HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/nltest.exe.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!>

`�?@ D:8.rdata�@@.rsrc@ <@@�@�m
T88�@�m$��8.rdata8x.rdata$zzzdbg 0.rsrc$010#�Q.rsrc$02 �=���w5�~���7���gZ�=�`���@�m(�(�@�����
r��s�t�u0�vH�w`�xx�y��z��{��|��}��~� �8HXhx��������0#���#���8V�;���=���?��xB��E���G��I���J���L��|N��,U^��V��MUI���� ]JL��W9V�}s�vB��&%b��c�����MUIzh-TWY	O(u�e_: nltest [/OPTIONS]





    /SERVER:<ServerName> - c�[ <ServerName>



    /QUERY - �gb� <ServerName> netlogon 
g�R

    /REPL - 7_6R(W <ServerName> BDC 
N2�L��RTek

    /SYNC - 7_6R(W <ServerName> BDC 
N2�L��[teTek

    /PDC_REPL - 7_6R UAS ���f�O� <ServerName> PDC �v
�o`



    /SC_QUERY:<DomainName> - �gb� <ServerName> 
N <Domain> �v�[hQ�S�

    /SC_RESET:<DomainName>[\<DcName>] - \ <ServerName> 
N <Domain> �v�[hQ�S�͑-��p <DcName>

    /SC_VERIFY:<DomainName> - W�I� <ServerName> 
N <Domain> �v�[hQ�S�

    /SC_CHANGE_PWD:<DomainName> - ���f <ServerName> 
N <Domain> �v�[hQ�S��[�x

    /DCLIST:<DomainName> - �S�_ <DomainName> �v DC n�U

    /DCNAME:<DomainName> - �S�_ <DomainName> �v PDC 
T1z

    /DSGETDC:<DomainName> - |T�S DsGetDcName /PDC /DS /DSP /GC /KDC

        /TIMESERV /GTIMESERV /WS /NETBIOS /DNS /IP /FORCE /WRITABLE /AVOIDSELF /LDAPONLY /BACKG /DS_6 /DS_8 /DS_9 /DS_10

        /KEYLIST /TRY_NEXT_CLOSEST_SITE /SITE:<SiteName> /ACCOUNT:<AccountName> /RET_DNS /RET_NETBIOS

