Edit C:\Windows\System32\efsui.exe
MZ? ?? ? @ ? ? ? ?!?L?!This program cannot be run in DOS mode. $ IU? 4o? 4o? 4o??? 4o??? 4o??? 4o??? 4o? 4n?4o??? 4o??? 4o??? 4o?ich 4o? PE d? ?R ? " P @ ? ? `? ? R ? ` ? @ ? p @ ? ? P .text `.data 0 @ ?.pdata ? @ @ @.idata L P @ @.rsrc ? ` * @ @.reloc j p 2 @ B ?% @ @ ( @ ! @ ?R " t t `0 @ 1 @ / e f s L o c a l \ { A 5 5 C 3 B E E - 5 B F F - 4 c 6 1 - 8 8 3 3 - 3 9 C D 4 6 D 4 9 B C 7 } / s e t k e y / c e r t h a s h / s e l e c t c a r d / p i n p r o m p t / k e y b a c k u p / e n r o l l / i n s t a l l d r a / e n c r y p t m y d o c s % s - % u - % s % s % s % s ? 0 @ @ RSDS%??$WFD?6?k8)? efsui.pdb @SH?0?L> H?$ H??V> H?H?? eH? %` H???> eH? %` ?y H?uH?t/H?hH?`H+?= 0 s H?%?" ?H? ?" H?tH?h? H?%?" H??H?H????H?H?? HB?|$ H??" H?x H? ?" H??" ~!H?H??????= ?u ?$ H?? H??^= 3??0[?????$H?$ UH?H?@? ? ?H??? H?H?%???G= ?? ?? H? H?? !EH?$0 H?$( E3??3??H?H?$ ??; ?u??< ?? ??N? ?? ?D< H?H?u ? ?? H?$0 H?$( 3??D?L?H?H?$ ??; ?? ?U< ?? ??N?? ? ?? H?E3?3?3??; ?? ??N??t?? ??; H?H?????H?E3?3???g; ?? ??N??,D?H? L?3?[ ??x? u?H???: ?H???; H?$h?H?$PH?@]?????? H?$UVWAVAWH?H?0H?H?D?H??????; E3??uCH?8?E3?3??8? ?? D9}8? ?p: ?? 3?h: ? H?H?@???2; ?uA?H????? H?H?3??? ; ?u3H?8?E3?3??8? ??2 D9}8?( ??9 ? H?H?????: ?u\H?8?E3?3??@D?8? ?x8D9}8u2? ?D;?H?H?M???: ?D??@E3???9 H?@?H?H?????T: ?u\H?8?E3?3????HD?8? ?xuD9}8uoL???@H?H3?<9 H?HH?t??9 H???tC??8 ?;H?H?I????9 ?u&H?8?E3?3??8?) ?x D9}8u??8 H?$`H?0A_A^_^]??????H?H?AVH? 3??!H!XH?? ??xEL?$83?3?&9 H?H?u? 9 ?? ??N?? 9 =? u A? ?3??$8 t H?$8??8 H?t H???8 H?$0?H?$@H? A^??????$H?$UVWATAUAVAWH?H?@3??M?D??H?????@H???1 ?? ?t???v}? ?E3?? ? ???7 H?H?u ? ?? L? ????- H?L+?3????H?tA? f?t f?H?H????u H?? ?fD?!?? H??4 ??? H????H??9<Fu????????D?8D;???D???? E?K??H;??????? ?? ? 7 E3??H?u? ??H?$(L???I?D?$ ? H??? ??x7E3??@A?A?I?H?$ D??=6 ?uN?7 ?? ??N????t H???6 M?t I???6 ?H?$? H?@A_A^A]A\_^]?U@? H?b6 L?H?u? ??H?@M?D?A?I?H?$ ??5 ?????H????H??9<Fu????????D?,D;???D???????D?@E?;???D????3???E?K?6H;???????????? ??5 E3??H????L?$(L????I?H?$ L? ???H?? ??x H?HH?8I?H????H???5 ??????H?$UVWH?H?03??3?H!]0!](H!]8?e5 L?0?H???4 ?tvH?0H?(?E3?3??$ ?U4 ?O5 ?zuO?(?@??4 H?H?u? ??D?(H?0H?(L?? H?$ ?4 ?tH?H?8?4 ?u??4 ?? ??N? H?8H!]8H?H?0H?t??4 H?t H???4 H?8H?t??4 ?H?$PH?0_^]????L?$L?$ SUVWH?(3???H?H=???? ?G??x5H??L?$hH?H????4 ?xH?;?uf?,^?f?,^? ??H?tf?.?H?(_^][?????eH?%` L?3??0H?%?4 ????H?%` L?3??0H?%?4 ?????(?Z f9???t3?OHc ???H????H?9PE u??= t= u?3?? v9? ?3?ytv 9? ?? ?? ? ??4 H? ?3 H??H?! H?" ?? ?H? ?3 ?u ?? ?= u H? ? ??3 3??(?????H?8?F D? ; L? ?& H? H? H? ? H?$ ?r3 ?? H?8????H?(? H?(? ???H?$H?$AVH?? ?$ H?$@?=2 ?H?%0 H?3?3?H? B tH;?? ? ? ?2 ??) ?u ? ? ?? ?uQ? L?5G??H? (??H?$8?$0I;? ?u H? H?t??D$0H?H?$8??t? ? ?? ?? ?u H????H? ???? ?? ?u 3??x H?=? t"H? w ? ?tE3??3??^ ????1 H?H?$(?$ ?; wq?; t?uh??< w H???$(??$|?$? A? DE??3?? ??????# ?=< u???1 ?= u ?s1 ?? ??;"u 3?????$ ? ?H1 ?tH???$(H???$(?????? ?=? u ??(1 ?=? u ?1 ?? L?$? I?I?I?A^??????f ? H; Q uH?f???u??? ???H?(H??8csm?#?u ? ??l??v? @?u?K0 ?3??(????H?(H? ?????/ 3??(????%0 ????H?3???H??<?Z f9u*9Q<|%?< s HcA<H??$?8PE HE??H?$?3??$H?H??????SH? ?3? / H?t(H?????H?t? f9H\u??f?\? t?H? [?????%?/ ?????????LcA<E3??L??E?H?I??t ? L;? ??;?A???(E;??3???????H?$WH? H?H?=???H?? ?t"H+??H?????H?t?$? ???3??$0H? _??????????H??Z f9t3?HcH<H?3?9PE u ? f9Q??????$ UH?H? H? H? H?2?-?+ H;?? H??~- H?H???- ?H1E?l- ?H1E?P- ?H?H1E?@- H??H3EH3?? H???- ? H? H?????? H3E H3EH#??3?-?+ H;?D??i H?