PDB Symbols - rekeywiz.exe (0x3B934CB9D1196CA92C803FD76C04496936D4AA553F0409F99F835994FCB3A9E7)

Generated by JEB on 2019/08/01

PE: C:\Windows\System32\rekeywiz.exe Base=0x140000000 SHA-256=3B934CB9D1196CA92C803FD76C04496936D4AA553F0409F99F835994FCB3A9E7
PDB: rekeywiz.pdb GUID={0B77E8C2-7B71-88E4-C6F18F691A522DDE} Age=1

367 located named symbols:
0x1400132F8: "__cdecl _imp_CertEnumCertificatesInStore" __imp_CertEnumCertificatesInStore
0x140015FB0: "NtQuerySystemInformation" ??_C@_0BJ@NDLOPGCH@NtQuerySystemInformation?$AA@
0x140007560: "int __cdecl CreateWizard(struct HWND__ * __ptr64,struct HINSTANCE__ * __ptr64)" ?CreateWizard@@YAHPEAUHWND__@@PEAUHINSTANCE__@@@Z
0x14001265C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140005CD0: "__int64 __cdecl SelectCertPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?SelectCertPage@@YA_JPEAUHWND__@@I_K_J@Z
0x140012470: "__cdecl FindPESection" _FindPESection
0x1400133E8: "__cdecl _imp_GetCurrentDirectoryW" __imp_GetCurrentDirectoryW
0x1400022F8: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x140016A28: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x1400168E8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-com-l1-1-0
0x140003D88: "unsigned long __cdecl EfsWizp_RekeyPage_SelectTreeNode(struct HWND__ * __ptr64,struct _TREEITEM * __ptr64,int)" ?EfsWizp_RekeyPage_SelectTreeNode@@YAKPEAUHWND__@@PEAU_TREEITEM@@H@Z
0x140013710: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140018180: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140003B78: "unsigned long __cdecl EfsWizp_RekeyPage_HandleInitDialog(struct HWND__ * __ptr64)" ?EfsWizp_RekeyPage_HandleInitDialog@@YAKPEAUHWND__@@@Z
0x1400134D8: "__cdecl _imp_WNetGetProviderNameW" __imp_WNetGetProviderNameW
0x1400168FC: "__cdecl _IMPORT_DESCRIPTOR_MPR" __IMPORT_DESCRIPTOR_MPR
0x1400169D8: "__cdecl _IMPORT_DESCRIPTOR_EFSUTIL" __IMPORT_DESCRIPTOR_EFSUTIL
0x140013680: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400139C0: "%s\_EFS%d.log" ??_C@_1BM@KAMFGAHI@?$AA?$CF?$AAs?$AA?2?$AA_?$AAE?$AAF?$AAS?$AA?$CF?$AAd?$AA?4?$AAl?$AAo?$AAg?$AA?$AA@
0x140007790: WinMain
0x140013548: "__cdecl _imp_SetFocus" __imp_SetFocus
0x1400128F0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x140013528: SHELL32_NULL_THUNK_DATA
0x140005724: "unsigned long __cdecl EfsWizpGetDefaultCertificate(struct _CERT_CONTEXT const * __ptr64 * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?EfsWizpGetDefaultCertificate@@YAKPEAPEBU_CERT_CONTEXT@@PEAKPEAH@Z
0x140013308: "__cdecl _imp_CertFreeCertificateContext" __imp_CertFreeCertificateContext
0x140013410: "__cdecl _imp_CreateFileW" __imp_CreateFileW
0x140013518: "__cdecl _imp_SHGetFolderPathW" __imp_SHGetFolderPathW
0x1400023D0: "unsigned long __cdecl EfsWizp_FinishPage_HandleInitDialog(struct HWND__ * __ptr64)" ?EfsWizp_FinishPage_HandleInitDialog@@YAKPEAUHWND__@@@Z
0x1400132C0: "__cdecl _imp_PropertySheetW" __imp_PropertySheetW
0x1400135D8: "__cdecl _imp_InvalidateRect" __imp_InvalidateRect
0x140018318: "__cdecl commode" _commode
0x140018A18: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um
0x140002A30: "unsigned long __cdecl EfsWizp_GetNewCertPage_CreateNewSmartcardCert(struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfsWizp_GetNewCertPage_CreateNewSmartcardCert@@YAKPEAUHWND__@@PEAPEBU_CERT_CONTEXT@@PEAK@Z
0x1400139E0: "%TEMP%" ??_C@_1O@JJHLNNN@?$AA?$CF?$AAT?$AAE?$AAM?$AAP?$AA?$CF?$AA?$AA@
0x140013438: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140004770: "unsigned long __cdecl EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_SUBDIRECTORIES_CountFiles(unsigned short const * __ptr64,void * __ptr64)" ?EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_SUBDIRECTORIES_CountFiles@@YAKPEBGPEAX@Z
0x140012350: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x1400137D0: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140013994: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x140018324: "__cdecl fmode" _fmode
0x1400134B8: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x140013640: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x1400123AE: "__cdecl XcptFilter" _XcptFilter
