MZ @ !L!This program cannot be run in DOS mode.
$ OX q q q ֎+
q q gq ֎- q ֎( q ֎,
q ֎5 q ֎/
q ֎*
q Rich q PE L R ! N F ` ; @ [ p X \ p R .text M N `.data p ` R @ .idata p T @ @.rsrc \ @ @.reloc
` @ B 1R D R $ \ \ a ha api-ms-win-security-lsalookup-l1-1-1.dll api-ms-win-security-sddl-l1-1-0.dll CRYPTSP.dll DSROLE.dll NTDSAPI.dll WinSCard.dll CRYPT32.dll ncrypt.dll R e q u i r e V a l i d E K U I m p l T y p e S m a r t C a r d P i n S O F T W A R E \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ E F S 2.5.29.37.0 1.3.6.1.4.1.311.10.3.4 P r i m i t i v e T y p e A l g o r i t h m N a m e E C D H _ P 2 5 6 E C D H _ P 3 8 4 E C D H _ P 5 2 1 R S A S O F T W A R E \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ E F S \ C u r r e n t K e y s C a p a b i l i t i e s P r o v i d e r H a n d l e E x p o r t P o l i c y L e n g t h A l g o r i t h m G r o u p K e y U s a g e E C D H C e r t i f i c a t e H a s h N u m B a c k u p A t t e m p t s M y 2.5.29.19 1.3.6.1.4.1.311.20.2.3 2.5.29.7 2.5.29.17 , L = E F S , O U = E F S F i l e E n c r y p t i o n C e r t i f i c a t e @ C N = 1.2.840.10045.4.3.4 1.3.6.1.4.1.311.10.3.4.1 2.5.29.37 T r u s t e d P e o p l e S m a r t C a r d K e y C e r t i f i c a t e cJmG bޝ>M I C R O S O F T T E S T E F S M I C R O S O F T T E S T E F S M I C R O S O F T T E S T E F S M I C R O S O F T T E S T E F S M I C R O S O F T T E S T E F S T e m p l a t e N a m e S u i t e B A l g o r i t h m E f s C o n f i g u r a t i o n E f s O p t i o n s C a c h e T i m e o u t R S A K e y L e n g t h E F S S O F T W A R E \ P o l i c i e s \ M i c r o s o f t \ W i n d o w s N T \ C u r r e n t V e r s i o n \ E F S \ ` RSDSR*4VN҉̖ efsutil.pdb ZL U}" t} t
}0 t33@] ̋U SV5,` EW3PQjuMىMMօu
Dp MA# uj_ EPSjuօtjY# t9{u&j sEP` uS EF!};E t3u jsPEP`` u
Dp !>EF!}E03t" } t j uh` } t u` t" _^[] ̋UVut1W39>t9~t v` 9~t
Wvh` ~=" _^] ̋UQQEVW} 3uu7ujW^/MVQM90t-jQh@ p` u Et _^] QjpE l` uDp ̋U ` 3ʼnEU 3SVW} 9t4ʍqff;u+3PM PRhT w` fRPp Dž 3PPPp y Pp 3Pj wp` uDp 3Ɉ@KuM_^3[. ] ̋U SV3WډUUUUUE!3҉EPRRh Qt` jYVEMPEPQux` M } " }uj E= v&j(( Y fE+E;wߋ}Ph( R6 j Wju` tHEP3PPPju` t0M t} sjXEPVj j ju` u
Dp 7j j@@p E?j VP5 E M Ej
[} t u` t4 tMƅt @Iu _^[] ̋UQQe EPEE Pj h h hp h pp 39E]̋UVM3EWu0EPVVQ(` u
Dp MSh uj^ EPSVu(` u
Dp yƉu9vMKj h PE4 u3Gjh u4 tEK@E;r3@93uE0Et 8 [_^]̋UV3WEu0EPA Vh @8uPjuu$` u
Dp S ` EVPjEPh uӅxO}t
} VEPVVh uӅx*M uj^}VEPuWh uӅy Pp [ 8p Vjh0 jWӃt;VjhD jWӃt)VjhX jWӃtVjhl jWӃu
3@jXM[} t u` t _^]̋U VW3MEQVujP7,` u
Dp ~MS* uj^iEPSju,` u
Dp DCt tu{u "9su MU u }u @ [_^]̋U$U3ҋMSډEVEEWUuU}]9uUIEPUȉMuBM܍EPUIuȋE]}MEu(;u VSW1 u
3@ u}EMtDžt @NuWEFEFEF !}!}33t ^} t u|` } t"} t }u u` j uh` _[] ̋UU 3MS]VEEEEEWPuuC9uTPEE PEPjv d` u
Dp } t } $ u.33tV _^[] U u9Euҿ ̋UQE3VW} QM9M QtOjMQh p` u+PE PjEPh@ u` u Et _^] ME Qjpl` uDp ̋UVutEW39>u%9~ t v |` ~ 9~t Wvh` ~9~t v` ~ _^] ̋UQQVW3EVPE791t jPh0 q` u3E%Pjq E d` u
Dp Et _^]̋UQV3E2VP91tjRhL q` Rj q E d` uDp ^]̋USV3EW093 VEPVVh\ s` M Euj_ VMQuPh\ s` ugVEPjEPh| s` uHEMtB ff;u ft fXf;Zu
fuuE M _^[]̋U@SV3MuЉE։uމuȉuuĉuủuԉu܉UW} tE@ EetMUEEu9]t%U UEu33CA9}tg9}tt]t tR!}EjPE3p h ` uDp ujXDp
E(tjEW ؋EtMUh9 ]ԋEt;UEMPs! }UЋ E9utt^u UEMP0 }39u8u2QEMPQQjQw E% ` t3@E3t E tOtEPW1EPh unQ EPu; } Et@@tEp j 0` Euˀ yHu UEMPY }? u ŰS } r E tC@u>u UEMP }Uȋu{E9ut t#UJ APA0P24` Et t7uUEMPuE}Uċu9Et EtWE܅tP*_^[] }̋UU M t
UujWXuh] ̋U ESV3uuWu x MQh VPStp u EuPVh uxp ux}u79utm9uthEE PuEPVh uxp u
}t; 4u/EPE h 0u uuuh VtSp } t up tV8` _^[] ̋UQES3ۉ]Vu x SURSh SSSPQp uRWu =|p ujSh uu1jEPjSh uujE]PjSh u_9]t up ^[] ̋UQQSVWh u3SSj
<` u
Dp =E EESEEPh SjW@` ȅu
Dp ESWD` _^[] ̋UQVE3PVuuj$jH` u
Dp RWuj@@p uj^:EPWuj$jH` u
Dp MEE 8tW
FE E3FE EDt
8 t0
tMurE @p 3ɄF jF I j@NӉFt h| jZjj@ӉFuj_h0 j
ZE03tq_^[]̋U SVU3W]]t EÉ] F]E t t%E~ = < w F`' ;vsjXNi` EtYQff;u+M Pj@@p ȉMuj[ VBEff;u+UvBx\Nt]Qff;u+M Pj@@p ȉMuj(VBEff;u+UvByj
u[JMEuEME M8E9 t6
t>Ћ\d
Xd ;uE 9MtMډE Pp 3ۉ=Xd Y=\d C`d =dd 9} 3 3 3C9] d 3} `d PU;t h p U3u] 9=dd j_t j 1h h dd ) YYuh h v Y=dd } Yu3=ld t hld Yt
uWuld a _^[] ̋U} uq ]* ̋Ucsm9Eu
u P YY]3]j,h8R E 3uE w ` } u=a uu E t hd tFE } u
a uu uЉE M EQPMYYËe3uu} E uu u(E M EQP
YYËe3uu} q E uu uE M EQPYYËe3uu} } E VVujM EQPYYËe3uE VVumM EQPRYYËe3uhd t,E VVuM EQP YYËe3uE t E uu uE M EQPYYËe3uuhd t?=a t6E uu uЉE M EQPYYËe3uuE E } w
` ̋UVu3utу;u r^];
` u %p %p ̋UE3SVWH<AYt} p ;r H;r
B(;r3_^[]̋UjhR hZL d PSVW` 1E3PEd eE h tTE- Ph Pt:@$ ЃEMd
Y_^[]ËE 3Ɂ8 ËeE3Md
Y_^[]̋UEMZ f9t3]ËH<39PE u f9Q]̋Ue e ` VWN@ ;t
t У` jEP p E3EEdp 1Ehp 1Ep 3EM3EEPp E3EM3;t5` uO@
` щ
` _^]%p hZL d5 D$l$l$+SVW` 1E3PeuEEEEd ËMd
Y__^[]Q̋Uuuu uhI h` N ]̋Uj p up h `p PPp ]̋U$ b
b b b 5b =b f0b f
$b f b fa f%a f-a (b E b E b E,b ha b $a a a (a jXk ǀ,a jX
` ,a jX
` ,a jXk
` LjX
` LhX ]%p ̸` QRPhR ZY̸` QRPhR ZY̸`` QRPhS ZY̸h` ̸l` ̸p` ̸t` ̸x` ̸` ̸` ̸` w̸` h̸` Y̸|` J̸d` ;̸X` ,̸\` ̸` QRPh4S ZY̸` ̸` QRPhTS g ZY̸` ̸` ̸` ̸` QRPhtS ZY̸` ̸` ̸` ̸` ̸` ̸` ̸,` QRPhS ZY̸(` ̸$` ̸ ` ̸P` ̸0` ̸4` ̸8` ̸<` w̸@` h̸D` Y̸H` J̸L` ;̸` ,̸` ̸ ` ̸` ̸` QRPhS ZY̸` ̸` ̸` ̸` ̸` ̸ a ̸a ̸a w̋Uj u hQ 5 uh ] %Hp %0p %p %p %p xI G G G G
H H PH dH H H H H H I BI VI J J ` 4d ` T Y 8d ` T Z * [ [ \ <\ ^\ s\ \ \ \ \ \ ] *] A] W] l] ]
EFSUTIL.dll EfsUtilApplyGroupPolicy EfsUtilCheckCurrentKeyCapabilities EfsUtilCreateSelfSignedCertificate EfsUtilGetCertContextFromCertHash EfsUtilGetCurrentKey EfsUtilGetCurrentKey_Deprecated EfsUtilGetCurrentUserInformation EfsUtilGetProvider EfsUtilGetSmartcardProviderName EfsUtilGetUserKey EfsUtilIsSmartcardKey EfsUtilIsSmartcardProvider EfsUtilReleaseProvider EfsUtilReleaseUserKey EfsUtilSetCurrentKey EfsUtilSetSmartcardPin EfsUtilSmartcardCredsNeededError N@D Q P Q Q \P MP >P P zP P P P P P P P kP N O N N BN QN `N oN ~N N N N N N N O 9O HO mO |O O
