FYI After seeing this thread I created an advisory case at Microsoft, in order to get some confermation on where to look inside that binary file. The place you are finding the IP adress is indeed the correct location, as confirmed by the MS technichian. But those two keys were never ment to be used for anything other than MS's own debugging, as I have been told directly by one of the engineers behind Windows Deployment Services, so... It's up to you if you wan't to continue to use this information "as is", because it's in the greyzone as to what MS would provide support for, in the event of 'whatnot'.