Generated by JEB on 2019/08/01

PE: C:\Windows\System32\fveprompt.exe Base=0x140000000 SHA-256=4156D60544639CC6B06E229372D61F50B6BEF46121040E5BFD31639D9C3AA14B
PDB: fveprompt.pdb GUID={1C27A059-E54B-D0BF-F5F915107AF49311} Age=1

326 located named symbols:
0x140010D40: "NtQuerySystemInformation" ??_C@_0BJ@NDLOPGCH@NtQuerySystemInformation?$AA@
0x14000E768: "help" ??_C@_19FCEHBCGP@?$AAh?$AAe?$AAl?$AAp?$AA?$AA@
0x14000D178: "__cdecl _raise_securityfailure" __raise_securityfailure
0x14000CFA0: "__cdecl FindPESection" _FindPESection
0x14000E1B0: "const CVolumeListener::`vftable'" ??_7CVolumeListener@@6B@
0x14000C320: "struct HBITMAP__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateDIBSection(struct HDC__ * __ptr64,struct tagBITMAPINFO const * __ptr64,unsigned int,void * __ptr64 * __ptr64,void * __ptr64,unsigned long)" ?CreateDIBSection@WARBIRD_DELAY_LOAD@@YAPEAUHBITMAP__@@PEAUHDC__@@PEBUtagBITMAPINFO@@IPEAPEAXPEAXK@Z
0x14000E550: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140013180: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140001340: "public: class BuiVolume & __ptr64 __cdecl BuiVolume::operator=(class BuiVolume const & __ptr64) __ptr64" ??4BuiVolume@@QEAAAEAV0@AEBV0@@Z
0x14000E3E0: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x14000E448: "__cdecl _imp_RegisterApplicationRestart" __imp_RegisterApplicationRestart
0x14000BC0C: WinMain
0x14000C438: "long __cdecl NgscbLaunchHelpWindow(unsigned short const * __ptr64)" ?NgscbLaunchHelpWindow@@YAJPEBG@Z
0x14000D4B0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x14000E4B0: SHELL32_NULL_THUNK_DATA
0x14000C320: "struct HDC__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetDC(struct HWND__ * __ptr64)" ?GetDC@WARBIRD_DELAY_LOAD@@YAPEAUHDC__@@PEAUHWND__@@@Z
0x1400010A0: "public: bool __cdecl VolumeFveStatus::HasPassphraseProtector(void)const __ptr64" ?HasPassphraseProtector@VolumeFveStatus@@QEBA_NXZ
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::EnumDisplaySettingsW(unsigned short const * __ptr64,unsigned long,struct _devicemodeW * __ptr64)" ?EnumDisplaySettingsW@WARBIRD_DELAY_LOAD@@YAHPEBGKPEAU_devicemodeW@@@Z
0x14000E460: "__cdecl _imp_CommandLineToArgvW" __imp_CommandLineToArgvW
0x140013318: "__cdecl commode" _commode
0x140013930: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um" __@@_PchSym_@00@KxulyqvxgPillgKxunrmrlUhvxfirgbUorxvmhrmtUhkxzooUoryUyfrowPxorvmgPfnUlyquivUznwGEUhgwzucOlyq@spcall_client_um
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetObjectW(void * __ptr64,int,void * __ptr64)" ?GetObjectW@WARBIRD_DELAY_LOAD@@YAHPEAXH0@Z
0x14000C320: "void * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetCurrentObject(struct HDC__ * __ptr64,unsigned int)" ?GetCurrentObject@WARBIRD_DELAY_LOAD@@YAPEAXPEAUHDC__@@I@Z
0x14000E440: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x14000C320: "struct HBRUSH__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateSolidBrush(unsigned long)" ?CreateSolidBrush@WARBIRD_DELAY_LOAD@@YAPEAUHBRUSH__@@K@Z
0x14000CE80: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x14000E5E8: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140013324: "__cdecl fmode" _fmode
0x14000E300: "__cdecl _imp_?ManagementRequiresElevation@BuiVolume@@QEBA_NXZ" __imp_?ManagementRequiresElevation@BuiVolume@@QEBA_NXZ
0x14000E430: "__cdecl _imp_FormatMessageW" __imp_FormatMessageW
0x14000E388: "__cdecl _imp_GetModuleHandleExW" __imp_GetModuleHandleExW
0x14000E750: FOLDERID_ComputerFolder
0x1400131A0: "unsigned char * `WarbirdUmGetEncryptionCipher'::`2'::EncryptionCipher" ?EncryptionCipher@?1??WarbirdUmGetEncryptionCipher@@9@4PAEA
0x14000CEDE: "__cdecl XcptFilter" _XcptFilter
0x14000E5F0: "__cdecl _xc_a" __xc_a
0x14000E408: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::InvalidateRect(struct HWND__ * __ptr64,struct tagRECT const * __ptr64,int)" ?InvalidateRect@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEBUtagRECT@@H@Z
0x14000E338: COMCTL32_NULL_THUNK_DATA