0x1400137D8: "__cdecl _xc_a" __xc_a
0x140013538: "__cdecl _imp_GetFocus" __imp_GetFocus
0x140005F4C: "void __cdecl EfsWizp_Util_Error(struct HWND__ * __ptr64,unsigned long)" ?EfsWizp_Util_Error@@YAXPEAUHWND__@@K@Z
0x1400135B8: "__cdecl _imp_SetWindowLongPtrW" __imp_SetWindowLongPtrW
0x140013670: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x140004E68: "unsigned long __cdecl EfsWizp_RekeyProgressPage_WalkTree(struct HWND__ * __ptr64,struct HWND__ * __ptr64)" ?EfsWizp_RekeyProgressPage_WalkTree@@YAKPEAUHWND__@@0@Z
0x140013470: "__cdecl _imp_FindClose" __imp_FindClose
0x140004770: "unsigned long __cdecl EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_CountFiles(unsigned short const * __ptr64,void * __ptr64)" ?EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_CountFiles@@YAKPEBGPEAX@Z
0x1400055A4: "int __cdecl EfsWizpIsValidCurrentKey(struct _CERT_CONTEXT const * __ptr64,unsigned long)" ?EfsWizpIsValidCurrentKey@@YAHPEBU_CERT_CONTEXT@@K@Z
0x1400132D0: COMCTL32_NULL_THUNK_DATA
0x140006D40: "unsigned long __cdecl EfsWizp_Util_DisplayCertDetails(struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?EfsWizp_Util_DisplayCertDetails@@YAKPEAUHWND__@@PEBU_CERT_CONTEXT@@@Z
0x140013638: api-ms-win-core-heap-l1-1-0_NULL_THUNK_DATA
0x140013400: "__cdecl _imp_SetCurrentDirectoryW" __imp_SetCurrentDirectoryW
0x1400134C0: "__cdecl _imp_FileTimeToLocalFileTime" __imp_FileTimeToLocalFileTime
0x140013328: "__cdecl _imp_CertOpenStore" __imp_CertOpenStore
0x140011EC4: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Reset(void) __ptr64" ?Reset@?$SP@KV?$SP_MEM@K@@@@QEAAXXZ
0x1400135E8: "__cdecl _imp_DestroyIcon" __imp_DestroyIcon
0x1400133D8: "__cdecl _imp_DeleteFileW" __imp_DeleteFileW
0x1400128C2: memcpy
0x140013390: EFSADU_NULL_THUNK_DATA
0x140013558: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x1400070E4: "unsigned long __cdecl EfsWizp_Util_SelectEfsCertificate(struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfsWizp_Util_SelectEfsCertificate@@YAKPEAUHWND__@@PEAPEBU_CERT_CONTEXT@@PEAK@Z
0x140013750: "__cdecl _imp__acmdln" __imp__acmdln
0x140006F94: "unsigned long __cdecl EfsWizp_Util_GetCurrentCertificate(struct _CERT_CONTEXT const * __ptr64 * __ptr64)" ?EfsWizp_Util_GetCurrentCertificate@@YAKPEAPEBU_CERT_CONTEXT@@@Z
0x140001B70: "unsigned long __cdecl EfsWizp_BackupKeyPage_HandleNoButton(struct HWND__ * __ptr64)" ?EfsWizp_BackupKeyPage_HandleNoButton@@YAKPEAUHWND__@@@Z
0x140013A08: "%02X" ??_C@_19HHMHINIL@?$AA?$CF?$AA0?$AA2?$AAX?$AA?$AA@
0x140013730: "__cdecl _imp_memset" __imp_memset
0x14001262F: "__cdecl initterm" _initterm
0x140016974: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140018A40: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x140013588: "__cdecl _imp_SendDlgItemMessageW" __imp_SendDlgItemMessageW
0x1400136D0: "__cdecl _imp_Sleep" __imp_Sleep
0x140013808: "__cdecl _xi_z" __xi_z
0x140013608: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x140013790: "__cdecl _imp_wcscmp" __imp_wcscmp
0x14001263B: "__cdecl _C_specific_handler" __C_specific_handler
0x140013A18: "\MasterKeyHistory" ??_C@_1CE@OIPEEAJG@?$AA?2?$AAM?$AAa?$AAs?$AAt?$AAe?$AAr?$AAK?$AAe?$AAy?$AAH?$AAi?$AAs?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
0x140013990: "*" ??_C@_13BBDEGPLJ@?$AA?$CK?$AA?$AA@
0x140007060: "int __cdecl EfsWizp_Util_CertSelectFilterProc(struct _CERT_CONTEXT const * __ptr64,int * __ptr64,void * __ptr64)" ?EfsWizp_Util_CertSelectFilterProc@@YAHPEBU_CERT_CONTEXT@@PEAHPEAX@Z
0x140013630: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140005C00: "unsigned long __cdecl EfsWizp_SelectCertPage_HandleWizNext(struct HWND__ * __ptr64,unsigned int * __ptr64)" ?EfsWizp_SelectCertPage_HandleWizNext@@YAKPEAUHWND__@@PEAI@Z
0x1400018FC: "unsigned long __cdecl EfsWizp_BackupKeyPage_HandleSetActive(struct HWND__ * __ptr64)" ?EfsWizp_BackupKeyPage_HandleSetActive@@YAKPEAUHWND__@@@Z
0x140016910: "__cdecl _IMPORT_DESCRIPTOR_DSROLE" __IMPORT_DESCRIPTOR_DSROLE
0x140003738: "unsigned char __cdecl EfsWizp_RekeyPage_IsWebDavPath(unsigned short * __ptr64)" ?EfsWizp_RekeyPage_IsWebDavPath@@YAEPEAG@Z
