| ofs | hex dump | ascii |
|---|
| 0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 | !<arch>./...............15161607 |
| 0020 | 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 31 35 31 32 20 20 20 20 | 76..0.....0.....0.......1512.... |
| 0040 | 20 20 60 0a 00 00 00 32 00 00 06 2c 00 00 08 e4 00 00 0c 04 00 00 0c 04 00 00 0f 00 00 00 0f 00 | ..`....2...,.................... |
| 0060 | 00 00 12 10 00 00 12 10 00 00 14 ea 00 00 14 ea 00 00 17 dc 00 00 17 dc 00 00 1a ca 00 00 1a ca | ................................ |
| 0080 | 00 00 1d d2 00 00 1d d2 00 00 20 cc 00 00 20 cc 00 00 23 d0 00 00 23 d0 00 00 26 c8 00 00 26 c8 | ..................#...#...&...&. |
| 00a0 | 00 00 29 aa 00 00 29 aa 00 00 2c 98 00 00 2c 98 00 00 2f 94 00 00 2f 94 00 00 32 7a 00 00 32 7a | ..)...)...,...,.../.../...2z..2z |
| 00c0 | 00 00 35 50 00 00 35 50 00 00 38 42 00 00 38 42 00 00 3b 28 00 00 3b 28 00 00 3d fc 00 00 3d fc | ..5P..5P..8B..8B..;(..;(..=...=. |
| 00e0 | 00 00 41 04 00 00 41 04 00 00 43 f0 00 00 43 f0 00 00 47 00 00 00 47 00 00 00 49 f0 00 00 49 f0 | ..A...A...C...C...G...G...I...I. |
| 0100 | 00 00 4c d4 00 00 4c d4 00 00 4f b8 00 00 4f b8 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ..L...L...O...O.__C__Users_Peter |
| 0120 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
| 0140 | 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 5f 69 6e 61 6d 65 00 5f 68 65 61 64 5f 43 5f 5f 55 | napi_ntdsetup_a_iname._head_C__U |
| 0160 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
| 0180 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 4e 74 64 73 70 56 | _lib_libwinapi_ntdsetup_a.NtdspV |
| 01a0 | 65 72 69 66 79 44 73 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 56 65 | erifyDsEnvironment.__imp_NtdspVe |
| 01c0 | 72 69 66 79 44 73 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 4e 74 64 73 70 56 61 6c 69 64 61 74 65 49 | rifyDsEnvironment.NtdspValidateI |
| 01e0 | 6e 73 74 61 6c 6c 50 61 72 61 6d 65 74 65 72 73 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 56 61 6c 69 | nstallParameters.__imp_NtdspVali |
| 0200 | 64 61 74 65 49 6e 73 74 61 6c 6c 50 61 72 61 6d 65 74 65 72 73 00 4e 74 64 73 70 46 69 6e 64 53 | dateInstallParameters.NtdspFindS |
| 0220 | 69 74 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 46 69 6e 64 53 69 74 65 00 4e 74 64 73 70 44 4e 53 | ite.__imp_NtdspFindSite.NtdspDNS |
| 0240 | 74 6f 52 46 43 31 37 37 39 4e 61 6d 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 44 4e 53 74 6f 52 46 | toRFC1779Name.__imp_NtdspDNStoRF |
| 0260 | 43 31 37 37 39 4e 61 6d 65 00 4e 74 64 73 70 43 6f 6e 66 69 67 52 65 67 69 73 74 72 79 00 5f 5f | C1779Name.NtdspConfigRegistry.__ |
| 0280 | 69 6d 70 5f 4e 74 64 73 70 43 6f 6e 66 69 67 52 65 67 69 73 74 72 79 00 4e 74 64 73 53 65 74 52 | imp_NtdspConfigRegistry.NtdsSetR |
| 02a0 | 65 70 6c 69 63 61 4d 61 63 68 69 6e 65 41 63 63 6f 75 6e 74 00 5f 5f 69 6d 70 5f 4e 74 64 73 53 | eplicaMachineAccount.__imp_NtdsS |
| 02c0 | 65 74 52 65 70 6c 69 63 61 4d 61 63 68 69 6e 65 41 63 63 6f 75 6e 74 00 4e 74 64 73 50 72 65 70 | etReplicaMachineAccount.NtdsPrep |
| 02e0 | 61 72 65 46 6f 72 44 73 55 70 67 72 61 64 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 50 72 65 70 61 72 | areForDsUpgrade.__imp_NtdsPrepar |
| 0300 | 65 46 6f 72 44 73 55 70 67 72 61 64 65 00 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 6d 6f | eForDsUpgrade.NtdsPrepareForDemo |
| 0320 | 74 69 6f 6e 55 6e 64 6f 00 5f 5f 69 6d 70 5f 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 6d | tionUndo.__imp_NtdsPrepareForDem |
| 0340 | 6f 74 69 6f 6e 55 6e 64 6f 00 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 6d 6f 74 69 6f 6e | otionUndo.NtdsPrepareForDemotion |
| 0360 | 00 5f 5f 69 6d 70 5f 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 6d 6f 74 69 6f 6e 00 4e 74 | .__imp_NtdsPrepareForDemotion.Nt |
| 0380 | 64 73 49 6e 73 74 61 6c 6c 55 6e 64 6f 00 5f 5f 69 6d 70 5f 4e 74 64 73 49 6e 73 74 61 6c 6c 55 | dsInstallUndo.__imp_NtdsInstallU |
| 03a0 | 6e 64 6f 00 4e 74 64 73 49 6e 73 74 61 6c 6c 53 68 75 74 64 6f 77 6e 00 5f 5f 69 6d 70 5f 4e 74 | ndo.NtdsInstallShutdown.__imp_Nt |
| 03c0 | 64 73 49 6e 73 74 61 6c 6c 53 68 75 74 64 6f 77 6e 00 4e 74 64 73 49 6e 73 74 61 6c 6c 52 65 70 | dsInstallShutdown.NtdsInstallRep |
| 03e0 | 6c 69 63 61 74 65 46 75 6c 6c 00 5f 5f 69 6d 70 5f 4e 74 64 73 49 6e 73 74 61 6c 6c 52 65 70 6c | licateFull.__imp_NtdsInstallRepl |
| 0400 | 69 63 61 74 65 46 75 6c 6c 00 4e 74 64 73 49 6e 73 74 61 6c 6c 43 61 6e 63 65 6c 00 5f 5f 69 6d | icateFull.NtdsInstallCancel.__im |
| 0420 | 70 5f 4e 74 64 73 49 6e 73 74 61 6c 6c 43 61 6e 63 65 6c 00 4e 74 64 73 49 6e 73 74 61 6c 6c 00 | p_NtdsInstallCancel.NtdsInstall. |
| 0440 | 5f 5f 69 6d 70 5f 4e 74 64 73 49 6e 73 74 61 6c 6c 00 4e 74 64 73 47 65 74 44 65 66 61 75 6c 74 | __imp_NtdsInstall.NtdsGetDefault |
| 0460 | 44 6e 73 4e 61 6d 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 47 65 74 44 65 66 61 75 6c 74 44 6e 73 4e | DnsName.__imp_NtdsGetDefaultDnsN |
| 0480 | 61 6d 65 00 4e 74 64 73 46 72 65 65 44 6e 73 52 52 49 6e 66 6f 00 5f 5f 69 6d 70 5f 4e 74 64 73 | ame.NtdsFreeDnsRRInfo.__imp_Ntds |
| 04a0 | 46 72 65 65 44 6e 73 52 52 49 6e 66 6f 00 4e 74 64 73 44 65 6d 6f 74 65 00 5f 5f 69 6d 70 5f 4e | FreeDnsRRInfo.NtdsDemote.__imp_N |
| 04c0 | 74 64 73 44 65 6d 6f 74 65 00 4e 74 64 73 43 68 65 63 6b 4d 61 63 68 69 6e 65 41 63 63 6f 75 6e | tdsDemote.NtdsCheckMachineAccoun |
| 04e0 | 74 46 6c 61 67 73 00 5f 5f 69 6d 70 5f 4e 74 64 73 43 68 65 63 6b 4d 61 63 68 69 6e 65 41 63 63 | tFlags.__imp_NtdsCheckMachineAcc |
| 0500 | 6f 75 6e 74 46 6c 61 67 73 00 4e 74 64 73 41 64 61 6d 56 65 72 69 66 79 42 69 6e 64 00 5f 5f 69 | ountFlags.NtdsAdamVerifyBind.__i |
| 0520 | 6d 70 5f 4e 74 64 73 41 64 61 6d 56 65 72 69 66 79 42 69 6e 64 00 4e 74 64 73 41 64 61 6d 56 61 | mp_NtdsAdamVerifyBind.NtdsAdamVa |
| 0540 | 6c 69 64 61 74 65 53 65 72 76 69 63 65 41 63 63 6f 75 6e 74 00 5f 5f 69 6d 70 5f 4e 74 64 73 41 | lidateServiceAccount.__imp_NtdsA |
| 0560 | 64 61 6d 56 61 6c 69 64 61 74 65 53 65 72 76 69 63 65 41 63 63 6f 75 6e 74 00 4e 74 64 73 41 64 | damValidateServiceAccount.NtdsAd |
| 0580 | 61 6d 56 61 6c 69 64 61 74 65 49 6e 73 74 00 5f 5f 69 6d 70 5f 4e 74 64 73 41 64 61 6d 56 61 6c | amValidateInst.__imp_NtdsAdamVal |
| 05a0 | 69 64 61 74 65 49 6e 73 74 00 46 72 65 65 44 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 5f 5f 69 6d 70 | idateInst.FreeDemotionInfo.__imp |
| 05c0 | 5f 46 72 65 65 44 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 41 64 61 6d 47 65 74 43 72 6f 73 73 52 65 | _FreeDemotionInfo.AdamGetCrossRe |
| 05e0 | 66 73 00 5f 5f 69 6d 70 5f 41 64 61 6d 47 65 74 43 72 6f 73 73 52 65 66 73 00 41 64 61 6d 46 65 | fs.__imp_AdamGetCrossRefs.AdamFe |
| 0600 | 74 63 68 44 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 5f 5f 69 6d 70 5f 41 64 61 6d 46 65 74 63 68 44 | tchDemotionInfo.__imp_AdamFetchD |
| 0620 | 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 64 6d 65 66 62 74 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 | emotionInfo.dmefbt.o/.......1516 |
| 0640 | 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 33 36 20 | 160776..0.....0.....100666..636. |
| 0660 | 20 20 20 20 20 20 60 0a 64 86 06 00 00 00 00 00 24 01 00 00 0f 00 00 00 00 00 05 00 2e 74 65 78 | ......`.d.......$............tex |
| 0680 | 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | t............................... |
| 06a0 | 20 00 50 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..P`.data....................... |
| 06c0 | 00 00 00 00 00 00 00 00 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.P..bss................ |
| 06e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | ..................P..idata$4.... |
| 0700 | 00 00 00 00 08 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 | ........................@.0..ida |
| 0720 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$5............................ |
| 0740 | 40 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 10 00 00 00 14 01 00 00 00 00 00 00 | @.0..idata$7.................... |
| 0760 | 00 00 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 54 44 53 | ........@.0.................NTDS |
| 0780 | 45 54 55 50 2e 64 6c 6c 00 00 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 | ETUP.dll.....file...........g.fa |
| 07a0 | 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | ke...............text........... |
| 07c0 | 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 | .....................data....... |
| 07e0 | 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 | .........................bss.... |
