 00 08 00 00 00 | ......LookupAccountSidW......... |
| 1700 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 1720 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 1740 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 1760 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 1780 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 17a0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 16 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 17c0 | 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 96 00 00 00 4c 6f 6f 6b 75 70 41 63 | ........................LookupAc |
| 17e0 | 63 6f 75 6e 74 53 69 64 57 00 5f 5f 69 6d 70 5f 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 53 69 64 | countSidW.__imp_LookupAccountSid |
| 1800 | 57 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 | W._head_C__Users_Peter_Code_wina |
| 1820 | 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f | pi_rs_x86_64_lib_libwinapi_minco |
| 1840 | 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 | re_api_ms_win_security_lsalookup |
| 1860 | 5f 6c 32 5f 31 5f 30 5f 61 00 64 6b 6a 65 62 73 30 30 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 | _l2_1_0_a.dkjebs00000.o/..151616 |
| 1880 | 30 37 34 39 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 34 20 20 20 | 0749..0.....0.....100666..724... |
| 18a0 | 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 | ....`.d....................text. |
| 18c0 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...`............. |
| 18e0 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 1900 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 1920 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 1940 | 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...j.............0..idata |
| 1960 | 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...t............. |
| 1980 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 | 0..idata$4............@...~..... |
| 19a0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 | ........0..idata$6............H. |
| 19c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 19e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 4e 61 6d | ................LookupAccountNam |
| 1a00 | 65 57 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | eW.............................. |
| 1a20 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 1a40 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 1a60 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 1a80 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 1aa0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 1ac0 | 00 00 17 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 | ....................0........... |
| 1ae0 | 02 00 98 00 00 00 4c 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 4e 61 6d 65 57 00 5f 5f 69 6d 70 5f 4c | ......LookupAccountNameW.__imp_L |
| 1b00 | 6f 6f 6b 75 70 41 63 63 6f 75 6e 74 4e 61 6d 65 57 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 | ookupAccountNameW._head_C__Users |
| 1b20 | 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 | _Peter_Code_winapi_rs_x86_64_lib |
| 1b40 | 5f 6c 69 62 77 69 6e 61 70 69 5f 6d 69 6e 63 6f 72 65 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 73 65 | _libwinapi_mincore_api_ms_win_se |
| 1b60 | 63 75 72 69 74 79 5f 6c 73 61 6c 6f 6f 6b 75 70 5f 6c 32 5f 31 5f 30 5f 61 00 | curity_lsalookup_l2_1_0_a. |