0x140006450: "unsigned long __cdecl EfsWizp_Util_GetCertNameString(struct _CERT_CONTEXT const * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_Util_GetCertNameString@@YAKPEBU_CERT_CONTEXT@@KPEAPEAG@Z
0x140013298: "__cdecl _imp_CryptSetProvParam" __imp_CryptSetProvParam
0x1400132B0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x140013488: "__cdecl _imp_GetVolumeInformationW" __imp_GetVolumeInformationW
0x14001284C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140013418: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x1400137A0: "__cdecl _imp_RtlAllocateHeap" __imp_RtlAllocateHeap
0x140013350: CRYPTUI_NULL_THUNK_DATA
0x140012463: "__cdecl amsg_exit" _amsg_exit
0x140013A40: "SOFTWARE\Microsoft\Windows NT\Cu" ??_C@_1HK@PAHDFBCF@?$AAS?$AAO?$AAF?$AAT?$AAW?$AAA?$AAR?$AAE?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140013B48: "efsadu.dll" ??_C@_1BG@GDAFNMEB@?$AAe?$AAf?$AAs?$AAa?$AAd?$AAu?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400134A8: "__cdecl _imp_GetDateFormatW" __imp_GetDateFormatW
0x140004D00: "unsigned long __cdecl EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_DoRekey(unsigned short const * __ptr64,void * __ptr64)" ?EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_DoRekey@@YAKPEBGPEAX@Z
0x140013720: "__cdecl _imp_exit" __imp_exit
0x14000157C: "unsigned long __cdecl EfsWizp_BackupKeyPage_WriteCertToFile(unsigned short * __ptr64,unsigned short * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?EfsWizp_BackupKeyPage_WriteCertToFile@@YAKPEAG0PEBU_CERT_CONTEXT@@@Z
0x140013338: "__cdecl _imp_CryptUIDlgViewCertificateW" __imp_CryptUIDlgViewCertificateW
0x140006110: "unsigned long __cdecl EfsWizp_Util_WriteBytes(unsigned long,unsigned char * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_Util_WriteBytes@@YAKKPEAEPEAPEAG@Z
0x1400132C8: "__cdecl _imp_TaskDialogIndirect" __imp_TaskDialogIndirect
0x140013620: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140016A00: "__cdecl _IMPORT_DESCRIPTOR_COMDLG32" __IMPORT_DESCRIPTOR_COMDLG32
0x1400137A8: "__cdecl _imp_NtQueryInformationFile" __imp_NtQueryInformationFile
0x140013660: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140001498: "unsigned long __cdecl EfsWizp_BackupKeyPage_UpdateNextButton(struct HWND__ * __ptr64)" ?EfsWizp_BackupKeyPage_UpdateNextButton@@YAKPEAUHWND__@@@Z
0x1400062A4: "unsigned long __cdecl EfsWizp_Util_GetStringFromResourceId(struct HINSTANCE__ * __ptr64,unsigned long,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_Util_GetStringFromResourceId@@YAKPEAUHINSTANCE__@@KPEAPEAG@Z
0x140018A30: "__cdecl _native_startup_lock" __native_startup_lock
0x140013388: "__cdecl _imp_EfsUIUtilEnrollEfsCertificateEx" __imp_EfsUIUtilEnrollEfsCertificateEx
0x140012390: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x1400136F0: "__cdecl _imp__wcsicmp" __imp__wcsicmp
0x140013758: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140002B4C: "unsigned long __cdecl EfsWizp_GetNewCertPage_HandleInitDialog(struct HWND__ * __ptr64)" ?EfsWizp_GetNewCertPage_HandleInitDialog@@YAKPEAUHWND__@@@Z
0x140005520: "__int64 __cdecl RekeyProgressPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?RekeyProgressPage@@YA_JPEAUHWND__@@I_K_J@Z
0x1400136B0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140013658: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x140013320: "__cdecl _imp_CertCloseStore" __imp_CertCloseStore
0x1400134D0: KERNEL32_NULL_THUNK_DATA
0x1400133F0: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140013318: "__cdecl _imp_CertGetNameStringW" __imp_CertGetNameStringW
0x1400139A0: "NTFS" ??_C@_19ENNDBEJL@?$AAN?$AAT?$AAF?$AAS?$AA?$AA@
0x140012828: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140013768: "__cdecl _imp_memcmp" __imp_memcmp
0x140003388: "unsigned long __cdecl EfsWizp_RekeyPage_AddTreeNode(unsigned short const * __ptr64,unsigned short const * __ptr64,struct HWND__ * __ptr64,int,struct _TREEITEM * __ptr64,struct _TREEITEM * __ptr64 * __ptr64)" ?EfsWizp_RekeyPage_AddTreeNode@@YAKPEBG0PEAUHWND__@@HPEAU_TREEITEM@@PEAPEAU2@@Z