    /DNSGETDC:<DomainName> - |T�S DsGetDcOpen/Next/Close /PDC /GC

        /KDC /WRITABLE /LDAPONLY /FORCE /SITESPEC

    /DSGETFTI:<DomainName> - |T�S DsGetForestTrustInformation

        /UPDATE_TDO

    /LSAQUERYFTI:<TrustedForest> - |T�S LsaQueryForestTrustInformation

    /DSGETSITE - |T�S DsGetSiteName

    /DSGETSITECOV - |T�S DsGetDcSiteCoverage

    /DSADDRESSTOSITE:[MachineName] - |T�S DsAddressToSiteNamesEx

        /ADDRESSES:<Address1,Address2,...>

    /PARENTDOMAIN - �S�_���f��v6r�|�}�W
T1z

    /WHOWILL:<Domain>* <User> [<Iteration>] - �gw <User> /f&T�S{veQ <Domain>

    /FINDUSER:<User> - �gw <User> �S{veQ�T�N�O�N�}�W

    /TRANSPORT_NOTIFY - ��w netlogon 	g�e�v�P8�



    /DBFLAG:<HexFlags> - �e�vuP/��ej



    /USER:<UserName> - �gb� <ServerName> 
N�vO(u�nj
�



    /TIME:<Hex LSL> <Hex MSL> - \ NT GMT Bf��I��c�p ASCII

    /LOGON_QUERY - �gb�/}Mz�vVf�{veQ!kxe

    /DOMAIN_TRUSTS - �gb� <ServerName> 
N�v�}�W�O�N

        /PRIMARY /FOREST /DIRECT_OUT /DIRECT_IN /ALL_TRUSTS /V

    /DSREGDNS - 7_6R{v�@b	g DC yr�[ DNS ��

    /DSDEREGDNS:<DnsHostName> - �d�{v�@bc�[ DC �v DC yr�[ DNS ��

        /DOM:<DnsDomainName> /DOMGUID:<DomainGuid> /DSAGUID:<DsaGuid>

    /DSQUERYDNS - �gb�@b	g DC yr�[ DNS ���vg�_�f�e�rKa



    /BDC_QUERY:<DomainName> - �gb� <DomainName> �v BDC ��[�rKa



    /LIST_DELTAS:<FileName> - o�:y@bc�[���f���j�vgQ�[ 



    /CDIGEST:<Message> /DOMAIN:<DomainName> - �S�_(u6b�zXd��

    /SDIGEST:<Message> /RID:<RID in hex> - �S�_:O
ghVXd��



    /SHUTDOWN:<Reason> [<Seconds>] - �V�p <Reason>�\ <ServerName> ܕ��

    /SHUTDOWN_ABORT - -Nbk�|q}ܕ_j



(NULL)


Nck�x�v 0x%lX

%wZ

!q�l\Bf���_ GMT I��c0R,g0WBf��

/

*** �[JT1YWe: %hs%hs

***   �O�n�jHh: %hs�,{ %ld L�



!q�l���S���N�i (%hs) : %ld

!q�l�)RI{P5_���N�N %ld

!q�l�)RI{PYPir�N %ld


Nck�x�v WaitStatus �P�V %ld


!q�l���S͑�u�v�V�a %ld�V�a %ld: 	VR�g�V�aBf1YWe: �V�a
N/ff}ck�x�vO(u�
T1z %ws��ar�/f %ws

S:%ws D:%ws A:%ws	 (~b0RL��R)

PA
 (~b
N0RL��R)

 (netlogon �]�f\P)

 (
Nf�v opcode: %lx)

    9j�r�v�: %ws

    �}�W:  %ws


    ;N_j: %ws

    �ej: 0x%lx

�l	g�c6e0R���N
�o` %ld �v�V�a (%hs)

$c�[
Nck�x�v NetBIOS �}�Wb:O
ghV
T1z '%ws' (*Yw�)

͑���vxe�v-��p 64��/f/e�c�vg'Yxe�v

!q�lR�YShQ�WRpS͑��@S�k

!q�l GetComputerName

!q�l�^�z�fX[���N�i %ld

!q�l-��[���N�inj
� %ld

!q�l�^�z5_���N�N %ld 

!q�l�^�z�V�a�WL��} %ld

PA!q�lM�n���N�i
�o` %ld

!q�l�[eQ netlogon ���N�i: %ld

!q�l-��[5_���N�N %ld 

!q�lI{P�UNir�N %ld

!q�l\Pbk�V�a�WL��} (TIMEOUT) 

!q�l\Pbk�V�a�WL��} %ld 

���N
�o` %ld �P�b�R (%hs) 

!q�l��_Uёp��O���f DACL %hs P[_j�x %hs !q�l�S�_ %hs P[_j�x %hs �vёp��[hQ'` �[hQ'`�c�CQ'Y\*Y'Y


!q�lM�n&NR�YS SID !q�l�S�_ %hs P[_j�x %hs �v DACL �[hQ'`�c�CQ %hs P[_j�x %hs �v DACL 
NX[(W !q�l�S�_ %hs P[_j�x %hs �v ACL nj
� !q�l�S�_ ACE %ld (%hs P[_j�x %hs) �l	g %hs P[_j�x %hs �v�|q}�{t�T ACE

!q�l-��[ %hs P[_j�x %hs �vёp��[hQ'` !q�l��_U %hs P[_j�x %hs DACL ���f�_�vёp� $!q�l RegSetKeySecurity ���S %hs P[_j�x %hs !q�l#��}0R %ws 
N�v{v� 	!q�l��_U %hs:	!q�l�gb� %hs:	!q�l-��[ %hs:��xenj�e desc %ld 
N(W��xe<P-N0