| 0800 | 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 | .............................ida |
| 0820 | 74 61 24 34 00 00 00 00 04 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$4............................ |
| 0840 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 08 00 00 00 00 00 00 00 00 00 00 00 00 00 | .idata$5........................ |
| 0860 | 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 0d 00 00 00 00 00 00 00 00 00 | .....idata$7.................... |
| 0880 | 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 02 00 4a 00 00 00 5f 5f | ..........................J...__ |
| 08a0 | 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 | C__Users_Peter_Code_winapi_rs_x8 |
| 08c0 | 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 5f 69 6e | 6_64_lib_libwinapi_ntdsetup_a_in |
| 08e0 | 61 6d 65 00 64 6d 65 66 62 68 2e 6f 2f 20 20 20 20 20 20 20 31 35 31 36 31 36 30 37 37 36 20 20 | ame.dmefbh.o/.......1516160776.. |
| 0900 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 34 30 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..740.......`. |
| 0920 | 64 86 06 00 00 00 00 00 36 01 00 00 10 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d.......6............text....... |
| 0940 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 50 60 2e 64 61 74 | ..........................P`.dat |
| 0960 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 0980 | 40 00 50 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.P..bss........................ |
| 09a0 | 00 00 00 00 00 00 00 00 80 00 50 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 | ..........P..idata$2............ |
| 09c0 | 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | ................@.0..idata$5.... |
| 09e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 | ........................@.0..ida |
| 0a00 | 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$4............................ |
| 0a20 | 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 00 00 | @.0............................. |
| 0a40 | 03 00 0c 00 00 00 0f 00 00 00 03 00 10 00 00 00 0d 00 00 00 03 00 2e 66 69 6c 65 00 00 00 00 00 | .......................file..... |
| 0a60 | 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 6e 61 6d 65 00 | ......g.fake..............hname. |
| 0a80 | 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 00 00 03 00 2e 74 | ............fthunk.............t |
| 0aa0 | 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ext............................. |
| 0ac0 | 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 | ...data......................... |
| 0ae0 | 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 | .......bss...................... |
| 0b00 | 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 03 01 14 00 00 00 | ...........idata$2.............. |
| 0b20 | 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ...............idata$4.......... |
| 0b40 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 04 00 | .idata$5........................ |
| 0b60 | 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 8e 00 00 00 5f 68 65 61 64 5f | ........H................._head_ |
| 0b80 | 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 | C__Users_Peter_Code_winapi_rs_x8 |
| 0ba0 | 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 5f 5f | 6_64_lib_libwinapi_ntdsetup_a.__ |
| 0bc0 | 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 | C__Users_Peter_Code_winapi_rs_x8 |
| 0be0 | 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 5f 69 6e | 6_64_lib_libwinapi_ntdsetup_a_in |
| 0c00 | 61 6d 65 00 64 6d 65 66 62 73 30 30 30 32 33 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 | ame.dmefbs00023.o/..1516160776.. |
| 0c20 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 30 34 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..704.......`. |
| 0c40 | 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
| 0c60 | 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...d.............0`.dat |
| 0c80 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 0ca0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 0cc0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 0ce0 | 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...n.............0..idata$5.... |
| 0d00 | 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...x.............0..ida |
| 0d20 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@............... |
| 0d40 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
| 0d60 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 0d80 | 00 00 00 00 00 00 00 00 17 00 4e 74 64 73 70 56 65 72 69 66 79 44 73 45 6e 76 69 72 6f 6e 6d 65 | ..........NtdspVerifyDsEnvironme |
| 0da0 | 6e 74 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 | nt.............................. |
| 0dc0 | 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 0de0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 0e00 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 0e20 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 0e40 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 0e60 | 1d 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................<............. |
| 0e80 | 80 00 00 00 4e 74 64 73 70 56 65 72 69 66 79 44 73 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f 5f 69 | ....NtdspVerifyDsEnvironment.__i |
| 0ea0 | 6d 70 5f 4e 74 64 73 70 56 65 72 69 66 79 44 73 45 6e 76 69 72 6f 6e 6d 65 6e 74 00 5f 68 65 61 | mp_NtdspVerifyDsEnvironment._hea |
| 0ec0 | 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | d_C__Users_Peter_Code_winapi_rs_ |
| 0ee0 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 | x86_64_lib_libwinapi_ntdsetup_a. |
| 0f00 | 64 6d 65 66 62 73 30 30 30 32 32 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 | dmefbs00022.o/..1516160776..0... |
| 0f20 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 34 20 20 20 20 20 20 20 60 0a 64 86 07 00 | ..0.....100666..724.......`.d... |
| 0f40 | 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 0f60 | 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...l.............0`.data... |
| 0f80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 0fa0 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 0fc0 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 0fe0 | 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | v.............0..idata$5........ |
| 1000 | 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8.................0..idata$4 |
| 1020 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@.................0. |
| 1040 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 22 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6........"...H........... |
| 1060 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
| 1080 | 00 00 00 00 16 00 4e 74 64 73 70 56 61 6c 69 64 61 74 65 49 6e 73 74 61 6c 6c 50 61 72 61 6d 65 | ......NtdspValidateInstallParame |
| 10a0 | 74 65 72 73 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | ters............................ |
| 10c0 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 10e0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 1100 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 1120 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 1140 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 1160 | 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 | ....#.................H......... |
| 1180 | 00 00 02 00 8c 00 00 00 4e 74 64 73 70 56 61 6c 69 64 61 74 65 49 6e 73 74 61 6c 6c 50 61 72 61 | ........NtdspValidateInstallPara |
| 11a0 | 6d 65 74 65 72 73 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 56 61 6c 69 64 61 74 65 49 6e 73 74 61 6c | meters.__imp_NtdspValidateInstal |
| 11c0 | 6c 50 61 72 61 6d 65 74 65 72 73 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | lParameters._head_C__Users_Peter |
| 11e0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
| 1200 | 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 32 31 2e 6f 2f 20 20 | napi_ntdsetup_a.dmefbs00021.o/.. |
| 1220 | 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160776..0.....0.....100666.. |
| 1240 | 36 37 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 00 | 670.......`.d................... |
| 1260 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 | .text...............,...X....... |
| 1280 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 12a0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 12c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 12e0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...b.............0. |