0x140013740: "__cdecl _imp__commode" __imp__commode
0x140013778: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x14001685C: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x140013678: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x140013570: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x140004580: "__int64 __cdecl RekeyPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?RekeyPage@@YA_JPEAUHWND__@@I_K_J@Z
0x140012520: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400046E8: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x1400134E8: MPR_NULL_THUNK_DATA
0x1400137B8: "__cdecl _imp_RtlFreeHeap" __imp_RtlFreeHeap
0x140013370: "__cdecl _imp_EfsUIUtilCheckScardStatus" __imp_EfsUIUtilCheckScardStatus
0x1400169B0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x140013580: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x1400135A0: "__cdecl _imp_GetDlgItem" __imp_GetDlgItem
0x140013870: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x140013628: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x140013440: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140013878: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x1400133A0: "__cdecl _imp_EfsUtilGetSmartcardProviderName" __imp_EfsUtilGetSmartcardProviderName
0x1400139F0: "My" ??_C@_15OLMMKIPI@?$AAM?$AAy?$AA?$AA@
0x140018320: "__cdecl newmode" _newmode
0x140013770: "__cdecl _imp__initterm" __imp__initterm
0x140013718: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140011E80: "__cdecl setargv" _setargv
0x140013590: "__cdecl _imp_LoadCursorW" __imp_LoadCursorW
0x140013618: "__cdecl _imp_SetLastError" __imp_SetLastError
0x140013888: "%s %s" ??_C@_1M@MOFLFCEC@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAs?$AA?$AA@
0x140013560: "__cdecl _imp_SetWindowLongW" __imp_SetWindowLongW
0x140013648: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x140006C30: "unsigned long __cdecl EfsWizp_Util_AppendStringToListView(struct HWND__ * __ptr64,unsigned short * __ptr64)" ?EfsWizp_Util_AppendStringToListView@@YAKPEAUHWND__@@PEAG@Z
0x140001D54: "unsigned long __cdecl EfsWizp_BackupKeyPage_HandleWizNext(struct HWND__ * __ptr64,unsigned int * __ptr64)" ?EfsWizp_BackupKeyPage_HandleWizNext@@YAKPEAUHWND__@@PEAI@Z
0x1400065F4: "unsigned long __cdecl EfsWizp_Util_AddCertToNarrowListView(struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?EfsWizp_Util_AddCertToNarrowListView@@YAKPEAUHWND__@@PEBU_CERT_CONTEXT@@@Z
0x140013330: CRYPT32_NULL_THUNK_DATA
0x140013BB0: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x140002700: "unsigned long __cdecl EfsWizp_FinishFailPage_HandleInitDialog(struct HWND__ * __ptr64)" ?EfsWizp_FinishFailPage_HandleInitDialog@@YAKPEAUHWND__@@@Z
0x140018A20: "__cdecl _onexitend" __onexitend
0x1400134B0: "__cdecl _imp_CreateThread" __imp_CreateThread
0x140013728: "__cdecl _imp__exit" __imp__exit
0x1400137C8: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140013460: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x140013668: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400135F0: USER32_NULL_THUNK_DATA
0x1400133A8: "__cdecl _imp_EfsUtilGetCurrentUserInformation" __imp_EfsUtilGetCurrentUserInformation
0x140001C24: "unsigned long __cdecl EfsWizp_BackupKeyPage_HandleBrowseButton(struct HWND__ * __ptr64)" ?EfsWizp_BackupKeyPage_HandleBrowseButton@@YAKPEAUHWND__@@@Z
0x1400133B8: "__cdecl _imp_EfsUtilGetCurrentKey" __imp_EfsUtilGetCurrentKey
0x1400028E0: "__int64 __cdecl FinishFailPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?FinishFailPage@@YA_JPEAUHWND__@@I_K_J@Z
0x140011F04: "public: void __cdecl SH<void * __ptr64,class SH_HANDLE>::Reset(void) __ptr64" ?Reset@?$SH@PEAXVSH_HANDLE@@@@QEAAXXZ
0x1400132D8: "__cdecl _imp_CommDlgExtendedError" __imp_CommDlgExtendedError
0x1400136E8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x1400137F0: "__cdecl _xi_a" __xi_a
0x140013698: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x1400134A0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140011E80: "__cdecl matherr" _matherr
0x140003E9C: "unsigned long __cdecl EfsWizp_RekeyPage_HandleItemExpanding(struct HWND__ * __ptr64,struct tagNMTREEVIEWW * __ptr64)" ?EfsWizp_RekeyPage_HandleItemExpanding@@YAKPEAUHWND__@@PEAUtagNMTREEVIEWW@@@Z
0x1400135D0: "__cdecl _imp_GetMessagePos" __imp_GetMessagePos
0x1400133B0: "__cdecl _imp_EfsUtilGetCertContextFromCertHash" __imp_EfsUtilGetCertContextFromCertHash
0x1400168AC: "__cdecl _IMPORT_DESCRIPTOR_EFSADU" __IMPORT_DESCRIPTOR_EFSADU
0x1400135F8: "__cdecl _imp_CoTaskMemFree" __imp_CoTaskMemFree
0x140013348: "__cdecl _imp_CryptUIWizExport" __imp_CryptUIWizExport
0x140013898: "pfx" ??_C@_17EGKLNFDC@?$AAp?$AAf?$AAx?$AA?$AA@
0x1400138A0: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140016938: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1400169C4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x140013998: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x140013490: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x140013428: "__cdecl _imp_CreateMutexW" __imp_CreateMutexW
0x1400169EC: "__cdecl _IMPORT_DESCRIPTOR_COMCTL32" __IMPORT_DESCRIPTOR_COMCTL32
0x14001699C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l1-1-0
0x140012320: "__cdecl _security_check_cookie" __security_check_cookie
0x140011E9C: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXXZ
0x1400137E8: "__cdecl _xc_z" __xc_z
0x1400135C8: "__cdecl _imp_ScreenToClient" __imp_ScreenToClient
0x140013360: "__cdecl _imp_DsRoleGetPrimaryDomainInformation" __imp_DsRoleGetPrimaryDomainInformation
0x140013688: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x140013650: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x1400139F8: "%02X " ??_C@_1M@OLEMGGOE@?$AA?$CF?$AA0?$AA2?$AAX?$AA?5?$AA?$AA@
0x140013B60: "feclient-EfsEnabled" ??_C@_1CI@BFEHANCK@?$AAf?$AAe?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?9?$AAE?$AAf?$AAs?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?$AA@
0x140013540: "__cdecl _imp_IsWindow" __imp_IsWindow
0x1400133C0: "__cdecl _imp_EfsUtilApplyGroupPolicy" __imp_EfsUtilApplyGroupPolicy
0x140002908: "unsigned long __cdecl EfsWizp_GetNewCertPage_CreateNewSoftwareCert(struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfsWizp_GetNewCertPage_CreateNewSoftwareCert@@YAKPEAUHWND__@@PEAPEBU_CERT_CONTEXT@@PEAK@Z
0x140013738: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x1400137B0: "__cdecl _imp_RtlRandomEx" __imp_RtlRandomEx
0x1400136E0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1400133F8: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140002DF8: "unsigned long __cdecl EfsWizp_GetNewCertPage_HandleWizNext(struct HWND__ * __ptr64,unsigned int * __ptr64)" ?EfsWizp_GetNewCertPage_HandleWizNext@@YAKPEAUHWND__@@PEAI@Z
0x140013430: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x140012910: "__cdecl _chkstk" __chkstk
0x140013578: "__cdecl _imp_GetParent" __imp_GetParent
0x140013468: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x140001008: "unsigned long __cdecl EfsWizp_BackupKeyPage_IsPathValid(struct HWND__ * __ptr64,unsigned short * __ptr64,int * __ptr64)" ?EfsWizp_BackupKeyPage_IsPathValid@@YAKPEAUHWND__@@PEAGPEAH@Z
0x1400020F0: "__int64 __cdecl BackupKeyPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?BackupKeyPage@@YA_JPEAUHWND__@@I_K_J@Z
0x1400032F0: "unsigned long __cdecl EfsWizp_RekeyPage_PromptForPin(struct HWND__ * __ptr64,unsigned short const * __ptr64,unsigned char * __ptr64,unsigned long,unsigned long * __ptr64)" ?EfsWizp_RekeyPage_PromptForPin@@YAKPEAUHWND__@@PEBGPEAEKPEAK@Z
0x1400058AC: "unsigned long __cdecl EfsWizp_SelectCertPage_ChangeSelectedCertificate(struct HWND__ * __ptr64,struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64,unsigned long)" ?EfsWizp_SelectCertPage_ChangeSelectedCertificate@@YAKPEAUHWND__@@0PEBU_CERT_CONTEXT@@K@Z
0x1400134E0: "__cdecl _imp_WNetGetResourceInformationW" __imp_WNetGetResourceInformationW
0x140013300: "__cdecl _imp_CertDuplicateCertificateContext" __imp_CertDuplicateCertificateContext
0x140003170: "__int64 __cdecl GetNewCertPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?GetNewCertPage@@YA_JPEAUHWND__@@I_K_J@Z
