I found an article on nt4 that explains dumpexam does this but I haven’t been able to verify this for w2k.