| 1300 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 | .idata$5............8...l....... |
| 1320 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 1340 | 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | v.............0..idata$6........ |
| 1360 | 10 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 1380 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 4e 74 64 73 70 46 69 6e 64 53 | ......................NtdspFindS |
| 13a0 | 69 74 65 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 | ite............................. |
| 13c0 | 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
| 13e0 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
| 1400 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
| 1420 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
| 1440 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
| 1460 | 12 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 26 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................&............. |
| 1480 | 6a 00 00 00 4e 74 64 73 70 46 69 6e 64 53 69 74 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 46 69 6e | j...NtdspFindSite.__imp_NtdspFin |
| 14a0 | 64 53 69 74 65 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f | dSite._head_C__Users_Peter_Code_ |
| 14c0 | 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e | winapi_rs_x86_64_lib_libwinapi_n |
| 14e0 | 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 32 30 2e 6f 2f 20 20 31 35 31 36 31 36 | tdsetup_a.dmefbs00020.o/..151616 |
| 1500 | 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 34 20 20 20 | 0776..0.....0.....100666..694... |
| 1520 | 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 | ....`.d....................text. |
| 1540 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...`............. |
| 1560 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 1580 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 15a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 15c0 | 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...j.............0..idata |
| 15e0 | 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...t............. |
| 1600 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 | 0..idata$4............@...~..... |
| 1620 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 | ........0..idata$6............H. |
| 1640 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 1660 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 00 4e 74 64 73 70 44 4e 53 74 6f 52 46 43 31 37 37 | ................NtdspDNStoRFC177 |
| 1680 | 39 4e 61 6d 65 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | 9Name........................... |
| 16a0 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 16c0 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 16e0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 1700 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 1720 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 1740 | 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 | ....................6........... |
| 1760 | 02 00 7a 00 00 00 4e 74 64 73 70 44 4e 53 74 6f 52 46 43 31 37 37 39 4e 61 6d 65 00 5f 5f 69 6d | ..z...NtdspDNStoRFC1779Name.__im |
| 1780 | 70 5f 4e 74 64 73 70 44 4e 53 74 6f 52 46 43 31 37 37 39 4e 61 6d 65 00 5f 68 65 61 64 5f 43 5f | p_NtdspDNStoRFC1779Name._head_C_ |
| 17a0 | 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f | _Users_Peter_Code_winapi_rs_x86_ |
| 17c0 | 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 | 64_lib_libwinapi_ntdsetup_a.dmef |
| 17e0 | 62 73 30 30 30 31 39 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 | bs00019.o/..1516160776..0.....0. |
| 1800 | 20 20 20 20 31 30 30 36 36 36 20 20 36 39 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 | ....100666..690.......`.d....... |
| 1820 | 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 1840 | 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...`.............0`.data....... |
| 1860 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 1880 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 18a0 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 | ..0..idata$7............4...j... |
| 18c0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$5............ |
| 18e0 | 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...t.............0..idata$4.... |
| 1900 | 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........@...~.............0..ida |
| 1920 | 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............H............... |
| 1940 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....%.......................... |
| 1960 | 13 00 4e 74 64 73 70 43 6f 6e 66 69 67 52 65 67 69 73 74 72 79 00 00 00 02 00 00 00 08 00 00 00 | ..NtdspConfigRegistry........... |
| 1980 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 19a0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 19c0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 19e0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 1a00 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 1a20 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 18 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 1a40 | 02 00 00 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 02 00 76 00 00 00 4e 74 64 73 70 43 6f 6e | ......2.............v...NtdspCon |
| 1a60 | 66 69 67 52 65 67 69 73 74 72 79 00 5f 5f 69 6d 70 5f 4e 74 64 73 70 43 6f 6e 66 69 67 52 65 67 | figRegistry.__imp_NtdspConfigReg |
| 1a80 | 69 73 74 72 79 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f | istry._head_C__Users_Peter_Code_ |
| 1aa0 | 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e | winapi_rs_x86_64_lib_libwinapi_n |
| 1ac0 | 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 38 2e 6f 2f 20 20 31 35 31 36 31 36 | tdsetup_a.dmefbs00018.o/..151616 |
| 1ae0 | 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 36 20 20 20 | 0776..0.....0.....100666..716... |
| 1b00 | 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 | ....`.d....................text. |
| 1b20 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...h............. |
| 1b40 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 1b60 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 1b80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 1ba0 | 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...r.............0..idata |
| 1bc0 | 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...|............. |
| 1be0 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 86 01 00 00 00 00 | 0..idata$4............@......... |
| 1c00 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 48 01 | ........0..idata$6............H. |
| 1c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 1c40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 00 4e 74 64 73 53 65 74 52 65 70 6c 69 63 61 4d 61 | ................NtdsSetReplicaMa |
| 1c60 | 63 68 69 6e 65 41 63 63 6f 75 6e 74 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 | chineAccount.................... |
| 1c80 | 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 1ca0 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 1cc0 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 1ce0 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 1d00 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 1d20 | 01 00 00 00 02 00 00 00 00 00 21 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 00 00 | ..........!.................D... |
| 1d40 | 00 00 00 00 00 00 00 00 02 00 88 00 00 00 4e 74 64 73 53 65 74 52 65 70 6c 69 63 61 4d 61 63 68 | ..............NtdsSetReplicaMach |
| 1d60 | 69 6e 65 41 63 63 6f 75 6e 74 00 5f 5f 69 6d 70 5f 4e 74 64 73 53 65 74 52 65 70 6c 69 63 61 4d | ineAccount.__imp_NtdsSetReplicaM |
| 1d80 | 61 63 68 69 6e 65 41 63 63 6f 75 6e 74 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 | achineAccount._head_C__Users_Pet |
| 1da0 | 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 | er_Code_winapi_rs_x86_64_lib_lib |
| 1dc0 | 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 37 2e 6f 2f | winapi_ntdsetup_a.dmefbs00017.o/ |
| 1de0 | 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 | ..1516160776..0.....0.....100666 |
| 1e00 | 20 20 37 30 32 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 | ..702.......`.d................. |
| 1e20 | 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 | ...text...............,...d..... |
| 1e40 | 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........0`.data................. |
