blob: b98eea9b2edc1537000af3aec82cb5b70b10130e (plain)

ofs	hex dump	ascii
0000	21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 33 38 30 35 37 30 39	!<arch>./...............13805709
0020	32 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 31 37 34 20 20 20 20 20	21..............0.......174.....
0040	20 20 60 0a 00 00 00 07 00 00 01 e6 00 00 04 14 00 00 05 4c 00 00 06 a0 00 00 06 a0 00 00 07 0a	..`................L............
0060	00 00 07 0a 5f 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 5f 6d 69 6d 69 6b 61 74 7a	....__IMPORT_DESCRIPTOR_mimikatz
0080	00 5f 5f 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 00 7f 6d 69 6d 69 6b	.__NULL_IMPORT_DESCRIPTOR..mimik
00a0	61 74 7a 5f 4e 55 4c 4c 5f 54 48 55 4e 4b 5f 44 41 54 41 00 5f 50 53 4d 69 6d 69 6b 61 74 7a 00	atz_NULL_THUNK_DATA._PSMimikatz.
00c0	5f 5f 69 6d 70 5f 5f 50 53 4d 69 6d 69 6b 61 74 7a 00 5f 57 53 74 72 69 6e 67 46 75 6e 63 00 5f	__imp__PSMimikatz._WStringFunc._
00e0	5f 69 6d 70 5f 5f 57 53 74 72 69 6e 67 46 75 6e 63 00 2f 20 20 20 20 20 20 20 20 20 20 20 20 20	_imp__WStringFunc./.............
0100	20 20 31 33 38 30 35 37 30 39 32 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20	..1380570921..............0.....
0120	20 20 31 38 34 20 20 20 20 20 20 20 60 0a 05 00 00 00 e6 01 00 00 14 04 00 00 4c 05 00 00 a0 06	..184.......`.............L.....
0140	00 00 0a 07 00 00 07 00 00 00 04 00 05 00 01 00 02 00 04 00 05 00 03 00 5f 50 53 4d 69 6d 69 6b	........................_PSMimik
0160	61 74 7a 00 5f 57 53 74 72 69 6e 67 46 75 6e 63 00 5f 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49	atz._WStringFunc.__IMPORT_DESCRI
0180	50 54 4f 52 5f 6d 69 6d 69 6b 61 74 7a 00 5f 5f 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43	PTOR_mimikatz.__NULL_IMPORT_DESC
01a0	52 49 50 54 4f 52 00 5f 5f 69 6d 70 5f 5f 50 53 4d 69 6d 69 6b 61 74 7a 00 5f 5f 69 6d 70 5f 5f	RIPTOR.__imp__PSMimikatz.__imp__
01c0	57 53 74 72 69 6e 67 46 75 6e 63 00 7f 6d 69 6d 69 6b 61 74 7a 5f 4e 55 4c 4c 5f 54 48 55 4e 4b	WStringFunc..mimikatz_NULL_THUNK
01e0	5f 44 41 54 41 00 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 2f 20 20 20 31 33 38 30 35 37 30 39 32 31	_DATA.mimikatz.dll/...1380570921
0200	20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39 38 20 20 20 20 20 20 20	..............0.......498.......
0220	60 0a 4c 01 03 00 29 d7 49 52 0e 01 00 00 08 00 00 00 00 00 00 01 2e 64 65 62 75 67 24 53 00 00	`.L...).IR.............debug$S..
0240	00 00 00 00 00 00 42 00 00 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2e 69	......B...................@..B.i
0260	64 61 74 61 24 32 00 00 00 00 00 00 00 00 14 00 00 00 ce 00 00 00 e2 00 00 00 00 00 00 00 03 00	data$2..........................
0280	00 00 40 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 0e 00 00 00 00 01 00 00 e2 00	..@.0..idata$6..................
02a0	00 00 00 00 00 00 00 00 00 00 40 00 20 c0 02 00 00 00 13 00 09 00 00 00 00 00 0c 6d 69 6d 69 6b	..........@................mimik
02c0	61 74 7a 2e 64 6c 6c 27 00 13 10 07 00 00 00 03 00 00 00 00 00 00 00 0a 00 00 00 6f 76 12 4d 69	atz.dll'...................ov.Mi
02e0	63 72 6f 73 6f 66 74 20 28 52 29 20 4c 49 4e 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00	crosoft.(R).LINK................
0300	00 00 00 00 0c 00 00 00 03 00 00 00 07 00 00 00 00 00 04 00 00 00 07 00 10 00 00 00 05 00 00 00	................................
0320	07 00 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 00 00 40 63 6f 6d 70 2e 69 64 6f 76 9c 00 ff ff 00 00	..mimikatz.dll..@comp.idov......
0340	03 00 00 00 00 00 04 00 00 00 00 00 00 00 02 00 00 00 02 00 2e 69 64 61 74 61 24 32 40 00 00 c0	.....................idata$2@...