P O O O O O O M M .Q SQ bQ qQ Q Q Q Q Q u u ru Xu >u 6u *u u u t t t u t t t t |t u s xs s s s s s r r s Bs 0s "s Bt 0t u 4r zr br Xr Pr Br v v r r r q nr p r r p q Ts pp q t Pp q Xt p `q u p u u ru Xu >u 6u *u u u t t t u t t t t |t u s xs s s s s s r r s Bs 0s "s Bt 0t u 4r zr br Xr Pr Br v v r r r q _XcptFilter _amsg_exit free malloc _initterm msvcrt.dll l_except_handler4_common RtlInitUnicodeString 5RtlUnicodeStringToAnsiString nRtlNtStatusToDosError ntdll.dll RegGetValueW RegOpenKeyExW ! RegQueryValueExW RegCloseKey RegCreateKeyExW ( RegSetValueExW api-ms-win-core-registry-l1-1-0.dll , OpenThreadToken GetCurrentThread * OpenProcessToken GetCurrentProcess GetCurrentProcessId GetCurrentThreadId ? TerminateProcess api-ms-win-core-processthreads-l1-1-2.dll & DuplicateToken @ GetTokenInformation api-ms-win-security-base-l1-2-0.dll OGetLastError LocalAlloc LocalFree CompareStringOrdinal GetSystemTime WSystemTimeToFileTime \FileTimeToSystemTime CloseHandle .HeapAlloc GetProcessHeap 2HeapFree LSleep *QueryPerformanceCounter GetSystemTimeAsFileTime GetTickCount |UnhandledExceptionFilter =SetUnhandledExceptionFilter KERNEL32.dll DelayLoadFailureHook ResolveDelayLoadedAPI
memcmp memcpy memset 0 H ` 4 V S _ V E R S I O N _ I N F O @% @%? S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n P F i l e D e s c r i p t i o n E F S U t i l i t y L i b r a r y r ) F i l e V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 ( w i n b l u e _ r t m . 1 3 0 8 2 1 - 1 6 2 3 ) 8 I n t e r n a l N a m e E F S U T I L . D L L . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . @ O r i g i n a l F i l e n a m e E F S U T I L . D L L j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m B P r o d u c t V e r s i o n 6 . 3 . 9 6 0 0 . 1 6 3 8 4 D V a r F i l e I n f o $ T r a n s l a t i o n 00X0\0<7@7H778f88888'98999999(:1:A:n:y:::;#;j;;;;;;<@<<<<<< =&=@=\===
>>?>i>y>>>>>>>&?0?X?b? z000001!1h1r11112 222 33(313c3m333333 4'4`4i4~4444455"565P6Z6i6477t8K9d9~9999: :*:X:u:::::::
;;:;F;W;;;;;;; < <>>>?F?q?|??? 0 0,0a0m0~00001 2:2}222223\333+4444445*5a5k555556,6?6T6y666@7G7M7o7v7777778,8S8c88888;9h9:^::::;M;r;y;;;;;;;<<%=4=L=Y=q========>M>n>>>&?]?~? @ @ V00 141I1T1t111111112
2262z22334444455>5X5m5z55555555
6$6>6Q6V6\6l6q6}66666
7(747U7l789$99999H:M:_:}:::Y;t;;;;;;;;;;; >0>C>R>a>p>>>>>>>>>>??'?:?I?[?n?}????????? P x 00,0?0N0]0l0{00000000011 1/1A1T1c1r111111111122 2(2P2X2\2d2h2p2t2|222222222222 ` x 000 0 0$0(0,0004080<0@0D0H0L0P0X0\0`0d0h0l0p0t0x0|000000000000000000000000000 111