| 1e60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 | ..............@.0..bss.......... |
| 1e80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 | ........................0..idata |
| 1ea0 | 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 | $7............4...n............. |
| 1ec0 | 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 | 0..idata$5............8...x..... |
| 1ee0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 | ........0..idata$4............@. |
| 1f00 | 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 | ................0..idata$6...... |
| 1f20 | 00 00 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 | ......H....................%.... |
| 1f40 | 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 00 4e 74 64 73 50 72 65 70 | ........................NtdsPrep |
| 1f60 | 61 72 65 46 6f 72 44 73 55 70 67 72 61 64 65 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 | areForDsUpgrade................. |
| 1f80 | 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 | ...........................text. |
| 1fa0 | 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 | .............data..............b |
| 1fc0 | 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 | ss...............idata$7........ |
| 1fe0 | 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 | ...idata$5...........idata$4.... |
| 2000 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$6.................. |
| 2020 | 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 | ................................ |
| 2040 | 3a 00 00 00 00 00 00 00 00 00 00 00 02 00 7e 00 00 00 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 | :.............~...NtdsPrepareFor |
| 2060 | 44 73 55 70 67 72 61 64 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 73 | DsUpgrade.__imp_NtdsPrepareForDs |
| 2080 | 55 70 67 72 61 64 65 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 | Upgrade._head_C__Users_Peter_Cod |
| 20a0 | 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 | e_winapi_rs_x86_64_lib_libwinapi |
| 20c0 | 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 36 2e 6f 2f 20 20 31 35 31 36 | _ntdsetup_a.dmefbs00016.o/..1516 |
| 20e0 | 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 31 32 20 | 160776..0.....0.....100666..712. |
| 2100 | 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 90 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 | ......`.d....................tex |
| 2120 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 | t...............,...h........... |
| 2140 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
| 2160 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
| 2180 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
| 21a0 | 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...r.............0..ida |
| 21c0 | 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...|........... |
| 21e0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 86 01 00 00 | ..0..idata$4............@....... |
| 2200 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 | ..........0..idata$6............ |
| 2220 | 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | H....................%.......... |
| 2240 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 | ..................NtdsPrepareFor |
| 2260 | 44 65 6d 6f 74 69 6f 6e 55 6e 64 6f 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | DemotionUndo.................... |
| 2280 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 22a0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 22c0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 22e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 2300 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 2320 | 00 00 01 00 00 00 02 00 00 00 00 00 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 40 00 | ..............................@. |
| 2340 | 00 00 00 00 00 00 00 00 00 00 02 00 84 00 00 00 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 | ................NtdsPrepareForDe |
| 2360 | 6d 6f 74 69 6f 6e 55 6e 64 6f 00 5f 5f 69 6d 70 5f 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 | motionUndo.__imp_NtdsPrepareForD |
| 2380 | 65 6d 6f 74 69 6f 6e 55 6e 64 6f 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | emotionUndo._head_C__Users_Peter |
| 23a0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
| 23c0 | 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 35 2e 6f 2f 20 20 | napi_ntdsetup_a.dmefbs00015.o/.. |
| 23e0 | 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160776..0.....0.....100666.. |
| 2400 | 37 30 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 0a 00 00 00 00 00 04 00 | 700.......`.d................... |
| 2420 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 64 01 00 00 00 00 00 00 | .text...............,...d....... |
| 2440 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 2460 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 2480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 24a0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...n.............0. |
| 24c0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 78 01 00 00 00 00 00 00 | .idata$5............8...x....... |
| 24e0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 2500 | 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 2520 | 1a 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 2540 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 00 4e 74 64 73 50 72 65 70 61 72 | ......................NtdsPrepar |
| 2560 | 65 46 6f 72 44 65 6d 6f 74 69 6f 6e 00 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 | eForDemotion.................... |
| 2580 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 | .........................text... |
| 25a0 | 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 | ...........data..............bss |
| 25c0 | 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 | ...............idata$7.......... |
| 25e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 | .idata$5...........idata$4...... |
| 2600 | 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 | .....idata$6.................... |
| 2620 | 00 00 01 00 00 00 02 00 00 00 00 00 1b 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 38 00 | ..............................8. |
| 2640 | 00 00 00 00 00 00 00 00 00 00 02 00 7c 00 00 00 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 | ............|...NtdsPrepareForDe |
| 2660 | 6d 6f 74 69 6f 6e 00 5f 5f 69 6d 70 5f 4e 74 64 73 50 72 65 70 61 72 65 46 6f 72 44 65 6d 6f 74 | motion.__imp_NtdsPrepareForDemot |
| 2680 | 69 6f 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 | ion._head_C__Users_Peter_Code_wi |
| 26a0 | 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 | napi_rs_x86_64_lib_libwinapi_ntd |
| 26c0 | 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 34 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 | setup_a.dmefbs00014.o/..15161607 |
| 26e0 | 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 38 20 20 20 20 20 | 76..0.....0.....100666..678..... |
| 2700 | 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d....................text... |
| 2720 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...\.............0` |
| 2740 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 2760 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 2780 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 27a0 | 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...f.............0..idata$5 |
| 27c0 | 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...p.............0. |
| 27e0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 | .idata$4............@...z....... |
| 2800 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 12 00 00 00 48 01 00 00 | ......0..idata$6............H... |
| 2820 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 2840 | 00 00 00 00 00 00 00 00 00 00 00 00 0e 00 4e 74 64 73 49 6e 73 74 61 6c 6c 55 6e 64 6f 00 00 00 | ..............NtdsInstallUndo... |
| 2860 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 2880 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 28a0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 28c0 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 28e0 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 2900 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 14 00 00 00 | ................................ |
| 2920 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2a 00 00 00 00 00 00 00 00 00 00 00 02 00 6e 00 00 00 | ..............*.............n... |