0x1400138A0: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmthxyUxlimvihglmvUuevkilnkgUlyquivUznwGEUkivxlnkOlyq@fveprompt" __@@_PchSym_@00@KxulyqvxgPillgKxuyzhvUmthxyUxlimvihglmvUuevkilnkgUlyquivUznwGEUkivxlnkOlyq@fveprompt
0x140013000: "void * __ptr64 * WARBIRD::g_FuncAddress" ?g_FuncAddress@WARBIRD@@3PAPEAXA
0x14000C320: "struct HDC__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetDCEx(struct HWND__ * __ptr64,struct HRGN__ * __ptr64,unsigned long)" ?GetDCEx@WARBIRD_DELAY_LOAD@@YAPEAUHDC__@@PEAUHWND__@@PEAUHRGN__@@K@Z
0x14000E318: "__cdecl _imp_?Init@BuiVolume@@QEAAJPEAG@Z" __imp_?Init@BuiVolume@@QEAAJPEAG@Z
0x14000C384: "public: void __cdecl SP<unsigned long,class SP_MEM<unsigned long> >::Reset(void) __ptr64" ?Reset@?$SP@KV?$SP_MEM@K@@@@QEAAXXZ
0x140010708: "unsigned short const * const `public: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetAllPreferredStrings(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64 * __ptr64,int * __ptr64,struct _LANG_FONT_NAMES * __ptr64)'::`2'::wStringIds" ?wStringIds@?1??GetAllPreferredStrings@?$CUxDisplayStringsT@VCEmptyType@@@@SAJPEAGIPEAPEAPEAGPEAHPEAU_LANG_FONT_NAMES@@@Z@4QBGB
0x14000CE60: "__cdecl callnewh" _callnewh
0x14000E798: "BitLockerWizardElev.exe" ??_C@_1DA@KBPCOEKA@?$AAB?$AAi?$AAt?$AAL?$AAo?$AAc?$AAk?$AAe?$AAr?$AAW?$AAi?$AAz?$AAa?$AAr?$AAd?$AAE?$AAl?$AAe?$AAv?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000C350: "int __cdecl WARBIRD_DELAY_LOAD::MulDiv(int,int,int)" ?MulDiv@WARBIRD_DELAY_LOAD@@YAHHHH@Z
0x14000D476: memcpy
0x14000E598: "__cdecl _imp__acmdln" __imp__acmdln
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::FillRect(struct HDC__ * __ptr64,struct tagRECT const * __ptr64,struct HBRUSH__ * __ptr64)" ?FillRect@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEBUtagRECT@@PEAUHBRUSH__@@@Z
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::DeleteObject(void * __ptr64)" ?DeleteObject@WARBIRD_DELAY_LOAD@@YAHPEAX@Z
0x14000E5C0: "__cdecl _imp_memset" __imp_memset
0x14000D15F: "__cdecl initterm" _initterm
0x140013958: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x14000E410: "__cdecl _imp_Sleep" __imp_Sleep
0x14000E620: "__cdecl _xi_z" __xi_z
0x14000C890: "protected: virtual void __cdecl CExitOnVolumeRemove::OnBeforeExit(void) __ptr64" ?OnBeforeExit@CExitOnVolumeRemove@@MEAAXXZ
0x140001100: "public: bool __cdecl VolumeFveStatus::IsOn(void)const __ptr64" ?IsOn@VolumeFveStatus@@QEBA_NXZ
0x14000E3B0: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x14000E5D0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x14000E450: "__cdecl _imp_GetCommandLineW" __imp_GetCommandLineW
0x14000C320: "struct HBITMAP__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateCompatibleBitmap(struct HDC__ * __ptr64,int,int)" ?CreateCompatibleBitmap@WARBIRD_DELAY_LOAD@@YAPEAUHBITMAP__@@PEAUHDC__@@HH@Z
0x1400012B0: "public: unsigned long __cdecl VolumeFveStatus::GetStatusFlags(void)const __ptr64" ?GetStatusFlags@VolumeFveStatus@@QEBAKXZ
0x14000D16B: "__cdecl _C_specific_handler" __C_specific_handler
0x14000C930: "public: virtual void __cdecl CExitOnVolumeRemove::RemoveCallback(void) __ptr64" ?RemoveCallback@CExitOnVolumeRemove@@UEAAXXZ
0x14000E470: "__cdecl _imp_SHChangeNotification_Unlock" __imp_SHChangeNotification_Unlock
0x14000E398: "__cdecl _imp_HeapFree" __imp_HeapFree
0x140013934: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@ngscb_common_um" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivUyzhvUmthxyUxlnnlmUfnUlyquivUznwGEUkivxlnkOlyq@ngscb_common_um
0x14000C320: "struct HWND__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetDesktopWindow(void)" ?GetDesktopWindow@WARBIRD_DELAY_LOAD@@YAPEAUHWND__@@XZ
0x14000CE54: malloc
0x14000E4F0: "__cdecl _imp_DestroyWindow" __imp_DestroyWindow
0x140001260: "public: bool __cdecl VolumeFveStatus::IsEDriveVolume(void)const __ptr64" ?IsEDriveVolume@VolumeFveStatus@@QEBA_NXZ
0x14000E2E0: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000D380: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::LCIDToLocaleName(unsigned long,unsigned short * __ptr64,int,unsigned long)" ?LCIDToLocaleName@WARBIRD_DELAY_LOAD@@YAHKPEAGHK@Z
0x14000E348: "__cdecl _imp_SetErrorMode" __imp_SetErrorMode
0x1400138C0: "struct WARBIRD::_MODULE_INFO * WARBIRD::g_arModuleInfo" ?g_arModuleInfo@WARBIRD@@3PAU_MODULE_INFO@1@A
0x14000E4D0: "__cdecl _imp_RemovePropW" __imp_RemovePropW
0x1400138B0: "struct HINSTANCE__ * __ptr64 __ptr64 g_hInst" ?g_hInst@@3PEAUHINSTANCE__@@EA
0x140001310: "public: class VolumeFveStatus & __ptr64 __cdecl VolumeFveStatus::operator=(class VolumeFveStatus &&) __ptr64" ??4VolumeFveStatus@@QEAAAEAV0@$$QEAV0@@Z
0x14000E2D8: "__cdecl _imp_RegSetValueExW" __imp_RegSetValueExW
0x14000CF93: "__cdecl amsg_exit" _amsg_exit
0x14000E530: "__cdecl _imp__callnewh" __imp__callnewh
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::GdiGradientFill(struct HDC__ * __ptr64,struct _TRIVERTEX * __ptr64,unsigned long,void * __ptr64,unsigned long,unsigned long)" ?GdiGradientFill@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEAU_TRIVERTEX@@KPEAXKK@Z
0x14000C6C0: "private: static __int64 __cdecl CVolumeListener::NotifySinkProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?NotifySinkProc@CVolumeListener@@CA_JPEAUHWND__@@I_K_J@Z
0x14000C320: "void * __ptr64 __cdecl WARBIRD_DELAY_LOAD::SelectObject(struct HDC__ * __ptr64,void * __ptr64)" ?SelectObject@WARBIRD_DELAY_LOAD@@YAPEAXPEAUHDC__@@PEAX@Z
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetDIBits(struct HDC__ * __ptr64,struct HBITMAP__ * __ptr64,unsigned int,unsigned int,void * __ptr64,struct tagBITMAPINFO * __ptr64,unsigned int)" ?GetDIBits@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEAUHBITMAP__@@IIPEAXPEAUtagBITMAPINFO@@I@Z
0x14000E560: "__cdecl _imp_exit" __imp_exit
0x1400010D0: "public: bool __cdecl VolumeFveStatus::IsOsCriticalVolume(void)const __ptr64" ?IsOsCriticalVolume@VolumeFveStatus@@QEBA_NXZ
0x1400011C0: "public: bool __cdecl VolumeFveStatus::IsSecure(void)const __ptr64" ?IsSecure@VolumeFveStatus@@QEBA_NXZ
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::DrawTextExW(struct HDC__ * __ptr64,unsigned short * __ptr64,int,struct tagRECT * __ptr64,unsigned int,struct tagDRAWTEXTPARAMS * __ptr64)" ?DrawTextExW@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@PEAGHPEAUtagRECT@@IPEAUtagDRAWTEXTPARAMS@@@Z
0x1400010C0: "public: bool __cdecl VolumeFveStatus::IsOsVolume(void)const __ptr64" ?IsOsVolume@VolumeFveStatus@@QEBA_NXZ
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::GdiAlphaBlend(struct HDC__ * __ptr64,int,int,int,int,struct HDC__ * __ptr64,int,int,int,int,struct _BLENDFUNCTION)" ?GdiAlphaBlend@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@HHHH0HHHHU_BLENDFUNCTION@@@Z
0x14000E8C8: "%s " ??_C@_17GMPJMPF@?$AA?$CF?$AAs?$AA?5?$AA?$AA@
0x14000E330: "__cdecl _imp_TaskDialogIndirect" __imp_TaskDialogIndirect
0x14000E4E8: "__cdecl _imp_RegisterClassExW" __imp_RegisterClassExW
0x14000C320: "struct HDC__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateCompatibleDC(struct HDC__ * __ptr64)" ?CreateCompatibleDC@WARBIRD_DELAY_LOAD@@YAPEAUHDC__@@PEAU2@@Z
0x14000E3A8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140013190: "unsigned __int64 `WarbirdUmGetDecryptionKey'::`2'::nDecryptionKey" ?nDecryptionKey@?1??WarbirdUmGetDecryptionKey@@9@4_KA
0x140013948: "__cdecl _native_startup_lock" __native_startup_lock
0x14000C320: "unsigned __int64 __cdecl WARBIRD_DELAY_LOAD::GetTickCount64(void)" ?GetTickCount64@WARBIRD_DELAY_LOAD@@YA_KXZ
0x140013240: "unsigned __int64 `WarbirdUmGetEncryptionKey'::`2'::nEncryptionKey" ?nEncryptionKey@?1??WarbirdUmGetEncryptionKey@@9@4_KA
0x14000CEC0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x14000D3E4: "__cdecl _GSHandlerCheck_SEH" __GSHandlerCheck_SEH
0x14000E590: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x14000E3C8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x14000E458: KERNEL32_NULL_THUNK_DATA
0x14000E428: "__cdecl _imp_GetLastError" __imp_GetLastError
0x14000CA3C: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x14001392C: g_WarbirdSecureFunctionsLock
