! / 1516160730 0 0 0 2922 ` \ fjjffjjVV F F#X#X&J&J):):,6,6/&/&225(5(8,8,;;>&>&AAD2D2G"G"JJMMPPRRUUXX[[^^aaddggjjmmppssv|v|yvyv|f|fvvddRR@@..__C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_a_iname_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_aOefsCheckSupport__imp_OefsCheckSupportGetLockSessionWrappedKey__imp_GetLockSessionWrappedKeyGetLockSessionUnwrappedKey__imp_GetLockSessionUnwrappedKeyFeClientInitialize__imp_FeClientInitializeEfsUtilGetCurrentKey__imp_EfsUtilGetCurrentKeyEfsClientWriteFileWithHeaderRaw__imp_EfsClientWriteFileWithHeaderRawEfsClientWriteFileRaw__imp_EfsClientWriteFileRawEfsClientReadFileRaw__imp_EfsClientReadFileRawEfsClientQueryProtectors__imp_EfsClientQueryProtectorsEfsClientOpenFileRaw__imp_EfsClientOpenFileRawEfsClientGetKeyInfo__imp_EfsClientGetKeyInfoEfsClientGetEncryptedFileVersion__imp_EfsClientGetEncryptedFileVersionEfsClientFreeProtectorList__imp_EfsClientFreeProtectorListEfsClientFreeKeyInfo__imp_EfsClientFreeKeyInfoEfsClientFileEncryptionStatus__imp_EfsClientFileEncryptionStatusEfsClientEncryptFileEx__imp_EfsClientEncryptFileExEfsClientDuplicateEncryptionInfo__imp_EfsClientDuplicateEncryptionInfoEfsClientDecryptFile__imp_EfsClientDecryptFileEfsClientCopyFileRaw__imp_EfsClientCopyFileRawEfsClientCloseFileRaw__imp_EfsClientCloseFileRawEdpWriteLogSiteLearningEvents__imp_EdpWriteLogSiteLearningEventsEdpUnprotectFile__imp_EdpUnprotectFileEdpSetCredServiceInfo__imp_EdpSetCredServiceInfoEdpRmsClearKeys__imp_EdpRmsClearKeysEdpQueryRevokedPolicyOwnerIds__imp_EdpQueryRevokedPolicyOwnerIdsEdpQueryDplEnforcedPolicyOwnerIds__imp_EdpQueryDplEnforcedPolicyOwnerIdsEdpQueryCredServiceInfo__imp_EdpQueryCredServiceInfoEdpPurgeAppLearningEvents__imp_EdpPurgeAppLearningEventsEdpGetCredServiceState__imp_EdpGetCredServiceStateEdpGetContainerIdentity__imp_EdpGetContainerIdentityEdpFree__imp_EdpFreeEdpDplUserUnlockStart__imp_EdpDplUserUnlockStartEdpDplUserUnlockComplete__imp_EdpDplUserUnlockCompleteEdpDplUserCredentialsSet__imp_EdpDplUserCredentialsSetEdpDplUpgradeVerifyUser__imp_EdpDplUpgradeVerifyUserEdpDplUpgradePinInfo__imp_EdpDplUpgradePinInfoEdpDplStartCredServiceIfDplEnabledForUser__imp_EdpDplStartCredServiceIfDplEnabledForUserEdpDplPolicyEnabledForUser__imp_EdpDplPolicyEnabledForUserEdpDecontainerizeFile__imp_EdpDecontainerizeFileEdpCredentialQuery__imp_EdpCredentialQueryEdpCredentialExists__imp_EdpCredentialExistsEdpCredentialDelete__imp_EdpCredentialDeleteEdpCredentialCreate__imp_EdpCredentialCreateEdpContainerizeFile__imp_EdpContainerizeFileEdpAllowFileAccessForProcess__imp_EdpAllowFileAccessForProcessdslot.o/ 1516160730 0 0 100666 636 ` d$.text P`.data@P.bssP.idata$4@0.idata$5 @0.idata$7@0FeClient.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7 J__C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_a_inamedsloh.o/ 1516160730 0 0 100666 740 ` d6.text P`.data@P.bssP.idata$2@0.idata$5@0.idata$4@0   .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$5H_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_a__C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_a_inamedslos00044.o/ 1516160730 0 0 100666 680 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %,OefsCheckSupport .text.data.bss.idata$7.idata$5.idata$4.idata$6,pOefsCheckSupport__imp_OefsCheckSupport_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00043.o/ 1516160730 0 0 100666 704 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %+GetLockSessionWrappedKey .text.data.bss.idata$7.idata$5.idata$4.idata$6<GetLockSessionWrappedKey__imp_GetLockSessionWrappedKey_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00042.o/ 1516160730 0 0 100666 712 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %*GetLockSessionUnwrappedKey .text.data.bss.idata$7.idata$5.idata$4.idata$6@GetLockSessionUnwrappedKey__imp_GetLockSessionUnwrappedKey_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00041.o/ 1516160730 0 0 100666 688 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %)FeClientInitialize .text.data.bss.idata$7.idata$5.idata$4.idata$60tFeClientInitialize__imp_FeClientInitialize_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00040.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %(EfsUtilGetCurrentKey .text.data.bss.idata$7.idata$5.idata$4.idata$64xEfsUtilGetCurrentKey__imp_EfsUtilGetCurrentKey_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00039.o/ 1516160730 0 0 100666 726 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H %'EfsClientWriteFileWithHeaderRaw .text.data.bss.idata$7.idata$5.idata$4.idata$6$JEfsClientWriteFileWithHeaderRaw__imp_EfsClientWriteFileWithHeaderRaw_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00038.o/ 1516160730 0 0 100666 694 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %&EfsClientWriteFileRaw .text.data.bss.idata$7.idata$5.idata$4.idata$66zEfsClientWriteFileRaw__imp_EfsClientWriteFileRaw_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00037.