| 2940 | 4e 74 64 73 49 6e 73 74 61 6c 6c 55 6e 64 6f 00 5f 5f 69 6d 70 5f 4e 74 64 73 49 6e 73 74 61 6c | NtdsInstallUndo.__imp_NtdsInstal |
| 2960 | 6c 55 6e 64 6f 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f | lUndo._head_C__Users_Peter_Code_ |
| 2980 | 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e | winapi_rs_x86_64_lib_libwinapi_n |
| 29a0 | 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 33 2e 6f 2f 20 20 31 35 31 36 31 36 | tdsetup_a.dmefbs00013.o/..151616 |
| 29c0 | 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 30 20 20 20 | 0776..0.....0.....100666..690... |
| 29e0 | 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 | ....`.d....................text. |
| 2a00 | 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 | ..............,...`............. |
| 2a20 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
| 2a40 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
| 2a60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 | ................0..idata$7...... |
| 2a80 | 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......4...j.............0..idata |
| 2aa0 | 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 | $5............8...t............. |
| 2ac0 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 | 0..idata$4............@...~..... |
| 2ae0 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 | ........0..idata$6............H. |
| 2b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 | ...................%............ |
| 2b20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 4e 74 64 73 49 6e 73 74 61 6c 6c 53 68 75 74 64 | ................NtdsInstallShutd |
| 2b40 | 6f 77 6e 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 | own............................. |
| 2b60 | 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 | ...............text............. |
| 2b80 | 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 | .data..............bss.......... |
| 2ba0 | 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 | .....idata$7...........idata$5.. |
| 2bc0 | 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$4...........idata |
| 2be0 | 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 | $6.............................. |
| 2c00 | 00 00 18 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 | ....................2........... |
| 2c20 | 02 00 76 00 00 00 4e 74 64 73 49 6e 73 74 61 6c 6c 53 68 75 74 64 6f 77 6e 00 5f 5f 69 6d 70 5f | ..v...NtdsInstallShutdown.__imp_ |
| 2c40 | 4e 74 64 73 49 6e 73 74 61 6c 6c 53 68 75 74 64 6f 77 6e 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 | NtdsInstallShutdown._head_C__Use |
| 2c60 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c | rs_Peter_Code_winapi_rs_x86_64_l |
| 2c80 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 | ib_libwinapi_ntdsetup_a.dmefbs00 |
| 2ca0 | 30 31 32 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 012.o/..1516160776..0.....0..... |
| 2cc0 | 31 30 30 36 36 36 20 20 37 30 34 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 8c 01 00 00 | 100666..704.......`.d........... |
| 2ce0 | 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 2d00 | 64 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | d.............0`.data........... |
| 2d20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 2d40 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 2d60 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6e 01 00 00 00 00 00 00 | .idata$7............4...n....... |
| 2d80 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 2da0 | 78 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | x.............0..idata$4........ |
| 2dc0 | 08 00 00 00 40 01 00 00 82 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....@.................0..idata$6 |
| 2de0 | 00 00 00 00 00 00 00 00 1c 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............H................... |
| 2e00 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 4e 74 | .%............................Nt |
| 2e20 | 64 73 49 6e 73 74 61 6c 6c 52 65 70 6c 69 63 61 74 65 46 75 6c 6c 00 00 02 00 00 00 08 00 00 00 | dsInstallReplicateFull.......... |
| 2e40 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 2e60 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 2e80 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 2ea0 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 2ec0 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 2ee0 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1d 00 00 00 00 00 00 00 05 00 00 00 | ................................ |
| 2f00 | 02 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 02 00 80 00 00 00 4e 74 64 73 49 6e 73 74 | ......<.................NtdsInst |
| 2f20 | 61 6c 6c 52 65 70 6c 69 63 61 74 65 46 75 6c 6c 00 5f 5f 69 6d 70 5f 4e 74 64 73 49 6e 73 74 61 | allReplicateFull.__imp_NtdsInsta |
| 2f40 | 6c 6c 52 65 70 6c 69 63 61 74 65 46 75 6c 6c 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 | llReplicateFull._head_C__Users_P |
| 2f60 | 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c | eter_Code_winapi_rs_x86_64_lib_l |
| 2f80 | 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 31 31 2e | ibwinapi_ntdsetup_a.dmefbs00011. |
| 2fa0 | 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516160776..0.....0.....1006 |
| 2fc0 | 36 36 20 20 36 38 32 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 | 66..682.......`.d............... |
| 2fe0 | 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 | .....text...............,...\... |
| 3000 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 3020 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 3040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 3060 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...f........... |
| 3080 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 | ..0..idata$5............8...p... |
| 30a0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$4............ |
| 30c0 | 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | @...z.............0..idata$6.... |
| 30e0 | 00 00 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........H....................%.. |
| 3100 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 4e 74 64 73 49 6e | ..........................NtdsIn |
| 3120 | 73 74 61 6c 6c 43 61 6e 63 65 6c 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | stallCancel..................... |
| 3140 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 3160 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 3180 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 31a0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 31c0 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 31e0 | 00 00 02 00 00 00 00 00 16 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 | ................................ |
| 3200 | 00 00 00 00 00 00 02 00 72 00 00 00 4e 74 64 73 49 6e 73 74 61 6c 6c 43 61 6e 63 65 6c 00 5f 5f | ........r...NtdsInstallCancel.__ |
| 3220 | 69 6d 70 5f 4e 74 64 73 49 6e 73 74 61 6c 6c 43 61 6e 63 65 6c 00 5f 68 65 61 64 5f 43 5f 5f 55 | imp_NtdsInstallCancel._head_C__U |
| 3240 | 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 | sers_Peter_Code_winapi_rs_x86_64 |
| 3260 | 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 | _lib_libwinapi_ntdsetup_a.dmefbs |
| 3280 | 30 30 30 31 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 | 00010.o/..1516160776..0.....0... |
| 32a0 | 20 20 31 30 30 36 36 36 20 20 36 36 36 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 80 01 | ..100666..666.......`.d......... |
| 32c0 | 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
| 32e0 | 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..X.............0`.data......... |
| 3300 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
| 3320 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
| 3340 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 | 0..idata$7............4...b..... |
| 3360 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 | ........0..idata$5............8. |
| 3380 | 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..l.............0..idata$4...... |
| 33a0 | 00 00 08 00 00 00 40 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......@...v.............0..idata |
| 33c0 | 24 36 00 00 00 00 00 00 00 00 0e 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............H................. |
| 33e0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 | ...%............................ |
| 3400 | 4e 74 64 73 49 6e 73 74 61 6c 6c 00 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 | NtdsInstall..................... |
| 3420 | 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
| 3440 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
| 3460 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
| 3480 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
| 34a0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
| 34c0 | 01 00 00 00 02 00 00 00 00 00 10 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 22 00 00 00 | ............................"... |
| 34e0 | 00 00 00 00 00 00 00 00 02 00 66 00 00 00 4e 74 64 73 49 6e 73 74 61 6c 6c 00 5f 5f 69 6d 70 5f | ..........f...NtdsInstall.__imp_ |
| 3500 | 4e 74 64 73 49 6e 73 74 61 6c 6c 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | NtdsInstall._head_C__Users_Peter |
| 3520 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
| 3540 | 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 30 39 2e 6f 2f 20 20 | napi_ntdsetup_a.dmefbs00009.o/.. |
| 3560 | 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160776..0.....0.....100666.. |
| 3580 | 36 39 34 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 | 694.......`.d................... |
| 35a0 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 | .text...............,...`....... |
| 35c0 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 35e0 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 3600 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 3620 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...j.............0. |
| 3640 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 | .idata$5............8...t....... |
| 3660 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 3680 | 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ~.............0..idata$6........ |
| 36a0 | 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 36c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 4e 74 64 73 47 65 74 44 65 66 | ......................NtdsGetDef |
| 36e0 | 61 75 6c 74 44 6e 73 4e 61 6d 65 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | aultDnsName..................... |
| 3700 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 3720 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 3740 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 3760 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 3780 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 37a0 | 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 36 00 00 00 00 00 | ..........................6..... |
| 37c0 | 00 00 00 00 00 00 02 00 7a 00 00 00 4e 74 64 73 47 65 74 44 65 66 61 75 6c 74 44 6e 73 4e 61 6d | ........z...NtdsGetDefaultDnsNam |
| 37e0 | 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 47 65 74 44 65 66 61 75 6c 74 44 6e 73 4e 61 6d 65 00 5f 68 | e.__imp_NtdsGetDefaultDnsName._h |
| 3800 | 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 | ead_C__Users_Peter_Code_winapi_r |
| 3820 | 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f | s_x86_64_lib_libwinapi_ntdsetup_ |
| 3840 | 61 00 64 6d 65 66 62 73 30 30 30 30 38 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 | a.dmefbs00008.o/..1516160776..0. |
| 3860 | 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 32 20 20 20 20 20 20 20 60 0a 64 86 | ....0.....100666..682.......`.d. |
| 3880 | 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 | ...................text......... |
| 38a0 | 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 | ......,...\.............0`.data. |
| 38c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | ..............................@. |
| 38e0 | 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..bss.......................... |
| 3900 | 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 | ........0..idata$7............4. |
| 3920 | 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 | ..f.............0..idata$5...... |
| 3940 | 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......8...p.............0..idata |
| 3960 | 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 | $4............@...z............. |
| 3980 | 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 | 0..idata$6............H......... |
| 39a0 | 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ...........%.................... |
| 39c0 | 00 00 00 00 00 00 08 00 4e 74 64 73 46 72 65 65 44 6e 73 52 52 49 6e 66 6f 00 02 00 00 00 08 00 | ........NtdsFreeDnsRRInfo....... |
| 39e0 | 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 | ................................ |
| 3a00 | 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 | ...text..............data....... |
| 3a20 | 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 | .......bss...............idata$7 |
| 3a40 | 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 | ...........idata$5...........ida |
| 3a60 | 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 | ta$4...........idata$6.......... |
| 3a80 | 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 16 00 00 00 00 00 00 00 05 00 | ................................ |
| 3aa0 | 00 00 02 00 00 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 02 00 72 00 00 00 4e 74 64 73 46 72 | ......................r...NtdsFr |
| 3ac0 | 65 65 44 6e 73 52 52 49 6e 66 6f 00 5f 5f 69 6d 70 5f 4e 74 64 73 46 72 65 65 44 6e 73 52 52 49 | eeDnsRRInfo.__imp_NtdsFreeDnsRRI |
| 3ae0 | 6e 66 6f 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 | nfo._head_C__Users_Peter_Code_wi |
| 3b00 | 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 | napi_rs_x86_64_lib_libwinapi_ntd |
| 3b20 | 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 30 37 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 | setup_a.dmefbs00007.o/..15161607 |
| 3b40 | 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 36 34 20 20 20 20 20 | 76..0.....0.....100666..664..... |
| 3b60 | 20 20 60 0a 64 86 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 | ..`.d....................text... |
| 3b80 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...X.............0` |
| 3ba0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
| 3bc0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
| 3be0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
| 3c00 | 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...b.............0..idata$5 |
| 3c20 | 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...l.............0. |
| 3c40 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 76 01 00 00 00 00 00 00 | .idata$4............@...v....... |
| 3c60 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0e 00 00 00 48 01 00 00 | ......0..idata$6............H... |
| 3c80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
| 3ca0 | 00 00 00 00 00 00 00 00 00 00 00 00 07 00 4e 74 64 73 44 65 6d 6f 74 65 00 00 00 00 02 00 00 00 | ..............NtdsDemote........ |
| 3cc0 | 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 | ................................ |
| 3ce0 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 3d00 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 3d20 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 3d40 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 3d60 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 0f 00 00 00 00 00 00 00 | ................................ |
| 3d80 | 05 00 00 00 02 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 02 00 64 00 00 00 4e 74 64 73 | ........................d...Ntds |
| 3da0 | 44 65 6d 6f 74 65 00 5f 5f 69 6d 70 5f 4e 74 64 73 44 65 6d 6f 74 65 00 5f 68 65 61 64 5f 43 5f | Demote.__imp_NtdsDemote._head_C_ |
| 3dc0 | 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f | _Users_Peter_Code_winapi_rs_x86_ |
| 3de0 | 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 | 64_lib_libwinapi_ntdsetup_a.dmef |
| 3e00 | 62 73 30 30 30 30 36 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 | bs00006.o/..1516160776..0.....0. |
| 3e20 | 20 20 20 20 31 30 30 36 36 36 20 20 37 31 36 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 | ....100666..716.......`.d....... |
| 3e40 | 90 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 | .............text............... |
| 3e60 | 2c 01 00 00 68 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 | ,...h.............0`.data....... |
| 3e80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 | ........................@.0..bss |
| 3ea0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
| 3ec0 | 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 72 01 00 00 | ..0..idata$7............4...r... |
| 3ee0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$5............ |