0x14000D35C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140010A60: "unsigned short const * const `private: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetFontsForLCIDIndex(unsigned int,struct _LANG_FONT_NAMES * __ptr64)'::`2'::wszFontArray" ?wszFontArray@?1??GetFontsForLCIDIndex@?$CUxDisplayStringsT@VCEmptyType@@@@CAJIPEAU_LANG_FONT_NAMES@@@Z@4QBGB
0x1400012A0: "public: bool __cdecl VolumeFveStatus::IsDEAutoProvisioned(void)const __ptr64" ?IsDEAutoProvisioned@VolumeFveStatus@@QEBA_NXZ
0x140001110: "public: bool __cdecl VolumeFveStatus::IsPaused(void)const __ptr64" ?IsPaused@VolumeFveStatus@@QEBA_NXZ
0x14000E7C8: "BitLockerWizard.exe" ??_C@_1CI@FFFLJBKN@?$AAB?$AAi?$AAt?$AAL?$AAo?$AAc?$AAk?$AAe?$AAr?$AAW?$AAi?$AAz?$AAa?$AAr?$AAd?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000E5B0: "__cdecl _imp__commode" __imp__commode
0x14000E580: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140011B40: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x14000E3E8: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetUserObjectInformationW(void * __ptr64,int,void * __ptr64,unsigned long,unsigned long * __ptr64)" ?GetUserObjectInformationW@WARBIRD_DELAY_LOAD@@YAHPEAXH0KPEAK@Z
0x14000E328: BDEUI_NULL_THUNK_DATA
0x14000D050: "__cdecl ValidateImageBase" _ValidateImageBase
0x14000C28C: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140001040: "public: bool __cdecl VolumeFveStatus::HasTpmProtector(void)const __ptr64" ?HasTpmProtector@VolumeFveStatus@@QEBA_NXZ
0x14000C320: "unsigned long __cdecl WARBIRD_DELAY_LOAD::SleepEx(unsigned long,int)" ?SleepEx@WARBIRD_DELAY_LOAD@@YAKKH@Z
0x14000E4F8: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x14000E368: "__cdecl _imp_HeapAlloc" __imp_HeapAlloc
0x14000E350: "__cdecl _imp_FreeLibrary" __imp_FreeLibrary
0x140010DB0: "%s%s" ??_C@_19LJDFFCJJ@?$AA?$CF?$AAs?$AA?$CF?$AAs?$AA?$AA@
0x140013320: "__cdecl newmode" _newmode
0x14000E588: "__cdecl _imp__initterm" __imp__initterm
0x14000E558: "__cdecl _imp___set_app_type" __imp___set_app_type
0x14000C340: "__cdecl setargv" _setargv
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::DeleteDC(struct HDC__ * __ptr64)" ?DeleteDC@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@@Z
0x14000E390: "__cdecl _imp_SetLastError" __imp_SetLastError
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetSystemMetrics(int)" ?GetSystemMetrics@WARBIRD_DELAY_LOAD@@YAHH@Z
0x14000E380: "__cdecl _imp_GetModuleFileNameW" __imp_GetModuleFileNameW
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::MultiByteToWideChar(unsigned int,unsigned long,char const * __ptr64,int,unsigned short * __ptr64,int)" ?MultiByteToWideChar@WARBIRD_DELAY_LOAD@@YAHIKPEBDHPEAGH@Z
0x14000E320: "__cdecl _imp_??0BuiVolume@@QEAA@XZ" __imp_??0BuiVolume@@QEAA@XZ
0x14000E308: "__cdecl _imp_??1BuiVolume@@QEAA@XZ" __imp_??1BuiVolume@@QEAA@XZ
0x140001230: "public: bool __cdecl VolumeFveStatus::FailedDryRun(void)const __ptr64" ?FailedDryRun@VolumeFveStatus@@QEBA_NXZ
0x14000E938: "Default" ??_C@_1BA@GHOECOCL@?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
0x140013938: "__cdecl _onexitend" __onexitend
0x14000E950: "unsigned char const * const `public: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetAllPreferredStrings(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64 * __ptr64,int * __ptr64,struct _LANG_FONT_NAMES * __ptr64)'::`2'::bEncryptedStringBuffer" ?bEncryptedStringBuffer@?1??GetAllPreferredStrings@?$CUxDisplayStringsT@VCEmptyType@@@@SAJPEAGIPEAPEAPEAGPEAHPEAU_LANG_FONT_NAMES@@@Z@4QBEB
0x14000E568: "__cdecl _imp__exit" __imp__exit
0x14000E5E0: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x14000E498: "__cdecl _imp_SHGetKnownFolderIDList" __imp_SHGetKnownFolderIDList
0x14000E4E0: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x14000C320: "struct HFONT__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::CreateFontIndirectW(struct tagLOGFONTW const * __ptr64)" ?CreateFontIndirectW@WARBIRD_DELAY_LOAD@@YAPEAUHFONT__@@PEBUtagLOGFONTW@@@Z
0x14000E4A0: "__cdecl _imp_SHChangeNotifyDeregister" __imp_SHChangeNotifyDeregister
0x14000E418: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x14000E518: USER32_NULL_THUNK_DATA
0x14000E4C0: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::RedrawWindow(struct HWND__ * __ptr64,struct tagRECT const * __ptr64,struct HRGN__ * __ptr64,unsigned int)" ?RedrawWindow@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEBUtagRECT@@PEAUHRGN__@@I@Z
0x14000C3C4: "public: void __cdecl SH<void * __ptr64,class SH_HANDLE>::Reset(void) __ptr64" ?Reset@?$SH@PEAXVSH_HANDLE@@@@QEAAXXZ
0x14000E608: "__cdecl _xi_a" __xi_a
0x14000E3D0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x14000C340: "__cdecl matherr" _matherr
0x14000E8F0: "fvenotify.exe" ??_C@_1BM@NMLBCLCA@?$AAf?$AAv?$AAe?$AAn?$AAo?$AAt?$AAi?$AAf?$AAy?$AA?4?$AAe?$AAx?$AAe?$AA?$AA@
0x14000E310: "__cdecl _imp_BuisDetectExistingWizard" __imp_BuisDetectExistingWizard
0x1400012C0: "public: unsigned __int64 __cdecl VolumeFveStatus::GetExtendedFlags(void)const __ptr64" ?GetExtendedFlags@VolumeFveStatus@@QEBA_KXZ
0x14000C510: "public: virtual void __cdecl CVolumeListener::SetCritical(int) __ptr64" ?SetCritical@CVolumeListener@@UEAAXH@Z
0x14000E8BC: "%s" ??_C@_15GANGMFKL@?$AA?$CF?$AAs?$AA?$AA@
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetDeviceCaps(struct HDC__ * __ptr64,int)" ?GetDeviceCaps@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@H@Z
0x14000E90C: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::LogicalToPhysicalPointForPerMonitorDPI(struct HWND__ * __ptr64,struct tagPOINT * __ptr64)" ?LogicalToPhysicalPointForPerMonitorDPI@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEAUtagPOINT@@@Z
0x14000E340: "__cdecl _imp_GetDriveTypeW" __imp_GetDriveTypeW
0x140011B90: "__cdecl _IMPORT_DESCRIPTOR_COMCTL32" __IMPORT_DESCRIPTOR_COMCTL32
0x14000CA7C: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x14000C320: "unsigned long __cdecl WARBIRD_DELAY_LOAD::SetTextColor(struct HDC__ * __ptr64,unsigned long)" ?SetTextColor@WARBIRD_DELAY_LOAD@@YAKPEAUHDC__@@K@Z
0x14000CE30: "__cdecl _security_check_cookie" __security_check_cookie
0x14000C35C: "public: void __cdecl SP<unsigned char,class SP_HLOCAL<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_HLOCAL@E@@@@QEAAXXZ
0x140011BB8: "__cdecl _IMPORT_DESCRIPTOR_BDEUI" __IMPORT_DESCRIPTOR_BDEUI
0x14000E600: "__cdecl _xc_z" __xc_z
0x140001070: "public: bool __cdecl VolumeFveStatus::HasPBKDF2RecoveryPassword(void)const __ptr64" ?HasPBKDF2RecoveryPassword@VolumeFveStatus@@QEBA_NXZ
0x14000E360: "__cdecl _imp_GetProcAddress" __imp_GetProcAddress
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetLocaleInfoEx(unsigned short const * __ptr64,unsigned long,unsigned short * __ptr64,int)" ?GetLocaleInfoEx@WARBIRD_DELAY_LOAD@@YAHPEBGKPEAGH@Z
0x1400012D0: "public: long __cdecl VolumeFveStatus::GetLastConvertStatus(void)const __ptr64" ?GetLastConvertStatus@VolumeFveStatus@@QEBAJXZ
0x140013250: "unsigned char * `WarbirdUmGetDecryptionCipher'::`2'::DecryptionCipher" ?DecryptionCipher@?1??WarbirdUmGetDecryptionCipher@@9@4PAEA
0x14000E5B8: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x14000E3D8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x14000C320: "struct HDESK__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetThreadDesktop(unsigned long)" ?GetThreadDesktop@WARBIRD_DELAY_LOAD@@YAPEAUHDESK__@@K@Z
0x14000E370: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x14000E358: "__cdecl _imp_GetProcessHeap" __imp_GetProcessHeap
0x14000E508: "__cdecl _imp_SetWindowPos" __imp_SetWindowPos
0x14000D4D0: "__cdecl _chkstk" __chkstk
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::SystemParametersInfoW(unsigned int,unsigned int,void * __ptr64,unsigned int)" ?SystemParametersInfoW@WARBIRD_DELAY_LOAD@@YAHIIPEAXI@Z
0x140001160: "public: bool __cdecl VolumeFveStatus::IsEncrypting(void)const __ptr64" ?IsEncrypting@VolumeFveStatus@@QEBA_NXZ
0x1400105F0: "unsigned long const * const `public: static long __cdecl CUxDisplayStringsT<class CEmptyType>::GetAllPreferredStrings(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64 * __ptr64 * __ptr64,int * __ptr64,struct _LANG_FONT_NAMES * __ptr64)'::`2'::uLanguageArray" ?uLanguageArray@?1??GetAllPreferredStrings@?$CUxDisplayStringsT@VCEmptyType@@@@SAJPEAGIPEAPEAPEAGPEAHPEAU_LANG_FONT_NAMES@@@Z@4QBKB
0x14000E478: "__cdecl _imp_SHGetPathFromIDListEx" __imp_SHGetPathFromIDListEx
0x140001280: "public: bool __cdecl VolumeFveStatus::IsUnknownFveVersion(void)const __ptr64" ?IsUnknownFveVersion@VolumeFveStatus@@QEBA_NXZ
0x1400012E0: "protected: __cdecl VolumeFveStatus::VolumeFveStatus(void) __ptr64" ??0VolumeFveStatus@@IEAA@XZ
0x1400138B8: "union _NOTIFICATION_INFORMATION g_WarbirdNotificationInformation" ?g_WarbirdNotificationInformation@@3T_NOTIFICATION_INFORMATION@@A
0x14000E628: "__cdecl _guard_fids_table" __guard_fids_table
0x14000E5D8: msvcrt_NULL_THUNK_DATA
0x14000E1D0: "__cdecl load_config_used" _load_config_used
0x14000E488: "__cdecl _imp_ILFree" __imp_ILFree
0x140010690: ?LangFontIndexMapping@?1??GetFontsForLCIDIndex@?$CUxDisplayStringsT@VCEmptyType@@@@CAJIPEAU_LANG_FONT_NAMES@@@Z@4QBU_LANG_FONT_INDEX_INFO@?1??12@CAJI0@Z@B
0x1400012F0: "public: class VolumeFveStatus & __ptr64 __cdecl VolumeFveStatus::operator=(class VolumeFveStatus const & __ptr64) __ptr64" ??4VolumeFveStatus@@QEAAAEAV0@AEBV0@@Z
0x14000C8A0: "protected: virtual void __cdecl CExitOnVolumeRemove::OnEvent(long,unsigned short const * __ptr64) __ptr64" ?OnEvent@CExitOnVolumeRemove@@MEAAXJPEBG@Z
0x14000E760: "public: static unsigned int const BuiVolume::NO_DRIVE_LETTER" ?NO_DRIVE_LETTER@BuiVolume@@2IB
0x14000C840: "private: static long __cdecl CVolumeListener::GetModule(struct HINSTANCE__ * __ptr64 * __ptr64)" ?GetModule@CVolumeListener@@CAJPEAPEAUHINSTANCE__@@@Z
0x140010DC0: "private: static unsigned short const * const CVolumeListener::szInstanceProperty" ?szInstanceProperty@CVolumeListener@@0QBGB
0x140011B68: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x140010D60: "http://go.microsoft.com/fwlink/?" ??_C@_1FA@BBLDHNPG@?$AAh?$AAt?$AAt?$AAp?$AA?3?$AA?1?$AA?1?$AAg?$AAo?$AA?4?$AAm?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?4?$AAc?$AAo?$AAm?$AA?1?$AAf?$AAw?$AAl?$AAi?$AAn?$AAk?$AA?1?$AA?$DP@
0x14000C320: "unsigned long __cdecl WARBIRD_DELAY_LOAD::LocaleNameToLCID(unsigned short const * __ptr64,unsigned long)" ?LocaleNameToLCID@WARBIRD_DELAY_LOAD@@YAKPEBGK@Z
0x14000E548: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x140001180: "public: bool __cdecl VolumeFveStatus::IsDecrypting(void)const __ptr64" ?IsDecrypting@VolumeFveStatus@@QEBA_NXZ
0x1400010B0: "public: bool __cdecl VolumeFveStatus::HasSmartCardProtector(void)const __ptr64" ?HasSmartCardProtector@VolumeFveStatus@@QEBA_NXZ
0x14000E510: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x14000C20C: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x14000E3C0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x14000E3F0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x14001331C: "__cdecl dowildcard" _dowildcard
0x14000E8D0: "Local\FvePrompt" ??_C@_1CA@DLMFKPGC@?$AAL?$AAo?$AAc?$AAa?$AAl?$AA?2?$AAF?$AAv?$AAe?$AAP?$AAr?$AAo?$AAm?$AAp?$AAt?$AA?$AA@
0x140001010: "public: __cdecl VolumeFveStatus::VolumeFveStatus(unsigned long,unsigned __int64,long,enum _FVE_WIPING_STATE) __ptr64" ??0VolumeFveStatus@@QEAA@K_KJW4_FVE_WIPING_STATE@@@Z
0x14000CE6C: free
0x14000E3B8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x14000D350: "__cdecl purecall" _purecall
0x14000C970: "public: virtual long __cdecl CExitOnVolumeRemove::Initialize(unsigned short const * __ptr64,unsigned short const * __ptr64) __ptr64" ?Initialize@CExitOnVolumeRemove@@UEAAJPEBG0@Z
0x14000C890: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x14000CEEC: RtlpImageNtHeader
0x140001150: "public: bool __cdecl VolumeFveStatus::IsPartiallyConverted(void)const __ptr64" ?IsPartiallyConverted@VolumeFveStatus@@QEBA_NXZ
0x140001090: "public: bool __cdecl VolumeFveStatus::HasStartupKeyProtector(void)const __ptr64" ?HasStartupKeyProtector@VolumeFveStatus@@QEBA_NXZ
0x14000C530: "public: virtual long __cdecl CVolumeListener::Initialize(void) __ptr64" ?Initialize@CVolumeListener@@UEAAJXZ
0x14000E3F8: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x14000E7F0: "open" ??_C@_19BDAJEHDN@?$AAo?$AAp?$AAe?$AAn?$AA?$AA@
0x140001270: "public: bool __cdecl VolumeFveStatus::IsCsvMetadataVolume(void)const __ptr64" ?IsCsvMetadataVolume@VolumeFveStatus@@QEBA_NXZ
0x1400011A0: "public: bool __cdecl VolumeFveStatus::IsWiping(void)const __ptr64" ?IsWiping@VolumeFveStatus@@QEBA_NXZ
0x140013928: g_WarbirdSecureFunctionsRefCount
0x14000E540: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x14000E500: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x14000E5C8: "__cdecl _imp_memcpy" __imp_memcpy
0x14000E180: "const CExitOnVolumeRemove::`vftable'" ??_7CExitOnVolumeRemove@@6B@
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::OffsetRect(struct tagRECT * __ptr64,int,int)" ?OffsetRect@WARBIRD_DELAY_LOAD@@YAHPEAUtagRECT@@HH@Z
0x14000E578: "__cdecl _imp__ismbblead" __imp__ismbblead
0x14000E4B8: "__cdecl _imp_FindWindowW" __imp_FindWindowW
0x14000C384: "public: void __cdecl SP<unsigned char,class SP_MEM<unsigned char> >::Reset(void) __ptr64" ?Reset@?$SP@EV?$SP_MEM@E@@@@QEAAXXZ
0x14000C764: "private: void __cdecl CVolumeListener::DispatchEvent(unsigned __int64,__int64) __ptr64" ?DispatchEvent@CVolumeListener@@AEAAX_K_J@Z
0x14000C340: "struct HMONITOR__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::MonitorFromWindow(struct HWND__ * __ptr64,unsigned long)" ?MonitorFromWindow@WARBIRD_DELAY_LOAD@@YAPEAUHMONITOR__@@PEAUHWND__@@K@Z
0x140001190: "public: bool __cdecl VolumeFveStatus::IsDecrypted(void)const __ptr64" ?IsDecrypted@VolumeFveStatus@@QEBA_NXZ
0x140013178: "__cdecl _security_cookie" __security_cookie
0x14000D4D0: "__cdecl alloca_probe" _alloca_probe
0x1400011E0: "public: bool __cdecl VolumeFveStatus::IsDisabled(void)const __ptr64" ?IsDisabled@VolumeFveStatus@@QEBA_NXZ
0x14000E420: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x14000E490: "__cdecl _imp_SHChangeNotifyRegister" __imp_SHChangeNotifyRegister
0x14000E438: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140013170: "__cdecl _defaultmatherr" __defaultmatherr
0x14000E4D8: "__cdecl _imp_SetPropW" __imp_SetPropW
0x14000E3A0: "__cdecl _imp_GetFileAttributesW" __imp_GetFileAttributesW
0x1400010F0: "public: bool __cdecl VolumeFveStatus::IsRoamingDevice(void)const __ptr64" ?IsRoamingDevice@VolumeFveStatus@@QEBA_NXZ
0x14000E778: "690115" ??_C@_1O@NNJHIIOP@?$AA6?$AA9?$AA0?$AA1?$AA1?$AA5?$AA?$AA@
0x140013940: "__cdecl _onexitbegin" __onexitbegin
0x140001060: "public: bool __cdecl VolumeFveStatus::HasRecoveryPassword(void)const __ptr64" ?HasRecoveryPassword@VolumeFveStatus@@QEBA_NXZ
0x14000BFF0: "long __cdecl StringCchPrintfExW(unsigned short * __ptr64,unsigned __int64,unsigned short * __ptr64 * __ptr64,unsigned __int64 * __ptr64,unsigned long,unsigned short const * __ptr64,...)" ?StringCchPrintfExW@@YAJPEAG_KPEAPEAGPEA_KKPEBGZZ
0x14000E928: "WinSta0" ??_C@_1BA@IMLGMNLL@?$AAW?$AAi?$AAn?$AAS?$AAt?$AAa?$AA0?$AA?$AA@
0x14000E2F0: "__cdecl _imp_RegCreateKeyW" __imp_RegCreateKeyW
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::GetMonitorInfoW(struct HMONITOR__ * __ptr64,struct tagMONITORINFO * __ptr64)" ?GetMonitorInfoW@WARBIRD_DELAY_LOAD@@YAHPEAUHMONITOR__@@PEAUtagMONITORINFO@@@Z
0x14000E528: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x14000E400: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x14000CBC0: WinMainCRTStartup
0x140001130: "public: bool __cdecl VolumeFveStatus::IsConverting(void)const __ptr64" ?IsConverting@VolumeFveStatus@@QEBA_NXZ
0x140011B54: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x14000C340: "int __cdecl WARBIRD_DELAY_LOAD::SetBkMode(struct HDC__ * __ptr64,int)" ?SetBkMode@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@H@Z
0x140001170: "public: bool __cdecl VolumeFveStatus::IsEncrypted(void)const __ptr64" ?IsEncrypted@VolumeFveStatus@@QEBA_NXZ
0x14000D084: "__cdecl _security_init_cookie" __security_init_cookie
0x14000E570: "__cdecl _imp__cexit" __imp__cexit