0x1400136C8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x140016988: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140005654: "unsigned long __cdecl EfsWizpGetValidCertificate_MyStore(struct _CERT_CONTEXT const * __ptr64 * __ptr64,unsigned long * __ptr64)" ?EfsWizpGetValidCertificate_MyStore@@YAKPEAPEBU_CERT_CONTEXT@@PEAK@Z
0x1400136A8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140013810: "__cdecl _guard_fids_table" __guard_fids_table
0x140013798: msvcrt_NULL_THUNK_DATA
0x140013180: "__cdecl load_config_used" _load_config_used
0x140004D34: "unsigned long __cdecl EfsWizp_RekeyProgressPage_WalkTreeHelper(struct HWND__ * __ptr64,struct _TREEITEM * __ptr64,unsigned long (__cdecl*)(unsigned short const * __ptr64,void * __ptr64),unsigned long (__cdecl*)(unsigned short const * __ptr64,void * __ptr64),void * __ptr64)" ?EfsWizp_RekeyProgressPage_WalkTreeHelper@@YAKPEAUHWND__@@PEAU_TREEITEM@@P6AKPEBGPEAX@Z43@Z
0x140013288: "__cdecl _imp_SetUserFileEncryptionKeyEx" __imp_SetUserFileEncryptionKeyEx
0x140006DC4: "unsigned long __cdecl EfsWizp_Util_GetEncryptionKeyHash(unsigned char * __ptr64 * __ptr64,unsigned long * __ptr64,int * __ptr64)" ?EfsWizp_Util_GetEncryptionKeyHash@@YAKPEAPEAEPEAKPEAH@Z
0x140013AC0: "EncryptionKeyHash" ??_C@_1CE@IAOAECPE@?$AAE?$AAn?$AAc?$AAr?$AAy?$AAp?$AAt?$AAi?$AAo?$AAn?$AAK?$AAe?$AAy?$AAH?$AAa?$AAs?$AAh?$AA?$AA@
0x1400168C0: "__cdecl _IMPORT_DESCRIPTOR_CRYPT32" __IMPORT_DESCRIPTOR_CRYPT32
0x140006214: "unsigned long __cdecl EfsWizp_Util_WriteMsg(unsigned long,unsigned short * __ptr64 * __ptr64,...)" ?EfsWizp_Util_WriteMsg@@YAKKPEAPEAGZZ
0x140016884: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140003FF8: "unsigned long __cdecl EfsWizp_RekeyPage_HandleWizNext(struct HWND__ * __ptr64,unsigned int * __ptr64)" ?EfsWizp_RekeyPage_HandleWizNext@@YAKPEAUHWND__@@PEAI@Z
0x140013480: "__cdecl _imp_GetLogicalDriveStringsW" __imp_GetLogicalDriveStringsW
0x140013708: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400135B0: "__cdecl _imp_MessageBoxExW" __imp_MessageBoxExW
0x1400135C0: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140002278: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1400134C8: "__cdecl _imp_FileTimeToSystemTime" __imp_FileTimeToSystemTime
0x1400136B8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1400136A0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x140006340: "unsigned long __cdecl EfsWizp_Util_FormatDate(struct _FILETIME * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_Util_FormatDate@@YAKPEAU_FILETIME@@PEAPEAG@Z
0x14001831C: "__cdecl dowildcard" _dowildcard
0x1400188B0: g_EfsRekeyWizardContext
0x1400135A8: "__cdecl _imp_EnableWindow" __imp_EnableWindow
0x140013368: DSROLE_NULL_THUNK_DATA
0x140013500: "__cdecl _imp_RpcStringFreeW" __imp_RpcStringFreeW
0x14000657C: "unsigned long __cdecl EfsWizp_Util_InitializeCerListView(struct HWND__ * __ptr64)" ?EfsWizp_Util_InitializeCerListView@@YAKPEAUHWND__@@@Z
0x1400136C0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140013930: "Microsoft Enhanced Cryptographic" ??_C@_1FO@GBKEFGLF@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAE?$AAn?$AAh?$AAa?$AAn?$AAc?$AAe?$AAd?$AA?5?$AAC?$AAr?$AAy?$AAp?$AAt?$AAo?$AAg?$AAr?$AAa?$AAp?$AAh?$AAi?$AAc@
0x1400132E8: COMDLG32_NULL_THUNK_DATA
0x140006CD4: "unsigned long __cdecl EfsWizp_Util_WriteMsgToListView(struct HWND__ * __ptr64,unsigned int)" ?EfsWizp_Util_WriteMsgToListView@@YAKPEAUHWND__@@I@Z
0x140004D20: "unsigned long __cdecl EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_SUBDIRECTORIES_DoRekey(unsigned short const * __ptr64,void * __ptr64)" ?EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_SUBDIRECTORIES_DoRekey@@YAKPEBGPEAX@Z
0x140012650: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x140013408: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1400128B6: memcmp
0x140013478: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x140007418: "void __cdecl EfsWizpFreeWizardContext(void)" ?EfsWizpFreeWizardContext@@YAXXZ
0x1400123BC: RtlpImageNtHeader
0x1400135E0: "__cdecl _imp_SetCursor" __imp_SetCursor
0x140001664: "unsigned long __cdecl EfsWizp_BackupKeyPage_HandleInitDialog(struct HWND__ * __ptr64)" ?EfsWizp_BackupKeyPage_HandleInitDialog@@YAKPEAUHWND__@@@Z
0x1400133C8: EFSUTIL_NULL_THUNK_DATA
0x140013458: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400138C8: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x140013568: "__cdecl _imp_ShowWindow" __imp_ShowWindow
0x140007370: "__int64 __cdecl WelcomePage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?WelcomePage@@YA_JPEAUHWND__@@I_K_J@Z
0x140013700: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140013598: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x140016A14: "__cdecl _IMPORT_DESCRIPTOR_CRYPTUI" __IMPORT_DESCRIPTOR_CRYPTUI
0x1400137C0: ntdll_NULL_THUNK_DATA
0x140013760: "__cdecl _imp_memcpy" __imp_memcpy
0x140013780: "__cdecl _imp__ismbblead" __imp__ismbblead
0x140013550: "__cdecl _imp_GetDlgItemTextW" __imp_GetDlgItemTextW
0x140003228: "long __cdecl EfsWizp_RekeyPage_MessageBox(int * __ptr64)" ?EfsWizp_RekeyPage_MessageBox@@YAJPEAH@Z
0x140011EC4: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_MEM@E@@@@QEAAXXZ
0x140013340: "__cdecl _imp_CryptUIDlgSelectCertificateW" __imp_CryptUIDlgSelectCertificateW
0x140018178: "__cdecl _security_cookie" __security_cookie
0x1400132A8: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x140012910: "__cdecl alloca_probe" _alloca_probe
0x140004900: "unsigned long __cdecl EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_DoRekeyEx(unsigned short const * __ptr64,void * __ptr64,int,int)" ?EfsWizp_RekeyProgressPage_FN_TREEWALK_APPLY_DoRekeyEx@@YAKPEBGPEAXHH@Z
0x140013290: "__cdecl _imp_AddUsersToEncryptedFileEx" __imp_AddUsersToEncryptedFileEx
0x140013448: "__cdecl _imp_GetFullPathNameW" __imp_GetFullPathNameW
0x1400133D0: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x1400133E0: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140018170: "__cdecl _defaultmatherr" __defaultmatherr
0x14001694C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140013600: api-ms-win-core-com-l1-1-0_NULL_THUNK_DATA
0x140003544: "unsigned long __cdecl EfsWizp_RekeyPage_ExpandTreeNode(struct HWND__ * __ptr64,unsigned short * __ptr64,int,struct _TREEITEM * __ptr64,unsigned long * __ptr64)" ?EfsWizp_RekeyPage_ExpandTreeNode@@YAKPEAUHWND__@@PEAGHPEAU_TREEITEM@@PEAK@Z
0x140013AF0: "Local\ba76e584-735b-45d5-ab75-7e" ??_C@_1FG@EGBMJPIA@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAb?$AAa?$AA7?$AA6?$AAe?$AA5?$AA8?$AA4?$AA?9?$AA7?$AA3?$AA5?$AAb?$AA?9?$AA4?$AA5?$AAd?$AA5?$AA?9?$AAa?$AAb?$AA7?$AA5?$AA?9?$AA7?$AAe@
0x140013420: "__cdecl _imp_LoadLibraryW" __imp_LoadLibraryW
0x1400138E0: "Microsoft Software Key Storage P" ??_C@_1FA@OAAKELHB@?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?5?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?5?$AAK?$AAe?$AAy?$AA?5?$AAS?$AAt?$AAo?$AAr?$AAa?$AAg?$AAe?$AA?5?$AAP@
0x140013450: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x140013358: "__cdecl _imp_DsRoleFreeMemory" __imp_DsRoleFreeMemory
0x140006098: "unsigned long __cdecl EfsWizp_Util_WriteSystemMsg(unsigned long,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_Util_WriteSystemMsg@@YAKKPEAPEAG@Z
0x140018A28: "__cdecl _onexitbegin" __onexitbegin
0x1400132F0: "__cdecl _imp_CertSetCertificateContextProperty" __imp_CertSetCertificateContextProperty
0x1400139B0: "__cdecl GUID_43826d1e_e718_42ee_bc55_a1e261c37bfe" _GUID_43826d1e_e718_42ee_bc55_a1e261c37bfe
0x140013BA0: "WinSta0" ??_C@_1BA@IMLGMNLL@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?$AA@
0x1400044BC: "unsigned long __cdecl EfsWizp_RekeyPage_HandleClick(struct HWND__ * __ptr64)" ?EfsWizp_RekeyPage_HandleClick@@YAKPEAUHWND__@@@Z
0x1400136F8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x140013610: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000117C: "unsigned long __cdecl EfsWizp_BackupKeyPage_GetFullFilePath(unsigned short const * __ptr64,unsigned short * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_BackupKeyPage_GetFullFilePath@@YAKPEBGPEAPEAG1@Z
0x1400120B0: WinMainCRTStartup
0x140013380: "__cdecl _imp_EfsUIUtilCreateSelfSignedCertificate" __imp_EfsUIUtilCreateSelfSignedCertificate