0360	02 00 00 00 68 00 2e 69 64 61 74 61 24 36 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 34	....h..idata$6...........idata$4
0380	40 00 00 c0 00 00 00 00 68 00 2e 69 64 61 74 61 24 35 40 00 00 c0 00 00 00 00 68 00 00 00 00 00	@.......h..idata$5@.......h.....
03a0	21 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 02 00	!.................:.............
03c0	54 00 00 00 5f 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 5f 6d 69 6d 69 6b 61 74 7a	T...__IMPORT_DESCRIPTOR_mimikatz
03e0	00 5f 5f 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f 52 00 7f 6d 69 6d 69 6b	.__NULL_IMPORT_DESCRIPTOR..mimik
0400	61 74 7a 5f 4e 55 4c 4c 5f 54 48 55 4e 4b 5f 44 41 54 41 00 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c	atz_NULL_THUNK_DATA.mimikatz.dll
0420	2f 20 20 20 31 33 38 30 35 37 30 39 32 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20	/...1380570921..............0...
0440	20 20 20 20 32 35 31 20 20 20 20 20 20 20 60 0a 4c 01 02 00 29 d7 49 52 ba 00 00 00 02 00 00 00	....251.......`.L...).IR........
0460	00 00 00 01 2e 64 65 62 75 67 24 53 00 00 00 00 00 00 00 00 42 00 00 00 64 00 00 00 00 00 00 00	.....debug$S........B...d.......
0480	00 00 00 00 00 00 00 00 40 00 10 42 2e 69 64 61 74 61 24 33 00 00 00 00 00 00 00 00 14 00 00 00	........@..B.idata$3............
04a0	a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 02 00 00 00 13 00 09 00 00 00 00 00	................@.0.............
04c0	0c 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 27 00 13 10 07 00 00 00 03 00 00 00 00 00 00 00 0a 00 00	.mimikatz.dll'..................
04e0	00 6f 76 12 4d 69 63 72 6f 73 6f 66 74 20 28 52 29 20 4c 49 4e 4b 00 00 00 00 00 00 00 00 00 00	.ov.Microsoft.(R).LINK..........
0500	00 00 00 00 00 00 00 00 00 00 40 63 6f 6d 70 2e 69 64 6f 76 9c 00 ff ff 00 00 03 00 00 00 00 00	..........@comp.idov............
0520	04 00 00 00 00 00 00 00 02 00 00 00 02 00 1d 00 00 00 5f 5f 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f	..................__NULL_IMPORT_
0540	44 45 53 43 52 49 50 54 4f 52 00 0a 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 2f 20 20 20 31 33 38 30	DESCRIPTOR..mimikatz.dll/...1380
0560	35 37 30 39 32 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 32 38 30 20	570921..............0.......280.
0580	20 20 20 20 20 20 60 0a 4c 01 03 00 29 d7 49 52 d6 00 00 00 02 00 00 00 00 00 00 01 2e 64 65 62	......`.L...).IR.............deb
05a0	75 67 24 53 00 00 00 00 00 00 00 00 42 00 00 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00	ug$S........B...................
05c0	40 00 10 42 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 ce 00 00 00 00 00 00 00	@..B.idata$5....................
05e0	00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00	........@.0..idata$4............
0600	d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 02 00 00 00 13 00 09 00 00 00 00 00	................@.0.............
0620	0c 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 27 00 13 10 07 00 00 00 03 00 00 00 00 00 00 00 0a 00 00	.mimikatz.dll'..................
0640	00 6f 76 12 4d 69 63 72 6f 73 6f 66 74 20 28 52 29 20 4c 49 4e 4b 00 00 00 00 00 00 00 00 40 63	.ov.Microsoft.(R).LINK........@c
0660	6f 6d 70 2e 69 64 6f 76 9c 00 ff ff 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 02 00 00 00	omp.idov........................
0680	02 00 1e 00 00 00 7f 6d 69 6d 69 6b 61 74 7a 5f 4e 55 4c 4c 5f 54 48 55 4e 4b 5f 44 41 54 41 00	.......mimikatz_NULL_THUNK_DATA.
06a0	6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 2f 20 20 20 31 33 38 30 35 37 30 39 32 31 20 20 20 20 20 20	mimikatz.dll/...1380570921......
06c0	20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff	........0.......45........`.....
06e0	00 00 4c 01 29 d7 49 52 19 00 00 00 00 00 08 00 5f 50 53 4d 69 6d 69 6b 61 74 7a 00 6d 69 6d 69	..L.).IR........_PSMimikatz.mimi
0700	6b 61 74 7a 2e 64 6c 6c 00 0a 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 2f 20 20 20 31 33 38 30 35 37	katz.dll..mimikatz.dll/...138057
0720	30 39 32 31 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20	0921..............0.......46....
0740	20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 29 d7 49 52 1a 00 00 00 01 00 08 00 5f 57 53 74 72 69	....`.......L.).IR........_WStri
0760	6e 67 46 75 6e 63 00 6d 69 6d 69 6b 61 74 7a 2e 64 6c 6c 00	ngFunc.mimikatz.dll.