0x14000E2E8: "__cdecl _imp_RegGetValueW" __imp_RegGetValueW
0x14000CF48: "__cdecl get_image_app_type" _get_image_app_type
0x140011B7C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x14000D48E: wcscmp
0x14000E870: "SecureStartupFeature-Enabled-Pre" ??_C@_1EK@MKCPFLPM@?$AAS?$AAe?$AAc?$AAu?$AAr?$AAe?$AAS?$AAt?$AAa?$AAr?$AAt?$AAu?$AAp?$AAF?$AAe?$AAa?$AAt?$AAu?$AAr?$AAe?$AA?9?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAd?$AA?9?$AAP?$AAr?$AAe@
0x14000C320: "void * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetStockObject(int)" ?GetStockObject@WARBIRD_DELAY_LOAD@@YAPEAXH@Z
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::GetUserPreferredUILanguages(unsigned long,unsigned long * __ptr64,unsigned short * __ptr64,unsigned long * __ptr64)" ?GetUserPreferredUILanguages@WARBIRD_DELAY_LOAD@@YAHKPEAKPEAG0@Z
0x14000E520: "__cdecl _imp_malloc" __imp_malloc
0x14000E5A0: "__cdecl _imp__purecall" __imp__purecall
0x14000E2F8: ADVAPI32_NULL_THUNK_DATA
0x140001080: "public: bool __cdecl VolumeFveStatus::HasExternalKey(void)const __ptr64" ?HasExternalKey@VolumeFveStatus@@QEBA_NXZ
0x140010DE8: "private: static unsigned short const * const CVolumeListener::szNotifySinkClass" ?szNotifySinkClass@CVolumeListener@@0QBGB
0x14000C320: "struct HWINSTA__ * __ptr64 __cdecl WARBIRD_DELAY_LOAD::GetProcessWindowStation(void)" ?GetProcessWindowStation@WARBIRD_DELAY_LOAD@@YAPEAUHWINSTA__@@XZ
0x14000D1C0: "__cdecl _report_gsfailure" __report_gsfailure
0x140001220: "public: bool __cdecl VolumeFveStatus::IsPreProvisioned(void)const __ptr64" ?IsPreProvisioned@VolumeFveStatus@@QEBA_NXZ
0x14000C384: "public: void __cdecl SP<unsigned short,class SP_MEM<unsigned short> >::Reset(void) __ptr64" ?Reset@?$SP@GV?$SP_MEM@G@@@@QEAAXXZ
0x140001210: "public: bool __cdecl VolumeFveStatus::HasRecoveryData(void)const __ptr64" ?HasRecoveryData@VolumeFveStatus@@QEBA_NXZ
0x14000E800: "Software\Microsoft\Windows\Curre" ??_C@_1HA@DDDEFDJK@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140013950: "__cdecl _native_startup_state" __native_startup_state
0x14000E910: "ntdll.dll" ??_C@_1BE@GJOFHIHD@?$AAn?$AAt?$AAd?$AAl?$AAl?$AA?4?$AAd?$AAl?$AAl?$AA?$AA@
0x1400011D0: "public: bool __cdecl VolumeFveStatus::NeedsRestart(void)const __ptr64" ?NeedsRestart@VolumeFveStatus@@QEBA_NXZ
0x14000E480: "__cdecl _imp_SHChangeNotification_Lock" __imp_SHChangeNotification_Lock
0x140001200: "public: bool __cdecl VolumeFveStatus::IsLocked(void)const __ptr64" ?IsLocked@VolumeFveStatus@@QEBA_NXZ
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::BitBlt(struct HDC__ * __ptr64,int,int,int,int,struct HDC__ * __ptr64,int,int,unsigned long)" ?BitBlt@WARBIRD_DELAY_LOAD@@YAHPEAUHDC__@@HHHH0HHK@Z
0x14000E4A8: "__cdecl _imp_ShellExecuteExW" __imp_ShellExecuteExW
0x140011BA4: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x14000E5A8: "__cdecl _imp__fmode" __imp__fmode
0x14000E378: "__cdecl _imp_GetProcessMitigationPolicy" __imp_GetProcessMitigationPolicy
0x14000C384: "public: void __cdecl SP<unsigned short * __ptr64,class SP_MEM<unsigned short * __ptr64> >::Reset(void) __ptr64" ?Reset@?$SP@PEAGV?$SP_MEM@PEAG@@@@QEAAXXZ
0x14000E538: "__cdecl _imp_free" __imp_free
0x14000E468: "__cdecl _imp_ShellExecuteW" __imp_ShellExecuteW
0x14000CFF0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000E788: "%s %c" ??_C@_1M@JOECAFNN@?$AA?$CF?$AAs?$AA?5?$AA?$CF?$AAc?$AA?$AA@
0x140001050: "public: bool __cdecl VolumeFveStatus::HasPinProtector(void)const __ptr64" ?HasPinProtector@VolumeFveStatus@@QEBA_NXZ
0x14000E4C8: "__cdecl _imp_GetPropW" __imp_GetPropW
0x14000C320: "int __cdecl WARBIRD_DELAY_LOAD::ReleaseDC(struct HWND__ * __ptr64,struct HDC__ * __ptr64)" ?ReleaseDC@WARBIRD_DELAY_LOAD@@YAHPEAUHWND__@@PEAUHDC__@@@Z
0x14000D482: memset
0x140011BCC: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x140013920: "unsigned __int64 g_WarbirdPaintInitTime" ?g_WarbirdPaintInitTime@@3_KA
0x14000C320: "unsigned long __cdecl WARBIRD_DELAY_LOAD::GetSysColor(int)" ?GetSysColor@WARBIRD_DELAY_LOAD@@YAKH@Z

[JEB Decompiler by PNF Software]