| 3f00 | 38 01 00 00 7c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 | 8...|.............0..idata$4.... |
| 3f20 | 00 00 00 00 08 00 00 00 40 01 00 00 86 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........@.................0..ida |
| 3f40 | 74 61 24 36 00 00 00 00 00 00 00 00 20 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ta$6............H............... |
| 3f60 | 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .....%.......................... |
| 3f80 | 06 00 4e 74 64 73 43 68 65 63 6b 4d 61 63 68 69 6e 65 41 63 63 6f 75 6e 74 46 6c 61 67 73 00 00 | ..NtdsCheckMachineAccountFlags.. |
| 3fa0 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 3fc0 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 3fe0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 4000 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 4020 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 4040 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 21 00 00 00 | ............................!... |
| 4060 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 44 00 00 00 00 00 00 00 00 00 00 00 02 00 88 00 00 00 | ..............D................. |
| 4080 | 4e 74 64 73 43 68 65 63 6b 4d 61 63 68 69 6e 65 41 63 63 6f 75 6e 74 46 6c 61 67 73 00 5f 5f 69 | NtdsCheckMachineAccountFlags.__i |
| 40a0 | 6d 70 5f 4e 74 64 73 43 68 65 63 6b 4d 61 63 68 69 6e 65 41 63 63 6f 75 6e 74 46 6c 61 67 73 00 | mp_NtdsCheckMachineAccountFlags. |
| 40c0 | 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 | _head_C__Users_Peter_Code_winapi |
| 40e0 | 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 | _rs_x86_64_lib_libwinapi_ntdsetu |
| 4100 | 70 5f 61 00 64 6d 65 66 62 73 30 30 30 30 35 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 | p_a.dmefbs00005.o/..1516160776.. |
| 4120 | 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38 38 20 20 20 20 20 20 20 60 0a | 0.....0.....100666..688.......`. |
| 4140 | 64 86 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 | d....................text....... |
| 4160 | 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 | ........,...`.............0`.dat |
| 4180 | 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
| 41a0 | 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | @.0..bss........................ |
| 41c0 | 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 | ..........0..idata$7............ |
| 41e0 | 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 | 4...j.............0..idata$5.... |
| 4200 | 00 00 00 00 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........8...t.............0..ida |
| 4220 | 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 | ta$4............@...~........... |
| 4240 | 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 16 00 00 00 48 01 00 00 00 00 00 00 | ..0..idata$6............H....... |
| 4260 | 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 | .............%.................. |
| 4280 | 00 00 00 00 00 00 00 00 05 00 4e 74 64 73 41 64 61 6d 56 65 72 69 66 79 42 69 6e 64 00 00 00 00 | ..........NtdsAdamVerifyBind.... |
| 42a0 | 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 | ................................ |
| 42c0 | 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 | .........text..............data. |
| 42e0 | 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 | .............bss...............i |
| 4300 | 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 | data$7...........idata$5........ |
| 4320 | 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 | ...idata$4...........idata$6.... |
| 4340 | 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 17 00 00 00 | ................................ |
| 4360 | 00 00 00 00 05 00 00 00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 02 00 74 00 00 00 | ..............0.............t... |
| 4380 | 4e 74 64 73 41 64 61 6d 56 65 72 69 66 79 42 69 6e 64 00 5f 5f 69 6d 70 5f 4e 74 64 73 41 64 61 | NtdsAdamVerifyBind.__imp_NtdsAda |
| 43a0 | 6d 56 65 72 69 66 79 42 69 6e 64 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | mVerifyBind._head_C__Users_Peter |
| 43c0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
| 43e0 | 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 30 34 2e 6f 2f 20 20 | napi_ntdsetup_a.dmefbs00004.o/.. |
| 4400 | 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160776..0.....0.....100666.. |
| 4420 | 37 32 34 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 94 01 00 00 0a 00 00 00 00 00 04 00 | 724.......`.d................... |
| 4440 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 6c 01 00 00 00 00 00 00 | .text...............,...l....... |
| 4460 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 4480 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 44a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 44c0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...v.............0. |
| 44e0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 80 01 00 00 00 00 00 00 | .idata$5............8........... |
| 4500 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 4520 | 8a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | ..............0..idata$6........ |
| 4540 | 22 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | "...H....................%...... |
| 4560 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 4e 74 64 73 41 64 61 6d 56 61 | ......................NtdsAdamVa |
| 4580 | 6c 69 64 61 74 65 53 65 72 76 69 63 65 41 63 63 6f 75 6e 74 00 00 00 00 02 00 00 00 08 00 00 00 | lidateServiceAccount............ |
| 45a0 | 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 | ................................ |
| 45c0 | 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 | .text..............data......... |
| 45e0 | 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 | .....bss...............idata$7.. |
| 4600 | 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 | .........idata$5...........idata |
| 4620 | 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 | $4...........idata$6............ |
| 4640 | 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 23 00 00 00 00 00 00 00 05 00 00 00 | ....................#........... |
| 4660 | 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 8c 00 00 00 4e 74 64 73 41 64 61 6d | ......H.................NtdsAdam |
| 4680 | 56 61 6c 69 64 61 74 65 53 65 72 76 69 63 65 41 63 63 6f 75 6e 74 00 5f 5f 69 6d 70 5f 4e 74 64 | ValidateServiceAccount.__imp_Ntd |
| 46a0 | 73 41 64 61 6d 56 61 6c 69 64 61 74 65 53 65 72 76 69 63 65 41 63 63 6f 75 6e 74 00 5f 68 65 61 | sAdamValidateServiceAccount._hea |
| 46c0 | 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f | d_C__Users_Peter_Code_winapi_rs_ |
| 46e0 | 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 | x86_64_lib_libwinapi_ntdsetup_a. |
| 4700 | 64 6d 65 66 62 73 30 30 30 30 33 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 | dmefbs00003.o/..1516160776..0... |
| 4720 | 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 39 32 20 20 20 20 20 20 20 60 0a 64 86 07 00 | ..0.....100666..692.......`.d... |
| 4740 | 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 | .................text........... |
| 4760 | 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 | ....,...`.............0`.data... |
| 4780 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
| 47a0 | 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
| 47c0 | 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 | ......0..idata$7............4... |
| 47e0 | 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 | j.............0..idata$5........ |
| 4800 | 08 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 | ....8...t.............0..idata$4 |
| 4820 | 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............@...~.............0. |
| 4840 | 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 | .idata$6............H........... |
| 4860 | 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .........%...................... |
| 4880 | 00 00 00 00 03 00 4e 74 64 73 41 64 61 6d 56 61 6c 69 64 61 74 65 49 6e 73 74 00 00 02 00 00 00 | ......NtdsAdamValidateInst...... |
| 48a0 | 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 | ................................ |
| 48c0 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
| 48e0 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
| 4900 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
| 4920 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
| 4940 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 19 00 00 00 00 00 00 00 | ................................ |
| 4960 | 05 00 00 00 02 00 00 00 00 00 34 00 00 00 00 00 00 00 00 00 00 00 02 00 78 00 00 00 4e 74 64 73 | ..........4.............x...Ntds |
| 4980 | 41 64 61 6d 56 61 6c 69 64 61 74 65 49 6e 73 74 00 5f 5f 69 6d 70 5f 4e 74 64 73 41 64 61 6d 56 | AdamValidateInst.__imp_NtdsAdamV |
| 49a0 | 61 6c 69 64 61 74 65 49 6e 73 74 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | alidateInst._head_C__Users_Peter |
| 49c0 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 | _Code_winapi_rs_x86_64_lib_libwi |
| 49e0 | 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 30 32 2e 6f 2f 20 20 | napi_ntdsetup_a.dmefbs00002.o/.. |
| 4a00 | 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 | 1516160776..0.....0.....100666.. |
| 4a20 | 36 38 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 00 | 680.......`.d................... |
| 4a40 | 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 | .text...............,...\....... |
| 4a60 | 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......0`.data................... |
| 4a80 | 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 | ............@.0..bss............ |
| 4aa0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 | ......................0..idata$7 |
| 4ac0 | 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............4...f.............0. |
| 4ae0 | 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 | .idata$5............8...p....... |
| 4b00 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 40 01 00 00 | ......0..idata$4............@... |
| 4b20 | 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 | z.............0..idata$6........ |
| 4b40 | 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 | ....H....................%...... |
| 4b60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 46 72 65 65 44 65 6d 6f 74 69 | ......................FreeDemoti |
| 4b80 | 6f 6e 49 6e 66 6f 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 00 00 00 00 | onInfo.......................... |
| 4ba0 | 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 | .................text........... |
| 4bc0 | 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 | ...data..............bss........ |
| 4be0 | 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 | .......idata$7...........idata$5 |
| 4c00 | 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 | ...........idata$4...........ida |
| 4c20 | 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 | ta$6............................ |
| 4c40 | 00 00 00 00 15 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 00 00 00 00 | ......................,......... |
| 4c60 | 00 00 02 00 70 00 00 00 46 72 65 65 44 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 5f 5f 69 6d 70 5f 46 | ....p...FreeDemotionInfo.__imp_F |
| 4c80 | 72 65 65 44 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 | reeDemotionInfo._head_C__Users_P |
| 4ca0 | 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c | eter_Code_winapi_rs_x86_64_lib_l |
| 4cc0 | 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 30 30 31 2e | ibwinapi_ntdsetup_a.dmefbs00001. |
| 4ce0 | 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 | o/..1516160776..0.....0.....1006 |
| 4d00 | 36 36 20 20 36 38 30 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 | 66..680.......`.d............... |
| 4d20 | 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 | .....text...............,...\... |
| 4d40 | 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..........0`.data............... |
| 4d60 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 | ................@.0..bss........ |
| 4d80 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 | ..........................0..ida |
| 4da0 | 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 | ta$7............4...f........... |
| 4dc0 | 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 70 01 00 00 | ..0..idata$5............8...p... |
| 4de0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 08 00 00 00 | ..........0..idata$4............ |
| 4e00 | 40 01 00 00 7a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 | @...z.............0..idata$6.... |
| 4e20 | 00 00 00 00 14 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 | ........H....................%.. |
| 4e40 | 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 41 64 61 6d 47 65 | ..........................AdamGe |
| 4e60 | 74 43 72 6f 73 73 52 65 66 73 00 00 02 00 00 00 08 00 00 00 04 00 00 00 00 00 09 00 00 00 03 00 | tCrossRefs...................... |
| 4e80 | 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 | .....................text....... |
| 4ea0 | 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 | .......data..............bss.... |
| 4ec0 | 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 | ...........idata$7...........ida |
| 4ee0 | 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 | ta$5...........idata$4.......... |
| 4f00 | 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 | .idata$6........................ |
| 4f20 | 00 00 02 00 00 00 00 00 15 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 2c 00 00 00 00 00 | ..........................,..... |
| 4f40 | 00 00 00 00 00 00 02 00 70 00 00 00 41 64 61 6d 47 65 74 43 72 6f 73 73 52 65 66 73 00 5f 5f 69 | ........p...AdamGetCrossRefs.__i |
| 4f60 | 6d 70 5f 41 64 61 6d 47 65 74 43 72 6f 73 73 52 65 66 73 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 | mp_AdamGetCrossRefs._head_C__Use |
| 4f80 | 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c | rs_Peter_Code_winapi_rs_x86_64_l |
| 4fa0 | 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e 74 64 73 65 74 75 70 5f 61 00 64 6d 65 66 62 73 30 30 | ib_libwinapi_ntdsetup_a.dmefbs00 |
| 4fc0 | 30 30 30 2e 6f 2f 20 20 31 35 31 36 31 36 30 37 37 36 20 20 30 20 20 20 20 20 30 20 20 20 20 20 | 000.o/..1516160776..0.....0..... |
| 4fe0 | 31 30 30 36 36 36 20 20 36 39 34 20 20 20 20 20 20 20 60 0a 64 86 07 00 00 00 00 00 88 01 00 00 | 100666..694.......`.d........... |
| 5000 | 0a 00 00 00 00 00 04 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 | .........text...............,... |
| 5020 | 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 | `.............0`.data........... |
| 5040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 | ....................@.0..bss.... |
| 5060 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 | ..............................0. |
| 5080 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 | .idata$7............4...j....... |
| 50a0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 08 00 00 00 38 01 00 00 | ......0..idata$5............8... |
| 50c0 | 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | t.............0..idata$4........ |
| 50e0 | 08 00 00 00 40 01 00 00 7e 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 | ....@...~.............0..idata$6 |
| 5100 | 00 00 00 00 00 00 00 00 18 00 00 00 48 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 | ............H................... |
| 5120 | ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 41 64 | .%............................Ad |
| 5140 | 61 6d 46 65 74 63 68 44 65 6d 6f 74 69 6f 6e 49 6e 66 6f 00 02 00 00 00 08 00 00 00 04 00 00 00 | amFetchDemotionInfo............. |
| 5160 | 00 00 09 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 00 00 00 00 06 00 00 00 03 00 2e 74 65 78 | .............................tex |
| 5180 | 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 | t..............data............. |
| 51a0 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 | .bss...............idata$7...... |
| 51c0 | 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 | .....idata$5...........idata$4.. |
| 51e0 | 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 | .........idata$6................ |
| 5200 | 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1a 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 | ................................ |
| 5220 | 00 00 36 00 00 00 00 00 00 00 00 00 00 00 02 00 7a 00 00 00 41 64 61 6d 46 65 74 63 68 44 65 6d | ..6.............z...AdamFetchDem |
| 5240 | 6f 74 69 6f 6e 49 6e 66 6f 00 5f 5f 69 6d 70 5f 41 64 61 6d 46 65 74 63 68 44 65 6d 6f 74 69 6f | otionInfo.__imp_AdamFetchDemotio |
| 5260 | 6e 49 6e 66 6f 00 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f | nInfo._head_C__Users_Peter_Code_ |
| 5280 | 77 69 6e 61 70 69 5f 72 73 5f 78 38 36 5f 36 34 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 6e | winapi_rs_x86_64_lib_libwinapi_n |
| 52a0 | 74 64 73 65 74 75 70 5f 61 00 | tdsetup_a. |