$HH?H?b H? ]?????3?????%?- ????%?- ????@SH? H?3??, H???, ??, ? ??H? [H?%?, ????H?$H?? H? ? ??- H?? H?$HE3??$PH?$H?|- H?$@H?$@ tBH?$8 H?$XH?$0H?$`H?$(H?{ H?$ L?$@L?$HH?$P3?'- ?#H?? H? H?D H?? H?H?? H?+ H?? H?$? H?? ?s ?m ?w ? Hk? H? o H? ? Hk?H? W H?? H?? Hk?H? < H?? H?? Hk? H? ? H?h? Hk?H? ? H?hH? ??????H?? ????? ????????UH? H?H?H??????? ]???????@UH? H?H?3?8 ???H? ]? R0 t 4 r P 4 R??p`P t 4 2 ? 4 r???? p ` P 4 Rp`P Bp ` P 0 B b t 4 ? ?# ? Y ?% Y 2P " ?# P! ?! ?! 4 2p?# ]" ?" ?% ?" 4 2P 20 2?-?+ ? ??? ? ? ?% ? r ?% x ? & ? < & D N ,& T a D& h ? T& ( ? d& I l& P b d& h ? t& ? ! d& ! ,! d& @! ?! ?& ?! ?! ?& P" ?" ?& ?" ?# ?& ?# $ ?& $ ?% ' ?% ?% ?& ?% ?% ?& ? ? ? W ? ? FW |W ? ? ? ? \W X ? ? ? 8U ? dX FX 4X ,X Y dU VU xX FU (U U U ? $W ? ? ? jV RV HV >V &V V V ? ? ? ? ? ? ? ? ? ~V Y &Y 8Y ? ? P HS xU ? ? ^V 8Q ?T ? ? ? W P ? :W (Q ? ? @P 8S X ?P ? ? ? W ? ? FW |W ? ? ? ? \W X ? ? ? 8U ? dX FX 4X ,X Y dU VU xX FU (U U U ? $W ? ? ? jV RV HV >V &V V V ? ? ? ? ? ? ? ? ? ~V Y &Y 8Y OpenProcessToken oGetTokenInformation { ConvertSidToStringSidW ADVAPI32.dll ?GetCommandLineW ?LocalFree VGetLastError ?LocalAlloc ? CreateMutexW CloseHandle GetCurrentProcess KERNEL32.dll ?_wcsicmp j_vsnwprintf V _XcptFilter ? _amsg_exit ? __getmainargs ? __set_app_type 3exit _exit ? _cexit ?_ismbblead ? __setusermatherr ~_initterm X __C_specific_handler ? _acmdln (_fmode ? _commode msvcrt.dll 0 ?terminate@@YAXXZ ?RtlCaptureContext ]RtlLookupFunctionEntry iRtlVirtualUnwind ntdll.dll @ CertFreeCertificateContext ? CryptStringToBinaryW | CryptBinaryToStringW CRYPT32.dll CommandLineToArgvW SHELL32.dll EfsUIUtilKeyBackup EfsUIUtilEnrollEfsCertificate EfsUIUtilPromptForPin EfsUIUtilShowBalloonAndWait EfsUIUtilSelectCard EfsUIUtilInstallDra EfsUIUtilEncryptMyDocuments EFSADU.dll EfsUtilGetCurrentKey EFSUTIL.dll _Sleep ?GetStartupInfoW PSetUnhandledExceptionFilter mGetModuleHandleW 0QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId ?GetSystemTimeAsFileTime ?GetTickCount ?UnhandledExceptionFilter nTerminateProcess ?RtlFreeHeap ?RtlAllocateHeap ?RtlImageNtHeader ? 8 ? P ? h ? ? ? 8d ? ? ? <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <!-- Copyright (c) Microsoft Corporation --> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"> <assemblyIdentity version="5.1.0.0" processorArchitecture="amd64" name="Microsoft.Windows.EFS.EFSUI" type="win32" /> <description>EFS UI Application</description> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> <security> <requestedPrivileges> <requestedExecutionLevel level="asInvoker" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> <asmv3:application> <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings"> <dpiAware>true</dpiAware> </asmv3:windowsSettings> </asmv3:application> </assembly> ?4 V S _ V E R S I O N _ I N F O ?? @?% @?%? ? S t r i n g F i l e I n f o ? 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n N F i l e D e s c r i p t i o n E F S U I A p p l i c a t i o n r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) , I n t e r n a l N a m e e f s u i ? . L e g a l C o p y r i g h t ? M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . < O r i g i n a l F i l e n a m e e f s u i . e x e j % P r o d u c t N a m e M i c r o s o f t ? W i n d o w s ? O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n ? ??(?0???8??
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de