0x140016870: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x1400132A0: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x140012554: "__cdecl _security_init_cookie" __security_init_cookie
0x140013788: "__cdecl _imp__cexit" __imp__cexit
0x1400188A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUvuhUivpvbUlyquivUznwGEUkivxlnkOlyq@rekeywiz" __@@_PchSym_@00@KxulyqvxgPillgKxuwhUhvxfirgbUvuhUivpvbUlyquivUznwGEUkivxlnkOlyq@rekeywiz
0x140012418: "__cdecl get_image_app_type" _get_image_app_type
0x14000477C: "unsigned long __cdecl EfsWizp_RekeyProgressPage_AddHashToList(struct _TREEWALK_REKEY_FILES_INFO * __ptr64,unsigned char * __ptr64,unsigned long)" ?EfsWizp_RekeyProgressPage_AddHashToList@@YAKPEAU_TREEWALK_REKEY_FILES_INFO@@PEAEK@Z
0x140016898: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1400128DA: wcscmp
0x140013530: "__cdecl _imp_SetDlgItemTextW" __imp_SetDlgItemTextW
0x140013398: "__cdecl _imp_EfsUtilCheckCurrentKeyCapabilities" __imp_EfsUtilCheckCurrentKeyCapabilities
0x140005290: "unsigned long __cdecl EfsWizp_RekeyProgressPage_GetTempFile(void * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?EfsWizp_RekeyProgressPage_GetTempFile@@YAKPEAPEAXPEAPEAG@Z
0x1400134F8: "__cdecl _imp_UuidToStringW" __imp_UuidToStringW
0x1400132B8: ADVAPI32_NULL_THUNK_DATA
0x140005FD8: "void __cdecl EfsWizp_Util_FatalError(struct HWND__ * __ptr64,unsigned long)" ?EfsWizp_Util_FatalError@@YAXPEAUHWND__@@K@Z
0x140013498: "__cdecl _imp_WriteFile" __imp_WriteFile
0x1400168D4: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x140013508: RPCRT4_NULL_THUNK_DATA
0x140002800: "__int64 __cdecl FinishPage(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?FinishPage@@YA_JPEAUHWND__@@I_K_J@Z
0x140001AB0: "unsigned long __cdecl EfsWizp_BackupKeyPage_HandleYesButton(struct HWND__ * __ptr64)" ?EfsWizp_BackupKeyPage_HandleYesButton@@YAKPEAUHWND__@@@Z
0x1400126A0: "__cdecl _report_gsfailure" __report_gsfailure
0x140005470: "unsigned long __cdecl EfsWizp_RekeyProgressPage_HandleSetActiveThreadProc(void * __ptr64)" ?EfsWizp_RekeyProgressPage_HandleSetActiveThreadProc@@YAKPEAX@Z
0x140011EC4: "public: void __cdecl SP<unsigned short,class SP_MEM<unsigned short> >::Reset(void) __ptr64" ?Reset@?$SP@GV?$SP_MEM@G@@@@QEAAXXZ
0x140005E68: "unsigned long __cdecl EfsWizp_Util_ResourceStringMessageBox(struct HINSTANCE__ * __ptr64,struct HWND__ * __ptr64,unsigned int)" ?EfsWizp_Util_ResourceStringMessageBox@@YAKPEAUHINSTANCE__@@PEAUHWND__@@I@Z
0x140018A38: "__cdecl _native_startup_state" __native_startup_state
0x140013B88: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x140013310: "__cdecl _imp_CertGetCertificateContextProperty" __imp_CertGetCertificateContextProperty
0x140016A3C: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x140013520: "__cdecl _imp_SHCreateItemFromParsingName" __imp_SHCreateItemFromParsingName
0x140013748: "__cdecl _imp__fmode" __imp__fmode
0x1400134F0: "__cdecl _imp_UuidCreate" __imp_UuidCreate
0x140013378: "__cdecl _imp_EfsUIUtilPromptForPinDialog" __imp_EfsUIUtilPromptForPinDialog
0x140013690: "__cdecl _imp_GetProcessMitigationPolicy" __imp_GetProcessMitigationPolicy
0x140016960: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140011EC4: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Reset(void) __ptr64" ?Reset@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXXZ
0x140013510: "__cdecl _imp_ShellExecuteW" __imp_ShellExecuteW
0x1400132E0: "__cdecl _imp_GetSaveFileNameW" __imp_GetSaveFileNameW
0x1400124C0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1400136D8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x1400059A0: "unsigned long __cdecl EfsWizp_SelectCertPage_HandleInitDialog(struct HWND__ * __ptr64)" ?EfsWizp_SelectCertPage_HandleInitDialog@@YAKPEAUHWND__@@@Z
0x140016924: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1400128CE: memset
0x140016A50: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x1400069C8: "unsigned long __cdecl EfsWizp_Util_AddCertToListView(struct HWND__ * __ptr64,struct _CERT_CONTEXT const * __ptr64)" ?EfsWizp_Util_AddCertToListView@@YAKPEAUHWND__@@PEBU_CERT_CONTEXT@@@Z

[JEB Decompiler by PNF Software]