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %%EfsClientReadFileRaw .text.data.bss.idata$7.idata$5.idata$4.idata$64xEfsClientReadFileRaw__imp_EfsClientReadFileRaw_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00036.o/ 1516160730 0 0 100666 704 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %$EfsClientQueryProtectors .text.data.bss.idata$7.idata$5.idata$4.idata$6<EfsClientQueryProtectors__imp_EfsClientQueryProtectors_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00035.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %#EfsClientOpenFileRaw .text.data.bss.idata$7.idata$5.idata$4.idata$64xEfsClientOpenFileRaw__imp_EfsClientOpenFileRaw_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00034.o/ 1516160730 0 0 100666 690 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %"EfsClientGetKeyInfo .text.data.bss.idata$7.idata$5.idata$4.idata$62vEfsClientGetKeyInfo__imp_EfsClientGetKeyInfo_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00033.o/ 1516160730 0 0 100666 728 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H %!EfsClientGetEncryptedFileVersion .text.data.bss.idata$7.idata$5.idata$4.idata$6%LEfsClientGetEncryptedFileVersion__imp_EfsClientGetEncryptedFileVersion_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00032.o/ 1516160730 0 0 100666 712 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H % EfsClientFreeProtectorList .text.data.bss.idata$7.idata$5.idata$4.idata$6@EfsClientFreeProtectorList__imp_EfsClientFreeProtectorList_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00031.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EfsClientFreeKeyInfo .text.data.bss.idata$7.idata$5.idata$4.idata$64xEfsClientFreeKeyInfo__imp_EfsClientFreeKeyInfo_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00030.o/ 1516160730 0 0 100666 718 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %EfsClientFileEncryptionStatus .text.data.bss.idata$7.idata$5.idata$4.idata$6"FEfsClientFileEncryptionStatus__imp_EfsClientFileEncryptionStatus_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00029.o/ 1516160730 0 0 100666 700 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %EfsClientEncryptFileEx .text.data.bss.idata$7.idata$5.idata$4.idata$68|EfsClientEncryptFileEx__imp_EfsClientEncryptFileEx_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00028.o/ 1516160730 0 0 100666 728 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H %EfsClientDuplicateEncryptionInfo .text.data.bss.idata$7.idata$5.idata$4.idata$6%LEfsClientDuplicateEncryptionInfo__imp_EfsClientDuplicateEncryptionInfo_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00027.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EfsClientDecryptFile .text.data.bss.idata$7.idata$5.idata$4.idata$64xEfsClientDecryptFile__imp_EfsClientDecryptFile_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00026.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EfsClientCopyFileRaw .text.data.bss.idata$7.idata$5.idata$4.idata$64xEfsClientCopyFileRaw__imp_EfsClientCopyFileRaw_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00025.o/ 1516160730 0 0 100666 694 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EfsClientCloseFileRaw .text.data.bss.idata$7.idata$5.idata$4.idata$66zEfsClientCloseFileRaw__imp_EfsClientCloseFileRaw_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00024.o/ 1516160730 0 0 100666 718 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %EdpWriteLogSiteLearningEvents .text.data.bss.idata$7.idata$5.idata$4.idata$6"FEdpWriteLogSiteLearningEvents__imp_EdpWriteLogSiteLearningEvents_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00023.o/ 1516160730 0 0 100666 680 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %EdpUnprotectFile .text.data.bss.idata$7.idata$5.idata$4.idata$6,pEdpUnprotectFile__imp_EdpUnprotectFile_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00022.o/ 1516160730 0 0 100666 694 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpSetCredServiceInfo .text.data.bss.idata$7.idata$5.idata$4.idata$66zEdpSetCredServiceInfo__imp_EdpSetCredServiceInfo_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00021.o/ 1516160730 0 0 100666 678 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %EdpRmsClearKeys .text.data.bss.idata$7.idata$5.idata$4.idata$6*nEdpRmsClearKeys__imp_EdpRmsClearKeys_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00020.o/ 1516160730 0 0 100666 718 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %EdpQueryRevokedPolicyOwnerIds .text.data.bss.idata$7.idata$5.idata$4.idata$6"FEdpQueryRevokedPolicyOwnerIds__imp_EdpQueryRevokedPolicyOwnerIds_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00019.o/ 1516160730 0 0 100666 730 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H %EdpQueryDplEnforcedPolicyOwnerIds .text.data.bss.idata$7.idata$5.idata$4.idata$6&NEdpQueryDplEnforcedPolicyOwnerIds__imp_EdpQueryDplEnforcedPolicyOwnerIds_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00018.o/ 1516160730 0 0 100666 702 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %EdpQueryCredServiceInfo .text.data.bss.idata$7.idata$5.idata$4.idata$6:~EdpQueryCredServiceInfo__imp_EdpQueryCredServiceInfo_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00017.o/ 1516160730 0 0 100666 706 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %EdpPurgeAppLearningEvents .text.data.bss.idata$7.idata$5.idata$4.idata$6>EdpPurgeAppLearningEvents__imp_EdpPurgeAppLearningEvents_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00016.o/ 1516160730 0 0 100666 700 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %EdpGetCredServiceState .text.data.bss.idata$7.idata$5.idata$4.idata$68|EdpGetCredServiceState__imp_EdpGetCredServiceState_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00015.o/ 1516160730 0 0 100666 702 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %EdpGetContainerIdentity .text.data.bss.idata$7.idata$5.idata$4.idata$6:~EdpGetContainerIdentity__imp_EdpGetContainerIdentity_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00014.o/ 1516160730 0 0 100666 646 ` d| .text,T 0`.data@0.bss0.idata$74^0.idata$58h0.idata$4@r0.idata$6 H %EdpFree .text.data.bss.idata$7.idata$5.idata$4.idata$6EdpFreeV__imp_EdpFree_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00013.o/ 1516160730 0 0 100666 694 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H % EdpDplUserUnlockStart .text.data.bss.idata$7.idata$5.idata$4.idata$66zEdpDplUserUnlockStart__imp_EdpDplUserUnlockStart_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00012.o/ 1516160730 0 0 100666 704 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H % EdpDplUserUnlockComplete .text.data.bss.idata$7.idata$5.idata$4.idata$6<EdpDplUserUnlockComplete__imp_EdpDplUserUnlockComplete_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00011.o/ 1516160730 0 0 100666 704 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H % EdpDplUserCredentialsSet .text.data.bss.idata$7.idata$5.idata$4.idata$6<EdpDplUserCredentialsSet__imp_EdpDplUserCredentialsSet_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00010.o/ 1516160730 0 0 100666 702 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H % EdpDplUpgradeVerifyUser .text.data.bss.idata$7.idata$5.idata$4.idata$6:~EdpDplUpgradeVerifyUser__imp_EdpDplUpgradeVerifyUser_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00009.o/ 1516160730 0 0 100666 692 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H % EdpDplUpgradePinInfo .text.data.bss.idata$7.idata$5.idata$4.idata$64xEdpDplUpgradePinInfo__imp_EdpDplUpgradePinInfo_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00008.o/ 1516160730 0 0 100666 754 ` d .text,t 0`.data@0.bss0.idata$74~0.idata$580.idata$4@0.idata$6,H %EdpDplStartCredServiceIfDplEnabledForUser .text.data.bss.idata$7.idata$5.idata$4.idata$6.^EdpDplStartCredServiceIfDplEnabledForUser__imp_EdpDplStartCredServiceIfDplEnabledForUser_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00007.o/ 1516160730 0 0 100666 712 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %EdpDplPolicyEnabledForUser .text.data.bss.idata$7.idata$5.idata$4.idata$6@EdpDplPolicyEnabledForUser__imp_EdpDplPolicyEnabledForUser_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00006.o/ 1516160730 0 0 100666 694 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpDecontainerizeFile .text.data.bss.idata$7.idata$5.idata$4.idata$66zEdpDecontainerizeFile__imp_EdpDecontainerizeFile_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00005.o/ 1516160730 0 0 100666 688 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpCredentialQuery .text.data.bss.idata$7.idata$5.idata$4.idata$60tEdpCredentialQuery__imp_EdpCredentialQuery_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00004.o/ 1516160730 0 0 100666 690 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpCredentialExists .text.data.bss.idata$7.idata$5.idata$4.idata$62vEdpCredentialExists__imp_EdpCredentialExists_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00003.o/ 1516160730 0 0 100666 690 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpCredentialDelete .text.data.bss.idata$7.idata$5.idata$4.idata$62vEdpCredentialDelete__imp_EdpCredentialDelete_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00002.o/ 1516160730 0 0 100666 690 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpCredentialCreate .text.data.bss.idata$7.idata$5.idata$4.idata$62vEdpCredentialCreate__imp_EdpCredentialCreate_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00001.o/ 1516160730 0 0 100666 690 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %EdpContainerizeFile .text.data.bss.idata$7.idata$5.idata$4.idata$62vEdpContainerizeFile__imp_EdpContainerizeFile_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_adslos00000.o/ 1516160730 0 0 100666 716 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %EdpAllowFileAccessForProcess .text.data.bss.idata$7.idata$5.idata$4.idata$6!DEdpAllowFileAccessForProcess__imp_EdpAllowFileAccessForProcess_head_C__Users_Peter_Code_winapi_rs_x86_64_lib_libwinapi_feclient_a