��xenj�e��v %ld 
N(W��xe<P-N0

MO�y: %ld w��^: %ld 'Y\: %ld

!q�l��[ LM �[�x: PA!q�l��[ NT �[�x: 
%hs -��[�p %hs


��_U
g�R�c6R�{t�T1YWe: ��_U
g�R [%ws] 1YWe: R	��OX[�v
g�R [\Pbk %ws] 1YWe: �c6R
g�R [\Pbk %ws] 1YWe: 
%ws 
g�Rck(W\Pbk

�gb�
g�R�rKa [%ws] 1YWe: %ws 
g�R!q�l\Pbk

~b
N0R�S�S�_ DC n�U�v DC03�}�W '%ws' /fMRHr�v Windows 2000 �}�W0(O(u NetServerEnum)0

 �S�_�}�W '%ws' (�_ '%ws') -N�v DC n�U0

1�`�l	g DsBind 0R %ws (%ws) �vX[�S
k (Vf� NetServerEnum)0

!q�l DsBind 0R %ws (%ws)0,!q�l|T�S DsGetDomainControllerInfoW 0R %ws (%ws)0 �z�S: %ws%ws �v��aԚM�n1YWe

!MO@W %hs �v WSAStringToAddressA 1YWe0 WSAAddressToStringA 1YWe0!q�l�S�_ %hs �vMO@W0 
!q�l�S�_,g_j��f��vMO@W0 !q�lR�YS Winsock: �S�_ DC 
T1z1YWe: \MO@WI�o�b�z�S
T1z1YWe:  

�S�_ '%hs' (�_ '%hs') �v�z�SP[�}�
\�a0



�_ '%hs' �S�_,g_j��f��v�z�SP[�}�
\�a0



�_ '%hs' �S�_�z�SP[�}�
\�a0

!q�l�S�_�[�x�}o� CSP (/���=%lu)

��aԚ
N��

/SHUTDOWN �v,{�NP_xe: �_�/fxeW[0



	:O
ghV
T1z!qHe

I_NetLogonControl 1YWe: �ej: %lx#��} vQ-NNP DC yr�[�v DNS ��(W
N!k�f�eBf1YWe

@b	g DC yr�[�v DNS ��(W
N!k�f�eBf��b�R

�}�W
T1z: %ws

�S�O�N DC 
T1z %ws 

�S�O�N DC #��}�rKa �O�NW�I� �]Vf��v{veQ!kxe: %ld

�[�x�v NtOwf ��{1YWe: 0x%lxNT OWF �[�xf}: %hs             LM OWF �[�xf}: %hs                 ----- �[�x�l	g�_ Unicode I�o� ----

NT OWF �[�x�R�[�e_: 0x%lx    LM OWF �[�x�R�[�e_: 0x%lx    �R�[+T	g"}_�v NtOwf �P�V 0x%lx

PANetGetDCName 1YWe: �}�W %ws �v PDC /f %ws

           DC: %ws

      MO@W: %ws

     �}�W Guid: %ws

     �}�W
T1z: %ws


  9j�|
T1z: %ws

 DC �z�S
T1z: %ws

bP�v�z�S
T1z: %ws

        �ej: NDNC PDC GC DS LDAP KDC	 TIMESERV
 GTIMESERV	 WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE PARTIAL_SECRET FULL_SECRET�S�_9j�|�O�Nnj
�1YWe: 
TLN: %wZ

�}�W: %wZ (%wZ)



Nck�x�v^��W: %ld

I_NetGetDCList 1YWe: �}�W %ws -N�v DC n�U

    %wZ    NULL (PDC):O
ghV : %ws

	I_NetLogonControl 1YWe: 
	SyncState :  IN_SYNC 

 REPLICATION_IN_PROGRESS 

 REPLICATION_NEEDED 

 UNKNOWN 

	#��}�rKa : 
w��Y�|q}ܕ_j1YWe: AbortSystemShutdown 1YWe: 
R	��}�W�O�N1YWe: 
�}�W�O�N�vn�U:

�S�_ DC �z�S�m˄�{
W1YWe: 
�S�_6r�|�}�W1YWe: /���: c�[
Nck�x�v�}�W GUID

/���: c�[
Nck�x�v DSA GUID

�d�{v� DNS ;N_j��1YWe: ���Y DC R	�1YWe: �N[��d��_j��^�na SRV *QHQ��^�
k͑�v DC n�U:

�z�Syr�[:

^��z�Syr�[:

f�JT: c�[�v^��W�l	g�S(u�v��

/���: DNS :O
ghV1YWe: /���: DNS �gb�c�Q��S��f�*g-��[ IP

/���: DNS �gb�1YWe: 
�S�_�O�N RID 1YWe: ��{(u6b�zXd��1YWe: ��{:O
ghVXd��1YWe: 3^6b RID: 0x%lx

�eXd��: 
�Xd��: }T�Nb�R�[b

�    /BP - 7_6R(W <ServerName> 
N Netlogon O(u BreakPoint

    /TRUNC - *b�e���j (͑�e}T
T�p *.bak)

    /UNLOAD - �_ lsass.exe �d�	�eQ netlogon.dll

    /PWD:<CleartextPassword> - c�[���R�[�v�[�x

    /RID:<HexRid> - ���R�[�[�x�v RID



    /ADD_SA:<Name> - �Nc�[�v3^6b
T1z|T�S NetAddServiceAccount

        /LINKONLY - �R
N�ej�N�S#�P}�s	g�v3^6b�
NVf��^�z

        /PWD:<ClearPassword> - ��ݑ
\ RODC �e�X�v�[�x

    /DEL_SA:<Name> - �Nc�[�v3^6b
T1z|T�S NetRemoveSserviceAccount

        /LINKONLY - �R
N�ej�N�_
g�R3^6b�S�m#�P}dk��f���
N��*Rd�

        /LOCALONLY - �R
N�ej�N�S�yd�,g_j3^6bnj�n��
N��(W DC 
N2�L��NUO���f

    /ENUM_SA - |T�S NetEnumerateServiceAccounts 
    /QUERY_SA:<Name> - �Nc�[�v3^6b
T1z|T�S NetQueryServiceAccount

    /IS_SA:<Name> - �Nc�[�v3^6b
T1z|T�S NetIsServiceAccount



 FULL_SYNC  PARTIAL_SYNC  REPLICATION_IN_PROGRESS REPLICATION_NEEDED REDO_NEEDED HAS_IP  HAS_TIMESERV  WS*gc�[�Sxe0ˊO(u /? �S�_}T�NR�Sxe�v��f0
 DS_8K��{(u6b�z=|�z1YWe: K��{:O
ghV=|�z1YWe: PA�e=|�z:


�=|�z:

�[�xܖJn<h_: 0x%lx

 DS_9 DS_10 KEYLIST!q�l#��}0Rc�[:O
ghV
N�v LSA nj�e�^

!q�l�gb�@bc�[�S�O�N9j�|

�v9j�|�O�Nnj
��c�c: %wZ (%wZ) Sid:%wZ �ej:0x%x

!q�l��X��v�N2�MO��: w��^:0x%x(%d)

�`�_�c�[�O�N9j�|�v
T1z

PA�4VS_VERSION_INFO��
4aJ
4aJ?StringFileInfo�040404B0LCompanyNameMicrosoft CorporationfFileDescriptionMicrosoft� Logon Server ,nf�lQ(uz_n'FileVersion10.0.19041.3636 (WinBuild.160101.0800):
InternalNamenltestrk.exe�.LegalCopyright� Microsoft Corporation. All rights reserved.JOriginalFilenamenltestrk.exe.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.3636DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD